last executing test programs:

1m6.258647426s ago: executing program 2 (id=6400):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, 0x0)
close(r0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x2b, 0x1, 0x1)
setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000001c0)=0x2, 0x4)
close(0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000000c0005800800010052415310"], 0x44}}, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x6}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000440)=[{0x48, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r4)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r5, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x480d1)

1m5.798547542s ago: executing program 2 (id=6402):
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000500)='GPL\x00', 0x0, 0xa00, 0x0, 0x1f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m5.592604731s ago: executing program 2 (id=6404):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000ff800001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000000000000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432000000000000002001000000000000000000000000000006350000000002000000000000000000000000007f000001000000000000000000000000000000042b00000000000000fe8000000000000000000000000000bb0000000000000000000800000000000000000000ac141468000000000000000000000000000004d33200000000000000000000000000000000000000000000010000000000010000000000000000000000000000fe8000000000000000000000000000bb000004d533000000000000000a", @ANYRESDEC], 0x23c}, 0x1, 0x0, 0x0, 0x80}, 0x4080)

1m5.172517619s ago: executing program 2 (id=6407):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRESDEC], 0x23c}, 0x1, 0x0, 0x0, 0x80}, 0x4080)

1m4.936382365s ago: executing program 2 (id=6409):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x7, 0x9, 0x9, 0x40000, r0, 0x2, '\x00', 0x0, r1, 0x0, 0x2, 0x1, 0x6}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000040))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a000000"], 0x48)
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket(0x1e, 0x1, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES64=r4], 0x270}}, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc)

1m2.926287559s ago: executing program 2 (id=6417):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x1e1c2d2e161b5631, 0x8741, 0x8, 0x1ff, 0x1}, {0x81, 0x1, 0x7, 0x6, 0x2e7, 0x3ff}, 0x8, 0x3, 0x338}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x880)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r11=>0x0})
sendto$packet(r10, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r11, 0x1, 0x0, 0x6, @multicast}, 0x14)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/131, 0x83}, 0x9}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003780)=""/23, 0x17}, 0x7}], 0x2, 0x3, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x4000900, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @mcast2, 0xffffff7f}, 0x1c)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000080601040000000000000000020000020900020073797a310000000005000100000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x8900)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000100)={'sit0\x00', <r13=>0x0, 0x1, 0x10, 0x9, 0x7, {{0x1b, 0x4, 0x0, 0x1a, 0x6c, 0x65, 0x0, 0x38, 0x4, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x42, 0x1, [{0x6, 0xe, "e6e95b1a41fec9d51f6b4d1a"}, {0x2, 0x10, "63239b445ebdcd39687e004d85f2"}, {0x7, 0x6, "46a71e10"}, {0x2, 0x10, "54ca47385f0302f56f2d4284f734"}, {0x5, 0x8, "4ac26a858eff"}]}, @timestamp_addr={0x44, 0x14, 0x96, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0x6}, {@multicast1, 0x35a8}]}]}}}}})
sendmsg$nl_xfrm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="d80000001b000301000000000000000000000000000000000000000000000001e00000010000000000000000000000000000000000000000feff0000870000001fde9991dad58a5b7e43ecb3e507485fcd64aa83ca9b21229bda42fa138cec8fb01df57da1b35b6e64daaaeb508e4424050a819475e08bbe45cff3b62d4a94dcf88cdb2a56e6b6610238c54cec023646d40a5f645dccbff1053052bc8bbf9e47b80dca0cbc14c5ae0b621bb70d33f024b0b783d872bbe9eaca5609c1dab44af7f53a14cb5d1b3ad076dc1856ca8cdd90d45f3a0f08259ef667368e44eead2678773a1bdf73b02d87bfeacb8ddbfe30509866", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000e600000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00100000000000000000000c001c00", @ANYRES32=r13, @ANYBLOB="02000000"], 0xd8}, 0x1, 0x0, 0x0, 0x4000804}, 0x0)

47.429097854s ago: executing program 32 (id=6417):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x1e1c2d2e161b5631, 0x8741, 0x8, 0x1ff, 0x1}, {0x81, 0x1, 0x7, 0x6, 0x2e7, 0x3ff}, 0x8, 0x3, 0x338}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x880)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r11=>0x0})
sendto$packet(r10, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r11, 0x1, 0x0, 0x6, @multicast}, 0x14)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/131, 0x83}, 0x9}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003780)=""/23, 0x17}, 0x7}], 0x2, 0x3, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x4000900, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @mcast2, 0xffffff7f}, 0x1c)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000080601040000000000000000020000020900020073797a310000000005000100000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x8900)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000100)={'sit0\x00', <r13=>0x0, 0x1, 0x10, 0x9, 0x7, {{0x1b, 0x4, 0x0, 0x1a, 0x6c, 0x65, 0x0, 0x38, 0x4, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x42, 0x1, [{0x6, 0xe, "e6e95b1a41fec9d51f6b4d1a"}, {0x2, 0x10, "63239b445ebdcd39687e004d85f2"}, {0x7, 0x6, "46a71e10"}, {0x2, 0x10, "54ca47385f0302f56f2d4284f734"}, {0x5, 0x8, "4ac26a858eff"}]}, @timestamp_addr={0x44, 0x14, 0x96, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0x6}, {@multicast1, 0x35a8}]}]}}}}})
sendmsg$nl_xfrm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="d80000001b000301000000000000000000000000000000000000000000000001e00000010000000000000000000000000000000000000000feff0000870000001fde9991dad58a5b7e43ecb3e507485fcd64aa83ca9b21229bda42fa138cec8fb01df57da1b35b6e64daaaeb508e4424050a819475e08bbe45cff3b62d4a94dcf88cdb2a56e6b6610238c54cec023646d40a5f645dccbff1053052bc8bbf9e47b80dca0cbc14c5ae0b621bb70d33f024b0b783d872bbe9eaca5609c1dab44af7f53a14cb5d1b3ad076dc1856ca8cdd90d45f3a0f08259ef667368e44eead2678773a1bdf73b02d87bfeacb8ddbfe30509866", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000e600000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00100000000000000000000c001c00", @ANYRES32=r13, @ANYBLOB="02000000"], 0xd8}, 0x1, 0x0, 0x0, 0x4000804}, 0x0)

6.32291055s ago: executing program 3 (id=6689):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180)=r0, 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000f5ff00000000000007"], 0x30}, 0x40880)

6.077042365s ago: executing program 3 (id=6692):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close(0xffffffffffffffff)
socket$kcm(0x29, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000380)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce0", 0x55}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000040)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854)
setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080))
syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4044}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a01040000080000000000010080032c000000030a05000000000000000000010000000900010073797a30000000000900030073797a320000000078000000060a010400000000000000000100100008000b400000000050000480340001800b000100657874686472000024000280080001400000000e0800034000000000080004400000002205000200890000001800018011000100666c6f775f6f66666c6f6164000000000900010073797a30000000001400000011000100"/221], 0xe0}, 0x1, 0x0, 0x0, 0x20008080}, 0x4008014)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, 0x0, 0x40000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x14, r5, 0x100, 0x70bd2f, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008080)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r7, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)

4.950095299s ago: executing program 4 (id=6695):
r0 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x10}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x2004a6}, 0x94)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getaddr={0x14, 0x16, 0x8, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0)

4.677180687s ago: executing program 4 (id=6697):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40001, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
syz_genetlink_get_family_id$tipc(0x0, r4)
r7 = socket$unix(0x1, 0x5, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}}, 0x24}}, 0x4890)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

4.672852476s ago: executing program 3 (id=6698):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00'})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=r2, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x854}, 0x840)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
bind$l2tp(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "1770e235285db2cb", "278aa3520f3a0ff8cef6713fa6b703a6", "610cde48", "dbb0e9ddc00c20ee"}, 0x28)
setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000100)=0x1008001, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r4, &(0x7f0000000080)="18", 0x80c, 0x0, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x4d)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

3.951430718s ago: executing program 4 (id=6703):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, 0x0)
close(r0)
connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @broadcast}, 0x10)
socket(0x2b, 0x1, 0x1)
setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000440)=[{0x48, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r4)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r5, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x480d1)

3.840353889s ago: executing program 0 (id=6704):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000040))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48)
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket(0x1e, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES64=r5], 0x270}}, 0x0)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)

3.686627022s ago: executing program 4 (id=6706):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280050002000000000008000340000000000800014000000013080004400000001e0800064000000002"], 0x94}}, 0x0)
mmap(&(0x7f0000133000/0x2000)=nil, 0x2000, 0x8, 0x110, r0, 0x98b6000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socket(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000280)="d5", 0x1)
listen(r3, 0xe)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @private=0xa010102}, 0x70)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@fwd={0x3}, @var={0x5, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x61, 0x2e, 0x61, 0x2e]}}, 0x0, 0x3b, 0x0, 0x1, 0x1}, 0x28)
sendmsg$nl_netfilter(r1, &(0x7f0000003cc0)={0x0, 0x0, &(0x7f0000003c80)={&(0x7f0000003b40)=ANY=[@ANYBLOB="2914000000110a01042bbd7000fbdbdf25000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20002000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x16, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb663}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0x9}, @alu={0x4, 0x1, 0xd, 0x1, 0x9, 0x1, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @ldst={0x2, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x800}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xea, &(0x7f0000000140)=""/234, 0x0, 0x8}, 0x94)

3.604614904s ago: executing program 0 (id=6708):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000018000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000010000007b01f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94)

3.407344648s ago: executing program 3 (id=6711):
r0 = socket(0x27, 0x800, 0x80000000)
sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000440)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="2400000000000000000000000700000044140f13e0000001000700"/40], 0x28}}], 0x1, 0x804)
r1 = socket$inet6(0xa, 0x802, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000010000000000851000000200000020220000000000079500007b00000000850000006400060000000000000000403161c39e006c3abd7862"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1f00}, 0x94)
sendmmsg$inet6(r1, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000)
shutdown(r1, 0x0)
ppoll(&(0x7f00000000c0)=[{r1, 0x2001}], 0x1, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES16=r0, @ANYBLOB="b6b8bb08f32f98bbaeb9cb8e58b5eb495708070cf0d77117c723f5c595bf48801fa638c6676bf24d913c7ac2ae70534e246e30d1cec96b4b994b4a34820af48406663228e5c1e5f84f25c8e5ab08e06c26d967a449c69a9c7de12a600dcffe1ccbbc3a36948a7ff2515ba2800c8ae563b47602229a91050c8108d7060f8f23fc71774515ac7cf38df5b871b6c79577fb9da3ae8d4e4c242a8a605161ff39b332a588a8acbfae8e16d43ef30203b77b2d11fb7b01178e90cfb9cf970ac7ed2f03ffcbb756c8176bb08ca08f6b730d5456325e7cb9cfeac7b39646aff2e8e4440a9c4dad5b943b", @ANYRES64=r0, @ANYBLOB="f7a98b7f80f2d9e3d4af9559e4e6d781e0f07a32b09b4ecc5c87ad8840ff4a0aa9ed729b11124040a08603d6b8931e696c8cd6c6f9cdb7f066561e103e55d81da63ca448fbd95b", @ANYRES8=r2], 0x48)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xe}, 0x8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0)
sendmsg$alg(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x18}, 0x14010016)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f00000010c0)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000180)={r9, @in6={{0xa, 0x4e22, 0x1000002, @empty, 0x19}}, 0x7, 0x8000}, 0x90)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000140)={r9, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}}, [0x2, 0x15a, 0xa38, 0x20000000000fa9e, 0xe1, 0x8, 0x10000, 0x1, 0x43, 0x8000000000000000, 0x10000, 0xc, 0x1, 0xae, 0x401]}, &(0x7f0000000240)=0x96)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, @in6={0xa, 0x4e21, 0xf, @private2, 0xd}]}, &(0x7f0000000640)=0x10)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000001a00), &(0x7f0000001a40)=0x4)

3.357038772s ago: executing program 0 (id=6712):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffd98, 0xb, 0x87}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004808}, 0x20008000)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffd98, 0xb, 0x87}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004808}, 0x20008000) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'}) (async)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) (async)

3.252093489s ago: executing program 4 (id=6713):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000000}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
syz_emit_ethernet(0x36, &(0x7f00000006c0)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
sendmmsg$inet(r1, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x40080)
socket$kcm(0xa, 0x922000000003, 0x11)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x81c}]}]}, 0x5c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000030000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000002e00000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb=0xffffff7f}, 0x94)
write$cgroup_int(r6, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r5, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c)

2.979867216s ago: executing program 0 (id=6716):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, 0x0)
close(r0)
connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @broadcast}, 0x10)
socket(0x2b, 0x1, 0x1)
setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000440)=[{0x48, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r4)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r5, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x480d1)

2.889864703s ago: executing program 1 (id=6717):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e0301003c05000128876b60864668f82ffdeefa000000000000ffd2acb165fe580cd568020031b87b548cb74136f366da0abe01880b"], 0xffdd)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@alu={0x7, 0x0, 0x8, 0x3, 0x0, 0xfffffffffffffff4}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xba3c}, 0x94)

2.663529312s ago: executing program 0 (id=6719):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400c1)
socket$nl_route(0x10, 0x3, 0x0)
r0 = epoll_create1(0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2], 0x44}}, 0x0)

2.448541568s ago: executing program 1 (id=6720):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.numa_stat\x00', 0x0, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000040)={0x9, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e24, @loopback}}}, 0x108)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x1, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x7}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8014}, 0x20000040)

2.101640851s ago: executing program 3 (id=6721):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x10000000})
r2 = socket$packet(0x11, 0x3, 0x300)
vmsplice(r2, &(0x7f0000000ec0)=[{&(0x7f0000000200)}, {0x0}, {&(0x7f0000000400)="757d2ab28ae52231f0f4fe02290962c40073678ff738be62bc2ff4869aad657eee0e5d239435dfcfcc5e5e5feff212eceff1829270f0d90103d69db68959142c1cab35c2bf3048eec5f18d2d4238f4c7870a1591ea70d9c981cbc44c83598ca08aff5e4076364bc479abfb87cc01a4c8f9422115832ac42af5dc768788f1fe05ef54bb", 0x83}, {0x0}, {&(0x7f0000000dc0)="a1ef895ac02e", 0x6}], 0x5, 0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x508, 0xffffffff, 0x1d0, 0x0, 0x1d0, 0xffffffff, 0xffffffff, 0x438, 0x438, 0x438, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0xa8, 0x1d0, 0x8502}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x4, 0x0, 'system_u:object_r:wireless_device_t:s0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff, 0xff, 0xff], [0xffffffff, 0xff, 0xd0010000, 0xffffff00], 'erspan0\x00', 'caif0\x00', {}, {}, 0xc8, 0x0, 0x4, 0x50}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x1}}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x401}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x1009, 0x81, 0x1, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568)

2.017153552s ago: executing program 1 (id=6723):
r0 = socket$inet6(0xa, 0x802, 0x0)
sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}, 0xf5ff}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000)

1.869236391s ago: executing program 1 (id=6724):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x7, 0x9, 0x9, 0x40000, r0, 0x2, '\x00', 0x0, r1, 0x0, 0x2, 0x1, 0x6}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000040))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48)
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket(0x1e, 0x1, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES64=r3], 0x270}}, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc)

1.613648189s ago: executing program 0 (id=6725):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x448c4)
readv(r2, &(0x7f0000001540)=[{&(0x7f0000000540)=""/4096, 0xfdef}], 0x1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f00000001c0)=0x5)
write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
close(r3)
close(0x4)
r5 = socket$inet(0x2, 0x4, 0x6)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="4000000010003904020002000000000000000000", @ANYRES32=0x0, @ANYBLOB="40100000004104002000128008000100677265001400028006000f0003000000060010004e200000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)
setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000000)={@local, @broadcast, @broadcast}, 0xc)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0)
sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
unshare(0x400)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0x93a2, 0x7, 0xb69, 0xc1, 0x81, 0x1, 0x3, 0x5, 0x101, 0xffc, 0x9, 0x701, 0x6, 0x40001, 0xfffffffa, 0x0, 0x6, 0x8, 0x4, 0x7, 0x5, 0x4, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x6, 0x1c00, 0xb, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0xfffffffc, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x7, 0x7, 0x7, 0x10, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x5, 0x6, 0xf7, 0x5, 0x8, 0x6, 0x10000006, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x6, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x104, 0x5, 0x8, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0x34, 0xd, 0x2a2, 0xffffffff, 0x6, 0x2, 0x8005, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0xffffffff]}})

1.522801991s ago: executing program 1 (id=6726):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x814)

1.308545152s ago: executing program 1 (id=6727):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80000, 0x9)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'batadv_slave_0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x20000000}})
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4)
r3 = socket(0xa, 0x3, 0x85)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'gretap0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x40, r4})
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x8936, &(0x7f0000000000))
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000240)={@rand_addr, <r6=>0x0}, &(0x7f0000000280)=0x14)
r7 = getuid()
sendmsg$nl_xfrm(r5, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)=@flushpolicy={0x2b0, 0x1d, 0x20, 0x70bd2c, 0x25dfdbff, "", [@XFRMA_SET_MARK={0x8, 0x1d, 0x90c}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x91}, @lifetime_val={0x24, 0x9, {0x3, 0xffffffff, 0x1, 0x7}}, @offload={0xc, 0x1c, {r6}}, @sa={0xe4, 0x6, {{@in6=@local, @in6=@mcast2, 0x4e24, 0x1, 0x4e23, 0x8, 0xa, 0x20, 0x0, 0x3c, r4, r7}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4d2, 0x3c}, @in=@local, {0x10, 0xa, 0x1, 0x8, 0x10000, 0xe0}, {0x5, 0x2, 0x2de, 0x20000000005}, {0x7fff, 0x0, 0x200}, 0x70bd2b, 0x3507, 0xa, 0x0, 0x1, 0x9}}, @algo_auth_trunc={0x14b, 0x14, {{'xcbc(aes)\x00'}, 0x7f8, 0xa0, "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"}}, @policy_type={0xa, 0x10, {0x1}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e22, 0x4e23, @in=@dev={0xac, 0x14, 0x14, 0x38}}}, @etimer_thresh={0x8, 0xc, 0x3}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x20004090}, 0x40)
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x7}, 0x80, &(0x7f0000004900)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x70bd25, 0x25dfdc00, {0x60, 0x0, 0x0, r10, {0xffe0, 0xfff2}, {0x6, 0xc}, {0xfff3, 0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000102c0d0000000000000027932cf52300", @ANYRES32=0x0, @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000084)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='rose0\x00')

1.050253973s ago: executing program 3 (id=6728):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x2, 0xffffffff, 0x0, 0xfea}, 0x43e, 0x0, 0x8, 0x7, 0x200, 0x4, 0x2, 0x0, 0x8, 0x51, {0x8, 0x6, 0x3, 0x6, 0x4, 0xe}}}}]}, 0x78}}, 0x20008001)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x48844)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffec}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0, 0x1}, 0x94)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYBLOB="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", @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x20)
ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000280)={r8, 0x7, 0x104, 0x7ff})
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r7, 0xc038586a, &(0x7f0000000240)={r7, &(0x7f00000000c0)=']!\'+[:/)@\'+{%@&{#%{-@,-,\x00', 0xa0000, &(0x7f0000000140)={@align=0x3, {0x1, 0x1, 0xfffffffa, 0x5}}, 0xc, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x80})
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000280)={'vxcan1\x00'})
listen(0xffffffffffffffff, 0x4bb3)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0100001600010028bd7000fcdbdf25e0000001000000000000000000000000000000000000000000000000000000004e2100034e220010020080a03b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000004000000000004d432000000200100000000000000000000000000003a3700000000000000000000000000000200000000000000b80a00000000000008000000000000000100000000000000040000000000000003000000000000002200000000000000d200000000"], 0x11c}, 0x1, 0x0, 0x0, 0x48095}, 0x4000014)
r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r9, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xf}, 0xa)
shutdown(r9, 0x1)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1100", @ANYRES32], 0x50)

984.516861ms ago: executing program 5 (id=6729):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, 0x0)
close(r0)
connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @broadcast}, 0x10)
socket(0x2b, 0x1, 0x1)
setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000440)=[{0x48, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r4)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r5, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x480d1)

658.156632ms ago: executing program 5 (id=6730):
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r0=>0x0})
syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x24, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x8004, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x100, 0x0, 0x0, {[@generic={0x8, 0x10, "9753d19222b83ecfdb6ebbe04c11"}]}}}}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000ff00e0ff0012001100384eff100000005200000002", @ANYRES32, @ANYBLOB="0000000000000000de800200000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x22, '\x00', r0}, 0x94)

480.423984ms ago: executing program 4 (id=6731):
socket$rds(0x15, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400))
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000120035062dbd7000fedbdf25090504494e204e2004000000ab0d0000060000000e0000005f000000070000000100000010000000", @ANYRES32=0x0, @ANYBLOB="034000007689c0240800000009000000380001000030"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x20000014)
socket$pppl2tp(0x18, 0x1, 0x1)
unshare(0x6a040000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000104fcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431903000000000014003500776c616e30000000000000000000000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r4 = socket(0x15, 0x5, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xd9, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000a80)={r6, 0x8, "132bf2b2631e4a66"}, &(0x7f0000000180)=0x10)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="a40100001b00674c0000000000000000fe80080000000000000000000000001a2001000000000000000000000006000000000000000000100a0080"], 0x1a4}}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4)
sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000002480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002440)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="70170000", @ANYRES16=r8, @ANYBLOB="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"/5994], 0x1770}, 0x1, 0x0, 0x0, 0x881}, 0x4008004)

480.278418ms ago: executing program 5 (id=6732):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0100001900010025bd7000fddbdf25fc020000000000000000000000200000ff01000000000000000000000000000100000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000008000003000000000000000000000000000000000000000000000000020000000000001d000000000000000000000000000000420d0000000000000000000000000000dd0200000000000000000000c06b6e00000000000000000044010500ff010000000000000000000000000001000000003300000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000ffffffff0000000000000000000000000000000033"], 0x1fc}}, 0x0)

304.839421ms ago: executing program 5 (id=6733):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61123000000000007913340000000000bf1000000000000015000200091bf3ff3d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee600f06702000014000000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c785fb77dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25f40c87bf25b750bbaa"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe24}, 0x48)

196.391755ms ago: executing program 5 (id=6734):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a0104f5000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800e23f000000147c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000500003804c000080040001800c0005"], 0xe8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

0s ago: executing program 5 (id=6735):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000c80)=<r1=>0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x1, 0x803, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
preadv(r5, 0x0, 0x0, 0x1, 0x7)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0)
write$tun(r6, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0xffff}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x2b, 0x62, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad"}}, 0x39)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6)
sendmsg$inet6(r9, &(0x7f0000000940)={&(0x7f0000000140)={0xa, 0x4e24, 0x6, @private1, 0xfca}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000340)="8096673cf9dcaaf6a6fae57dd8a2199f55775de5ad394b027e652a4d9cc5cfd8d594d0ded7ba563b7969bb403d1443bb89ef2336dfb5721c5161d98952530fb6280515efa149a570457995ba120eab7dddf9420c6eb5679da6131463cc52657ec1cf48c55510d8d3f466f9363eea30f900c75964a6f913da4bd57c554188973d148c4b1479", 0x85}], 0x1, &(0x7f0000000580)=[@hoplimit_2292={{0x14}}, @rthdr={{0x88, 0x29, 0x39, {0x5e, 0xe, 0x1, 0x7, 0x0, [@rand_addr=' \x01\x00', @remote, @local, @dev={0xfe, 0x80, '\x00', 0xb}, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0]}}}, @hopopts_2292={{0x200, 0x29, 0x36, {0x2c, 0x3c, '\x00', [@generic={0xd, 0xfe, "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"}, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @private2}, @enc_lim={0x4, 0x1, 0x9}, @generic={0x0, 0x6d, "0d4f4c9411119cbc350d6474f155876d6018ebb18ff8bac3896e718258073c9333cd490c5de127b57d1c78b9b156d3fc0fb672e6fc8e2772e8275de15e03c31ce01b77b1ed15af782d891a401f918bd017c864c51a088bf42ea8368dbec6803000a680f0db4ab20b361a5b2fff"}, @hao={0xc9, 0x10, @local}, @generic={0x2, 0x48, "393bb75f53aaa699fcf3fa82ed1139da15ec13c126e143f871363fe14f11a237960242ebea8f20607374000b40abaec7a4ad064fbacadb0dfb15c108ba57582f8a977e6d29b6df6b"}]}}}], 0x2a0}, 0x30)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x1, 0x0}, &(0x7f0000000080)=0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES8=r4, @ANYRES32=0x0, @ANYBLOB="c30c426a00000027340a00280012800a00010076786c616e00000018000280"], 0x48}}, 0x0)
r10 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r10, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x10, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="a905000000007464000100000000000000e5c06417e436a106993e1e5ad8311dabcd25ca", 0x24}, {0x0}], 0x2}}], 0x3fffffffffffdf1, 0x0)
sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="400000001400b59500000000000002000a402200", @ANYRES32=r11, @ANYBLOB="140002000000009b8cbf2a139d5c31ff0000000014000100fe880500000000000000000000000101a568f86603bbf7f25789e7dd86e77ad6889bb2b9e6a5d8617bc426a633b24f01da70e8c415"], 0x40}}, 0x0)
r12 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x510}]}, 0x34}}, 0x0)
sendmmsg$sock(r0, &(0x7f0000003680)=[{{&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0x8000}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)="8fa13762adae58cafdb2a9a87b8ff1caa0055dd014c1d42c211a33d42a3650201ff2514a32312cfb96a8641c7ca4338864a2fe24d7c1fc3993bce929e327df46d1524a093d30544bdef07e60998e5a4bcf2c66d6a359e11bd55d9133e6609408e6a18dee3a5160a3755b956de865235fb90027be34b6c2b8fa4b4d7bd0ddd3b3967dd1b662e50c2d1f64e0fb63d94cbbc77f38ad660d81f5218c46e532e8a8ecaab7fdcceafbf4af1223367e298b32de1c5f7d", 0xb3}, {&(0x7f0000000180)="c048ac73d868f3223d47ab6a9df5513f96a26c9b0c593c30717fbbdfbc80d8c1e3639b943d416b6eb154821dc86e349a526cff68efd7fe0eb9d763f107c05c3fbf1e9aa25e3132d7ec5f239bee3baf95d0bdc8751826cea0d7ce8eec545151d78422112cfaf4cbe1d50308e98b6db3c080f8", 0x72}, {&(0x7f0000000280)="825c3cddf35fdf3aba44923cd819f549bd1162bf233deaa9d4477e11ac9c25835ded99bc7efd1d4854dddc8d182528a792c85a168eaf32125a4aa8e2f6deb8ebc0a851a1bdecc8616330ffbb58b05ba776b7de31c82b1d25044c32304baa7ecbdcb4e0edc3c623ed3be1b80ca1675f5517871a2928dcfeb3f0780335ba5c802402cac31c3e45affdf111f3695a949505249ffdf91596b060211bf289553821", 0x9f}, {&(0x7f0000000340)="d87dc5ac37d1e6b81cb2226854bb77d02bdffb77c700ac548cceb2af284c6ef13501b704caa73fa89d9a4c6fd74a12966e09aa2dfeea338a70593cbfc05b7b16cae97ffebd59fa0f8e2c738f74b5e80980c32cfc73c7e509a6d4484be8e057ad885b5365bd4c2471965b6f39870b77be2eab6af7ba9c54efcd959e047705f2d1a8519eb9db7a024b4b06996a4cb9027a884c4c203580f50336a78bcbcfd12321b924", 0xa2}, {&(0x7f0000000400)="02261c1ed50311118c16f6f872", 0xd}], 0x5, &(0x7f00000004c0)=[@mark={{0x14, 0x1, 0x24, 0xff8c}}], 0x18}}, {{&(0x7f0000000500)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x4}, 0x4}}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000580)="91e6c0eea5e265f95443d5564a5a1f0b17edb30a625fcb02e0d39d38437196deb62902ee89c25db216be6e95d8deaa84a1859d508c758b14427eee33ccc549d186484f1f501ce7a67baf7567b9d682f03ef50e7f579a22ab6e0197923a9c4dad6fa556749dc84c2609aa1fa8a64bb906af97294e9d541194e99bb3ab3aa530980f9bcdf2197a007e0bb8f39fa6ed0a6fdc88294bc55eddde712d2b80bec3025bd8285f0a8677050f5bff7af993ae6241d9c7dd7adba6087439a71729981b08ce0e827388a35156db387487d1cd8858b8b7c6c39c05f7bd2d9f1f7bb5e79c165accb094e953d3ecd29feaf8", 0xeb}, {&(0x7f0000000680)="3514474ad28986d90ea48014fe897ad8f508e88bf19648c01224dc5e640a08f84e291439788849bc71152c679d1fff2c51fdc303ae5b5c041cb8cb4137ce37feca473a5e9fb9ccbb8b88d03bc3bbc7082955036d6151317a39523730b9cfecd966b031dc60d7397a44c4a42ea0ee6bee90de7062f8d84273d8685a6bf3a885a3f7e24275caf57297dee3d76acc3b9a2fa0f1273047cb271b19beccbb826bc7ecc899ecca129d1ef97677460c64482c759fb99829f71b81c716e1a8186cd31e58107232233bf5788f21330e46320569edea21", 0xd2}, {&(0x7f0000000780)="f444c425063293a226b7c48f9843c46b7c09677e534eff5a9178a1d0a4a1981d7025604a22ebec43ec4c430c50e2d7285217fe3ee38c3c3ee79bcd089ec0904e8c31", 0x42}, {&(0x7f0000000800)="80fb164ad481715f55a28e6b1e950d32595c536740af8419f8e55c9a426d7205222f8eb93ed430620e501aa454cfc5ccf6dfd6cc2b3251cb5db182baa53350f6b11238890433cb31e8ac1c65e557384f63645b2405f0c4f897f1ca06b99f7499087a85ea488af9a8cc236d5b370e76b83bf8a3361a1c82ae0b446354b8cf4af4a246ffa41945b44276c481d441b32f5c3cbaee4e3010be4ee13cea63ba069ff127bc731e1eae66ddafa6a84fb5a47384e23faaa7706b057f188997d9bec5b62bde2deed85023f39a", 0xc8}, {&(0x7f0000000900)="df4856590fa2e53edccce85d9e3310b785f709e6890b429f017e8210ac2ccae4e3cf023fbb50166c01b04f9ee47842e1aec91d0e9ae20735d296fd0ee1669e0b2932394cb16f9724af66dd4f80e1c82a32bd757045a7e12e21ef98683cdfbb816191009b12259ee57556552ffc13a3396d7840a165b6ee36fd9e604798152f3a0893b3", 0x83}, {&(0x7f00000009c0)="b09cb261f93cb4bcd942", 0xa}, {&(0x7f0000000a00)="7c14adc86f631d5319d8320f7a13c22bb5a001a69a85179987bcac7a7fc95f54c742fa73c7db35e463bc0cabfe300f43571a2f6601c7ac439ab7afd816b24e7a05678cf58adb2797c1ef2a421424deffca441fc7abdf0caf8dd640a87febc28e0ccef0d5e8304b684d48f5e27f09709ca88d95aa698908f1141bca01f6abfb621525ca245105c994814a6945aed57e6d812d95708acc771e3ca9d524e566abe5e3e7d4bdea8b5ac0c1d107b4385a3eeb501ce0150c9fc0801f1016a89250ee58407e4512bedc73f67592454d4533993bc9bf450172a6c2bf3c09d4fd2ca6c2dc2286fe688a31b862a512d43bf6506cb6242da1f4d5d2ca", 0xf7}, {&(0x7f0000000b00)="2964bc6be00b7c", 0x7}, {&(0x7f0000000b40)="fa7134d35991564b4561f9332ad671012faf12a16d12be8eaabc813430d8cf8f", 0x20}], 0x9, &(0x7f0000000c40)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x18}}, {{&(0x7f0000000cc0)=@nfc_llcp={0x27, r1, 0x0, 0x3, 0xd, 0x0, "e81a8fcbec9058e1f548cec45298d2bfa5b2f46a065759faad03b6fa394748c6940b024cce16598c593637d9ba904bd3954e83cebc338bdf4bd5385e2abe51", 0x9}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000d40)}, {&(0x7f0000000d80)="5ea8ea098ea97addfcec4f7e739b0a1e6ac5277f645bf76040da5a9e8d", 0x1d}, {&(0x7f0000001000)="172e4acfee5cc2b31ad93b9a88daa64767e26484ee8ac4d195a9a3fcd23c3c80c5d501e503f128d26c69d3b8e1fca90197739d6b6a3a8157461e55b5eabf6e7a510735d7c76cd0d88965a5348eeea42cbdebf1f0d0614f84533b59817d03d76979d2b79f221f487add4dce3fef3bbc1d475576b505b62d8944103a453498143a89d6ab58cede53551fc5f0a897f9573c3143b9ca1a5200372c315da62f65f3869b77303b4b37e3e5c5c2685b090af979f39978592ac98ef2c203d47a77620bc17b42bb8e6f41e6b08b23058b89457a30d5c0b1d55cfbc66974e263f6fd24b264924a466a949a1ad8770da59b788767a6627e6f95e99b5808b43c94ce6a362916ec5a9b10afb0c344a835bdd9a8fd93c882add9b359f64ed7cfe4da3145833cbb6c3207b58ab71e461cfeef51d251aabead5b458cb17a0f647c428eb91e8ce28ce86b3088f6c5fa43284ed28d1028abbf96311d417787ecefe8a00e38847c46e4ab02feafcd4457c51798889eb4173fa029bfd42945e4df8584b24afbe6b217dfa445be00e6be18d39c184b3096a04f39672bcb812a9886525d482aac137705d395fd64b43b4e2559c8837ca30729981e5c0c7960ea5ed950f7835012188a3f2a51c329d83184118a89cfcaf44e10872b7e9c13fb807ec79670f9b26b2feca5b43a0328a1db57733aecd8aea2f107ab7dcd5e3261fa6086aa315803ed6a3cda00792123218953a1af62afea9785646f705eb3efa712fc7eda9e358ef31181b824135542273627b38162af30b06aa3aefb0d4ceb7a37a03f01a9a35298baae6e08669764d4362c570c50cbc1015428aa4c5210eb95e3ed253b1d83ed5f842f1dc2eee1010b9e3a3b07c9233a96132bc4aec70f86ed3a9115ec6eba955bdbf19704752aa5d71a6eb74cef576a2bf78fb3af5242b0293b67155ff1f1ce35f0051aa0419d0393edfa7010b8037db89bb8a4c2bf86ee34158bd379952204f9a6de9312f014ac9b8033d9b69dc5c2404ed5a8867fc7782e8f5f0d559ac315fe8d634a11022af4e1dad4d4e75c61a149648629d7f7f4cd43f3dc8fa06b4a7ede07e58d47f4fe9a7e98dd464c6c99b30cf864b5ce9af27a4deb174564b3362961fa9026eab31a415fe8f9ad0afda3c017398bb28de4c52b9f23fd912764c6a52dd51c08414554b780155179b60f4e3fcb202155d187d52d4d708e340b49e59a2b377e3f97a7ed209a45a732cd70da5c955d17f79f70c7955a02ec110aeca3557f1a50e630e0cfc510a458d732ea5d0c68ac85af4560bbb756512ad3338e7d1189b7d91c9c1b83caa6ee36aa3daec47ede5e9bc4b1d25ede7a1adaea59b0c63b0135e19d4fc4bd36bb786c50ea121dc1b911e57fbcd1c53df18060b85d69e7c0a9f266b44ccc3ec85feca832a96ee6f3ac9edc9cb23cceab1f7960273130860db5c1695abed45ca8099219355823e8ed8507a003ea546e5f85dc712d3ecfbdaccc97388e0791c3cbacd1fda2ce337e2b777181bca487c615c2ddaf901d03af0fef04df40ec900d6606f696377e0012699635809ad5a078b5b1e19cfcaa0f123caa07fa22cef2aaf7b6a1113e96bb337c1f8fa7ef9e4a96953397c481d002ffce6d17153b0af5b2efcb82b56e74b91c54bf23c94bf47dcc49fdb1e45a80d53df5c6161b8e15dcc590ed83a93624ff507e65b262256eac0618ae931471c8c09b24020d7c5eb293d46a7cb555e1b37dea5c4f2cf990655f4baa704c8e58bea4a7799caaa8eaf4e7779c586038ada7b5d313b839a516078e7c6704c70208249b3c1ce4b1b97cdd4f3f619919ea70df35ad3ea86e662c1945c290be946592ca7a28e293649bb3f4fe0009dfb8b628ca0492fefaa13fbf0dcf0af25a0cdf533d92497cb8dabb93becf7ca7ef96b297ec7fa5f973762db638e05e505ae28536a3c87ef1707cc3c88fd33af64d8e28e86943c21e350ebcc8bcc06df8e3cde676f2cde49477b0b691a2b88bf57d2c44ce7e74c31608f9c9a320d0205112c913ddd23a5e4a29dc2c0a9148354d5f4e2a9b69cf150815e86bec15eb0913007cb8b57f09997bb6e4f1f9cd5ccda15d55c6e2e2a31d308119041cce7a282e6c68c660cd57d36a779f132a7034245c4fc924c0431cb00f25225aed4bb09fceee82336c3c24c65dcb915542328a5922553a723fb6e8191a7b80766b4f3c2dba7c73034421a571ae738a0cb5f1d77c7d092ae44fa4e83ce1f379e35784b93cf28a40701391b2c43bf161568c8b4b9769de023f89c12386f51b95776dcf8d7b9b2150bde4c7728c5bbaddd1ec8b948967e27318dd5a8cb504f8117fad1cfd32bfd3bfbc66b727f08fb56d9cc35a808b19cae070b5aa70f95c05f96c5a1968ce4ed32dbd62d22e83b31be83ab6342d372748a90091dde5a4f57faa7601aa09fde62efb4bd4aa7b0cbf0f100a39dfc0e3c0b412ba4f70b286b90b5dd3904364f1003922d797e4e1718b4897550f118169f4b122d73b19eaab938e40ea07a73c7d210d3424a5968112772641b070ca10408d5197b9576b8ca32c0f2db7c4ee38a307b66aab3a00510c1c28f7de29fe23a6aa6fd255b6c10c02c0db6d1a71143c82edca9783a3f44c62d98c9b64d83efc569452c2ed17c965c57d7597775e1a07b29b30e00b6324fe406aa7d41255bd0fef14b40cc19d1974b135c9200aeb314d2547fb4806e358826e496893c474ac1c07127789e8866a4925ea30f52da9936472e626aa34ad47f3ecb237c18c2b2a9510bde585c4a9e17827f72a489f7297927e910acedfa4595cd61471427206d5e4004b7556e3b4186d9941cdccd8c6fa4cb8c68e9b88ac1d5447fd6ac1ef7548cf5a6f2d7ef1560ba8f77985123a75e032d37bbdc500a9767834d56fba4a7b4fdc89dc7037cf8d75ab89285f912ec55cd42341090a4c386105075a1001268520bcda015d7d4c8ddd1e828e362d13ada3265212133632230e9477795fee978ba53998d2b6ee58c7bfa55c88fbe689af89deca4417862e2a3c8fc2900ecad9a9e9742a08d6a220c14b3e19bbea1e3f6191eaca6b88b850e2438b2325c0d6d6fbc2adcb2e72e097abcc946361c24ceb492ee80e9153e89d7a382f85174c8681b8f52ace51e86533f5d0cde90747ae2f5cb9a530310ea3698c1c6ed3e1d5fb352a0620f9600523ab3a310f60cf26f1f08e0307a4d40b31bd9bdb08fc4faf6a903347866683a7fe50331d16b14df6d71c08dd161d2d9ceae0c3848f5c1362bfc96fa2175a1b24be56dd8f1a6db380e6bcf4854dc3b8d8bb0c7908816b99386acb0d863f94d754c459bcebe7be13b7e4916ae912bc13233514316f4ea9ca258b3d252e0d1b0335ea714c0db92805ba4af53fc7235aa606db94ee48d11c82c9ab5753bfc96b1bdbd0de9ab6dfbcd2bdc68fc8e28c7ce17382dd2112585a41b2c8473e853895393edd6f12ef454bfe92da47eb37459b95c6f6838cf72e6deffc27252a45847d6154410066e0feacfaaec4e49cc0a8c6fe32f4c858f3103791dc5a03ec6ba8b9e53ecf408300cea39d02dfe666782b68f5a90c0704bc9f58c963ea669cab0a1a1c5ef4b727e501f32c44dc142397b96c8c2ddbab98260ac9e80e8202469eeed402b36194c23cab87865c0131600120a965e90463b03a662fdff5f2ec91d98698380fbc7024e7a2c238661131c6593f052373dd70761132e529d4a759da394382ea91158b1fd966c82fdd60001d580188d8c83594e7c4418f97c004c6451c5100caddd5680999d2fa7c14f771b328e30b742628093f9fbe3acdd3e44bb084bc8dda5ebf10ba3f95e6906fc676eb64d74ba86f71007da766bfabed2a66ec24d01752841ebd433153b669d686d6ae080fc994e7836b3cf6a38fbbc5886dcd10eab19da152b514960ccc22af1cbb95d73514419d8fb2830e24f46473d9dba914435adad541b7d39920001b164f339485b99c6d04fc6ef0566a183fb3c595094e650a55f161d17c65101111963edfbcebcf20e3a51dedb0300f8d5c81912b3881fb81ae88953f94bf9b3655d0e681f0997d5ba369cc574c2ce3f172a2f744784cc0c2ac21c3108e8dc27fdb00f0b037f057711ed472d910af357a2befa6cfa334b21dad961f13230232f50f7e7cf94b92df0ad886e94f718a046c32e6df05f8f2bdbb5f387fe5f4275ed1f1b1654e34c241d0b10f72f07f09e95f0b1caceba5f87fdb8092e1bd0d37cf6b79f5e2692d0f7f761d2d190c06154dd680152dda9678732ba565c51e211cb3754c815450505a8ccc241f7f74c76df04e7eebf75a40cd6c6f531f0ca1a1c95a22873ebac413eeafd921d159cdaf02070ffd423c797918021bf1ae04624fee0364c703986155b215643d49bab9c58d9da2ee6b9a2b4a64a5b45eb2e6a1ee7fd4ac903c68f8a364e9f12bbb9099fb331864993f36822cfbb399b99721f43c4d1f10364fb61bdc31b84cf088cd5b369857aa8e5e02364e25c55a2580693515bc36bcd62c2006d1c4dd1806b2f9d04d893111ea026b0ed2d22b181994f60e37144d3dd24417a65e37f8e02e3ca9f6f6270c87a5990b3f8878442b62c69b92cae6d2183d6c1cca44a68158a4b526c9824fc6672c7ebc28867f0f4954f39522a6d80fcaea7887e1027984e851cd6e04bee056814931cd04d40de8662be32f39b35d5381bd4561e2bf181915dfc41f89490788050fb1a4a7e9e305015e3f8e9cfe03b970e68319ea8288e2970275194159f27ebe2a4f7166714064b2068ffecf4fd259bf510a2730028079e752ed6569af1273381f6917120de7bec4c76c7263321b34347be973ca08e698219eb506124ba7665fc3fbe4c069423c0d3e51594ac147aa6841cd3dbf221e46a800426e19652449933e67585888cd468ca09cf18e90e8bf86e1d0845ba7502dcf82e6ec423a1a06bfe0c98990f21ff9a402f14c3784b9a7e7879649432fdfe96300d5a0ab41ff60fd07e33cc0fef6c42fefc3c94acbb544d6e6a97707bb6689e8d03e4207acaa4442b0ca7d7fd3bf35e320d1b2622c1cb14833ae7f02c715dd99769dd4ae439cbc5f9d6a3106da3ff39aa8c0822dc0197302fbf21bd2b7685a232f774c94b14cd93a85145eb063f5b487fcc8933b5e0d68ca407e9fc1c0fe0d88d28504c63c4020d8aa496567fe6ff0cc065f8f06330a35fa77da2e2a00bcc1df95203a2266392b3176b762ece30b0189d0a21855014e0b2e635c5d3a737fa77957f80b1ed85fe998d3dcf88823c8d2a45be6e35c983ad1d9d0a65ffcbd71be71473135edc1a84d59c61853b0575beae767a4da28905a2b3c0e97e466c1ab6bea2cd04d83cfdb6435468acd9868f53a0ee4690ab56878bc362a28ea0d85dc0ecae1e99316d3fcc62fd851b74adae67ea37cc64c791bfae81786c870dcb6cba06320cac7a98a38a457e13eed077a0c41406012309e9515b5facbba3475ad5b97974fce89047c8780a080b71ba152c6b2af16c599f26dc117c4b20df5602ae7dd06556acc511cb58eb2fc0d8274cea865386c02bfb7238fc1de1d0c2b24801784cf9026e9d90ebb0f44ab1c81170e06be1f1f23bd39251faa12b590a2e475c6a204fee9e472487f0d357dd4c2cf7ad732ae0955c75af0311f3ba3fa0cfb099daf2592c150936f0c72f143e8b86ce37b3585deba956809f6dcc94239e35b97ef7d889d6db626cff7baef38f3584ea8feb8aa3b861a0fcb7a44a5038349f0b6ae9e3a5152836fdab10cfa9d828172dbcb69af67d37723ff9383a8005dad5f9a07b5018a6809879421b9c8e1105863fbb0", 0x1000}, {&(0x7f0000002000)="6d024c6231202cee2b811de7646f421500be729df513bddd087b326b718b865b191955b9c05e6649f7bfd607dcaf82ed59cc469db103c78f2f8cc9205fcbfed707cdf86ecefdc1607b104a8aac42dbd640b10254e0", 0x55}, {&(0x7f0000002080)="4e13066474b12d8f1253a9f282be0b37c7ef387f692aee976bb86e85ff593026134005da2a4d9fcc9225427fb04a4db41d9682cd885f05340d1c049b110aca8409620a6bf969b684", 0x48}, {&(0x7f0000002100)="9da406eacb7112b929a55bcba618dcfba234275381a526c66799784d2bb6c3b775db251d4b952dcbce507810a246a4f36fb5121881fb0c6db88953fa2135af1caaab8bdca0fc7e3ee4993cb1e09dc139cc4ded49c0530e04bb84ef1ca565919ae2c05ec860c6761a0e679a9d72a3f1d128c66766b7bbc3ea13217354ac1fb626eb592b", 0x83}, {&(0x7f00000021c0)="16000f7a3c6d6fef30ed5280ef37b801429abc86802b493ad3e84085c98a90000c4395c0c2ebc89fb057311225df004e838b56cbeda2ee06de461809daba197cc3c062fc0c01fb1917d03173223ec3526841ff311840b3315d252f9cc30c3d1c746aecb830a20a99e341f80e62465b3791652b33c0cc07f3c53f935def27d6b02ee321f0c8fadd6dfcd63fade9b2064d8921c0e8c47aef6351021b4c47dde3238a9b8c099e77370f280b378211a3f20d64a8a200fe82656aa195248ef0b6138ef6150b68aee6bb72", 0xc8}], 0x7, &(0x7f0000002340)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x800}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0xf2}}], 0x60}}, {{&(0x7f00000023c0)=@hci={0x1f, 0x4, 0x4}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000000e40)="6fc3e1bd31dfee8b0a88372890925d8b7934a7f3296bbe79df9accffcd10009203897ee7dd85c288ab76ac8648cb3b587d186fe89b5f02a9f20570780c0a3cc70901f503dabecdd24ffa647df2fe0c47020639e605943bcea410af43beceb8d2", 0x60}, {&(0x7f0000002440)="d6238db2bc4c6c6c6aea01ab7a99b15cc4", 0x11}], 0x2}}, {{&(0x7f0000002500)=@qipcrtr={0x2a, 0x4}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002580)="80d528f0946560dda272870a9452c26809fa4eaa9ae96307f306621759caeb1388513f130b816c6befc50e02a3ac78", 0x2f}, {&(0x7f00000025c0)="c7b8c395af2f32ed82671a146ed1908fd96c368328701eaeb4069a7f77fad73364533bcae594c9b7b607aa", 0x2b}], 0x2, &(0x7f0000002640)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x60}}, {{&(0x7f00000026c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002740)="ee59fdb92079f586098aead65ce6a7d2d701757d6df124", 0x17}, {&(0x7f0000002780)="daa96a095c52a8bc81d0c5c1888f32300205328f816f3da62e5875bf7698610e751e320983f666c32e076840d713920715e5c6324871a8ff56fc98d5a86a163f6c8538424d13003cb8bafa2be983e36f91d7b41dc88022715f85ee65f66e6403edab7efa564b3a3c63d3f4c53ea51f8b072a0b400220df7d6e1ee843a2691c61918f2c6f26eda52867c3ae701003726e8da4d5ba4a9c14daf0b7f6cfce6c7f8c631aba225ad263d66769ac80d995bfaa6e5af2564a01c15180c6916d781de5f69edafd406d", 0xc5}, {&(0x7f0000002880)="a0bdf553470d7b558ca37fa75b30c36435d5d01245f7d7e8fe10fd9ceafe0e23fa3dd6b439aa198e63d41871240048617b3c7c73e137863ba32b898d43cd0274c581ba8a668e151cf67cb404ed9e4ab71fc72cfd53edbb65f1ce0d2655c1029a95562f26ed59b951d76ffca005593613ade00eb6caf9d37bcc90d429844a8cf5", 0x80}, {&(0x7f0000002900)="bb5f44f720dde3bc476b594a834e5bac07909225e46d133d1fbf5da5b06215987c5c0b7accb2d366f0c2757357d932984e2fa05f39aa22958146cc4f88949ea18cf3475d546e1d1989fb877f42d7fe7f66852f1c398063c8636d07e880465aa2f77b490631e927c1e9b2ebaa5b2a302913bbca6038d5129bd96a7a829679705af7ce55bf577da86f4f02d671b2ce4a57deb74f0081b8a3fc49936eb915a449e0527eb0e69df601b4a915673a3aebb3016b6469dc0711cbef2de0f691d83be872009b525534efa9c509043ea435d919bd856ffa58cdd3fe278c963fae4087e389", 0xe0}], 0x4, &(0x7f0000002a40)=[@timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x48}}, {{&(0x7f0000002ac0)=@in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x5}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002b40)="16cc53141d3597c2c227eaa0a3bf8efc04d408d7", 0x14}, {&(0x7f0000002b80)="be1aefebe5dce9e72839a25e42736f61c2a7751f", 0x14}, {&(0x7f0000002bc0)="f3eecba6852c734af70a87cadaa760669cfbc437fdd12a69e9689ead11358090e48f79470535c09866df4df3dc67221735ec270d2e1ff667b9db556862e1539dfa49f7f0b562b4fd61eab750e6aa18953da8fed9767cbb68e129be8e258d5e47e6a748a9cc9a19afbefd3d49b7b0240e7b793da1a39733da0023144a620422392fa147129fcc55eb1d8148f40fece93370bdbe45f3ce6c0592eb50e47052a582bc5aa4e41557f5cf8f5557fe397124c5c32a93dcc32e8206c2f70e156187a0a12d00552e7049413b3bc20e26e9dbb5ba4afecf12832d3e8b93f9e0004e7e", 0xde}, {&(0x7f0000002cc0)="e4cc3593801170235228b3f6f7c6f88091979a2a37fdc268ce10f15ee785e1431d3ce6836cf83d69343d7305f49ad9297fe412da66e8d38eee2b64ae97eeccc0e77f1293a9d8bafb0f4d0cc14e543fee8940db5d9eb11ca4e0acffc74358e48da9430140c76d25071815008bf862996a49d28c8e57efa844be3f266e0033131cbcead5d7f5e24197fe633ef2eef1cc4fcf288f036e9294f9c42e2771789ad6fa26d467d1ccabefa5615be95cfdde8cb4b238c183fac42341", 0xb8}, {&(0x7f0000002d80)="9d7e3cec09e26f8d904aac2454936d08886d9c38f1756f482ef6a9738076f34d00ed1b392cfe647e90c49ae66f9efe20e050b58197bfd99017e349dd8e91f7fdd0aee4baf8ee34a82b40b2ae86ebc6b3fe750ae21a672453181d1890df227b9d3bd0bce2686217ee68f750da421a5c7f20db143dd5f65109b5dd703511ecf28e9c7b719635768156c6006acc9798c0f6ac9bb188e1d6b3d327b0df707dbd3737ac640de33cf25e49b332adc6dbbfcf97e4a32d3f0dc74ba144b337cee7af8d3471e0d6558835", 0xc6}, {&(0x7f0000002e80)="02a1e6b3cc881acdcf67d00fe0f3e7a7015eccaa36ac7473737ed55bc8172dc4c307f87446b80b8e9390cfc221340386c73364cbfac9bdcaaf9bd8d6aca3ed2438f7250ef92ec070b513799407bbe6094bb28e4e13219396e6b582df3a1e3ce347a66870bebfaafe24fc97b2699f0816c39f9b0984e96024038ae523dfd2785d6cce675ed68606e9b9e25577b734287798454599d6d03705a3f8c73dbf4c3aaa0deda7e53621b40e5f96800dfb3fdb1deafd13d2512fbd07c1", 0xb9}], 0x6, &(0x7f0000002fc0)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7202}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x48}}, {{&(0x7f0000003040)=@ieee802154={0x24, @long={0x3, 0xffff}}, 0x80, &(0x7f0000003140)=[{&(0x7f00000030c0)="392002c2a5712d2e735d8e74d38c8881b0f51595ebb02d7f6a85715d4aaecf0e3cf1a003242293290bba00d56c48cabea1d530d5de3036b1bc9c27b88ef3869180bc59dcf7426dc3c8b36c5f9ca374cc76e0ac", 0x53}], 0x1, &(0x7f0000003180)=[@timestamping={{0x14, 0x1, 0x25, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0xd7dc}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xa}}], 0x60}}, {{&(0x7f0000003200)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @broadcast}, 0x1, 0x0, 0x3, 0x1}}, 0x80, &(0x7f0000003480)=[{&(0x7f0000003280)="44fc656d465e028f3f975ba0557221900f44389c238526a6eb37e744c47223bc9ad806df58a5a2dce93cac087a3154816e1dd98421a22a99c27e7179cfa0b7d06db1d071100ebc43140217bb3ca59cd3a73eef1de38b4e0c2faacaadb34437b313ea8c2b97857fdb92d2910024656bc9ff253e42adfeeb55c6f18cc2f480d18b372ff16ad10993a75b68ae5363ac7f72028df5b3be0e9aa2ef7656c30fca296e6dc996d4dcd263457dfd6c611a3670f0391714", 0xb3}, {&(0x7f0000003340)="d0abef5fbde557a7793dbb6ba8b729237c2686e5c5a8672802c2d4ea0b156c358c83d13b1101f234e6fa93086d68ed6c2775d810296684943ab936803926c587ff5c0ecc69368ee5b26d50e5e5aa74c5b468bd18f18a583808267f3fc52238f6fada65eb3a49c58e69469f0972f80dd9999f3bf3f2cd4e0f25b20aadfa9a753f5a24bc235ae8ecc2d8bdf22ddd8382459fc14c2c1d7a8f933f52daf19b31951399a166f3d48f18a97303327dc4f6069d6da383e6def2254c8a7c4deabac4313a7d4618511eccab325313af3647f351", 0xcf}, {&(0x7f0000003440)="67e0df7de45d885faf719286d5e5858d70a65ac52c6922a1d21d10455638f5ff5a4714572734e562a549d449cdb22b09", 0x30}], 0x3, &(0x7f00000034c0)=[@mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x30}}, {{&(0x7f0000003500)=@xdp={0x2c, 0x1, r11, 0x2}, 0x80, &(0x7f0000003600)=[{&(0x7f0000003580)="91355cddde1c9acf628456e90070e90dbbec7a35620e523fb74b234a4ce65f1e790abc793d2c284010c6b19214ab040b30290e09820693b300606015cd87c0dff8777f6140684a8fa72d8198550a2694160b2d02ca21ebb987987edec60e5f3e8756982ab40d5a84aded", 0x6a}], 0x1, &(0x7f0000003640)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}}], 0xa, 0x6f2faf4354d0ba3b)

kernel console output (not intermixed with test programs):

23722] syzkaller0: entered promiscuous mode
[  710.390077][T23722] syzkaller0: entered allmulticast mode
[  710.542981][T23725] Cannot find add_set index 0 as target
[  711.065097][T23736] x_tables: duplicate underflow at hook 2
[  711.102239][T23736] xt_NFQUEUE: number of total queues is 0
[  711.278754][T23742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5592'.
[  711.327523][T23742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5592'.
[  711.337029][T23747] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5593'.
[  711.451805][T23747] openvswitch: netlink: Key 2 has unexpected len 12 expected 4
[  712.318999][T23773] x_tables: duplicate underflow at hook 2
[  712.370855][T23773] xt_NFQUEUE: number of total queues is 0
[  713.849817][T23818] x_tables: duplicate underflow at hook 2
[  713.888091][T23818] xt_NFQUEUE: number of total queues is 0
[  713.948595][T23820] __nla_validate_parse: 1 callbacks suppressed
[  713.948617][T23820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5618'.
[  714.125624][T23820] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  714.219965][T16679] bridge0: port 2(bridge_slave_1) entered blocking state
[  714.227193][T16679] bridge0: port 2(bridge_slave_1) entered forwarding state
[  714.306074][T23820] syzkaller0: entered promiscuous mode
[  714.346393][T23820] syzkaller0: entered allmulticast mode
[  714.628061][T23834] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5623'.
[  714.664791][T23840] netlink: zone id is out of range
[  714.683419][T23840] netlink: zone id is out of range
[  714.697912][T23840] netlink: zone id is out of range
[  714.733177][T23840] netlink: zone id is out of range
[  714.770796][T23840] netlink: zone id is out of range
[  714.796233][T23840] netlink: zone id is out of range
[  714.839560][T23840] netlink: zone id is out of range
[  714.858944][T23840] netlink: zone id is out of range
[  714.877175][T23840] netlink: zone id is out of range
[  714.928256][T23849] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5628'.
[  715.175531][T23862] SET target dimension over the limit!
[  715.545547][T23874] set match dimension is over the limit!
[  715.554024][T23856] 8021q: adding VLAN 0 to HW filter on device bond0
[  715.602225][T23856] 8021q: adding VLAN 0 to HW filter on device team0
[  715.653872][T23856] 8021q: adding VLAN 0 to HW filter on device batadv0
[  715.771609][T23856] batman_adv: batadv0: Interface activated: batadv_slave_0
[  715.795359][T23856] batman_adv: batadv0: Interface activated: batadv_slave_1
[  715.822614][T23856] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  715.833589][T23856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  715.906186][T23881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  715.957498][T23881] nbd: socks must be embedded in a SOCK_ITEM attr
[  716.009005][T16236] bridge0: port 1(bridge_slave_0) entered blocking state
[  716.016311][T16236] bridge0: port 1(bridge_slave_0) entered forwarding state
[  716.058486][T16236] bridge0: port 2(bridge_slave_1) entered blocking state
[  716.065817][T16236] bridge0: port 2(bridge_slave_1) entered forwarding state
[  717.066837][T23910] FAULT_INJECTION: forcing a failure.
[  717.066837][T23910] name failslab, interval 1, probability 0, space 0, times 0
[  717.079670][T23910] CPU: 1 UID: 0 PID: 23910 Comm: syz.4.5645 Not tainted syzkaller #0 PREEMPT(full) 
[  717.079699][T23910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  717.079710][T23910] Call Trace:
[  717.079718][T23910]  <TASK>
[  717.079727][T23910]  dump_stack_lvl+0xe8/0x150
[  717.079766][T23910]  should_fail_ex+0x40c/0x560
[  717.079797][T23910]  should_failslab+0xa8/0x100
[  717.079827][T23910]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  717.079851][T23910]  ? local_lock_release+0x9c/0x160
[  717.079881][T23910]  ? __alloc_skb+0x1d7/0x7a0
[  717.079906][T23910]  ? __alloc_skb+0x1d7/0x7a0
[  717.079936][T23910]  __alloc_skb+0x1d7/0x7a0
[  717.079966][T23910]  ip_frag_next+0xcd/0xa20
[  717.080128][T23910]  ? ip_skb_dst_mtu+0x109/0xa50
[  717.080155][T23910]  ip_do_fragment+0x777/0x1770
[  717.080193][T23910]  ? __pfx_ip_finish_output2+0x10/0x10
[  717.080211][T23910]  ? ip_skb_dst_mtu+0x109/0xa50
[  717.080249][T23910]  ip_output+0x29f/0x450
[  717.080277][T23910]  ? ip_output+0x5a/0x450
[  717.080306][T23910]  iptunnel_xmit+0x626/0xd10
[  717.080340][T23910]  ip_tunnel_xmit+0x195b/0x2040
[  717.080371][T23910]  ? bpf_has_frame_pointer+0x26/0x390
[  717.080398][T23910]  ? lock_acquire+0x106/0x350
[  717.080457][T23910]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  717.080495][T23910]  ? __pfx_gre_build_header+0x10/0x10
[  717.080555][T23910]  ? skb_network_protocol+0x23d/0x400
[  717.080577][T23910]  ? iptunnel_handle_offloads+0x2fd/0x630
[  717.080604][T23910]  ipgre_xmit+0x90a/0xcd0
[  717.080627][T23910]  ? arch_stack_walk+0xfb/0x150
[  717.080653][T23910]  ? __pfx_ipgre_xmit+0x10/0x10
[  717.080680][T23910]  ? __asan_memset+0x22/0x50
[  717.080709][T23910]  dev_hard_start_xmit+0x2cd/0x830
[  717.080749][T23910]  __dev_queue_xmit+0x14c0/0x3820
[  717.080804][T23910]  ? __x64_sys_bpf+0xba/0xd0
[  717.080825][T23910]  ? do_syscall_64+0x174/0x580
[  717.080860][T23910]  ? __dev_queue_xmit+0x29b/0x3820
[  717.080893][T23910]  ? __pfx___dev_queue_xmit+0x10/0x10
[  717.080955][T23910]  __bpf_redirect+0xa76/0x1250
[  717.080997][T23910]  bpf_clone_redirect+0x319/0x4b0
[  717.081031][T23910]  ? bpf_test_run+0x1d1/0x830
[  717.081053][T23910]  bpf_prog_3e1cbbed0c4acd81+0x5f/0x68
[  717.081077][T23910]  ? __kernel_text_address+0xd/0x30
[  717.081109][T23910]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  717.081142][T23910]  ? __pfx___schedule+0x10/0x10
[  717.081170][T23910]  ? ktime_get+0x45/0x220
[  717.081208][T23910]  ? preempt_schedule_thunk+0x16/0x40
[  717.081234][T23910]  ? preempt_schedule_common+0x82/0xd0
[  717.081253][T23910]  ? bpf_test_run+0x1d1/0x830
[  717.081278][T23910]  ? bpf_test_run+0x1d1/0x830
[  717.081297][T23910]  ? kvm_sched_clock_read+0x11/0x20
[  717.081318][T23910]  bpf_test_run+0x5c9/0x830
[  717.081362][T23910]  ? __pfx_bpf_test_run+0x10/0x10
[  717.081399][T23910]  ? __kasan_krealloc+0xec/0x110
[  717.081442][T23910]  ? skb_dst_set+0x72/0x140
[  717.081466][T23910]  bpf_prog_test_run_skb+0xe35/0x2230
[  717.081509][T23910]  ? __fget_files+0x3a2/0x420
[  717.081534][T23910]  ? __fget_files+0x2a/0x420
[  717.081564][T23910]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  717.081586][T23910]  bpf_prog_test_run+0x2c5/0x340
[  717.081616][T23910]  __sys_bpf+0xa22/0xd90
[  717.081649][T23910]  ? __pfx___sys_bpf+0x10/0x10
[  717.081685][T23910]  ? __fget_files+0x2a/0x420
[  717.081726][T23910]  ? ksys_write+0x242/0x270
[  717.081757][T23910]  ? __pfx_ksys_write+0x10/0x10
[  717.081790][T23910]  __x64_sys_bpf+0xba/0xd0
[  717.081811][T23910]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  717.081834][T23910]  do_syscall_64+0x174/0x580
[  717.081856][T23910]  ? clear_bhb_loop+0x40/0x90
[  717.081882][T23910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  717.081900][T23910] RIP: 0033:0x7fbece19de99
[  717.081919][T23910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  717.081935][T23910] RSP: 002b:00007fbecf0ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  717.081956][T23910] RAX: ffffffffffffffda RBX: 00007fbece425fa0 RCX: 00007fbece19de99
[  717.081971][T23910] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a
[  717.081984][T23910] RBP: 00007fbecf0ab090 R08: 0000000000000000 R09: 0000000000000000
[  717.081996][T23910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  717.082008][T23910] R13: 00007fbece426038 R14: 00007fbece425fa0 R15: 00007ffe39d5f818
[  717.082040][T23910]  </TASK>
[  717.566090][T23904] wlan0 speed is unknown, defaulting to 1000
[  717.575333][T23904] xfrm0 speed is unknown, defaulting to 1000
[  717.765170][T23904] lo speed is unknown, defaulting to 1000
[  718.232387][T23922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5648'.
[  718.743279][T23936] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  719.461002][T23950] net_ratelimit: 48 callbacks suppressed
[  719.461026][T23950] netlink: zone id is out of range
[  719.507960][T23950] netlink: zone id is out of range
[  719.516296][T23950] netlink: zone id is out of range
[  719.525693][T23950] netlink: zone id is out of range
[  719.537876][T23950] netlink: zone id is out of range
[  719.567103][T23950] netlink: zone id is out of range
[  719.588701][T23950] netlink: zone id is out of range
[  719.609260][T23950] netlink: zone id is out of range
[  719.649775][T23950] netlink: zone id is out of range
[  719.695120][T23950] netlink: zone id is out of range
[  720.094755][T23970] SET target dimension over the limit!
[  720.114008][T23966] x_tables: duplicate underflow at hook 2
[  720.176387][T23966] xt_NFQUEUE: number of total queues is 0
[  720.404547][T23983] FAULT_INJECTION: forcing a failure.
[  720.404547][T23983] name failslab, interval 1, probability 0, space 0, times 0
[  720.461929][T23983] CPU: 0 UID: 0 PID: 23983 Comm: syz.1.5669 Not tainted syzkaller #0 PREEMPT(full) 
[  720.461956][T23983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  720.461968][T23983] Call Trace:
[  720.461977][T23983]  <TASK>
[  720.461985][T23983]  dump_stack_lvl+0xe8/0x150
[  720.462021][T23983]  should_fail_ex+0x40c/0x560
[  720.462051][T23983]  should_failslab+0xa8/0x100
[  720.462121][T23983]  __kmalloc_cache_noprof+0xa8/0x660
[  720.462145][T23983]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  720.462175][T23983]  ? __kmalloc_cache_noprof+0x150/0x660
[  720.462195][T23983]  ? sctp_add_bind_addr+0x8c/0x370
[  720.462218][T23983]  ? sctp_add_bind_addr+0x8c/0x370
[  720.462246][T23983]  sctp_add_bind_addr+0x8c/0x370
[  720.462271][T23983]  sctp_copy_local_addr_list+0x31a/0x4e0
[  720.462298][T23983]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  720.462323][T23983]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  720.462350][T23983]  ? sctp_v4_is_any+0x35/0x60
[  720.462366][T23983]  ? sctp_copy_one_addr+0x93/0x360
[  720.462393][T23983]  sctp_bind_addr_copy+0xb3/0x3c0
[  720.462421][T23983]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  720.462450][T23983]  sctp_connect_new_asoc+0x2ff/0x6b0
[  720.462475][T23983]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  720.462503][T23983]  ? __local_bh_enable_ip+0xd0/0x130
[  720.462524][T23983]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  720.462545][T23983]  ? security_sctp_bind_connect+0x7e/0x2c0
[  720.462576][T23983]  sctp_sendmsg+0x159b/0x2d00
[  720.462619][T23983]  ? __pfx_sctp_sendmsg+0x10/0x10
[  720.462644][T23983]  ? aa_sk_perm+0x6d5/0x900
[  720.462680][T23983]  ? __might_fault+0xaf/0x130
[  720.462705][T23983]  ? sock_rps_record_flow+0x19/0x350
[  720.462738][T23983]  ? inet_sendmsg+0x298/0x320
[  720.462765][T23983]  ? __pfx_inet_sendmsg+0x10/0x10
[  720.462790][T23983]  sock_sendmsg_nosec+0x10e/0x180
[  720.462821][T23983]  __sys_sendto+0x408/0x5a0
[  720.462850][T23983]  ? ksys_write+0x1e6/0x270
[  720.462882][T23983]  ? __pfx___sys_sendto+0x10/0x10
[  720.462907][T23983]  ? __mutex_unlock_slowpath+0x731/0x900
[  720.462956][T23983]  ? __pfx_ksys_write+0x10/0x10
[  720.462986][T23983]  __x64_sys_sendto+0xde/0x100
[  720.463013][T23983]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  720.463034][T23983]  do_syscall_64+0x174/0x580
[  720.463055][T23983]  ? trace_irq_disable+0x3b/0x140
[  720.463076][T23983]  ? clear_bhb_loop+0x40/0x90
[  720.463097][T23983]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  720.463114][T23983] RIP: 0033:0x7f225a59de99
[  720.463131][T23983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  720.463148][T23983] RSP: 002b:00007f225b433028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  720.463168][T23983] RAX: ffffffffffffffda RBX: 00007f225a825fa0 RCX: 00007f225a59de99
[  720.463181][T23983] RDX: 000000000000fffd RSI: 00002000000000c0 RDI: 0000000000000005
[  720.463192][T23983] RBP: 00007f225b433090 R08: 0000200000000280 R09: 0000000000000010
[  720.463204][T23983] R10: 00000000000000c1 R11: 0000000000000246 R12: 0000000000000002
[  720.463215][T23983] R13: 00007f225a826038 R14: 00007f225a825fa0 R15: 00007ffd322da458
[  720.463246][T23983]  </TASK>
[  721.933574][T24026] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5681'.
[  721.950725][T24023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5680'.
[  723.747039][T24080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5694'.
[  724.018697][T24087] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5697'.
[  724.813783][T24117] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5707'.
[  725.121623][T24126] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5710'.
[  725.462138][T24143] net_ratelimit: 74 callbacks suppressed
[  725.462161][T24143] netlink: zone id is out of range
[  725.526548][T24143] netlink: zone id is out of range
[  725.543146][T24143] netlink: zone id is out of range
[  725.622701][T24143] netlink: zone id is out of range
[  725.661013][T24143] netlink: zone id is out of range
[  725.667278][T24143] netlink: zone id is out of range
[  725.683230][T24143] netlink: zone id is out of range
[  725.689834][T24143] netlink: zone id is out of range
[  725.709709][T24143] netlink: zone id is out of range
[  725.748621][T24143] netlink: zone id is out of range
[  726.544568][T24169] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5724'.
[  726.629649][T24172] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5725'.
[  726.746491][T24168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  727.101874][T24182] netlink: 'syz.2.5727': attribute type 1 has an invalid length.
[  727.266034][T24182] 8021q: adding VLAN 0 to HW filter on device bond7
[  727.398731][T24187] 8021q: adding VLAN 0 to HW filter on device batadv1
[  727.479049][T24187] bond7: (slave batadv1): making interface the new active one
[  727.531723][T24187] bond7: (slave batadv1): Enslaving as an active interface with an up link
[  727.579341][T24190] bond7 (unregistering): (slave batadv1): Releasing active interface
[  727.599887][T24190] bond7 (unregistering): Released all slaves
[  727.723710][T24194] netlink: 'syz.4.5732': attribute type 1 has an invalid length.
[  727.805420][T24204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5734'.
[  728.446808][T24226] syzkaller1: entered promiscuous mode
[  728.461311][T24233] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5744'.
[  728.472176][T24226] syzkaller1: entered allmulticast mode
[  728.487641][T24232] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5745'.
[  728.721559][T24242] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5747'.
[  728.766646][T24230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  729.404712][T24264] netlink: 'syz.0.5752': attribute type 1 has an invalid length.
[  730.237431][T24264] 8021q: adding VLAN 0 to HW filter on device bond6
[  730.411328][T24267] bond6: (slave geneve3): making interface the new active one
[  730.482650][T24267] bond6: (slave geneve3): Enslaving as an active interface with an up link
[  730.537148][T24273] netlink: 'syz.0.5752': attribute type 4 has an invalid length.
[  730.566295][   T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  730.600256][   T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  730.667878][   T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  730.749248][   T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  730.944228][T24305] net_ratelimit: 73 callbacks suppressed
[  730.944251][T24305] netlink: zone id is out of range
[  731.008325][T24305] netlink: zone id is out of range
[  731.036645][T24305] netlink: zone id is out of range
[  731.074721][T24305] netlink: zone id is out of range
[  731.113941][T24305] netlink: zone id is out of range
[  731.187532][T24305] netlink: zone id is out of range
[  731.230680][T24305] netlink: zone id is out of range
[  731.250658][T24305] netlink: zone id is out of range
[  731.271780][T24305] netlink: zone id is out of range
[  731.286870][T24322] netlink: 'syz.1.5767': attribute type 1 has an invalid length.
[  731.304380][T24305] netlink: zone id is out of range
[  731.613717][T24322] bond6: entered promiscuous mode
[  731.651063][T24322] 8021q: adding VLAN 0 to HW filter on device bond6
[  731.818003][T24330] 8021q: adding VLAN 0 to HW filter on device bond6
[  731.899088][T24330] bond6: (slave ipip0): The slave device specified does not support setting the MAC address
[  731.927119][T24344] netlink: 'syz.4.5772': attribute type 21 has an invalid length.
[  731.966825][T24330] bond6: (slave ipip0): Setting fail_over_mac to active for active-backup mode
[  732.134115][T24330] bond6: (slave ipip0): making interface the new active one
[  732.175825][T24355] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5772'.
[  732.191384][T24330] ipip0: entered promiscuous mode
[  732.277645][T24330] bond6: (slave ipip0): Enslaving as an active interface with an up link
[  732.436446][T24344] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5772'.
[  732.632441][T24355] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5772'.
[  733.055141][T24373] syzkaller1: entered promiscuous mode
[  733.081087][T24373] syzkaller1: entered allmulticast mode
[  733.586824][T24384] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5781'.
[  734.432491][T24396] syzkaller1: entered promiscuous mode
[  734.462887][T24396] syzkaller1: entered allmulticast mode
[  734.633814][T24403] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  735.031520][T24419] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5793'.
[  735.796603][T24446] netlink: 'syz.0.5803': attribute type 1 has an invalid length.
[  735.953747][T24454] net_ratelimit: 69 callbacks suppressed
[  735.953770][T24454] netlink: zone id is out of range
[  736.038472][T24454] netlink: zone id is out of range
[  736.066231][T24454] netlink: zone id is out of range
[  736.080677][T24454] netlink: zone id is out of range
[  736.086961][T24454] netlink: zone id is out of range
[  736.112440][T24454] netlink: zone id is out of range
[  736.135034][T24454] netlink: zone id is out of range
[  736.156752][T24454] netlink: zone id is out of range
[  736.168454][T24458] wlan0 speed is unknown, defaulting to 1000
[  736.204397][T24454] netlink: zone id is out of range
[  736.235281][T24454] netlink: zone id is out of range
[  736.244767][T24458] xfrm0 speed is unknown, defaulting to 1000
[  736.275483][T24468] FAULT_INJECTION: forcing a failure.
[  736.275483][T24468] name failslab, interval 1, probability 0, space 0, times 0
[  736.341715][T24468] CPU: 1 UID: 0 PID: 24468 Comm: syz.4.5808 Not tainted syzkaller #0 PREEMPT(full) 
[  736.341746][T24468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  736.341759][T24468] Call Trace:
[  736.341767][T24468]  <TASK>
[  736.341776][T24468]  dump_stack_lvl+0xe8/0x150
[  736.341814][T24468]  should_fail_ex+0x40c/0x560
[  736.341845][T24468]  should_failslab+0xa8/0x100
[  736.341875][T24468]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  736.341898][T24468]  ? __kmalloc_node_track_caller_noprof+0x2fd/0x730
[  736.341923][T24468]  ? _sctp_make_chunk+0x59/0x290
[  736.341942][T24468]  ? sctp_chunkify+0x5a/0x260
[  736.341959][T24468]  ? sctp_chunkify+0x5a/0x260
[  736.341984][T24468]  sctp_chunkify+0x5a/0x260
[  736.342006][T24468]  _sctp_make_chunk+0x122/0x290
[  736.342027][T24468]  sctp_make_datafrag_empty+0x12a/0x240
[  736.342058][T24468]  ? __kasan_kmalloc+0x93/0xb0
[  736.342085][T24468]  ? __pfx_sctp_make_datafrag_empty+0x10/0x10
[  736.342116][T24468]  ? sctp_datamsg_from_user+0x88/0xef0
[  736.342141][T24468]  ? sctp_datamsg_from_user+0x88/0xef0
[  736.342168][T24468]  ? sctp_auth_send_cid+0x69/0x250
[  736.342336][T24468]  sctp_datamsg_from_user+0x735/0xef0
[  736.342384][T24468]  sctp_sendmsg_to_asoc+0x13cf/0x1880
[  736.342415][T24468]  ? sctp_assoc_add_peer+0xcbd/0x1380
[  736.342454][T24468]  ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10
[  736.342476][T24468]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  736.342520][T24468]  ? __local_bh_enable_ip+0xd0/0x130
[  736.342544][T24468]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  736.342567][T24468]  ? security_sctp_bind_connect+0x7e/0x2c0
[  736.342598][T24468]  sctp_sendmsg+0x1bb5/0x2d00
[  736.342634][T24468]  ? __pfx_sctp_sendmsg+0x10/0x10
[  736.342662][T24468]  ? aa_sk_perm+0x6d5/0x900
[  736.342696][T24468]  ? __might_fault+0xaf/0x130
[  736.342722][T24468]  ? sock_rps_record_flow+0x19/0x350
[  736.342755][T24468]  ? inet_sendmsg+0x298/0x320
[  736.342784][T24468]  ? __pfx_inet_sendmsg+0x10/0x10
[  736.342810][T24468]  sock_sendmsg_nosec+0x10e/0x180
[  736.342840][T24468]  __sys_sendto+0x408/0x5a0
[  736.342869][T24468]  ? ksys_write+0x1e6/0x270
[  736.342901][T24468]  ? __pfx___sys_sendto+0x10/0x10
[  736.342927][T24468]  ? __mutex_unlock_slowpath+0x731/0x900
[  736.342977][T24468]  ? __pfx_ksys_write+0x10/0x10
[  736.343009][T24468]  __x64_sys_sendto+0xde/0x100
[  736.343038][T24468]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  736.343060][T24468]  do_syscall_64+0x174/0x580
[  736.343080][T24468]  ? trace_irq_disable+0x3b/0x140
[  736.343104][T24468]  ? clear_bhb_loop+0x40/0x90
[  736.343128][T24468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  736.343148][T24468] RIP: 0033:0x7fbece19de99
[  736.343167][T24468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  736.343184][T24468] RSP: 002b:00007fbecf0ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  736.343207][T24468] RAX: ffffffffffffffda RBX: 00007fbece425fa0 RCX: 00007fbece19de99
[  736.343221][T24468] RDX: 000000000000fffd RSI: 00002000000000c0 RDI: 0000000000000005
[  736.343234][T24468] RBP: 00007fbecf0ab090 R08: 0000200000000280 R09: 0000000000000010
[  736.343247][T24468] R10: 00000000000000c1 R11: 0000000000000246 R12: 0000000000000002
[  736.343259][T24468] R13: 00007fbece426038 R14: 00007fbece425fa0 R15: 00007ffe39d5f818
[  736.343290][T24468]  </TASK>
[  736.793505][T24475] IPv6: Can't replace route, no match found
[  736.855404][T24475] IPv6: Can't replace route, no match found
[  736.985426][T24478] x_tables: duplicate underflow at hook 2
[  737.098521][T24475] xt_NFQUEUE: number of total queues is 0
[  737.245152][T24458] lo speed is unknown, defaulting to 1000
[  737.390175][T24482] IPv6: Can't replace route, no match found
[  737.407008][T24482] IPv6: Can't replace route, no match found
[  737.415781][T24486] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5814'.
[  737.514352][T24482] x_tables: duplicate underflow at hook 2
[  737.561833][T24482] xt_NFQUEUE: number of total queues is 0
[  737.604789][T24465] dvmrp0: entered allmulticast mode
[  737.759615][T24502] xt_SECMARK: invalid mode: 4
[  738.092909][T24511] netlink: 'syz.0.5821': attribute type 11 has an invalid length.
[  738.184868][T24515] IPv6: Can't replace route, no match found
[  738.192550][T24515] IPv6: Can't replace route, no match found
[  738.214414][T24515] x_tables: duplicate underflow at hook 2
[  738.225736][T24515] xt_NFQUEUE: number of total queues is 0
[  738.883155][T24534] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5828'.
[  739.027815][T24539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5828'.
[  739.171634][T24540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5828'.
[  739.375021][T24549] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  739.455527][T24556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5837'.
[  739.578447][T24560] x_tables: duplicate underflow at hook 1
[  739.641259][T24560] netlink: 'syz.3.5838': attribute type 11 has an invalid length.
[  740.467649][T24597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5848'.
[  740.676690][T24597] 8021q: adding VLAN 0 to HW filter on device bond7
[  742.165132][T24651] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5858'.
[  742.618779][T24665] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  742.836200][T24673] net_ratelimit: 16 callbacks suppressed
[  742.836222][T24673] openvswitch: netlink: Message has 16 unknown bytes.
[  742.959542][T24679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5870'.
[  743.014938][T24679] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5870'.
[  743.076212][T24683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5870'.
[  743.367366][T24692] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5873'.
[  743.391341][T24683] team0: Port device team_slave_0 removed
[  743.432212][T24679] syzkaller1: entered promiscuous mode
[  743.452913][T24679] syzkaller1: entered allmulticast mode
[  744.320876][T24721] openvswitch: netlink: Key 32 has unexpected len 12 expected 2
[  745.909024][T24772] openvswitch: netlink: Key 32 has unexpected len 12 expected 2
[  746.167053][T24780] __nla_validate_parse: 4 callbacks suppressed
[  746.167075][T24780] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5904'.
[  746.460961][T24791] netlink: 'syz.4.5908': attribute type 1 has an invalid length.
[  746.717717][T24791] 8021q: adding VLAN 0 to HW filter on device bond17
[  746.827468][T24798] veth11: entered allmulticast mode
[  746.863418][T24798] bond17: (slave veth11): Enslaving as an active interface with an up link
[  747.543012][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  747.837343][T24830] FAULT_INJECTION: forcing a failure.
[  747.837343][T24830] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  747.908343][T24830] CPU: 1 UID: 0 PID: 24830 Comm: syz.0.5922 Not tainted syzkaller #0 PREEMPT(full) 
[  747.908374][T24830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  747.908386][T24830] Call Trace:
[  747.908395][T24830]  <TASK>
[  747.908405][T24830]  dump_stack_lvl+0xe8/0x150
[  747.908441][T24830]  should_fail_ex+0x40c/0x560
[  747.908470][T24830]  _copy_from_user+0x2d/0xb0
[  747.908500][T24830]  ___sys_recvmsg+0x173/0x5a0
[  747.908529][T24830]  ? __pfx____sys_recvmsg+0x10/0x10
[  747.908554][T24830]  ? __fget_files+0x2a/0x420
[  747.908596][T24830]  ? __fget_files+0x3a2/0x420
[  747.908630][T24830]  do_recvmmsg+0x31a/0x7f0
[  747.908658][T24830]  ? __pfx_do_recvmmsg+0x10/0x10
[  747.908690][T24830]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  747.908715][T24830]  ? __fget_files+0x3a2/0x420
[  747.908748][T24830]  __x64_sys_recvmmsg+0x198/0x250
[  747.908780][T24830]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  747.908810][T24830]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  747.908832][T24830]  do_syscall_64+0x174/0x580
[  747.908852][T24830]  ? trace_irq_disable+0x3b/0x140
[  747.908876][T24830]  ? clear_bhb_loop+0x40/0x90
[  747.908901][T24830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  747.908921][T24830] RIP: 0033:0x7fd93499de99
[  747.908939][T24830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  747.908954][T24830] RSP: 002b:00007fd9358d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  747.908975][T24830] RAX: ffffffffffffffda RBX: 00007fd934c25fa0 RCX: 00007fd93499de99
[  747.908987][T24830] RDX: 0000000000000001 RSI: 0000200000005b80 RDI: 0000000000000003
[  747.908998][T24830] RBP: 00007fd9358d7090 R08: 0000000000000000 R09: 0000000000000000
[  747.909009][T24830] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001
[  747.909020][T24830] R13: 00007fd934c26038 R14: 00007fd934c25fa0 R15: 00007fffcd301298
[  747.909050][T24830]  </TASK>
[  748.513737][T24843] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5926'.
[  748.603725][T24845] netlink: 'syz.1.5927': attribute type 6 has an invalid length.
[  748.639719][T24845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5927'.
[  749.211864][T24868] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5932'.
[  749.524771][T24873] netlink: 'syz.4.5933': attribute type 8 has an invalid length.
[  749.837468][T24882] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  750.096961][T24900] netlink: 'syz.0.5942': attribute type 1 has an invalid length.
[  750.268075][T24900] 8021q: adding VLAN 0 to HW filter on device bond8
[  751.005956][T24928] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5951'.
[  751.094084][T24931] openvswitch: netlink: Tunnel attr 5 has unexpected len 4 expected 0
[  751.134188][T24932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  751.154901][T24932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  751.166698][T24932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  751.177117][T24932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  751.184992][T24932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  751.414565][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  751.435432][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  751.446578][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  751.467815][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  751.476431][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  751.594550][T24943] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5956'.
[  751.724269][T24948] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5959'.
[  752.278851][T24964] IPv6: Can't replace route, no match found
[  752.285891][T24964] IPv6: Can't replace route, no match found
[  752.296800][T24964] x_tables: duplicate underflow at hook 2
[  752.318394][T24964] xt_NFQUEUE: number of total queues is 0
[  752.646745][T24972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5964'.
[  753.176288][T24990] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5970'.
[  753.458620][T24998] hsr0: entered promiscuous mode
[  753.534225][T24998] nbd: must specify a size in bytes for the device
[  753.541447][T24932] Bluetooth: hci2: command tx timeout
[  753.564822][T24998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5973'.
[  753.651081][T24998] hsr_slave_0: left promiscuous mode
[  753.669152][T24998] hsr_slave_1: left promiscuous mode
[  753.689048][T24998] hsr0 (unregistering): left promiscuous mode
[  753.892286][  T149] bond0: (slave netdevsim1): Releasing backup interface
[  754.080897][T24930] wlan0 speed is unknown, defaulting to 1000
[  754.107491][T24930] xfrm0 speed is unknown, defaulting to 1000
[  754.179246][T25009] IPv6: Can't replace route, no match found
[  754.234840][T25009] IPv6: Can't replace route, no match found
[  754.283197][T25009] x_tables: duplicate underflow at hook 2
[  754.329688][T25009] xt_NFQUEUE: number of total queues is 0
[  755.236094][T24930] lo speed is unknown, defaulting to 1000
[  755.357629][T25033] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  755.443697][  T149] vlan3: left allmulticast mode
[  755.455107][  T149] geneve0: left allmulticast mode
[  755.478353][  T149] vlan3: left promiscuous mode
[  755.506842][  T149] geneve0: left promiscuous mode
[  755.537991][  T149] bridge0: port 3(vlan3) entered disabled state
[  755.630931][T24932] Bluetooth: hci2: command tx timeout
[  755.641691][  T149] bridge_slave_1: left allmulticast mode
[  755.678424][T25039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  755.682654][  T149] bridge_slave_1: left promiscuous mode
[  755.735751][T25042] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5990'.
[  755.774647][  T149] bridge0: port 2(bridge_slave_1) entered disabled state
[  755.867498][  T149] bridge_slave_0: left allmulticast mode
[  755.889768][  T149] bridge_slave_0: left promiscuous mode
[  755.906117][  T149] bridge0: port 1(bridge_slave_0) entered disabled state
[  756.129799][T25048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5993'.
[  756.151504][T25050] IPv6: Can't replace route, no match found
[  756.175724][T25050] IPv6: Can't replace route, no match found
[  756.215611][T25050] x_tables: duplicate underflow at hook 2
[  756.282376][T25050] xt_NFQUEUE: number of total queues is 0
[  757.124197][  T149] bond6 (unregistering): (slave ipip0): Releasing backup interface
[  757.139342][  T149] ipip0 (unregistering): left promiscuous mode
[  757.292265][  T149] bond1 (unregistering): (slave bridge2): Releasing backup interface
[  757.319183][  T149] bridge2 (unregistering): left promiscuous mode
[  757.330037][  T149] bridge2 (unregistering): left allmulticast mode
[  757.389310][  T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  757.428249][  T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  757.470465][  T149] bond0 (unregistering): Released all slaves
[  757.499405][  T149] bond1 (unregistering): Released all slaves
[  757.577758][  T149] bond2 (unregistering): Released all slaves
[  757.600472][  T149] bond3 (unregistering): Released all slaves
[  757.621647][  T149] bond4 (unregistering): Released all slaves
[  757.655439][  T149] bond5 (unregistering): Released all slaves
[  757.679863][  T149] bond6 (unregistering): Released all slaves
[  757.700213][T24932] Bluetooth: hci2: command tx timeout
[  757.941156][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1
[  758.022731][T25079] batman_adv: batadv0: Adding interface: gretap1
[  758.080609][T25079] batman_adv: batadv0: Interface activated: gretap1
[  758.200709][  T149] tipc: Left network mode
[  758.709506][T25104] rdma_op ffff88802abdf1f0 conn xmit_rdma 0000000000000000
[  758.890974][T25096] tipc: Resetting bearer <eth:gre0>
[  758.962616][T25108] syzkaller0: entered promiscuous mode
[  758.971115][T25108] syzkaller0: entered allmulticast mode
[  759.047862][T25098] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  759.266086][T25097] tipc: Resetting bearer <eth:syzkaller0>
[  759.408814][T25097] tipc: Disabling bearer <eth:syzkaller0>
[  759.781025][T24932] Bluetooth: hci2: command tx timeout
[  759.919459][T25134] xt_SECMARK: invalid mode: 4
[  759.935206][T25133] IPv6: Can't replace route, no match found
[  759.975760][T25133] IPv6: Can't replace route, no match found
[  760.052445][T24930] bridge0: port 1(bridge_slave_0) entered blocking state
[  760.109729][T25133] x_tables: duplicate underflow at hook 2
[  760.128382][T24930] bridge0: port 1(bridge_slave_0) entered disabled state
[  760.168836][T24930] bridge_slave_0: entered allmulticast mode
[  760.179763][T25133] xt_NFQUEUE: number of total queues is 0
[  760.206335][T24930] bridge_slave_0: entered promiscuous mode
[  760.282088][T24930] bridge0: port 2(bridge_slave_1) entered blocking state
[  760.306123][T24930] bridge0: port 2(bridge_slave_1) entered disabled state
[  760.332274][T24930] bridge_slave_1: entered allmulticast mode
[  760.359493][T24930] bridge_slave_1: entered promiscuous mode
[  760.746364][T24930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  760.801621][T24930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  761.207220][T24930] team0: Port device team_slave_0 added
[  761.254816][T24930] team0: Port device team_slave_1 added
[  761.578913][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2
[  761.711142][T25162] ipip0: entered promiscuous mode
[  761.753476][T24930] batman_adv: batadv0: Adding interface: batadv_slave_0
[  761.766889][T24930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  761.797790][T24930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  761.857191][T24930] batman_adv: batadv0: Adding interface: batadv_slave_1
[  761.877953][T24930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  761.912183][T24930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  762.214830][T24930] hsr_slave_0: entered promiscuous mode
[  762.246317][T24930] hsr_slave_1: entered promiscuous mode
[  762.293415][T24930] debugfs: 'hsr0' already exists in 'hsr'
[  762.345164][T24930] Cannot create hsr debugfs directory
[  762.639408][T25177] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  762.899700][T25183] FAULT_INJECTION: forcing a failure.
[  762.899700][T25183] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  762.962887][T25183] CPU: 0 UID: 0 PID: 25183 Comm: syz.0.6029 Not tainted syzkaller #0 PREEMPT(full) 
[  762.962918][T25183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  762.962929][T25183] Call Trace:
[  762.962937][T25183]  <TASK>
[  762.962946][T25183]  dump_stack_lvl+0xe8/0x150
[  762.962981][T25183]  should_fail_ex+0x40c/0x560
[  762.963010][T25183]  _copy_from_user+0x2d/0xb0
[  762.963039][T25183]  sk_getsockopt+0x1d4/0x28b0
[  762.963078][T25183]  ? __pfx_sk_getsockopt+0x10/0x10
[  762.963125][T25183]  ? __might_fault+0xaf/0x130
[  762.963148][T25183]  ? __might_fault+0xaf/0x130
[  762.963188][T25183]  do_sock_getsockopt+0x2bd/0x7e0
[  762.963215][T25183]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  762.963249][T25183]  ? __fget_files+0x3a2/0x420
[  762.963273][T25183]  ? __fget_files+0x2a/0x420
[  762.963302][T25183]  __x64_sys_getsockopt+0x1a4/0x240
[  762.963327][T25183]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  762.963349][T25183]  do_syscall_64+0x174/0x580
[  762.963369][T25183]  ? trace_irq_disable+0x3b/0x140
[  762.963393][T25183]  ? clear_bhb_loop+0x40/0x90
[  762.963416][T25183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  762.963433][T25183] RIP: 0033:0x7fd93499de99
[  762.963452][T25183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  762.963469][T25183] RSP: 002b:00007fd9358d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  762.963492][T25183] RAX: ffffffffffffffda RBX: 00007fd934c25fa0 RCX: 00007fd93499de99
[  762.963507][T25183] RDX: 000000000000001c RSI: 0000000000000001 RDI: 0000000000000003
[  762.963519][T25183] RBP: 00007fd9358d7090 R08: 0000200000000b80 R09: 0000000000000000
[  762.963532][T25183] R10: 0000200000000a80 R11: 0000000000000246 R12: 0000000000000001
[  762.963545][T25183] R13: 00007fd934c26038 R14: 00007fd934c25fa0 R15: 00007fffcd301298
[  762.963576][T25183]  </TASK>
[  763.833299][T25200] openvswitch: netlink: Tunnel attr 4097 out of range max 16
[  764.517632][T25219] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  765.467595][T25244] SET target dimension over the limit!
[  766.014821][T25254] netlink: 'syz.2.6053': attribute type 3 has an invalid length.
[  767.126827][T25275] SET target dimension over the limit!
[  767.622511][T25280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6057'.
[  768.040819][  T149] hsr_slave_0: left promiscuous mode
[  768.095650][  T149] hsr_slave_1: left promiscuous mode
[  768.141224][  T149] batman_adv: batadv0: Removing interface: batadv_slave_0
[  768.218532][  T149] batman_adv: batadv0: Removing interface: batadv_slave_1
[  769.714041][  T149] team0 (unregistering): Port device team_slave_1 removed
[  769.772418][  T149] team0 (unregistering): Port device team_slave_0 removed
[  770.084533][T25339] Set syz1 is full, maxelem 2076 reached
[  770.982128][T24930] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  771.073419][T25368] netlink: 'syz.0.6081': attribute type 3 has an invalid length.
[  771.103359][T24930] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  771.117665][T25368] netlink: 'syz.0.6081': attribute type 16 has an invalid length.
[  771.128471][T24930] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  771.174935][T25368] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6081'.
[  771.218527][T24930] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  771.230788][T25371] SET target dimension over the limit!
[  771.294402][T24930] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  771.385176][T24930] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  771.467606][T24930] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  771.597370][T24930] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  771.723838][T25386] IPv6: Can't replace route, no match found
[  771.758126][T25386] IPv6: Can't replace route, no match found
[  771.890658][T25386] x_tables: duplicate underflow at hook 2
[  771.897825][T25395] openvswitch: netlink: Flow key attr not present in new flow.
[  771.939174][T25386] xt_NFQUEUE: number of total queues is 0
[  772.312850][T24930] 8021q: adding VLAN 0 to HW filter on device bond0
[  772.531121][T25415] netlink: 'syz.2.6094': attribute type 1 has an invalid length.
[  772.660509][T24930] 8021q: adding VLAN 0 to HW filter on device team0
[  772.842014][T25423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6095'.
[  772.887525][T25415] 8021q: adding VLAN 0 to HW filter on device bond8
[  772.958254][T25418] veth11: entered allmulticast mode
[  772.975159][T25418] bond8: (slave veth11): Enslaving as an active interface with an up link
[  773.015973][T25428] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  773.088807][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  773.096083][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  773.295494][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  773.302700][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  773.313667][T25438] netlink: 'syz.4.6098': attribute type 1 has an invalid length.
[  773.373051][T25435] batadv0: entered promiscuous mode
[  773.395477][T25435] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  773.519306][T25447] openvswitch: netlink: IP tunnel dst address not specified
[  773.651158][T25438] 8021q: adding VLAN 0 to HW filter on device bond18
[  773.840302][T25444] veth17: entered allmulticast mode
[  773.859682][T25444] bond18: (slave veth17): Enslaving as an active interface with an up link
[  775.180881][T25493] netlink: 'syz.4.6113': attribute type 39 has an invalid length.
[  775.398596][T25504] netlink: 'syz.3.6120': attribute type 3 has an invalid length.
[  775.471438][T25504] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6120'.
[  775.487483][T25506] netlink: 'syz.0.6119': attribute type 1 has an invalid length.
[  775.499877][T25504] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6120'.
[  775.569473][T25506] 8021q: adding VLAN 0 to HW filter on device bond9
[  775.616729][T25510] veth3: entered allmulticast mode
[  775.636348][T25510] bond9: (slave veth3): Enslaving as an active interface with an up link
[  775.736855][T24930] 8021q: adding VLAN 0 to HW filter on device batadv0
[  775.896925][T25514] FAULT_INJECTION: forcing a failure.
[  775.896925][T25514] name failslab, interval 1, probability 0, space 0, times 0
[  775.929657][T24930] veth0_vlan: entered promiscuous mode
[  775.946606][T25514] CPU: 0 UID: 0 PID: 25514 Comm: syz.3.6121 Not tainted syzkaller #0 PREEMPT(full) 
[  775.946639][T25514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  775.946651][T25514] Call Trace:
[  775.946660][T25514]  <TASK>
[  775.946669][T25514]  dump_stack_lvl+0xe8/0x150
[  775.946706][T25514]  should_fail_ex+0x40c/0x560
[  775.946735][T25514]  should_failslab+0xa8/0x100
[  775.946766][T25514]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  775.946789][T25514]  ? local_lock_release+0x9c/0x160
[  775.946820][T25514]  ? __alloc_skb+0x1d7/0x7a0
[  775.946845][T25514]  ? __alloc_skb+0x1d7/0x7a0
[  775.946877][T25514]  __alloc_skb+0x1d7/0x7a0
[  775.946908][T25514]  netlink_sendmsg+0x5d4/0xb40
[  775.946936][T25514]  ? __pfx_netlink_sendmsg+0x10/0x10
[  775.946956][T25514]  ? aa_sock_msg_perm+0xf1/0x1b0
[  775.946978][T25514]  ? __pfx_netlink_sendmsg+0x10/0x10
[  775.946994][T25514]  sock_sendmsg_nosec+0x13a/0x180
[  775.947018][T25514]  ____sys_sendmsg+0x54e/0x850
[  775.947038][T25514]  ? __pfx_____sys_sendmsg+0x10/0x10
[  775.947061][T25514]  ? import_iovec+0x73/0xa0
[  775.947090][T25514]  ___sys_sendmsg+0x2a5/0x360
[  775.947109][T25514]  ? __lock_acquire+0x683/0x2cf0
[  775.947138][T25514]  ? __pfx____sys_sendmsg+0x10/0x10
[  775.947186][T25514]  ? __fget_files+0x2a/0x420
[  775.947211][T25514]  ? __fget_files+0x3a2/0x420
[  775.947239][T25514]  __x64_sys_sendmsg+0x1b1/0x290
[  775.947285][T25514]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  775.947321][T25514]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.947342][T25514]  do_syscall_64+0x174/0x580
[  775.947365][T25514]  ? trace_irq_disable+0x3b/0x140
[  775.947390][T25514]  ? clear_bhb_loop+0x40/0x90
[  775.947414][T25514]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.947434][T25514] RIP: 0033:0x7f9961f9de99
[  775.947455][T25514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  775.947472][T25514] RSP: 002b:00007f9962ef9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  775.947494][T25514] RAX: ffffffffffffffda RBX: 00007f9962225fa0 RCX: 00007f9961f9de99
[  775.947508][T25514] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003
[  775.947522][T25514] RBP: 00007f9962ef9090 R08: 0000000000000000 R09: 0000000000000000
[  775.947534][T25514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  775.947546][T25514] R13: 00007f9962226038 R14: 00007f9962225fa0 R15: 00007ffc2e7645d8
[  775.947577][T25514]  </TASK>
[  776.218429][T24930] veth1_vlan: entered promiscuous mode
[  776.251199][T24930] veth0_macvtap: entered promiscuous mode
[  776.261600][T24930] veth1_macvtap: entered promiscuous mode
[  776.283296][T24930] batman_adv: batadv0: Interface activated: batadv_slave_0
[  776.295395][T24930] batman_adv: batadv0: Interface activated: batadv_slave_1
[  776.545531][  T149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  776.579489][  T149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  776.682302][  T149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  776.774913][  T149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  776.805644][T25529] xt_TCPMSS: Only works on TCP SYN packets
[  777.163685][T16684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  777.223393][T16684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  777.343437][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  777.375776][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  777.480730][T25545] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  777.536297][T25546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6132'.
[  777.581739][T25545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6132'.
[  777.610569][T25546] netlink: 'syz.4.6132': attribute type 1 has an invalid length.
[  777.696077][T25546] netlink: 'syz.4.6132': attribute type 1 has an invalid length.
[  777.745051][T25546] netlink: 'syz.4.6132': attribute type 1 has an invalid length.
[  777.747799][T25554] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5947'.
[  777.754046][T25546] netlink: 'syz.4.6132': attribute type 1 has an invalid length.
[  777.771482][T25555] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6135'.
[  777.821020][T25546] netlink: 'syz.4.6132': attribute type 1 has an invalid length.
[  777.829816][T25546] netlink: 'syz.4.6132': attribute type 1 has an invalid length.
[  777.838671][T25546] netlink: 'syz.4.6132': attribute type 1 has an invalid length.
[  777.848465][T25546] netlink: 'syz.4.6132': attribute type 1 has an invalid length.
[  777.859416][T25546] netlink: 'syz.4.6132': attribute type 1 has an invalid length.
[  777.925880][T25546] netlink: 'syz.4.6132': attribute type 1 has an invalid length.
[  777.958149][T25543] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  778.127700][T25562] openvswitch: netlink: IP tunnel dst address not specified
[  779.445205][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  779.484967][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  779.499692][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  779.516742][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  779.526294][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  779.965884][T25599] syzkaller0: entered promiscuous mode
[  780.000606][T25599] syzkaller0: entered allmulticast mode
[  780.613610][T25610] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6149'.
[  781.635804][ T5623] Bluetooth: hci5: command tx timeout
[  781.776674][T25636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  782.191519][T25587] wlan0 speed is unknown, defaulting to 1000
[  782.199345][T25587] xfrm0 speed is unknown, defaulting to 1000
[  782.382929][T25665] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6162'.
[  782.646541][T25673] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  783.032851][T25587] lo speed is unknown, defaulting to 1000
[  783.051484][T25681] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6169'.
[  783.304556][T25689] netlink: zone id is out of range
[  783.328641][T25692] validate_nla: 80 callbacks suppressed
[  783.328741][T25692] netlink: 'syz.4.6173': attribute type 1 has an invalid length.
[  783.344827][T25689] netlink: zone id is out of range
[  783.364961][T25689] netlink: zone id is out of range
[  783.371141][T25689] netlink: zone id is out of range
[  783.376344][T25689] netlink: zone id is out of range
[  783.384518][T25689] netlink: zone id is out of range
[  783.390893][T25689] netlink: zone id is out of range
[  783.398878][T25689] netlink: zone id is out of range
[  783.405475][T25689] netlink: zone id is out of range
[  783.412937][T25689] netlink: zone id is out of range
[  783.631863][T25692] 8021q: adding VLAN 0 to HW filter on device bond19
[  783.710162][ T5623] Bluetooth: hci5: command tx timeout
[  783.889215][T25695] veth19: entered allmulticast mode
[  783.959345][T25695] bond19: (slave veth19): Enslaving as an active interface with an up link
[  784.204829][T25705] syzkaller0: entered promiscuous mode
[  784.278153][T25705] syzkaller0: entered allmulticast mode
[  784.326239][T25711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6178'.
[  785.145670][T25587] bridge0: port 1(bridge_slave_0) entered blocking state
[  785.182079][T25587] bridge0: port 1(bridge_slave_0) entered disabled state
[  785.205528][T25587] bridge_slave_0: entered allmulticast mode
[  785.243898][T25587] bridge_slave_0: entered promiscuous mode
[  785.295027][T25742] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6190'.
[  785.352257][T25587] bridge0: port 2(bridge_slave_1) entered blocking state
[  785.394122][T25587] bridge0: port 2(bridge_slave_1) entered disabled state
[  785.424808][T25587] bridge_slave_1: entered allmulticast mode
[  785.454837][T25587] bridge_slave_1: entered promiscuous mode
[  785.621584][T25751] ipip0: entered promiscuous mode
[  785.649087][T25587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  785.683497][T25587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  785.782627][ T5623] Bluetooth: hci5: command tx timeout
[  785.805546][T25587] team0: Port device team_slave_0 added
[  785.822712][T25587] team0: Port device team_slave_1 added
[  785.900571][T25587] batman_adv: batadv0: Adding interface: batadv_slave_0
[  785.933764][T25587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  786.062099][T25587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  786.120465][T25587] batman_adv: batadv0: Adding interface: batadv_slave_1
[  786.153914][T25587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  786.327050][T25587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  786.504816][T25587] hsr_slave_0: entered promiscuous mode
[  786.511789][T25587] hsr_slave_1: entered promiscuous mode
[  786.565792][T25769] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6201'.
[  787.325675][T25798] netlink: 'syz.0.6211': attribute type 8 has an invalid length.
[  787.603039][T25808] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6214'.
[  787.861417][ T5623] Bluetooth: hci5: command tx timeout
[  788.167593][T25827] netlink: 'syz.4.6220': attribute type 1 has an invalid length.
[  788.177205][T25828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6221'.
[  788.234842][T25828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6221'.
[  788.316074][T25827] bond20: entered promiscuous mode
[  788.330864][T25827] 8021q: adding VLAN 0 to HW filter on device bond20
[  788.404362][T25837] net_ratelimit: 15 callbacks suppressed
[  788.404384][T25837] openvswitch: netlink: IPv4 tun info is not correct
[  788.825881][T25847] netlink: 'syz.2.6226': attribute type 1 has an invalid length.
[  789.089850][T25827] bond20: (slave bridge7): making interface the new active one
[  789.105824][T25827] bridge7: entered promiscuous mode
[  789.113240][T25827] bond20: (slave bridge7): Enslaving as an active interface with an up link
[  789.303596][T25847] 8021q: adding VLAN 0 to HW filter on device bond9
[  789.393078][T25848] veth13: entered allmulticast mode
[  789.406259][T25848] bond9: (slave veth13): Enslaving as an active interface with an up link
[  789.432668][T25851] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6227'.
[  789.621010][T25855] block nbd4: server does not support multiple connections per device.
[  789.637920][T25855] block nbd4: shutting down sockets
[  790.229889][T25871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6235'.
[  790.269403][T25871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6235'.
[  791.116448][T25887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6240'.
[  791.395306][T25587] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  791.445528][T25587] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  791.486431][T25587] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  791.514867][T25587] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  791.524097][T25587] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  791.601306][T25587] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  791.664269][T25587] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  791.726838][T25587] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  791.857928][T25910] openvswitch: netlink: IP tunnel dst address not specified
[  791.892682][T25910] FAULT_INJECTION: forcing a failure.
[  791.892682][T25910] name failslab, interval 1, probability 0, space 0, times 0
[  791.923055][T25910] CPU: 1 UID: 0 PID: 25910 Comm: syz.0.6246 Not tainted syzkaller #0 PREEMPT(full) 
[  791.923085][T25910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  791.923096][T25910] Call Trace:
[  791.923105][T25910]  <TASK>
[  791.923115][T25910]  dump_stack_lvl+0xe8/0x150
[  791.923155][T25910]  should_fail_ex+0x40c/0x560
[  791.923186][T25910]  should_failslab+0xa8/0x100
[  791.923217][T25910]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  791.923241][T25910]  ? local_lock_release+0x9c/0x160
[  791.923274][T25910]  ? __alloc_skb+0x1d7/0x7a0
[  791.923299][T25910]  ? __alloc_skb+0x1d7/0x7a0
[  791.923332][T25910]  __alloc_skb+0x1d7/0x7a0
[  791.923362][T25910]  netlink_ack+0x136/0xb30
[  791.923382][T25910]  ? __pfx_genl_rcv_msg+0x10/0x10
[  791.923423][T25910]  netlink_rcv_skb+0x2a4/0x4a0
[  791.923444][T25910]  ? __pfx_genl_rcv_msg+0x10/0x10
[  791.923470][T25910]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  791.923505][T25910]  ? down_read+0x2be/0x330
[  791.923535][T25910]  genl_rcv+0x28/0x40
[  791.923558][T25910]  netlink_unicast+0x7bb/0x940
[  791.923597][T25910]  netlink_sendmsg+0x813/0xb40
[  791.923627][T25910]  ? __pfx_netlink_sendmsg+0x10/0x10
[  791.923652][T25910]  ? aa_sock_msg_perm+0xf1/0x1b0
[  791.923679][T25910]  ? __pfx_netlink_sendmsg+0x10/0x10
[  791.923698][T25910]  sock_sendmsg_nosec+0x13a/0x180
[  791.923727][T25910]  ____sys_sendmsg+0x54e/0x850
[  791.923753][T25910]  ? __pfx_____sys_sendmsg+0x10/0x10
[  791.923781][T25910]  ? import_iovec+0x73/0xa0
[  791.923812][T25910]  ___sys_sendmsg+0x2a5/0x360
[  791.923831][T25910]  ? __lock_acquire+0x683/0x2cf0
[  791.923869][T25910]  ? __pfx____sys_sendmsg+0x10/0x10
[  791.923923][T25910]  ? __fget_files+0x2a/0x420
[  791.923947][T25910]  ? __fget_files+0x3a2/0x420
[  791.923981][T25910]  __x64_sys_sendmsg+0x1b1/0x290
[  791.924004][T25910]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  791.924041][T25910]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  791.924063][T25910]  do_syscall_64+0x174/0x580
[  791.924086][T25910]  ? trace_irq_disable+0x3b/0x140
[  791.924111][T25910]  ? clear_bhb_loop+0x40/0x90
[  791.924135][T25910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  791.924154][T25910] RIP: 0033:0x7fd93499de99
[  791.924173][T25910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  791.924190][T25910] RSP: 002b:00007fd9358d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  791.924212][T25910] RAX: ffffffffffffffda RBX: 00007fd934c25fa0 RCX: 00007fd93499de99
[  791.924226][T25910] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003
[  791.924239][T25910] RBP: 00007fd9358d7090 R08: 0000000000000000 R09: 0000000000000000
[  791.924251][T25910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  791.924262][T25910] R13: 00007fd934c26038 R14: 00007fd934c25fa0 R15: 00007fffcd301298
[  791.924298][T25910]  </TASK>
[  792.217505][T25587] 8021q: adding VLAN 0 to HW filter on device bond0
[  792.239047][T25587] 8021q: adding VLAN 0 to HW filter on device team0
[  792.326730][T16679] bridge0: port 1(bridge_slave_0) entered blocking state
[  792.333947][T16679] bridge0: port 1(bridge_slave_0) entered forwarding state
[  792.344787][T16679] bridge0: port 2(bridge_slave_1) entered blocking state
[  792.352005][T16679] bridge0: port 2(bridge_slave_1) entered forwarding state
[  792.557022][T25918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6248'.
[  792.651516][T25918] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  792.886786][T25927] vlan2: entered promiscuous mode
[  793.345630][T25939] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6254'.
[  793.560989][T25945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6256'.
[  793.600138][T25945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6256'.
[  794.548085][T25587] 8021q: adding VLAN 0 to HW filter on device batadv0
[  794.557632][T25980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6265'.
[  794.591510][T25980] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6265'.
[  794.626443][T25978] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  794.805422][T25989] netlink: 'syz.1.6268': attribute type 1 has an invalid length.
[  794.868340][T25992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6269'.
[  794.874237][T25989] 8021q: adding VLAN 0 to HW filter on device bond1
[  794.885617][T25587] veth0_vlan: entered promiscuous mode
[  794.993579][T25993] veth3: entered allmulticast mode
[  795.016828][T25993] bond1: (slave veth3): Enslaving as an active interface with an up link
[  795.042180][T25587] veth1_vlan: entered promiscuous mode
[  795.126149][T25587] veth0_macvtap: entered promiscuous mode
[  795.155692][T25587] veth1_macvtap: entered promiscuous mode
[  795.204035][T25587] batman_adv: batadv0: Interface activated: batadv_slave_0
[  795.259551][T25587] batman_adv: batadv0: Interface activated: batadv_slave_1
[  795.282171][ T1156] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  795.294641][ T1156] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  795.312472][T26001] gretap0: entered promiscuous mode
[  795.322971][T26001] vlan2: entered promiscuous mode
[  795.352671][ T1156] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  795.362808][ T1156] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  795.716121][T26005] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6274'.
[  795.754205][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  795.769826][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  795.893590][   T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  795.935118][   T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  796.108658][T26014] FAULT_INJECTION: forcing a failure.
[  796.108658][T26014] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  796.171838][T26014] CPU: 0 UID: 0 PID: 26014 Comm: syz.1.6277 Not tainted syzkaller #0 PREEMPT(full) 
[  796.171870][T26014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  796.171882][T26014] Call Trace:
[  796.171890][T26014]  <TASK>
[  796.171899][T26014]  dump_stack_lvl+0xe8/0x150
[  796.171935][T26014]  should_fail_ex+0x40c/0x560
[  796.171960][T26014]  _copy_from_iter+0x1d3/0x1660
[  796.171984][T26014]  ? kmem_cache_alloc_node_noprof+0x1d1/0x610
[  796.172009][T26014]  ? rcu_is_watching+0x15/0xb0
[  796.172037][T26014]  ? trace_kmem_cache_alloc+0x29/0xe0
[  796.172062][T26014]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  796.172082][T26014]  ? __pfx__copy_from_iter+0x10/0x10
[  796.172105][T26014]  ? __alloc_skb+0x276/0x7a0
[  796.172131][T26014]  ? __alloc_skb+0x276/0x7a0
[  796.172162][T26014]  ? netlink_sendmsg+0x650/0xb40
[  796.172185][T26014]  ? skb_put+0x112/0x210
[  796.172215][T26014]  netlink_sendmsg+0x6c0/0xb40
[  796.172244][T26014]  ? __pfx_netlink_sendmsg+0x10/0x10
[  796.172269][T26014]  ? aa_sock_msg_perm+0xf1/0x1b0
[  796.172295][T26014]  ? __pfx_netlink_sendmsg+0x10/0x10
[  796.172313][T26014]  sock_sendmsg_nosec+0x13a/0x180
[  796.172342][T26014]  ____sys_sendmsg+0x54e/0x850
[  796.172368][T26014]  ? __pfx_____sys_sendmsg+0x10/0x10
[  796.172396][T26014]  ? import_iovec+0x73/0xa0
[  796.172433][T26014]  ___sys_sendmsg+0x2a5/0x360
[  796.172452][T26014]  ? __lock_acquire+0x683/0x2cf0
[  796.172482][T26014]  ? __pfx____sys_sendmsg+0x10/0x10
[  796.172535][T26014]  ? __fget_files+0x2a/0x420
[  796.172559][T26014]  ? __fget_files+0x3a2/0x420
[  796.172590][T26014]  __x64_sys_sendmsg+0x1b1/0x290
[  796.172612][T26014]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  796.172649][T26014]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  796.172669][T26014]  do_syscall_64+0x174/0x580
[  796.172690][T26014]  ? trace_irq_disable+0x3b/0x140
[  796.172715][T26014]  ? clear_bhb_loop+0x40/0x90
[  796.172739][T26014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  796.172759][T26014] RIP: 0033:0x7f08e539de99
[  796.172777][T26014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  796.172794][T26014] RSP: 002b:00007f08e6316028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  796.172815][T26014] RAX: ffffffffffffffda RBX: 00007f08e5625fa0 RCX: 00007f08e539de99
[  796.172828][T26014] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005
[  796.172841][T26014] RBP: 00007f08e6316090 R08: 0000000000000000 R09: 0000000000000000
[  796.172853][T26014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  796.172865][T26014] R13: 00007f08e5626038 R14: 00007f08e5625fa0 R15: 00007fff172e38b8
[  796.172896][T26014]  </TASK>
[  796.782560][T24932] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  796.824324][T24932] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  796.835342][T24932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  796.846877][T24932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  796.856078][T24932] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  798.351921][T26065] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6293'.
[  798.567252][T26072] xt_hashlimit: size too large, truncated to 1048576
[  798.643560][T26075] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6296'.
[  798.958313][T16684] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  798.980074][T24932] Bluetooth: hci3: command tx timeout
[  799.008237][T16684] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  799.020518][T16684] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  799.133915][T26081] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6298'.
[  799.205480][T26023] wlan0 speed is unknown, defaulting to 1000
[  799.344227][T16684] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  799.421868][T16684] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  799.459089][T16684] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  799.754052][T26023] xfrm0 speed is unknown, defaulting to 1000
[  800.076055][T16684] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  800.138050][T16684] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  800.200078][T16684] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  800.648699][T26112] netlink: 520 bytes leftover after parsing attributes in process `syz.0.6311'.
[  800.662576][T16684] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  800.714068][T16684] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  800.776456][T16684] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  800.958378][T26023] lo speed is unknown, defaulting to 1000
[  801.060967][T24932] Bluetooth: hci3: command tx timeout
[  801.609223][T26133] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6317'.
[  801.928082][T26140] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6320'.
[  801.984911][T26143] netlink: 'syz.0.6321': attribute type 1 has an invalid length.
[  802.115307][T26143] 8021q: adding VLAN 0 to HW filter on device bond10
[  802.417554][T26145] veth5: entered allmulticast mode
[  802.467295][T26145] bond10: (slave veth5): Enslaving as an active interface with an up link
[  802.784758][T26151] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6322'.
[  802.829739][T26163] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6323'.
[  802.876049][T26151] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6322'.
[  802.895361][T26151] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6322'.
[  803.140534][T24932] Bluetooth: hci3: command tx timeout
[  803.418375][T26151] __nla_validate_parse: 4 callbacks suppressed
[  803.418400][T26151] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6322'.
[  803.472032][T26151] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6322'.
[  803.511423][T26151] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6322'.
[  803.560290][T26151] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6322'.
[  803.601979][T26151] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6322'.
[  803.615365][T26174] xt_hashlimit: max too large, truncated to 1048576
[  803.633199][T26151] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6322'.
[  803.679308][T26151] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6322'.
[  803.733445][T26151] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6322'.
[  803.806726][T26151] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6322'.
[  803.832191][T26151] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6322'.
[  803.973975][T26151] bridge0: port 2(bridge_slave_1) entered disabled state
[  803.981720][T26151] bridge0: port 1(bridge_slave_0) entered disabled state
[  804.578344][ T7295] lo speed is unknown, defaulting to 1000
[  804.620533][ T7295] syz2: Port: 1 Link DOWN
[  804.804152][T16684] bridge_slave_1: left allmulticast mode
[  804.841002][T16684] bridge_slave_1: left promiscuous mode
[  804.876620][T16684] bridge0: port 2(bridge_slave_1) entered disabled state
[  804.959383][T16684] bridge_slave_0: left allmulticast mode
[  804.986503][T16684] bridge_slave_0: left promiscuous mode
[  805.023931][T16684] bridge0: port 1(bridge_slave_0) entered disabled state
[  805.179477][T16684] pim6reg: left allmulticast mode
[  805.224343][T24932] Bluetooth: hci3: command tx timeout
[  805.485234][T16684] tipc: Resetting bearer <eth:gre0>
[  805.525870][T26214] netlink: 'syz.2.6335': attribute type 2 has an invalid length.
[  806.933316][T16684] tipc: Disabling bearer <eth:gre0>
[  807.254803][T16684] bond2 (unregistering): (slave bridge1): Releasing backup interface
[  807.297442][T16684] bridge1 (unregistering): left promiscuous mode
[  807.355213][T16684] bond6 (unregistering): (slave bridge2): Releasing backup interface
[  807.367757][T16684] bridge2 (unregistering): left promiscuous mode
[  807.387293][T16684] bridge2 (unregistering): left allmulticast mode
[  807.447219][T16684] bond10 (unregistering): (slave bridge3): Releasing backup interface
[  807.461803][T26252] netlink: 'syz.1.6345': attribute type 3 has an invalid length.
[  807.481018][T16684] bridge3 (unregistering): left promiscuous mode
[  807.497615][T16684] bridge3 (unregistering): left allmulticast mode
[  807.535040][T16684] bond12 (unregistering): (slave bridge5): Releasing backup interface
[  807.620877][T16684] bond13 (unregistering): (slave bridge6): Releasing backup interface
[  807.656112][T16684] bond20 (unregistering): (slave bridge7): Releasing backup interface
[  807.665234][T16684] bridge7 (unregistering): left promiscuous mode
[  807.685543][T16684] bond7 (unregistering): (slave bond0): Releasing backup interface
[  807.698755][T16684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  807.742361][T16684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  807.756226][T16684] bond0 (unregistering): Released all slaves
[  807.798390][T16684] bond1 (unregistering): Released all slaves
[  807.842540][T16684] bond2 (unregistering): (slave bond3): Releasing backup interface
[  807.875534][T16684] bond3 (unregistering): left promiscuous mode
[  807.897137][T16684] bond2 (unregistering): Released all slaves
[  807.952287][T16684] bond3 (unregistering): Released all slaves
[  808.008412][T16684] bond4 (unregistering): (slave bond5): Releasing backup interface
[  808.046732][T16684] bond5 (unregistering): left promiscuous mode
[  808.061155][T16684] bond4 (unregistering): Released all slaves
[  808.084463][T16684] bond5 (unregistering): Released all slaves
[  808.173869][T16684] bond6 (unregistering): Released all slaves
[  808.252758][T16684] bond7 (unregistering): Released all slaves
[  808.328885][T16684] bond8 (unregistering): Released all slaves
[  808.401116][T16684] bond9 (unregistering): Released all slaves
[  808.453308][T16684] bond10 (unregistering): Released all slaves
[  808.533068][T16684] bond11 (unregistering): Released all slaves
[  808.587217][T16684] bond12 (unregistering): Released all slaves
[  808.726577][T16684] bond13 (unregistering): Released all slaves
[  808.788688][T16684] bond14 (unregistering): Released all slaves
[  808.819352][T16684] bond15 (unregistering): Released all slaves
[  808.866819][T16684] bond16 (unregistering): Released all slaves
[  808.977231][T16684] bond17 (unregistering): (slave veth11): Releasing backup interface
[  808.993540][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  809.004329][T26259] xt_hashlimit: size too large, truncated to 1048576
[  809.012773][T16684] bond17 (unregistering): Released all slaves
[  809.041703][T16684] bond18 (unregistering): (slave veth17): Releasing backup interface
[  809.052557][T16684] bond18 (unregistering): Released all slaves
[  809.128965][T16684] bond19 (unregistering): (slave veth19): Releasing backup interface
[  809.231082][T26264] __nla_validate_parse: 22 callbacks suppressed
[  809.231107][T26264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6348'.
[  809.246842][T16684] bond19 (unregistering): Released all slaves
[  809.325877][T16684] bond20 (unregistering): Released all slaves
[  809.599082][T26232] vlan2: entered allmulticast mode
[  809.667423][T26232] bridge8: entered allmulticast mode
[  809.763195][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1
[  810.242806][T16684] tipc: Left network mode
[  810.545936][T26284] xt_hashlimit: size too large, truncated to 1048576
[  810.767477][T26023] bridge0: port 1(bridge_slave_0) entered blocking state
[  810.827685][T26296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6354'.
[  810.835444][T26023] bridge0: port 1(bridge_slave_0) entered disabled state
[  810.893614][T26023] bridge_slave_0: entered allmulticast mode
[  810.942651][T26023] bridge_slave_0: entered promiscuous mode
[  811.011602][T26023] bridge0: port 2(bridge_slave_1) entered blocking state
[  811.049045][T26023] bridge0: port 2(bridge_slave_1) entered disabled state
[  811.093418][T26023] bridge_slave_1: entered allmulticast mode
[  811.127718][T26023] bridge_slave_1: entered promiscuous mode
[  811.958572][T26320] netlink: 'syz.3.6360': attribute type 1 has an invalid length.
[  812.061431][T26023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  812.074682][T26320] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6360'.
[  812.117289][T26023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  812.130284][T26326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6362'.
[  812.135570][T26327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6360'.
[  812.158139][T26326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6362'.
[  812.180262][T26320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6360'.
[  812.338939][T26320] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6360'.
[  812.396350][T26023] team0: Port device team_slave_0 added
[  812.506302][T26327] bond1: option ad_actor_sys_prio: invalid value (0)
[  812.515476][T26327] bond1: option ad_actor_sys_prio: allowed values 1 - 65535
[  812.589798][T26327] bond1 (unregistering): Released all slaves
[  812.817148][T26344] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6365'.
[  812.863527][T26320] netlink: 120 bytes leftover after parsing attributes in process `syz.3.6360'.
[  812.882569][T26023] team0: Port device team_slave_1 added
[  812.958663][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2
[  813.102426][T26338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  813.216522][T26023] batman_adv: batadv0: Adding interface: batadv_slave_0
[  813.249158][T26023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  813.283193][T26023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  813.344750][T26023] batman_adv: batadv0: Adding interface: batadv_slave_1
[  813.360533][T26023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  813.508703][T26023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  814.356746][T26023] hsr_slave_0: entered promiscuous mode
[  814.385609][T26023] hsr_slave_1: entered promiscuous mode
[  814.408605][T26023] debugfs: 'hsr0' already exists in 'hsr'
[  814.415633][T26023] Cannot create hsr debugfs directory
[  814.478531][T26373] erspan1: entered allmulticast mode
[  814.589297][T26375] vlan2: entered promiscuous mode
[  814.659114][T26377] smc: net device vlan1 applied user defined pnetid SYZ2
[  815.177496][T26405] __nla_validate_parse: 1 callbacks suppressed
[  815.177518][T26405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6381'.
[  815.434351][T26411] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6382'.
[  815.474731][T26405] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  815.508864][T26405] batman_adv: batadv0: Removing interface: batadv_slave_1
[  815.574464][T26410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  815.659459][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3
[  816.155065][T26421] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6385'.
[  816.972276][T26431] vlan2: entered promiscuous mode
[  817.020159][T26431] bridge0: entered promiscuous mode
[  818.161778][T26475] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6398'.
[  818.392997][T26474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  818.845442][T26487] syzkaller0: entered promiscuous mode
[  818.872624][T26487] syzkaller0: entered allmulticast mode
[  819.447432][T26504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6406'.
[  819.511329][T26504] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  819.534396][T26508] netlink: 'syz.3.6406': attribute type 10 has an invalid length.
[  819.745527][T26504] batman_adv: batadv0: Removing interface: batadv_slave_1
[  820.201783][T26515] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6409'.
[  820.556897][T26528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6411'.
[  820.610147][T26525] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  820.614171][T26529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6412'.
[  820.637091][T26525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6411'.
[  820.661173][T26528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6411'.
[  820.933928][T26528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6411'.
[  821.009392][T26528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6411'.
[  821.215937][T10266] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  821.274739][T10266] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  821.382604][T26536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6413'.
[  821.673299][T26547] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6415'.
[  821.984488][T26543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  822.096292][T10266] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  822.143194][T10266] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  831.117171][T16684] hsr_slave_0: left promiscuous mode
[  831.124204][T16684] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  831.131871][T16684] batadv0: mtu less than device minimum
[  831.138306][T16684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  831.154282][T16684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  831.166319][T16684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  831.178298][T16684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  831.192985][T16684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  831.204918][T16684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  831.216866][T16684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  831.229077][T16684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  831.241091][T16684] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  831.348089][T16684] batman_adv: batadv0: Removing interface: batadv_slave_0
[  831.362946][T16684] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  831.404916][T16684] batman_adv: batadv0: Removing interface: batadv_slave_1
[  831.414024][T16684] batman_adv: batadv0: Interface deactivated: dummy0
[  831.425218][T16684] batman_adv: batadv0: Removing interface: dummy0
[  831.443160][T16684] veth0_macvtap: left promiscuous mode
[  831.448769][T16684] veth1_vlan: left promiscuous mode
[  831.454726][T16684] veth0_vlan: left promiscuous mode
[  831.520530][T26638] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6427'.
[  831.887124][T16684] team0 (unregistering): Port device team_slave_1 removed
[  832.154882][T26556] syzkaller0: entered promiscuous mode
[  832.169640][T26556] syzkaller0: entered allmulticast mode
[  832.238570][T26593] bridge_slave_0: left allmulticast mode
[  832.257542][T26593] bridge_slave_0: left promiscuous mode
[  832.277371][T26593] bridge0: port 1(bridge_slave_0) entered disabled state
[  832.288776][T26593] bridge_slave_1: left allmulticast mode
[  832.295099][T26593] bridge_slave_1: left promiscuous mode
[  832.301511][T26593] bridge0: port 2(bridge_slave_1) entered disabled state
[  832.323769][T26593] bond0: (slave bond_slave_0): Releasing backup interface
[  832.337893][T26593] bond0: (slave bond_slave_1): Releasing backup interface
[  832.368921][T26593] team0: Port device team_slave_0 removed
[  832.382831][T26593] team0: Port device team_slave_1 removed
[  832.389200][T26593] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  832.397263][T26593] batman_adv: batadv0: Removing interface: batadv_slave_0
[  832.428268][T26598] team0: Port device xfrm0 added
[  832.438362][T26600] tipc: Started in network mode
[  832.443731][T26600] tipc: Node identity ee41c379d7f3, cluster identity 4711
[  832.453114][T26600] tipc: Enabled bearer <eth:team0>, priority 0
[  833.002540][T26653] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6430'.
[  833.126786][T26655] netlink: 16170 bytes leftover after parsing attributes in process `syz.3.6431'.
[  833.381495][T26672] netlink: 67 bytes leftover after parsing attributes in process `syz.3.6434'.
[  837.449806][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  837.474760][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  837.489374][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  837.506455][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  837.514927][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  839.623195][ T5623] Bluetooth: hci1: command tx timeout
[  841.291744][T26023] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  841.301517][T26023] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  841.322268][ T7295] tipc: Node number set to 968016761
[  841.637277][T26023] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  841.683093][T26777] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6439'.
[  841.707382][ T5623] Bluetooth: hci1: command tx timeout
[  841.711057][T26023] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  841.827242][T26023] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  841.857597][T26771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  841.886209][T26023] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  841.935193][T26023] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  842.070121][T26023] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  842.336987][T26738] wlan0 speed is unknown, defaulting to 1000
[  842.387952][T26023] 8021q: adding VLAN 0 to HW filter on device bond0
[  842.445433][T26738] xfrm0 speed is unknown, defaulting to 1000
[  842.511830][T26023] 8021q: adding VLAN 0 to HW filter on device team0
[  842.606534][T10266] bridge0: port 1(bridge_slave_0) entered blocking state
[  842.613816][T10266] bridge0: port 1(bridge_slave_0) entered forwarding state
[  842.643966][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  842.651202][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  842.801331][T26807] syzkaller0: entered promiscuous mode
[  842.811369][T26807] syzkaller0: entered allmulticast mode
[  842.823920][T26807] netlink: 'syz.3.6446': attribute type 3 has an invalid length.
[  842.848539][T26807] netlink: 'syz.3.6446': attribute type 1 has an invalid length.
[  842.864209][T26807] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6446'.
[  842.875201][T26807] NCSI netlink: No device for ifindex 0
[  843.126561][T26738] lo speed is unknown, defaulting to 1000
[  843.234650][T26817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6448'.
[  843.354069][T26821] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6448'.
[  843.379351][T26823] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6450'.
[  843.780295][ T5623] Bluetooth: hci1: command tx timeout
[  843.785915][T26835] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6453'.
[  844.042387][T26834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  844.275903][T26023] 8021q: adding VLAN 0 to HW filter on device batadv0
[  844.855285][T26738] bridge0: port 1(bridge_slave_0) entered blocking state
[  844.873261][T26738] bridge0: port 1(bridge_slave_0) entered disabled state
[  844.897285][T26738] bridge_slave_0: entered allmulticast mode
[  844.933059][T26738] bridge_slave_0: entered promiscuous mode
[  844.966939][T26738] bridge0: port 2(bridge_slave_1) entered blocking state
[  845.003832][T26738] bridge0: port 2(bridge_slave_1) entered disabled state
[  845.041872][T26738] bridge_slave_1: entered allmulticast mode
[  845.086190][T26738] bridge_slave_1: entered promiscuous mode
[  845.208557][T26738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  845.248202][T26738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  845.313702][T26738] team0: Port device team_slave_0 added
[  845.359236][T26738] team0: Port device team_slave_1 added
[  845.457957][T26738] batman_adv: batadv0: Adding interface: batadv_slave_0
[  845.473606][T26738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  845.516308][T26738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  845.573935][T26738] batman_adv: batadv0: Adding interface: batadv_slave_1
[  845.581520][T26738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  845.614165][T26738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  845.701324][T26880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6461'.
[  845.766520][T26878] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6460'.
[  845.864820][ T5623] Bluetooth: hci1: command tx timeout
[  845.959253][T26738] hsr_slave_0: entered promiscuous mode
[  846.010632][T26738] hsr_slave_1: entered promiscuous mode
[  846.055701][T26738] debugfs: 'hsr0' already exists in 'hsr'
[  846.085388][T26738] Cannot create hsr debugfs directory
[  846.114334][T26888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6462'.
[  846.196089][T26891] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6465'.
[  846.210799][T26023] veth0_vlan: entered promiscuous mode
[  846.308778][T26890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  846.318081][T26023] veth1_vlan: entered promiscuous mode
[  846.498655][T26897] syzkaller0: entered promiscuous mode
[  846.518133][T26897] syzkaller0: entered allmulticast mode
[  846.545187][T26899] FAULT_INJECTION: forcing a failure.
[  846.545187][T26899] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  846.560651][T26899] CPU: 0 UID: 0 PID: 26899 Comm: syz.0.6468 Not tainted syzkaller #0 PREEMPT(full) 
[  846.560679][T26899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  846.560691][T26899] Call Trace:
[  846.560699][T26899]  <TASK>
[  846.560708][T26899]  dump_stack_lvl+0xe8/0x150
[  846.560745][T26899]  should_fail_ex+0x40c/0x560
[  846.560771][T26899]  _copy_to_user+0x31/0xb0
[  846.560799][T26899]  bpf_test_finish+0x4ea/0x690
[  846.560825][T26899]  ? __pfx_bpf_test_finish+0x10/0x10
[  846.560847][T26899]  ? _copy_from_user+0x94/0xb0
[  846.560873][T26899]  ? bpf_test_init+0x113/0x150
[  846.560894][T26899]  bpf_prog_test_run_xdp+0x8bc/0x11d0
[  846.560928][T26899]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  846.560948][T26899]  ? __fget_files+0x2a/0x420
[  846.560977][T26899]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  846.560998][T26899]  bpf_prog_test_run+0x2c5/0x340
[  846.561029][T26899]  __sys_bpf+0xa22/0xd90
[  846.561069][T26899]  ? __pfx___sys_bpf+0x10/0x10
[  846.561103][T26899]  ? __fget_files+0x2a/0x420
[  846.561142][T26899]  ? ksys_write+0x242/0x270
[  846.561171][T26899]  ? __pfx_ksys_write+0x10/0x10
[  846.561201][T26899]  __x64_sys_bpf+0xba/0xd0
[  846.561219][T26899]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  846.561238][T26899]  do_syscall_64+0x174/0x580
[  846.561256][T26899]  ? trace_irq_disable+0x3b/0x140
[  846.561276][T26899]  ? clear_bhb_loop+0x40/0x90
[  846.561297][T26899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  846.561316][T26899] RIP: 0033:0x7fd93499de99
[  846.561336][T26899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  846.561351][T26899] RSP: 002b:00007fd9358d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  846.561371][T26899] RAX: ffffffffffffffda RBX: 00007fd934c25fa0 RCX: 00007fd93499de99
[  846.561385][T26899] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a
[  846.561397][T26899] RBP: 00007fd9358d7090 R08: 0000000000000000 R09: 0000000000000000
[  846.561409][T26899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  846.561421][T26899] R13: 00007fd934c26038 R14: 00007fd934c25fa0 R15: 00007fffcd301298
[  846.561450][T26899]  </TASK>
[  846.581377][T26023] veth0_macvtap: entered promiscuous mode
[  846.821652][T26904] __nla_validate_parse: 1 callbacks suppressed
[  846.821678][T26904] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6469'.
[  847.053030][T26023] veth1_macvtap: entered promiscuous mode
[  847.181868][T26023] batman_adv: batadv0: Interface activated: batadv_slave_0
[  847.369841][T26023] batman_adv: batadv0: Interface activated: batadv_slave_1
[  847.448167][T26921] IPv6: Can't replace route, no match found
[  847.483063][T26921] IPv6: Can't replace route, no match found
[  847.527134][T26921] x_tables: duplicate underflow at hook 2
[  847.535999][T26921] xt_NFQUEUE: number of total queues is 0
[  847.542881][T16684] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  847.565364][T16684] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  847.598813][T16684] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  847.609236][T16684] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  847.667126][T26738] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  847.695688][T26738] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  847.714544][T26738] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  847.779558][T26738] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  847.795053][T26738] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  847.813782][T26738] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  847.899078][T26738] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  847.962165][T26738] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  848.048962][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  848.085327][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  848.187611][T26938] net_ratelimit: 31 callbacks suppressed
[  848.187632][T26938] IPv6: addrconf: prefix option has invalid lifetime
[  848.344167][T26941] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6479'.
[  848.377486][T25627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  848.416284][T25627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  848.514636][T26940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  848.658167][T26738] 8021q: adding VLAN 0 to HW filter on device bond0
[  848.746199][T26738] 8021q: adding VLAN 0 to HW filter on device team0
[  848.817671][T25627] bridge0: port 1(bridge_slave_0) entered blocking state
[  848.824935][T25627] bridge0: port 1(bridge_slave_0) entered forwarding state
[  848.844728][T26949] Cannot find add_set index 0 as target
[  848.898419][T25627] bridge0: port 2(bridge_slave_1) entered blocking state
[  848.905753][T25627] bridge0: port 2(bridge_slave_1) entered forwarding state
[  848.987012][T26952] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  849.018863][ T5730] IPVS: starting estimator thread 0...
[  849.049797][T26956] netlink: 'syz.4.6484': attribute type 3 has an invalid length.
[  849.121780][T26957] IPVS: using max 27 ests per chain, 64800 per kthread
[  849.398211][T26966] netlink: 'syz.4.6487': attribute type 1 has an invalid length.
[  849.527923][T26966] veth3: entered allmulticast mode
[  850.445709][T26997] syz.4.6495: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  850.517671][T26997] CPU: 1 UID: 0 PID: 26997 Comm: syz.4.6495 Not tainted syzkaller #0 PREEMPT(full) 
[  850.517705][T26997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  850.517719][T26997] Call Trace:
[  850.517728][T26997]  <TASK>
[  850.517737][T26997]  dump_stack_lvl+0xe8/0x150
[  850.517777][T26997]  warn_alloc+0x24c/0x270
[  850.517806][T26997]  ? stack_depot_save_flags+0x33/0x800
[  850.517834][T26997]  ? __pfx_warn_alloc+0x10/0x10
[  850.517861][T26997]  ? kasan_save_track+0x3e/0x80
[  850.517883][T26997]  ? __kasan_kmalloc+0x93/0xb0
[  850.517909][T26997]  ? xsk_setsockopt+0x52a/0x960
[  850.517939][T26997]  ? do_sock_setsockopt+0x17c/0x1b0
[  850.517959][T26997]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  850.517977][T26997]  ? do_syscall_64+0x174/0x580
[  850.517997][T26997]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  850.518027][T26997]  __vmalloc_node_range_noprof+0x12c/0x1730
[  850.518090][T26997]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  850.518119][T26997]  ? __kasan_kmalloc+0x93/0xb0
[  850.518148][T26997]  ? __kmalloc_cache_noprof+0x32d/0x660
[  850.518175][T26997]  ? __kmalloc_cache_noprof+0x150/0x660
[  850.518205][T26997]  vmalloc_user_noprof+0xad/0xe0
[  850.518229][T26997]  ? xskq_create+0xbf/0x170
[  850.518249][T26997]  xskq_create+0xbf/0x170
[  850.518271][T26997]  xsk_init_queue+0x8a/0xe0
[  850.518303][T26997]  xsk_setsockopt+0x52a/0x960
[  850.518329][T26997]  ? __fget_files+0x2a/0x420
[  850.518356][T26997]  ? __pfx_xsk_setsockopt+0x10/0x10
[  850.518385][T26997]  ? __pfx_aa_sk_perm+0x10/0x10
[  850.518417][T26997]  ? aa_sock_opt_perm+0xff/0x1a0
[  850.518435][T26997]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  850.518452][T26997]  ? __pfx_xsk_setsockopt+0x10/0x10
[  850.518476][T26997]  do_sock_setsockopt+0x17c/0x1b0
[  850.518495][T26997]  __x64_sys_setsockopt+0x13d/0x1b0
[  850.518513][T26997]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  850.518530][T26997]  do_syscall_64+0x174/0x580
[  850.518550][T26997]  ? clear_bhb_loop+0x40/0x90
[  850.518569][T26997]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  850.518585][T26997] RIP: 0033:0x7f117599de99
[  850.518602][T26997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  850.518616][T26997] RSP: 002b:00007f1176825028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  850.518636][T26997] RAX: ffffffffffffffda RBX: 00007f1175c25fa0 RCX: 00007f117599de99
[  850.518648][T26997] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  850.518658][T26997] RBP: 00007f1175a33eaf R08: 0000000000000004 R09: 0000000000000000
[  850.518668][T26997] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  850.518678][T26997] R13: 00007f1175c26038 R14: 00007f1175c25fa0 R15: 00007fff3a8172e8
[  850.518704][T26997]  </TASK>
[  851.009651][T26997] Mem-Info:
[  851.047879][T26997] active_anon:5410 inactive_anon:0 isolated_anon:0
[  851.047879][T26997]  active_file:53 inactive_file:43957 isolated_file:0
[  851.047879][T26997]  unevictable:768 dirty:117 writeback:0
[  851.047879][T26997]  slab_reclaimable:13979 slab_unreclaimable:153581
[  851.047879][T26997]  mapped:30317 shmem:1296 pagetables:1248
[  851.047879][T26997]  sec_pagetables:0 bounce:0
[  851.047879][T26997]  kernel_misc_reclaimable:0
[  851.047879][T26997]  free:1258101 free_pcp:7436 free_cma:0
[  851.095875][T26997] Node 0 active_anon:21640kB inactive_anon:0kB active_file:212kB inactive_file:175632kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121268kB dirty:468kB writeback:0kB shmem:3648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16688kB pagetables:4864kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  851.119138][T26738] 8021q: adding VLAN 0 to HW filter on device batadv0
[  851.135395][T26997] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  851.240534][T27009] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6497'.
[  851.262250][T27007] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6495'.
[  851.320702][T26997] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  851.416147][T26997] lowmem_reserve[]: 0 2488 2489 2489 2489
[  851.465910][T26997] Node 0 DMA32 free:1078280kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21652kB inactive_anon:0kB active_file:212kB inactive_file:175632kB unevictable:1536kB writepending:536kB zspages:0kB present:3129332kB managed:2548684kB mlocked:0kB bounce:0kB free_pcp:29580kB local_pcp:12176kB free_cma:0kB
[  851.488124][T27018] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6498'.
[  851.548580][T26997] lowmem_reserve[]: 0 0 0 0 0
[  851.566409][T26997] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  851.658449][T27004] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  851.760537][T26997] lowmem_reserve[]: 0 0 0 0 0
[  851.888896][T26997] Node 1 Normal free:3934492kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  851.952270][T26997] lowmem_reserve[]: 0 0 0 0 0
[  851.958833][T26997] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  852.018225][T26997] Node 0 DMA32: 2356*4kB (UME) 781*8kB (UME) 681*16kB (UM) 491*32kB (UM) 168*64kB (UME) 72*128kB (UME) 28*256kB (UME) 14*512kB (UME) 4*1024kB (UM) 5*2048kB (UME) 241*4096kB (UM) = 1078056kB
[  852.071154][T26997] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  852.130148][T26997] Node 1 Normal: 1*4kB (U) 5*8kB (UM) 9*16kB (UM) 9*32kB (UM) 15*64kB (UM) 7*128kB (UM) 4*256kB (UM) 4*512kB (UM) 1*1024kB (M) 2*2048kB (U) 958*4096kB (UM) = 3934492kB
[  852.198403][T26997] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  852.289305][T26997] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  852.327218][T26997] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  852.363373][T26997] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  852.400627][T26997] 45353 total pagecache pages
[  852.434460][T26997] 0 pages in swap cache
[  852.459431][T26997] Free swap  = 124996kB
[  852.480465][T26997] Total swap = 124996kB
[  852.505522][T26997] 2097051 pages RAM
[  852.527741][T26997] 0 pages HighMem/MovableOnly
[  852.541350][T26997] 428199 pages reserved
[  852.545679][T26997] 0 pages cma reserved
[  852.585588][T26738] veth0_vlan: entered promiscuous mode
[  852.639422][T26738] veth1_vlan: entered promiscuous mode
[  852.868262][T26738] veth0_macvtap: entered promiscuous mode
[  852.914010][T26738] veth1_macvtap: entered promiscuous mode
[  853.012993][T26738] batman_adv: batadv0: Interface activated: batadv_slave_0
[  853.088649][T26738] batman_adv: batadv0: Interface activated: batadv_slave_1
[  853.148094][   T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  853.189218][   T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  853.216981][T27058] netlink: 'syz.3.6509': attribute type 3 has an invalid length.
[  853.284988][   T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  853.347656][   T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  853.409292][T27060] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6510'.
[  853.631639][T27064] IPv6: Can't replace route, no match found
[  853.676709][T27064] IPv6: Can't replace route, no match found
[  853.730968][T27064] x_tables: duplicate underflow at hook 2
[  853.763333][T27064] xt_NFQUEUE: number of total queues is 0
[  853.835770][T27072] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6515'.
[  853.908685][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  853.966272][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  854.175518][T10265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  854.220731][T10265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  855.279672][T27107] IPv6: Can't replace route, no match found
[  855.318816][T27107] IPv6: Can't replace route, no match found
[  855.396385][T27107] x_tables: duplicate underflow at hook 2
[  855.448939][T27107] xt_NFQUEUE: number of total queues is 0
[  855.685355][T24932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  855.713979][T24932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  855.725382][T24932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  855.738165][T24932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  855.750504][T24932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  855.999043][T27122] netlink: 'syz.3.6532': attribute type 1 has an invalid length.
[  856.076901][T27125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6532'.
[  856.088498][T27122] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6532'.
[  856.117540][T27122] netlink: 'syz.3.6532': attribute type 1 has an invalid length.
[  856.691676][T27144] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  856.842606][T27137] wlan0 speed is unknown, defaulting to 1000
[  856.952458][T27137] xfrm0 speed is unknown, defaulting to 1000
[  856.974738][T27152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6540'.
[  857.066448][T27154] syzkaller0: entered promiscuous mode
[  857.095033][T27154] syzkaller0: entered allmulticast mode
[  857.407858][T27115] wlan0 speed is unknown, defaulting to 1000
[  857.481156][T27161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  857.860631][ T5623] Bluetooth: hci0: command tx timeout
[  857.984512][T27115] xfrm0 speed is unknown, defaulting to 1000
[  858.012882][T27137] lo speed is unknown, defaulting to 1000
[  858.071558][T27172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6544'.
[  858.889592][T27115] lo speed is unknown, defaulting to 1000
[  859.500930][T27201] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6554'.
[  859.512075][T27199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  859.928709][T27206] netlink: 'syz.3.6555': attribute type 1 has an invalid length.
[  859.942990][ T5623] Bluetooth: hci0: command tx timeout
[  859.977578][T27206] 8021q: adding VLAN 0 to HW filter on device bond1
[  860.018174][T27210] syzkaller0: entered promiscuous mode
[  860.024719][T27210] syzkaller0: entered allmulticast mode
[  860.138978][T27206] veth5: entered allmulticast mode
[  860.192842][T27206] bond1: (slave veth5): Enslaving as an active interface with an up link
[  860.974461][T27239] netlink: 'syz.4.6563': attribute type 5 has an invalid length.
[  861.062143][T27243] netlink: 'syz.4.6563': attribute type 5 has an invalid length.
[  861.312400][T27115] bridge0: port 1(bridge_slave_0) entered blocking state
[  861.334277][T27115] bridge0: port 1(bridge_slave_0) entered disabled state
[  861.359830][T27115] bridge_slave_0: entered allmulticast mode
[  861.413012][T27115] bridge_slave_0: entered promiscuous mode
[  861.450951][T27238] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  861.493014][T27238] tipc: Resetting bearer <eth:syzkaller0>
[  861.587446][T27115] bridge0: port 2(bridge_slave_1) entered blocking state
[  861.610101][T27115] bridge0: port 2(bridge_slave_1) entered disabled state
[  861.619122][T27115] bridge_slave_1: entered allmulticast mode
[  861.628257][T27115] bridge_slave_1: entered promiscuous mode
[  861.665527][T27252] syzkaller0: entered promiscuous mode
[  861.671898][T27252] syzkaller0: entered allmulticast mode
[  861.737968][T27236] tipc: Resetting bearer <eth:syzkaller0>
[  861.819624][T27236] tipc: Disabling bearer <eth:syzkaller0>
[  861.847779][T27115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  861.861943][T27260] syzkaller0: entered promiscuous mode
[  861.869458][T27260] syzkaller0: entered allmulticast mode
[  861.931916][T27115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  862.020690][ T5623] Bluetooth: hci0: command tx timeout
[  862.032549][T27268] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6568'.
[  862.059656][T27268] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6568'.
[  862.142030][T27268] vxlan0: entered promiscuous mode
[  862.157710][T27268] vxlan0: entered allmulticast mode
[  862.177102][T27115] team0: Port device team_slave_0 added
[  862.383779][T16682] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  862.479298][T27115] team0: Port device team_slave_1 added
[  862.537653][T16682] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  862.579021][T16682] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  862.651522][T16682] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  862.663734][T27285] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6576'.
[  862.690356][T27115] batman_adv: batadv0: Adding interface: batadv_slave_0
[  862.737825][T27115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  862.858206][T27115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  862.918306][T27115] batman_adv: batadv0: Adding interface: batadv_slave_1
[  862.928160][T27115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  862.990283][T27115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  863.052463][T27277] wlan0 speed is unknown, defaulting to 1000
[  863.094644][T27277] xfrm0 speed is unknown, defaulting to 1000
[  863.278473][T27115] hsr_slave_0: entered promiscuous mode
[  863.290404][T27115] hsr_slave_1: entered promiscuous mode
[  863.301576][T27115] debugfs: 'hsr0' already exists in 'hsr'
[  863.315568][T27115] Cannot create hsr debugfs directory
[  863.358157][T27300] syzkaller0: entered promiscuous mode
[  863.422317][T27300] syzkaller0: entered allmulticast mode
[  863.484106][T27301] tipc: Started in network mode
[  863.515512][T27301] tipc: Node identity be95c1f41686, cluster identity 4711
[  863.587451][T27301] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  863.697672][T27301] tipc: Resetting bearer <eth:syzkaller0>
[  863.889393][T27299] tipc: Resetting bearer <eth:syzkaller0>
[  864.015589][T27299] tipc: Disabling bearer <eth:syzkaller0>
[  864.101047][ T5623] Bluetooth: hci0: command tx timeout
[  864.432018][T27277] lo speed is unknown, defaulting to 1000
[  866.238867][T27115] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  866.266555][T27363] FAULT_INJECTION: forcing a failure.
[  866.266555][T27363] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  866.305820][T27363] CPU: 0 UID: 0 PID: 27363 Comm: syz.1.6599 Not tainted syzkaller #0 PREEMPT(full) 
[  866.305846][T27363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  866.305859][T27363] Call Trace:
[  866.305868][T27363]  <TASK>
[  866.305877][T27363]  dump_stack_lvl+0xe8/0x150
[  866.305914][T27363]  should_fail_ex+0x40c/0x560
[  866.305943][T27363]  _copy_from_user+0x2d/0xb0
[  866.305980][T27363]  do_sys_poll+0x258/0x1110
[  866.306018][T27363]  ? __lock_acquire+0x683/0x2cf0
[  866.306045][T27363]  ? __pfx_do_sys_poll+0x10/0x10
[  866.306073][T27363]  ? aa_file_perm+0x18b/0x15f0
[  866.306190][T27363]  ? set_user_sigmask+0xcd/0x1c0
[  866.306250][T27363]  ? __pfx_set_user_sigmask+0x10/0x10
[  866.306273][T27363]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  866.306304][T27363]  __se_sys_ppoll+0x209/0x2b0
[  866.306327][T27363]  ? fput+0xa0/0xd0
[  866.306354][T27363]  ? __pfx___se_sys_ppoll+0x10/0x10
[  866.306376][T27363]  ? __pfx_ksys_write+0x10/0x10
[  866.306409][T27363]  ? __x64_sys_ppoll+0x20/0xc0
[  866.306431][T27363]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  866.306452][T27363]  do_syscall_64+0x174/0x580
[  866.306472][T27363]  ? trace_irq_disable+0x3b/0x140
[  866.306497][T27363]  ? clear_bhb_loop+0x40/0x90
[  866.306521][T27363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  866.306540][T27363] RIP: 0033:0x7f08e539de99
[  866.306560][T27363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  866.306577][T27363] RSP: 002b:00007f08e6316028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[  866.306598][T27363] RAX: ffffffffffffffda RBX: 00007f08e5625fa0 RCX: 00007f08e539de99
[  866.306612][T27363] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000000c0
[  866.306625][T27363] RBP: 00007f08e6316090 R08: 0000000000000000 R09: 0000000000000000
[  866.306636][T27363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  866.306647][T27363] R13: 00007f08e5626038 R14: 00007f08e5625fa0 R15: 00007fff172e38b8
[  866.306678][T27363]  </TASK>
[  866.600978][T27352] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  866.762296][T27350] syzkaller0: entered promiscuous mode
[  866.808302][T27350] syzkaller0: entered allmulticast mode
[  867.005482][T27115] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  867.095840][T27350] tipc: Resetting bearer <eth:syzkaller0>
[  867.127445][T27350] tipc: Disabling bearer <eth:syzkaller0>
[  867.206032][T27374] geneve2: entered promiscuous mode
[  867.269226][T27371] netlink: 'syz.4.6603': attribute type 10 has an invalid length.
[  867.305841][T27371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6603'.
[  867.404191][T27115] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  867.653250][T27115] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  867.858092][T27390] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6609'.
[  868.298962][T27398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  868.300585][T27397] vlan3: entered promiscuous mode
[  868.615631][T27408] syzkaller0: entered promiscuous mode
[  868.650913][T27408] syzkaller0: entered allmulticast mode
[  868.667367][T27410] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6616'.
[  868.724146][T27401] tipc: Started in network mode
[  868.736644][T27401] tipc: Node identity ce17d2eb518d, cluster identity 4711
[  868.767722][T27401] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  868.826485][T27401] tipc: Resetting bearer <eth:syzkaller0>
[  868.883971][T27115] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  868.894087][T27415] SET target dimension over the limit!
[  868.938248][T27115] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  868.963104][T27400] tipc: Resetting bearer <eth:syzkaller0>
[  869.029753][T27400] tipc: Disabling bearer <eth:syzkaller0>
[  869.096179][T27115] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  869.176517][T27115] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  869.198001][T27115] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  869.223447][T27115] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  869.237531][T27115] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  869.298494][T27115] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  869.396690][T27427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6623'.
[  869.527701][ T5623] block nbd4: Receive control failed (result -22)
[  869.579196][T27427] nbd4: detected capacity change from 0 to 32
[  869.645150][T27115] 8021q: adding VLAN 0 to HW filter on device bond0
[  869.673305][T27115] 8021q: adding VLAN 0 to HW filter on device team0
[  869.676121][   T25] block nbd4: Dead connection, failed to find a fallback
[  869.690248][   T25] block nbd4: shutting down sockets
[  869.698178][   T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  869.709160][   T25] Buffer I/O error on dev nbd4, logical block 0, async page read
[  869.727469][T16682] bridge0: port 1(bridge_slave_0) entered blocking state
[  869.730166][   T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  869.734698][T16682] bridge0: port 1(bridge_slave_0) entered forwarding state
[  869.756539][   T25] Buffer I/O error on dev nbd4, logical block 0, async page read
[  869.771176][   T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  869.788139][   T25] Buffer I/O error on dev nbd4, logical block 0, async page read
[  869.796345][   T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  869.805522][   T25] Buffer I/O error on dev nbd4, logical block 0, async page read
[  869.815478][   T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  869.825034][   T25] Buffer I/O error on dev nbd4, logical block 0, async page read
[  869.833613][   T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  869.842900][   T25] Buffer I/O error on dev nbd4, logical block 0, async page read
[  869.852704][   T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  869.870444][   T25] Buffer I/O error on dev nbd4, logical block 0, async page read
[  869.880410][   T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  869.889642][   T25] Buffer I/O error on dev nbd4, logical block 0, async page read
[  869.897669][T26770] ldm_validate_partition_table(): Disk read failed.
[  869.912848][   T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  869.922421][   T25] Buffer I/O error on dev nbd4, logical block 0, async page read
[  869.931888][   T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  869.937788][T16682] bridge0: port 2(bridge_slave_1) entered blocking state
[  869.942829][   T25] Buffer I/O error on dev nbd4, logical block 0, async page read
[  869.948191][T16682] bridge0: port 2(bridge_slave_1) entered forwarding state
[  869.958834][T26770] Dev nbd4: unable to read RDB block 0
[  869.969399][T26770]  nbd4: unable to read partition table
[  870.001235][T26770] ldm_validate_partition_table(): Disk read failed.
[  870.012660][T26770] Dev nbd4: unable to read RDB block 0
[  870.021034][T26770]  nbd4: unable to read partition table
[  870.327561][T27450] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6626'.
[  870.400817][T27450] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6626'.
[  870.425851][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  870.667440][T27427] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  870.699594][T27427] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  870.815967][T27459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6628'.
[  870.935668][T27460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  871.126155][T27427] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  871.160725][T27427] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  871.345439][T27474] netlink: 6200 bytes leftover after parsing attributes in process `syz.1.6632'.
[  871.483999][T27427] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  871.502156][T27427] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  871.640424][T27427] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  871.666107][T27427] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  871.978170][T27427] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  872.000176][T27427] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  872.185391][T27115] 8021q: adding VLAN 0 to HW filter on device batadv0
[  872.288877][T27488] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6635'.
[  872.447134][T27115] veth0_vlan: entered promiscuous mode
[  872.496896][T27492] rdma_rxe: rxe_newlink: failed to add xfrm0
[  872.543136][T27115] veth1_vlan: entered promiscuous mode
[  872.666146][T27115] veth0_macvtap: entered promiscuous mode
[  872.689641][T27497] batadv0: entered promiscuous mode
[  872.696932][T27497] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  872.714713][T27505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6639'.
[  872.732173][T27115] veth1_macvtap: entered promiscuous mode
[  872.797405][T27115] batman_adv: batadv0: Interface activated: batadv_slave_0
[  872.815407][T27115] batman_adv: batadv0: Interface activated: batadv_slave_1
[  872.947068][  T140] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  872.979808][  T140] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  873.018053][   T77] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  873.049698][   T77] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  873.138196][T27510] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6642'.
[  873.256154][T27512] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6643'.
[  873.561625][T27515] IPv6: Can't replace route, no match found
[  873.595247][T27515] IPv6: Can't replace route, no match found
[  873.602027][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  873.637720][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  873.675608][T27515] x_tables: duplicate underflow at hook 2
[  873.710634][T27520] netlink: 6200 bytes leftover after parsing attributes in process `syz.5.6645'.
[  873.729131][T27515] xt_NFQUEUE: number of total queues is 0
[  873.951635][T16682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  873.996086][T16682] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  874.396792][T27539] netlink: 'syz.0.6527': attribute type 3 has an invalid length.
[  874.808893][T27555] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6659'.
[  874.858236][T27555] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6659'.
[  875.764595][T27580] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4
[  875.778027][T27579] sctp: [Deprecated]: syz.0.6668 (pid 27579) Use of int in max_burst socket option.
[  875.778027][T27579] Use struct sctp_assoc_value instead
[  877.054499][T27612] wlan0 speed is unknown, defaulting to 1000
[  877.122028][T27612] xfrm0 speed is unknown, defaulting to 1000
[  877.843100][T27628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6686'.
[  877.865364][T27628] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  877.969779][T27628] batman_adv: batadv0: Removing interface: batadv_slave_1
[  878.236811][T27612] lo speed is unknown, defaulting to 1000
[  878.876058][T27653] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6693'.
[  879.368809][T27660] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4
[  880.007526][T27664] syzkaller0: entered promiscuous mode
[  880.026238][T27664] syzkaller0: entered allmulticast mode
[  880.086282][T27664] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  880.159344][T27664] tipc: Resetting bearer <eth:syzkaller0>
[  880.231452][T27663] tipc: Resetting bearer <eth:syzkaller0>
[  880.353444][T27663] tipc: Disabling bearer <eth:syzkaller0>
[  880.785616][T27686] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6704'.
[  881.278962][T27705] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6712'.
[  881.285285][T27704] netlink: 'syz.5.6710': attribute type 30 has an invalid length.
[  881.348602][T27704] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6710'.
[  881.364321][T27704] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  881.377068][T27703] netlink: 'syz.3.6711': attribute type 1 has an invalid length.
[  881.482166][T27703] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6711'.
[  882.092347][T27729] Set syz1 is full, maxelem 2076 reached
[  882.205247][T27740] bridge0: port 1(bridge_slave_0) entered disabled state
[  882.236299][T27740] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  882.573309][T27748] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4
[  882.849637][T27751] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6724'.
[  883.528020][T27768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6725'.
[  883.776055][T27775] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6728'.
[  883.935726][T27758] syzkaller0: delete flow: hash 499709985 index 1
[  884.375331][T27786] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6734'.
[  884.384623][T27786] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6734'.
[  885.104368][T27797] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6731'.
[  885.109236][T25627] 
[  885.115775][T25627] ======================================================
[  885.122904][T25627] WARNING: possible circular locking dependency detected
[  885.129996][T25627] syzkaller #0 Not tainted
[  885.134429][T25627] ------------------------------------------------------
[  885.141503][T25627] kworker/u8:12/25627 is trying to acquire lock:
[  885.147817][T25627] ffffffff8ec848e0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x6a/0x610
[  885.157762][T25627] 
[  885.157762][T25627] but task is already holding lock:
[  885.165167][T25627] ffff888055f645e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0
[  885.174834][T25627] 
[  885.174834][T25627] which lock already depends on the new lock.
[  885.174834][T25627] 
[  885.185233][T25627] 
[  885.185233][T25627] the existing dependency chain (in reverse order) is:
[  885.194246][T25627] 
[  885.194246][T25627] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}:
[  885.202254][T25627]        lock_sock_nested+0x41/0x100
[  885.207577][T25627]        mptcp_connect+0x439/0x7a0
[  885.212765][T25627]        __inet_stream_connect+0x258/0xe00
[  885.218610][T25627]        inet_stream_connect+0x66/0xa0
[  885.224191][T25627]        __sys_connect+0x323/0x460
[  885.229334][T25627]        __x64_sys_connect+0x7a/0x90
[  885.234722][T25627]        do_syscall_64+0x174/0x580
[  885.239833][T25627]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.246248][T25627] 
[  885.246248][T25627] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  885.253996][T25627]        lock_sock_nested+0x41/0x100
[  885.259299][T25627]        inet_shutdown+0x6a/0x390
[  885.264344][T25627]        nbd_mark_nsock_dead+0x2cb/0x550
[  885.270271][T25627]        recv_work+0x1cee/0x1e10
[  885.275481][T25627]        process_scheduled_works+0xa8e/0x14e0
[  885.281548][T25627]        worker_thread+0xa47/0xfb0
[  885.286647][T25627]        kthread+0x388/0x470
[  885.291229][T25627]        ret_from_fork+0x514/0xb70
[  885.296333][T25627]        ret_from_fork_asm+0x1a/0x30
[  885.301618][T25627] 
[  885.301618][T25627] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  885.309337][T25627]        __mutex_lock+0x19d/0x1550
[  885.314469][T25627]        nbd_queue_rq+0x373/0x1150
[  885.319674][T25627]        blk_mq_dispatch_rq_list+0x499/0x1990
[  885.325915][T25627]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  885.332826][T25627]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  885.339333][T25627]        blk_mq_run_work_fn+0x16c/0x300
[  885.344958][T25627]        process_scheduled_works+0xa8e/0x14e0
[  885.351014][T25627]        worker_thread+0xa47/0xfb0
[  885.356125][T25627]        kthread+0x388/0x470
[  885.360724][T25627]        ret_from_fork+0x514/0xb70
[  885.365827][T25627]        ret_from_fork_asm+0x1a/0x30
[  885.371108][T25627] 
[  885.371108][T25627] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  885.378303][T25627]        __mutex_lock+0x19d/0x1550
[  885.383405][T25627]        nbd_queue_rq+0xc1/0x1150
[  885.388430][T25627]        blk_mq_dispatch_rq_list+0x499/0x1990
[  885.394494][T25627]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  885.401345][T25627]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  885.407853][T25627]        blk_mq_run_work_fn+0x16c/0x300
[  885.413764][T25627]        process_scheduled_works+0xa8e/0x14e0
[  885.419827][T25627]        worker_thread+0xa47/0xfb0
[  885.425034][T25627]        kthread+0x388/0x470
[  885.429637][T25627]        ret_from_fork+0x514/0xb70
[  885.434746][T25627]        ret_from_fork_asm+0x1a/0x30
[  885.440054][T25627] 
[  885.440054][T25627] -> #3 (set->srcu){.+.+}-{0:0}:
[  885.447164][T25627]        __synchronize_srcu+0xc9/0x2f0
[  885.452630][T25627]        elevator_switch+0x1e8/0x7b0
[  885.457979][T25627]        elevator_change+0x2fa/0x480
[  885.463272][T25627]        elevator_set_default+0x375/0x440
[  885.469012][T25627]        blk_register_queue+0x3f3/0x4e0
[  885.474731][T25627]        __add_disk+0x6cb/0xe30
[  885.479634][T25627]        add_disk_fwnode+0x100/0x3a0
[  885.484923][T25627]        nbd_dev_add+0x733/0xb60
[  885.489869][T25627]        nbd_init+0x15f/0x1e0
[  885.494671][T25627]        do_one_initcall+0x250/0x870
[  885.499971][T25627]        do_initcall_level+0x10a/0x1a0
[  885.505529][T25627]        do_initcalls+0x59/0xa0
[  885.510388][T25627]        kernel_init_freeable+0x29d/0x3e0
[  885.516118][T25627]        kernel_init+0x1d/0x1d0
[  885.520985][T25627]        ret_from_fork+0x514/0xb70
[  885.526097][T25627]        ret_from_fork_asm+0x1a/0x30
[  885.531370][T25627] 
[  885.531370][T25627] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  885.539345][T25627]        __mutex_lock+0x19d/0x1550
[  885.544458][T25627]        elevator_change+0x1af/0x480
[  885.549746][T25627]        elevator_set_none+0xb5/0x140
[  885.555113][T25627]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  885.561446][T25627]        nbd_start_device+0x189/0xb30
[  885.566833][T25627]        nbd_genl_connect+0x1597/0x1c10
[  885.572387][T25627]        genl_family_rcv_msg_doit+0x233/0x340
[  885.578474][T25627]        genl_rcv_msg+0x614/0x7a0
[  885.583510][T25627]        netlink_rcv_skb+0x226/0x4a0
[  885.588793][T25627]        genl_rcv+0x28/0x40
[  885.593289][T25627]        netlink_unicast+0x7bb/0x940
[  885.598574][T25627]        netlink_sendmsg+0x813/0xb40
[  885.603852][T25627]        sock_sendmsg_nosec+0x13a/0x180
[  885.609392][T25627]        ____sys_sendmsg+0x54e/0x850
[  885.614665][T25627]        ___sys_sendmsg+0x2a5/0x360
[  885.619859][T25627]        __x64_sys_sendmsg+0x1b1/0x290
[  885.625316][T25627]        do_syscall_64+0x174/0x580
[  885.630432][T25627]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  885.636831][T25627] 
[  885.636831][T25627] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  885.645421][T25627]        blk_alloc_queue+0x544/0x690
[  885.650716][T25627]        __blk_mq_alloc_disk+0x194/0x390
[  885.656341][T25627]        nbd_dev_add+0x494/0xb60
[  885.661280][T25627]        nbd_init+0x15f/0x1e0
[  885.665972][T25627]        do_one_initcall+0x250/0x870
[  885.671355][T25627]        do_initcall_level+0x10a/0x1a0
[  885.676801][T25627]        do_initcalls+0x59/0xa0
[  885.681654][T25627]        kernel_init_freeable+0x29d/0x3e0
[  885.687469][T25627]        kernel_init+0x1d/0x1d0
[  885.692411][T25627]        ret_from_fork+0x514/0xb70
[  885.697521][T25627]        ret_from_fork_asm+0x1a/0x30
[  885.702851][T25627] 
[  885.702851][T25627] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  885.710074][T25627]        __lock_acquire+0x1520/0x2cf0
[  885.715474][T25627]        lock_acquire+0x106/0x350
[  885.720617][T25627]        fs_reclaim_acquire+0x71/0x100
[  885.726073][T25627]        kmem_cache_alloc_node_noprof+0x6a/0x610
[  885.732428][T25627]        __alloc_skb+0x1d7/0x7a0
[  885.737388][T25627]        tcp_stream_alloc_skb+0x3f/0x580
[  885.743125][T25627]        tcp_connect+0x1582/0x53e0
[  885.748397][T25627]        tcp_v6_connect+0x14ed/0x1cf0
[  885.753764][T25627]        __inet_stream_connect+0x258/0xe00
[  885.759763][T25627]        inet_stream_connect+0x66/0xa0
[  885.765512][T25627]        kernel_connect+0x141/0x1c0
[  885.770712][T25627]        rds_tcp_conn_path_connect+0x6e9/0x920
[  885.776929][T25627]        rds_connect_worker+0x1d8/0x290
[  885.782516][T25627]        process_scheduled_works+0xa8e/0x14e0
[  885.788575][T25627]        worker_thread+0xa47/0xfb0
[  885.793746][T25627]        kthread+0x388/0x470
[  885.798355][T25627]        ret_from_fork+0x514/0xb70
[  885.803459][T25627]        ret_from_fork_asm+0x1a/0x30
[  885.808733][T25627] 
[  885.808733][T25627] other info that might help us debug this:
[  885.808733][T25627] 
[  885.818963][T25627] Chain exists of:
[  885.818963][T25627]   fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6
[  885.818963][T25627] 
[  885.831990][T25627]  Possible unsafe locking scenario:
[  885.831990][T25627] 
[  885.839499][T25627]        CPU0                    CPU1
[  885.844905][T25627]        ----                    ----
[  885.850274][T25627]   lock(k-sk_lock-AF_INET6);
[  885.854956][T25627]                                lock(sk_lock-AF_INET6);
[  885.862170][T25627]                                lock(k-sk_lock-AF_INET6);
[  885.869387][T25627]   lock(fs_reclaim);
[  885.873379][T25627] 
[  885.873379][T25627]  *** DEADLOCK ***
[  885.873379][T25627] 
[  885.881511][T25627] 4 locks held by kworker/u8:12/25627:
[  885.886953][T25627]  #0: ffff88804d601140 ((wq_completion)krds_cp_wq#31/0){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  885.898839][T25627]  #1: ffffc9000208fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  885.911719][T25627]  #2: ffff88804adcb080 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[  885.922810][T25627]  #3: ffff888055f645e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0
[  885.932908][T25627] 
[  885.932908][T25627] stack backtrace:
[  885.938807][T25627] CPU: 0 UID: 0 PID: 25627 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) 
[  885.938822][T25627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  885.938833][T25627] Workqueue: krds_cp_wq#31/0 rds_connect_worker
[  885.938861][T25627] Call Trace:
[  885.938868][T25627]  <TASK>
[  885.938874][T25627]  dump_stack_lvl+0xe8/0x150
[  885.938897][T25627]  print_circular_bug+0x2e1/0x300
[  885.938916][T25627]  check_noncircular+0x12e/0x150
[  885.938944][T25627]  __lock_acquire+0x1520/0x2cf0
[  885.938966][T25627]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  885.938994][T25627]  ? __lock_acquire+0x683/0x2cf0
[  885.939016][T25627]  ? kmem_cache_alloc_node_noprof+0x6a/0x610
[  885.939030][T25627]  lock_acquire+0x106/0x350
[  885.939044][T25627]  ? kmem_cache_alloc_node_noprof+0x6a/0x610
[  885.939056][T25627]  ? ip6_dst_check+0xe2/0x7e0
[  885.939071][T25627]  fs_reclaim_acquire+0x71/0x100
[  885.939085][T25627]  ? kmem_cache_alloc_node_noprof+0x6a/0x610
[  885.939097][T25627]  kmem_cache_alloc_node_noprof+0x6a/0x610
[  885.939109][T25627]  ? ip6_default_advmss+0x80/0x3b0
[  885.939120][T25627]  ? __alloc_skb+0x1d7/0x7a0
[  885.939136][T25627]  ? __alloc_skb+0x1d7/0x7a0
[  885.939152][T25627]  __alloc_skb+0x1d7/0x7a0
[  885.939167][T25627]  tcp_stream_alloc_skb+0x3f/0x580
[  885.939179][T25627]  ? __asan_memset+0x22/0x50
[  885.939192][T25627]  tcp_connect+0x1582/0x53e0
[  885.939213][T25627]  ? ktime_get_with_offset+0x93/0x2d0
[  885.939230][T25627]  ? __pfx_tcp_connect+0x10/0x10
[  885.939244][T25627]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  885.939257][T25627]  ? lockdep_hardirqs_on+0x7a/0x110
[  885.939268][T25627]  ? ktime_get_with_offset+0x93/0x2d0
[  885.939279][T25627]  ? seqcount_lockdep_reader_access+0xea/0x100
[  885.939294][T25627]  ? __asan_memset+0x22/0x50
[  885.939305][T25627]  ? __pfx_tcp_fastopen_defer_connect+0x10/0x10
[  885.939390][T25627]  ? inet6_hash_connect+0xeb/0x170
[  885.939437][T25627]  tcp_v6_connect+0x14ed/0x1cf0
[  885.939449][T25627]  ? rcu_is_watching+0x15/0xb0
[  885.939469][T25627]  ? __pfx_tcp_v6_connect+0x10/0x10
[  885.939481][T25627]  ? finish_task_switch+0x412/0xc60
[  885.939492][T25627]  ? lockdep_hardirqs_on+0x7a/0x110
[  885.939503][T25627]  __inet_stream_connect+0x258/0xe00
[  885.939528][T25627]  ? do_raw_spin_lock+0x12b/0x2f0
[  885.939546][T25627]  ? lock_sock_nested+0x6a/0x100
[  885.939567][T25627]  ? __pfx___inet_stream_connect+0x10/0x10
[  885.939592][T25627]  ? inet_stream_connect+0x51/0xa0
[  885.939608][T25627]  ? __local_bh_enable_ip+0xd0/0x130
[  885.939621][T25627]  inet_stream_connect+0x66/0xa0
[  885.939636][T25627]  kernel_connect+0x141/0x1c0
[  885.939650][T25627]  ? __pfx_kernel_connect+0x10/0x10
[  885.939664][T25627]  ? preempt_schedule_thunk+0x16/0x40
[  885.939679][T25627]  rds_tcp_conn_path_connect+0x6e9/0x920
[  885.939698][T25627]  ? __pfx_rds_tcp_conn_path_connect+0x10/0x10
[  885.939713][T25627]  ? process_scheduled_works+0xa20/0x14e0
[  885.939727][T25627]  rds_connect_worker+0x1d8/0x290
[  885.939738][T25627]  ? process_scheduled_works+0xa20/0x14e0
[  885.939749][T25627]  process_scheduled_works+0xa8e/0x14e0
[  885.939766][T25627]  ? __pfx_process_scheduled_works+0x10/0x10
[  885.939778][T25627]  ? assign_work+0x3cf/0x5d0
[  885.939789][T25627]  worker_thread+0xa47/0xfb0
[  885.939806][T25627]  kthread+0x388/0x470
[  885.939821][T25627]  ? __pfx_worker_thread+0x10/0x10
[  885.939832][T25627]  ? __pfx_kthread+0x10/0x10
[  885.939845][T25627]  ret_from_fork+0x514/0xb70
[  885.939868][T25627]  ? __pfx_ret_from_fork+0x10/0x10
[  885.939882][T25627]  ? __switch_to+0xc89/0x1420
[  885.939896][T25627]  ? __pfx_kthread+0x10/0x10
[  885.939917][T25627]  ret_from_fork_asm+0x1a/0x30
[  885.939936][T25627]  </TASK>
[  890.472949][T27768] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  890.477712][T27784] mac80211_hwsim hwsim120 wlan0: entered promiscuous mode
[  890.552804][T27784] batman_adv: batadv0: Adding interface: wlan0
[  890.568188][T27784] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  890.594141][T27784] batman_adv: batadv0: Interface activated: wlan0
[  890.613479][T27781] wlan0 speed is unknown, defaulting to 1000
[  890.621411][T27781] xfrm0 speed is unknown, defaulting to 1000
[  890.741717][T27781] lo speed is unknown, defaulting to 1000