last executing test programs:

27.860737984s ago: executing program 0 (id=2871):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @loopback, @private0, {[], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)

27.262049317s ago: executing program 0 (id=2881):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) (async, rerun: 32)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001810bc000000000095391b1f280312397a11387372e25e1f53b7c71c731a99b242a0ba3112357994a21a30c060a3549f7fbb4cb61520aed8cb4eb526a09b6d750ff38cf87475d126875da4909c16ad1ac8731c3bc56f4885bdb0d0881b4cb4190f37b2785e47836339a370f2d0c849eb88c9d4d412d4c2922640eb34d8a78486"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
accept4(r0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000a00000004080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000008000000000000000000000000000005a113da00000000000b4431e1419bea3e352435bb8a8ce328ac260221c5c07431aeab26be15fc78c99b3dc461449e52e37ea732f81fa48a421f518a490055e674e05d916d93e554da5ff037d42181937a774f9647504d5aafd14da22ca54e3f684a99ad7ecbad144889d07709a3b6bbfc8b6a37fdc57fbc044743c08474ba3c090d9fd3949ae11ff976045cbc8097967f3a660a10c7397ed93ef964d6a0d735cf892f0b9f15c7c83bd5c543726f237dbc43aa3a863205ff6aa2bd184220871e8f048ca6b2720dc6001dd28c98914646e4c3f"], 0x50) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x2}, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0xbf, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0xe58ac855f7a312e9}, 0x20000000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$netlink(r5, 0x10e, 0xb, 0x0, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) (async, rerun: 32)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
pselect6(0x40, &(0x7f0000000240)={0x9, 0x9e, 0xfbfc, 0xee, 0x8, 0x6, 0xa0c, 0xd}, 0x0, 0x0, &(0x7f00000003c0), 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001100010000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x34}}, 0x80) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'hsr0\x00'}) (rerun: 64)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x104}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r8}, 0x18) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

26.922509545s ago: executing program 0 (id=2888):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0200"], 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r1, 0x2, 0x0, 0x9, &(0x7f0000000580)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r1, 0x2, 0x0, 0x9, &(0x7f0000000580)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="400100001000010000000000000020007f000001000000000000000000000000ff01000000000000000000000000000100000000000000000a00000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}}, 0x4000) (async)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="400100001000010000000000000020007f000001000000000000000000000000ff01000000000000000000000000000100000000000000000a00000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}}, 0x4000)

26.150793826s ago: executing program 0 (id=2899):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000100)=0x5)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000006c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4091, 0xffb}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000a00)=""/155, 0x9b}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x640100ff}})
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffff9, @rand_addr=' \x01\x00', 0x8000}, 0x1c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', <r4=>0x0})
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000040)={@broadcast, @loopback, r4}, 0xc)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a000a01010200000000000000000000000000020000000000000000ffffe00000020a0066fa"], 0x38}}, 0x20040810)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002400048020000180080001006c6f6700140002800800064000008801080005400000000814000000110001"], 0x78}}, 0x0)
close(0x3)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="01422006020607f6"], 0xa)
bind$bt_hci(r5, &(0x7f00000019c0)={0x1f, 0x3, 0x2}, 0x6)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newlink={0x64, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x3}, @IFLA_GTP_LOCAL6={0x14, 0x8, @mcast1}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_ROLE={0x8}]}}}]}, 0x64}}, 0x0)

26.127655927s ago: executing program 0 (id=2904):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 64)
r3 = socket$unix(0x1, 0x2, 0x0) (rerun: 64)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) (async)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x41d9, 0x4) (async)
recvmmsg(r2, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/27, 0x1b}, 0x1}], 0x1, 0x1000000000fe, 0x0) (async, rerun: 32)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010b000a0000000000000e00000008000300", @ANYRES32=r0], 0x1c}}, 0x0) (rerun: 32)

11.032230005s ago: executing program 0 (id=2904):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 64)
r3 = socket$unix(0x1, 0x2, 0x0) (rerun: 64)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) (async)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x41d9, 0x4) (async)
recvmmsg(r2, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/27, 0x1b}, 0x1}], 0x1, 0x1000000000fe, 0x0) (async, rerun: 32)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010b000a0000000000000e00000008000300", @ANYRES32=r0], 0x1c}}, 0x0) (rerun: 32)

5.646769533s ago: executing program 3 (id=3061):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001f00000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r0, 0xda90)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x34, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
socket$inet6(0xa, 0x3, 0x3ff)
unshare(0x6a040000)
r4 = socket(0x10, 0x803, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00080300000000000000330000000e0001006e657464657673696d0000000f0002006e657064657673696d30000008008e0000000000"], 0x3c}}, 0x20000040)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20048010)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
socketpair(0x1a, 0x1, 0x11, &(0x7f0000000040))

3.829297409s ago: executing program 4 (id=3078):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac00000012000105000000000000000000fe00"/56, @ANYBLOB="00000000000000feffffff0000000000040002005c00014001"], 0xac}, 0x1, 0x0, 0x0, 0x20040891}, 0x810)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000480)={<r4=>0x0, 0x8, 0x1, [0x1000000000000, 0x2, 0xfffffffffffffff7, 0x0, 0x100000000], [0x5ff9, 0x81, 0xc, 0xe, 0x200, 0x58062497, 0x259, 0x3, 0x0, 0x1, 0xfffffffffffffff7, 0xfff, 0x1, 0xd155, 0x6, 0x2caf, 0x3, 0x8001, 0x8, 0x0, 0x7f, 0x6, 0x9, 0x3, 0x4, 0x8000000000000001, 0x80, 0x3, 0x7, 0x5, 0x78c, 0x7, 0x8, 0x7, 0x8, 0x9, 0x4, 0x0, 0x2, 0x2, 0x9f9a, 0x1, 0x94, 0x1e0000, 0xe, 0x1, 0x9, 0x1, 0x1000, 0x9, 0x9, 0x9, 0x4, 0x4, 0x3ff, 0x7, 0x6, 0x2, 0xe, 0x6, 0xb, 0x3, 0xc, 0x7fffffff, 0x200, 0x200000000008, 0x77, 0x8, 0x6, 0xa7, 0xffffffffffffff35, 0x4, 0x6, 0x0, 0xbe, 0x8000000000000000, 0x3, 0x3, 0x9, 0x2, 0x9, 0xc, 0x6, 0xb1, 0xfff, 0x4, 0xe, 0x6, 0x7, 0x272, 0x200, 0x80000001, 0x7, 0x8, 0x3, 0x5, 0x0, 0x4, 0x0, 0x5, 0x0, 0x1400000000000, 0xc23, 0x0, 0x1, 0x83, 0x9f, 0x9, 0xd, 0x7, 0x40, 0x7403, 0x8001, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0, 0xfff, 0xad1, 0x4, 0x3]})
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000b40)={r4, 0x3, 0x7, 0x1})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000440)=0xc5, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r6, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365cfe54a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0xfffe}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000)
setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)
socket$kcm(0x29, 0x5, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
close(0x3)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x18, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
socket$inet_udplite(0x2, 0x2, 0x88)
socket$igmp(0x2, 0x3, 0x2)
socket(0x840000000002, 0x3, 0xfa)

3.01433658s ago: executing program 2 (id=3083):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @loopback, @private0, {[], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESHEX=r1], 0x20)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={0x0, 0x0, 0x4020, r3}, 0x18)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)

2.963033627s ago: executing program 4 (id=3084):
r0 = socket$packet(0x11, 0x1, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
socket(0x2c, 0x4, 0x40800)
unshare(0x44040000)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r1, 0x6, 0x7, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
listen(0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6800000010000305000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000040005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa0000080005"], 0x68}}, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'lo\x00'})
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@private1}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8)
sendmsg$nl_generic(r6, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xe8, 0x19, 0x8, 0x70bd25, 0x25dfdbfd, {0x7}, [@nested={0xcc, 0x1f, 0x0, 0x1, [@nested={0x4, 0x48}, @generic="ed4c95a51f4570a9dc13ab2f7a7406c8af28a0ff4b88e47fb1da7ffe7e909adaa05a49858e201d1aa8a187d5f39f8404c56e2dd43da7ce2446a67d9da97704aed0af5d02e1f1d34f86028c1fa4bc73ccbd39a6ee7041575f0e5a3da13c5a5d1192af902422aff84a70811f86939af9aec86d7c5865a877c03b7f1d672ff7c94cfa7f08db4b20f6c5100177c80c0fb7443db55a0a98a3791fcbb39b029f32ba1d4144153df7df8a6239faf8fa39debead378a135aa7bc6c547ee65a340bc77992b24918c2"]}, @generic, @typed={0x8, 0x129, 0x0, 0x0, @uid=r7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x280, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x318, 0xffffffff, 0xffffffff, 0x318, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0x220, 0x280, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x3, 0x3}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x8, 0x7, 0x4, 0xd], 0x3, 0xdab9f66e79d89cfe}, {0x1, [0x0, 0x4, 0x2, 0x0, 0x5, 0x2], 0x1}}}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x410)

2.518520916s ago: executing program 2 (id=3086):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000010000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)

2.453967035s ago: executing program 2 (id=3087):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="540000004800050825bd7000fcdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="0b000000250001"], 0x54}}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080)=0x5, 0x4)

2.317425134s ago: executing program 3 (id=3089):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/77, 0x4d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000003880)=""/4111, 0x100f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/10, 0xa}, {0x0}, {&(0x7f0000000480)=""/16, 0x10}], 0x3}, 0x6}], 0x3, 0x0, 0x0)

2.161746976s ago: executing program 3 (id=3091):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r0, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x40010000, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf1}, [@alu={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, @jmp={0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x110}], {0x95, 0x0, 0x0, 0x1a03d3}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x118, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x427, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x1f, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x1, 0x6, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@buf)

2.102156035s ago: executing program 2 (id=3092):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8)
sendto$inet6(r1, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000005540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/123, 0x7b}, {0x0}], 0x2}, 0x8}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x2, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x202)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000380), 0x8)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x2, 0x2, 0x0)
r5 = socket$kcm(0x29, 0x5, 0x0)
sendmmsg$inet(r5, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x11}}], 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x8, 0x20, 0x48, 0x5, {{0x5, 0x4, 0x1, 0x39, 0x14, 0x64, 0x0, 0x2, 0x0, 0x0, @remote, @empty}}}})
unshare(0x20000400)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x9e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)={@cgroup=r7, r7, 0x2f, 0x2014, 0x4, @value}, 0x20)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0a00000004140100c077326144fd96db"], 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x8044)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
pselect6(0x40, &(0x7f00000002c0)={0x4, 0x9, 0xebf4, 0x8000000000000001, 0x6, 0x4, 0x3, 0x5}, &(0x7f00000003c0)={0x10, 0x81, 0x763, 0x6, 0xffffffffffffffff, 0x5, 0x6, 0x100}, &(0x7f0000000400)={0xd, 0x3, 0x1, 0x2, 0x7, 0x7fffffffffffffff, 0xc00, 0xfffffffffffffff8}, &(0x7f0000000440), &(0x7f0000000500)={&(0x7f0000000480)={[0x2]}, 0x8})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000000400000000000000000200000038000480340001800b00010065787468647200002400028005000200830000000800064000000002080001400000001308000340000000180900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x8c}}, 0x0)

1.979697304s ago: executing program 4 (id=3095):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0xfc, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x3c}, @in=@remote, {0x0, 0x4, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0xfffffffd, 0x2, 0x0, 0x1}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x4810)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100009800aef0400aaaaaaaaaa2e000008000500", @ANYRES32=r3], 0x84}}, 0x20008040)

1.63021371s ago: executing program 4 (id=3096):
socket$inet6(0x10, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r2 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x18}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r3, 0x401c5820, 0x0) (async, rerun: 32)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="020a00140200000025bd7000fcdbdf25a6b6685aa920038c68dc0eda30443b95c98c24a02d4c375f0ab65c15b75222bafc6273678f6cc7af3a6165c7c6a9f4a45acdf9c4505e08e9180d848b3637ef58df12f603b7b2feec084f232366353a67036782b26aa3c055"], 0x10}}, 0x30004000) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000a00)=ANY=[@ANYBLOB="cc010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1cc}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001800090000000000000000001c141000fe00010100080000"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) (async, rerun: 64)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @broadcast, 'veth0\x00'}}, 0x1e) (async, rerun: 64)
r7 = socket$pppoe(0x18, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="8500000088000000040000000000000095"], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0xbb428eaf468c6595, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0)
ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000040)=0x2) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000200001030000000000000000020000000000000002ff000005001600890000004849ac"], 0x24}, 0x1, 0x0, 0x0, 0x240088d4}, 0x0) (async)
r10 = socket$inet6(0xa, 0x2, 0x0)
ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000380)) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'sit0\x00', <r11=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r11}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b4000000000000006910810000000000040000000000000095000000000000007220abb1b364768c328613d20a4d2451a69f9642"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

1.403472128s ago: executing program 4 (id=3098):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2713, 0x0, &(0x7f00000000c0))
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f00000004c0)={0x3, 0x8, "5cffd3", 0x8, 0x9})
epoll_create1(0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r1, 0xc2b8000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x2c, 0x803, 0x0)
socket$tipc(0x1e, 0x4, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=<r5=>0x0)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100)={0x0, r4}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r5, r6, 0x0, 0x5, &(0x7f0000000240)='}&@{\x00'}, 0x30)
socket$inet_mptcp(0x2, 0x1, 0x106)
unshare(0x28000600)
r7 = socket(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0xa, &(0x7f0000000040)={0x3, "761e13"}, 0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x2c, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x400000000000004)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0)

1.185213345s ago: executing program 4 (id=3100):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
unshare(0x6a040000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xb0d, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="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"], 0x14}, 0x1, 0x40030000000000}, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
r7 = accept4(r6, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), r7)
sendmsg$alg(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000)
sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="f200000095", @ANYRES8=r2], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10)
getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000240)={'filter\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffb, 0x7, 0xfee, 0x5, 0x3]}, &(0x7f0000000340)=0x50)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x5, 0x9, 0x7, 0x97d3, 0x73]}, &(0x7f0000000080)=0x50)
sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xd4, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0xa0, 0x0, 0x8}, {0x5f2, 0xb3, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1}, {0x0, 0x0, 0x3}}, [@encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e22, 0x4e22, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, 0xd4}}, 0x0)

1.12852792s ago: executing program 2 (id=3101):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/77, 0x4d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000003880)=""/4111, 0x100f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/10, 0xa}, {0x0}, {&(0x7f0000000480)=""/16, 0x10}], 0x3}, 0x6}], 0x3, 0x0, 0x0)

1.116653397s ago: executing program 3 (id=3102):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x4, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x18)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x30)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000340))
preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000380)=""/11, 0x48}], 0x1, 0x7, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40008, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000600)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x18, r0}, 0x18)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x1f8, 0x803, 0x110, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @multicast2, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @multicast2, @dev}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002400048020000180080001006c6f6700140002800800064000008801080005400000000814000000110001"], 0x78}}, 0x0)
close(0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, &(0x7f0000000080), 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x3, 0x400, 0x8b7}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000440)=[r1, r2, r4, r5, r6, r7], &(0x7f00000004c0)=[{0x2, 0x4, 0xa, 0x9}, {0x5, 0x4, 0xd, 0xc}, {0x4, 0x3, 0xe, 0x3}, {0x0, 0x2, 0x0, 0x2}, {0x3, 0x3, 0xc, 0xc}, {0x5, 0x5, 0xc, 0x3}, {0x2, 0x4, 0xe, 0x9}, {0x2, 0x1, 0xb}, {0x4, 0x3, 0xc, 0xc}, {0x4, 0x5, 0x9, 0xb}], 0x10, 0x7, @void, @value}, 0x94)

991.509215ms ago: executing program 1 (id=3103):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES64=0x0, @ANYRES32], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc"], 0x50)
socket$pppoe(0x18, 0x1, 0x0)

940.432797ms ago: executing program 3 (id=3104):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r2}, 0x4)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x4001, 0x3, 0x2c0, 0x130, 0x37f, 0x148, 0x130, 0x148, 0x228, 0x240, 0x240, 0x228, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x28}, {0x12, "d551"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9b30e07600380000100ffef86dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="59bb00000000000000040100000008000300147e88"], 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x2000c000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0)

917.949578ms ago: executing program 2 (id=3105):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf252400000018000180140002006970365f76746930000000000000000069f66a62ad3ef5aa6d1c83b4f19fbfd11ae2a97ea37f6eb1d874f3464a730eddc896369975d78ae2fb30d7854b180035329ee2e6f19f89ebc942e046"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket(0x2a, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0x200000d}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x20, r4, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8814}, 0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$rds(0x15, 0x5, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
r9 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r9, 0x8)
setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8)
recvmmsg(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x1c, 0x4, 0x1, 0x1, 0x70, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x27, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @timestamp={0x44, 0xc, 0x8e, 0x0, 0x2, [0x9, 0x6]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @timestamp={0x44, 0x10, 0x79, 0x0, 0x4, [0x0, 0x0, 0xfff]}]}}}}})
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)

757.87122ms ago: executing program 1 (id=3106):
socket(0x2a, 0x2, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000003000000b30000007f"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x5, 0x0, 0x64}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000340)={{'\x00', 0x1}, {0x8}, 0xcd, 0x0, 0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000600)="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", 0x193, 0x0, &(0x7f00000007c0)={0x2, 0x1fe, {0x1, 0xc, 0xfc, "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", 0xf5, "60e1035bef616afb27b3ad12ac13aebe9f3ea4aa576e54b15807725840cf01b81fb4dc2e569e0c80044685f7cb325375338e6f087f1df2cd149d43be1b0922d351fc75da5f912c6fbf569853da6cfb462d4f55f1c90637afc77f4551f39c84e480536d583559f518f388faf697ef4e143dfa2e2bbf76cca44f9feb8b1adb933755ad264fa8e199c4ff23e80c84a68dbedc9178317a00a63ace4886cae84142727576330e3dd9a7688cc49b157f287cf455999341b3c92783bcffb1bcaba64bc75ce10bead0ba2a8e54efa7603bd58bdf8b7454345436682a669774b3cba132411f70ccae97c5e1b923a2f54449ba99c5fbf22f85e1"}, 0x9d, "bb47abe8264333108cc37e54e5e4df848ef8072d0c873e3504671ec310675cc9abd11cfe3676fb16084b91475dce26acc4d860c2e720f32251cc41c999efc3f317f39ff39393cddc5aa88e6a4c85e76a6c421db910f05d69adf97e408bb3e512a75b33443824555d1343ccfd4f2ab04e2a5ed0a0c76026471e3a4ce7171aab6e9f58bc1ba817f7395acdde219c8d78c7c0a03de7819580dca530f37cd2"}, 0x2a7})
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001480)=@deltfilter={0x30, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {0x0, 0xffff}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x20044000)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000630140000000000095297e5fdb91fa4a701f00000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

442.466229ms ago: executing program 1 (id=3107):
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x17}, 0xae3e}, 0xffffffffffffff08)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003700), r2)
sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f0000003b80)={0x24, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x24}}, 0x0)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x44, 0x1000}, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0)

315.702349ms ago: executing program 1 (id=3108):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010002000000000000000400e8ff07000700e00000020800020005000000080008007f0000010800040002000000"], 0x34}}, 0x10)

258.526986ms ago: executing program 1 (id=3109):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0x1000000, 0xc7) (async)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0x1000000, 0xc7)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0)
r3 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x6}}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x6}})
sendmsg$kcm(r3, &(0x7f00000005c0)={&(0x7f0000000000)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000100)="c06e4903f4ffd172df8d3ac127d09280a28d61b14d201b9338e5e7eb8ce91ddee1744798a466a8565d23685ae0cea385f43b1af4fdba6d4e7a859340bf4879a22e37dcb813151151c6f51b0c1e", 0x4d}, {&(0x7f0000000180)="a6d34d95ffe403e584192a619a3f40fcc86184e17d7bfe32d26b108d94f0015bd3c7f4e1a12ee9d4df1a1206fa65feb1c7d0408c545de9fd4d559625758deec76f2ecf65a0ac4c13", 0x48}, {&(0x7f0000000240)="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", 0xfa}, {&(0x7f0000000340)="8f38afe0924e34d97d6f5c0d79478659e01caabf0490493b5882a39db4eac7b7201754345119ee50906246288e2529c6a0716d29e8264b885dc857ee9ea2bcbe1411d9887e471fde3095c7b924a5ef17d694934bbeb55640123bdd0d45c4fb5117215ec34cbb338f45baea3ab4f40d8a6668a62abf3ddf2fa996360373d32faa65144b", 0x83}, {&(0x7f0000000400)="6c3e8f689a1f7f804ec2808d76c67d555fc27d2f809e3950f5447bb9dd3362774f523e4764d5ae6f83dbdfd91d5fc4cb5abde3d1ae9ef2df851c73ed78ca820ffbfaf0d52c23670b853af33e6864f427", 0x50}, {&(0x7f0000000480)="e36027244cd4be4a1d672a25e5de9d9d971787ce3147205bd646be6330f8ceb69dae50ae1ccd0bba6cb88114c7955f818ca681dcd05d6479aa45cd0c5f96dbadca055bf17d2c0a730a7e45fe448c119cdc632118b31c992231a5e9245275c2178543e75678fa09e0b277678fe6d712589d55ac4b88a00914aa374e156c0e8f0c00fa676571b85d14d135fd92ca46bbf08c33c58fb4596637ac7c01e2d64da4114ee17f7e50b00876e77c034a80e04a1dab", 0xb1}], 0x6, &(0x7f0000000d80)=[{0x50, 0x117, 0x1, "8cc68bb54cd4c17f5437acc684fe240330ad46899c98857ee35074fe204560282f54c47abffd9e345c1426afbef8b9f316940607e6b68fc0bda9577c"}, {0x100, 0x3a, 0x3, "ac67ea17d9ef0f619d8817529ebdec2bae8bdea117cfe8ada459df51f418d5f1f2beca72d9cfc383f6980785b7508138650474050ab300304e492189b0f3e1943636610bb6cfda504e83188b86ce359c77e2618711464644bb6ddc917f44ec12dbea8a8501c6315bfecdf87c6a79f367e6add381a37ec65ac0308600c66414b8e90b3042c38bca9c4a468bff690e74aeebca987abe903a8ddb069f3d9429e8af566c7a7e8be0ce1bd126de0658766fa5a7175079e311652996083d1275995c51cec15e7f12d83300b1296d228d44daf1c3d955e9cbf885395564166c8b53ce6194d69505af374bdc78f06e"}, {0x1010, 0x117, 0x3, "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"}, {0x30, 0x119, 0x0, "aa081b8a3db62d59f65e1481a796ed04e8f5e8c5354efd77e49f6d507360a430"}, {0x1010, 0x179, 0x7fffffff, "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"}, {0x40, 0x113, 0x8, "ac37a792746185778b9907a45e7a6f03e925809fd25971de23146569afa4939b111b9077e77330a2a5f3a6a4c6b319"}, {0x60, 0x3a, 0x5, "471f61168edf23db822f3f7f7276a91f8eee8d57f51870f256833143c6e5608ead8f5a348bc9bc74e867905baef81653e327f075a49c4e1df9a60481370e89f8ca178b33306485d0a90e"}], 0x2240}, 0x1)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x54}, 0x2, 0x34005}, 0x0)

213.985959ms ago: executing program 3 (id=3110):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x100006, 0x220104, 0xe2a4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
accept4(0xffffffffffffffff, &(0x7f00000008c0)=@phonet, &(0x7f0000000940)=0x80, 0xc00)
socket$kcm(0x11, 0xa, 0x300)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000980)=[{0x3, 0x0, {0x0, 0x1, 0x4}, {0x0, 0xdcbb9386ac2e8b21, 0x4}, 0x21084c09fd3abb39, 0x2}, {0x1, 0x0, {0x0, 0x1, 0x4}, {0x0, 0x0, 0x2}, 0x2, 0x1}], 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1895"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x440, 0x2c, 0xd27, 0x30bda9, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x410, 0x2, [@TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa7e2, 0x3a, 0x9, 0x7d50, 0x10001, 0x80000001, 0x9, 0x5, 0x3ff, 0x1, 0xb000, 0x0, 0xbf, 0x8ee, 0xfffffff9, 0x8, 0xa2fc, 0x1, 0x7fff, 0x6, 0x4b000, 0x80000000, 0xfffeffff, 0xfffffff8, 0x9, 0x2, 0x8, 0x6, 0x4, 0x0, 0x5, 0x46, 0x1, 0x8, 0x7f, 0xffffffff, 0x0, 0x1, 0x5, 0x82, 0x8, 0xb18, 0x5b9, 0x10001, 0xfffffffd, 0x7, 0x3, 0x8, 0x6375, 0x1, 0x8, 0x1, 0xe, 0x2, 0x0, 0xfffffffb, 0x1, 0x9b400000, 0x5, 0xd, 0x6, 0x9211, 0x2, 0x1ff, 0x6, 0x9, 0x4, 0x8c99, 0x1ff, 0x7fffffff, 0x2, 0x94b, 0x8, 0x7ff, 0x8000, 0x0, 0xa, 0x9, 0x6, 0x80, 0x1d5, 0xd, 0x7ff, 0x800, 0x5, 0x7f, 0xb2, 0xc, 0x49, 0x50ac, 0x9, 0xc, 0xfffffffb, 0x101, 0x1, 0xb, 0x1, 0x80000000, 0xc, 0x5, 0xffff, 0x5, 0x400, 0x2, 0x6, 0x6, 0x1, 0x4, 0x9, 0x9f, 0xffffd57e, 0x10, 0x46c, 0x7a5, 0x7, 0x4, 0x6, 0x200, 0xffff, 0x6, 0x5, 0x3, 0x2, 0x4, 0x3, 0x2, 0xd243, 0xd18, 0x10000, 0x8000, 0x0, 0xc9f6, 0x9, 0x1, 0x1e57ab39, 0xfffffff8, 0x7fffffff, 0xff, 0x0, 0x4, 0xe, 0x8001, 0xfffffff7, 0x1, 0xfffffffd, 0x9, 0xffff, 0x6, 0x401, 0x6f3, 0x3, 0x8, 0x4, 0x0, 0x0, 0x1, 0x400, 0x2, 0x7, 0xffffffff, 0x5, 0x400, 0x0, 0xffe00000, 0x8, 0x6, 0x401, 0x1, 0x6, 0x5, 0xa6f, 0x4, 0x8, 0x2, 0x5, 0x5, 0xd46630a, 0x80000000, 0xf0000000, 0x2, 0xf, 0x6, 0x8, 0x5, 0x2, 0x1, 0x7, 0x8000, 0x9, 0x8, 0x7, 0x7, 0x80, 0x4e1, 0xa, 0xa, 0x3, 0x3, 0x8, 0x6, 0x5, 0x1, 0x8, 0x5, 0x99bb, 0x61, 0x8, 0x8000, 0x0, 0x55a, 0x9, 0x3, 0x6, 0x2, 0x6, 0x7, 0x5, 0xfffffffa, 0x7, 0x4, 0xb, 0x1ff, 0x1e9d, 0x1ff, 0x8, 0xc, 0x2f8, 0x400, 0x8001, 0xd5a, 0xb, 0x4376, 0x4, 0xae4, 0x1, 0x5, 0xd1, 0x8, 0x9, 0x6, 0x3, 0x2, 0x6, 0x2, 0x2, 0x61, 0x2, 0x0, 0x4, 0xffff, 0x69, 0xac2, 0x3, 0x7, 0x10]}]}]}}]}, 0x440}, 0x1, 0x0, 0x0, 0x10}, 0x4048884)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010004000000fcdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB='\f\x00,'], 0x28}}, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'sit0\x00', &(0x7f00000006c0)={'erspan0\x00', <r7=>0x0, 0x1, 0x10, 0xffff, 0xc8a, {{0x2b, 0x4, 0x2, 0x17, 0xac, 0x64, 0x0, 0x73, 0x2f, 0x0, @loopback, @empty, {[@rr={0x7, 0x13, 0xd7, [@private=0xa010100, @remote, @remote, @dev={0xac, 0x14, 0x14, 0x36}]}, @generic={0x94, 0x9, "0eba14346761f9"}, @cipso={0x86, 0x2e, 0x1, [{0x5, 0x4, "ea69"}, {0x6, 0x9, "5e5d7dd046c57b"}, {0x2, 0x12, "a581a9c38b7fbc9b75ab80c49d7759eb"}, {0x7, 0x2}, {0x7, 0x7, "ab3aea14b4"}]}, @lsrr={0x83, 0xf, 0x31, [@multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x2c, 0x2a, 0x3, 0x5, [{@multicast1, 0x3}, {@empty, 0xf}, {@broadcast, 0x5c37c9b1}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x8}, {@loopback, 0x52dc5d77}]}, @rr={0x7, 0x13, 0xb, [@remote, @broadcast, @multicast2, @private=0xa010100]}]}}}}})
sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000300)="fd023b4dcbdbb6de99b43c196d1172ef6b6d781b009a5037b5cc4e2c4c10dfe9a25d410424f48c8fdd2216cad9f001d42d9ba8a93c252257379d546f424d169888a68e725c56dbf2839a066b29f4e16ba72c6dcb76212268f947365bb80592a240286375b3847b14f26668430fec37f9defb68c1813ea3736757f1a5d80bce9de4718ed2730eaf36cff36176332d393c6e780d75ad1cfc77b20c1001a2126a6a7fec7c26055dfc26e063bede18fb5a395b881c24952270cbbe320f1bdffb50cbe4f522ce0149459ffce4a1c19af7bdecb489af656d344ab0e3cc0a3263490eaa95241f31383c137e08d0b11edd70292409ca312586", 0xf5}, {&(0x7f0000000400)="bffb17dd577c932bc6e980fb55c0123d3a06dd8d264fdfac52fa8f26b32b96cd888ddd7fdf71af4cca2b846b1afbeab46d8ea151dbfd455030e2b7d5d087b93bb1735b975d747522aec8230d27c115601398", 0x52}, {&(0x7f00000004c0)="2dce2f202013aef321320df17b5dcd34ad645d71a8aa49a1ba22683aac9333489aacc389f33e3935e3a9711a34b1e2543412c260597b4443209f286862814fee311f2561cd5d286c98e5cfbd4d2acfbefd1a2e56aaaf6e042956d56b5cd3ddaad6d901b4b2bf69008c57138d462675e9be9e5e8cd4662b2808c9c139150c17805a3164cefa2dae18c62871d2be58347901a126795a30fb980425fec205b6b58b400e4d763974754452ef52508f121667d07fde61280f33874195f6295bf7f8ae53871a9dd85426cded1da345be05aa9f469ea86511c0757ffbd6", 0xda}], 0x3, &(0x7f00000007c0)=[@ip_retopts={{0x30, 0x0, 0x7, {[@rr={0x7, 0xf, 0x16, [@remote, @empty, @local]}, @rr={0x7, 0xf, 0x25, [@loopback, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast1, @loopback}}}, @ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3e9452b7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffc}}], 0x90}, 0x40040)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000040)={0x7, 'vlan0\x00', {0x2}})
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x3}, 0xe)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x1, 0x5}, 0x2)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a)

0s ago: executing program 1 (id=3111):
socket$xdp(0x2c, 0x3, 0x0) (async)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={<r1=>0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x7, 0x81, 0x10000, 0x258e, 0x7}, &(0x7f00000000c0)=0x98)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1, 0x0, 0x9, 0x8}, &(0x7f0000000140)=0x10) (async)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8)
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}) (async)
getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000240)={'icmp6\x00'}, &(0x7f0000000280)=0x1e)
r4 = accept4$phonet_pipe(r3, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x800)
ioctl$EXT4_IOC_SETFSUUID(r4, 0x4008662c, &(0x7f0000000340)={0x0, 0x0, "95b2bd06f2c67b496a748b8545bd452b"}) (async)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x114, 0x2, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x380}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x90a}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x421}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x400}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0xf7, 0x5]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3ff}]}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x500}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x302}]}, @CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_MARK={0x8}]}, 0x114}, 0x1, 0x0, 0x0, 0x10}, 0x414)
getpeername$inet6(r3, &(0x7f0000000580)={0xa, 0x0, 0x0, @private1}, &(0x7f00000005c0)=0x1c)
r5 = accept4$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000640)=0x14, 0x800)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000680)={0x4, 0x8000}, 0x4) (async)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r7, &(0x7f00000006c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @bcast}, 0x1c)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000800)=@get={0x1, &(0x7f0000000700)=""/210, 0x34400000})
getsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000840), &(0x7f0000000880)=0x4) (async)
connect$inet6(r3, &(0x7f00000008c0)={0xa, 0x4e24, 0x401, @private0, 0xfff}, 0x1c) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_REMOVE(r8, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r9, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async)
bind$x25(0xffffffffffffffff, &(0x7f0000000a80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={<r10=>0xffffffffffffffff})
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000b00)={{0xff, @broadcast, 0x4e23, 0x4, 'lc\x00', 0x8, 0xffffff1c, 0x35}, {@remote, 0x4e20, 0x4, 0x800, 0x865e, 0xc}}, 0x44) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0x1c, 0x7, 0xffffff10, 0x3, 0x44112, r3, 0xffffffff, '\x00', 0x0, r3, 0x5, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d40)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x0, '\x00', r6, r3, 0x4, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xa, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd}, [@map_fd={0x18, 0xa, 0x1, 0x0, r3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000c00)='syzkaller\x00', 0x81, 0x7, &(0x7f0000000c40)=""/7, 0x40f00, 0x0, '\x00', r6, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c80)={0x3, 0x6, 0x5, 0x1c3b}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000dc0)=[r10, r3, r3, r3, r3, r11, r3, r12, r3], &(0x7f0000000e00)=[{0x3, 0x1, 0x1, 0x9c51aeba6105b569}], 0x10, 0x9, @void, @value}, 0x94)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)=@newtfilter={0x2c, 0x2c, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0x7, 0x7}, {0xd, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x4001)

kernel console output (not intermixed with test programs):

000000000 R14: 00007f88b49b5fa0 R15: 00007fff652282b8
[  300.729349][T11002]  </TASK>
[  301.174757][T11003] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  301.193127][T11006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1412'.
[  301.214617][T11003] syzkaller0: entered promiscuous mode
[  301.224439][T11003] syzkaller0: entered allmulticast mode
[  301.244462][T11003] tipc: Resetting bearer <eth:syzkaller0>
[  301.397622][T11020] xt_CT: No such helper "pptp"
[  301.550361][T11000] tipc: Resetting bearer <eth:syzkaller0>
[  301.653296][T11000] tipc: Disabling bearer <eth:syzkaller0>
[  301.669483][T11036] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1417'.
[  301.711880][T11036] bridge_slave_0: entered allmulticast mode
[  301.741831][T11028] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1417'.
[  302.178937][T11057] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  302.218548][ T5140] Bluetooth: hci4: link tx timeout
[  302.224389][ T5140] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  302.348225][T11068] netlink: 'syz.2.1426': attribute type 1 has an invalid length.
[  302.447870][T11074] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1427'.
[  302.461062][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1428'.
[  302.478035][T11068] bond3: entered promiscuous mode
[  302.504806][T11068] 8021q: adding VLAN 0 to HW filter on device bond3
[  302.504883][T11079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1425'.
[  302.594827][T11072] 8021q: adding VLAN 0 to HW filter on device bond4
[  302.604425][T11072] bond3: (slave bond4): making interface the new active one
[  302.613108][T11072] bond4: entered promiscuous mode
[  302.620528][T11072] bond3: (slave bond4): Enslaving as an active interface with an up link
[  302.640537][T11074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1427'.
[  302.681263][T11088] FAULT_INJECTION: forcing a failure.
[  302.681263][T11088] name failslab, interval 1, probability 0, space 0, times 0
[  302.695023][T11088] CPU: 1 UID: 0 PID: 11088 Comm: syz.1.1429 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) 
[  302.695053][T11088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  302.695077][T11088] Call Trace:
[  302.695089][T11088]  <TASK>
[  302.695100][T11088]  dump_stack_lvl+0x189/0x250
[  302.695141][T11088]  ? __pfx_dump_stack_lvl+0x10/0x10
[  302.695174][T11088]  ? __pfx__printk+0x10/0x10
[  302.695201][T11088]  ? __pfx___might_resched+0x10/0x10
[  302.695228][T11088]  should_fail_ex+0x414/0x560
[  302.695258][T11088]  should_failslab+0xa8/0x100
[  302.695291][T11088]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  302.695321][T11088]  ? __alloc_skb+0x112/0x2d0
[  302.695350][T11088]  ? kasan_quarantine_put+0xdd/0x220
[  302.695379][T11088]  __alloc_skb+0x112/0x2d0
[  302.695413][T11088]  inet_netconf_notify_devconf+0x173/0x240
[  302.695442][T11088]  inetdev_event+0x77f/0x15b0
[  302.695462][T11088]  ? __pfx_del_netdev_ips+0x10/0x10
[  302.695481][T11088]  ? __pfx_pass_all_filter+0x10/0x10
[  302.695520][T11088]  ? __pfx_inetdev_event+0x10/0x10
[  302.695562][T11088]  notifier_call_chain+0x1b3/0x3e0
[  302.695596][T11088]  unregister_netdevice_many_notify+0x15d8/0x2320
[  302.695638][T11088]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  302.695661][T11088]  ? stack_depot_save_flags+0x40/0x910
[  302.695683][T11088]  ? netlink_deliver_tap+0x190/0x1b0
[  302.695713][T11088]  ? netlink_sendmsg+0x805/0xb30
[  302.695741][T11088]  ? rtnl_dellink+0x331/0x710
[  302.695777][T11088]  ? unregister_netdevice_queue+0x1b3/0x380
[  302.695809][T11088]  ? __nla_parse+0x40/0x60
[  302.695841][T11088]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  302.695861][T11088]  rtnl_dellink+0x488/0x710
[  302.695897][T11088]  ? __pfx_rtnl_dellink+0x10/0x10
[  302.695945][T11088]  ? kasan_quarantine_put+0xdd/0x220
[  302.696052][T11088]  ? __pfx_rtnl_dellink+0x10/0x10
[  302.696079][T11088]  rtnetlink_rcv_msg+0x7cf/0xb70
[  302.696112][T11088]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  302.696138][T11088]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  302.696171][T11088]  ? ref_tracker_free+0x63a/0x7d0
[  302.696194][T11088]  ? __copy_skb_header+0xa7/0x550
[  302.696237][T11088]  netlink_rcv_skb+0x219/0x490
[  302.696267][T11088]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  302.696296][T11088]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  302.696350][T11088]  ? netlink_deliver_tap+0x2e/0x1b0
[  302.696379][T11088]  ? netlink_deliver_tap+0x2e/0x1b0
[  302.696417][T11088]  netlink_unicast+0x75b/0x8d0
[  302.696458][T11088]  netlink_sendmsg+0x805/0xb30
[  302.696500][T11088]  ? __pfx_netlink_sendmsg+0x10/0x10
[  302.696536][T11088]  ? aa_sock_msg_perm+0x94/0x160
[  302.696574][T11088]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  302.696599][T11088]  ? __pfx_netlink_sendmsg+0x10/0x10
[  302.696632][T11088]  __sock_sendmsg+0x21c/0x270
[  302.696660][T11088]  ____sys_sendmsg+0x505/0x830
[  302.696699][T11088]  ? __pfx_____sys_sendmsg+0x10/0x10
[  302.696747][T11088]  ? import_iovec+0x74/0xa0
[  302.696782][T11088]  ___sys_sendmsg+0x21f/0x2a0
[  302.696817][T11088]  ? __pfx____sys_sendmsg+0x10/0x10
[  302.696893][T11088]  ? __fget_files+0x2a/0x420
[  302.696922][T11088]  ? __fget_files+0x3a0/0x420
[  302.696965][T11088]  __x64_sys_sendmsg+0x19b/0x260
[  302.697000][T11088]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  302.697052][T11088]  ? do_syscall_64+0xba/0x210
[  302.697083][T11088]  do_syscall_64+0xf6/0x210
[  302.697109][T11088]  ? clear_bhb_loop+0x60/0xb0
[  302.697137][T11088]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.697157][T11088] RIP: 0033:0x7f800f58e969
[  302.697176][T11088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  302.697194][T11088] RSP: 002b:00007f801033a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  302.697217][T11088] RAX: ffffffffffffffda RBX: 00007f800f7b6080 RCX: 00007f800f58e969
[  302.697232][T11088] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006
[  302.697246][T11088] RBP: 00007f801033a090 R08: 0000000000000000 R09: 0000000000000000
[  302.697259][T11088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  302.697285][T11088] R13: 0000000000000000 R14: 00007f800f7b6080 R15: 00007fff3a870c38
[  302.697320][T11088]  </TASK>
[  303.253967][T11092] netlink: 'syz.2.1431': attribute type 10 has an invalid length.
[  303.295608][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1427'.
[  303.496571][T11103] lo speed is unknown, defaulting to 1000
[  303.765890][T11125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1437'.
[  304.268043][ T5834] Bluetooth: hci4: command 0x0405 tx timeout
[  304.814347][T11140] netlink: 'syz.1.1444': attribute type 11 has an invalid length.
[  304.977673][T11144] batadv_slave_0: entered promiscuous mode
[  305.063238][T11143] batadv_slave_0: left promiscuous mode
[  305.501880][T11165] __nla_validate_parse: 2 callbacks suppressed
[  305.501900][T11165] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1450'.
[  305.529518][T11165] tc_dump_action: action bad kind
[  305.556321][T11164] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1450'.
[  305.585639][T11164] tc_dump_action: action bad kind
[  305.842955][T11178] netlink: 'syz.1.1456': attribute type 4 has an invalid length.
[  306.189014][T11200] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 1, id = 0
[  306.326059][T11206] IPVS: Error connecting to the multicast addr
[  306.641213][T11214] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  306.745397][T11219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1467'.
[  307.466115][T11234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1470'.
[  307.808053][T11223] lo speed is unknown, defaulting to 1000
[  307.912780][T11253] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1475'.
[  308.353920][T11264] IPVS: length: 78 != 8
[  308.427111][ T5834] Bluetooth: hci4: command 0x0405 tx timeout
[  308.590272][T11269] syzkaller0: entered allmulticast mode
[  308.602978][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1478'.
[  308.612716][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1478'.
[  308.648270][T11269] syzkaller0: entered promiscuous mode
[  308.660111][T11275] netlink: 'syz.3.1479': attribute type 3 has an invalid length.
[  308.672447][T11275] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1479'.
[  308.728715][T11276] lo speed is unknown, defaulting to 1000
[  308.813387][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1480'.
[  308.993252][T11285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1482'.
[  309.006367][T11283] netlink: 'syz.2.1481': attribute type 1 has an invalid length.
[  309.035305][T11283] netlink: 'syz.2.1481': attribute type 1 has an invalid length.
[  309.409953][T11268] syzkaller0: left promiscuous mode
[  309.415641][T11268] syzkaller0: left allmulticast mode
[  309.485951][T11297] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  309.676612][T11303] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  310.003075][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.037847][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.292279][T11343] xt_TCPMSS: Only works on TCP SYN packets
[  310.543431][T11356] __nla_validate_parse: 6 callbacks suppressed
[  310.543454][T11356] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1506'.
[  310.554799][T11354] lo speed is unknown, defaulting to 1000
[  310.586618][T11359] sctp: [Deprecated]: syz.4.1505 (pid 11359) Use of struct sctp_assoc_value in delayed_ack socket option.
[  310.586618][T11359] Use struct sctp_sack_info instead
[  310.660590][T11359] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1505'.
[  310.846190][T11368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1507'.
[  312.006122][T11423] bridge0: entered allmulticast mode
[  312.019757][T11423] pim6reg: entered allmulticast mode
[  312.315824][T11439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1530'.
[  312.730956][T11439] team0 (unregistering): Port device team_slave_0 removed
[  312.743535][T11439] team0 (unregistering): Port device team_slave_1 removed
[  312.764506][T11439] team0 (unregistering): Port device wlan1 removed
[  313.174440][T11484] netlink: 'syz.1.1544': attribute type 1 has an invalid length.
[  313.444694][T11495] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1546'.
[  313.491564][T11495] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  314.021808][T11535] xt_SECMARK: invalid mode: 0
[  314.327028][T11543] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0
[  314.562575][T11554] pim6reg1: entered promiscuous mode
[  314.569162][T11554] pim6reg1: entered allmulticast mode
[  314.634026][T11557] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1568'.
[  314.725211][T11554] 8021q: adding VLAN 0 to HW filter on device bond3
[  314.739058][T11554] team0: Port device bond3 added
[  315.019182][T11568] Bluetooth: MGMT ver 1.23
[  315.123531][T11572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1571'.
[  315.206441][T11576] netlink: 'syz.4.1574': attribute type 30 has an invalid length.
[  315.822265][T11593] lo speed is unknown, defaulting to 1000
[  315.846535][T11594] lo speed is unknown, defaulting to 1000
[  315.951923][T11600] lo speed is unknown, defaulting to 1000
[  316.013800][T11610] xt_TCPMSS: Only works on TCP SYN packets
[  317.117172][T11662] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1599'.
[  317.153642][T11662] netlink: 'syz.0.1599': attribute type 10 has an invalid length.
[  317.240452][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  317.402994][T11680] netlink: 'syz.0.1607': attribute type 11 has an invalid length.
[  317.412138][T11680] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1607'.
[  317.631823][T11684] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma?
[  317.658428][T11689] hsr0: entered promiscuous mode
[  317.664346][T11689] macvtap0: entered promiscuous mode
[  317.671717][T11689] macvtap0: entered allmulticast mode
[  317.677472][T11689] hsr0: entered allmulticast mode
[  317.682659][T11689] hsr_slave_0: entered allmulticast mode
[  317.690102][T11689] hsr_slave_1: entered allmulticast mode
[  317.715034][T11689] hsr0: left allmulticast mode
[  317.721505][T11689] hsr_slave_0: left allmulticast mode
[  317.732687][T11689] hsr_slave_1: left allmulticast mode
[  318.440834][T11722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1616'.
[  318.471170][T11722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1616'.
[  318.513317][T11722] dummy0: entered promiscuous mode
[  318.528358][T11722] team0: entered promiscuous mode
[  318.557959][T11731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1624'.
[  318.557968][T11722] team_slave_0: entered promiscuous mode
[  318.577249][T11734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1621'.
[  318.618337][T11722] team_slave_1: entered promiscuous mode
[  318.625087][T11722] geneve0: entered promiscuous mode
[  318.632052][T11722] bond3: entered promiscuous mode
[  318.640567][T11722] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  318.651742][T11722] Cannot create hsr debugfs directory
[  318.658230][T11722] hsr0: Slave B (team0) is not up; please bring it up to get a fully working HSR network
[  318.814553][T11751] netlink: 'syz.1.1628': attribute type 1 has an invalid length.
[  318.834855][T11752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1627'.
[  318.855196][T11751] 8021q: adding VLAN 0 to HW filter on device bond5
[  318.884700][T11751] bond5: (slave ip6gretap1): making interface the new active one
[  318.896565][T11751] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link
[  319.152708][T11764] netlink: 'syz.0.1630': attribute type 10 has an invalid length.
[  319.363816][T11777] netlink: 'syz.4.1635': attribute type 1 has an invalid length.
[  319.380958][T11777] netlink: 'syz.4.1635': attribute type 2 has an invalid length.
[  319.461755][T11784] netlink: 'syz.1.1639': attribute type 1 has an invalid length.
[  319.472629][T11787] netlink: 'syz.1.1639': attribute type 1 has an invalid length.
[  319.677810][T11795] tun0: tun_chr_ioctl cmd 1074812117
[  319.751316][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1640'.
[  320.263299][T11823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1654'.
[  320.724745][T11848] syzkaller1: entered promiscuous mode
[  320.736915][T11848] syzkaller1: entered allmulticast mode
[  320.743307][T11852] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1657'.
[  320.753016][T11848] syzkaller1: left promiscuous mode
[  320.753039][T11848] syzkaller1: left allmulticast mode
[  320.785756][T11853] netlink: 'syz.3.1658': attribute type 1 has an invalid length.
[  321.259880][T11870] lo speed is unknown, defaulting to 1000
[  321.335692][T11876] vlan0: entered allmulticast mode
[  321.342044][T11876] batadv0: entered allmulticast mode
[  321.862923][T11896] netlink: 'syz.2.1672': attribute type 1 has an invalid length.
[  321.873030][T11894] No such timeout policy "syz0"
[  321.916089][T11901] netlink: 'syz.0.1674': attribute type 21 has an invalid length.
[  321.928646][T11896] bond5: entered promiscuous mode
[  321.934321][T11896] 8021q: adding VLAN 0 to HW filter on device bond5
[  321.976171][T11903] 8021q: adding VLAN 0 to HW filter on device bond5
[  321.983628][T11903] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  322.005724][T11904] netlink: 'syz.3.1675': attribute type 2 has an invalid length.
[  322.013953][T11903] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  322.027482][T11903] bond5: (slave ip6gre1): making interface the new active one
[  322.035151][T11903] ip6gre1: entered promiscuous mode
[  322.043706][T11903] bond5: (slave ip6gre1): Enslaving as an active interface with an up link
[  322.052638][T11901] netlink: 'syz.0.1674': attribute type 4 has an invalid length.
[  322.079538][T11901] netlink: 'syz.0.1674': attribute type 3 has an invalid length.
[  322.079925][T11906] netlink: 'syz.0.1674': attribute type 2 has an invalid length.
[  322.424011][T11915] __nla_validate_parse: 10 callbacks suppressed
[  322.424035][T11915] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1680'.
[  322.447448][T11918] sock: sock_timestamping_bind_phc: sock not bind to device
[  322.465246][T11918] erspan1: entered promiscuous mode
[  322.471755][T11918] erspan1: entered allmulticast mode
[  323.018732][T11946] lo speed is unknown, defaulting to 1000
[  323.169048][T11949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1690'.
[  323.350526][T11956] netlink: 'syz.4.1693': attribute type 32 has an invalid length.
[  323.512563][T11962] netlink: 'syz.2.1689': attribute type 23 has an invalid length.
[  323.525179][T11961] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  323.546639][T11961] netlink: 'syz.1.1695': attribute type 3 has an invalid length.
[  323.738144][T11968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  323.799449][T11978] netlink: 204732 bytes leftover after parsing attributes in process `syz.0.1699'.
[  323.935198][T11986] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  324.004053][T11988] syzkaller0: entered promiscuous mode
[  324.011543][T11988] syzkaller0: entered allmulticast mode
[  325.678349][T12001] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1708'.
[  325.949189][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1715'.
[  325.968761][T12028] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1715'.
[  326.059977][T12036] siw: device registration error -23
[  326.337522][T12047] ipvlan2: entered allmulticast mode
[  326.343153][T12047] macsec0: entered allmulticast mode
[  326.355420][T12054] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1724'.
[  326.517413][T12067] ipvlan2: entered promiscuous mode
[  326.524785][T12067] bridge0: port 1(ipvlan2) entered blocking state
[  326.532606][T12067] bridge0: port 1(ipvlan2) entered disabled state
[  326.542716][T12067] ipvlan2: entered allmulticast mode
[  326.550990][T12067] ipvlan2: left allmulticast mode
[  326.663465][T12071] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1723'.
[  327.267776][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1740'.
[  327.277295][T12110] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  327.286130][T12110] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  327.382714][T12112] xt_CT: You must specify a L4 protocol and not use inversions on it
[  327.859280][T12130] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1747'.
[  327.945295][T12141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1748'.
[  328.003593][T12140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1751'.
[  328.143061][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1752'.
[  328.417667][T12165] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  328.445400][T12165] syzkaller0: entered promiscuous mode
[  328.451266][T12165] syzkaller0: entered allmulticast mode
[  328.673856][T12173] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  328.807012][T12179] : entered promiscuous mode
[  328.836673][T12179] lo speed is unknown, defaulting to 1000
[  328.936362][T12179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1760'.
[  329.124088][T12196] validate_nla: 1 callbacks suppressed
[  329.124109][T12196] netlink: 'syz.0.1764': attribute type 10 has an invalid length.
[  329.222292][T12196] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  329.796107][T12235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1777'.
[  329.836269][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1777'.
[  330.005443][T12251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1783'.
[  330.015579][T12251] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1783'.
[  330.025776][T12251] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1783'.
[  330.613780][T12278] netlink: 'syz.0.1787': attribute type 4 has an invalid length.
[  330.731026][T12288] lo speed is unknown, defaulting to 1000
[  330.739999][T12287] lo speed is unknown, defaulting to 1000
[  331.301358][T12275] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  331.646657][T12308] vcan0: tx drop: invalid da for name 0x0000000000000002
[  331.677969][T12316] nbd: must specify at least one socket
[  331.678764][T12308] lo speed is unknown, defaulting to 1000
[  331.732266][T12314] lo: entered promiscuous mode
[  331.737881][T12314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  332.522305][T12357] netlink: 'syz.0.1810': attribute type 1 has an invalid length.
[  332.662873][T12364] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  332.896420][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880289db400: rx timeout, send abort
[  333.092875][T12381] __nla_validate_parse: 6 callbacks suppressed
[  333.092893][T12381] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1821'.
[  333.111094][T12381] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1821'.
[  333.128170][T12381] bond_slave_1: entered promiscuous mode
[  333.135565][T12381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1821'.
[  333.224014][T12381] bond0: (slave bond_slave_1): Releasing backup interface
[  333.245812][T12381] bond_slave_1 (unregistering): left promiscuous mode
[  333.405027][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880289db400: abort rx timeout. Force session deactivation
[  333.776551][T12410] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  333.802124][T12413] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1827'.
[  333.967820][T12419] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1831'.
[  334.181439][T12434] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:2
[  334.206314][T12427] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:2
[  334.231002][T12434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1832'.
[  334.242157][T12427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1832'.
[  334.370039][T12442] Dead loop on virtual device ip6_vti0, fix it urgently!
[  334.379359][T12442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1838'.
[  334.978878][T12474] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1851'.
[  335.521709][T12495] xt_CT: No such helper "pptp"
[  335.930037][T12510] netlink: 'syz.2.1860': attribute type 1 has an invalid length.
[  335.942462][T12510] netlink: 'syz.2.1860': attribute type 1 has an invalid length.
[  335.967336][T12510] netlink: 784 bytes leftover after parsing attributes in process `syz.2.1860'.
[  335.988719][T12511] lo speed is unknown, defaulting to 1000
[  336.626543][T12534] lo speed is unknown, defaulting to 1000
[  337.557972][T12568] netlink: 'syz.4.1877': attribute type 1 has an invalid length.
[  337.566038][T12568] netlink: 'syz.4.1877': attribute type 1 has an invalid length.
[  337.874781][T12584] lo speed is unknown, defaulting to 1000
[  338.560483][T12605] netlink: 'syz.1.1888': attribute type 39 has an invalid length.
[  338.683021][T12610] ip6gretap0: entered promiscuous mode
[  338.695866][T12610] vlan1: entered promiscuous mode
[  338.835751][T12604] lo speed is unknown, defaulting to 1000
[  338.952413][T12623] __nla_validate_parse: 6 callbacks suppressed
[  338.952434][T12623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1891'.
[  339.157741][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1893'.
[  339.171948][   T30] audit: type=1800 audit(1747386883.501:8): pid=12634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1896" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1759 res=0 errno=0
[  339.267743][   T30] audit: type=1800 audit(1747386883.501:9): pid=12634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1896" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1759 res=0 errno=0
[  339.452026][ T5164] IPVS: starting estimator thread 0...
[  339.551886][T12647] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20000
[  339.622295][T12644] IPVS: using max 25 ests per chain, 60000 per kthread
[  339.805217][T12661] lo speed is unknown, defaulting to 1000
[  340.012915][   T65] IPVS: stop unused estimator thread 0...
[  340.086458][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.137314][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.526706][T12683] netlink: 'syz.1.1912': attribute type 1 has an invalid length.
[  340.630878][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1911'.
[  340.690374][T12690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1913'.
[  340.722318][T12690] ip6t_REJECT: ECHOREPLY is not supported
[  340.893208][T12698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1915'.
[  341.173045][T12714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1922'.
[  341.534265][T12726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1925'.
[  341.543763][T12720] lo speed is unknown, defaulting to 1000
[  341.749290][T12724] lo speed is unknown, defaulting to 1000
[  341.886342][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1927'.
[  341.895875][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1927'.
[  341.905116][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1927'.
[  344.108532][T12835] bond4 (unregistering): Released all slaves
[  344.321396][T12848] x_tables: duplicate underflow at hook 3
[  344.330847][T12847] x_tables: duplicate underflow at hook 3
[  344.834174][T12869] __nla_validate_parse: 9 callbacks suppressed
[  344.834188][T12869] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1967'.
[  344.945206][T12874] veth0_to_bridge: entered promiscuous mode
[  344.998750][T12868] veth0_to_bridge: left promiscuous mode
[  345.071579][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1969'.
[  345.207046][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1972'.
[  345.752442][T12922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1980'.
[  346.197915][T12937] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1985'.
[  346.230009][T12937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1985'.
[  346.399480][T12944] lo speed is unknown, defaulting to 1000
[  346.735692][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1990'.
[  346.774403][T12953] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  346.796546][T12953] IPVS: set_ctl: invalid protocol: 47 172.20.20.63:20001
[  346.850650][T12955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1991'.
[  346.970226][T12967] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1994'.
[  347.141833][T12976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1997'.
[  347.424144][T12985] lo speed is unknown, defaulting to 1000
[  347.503014][T12992] netlink: 'syz.1.2001': attribute type 5 has an invalid length.
[  347.981128][T12995] lo speed is unknown, defaulting to 1000
[  348.446703][T13015] lo speed is unknown, defaulting to 1000
[  348.504947][T13019] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  349.278873][T13041] tun0: tun_chr_ioctl cmd 1074812117
[  349.818710][T13067] netlink: 'syz.3.2021': attribute type 4 has an invalid length.
[  349.864474][ T5884] lo speed is unknown, defaulting to 1000
[  349.882046][ T5884] syz1: Port: 1 Link DOWN
[  350.376424][T13089] netlink: 'syz.3.2028': attribute type 303 has an invalid length.
[  350.538012][T13089] __nla_validate_parse: 2 callbacks suppressed
[  350.538034][T13089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2028'.
[  350.660526][T13104] lo speed is unknown, defaulting to 1000
[  350.667785][T13110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2035'.
[  350.692685][T13110] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2035'.
[  350.702290][T13110] nbd: illegal input index 65508
[  350.721818][T13111] bridge_slave_0: entered promiscuous mode
[  350.815041][T13100] lo speed is unknown, defaulting to 1000
[  351.130022][T13117] batadv_slave_1: entered promiscuous mode
[  351.341060][T13126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2032'.
[  351.452619][T13108] batadv_slave_1: left promiscuous mode
[  351.462063][T13108] bridge_slave_0: left promiscuous mode
[  351.504058][T13139] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  351.569831][T13141] xt_bpf: check failed: parse error
[  351.582752][T13141] netlink: 'syz.1.2042': attribute type 1 has an invalid length.
[  351.591571][T13141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2042'.
[  351.728934][T13146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2044'.
[  351.750327][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2045'.
[  352.047166][T13143] veth5: entered promiscuous mode
[  352.195166][T13164] FAULT_INJECTION: forcing a failure.
[  352.195166][T13164] name failslab, interval 1, probability 0, space 0, times 0
[  352.220553][T13164] CPU: 0 UID: 0 PID: 13164 Comm: syz.2.2046 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) 
[  352.220600][T13164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  352.220615][T13164] Call Trace:
[  352.220625][T13164]  <TASK>
[  352.220636][T13164]  dump_stack_lvl+0x189/0x250
[  352.220681][T13164]  ? __pfx_dump_stack_lvl+0x10/0x10
[  352.220828][T13164]  ? __pfx__printk+0x10/0x10
[  352.220862][T13164]  ? __pfx___might_resched+0x10/0x10
[  352.220885][T13164]  ? fs_reclaim_acquire+0x7d/0x100
[  352.220930][T13164]  should_fail_ex+0x414/0x560
[  352.220963][T13164]  should_failslab+0xa8/0x100
[  352.220999][T13164]  __kmalloc_noprof+0xcb/0x4f0
[  352.221028][T13164]  ? kfree+0x4d/0x440
[  352.221054][T13164]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  352.221092][T13164]  tomoyo_realpath_from_path+0xe3/0x5d0
[  352.221127][T13164]  ? tomoyo_domain+0xda/0x130
[  352.221168][T13164]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  352.221196][T13164]  tomoyo_path_number_perm+0x1e8/0x5a0
[  352.221225][T13164]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  352.221274][T13164]  ? __lock_acquire+0xaac/0xd20
[  352.221334][T13164]  ? __fget_files+0x2a/0x420
[  352.221373][T13164]  ? __fget_files+0x3a0/0x420
[  352.221404][T13164]  ? __fget_files+0x2a/0x420
[  352.221441][T13164]  security_file_ioctl+0xcb/0x2d0
[  352.221467][T13164]  __se_sys_ioctl+0x47/0x170
[  352.221497][T13164]  do_syscall_64+0xf6/0x210
[  352.221528][T13164]  ? clear_bhb_loop+0x60/0xb0
[  352.221558][T13164]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.221581][T13164] RIP: 0033:0x7f57f438e969
[  352.221603][T13164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  352.221624][T13164] RSP: 002b:00007f57f5158038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  352.221650][T13164] RAX: ffffffffffffffda RBX: 00007f57f45b5fa0 RCX: 00007f57f438e969
[  352.221668][T13164] RDX: 0000200000000180 RSI: 0000000000008955 RDI: 0000000000000005
[  352.221692][T13164] RBP: 00007f57f5158090 R08: 0000000000000000 R09: 0000000000000000
[  352.221708][T13164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  352.221722][T13164] R13: 0000000000000000 R14: 00007f57f45b5fa0 R15: 00007fff2797a288
[  352.221759][T13164]  </TASK>
[  352.221769][T13164] ERROR: Out of memory at tomoyo_realpath_from_path.
[  352.791619][T13180] bond5: (slave ip6gretap1): Releasing active interface
[  352.949041][T13186] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2054'.
[  352.979323][T13186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2054'.
[  353.055633][T13186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2054'.
[  353.173755][T13182] lo speed is unknown, defaulting to 1000
[  353.561064][T13202] lo speed is unknown, defaulting to 1000
[  354.202237][T13225] FAULT_INJECTION: forcing a failure.
[  354.202237][T13225] name failslab, interval 1, probability 0, space 0, times 0
[  354.249880][T13225] CPU: 1 UID: 0 PID: 13225 Comm: syz.0.2063 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) 
[  354.249914][T13225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  354.249928][T13225] Call Trace:
[  354.249944][T13225]  <TASK>
[  354.249954][T13225]  dump_stack_lvl+0x189/0x250
[  354.249996][T13225]  ? __pfx_dump_stack_lvl+0x10/0x10
[  354.250027][T13225]  ? __pfx__printk+0x10/0x10
[  354.250053][T13225]  ? __pfx___might_resched+0x10/0x10
[  354.250074][T13225]  ? fs_reclaim_acquire+0x7d/0x100
[  354.250114][T13225]  should_fail_ex+0x414/0x560
[  354.250143][T13225]  should_failslab+0xa8/0x100
[  354.250175][T13225]  __kmalloc_noprof+0xcb/0x4f0
[  354.250202][T13225]  ? tomoyo_encode+0x28b/0x550
[  354.250236][T13225]  tomoyo_encode+0x28b/0x550
[  354.250271][T13225]  tomoyo_realpath_from_path+0x58d/0x5d0
[  354.250303][T13225]  ? tomoyo_domain+0xda/0x130
[  354.250338][T13225]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  354.250361][T13225]  tomoyo_path_number_perm+0x1e8/0x5a0
[  354.250389][T13225]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  354.250432][T13225]  ? __lock_acquire+0xaac/0xd20
[  354.250497][T13225]  ? __fget_files+0x2a/0x420
[  354.250532][T13225]  ? __fget_files+0x3a0/0x420
[  354.250559][T13225]  ? __fget_files+0x2a/0x420
[  354.250594][T13225]  security_file_ioctl+0xcb/0x2d0
[  354.250617][T13225]  __se_sys_ioctl+0x47/0x170
[  354.250645][T13225]  do_syscall_64+0xf6/0x210
[  354.250673][T13225]  ? clear_bhb_loop+0x60/0xb0
[  354.250699][T13225]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.250720][T13225] RIP: 0033:0x7f0cdcb8e969
[  354.250740][T13225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  354.250760][T13225] RSP: 002b:00007f0cdd9a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  354.250783][T13225] RAX: ffffffffffffffda RBX: 00007f0cdcdb6080 RCX: 00007f0cdcb8e969
[  354.250798][T13225] RDX: 0000200000000180 RSI: 0000000000008955 RDI: 0000000000000005
[  354.250812][T13225] RBP: 00007f0cdd9a6090 R08: 0000000000000000 R09: 0000000000000000
[  354.250825][T13225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  354.250837][T13225] R13: 0000000000000000 R14: 00007f0cdcdb6080 R15: 00007fff80871a28
[  354.250872][T13225]  </TASK>
[  354.250924][T13225] ERROR: Out of memory at tomoyo_realpath_from_path.
[  354.964839][T13261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.980051][T13261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  355.229946][T13274] FAULT_INJECTION: forcing a failure.
[  355.229946][T13274] name failslab, interval 1, probability 0, space 0, times 0
[  355.238539][T13275] x_tables: duplicate underflow at hook 2
[  355.244080][T13274] CPU: 1 UID: 0 PID: 13274 Comm: syz.3.2079 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) 
[  355.244115][T13274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  355.244130][T13274] Call Trace:
[  355.244140][T13274]  <TASK>
[  355.244150][T13274]  dump_stack_lvl+0x189/0x250
[  355.244194][T13274]  ? __pfx_dump_stack_lvl+0x10/0x10
[  355.244231][T13274]  ? __pfx__printk+0x10/0x10
[  355.244260][T13274]  ? __pfx___might_resched+0x10/0x10
[  355.244284][T13274]  ? fs_reclaim_acquire+0x7d/0x100
[  355.244328][T13274]  should_fail_ex+0x414/0x560
[  355.244359][T13274]  should_failslab+0xa8/0x100
[  355.244393][T13274]  __kmalloc_noprof+0xcb/0x4f0
[  355.244431][T13274]  ? tomoyo_encode+0x28b/0x550
[  355.244468][T13274]  tomoyo_encode+0x28b/0x550
[  355.244504][T13274]  tomoyo_realpath_from_path+0x58d/0x5d0
[  355.244537][T13274]  ? tomoyo_domain+0xda/0x130
[  355.244576][T13274]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  355.244603][T13274]  tomoyo_path_number_perm+0x1e8/0x5a0
[  355.244631][T13274]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  355.244676][T13274]  ? __lock_acquire+0xaac/0xd20
[  355.244733][T13274]  ? __fget_files+0x2a/0x420
[  355.244771][T13274]  ? __fget_files+0x3a0/0x420
[  355.244802][T13274]  ? __fget_files+0x2a/0x420
[  355.244839][T13274]  security_file_ioctl+0xcb/0x2d0
[  355.244864][T13274]  __se_sys_ioctl+0x47/0x170
[  355.244893][T13274]  do_syscall_64+0xf6/0x210
[  355.244923][T13274]  ? clear_bhb_loop+0x60/0xb0
[  355.244951][T13274]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.244974][T13274] RIP: 0033:0x7f88b478e969
[  355.244996][T13274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  355.245015][T13274] RSP: 002b:00007f88b55fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  355.245041][T13274] RAX: ffffffffffffffda RBX: 00007f88b49b5fa0 RCX: 00007f88b478e969
[  355.245058][T13274] RDX: 0000200000000180 RSI: 0000000000008955 RDI: 0000000000000005
[  355.245073][T13274] RBP: 00007f88b55fb090 R08: 0000000000000000 R09: 0000000000000000
[  355.245086][T13274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  355.245100][T13274] R13: 0000000000000000 R14: 00007f88b49b5fa0 R15: 00007fff652282b8
[  355.245137][T13274]  </TASK>
[  355.245161][T13274] ERROR: Out of memory at tomoyo_realpath_from_path.
[  355.548145][T13273] batman_adv: batadv0: Adding interface: ip6gretap1
[  355.588211][T13273] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  355.637660][T13273] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active
[  355.650560][T13290] __nla_validate_parse: 7 callbacks suppressed
[  355.650582][T13290] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2083'.
[  355.695712][T13284] batman_adv: batadv0: Removing interface: batadv_slave_0
[  355.708088][T13284] batman_adv: batadv0: Removing interface: batadv_slave_1
[  355.720738][T13284] batman_adv: batadv0: Removing interface: ip6gretap1
[  356.378205][T13325] syzkaller0: entered promiscuous mode
[  356.383809][T13325] syzkaller0: entered allmulticast mode
[  356.436646][T13333] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9
[  356.670471][T13338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2098'.
[  358.079948][T13351] syzkaller1: tun_chr_ioctl cmd 1074025680
[  358.096571][T13351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2102'.
[  358.259410][T13352] lo speed is unknown, defaulting to 1000
[  358.302784][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2105'.
[  358.333706][T13364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2106'.
[  358.569282][T13372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2107'.
[  358.634254][T13374] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2108'.
[  358.937741][T13382] lo speed is unknown, defaulting to 1000
[  358.992667][T13389] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2112'.
[  359.156407][T13392] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  359.286540][T13398] IPv6: NLM_F_REPLACE set, but no existing node found!
[  359.304581][T13399] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20003
[  359.313418][T13398] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2113'.
[  359.326006][T13398] openvswitch: netlink: Missing key (keys=40, expected=80)
[  359.532716][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2118'.
[  359.699518][T13406] macvlan4: entered promiscuous mode
[  359.705191][T13406] bridge0: entered promiscuous mode
[  359.728447][T13413] xt_CT: You must specify a L4 protocol and not use inversions on it
[  359.857618][T13418] tipc: Can't bind to reserved service type 0
[  360.768503][T13465] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  362.055670][T13514] __nla_validate_parse: 2 callbacks suppressed
[  362.055690][T13514] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2149'.
[  362.349792][T13535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2155'.
[  362.395253][T13535] veth1_macvtap: entered promiscuous mode
[  362.580943][T13540] netlink: 'syz.0.2158': attribute type 1 has an invalid length.
[  362.658056][T13543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2158'.
[  362.755497][T13540] bond4: entered promiscuous mode
[  362.772393][T13540] 8021q: adding VLAN 0 to HW filter on device bond4
[  363.722275][T13586] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2173'.
[  363.745362][T13584] macsec1: entered promiscuous mode
[  363.764501][T13584] macsec1: entered allmulticast mode
[  363.784565][T13584] veth1_macvtap: entered allmulticast mode
[  363.822267][T13584] veth1_macvtap: left allmulticast mode
[  364.239978][T13599] xt_CT: No such helper "pptp"
[  364.331320][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2179'.
[  364.463992][T13621] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2179'.
[  364.472316][T13622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2182'.
[  364.963150][T13636] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2185'.
[  365.222701][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2188'.
[  365.232923][T13644] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2188'.
[  366.701859][T13684] netlink: 'syz.0.2199': attribute type 21 has an invalid length.
[  367.194976][T13697] __nla_validate_parse: 4 callbacks suppressed
[  367.195000][T13697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2202'.
[  367.304036][T13697] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2202'.
[  367.952815][T13717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2209'.
[  368.129705][T13724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2214'.
[  368.228346][T13727] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2210'.
[  368.314267][T13733] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2216'.
[  368.334558][T13733] pim6reg9: entered allmulticast mode
[  368.978311][T13727] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  369.100269][T13760] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2224'.
[  369.336422][T13760] bridge0 (unregistering): left allmulticast mode
[  369.434759][T13764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2226'.
[  369.445343][T13764] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2226'.
[  369.557527][T13771] lo speed is unknown, defaulting to 1000
[  369.644275][T13775] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  369.703579][T13775] netlink: 'syz.2.2228': attribute type 2 has an invalid length.
[  369.733430][T13775] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2228'.
[  370.379512][T13794] xt_CT: No such helper "pptp"
[  370.992699][T13824] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.387193][T13837] lo speed is unknown, defaulting to 1000
[  371.635586][T13863] netlink: 'syz.1.2258': attribute type 39 has an invalid length.
[  372.501183][T13911] lo speed is unknown, defaulting to 1000
[  372.599335][T13912] lo speed is unknown, defaulting to 1000
[  372.991468][T13924] lo speed is unknown, defaulting to 1000
[  373.012132][T13933] __nla_validate_parse: 13 callbacks suppressed
[  373.012153][T13933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2276'.
[  373.120996][T13933] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2276'.
[  373.164724][T13931] lo speed is unknown, defaulting to 1000
[  373.294916][T13944] lo speed is unknown, defaulting to 1000
[  373.722764][T13958] xt_CT: You must specify a L4 protocol and not use inversions on it
[  374.323379][T13970] netlink: 'syz.1.2290': attribute type 10 has an invalid length.
[  374.332828][T13970] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2290'.
[  374.342176][T13970] team0: entered promiscuous mode
[  374.350724][T13970] team0: entered allmulticast mode
[  374.357015][T13970] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  374.575037][T13989] xt_nfacct: accounting object `syz1' does not exists
[  374.694626][T13994] batman_adv: batadv0: Adding interface: ip6gretap3
[  374.780159][T13994] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  374.816950][T13994] batman_adv: batadv0: Not using interface ip6gretap3 (retrying later): interface not active
[  375.051239][T14014] netlink: 'syz.1.2302': attribute type 1 has an invalid length.
[  375.060252][T14014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2302'.
[  375.207804][T14022] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2301'.
[  375.542554][T14028] xt_CT: No such helper "pptp"
[  375.720153][T14043] tipc: New replicast peer: 255.255.255.255
[  375.727240][T14043] tipc: Enabled bearer <udp:syz2>, priority 10
[  375.805188][T14054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2309'.
[  375.914850][T14052] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2312'.
[  375.939913][T14053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2312'.
[  375.960664][T14052] gretap0: entered promiscuous mode
[  376.168498][T14072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2315'.
[  376.238902][T14075] batadv_slave_1: entered promiscuous mode
[  376.245199][T14075] batadv_slave_1: left promiscuous mode
[  376.421422][T14085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2317'.
[  376.717021][ T5886] tipc: Node number set to 3545176731
[  377.859543][T14099] hsr0: left promiscuous mode
[  378.024110][T14099] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  378.046907][T14099] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  378.055416][T14099] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  378.067438][T14099] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  378.119797][T14099] dummy0: left allmulticast mode
[  378.304875][T14095] 8021q: adding VLAN 0 to HW filter on device bond0
[  378.314275][T14095] 8021q: adding VLAN 0 to HW filter on device team0
[  378.322603][T14095] dummy0: left promiscuous mode
[  378.330049][T14095] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  378.442887][T14135] sctp: [Deprecated]: syz.1.2328 (pid 14135) Use of struct sctp_assoc_value in delayed_ack socket option.
[  378.442887][T14135] Use struct sctp_sack_info instead
[  378.539188][T14140] netlink: 'syz.1.2328': attribute type 1 has an invalid length.
[  378.674263][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  378.773387][T14150] __nla_validate_parse: 1 callbacks suppressed
[  378.773409][T14150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2332'.
[  378.795153][T14150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2332'.
[  378.796328][T14142] xt_CT: No such helper "pptp"
[  378.920102][T14152] lo speed is unknown, defaulting to 1000
[  378.940852][T14155] netlink: 'syz.4.2335': attribute type 9 has an invalid length.
[  379.049053][T14160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2336'.
[  379.302582][T14167] lo speed is unknown, defaulting to 1000
[  379.461008][T14163] lo speed is unknown, defaulting to 1000
[  379.845303][T14177] bridge_slave_0: left allmulticast mode
[  379.870757][T14177] bridge_slave_0: left promiscuous mode
[  379.876620][T14177] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.904399][T14177] bridge_slave_1: left allmulticast mode
[  379.921777][T14177] bridge_slave_1: left promiscuous mode
[  379.943594][T14177] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.979469][T14177] bond0: (slave bond_slave_0): Releasing backup interface
[  379.992745][T14177] team_slave_0: left promiscuous mode
[  380.009214][T14177] team0: Failed to send options change via netlink (err -105)
[  380.027077][T14177] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  380.047000][T14177] team0: Port device team_slave_0 removed
[  380.053433][T14177] team_slave_1: left promiscuous mode
[  380.071476][T14177] team0: Failed to send options change via netlink (err -105)
[  380.083379][T14177] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  380.093471][T14177] team0: Port device team_slave_1 removed
[  380.103955][T14177] geneve0: left promiscuous mode
[  380.128073][T14177] team0: Failed to send options change via netlink (err -105)
[  380.140481][T14177] team0: Failed to send port change of device geneve0 via netlink (err -105)
[  380.151273][T14177] team0: Port device geneve0 removed
[  380.164096][T14177] bond1: (slave vcan1): Releasing backup interface
[  380.186373][T14177] bond1: (slave vcan2): making interface the new active one
[  380.226248][T14177] bond1: (slave vcan2): Releasing backup interface
[  380.277370][T14177] bond3: left promiscuous mode
[  380.303996][T14177] team0: Failed to send options change via netlink (err -105)
[  380.330519][T14177] team0: Failed to send port change of device bond3 via netlink (err -105)
[  380.347558][T14177] team0: Port device bond3 removed
[  380.371745][T14182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2341'.
[  380.393807][T14194] xt_CT: No such helper "pptp"
[  381.315640][T14211] nbd: socks must be embedded in a SOCK_ITEM attr
[  381.456510][T14211] block nbd0: shutting down sockets
[  381.645410][T14228] xt_CT: No such helper "pptp"
[  381.841093][T14240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2359'.
[  381.905699][T14243] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.2358'.
[  382.136440][T14245] geneve3: entered promiscuous mode
[  382.150641][T14245] geneve3: entered allmulticast mode
[  382.322287][T14252] syzkaller1: entered promiscuous mode
[  382.330584][T14252] syzkaller1: entered allmulticast mode
[  382.366546][T14255] lo speed is unknown, defaulting to 1000
[  382.373632][T14255] lo speed is unknown, defaulting to 1000
[  382.381085][T14255] lo speed is unknown, defaulting to 1000
[  382.412592][T14255] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  382.445745][T14255] lo speed is unknown, defaulting to 1000
[  382.461771][T14255] lo speed is unknown, defaulting to 1000
[  382.478945][T14255] lo speed is unknown, defaulting to 1000
[  382.504338][T14255] lo speed is unknown, defaulting to 1000
[  382.522842][T14255] lo speed is unknown, defaulting to 1000
[  382.676774][T14267] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2366'.
[  382.766652][T14271] xt_CT: No such helper "pptp"
[  382.835423][T14274] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  382.845702][T14274] batadv_slave_1: entered promiscuous mode
[  383.110464][T14293] netlink: 'syz.3.2376': attribute type 1 has an invalid length.
[  383.197262][T14293] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  383.225043][T14293] veth11: entered promiscuous mode
[  383.237269][T14293] bond4: (slave veth11): Enslaving as a backup interface with a down link
[  383.434402][T14307] xt_ecn: cannot match TCP bits for non-tcp packets
[  383.860964][T14321] lo speed is unknown, defaulting to 1000
[  384.183149][T14329] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  384.415237][T14334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2390'.
[  384.431049][T14334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2390'.
[  384.609955][T14350] xt_hashlimit: size too large, truncated to 1048576
[  385.105451][T14368] lo speed is unknown, defaulting to 1000
[  385.267431][T14112] IPVS: starting estimator thread 0...
[  385.275664][T14374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2401'.
[  385.342815][T14374] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2401'.
[  385.386864][T14375] IPVS: using max 24 ests per chain, 57600 per kthread
[  385.681220][T14388] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2406'.
[  386.187403][ T9071] IPVS: stop unused estimator thread 0...
[  386.237680][T14406] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2410'.
[  386.454429][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2419'.
[  386.524746][T14417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2418'.
[  386.534979][T14423] lo speed is unknown, defaulting to 1000
[  386.796314][T14433] xt_CT: No such helper "pptp"
[  387.299586][T14458] openvswitch: netlink: Actions may not be safe on all matching packets
[  388.171456][T14471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2433'.
[  388.246337][T14469] syzkaller0: entered promiscuous mode
[  388.255384][T14469] syzkaller0: entered allmulticast mode
[  388.377984][T14476] xt_CT: No such helper "pptp"
[  388.409453][T14481] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  388.551371][T14488] netlink: 'syz.0.2435': attribute type 4 has an invalid length.
[  388.715429][T14481] Cannot find add_set index 2 as target
[  392.251360][T14500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  392.321819][T14507] syz.1.2442: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  392.338209][T14507] CPU: 1 UID: 0 PID: 14507 Comm: syz.1.2442 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) 
[  392.338248][T14507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  392.338266][T14507] Call Trace:
[  392.338279][T14507]  <TASK>
[  392.338288][T14507]  dump_stack_lvl+0x189/0x250
[  392.338329][T14507]  ? __pfx_dump_stack_lvl+0x10/0x10
[  392.338362][T14507]  ? __pfx__printk+0x10/0x10
[  392.338385][T14507]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  392.338409][T14507]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  392.338436][T14507]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  392.338463][T14507]  warn_alloc+0x214/0x310
[  392.338496][T14507]  ? __pfx___schedule+0x10/0x10
[  392.338522][T14507]  ? __pfx_warn_alloc+0x10/0x10
[  392.338554][T14507]  ? kasan_save_track+0x4f/0x80
[  392.338579][T14507]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  392.338607][T14507]  ? xskq_create+0x56/0x170
[  392.338632][T14507]  ? __x64_sys_setsockopt+0x18b/0x220
[  392.338661][T14507]  ? do_syscall_64+0xf6/0x210
[  392.338685][T14507]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.338719][T14507]  __vmalloc_node_range_noprof+0x125/0x12c0
[  392.338787][T14507]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  392.338824][T14507]  ? __kasan_kmalloc+0x93/0xb0
[  392.338859][T14507]  vmalloc_user_noprof+0x74/0x80
[  392.338891][T14507]  ? xskq_create+0xbf/0x170
[  392.338912][T14507]  xskq_create+0xbf/0x170
[  392.338940][T14507]  xsk_init_queue+0xb0/0x110
[  392.338965][T14507]  xsk_setsockopt+0x43f/0x710
[  392.338990][T14507]  ? __pfx_xsk_setsockopt+0x10/0x10
[  392.339026][T14507]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  392.339051][T14507]  ? __pfx_xsk_setsockopt+0x10/0x10
[  392.339074][T14507]  do_sock_setsockopt+0x257/0x3e0
[  392.339111][T14507]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  392.339139][T14507]  ? __fget_files+0x2a/0x420
[  392.339174][T14507]  ? __fget_files+0x3a0/0x420
[  392.339203][T14507]  ? __fget_files+0x2a/0x420
[  392.339249][T14507]  __x64_sys_setsockopt+0x18b/0x220
[  392.339288][T14507]  do_syscall_64+0xf6/0x210
[  392.339315][T14507]  ? clear_bhb_loop+0x60/0xb0
[  392.339342][T14507]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.339363][T14507] RIP: 0033:0x7f800f58e969
[  392.339384][T14507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  392.339404][T14507] RSP: 002b:00007f801035b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  392.339427][T14507] RAX: ffffffffffffffda RBX: 00007f800f7b5fa0 RCX: 00007f800f58e969
[  392.339442][T14507] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  392.339455][T14507] RBP: 00007f800f610ab1 R08: 0000000000000004 R09: 0000000000000000
[  392.339469][T14507] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  392.339482][T14507] R13: 0000000000000000 R14: 00007f800f7b5fa0 R15: 00007fff3a870c38
[  392.339517][T14507]  </TASK>
[  392.339531][T14507] Mem-Info:
[  392.634219][T14507] active_anon:3611 inactive_anon:0 isolated_anon:0
[  392.634219][T14507]  active_file:1781 inactive_file:39945 isolated_file:0
[  392.634219][T14507]  unevictable:768 dirty:243 writeback:0
[  392.634219][T14507]  slab_reclaimable:11513 slab_unreclaimable:111825
[  392.634219][T14507]  mapped:30327 shmem:1383 pagetables:691
[  392.634219][T14507]  sec_pagetables:0 bounce:0
[  392.634219][T14507]  kernel_misc_reclaimable:0
[  392.634219][T14507]  free:1331622 free_pcp:972 free_cma:0
[  392.680089][T14507] Node 0 active_anon:14444kB inactive_anon:0kB active_file:7124kB inactive_file:159576kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121308kB dirty:968kB writeback:0kB shmem:3996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12796kB pagetables:2764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  392.718725][T14507] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  392.773691][T14507] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  392.801543][T14507] lowmem_reserve[]: 0 2503 2504 2504 2504
[  392.807882][T14507] Node 0 DMA32 free:1407020kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:14436kB inactive_anon:0kB active_file:7124kB inactive_file:159484kB unevictable:1536kB writepending:968kB present:3129332kB managed:2563988kB mlocked:0kB bounce:0kB free_pcp:2152kB local_pcp:1516kB free_cma:0kB
[  392.843203][T14507] lowmem_reserve[]: 0 0 0 0 0
[  392.848189][T14507] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  392.876794][T14507] lowmem_reserve[]: 0 0 0 0 0
[  392.881684][T14507] Node 1 Normal free:3906704kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  392.917181][T14507] lowmem_reserve[]: 0 0 0 0 0
[  392.922589][T14507] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  392.937086][T14507] Node 0 DMA32: 825*4kB (UM) 365*8kB (M) 243*16kB (UME) 1043*32kB (UME) 1261*64kB (UME) 484*128kB (UME) 471*256kB (UME) 272*512kB (UM) 130*1024kB (UME) 12*2048kB (UM) 196*4096kB (UM) = 1406492kB
[  392.956883][T14507] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  392.968842][T14507] Node 1 Normal: 252*4kB (UME) 64*8kB (UME) 54*16kB (UME) 232*32kB (UME) 107*64kB (UME) 31*128kB (UME) 16*256kB (UM) 12*512kB (UME) 5*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3906704kB
[  392.996799][T14507] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  393.006424][T14507] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  393.016548][T14507] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  393.026829][T14507] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  393.036164][T14507] 43106 total pagecache pages
[  393.040982][T14507] 0 pages in swap cache
[  393.045167][T14507] Free swap  = 124996kB
[  393.049644][T14507] Total swap = 124996kB
[  393.053833][T14507] 2097051 pages RAM
[  393.057735][T14507] 0 pages HighMem/MovableOnly
[  393.062436][T14507] 424396 pages reserved
[  393.066614][T14507] 0 pages cma reserved
[  393.415772][T14539] xt_CT: No such helper "pptp"
[  393.421915][T14547] netlink: 'syz.1.2452': attribute type 1 has an invalid length.
[  393.429973][T14547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2452'.
[  393.439480][T14547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2452'.
[  393.611196][T14551] netlink: 'syz.2.2453': attribute type 6 has an invalid length.
[  393.832396][T14555] lo speed is unknown, defaulting to 1000
[  394.511376][T14586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2462'.
[  394.720667][T14593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2463'.
[  394.764182][T14438] Set syz1 is full, maxelem 65536 reached
[  395.651106][T14620] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2468'.
[  395.683362][T14637] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2473'.
[  395.734524][T14620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2468'.
[  395.913650][T14645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2476'.
[  395.918329][T14643] ipvlan4: entered promiscuous mode
[  395.930395][T14643] ipvlan4: entered allmulticast mode
[  395.935922][T14643] macvlan0: entered allmulticast mode
[  395.976023][T14645] vlan0: entered promiscuous mode
[  396.066163][T14650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2477'.
[  396.093463][T14650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2477'.
[  396.116931][T14654] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  396.140526][T14656] netlink: 'syz.0.2479': attribute type 21 has an invalid length.
[  396.149737][T14656] netlink: 'syz.0.2479': attribute type 5 has an invalid length.
[  396.157769][T14656] netlink: 'syz.0.2479': attribute type 6 has an invalid length.
[  396.422700][T14673] lo speed is unknown, defaulting to 1000
[  396.500372][T14677] lo speed is unknown, defaulting to 1000
[  397.104984][T14698] netlink: zone id is out of range
[  397.121301][T14698] netlink: zone id is out of range
[  397.458856][T14716] unknown channel width for channel at 909000KHz?
[  397.465436][T14716] unknown channel width for channel at 909000KHz?
[  397.473914][T14716] unknown channel width for channel at 909000KHz?
[  397.623488][T14726] vlan0: entered promiscuous mode
[  397.634505][T14730] netlink: 'syz.3.2497': attribute type 1 has an invalid length.
[  397.667938][T14725] xt_CT: No such helper "pptp"
[  397.692512][T14730] netlink: 'syz.3.2497': attribute type 3 has an invalid length.
[  397.774797][T14726] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  397.845058][T14741] macsec1: entered promiscuous mode
[  397.853330][T14741] macsec1: entered allmulticast mode
[  397.858852][T14741] veth1_macvtap: entered allmulticast mode
[  397.869610][T14741] veth1_macvtap: left allmulticast mode
[  397.963043][T14749] netlink: 'syz.4.2505': attribute type 10 has an invalid length.
[  397.987111][T14749] batadv0: entered promiscuous mode
[  397.992391][T14749] batadv0: entered allmulticast mode
[  398.016353][T14749] 8021q: adding VLAN 0 to HW filter on device batadv0
[  398.030692][T14749] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  398.484567][T14769] Cannot find add_set index 4 as target
[  398.996399][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  399.009130][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  399.019675][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  399.034453][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  399.044335][T14805] netlink: 'syz.0.2521': attribute type 6 has an invalid length.
[  399.057340][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  399.223701][T14799] lo speed is unknown, defaulting to 1000
[  399.912299][T14849] veth7: entered promiscuous mode
[  400.017731][T14852] veth7: entered promiscuous mode
[  400.099393][T14799] chnl_net:caif_netlink_parms(): no params data found
[  400.452120][T14888] x_tables: ip_tables: icmp match: only valid for protocol 1
[  400.497355][T14890] syzkaller1: entered promiscuous mode
[  400.503045][T14890] syzkaller1: entered allmulticast mode
[  400.524628][T14882] xt_CT: No such helper "pptp"
[  400.529353][T14888] netlink: 'syz.0.2543': attribute type 9 has an invalid length.
[  400.633115][T14799] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.647472][T14799] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.655057][T14799] bridge_slave_0: entered allmulticast mode
[  400.663775][T14799] bridge_slave_0: entered promiscuous mode
[  400.683731][T14799] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.715547][T14799] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.747909][T14799] bridge_slave_1: entered allmulticast mode
[  400.765692][T14799] bridge_slave_1: entered promiscuous mode
[  400.894410][T14909] FAULT_INJECTION: forcing a failure.
[  400.894410][T14909] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  400.908655][T14909] CPU: 1 UID: 0 PID: 14909 Comm: syz.2.2549 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) 
[  400.908686][T14909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  400.908700][T14909] Call Trace:
[  400.908708][T14909]  <TASK>
[  400.908717][T14909]  dump_stack_lvl+0x189/0x250
[  400.908752][T14909]  ? __lock_acquire+0xaac/0xd20
[  400.908786][T14909]  ? __pfx_dump_stack_lvl+0x10/0x10
[  400.908818][T14909]  ? __pfx__printk+0x10/0x10
[  400.908841][T14909]  ? __might_fault+0xb0/0x130
[  400.908884][T14909]  should_fail_ex+0x414/0x560
[  400.908913][T14909]  _copy_from_user+0x2d/0xb0
[  400.908946][T14909]  ___sys_sendmsg+0x158/0x2a0
[  400.908982][T14909]  ? __pfx____sys_sendmsg+0x10/0x10
[  400.909057][T14909]  ? __fget_files+0x2a/0x420
[  400.909085][T14909]  ? __fget_files+0x3a0/0x420
[  400.909127][T14909]  __x64_sys_sendmsg+0x19b/0x260
[  400.909157][T14909]  ? __might_fault+0xb0/0x130
[  400.909196][T14909]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  400.909241][T14909]  ? rcu_is_watching+0x15/0xb0
[  400.909272][T14909]  do_syscall_64+0xf6/0x210
[  400.909300][T14909]  ? clear_bhb_loop+0x60/0xb0
[  400.909326][T14909]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.909347][T14909] RIP: 0033:0x7f57f438e969
[  400.909366][T14909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  400.909385][T14909] RSP: 002b:00007f57f5158038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  400.909406][T14909] RAX: ffffffffffffffda RBX: 00007f57f45b5fa0 RCX: 00007f57f438e969
[  400.909422][T14909] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 0000000000000005
[  400.909435][T14909] RBP: 00007f57f5158090 R08: 0000000000000000 R09: 0000000000000000
[  400.909447][T14909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  400.909460][T14909] R13: 0000000000000000 R14: 00007f57f45b5fa0 R15: 00007fff2797a288
[  400.909493][T14909]  </TASK>
[  401.106509][T14799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  401.142029][T14799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  401.151907][ T5140] Bluetooth: hci2: command tx timeout
[  401.206309][T14799] team0: Port device team_slave_0 added
[  401.249893][T14799] team0: Port device team_slave_1 added
[  401.405239][T14918] xt_CT: No such helper "pptp"
[  401.431087][T14799] batman_adv: batadv0: Adding interface: batadv_slave_0
[  401.477003][T14799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.505327][T14799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  401.545221][T14799] batman_adv: batadv0: Adding interface: batadv_slave_1
[  401.560021][T14799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  401.586824][T14799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  401.608190][T14925] __nla_validate_parse: 8 callbacks suppressed
[  401.608212][T14925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2555'.
[  401.754271][T14935] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2559'.
[  401.880916][T14944] netlink: 'syz.3.2558': attribute type 11 has an invalid length.
[  401.890442][T14944] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2558'.
[  401.990581][T14952] FAULT_INJECTION: forcing a failure.
[  401.990581][T14952] name failslab, interval 1, probability 0, space 0, times 0
[  402.006610][T14952] CPU: 0 UID: 0 PID: 14952 Comm: syz.0.2563 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) 
[  402.006645][T14952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  402.006659][T14952] Call Trace:
[  402.006668][T14952]  <TASK>
[  402.006678][T14952]  dump_stack_lvl+0x189/0x250
[  402.006722][T14952]  ? __pfx_dump_stack_lvl+0x10/0x10
[  402.006754][T14952]  ? __pfx__printk+0x10/0x10
[  402.006782][T14952]  ? __pfx___might_resched+0x10/0x10
[  402.006809][T14952]  should_fail_ex+0x414/0x560
[  402.006837][T14952]  should_failslab+0xa8/0x100
[  402.006869][T14952]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  402.006899][T14952]  ? __alloc_skb+0x112/0x2d0
[  402.006933][T14952]  __alloc_skb+0x112/0x2d0
[  402.006966][T14952]  netlink_sendmsg+0x5c6/0xb30
[  402.007005][T14952]  ? __pfx_netlink_sendmsg+0x10/0x10
[  402.007038][T14952]  ? aa_sock_msg_perm+0x94/0x160
[  402.007065][T14952]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  402.007090][T14952]  ? __pfx_netlink_sendmsg+0x10/0x10
[  402.007121][T14952]  __sock_sendmsg+0x21c/0x270
[  402.007148][T14952]  ____sys_sendmsg+0x505/0x830
[  402.007188][T14952]  ? __pfx_____sys_sendmsg+0x10/0x10
[  402.007230][T14952]  ? import_iovec+0x74/0xa0
[  402.007266][T14952]  ___sys_sendmsg+0x21f/0x2a0
[  402.007300][T14952]  ? __pfx____sys_sendmsg+0x10/0x10
[  402.007381][T14952]  ? __fget_files+0x2a/0x420
[  402.007410][T14952]  ? __fget_files+0x3a0/0x420
[  402.007451][T14952]  __x64_sys_sendmsg+0x19b/0x260
[  402.007485][T14952]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  402.007536][T14952]  ? do_syscall_64+0xba/0x210
[  402.007567][T14952]  do_syscall_64+0xf6/0x210
[  402.007592][T14952]  ? clear_bhb_loop+0x60/0xb0
[  402.007619][T14952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.007639][T14952] RIP: 0033:0x7f0cdcb8e969
[  402.007658][T14952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  402.007677][T14952] RSP: 002b:00007f0cdd9c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  402.007699][T14952] RAX: ffffffffffffffda RBX: 00007f0cdcdb5fa0 RCX: 00007f0cdcb8e969
[  402.007715][T14952] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 0000000000000005
[  402.007729][T14952] RBP: 00007f0cdd9c7090 R08: 0000000000000000 R09: 0000000000000000
[  402.007742][T14952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  402.007755][T14952] R13: 0000000000000000 R14: 00007f0cdcdb5fa0 R15: 00007fff80871a28
[  402.007789][T14952]  </TASK>
[  402.256919][T14799] hsr_slave_0: entered promiscuous mode
[  402.263738][T14799] hsr_slave_1: entered promiscuous mode
[  402.270464][T14799] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  402.278125][T14799] Cannot create hsr debugfs directory
[  402.541725][T14963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  402.562762][T14957] xt_CT: No such helper "pptp"
[  402.630346][T14965] !
: renamed from dummy0 (while UP)
[  402.649950][T14965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2568'.
[  402.663319][T14965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2568'.
[  402.675346][T14963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  402.750351][T14963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  403.002980][T14799] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  403.026303][T14799] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  403.046470][T14799] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  403.063143][T14799] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  403.227037][ T5140] Bluetooth: hci2: command tx timeout
[  403.241167][T14799] 8021q: adding VLAN 0 to HW filter on device bond0
[  403.313276][T14799] 8021q: adding VLAN 0 to HW filter on device team0
[  403.325406][T14987] lo speed is unknown, defaulting to 1000
[  403.353973][ T9070] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.361205][ T9070] bridge0: port 1(bridge_slave_0) entered forwarding state
[  403.482196][ T9073] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.489498][ T9073] bridge0: port 2(bridge_slave_1) entered forwarding state
[  404.052864][T15024] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2587'.
[  404.112780][T15024] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2587'.
[  404.486320][T15039] bridge5: entered promiscuous mode
[  404.501918][T15039] bridge5: entered allmulticast mode
[  404.572465][T14799] 8021q: adding VLAN 0 to HW filter on device batadv0
[  404.591398][T15050] netlink: 'syz.4.2589': attribute type 58 has an invalid length.
[  404.613456][T15050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2589'.
[  404.630930][T15046] netlink: 'syz.3.2591': attribute type 4 has an invalid length.
[  404.718578][T15050] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2589'.
[  404.735194][T15055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2592'.
[  404.831978][T14799] veth0_vlan: entered promiscuous mode
[  404.865713][T14799] veth1_vlan: entered promiscuous mode
[  405.046177][T14799] veth0_macvtap: entered promiscuous mode
[  405.114311][T14799] veth1_macvtap: entered promiscuous mode
[  405.193512][T14799] batman_adv: batadv0: Interface activated: batadv_slave_0
[  405.222856][T14799] batman_adv: batadv0: Interface activated: batadv_slave_1
[  405.243206][T15076] netlink: 'syz.0.2597': attribute type 9 has an invalid length.
[  405.279327][T14799] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  405.292161][T14799] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  405.303124][T14799] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  405.312579][ T5140] Bluetooth: hci2: command tx timeout
[  405.318723][T14799] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  405.318886][T15070] xt_CT: No such helper "pptp"
[  405.520525][ T9060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  405.541108][ T9060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  405.685105][ T9071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  405.704626][ T9071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  405.808871][T15092] netlink: 'syz.3.2605': attribute type 11 has an invalid length.
[  405.848233][T15092] netlink: 'syz.3.2605': attribute type 1 has an invalid length.
[  405.856404][T15092] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  405.900962][T15097] gretap0: entered promiscuous mode
[  405.923245][T15097] gretap0: left promiscuous mode
[  406.239063][T15112] xt_CT: No such helper "pptp"
[  406.498051][T15134] syzkaller1: entered promiscuous mode
[  406.503687][T15134] syzkaller1: entered allmulticast mode
[  406.734385][T15141] bridge_slave_0: left allmulticast mode
[  406.740327][T15141] bridge_slave_0: left promiscuous mode
[  406.746288][T15141] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.777895][T15141] bridge_slave_1: left allmulticast mode
[  406.783699][T15141] bridge_slave_1: left promiscuous mode
[  406.789826][T15141] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.810728][T15141] bond0: (slave bond_slave_0): Releasing backup interface
[  406.843190][T15141] bond0: (slave bond_slave_1): Releasing backup interface
[  406.916287][T15141] team0: Port device team_slave_0 removed
[  406.954031][T15141] team0: Port device team_slave_1 removed
[  406.961543][T15141] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  406.969221][T15141] batman_adv: batadv0: Removing interface: batadv_slave_0
[  406.985437][T15141] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  406.995631][T15141] batman_adv: batadv0: Removing interface: batadv_slave_1
[  407.039081][T15146] vlan0: entered promiscuous mode
[  407.062743][T15146] team0: Port device vlan0 added
[  407.201144][T15157] xt_CT: No such helper "pptp"
[  407.238453][T15169] netlink: 'syz.2.2623': attribute type 1 has an invalid length.
[  407.301620][T15169] bond7: entered promiscuous mode
[  407.307913][T15169] 8021q: adding VLAN 0 to HW filter on device bond7
[  407.387191][ T5140] Bluetooth: hci2: command tx timeout
[  407.427615][T15181] __nla_validate_parse: 7 callbacks suppressed
[  407.427637][T15181] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2627'.
[  407.665056][T15193] netlink: 'syz.3.2629': attribute type 7 has an invalid length.
[  407.685808][T15193] netlink: 'syz.3.2629': attribute type 8 has an invalid length.
[  407.699426][T15193] netlink: 'syz.3.2629': attribute type 15 has an invalid length.
[  407.715138][T15193] netlink: 'syz.3.2629': attribute type 7 has an invalid length.
[  407.732904][T15193] netlink: 'syz.3.2629': attribute type 8 has an invalid length.
[  408.102338][T15210] xt_CT: No such helper "pptp"
[  408.423250][T15225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2639'.
[  408.763837][T15247] xt_CT: No such helper "pptp"
[  408.876450][T15253] veth0_to_bridge: entered promiscuous mode
[  408.957155][T15253] 8021q: adding VLAN 0 to HW filter on device bond3
[  408.975753][T15252] veth0_to_bridge: left promiscuous mode
[  409.094362][T15273] gtp0: entered promiscuous mode
[  409.101329][T15273] gtp0: entered allmulticast mode
[  409.249967][T15282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2660'.
[  409.375347][T15284] xt_CT: No such helper "pptp"
[  409.750730][T15306] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2671'.
[  409.764330][T15306] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2671'.
[  409.773619][T15306] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2671'.
[  410.043541][T15324] xt_CT: No such helper "pptp"
[  410.241004][T15333] netlink: 47 bytes leftover after parsing attributes in process `syz.1.2679'.
[  410.259882][T15334] FAULT_INJECTION: forcing a failure.
[  410.259882][T15334] name failslab, interval 1, probability 0, space 0, times 0
[  410.260128][T15333] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  410.280877][T15334] CPU: 1 UID: 0 PID: 15334 Comm: syz.2.2678 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) 
[  410.280907][T15334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  410.280920][T15334] Call Trace:
[  410.280928][T15334]  <TASK>
[  410.280937][T15334]  dump_stack_lvl+0x189/0x250
[  410.280976][T15334]  ? __pfx_dump_stack_lvl+0x10/0x10
[  410.281006][T15334]  ? __pfx__printk+0x10/0x10
[  410.281024][T15334]  ? __lock_acquire+0xaac/0xd20
[  410.281071][T15334]  should_fail_ex+0x414/0x560
[  410.281100][T15334]  should_failslab+0xa8/0x100
[  410.281131][T15334]  kmem_cache_alloc_noprof+0x73/0x3c0
[  410.281158][T15334]  ? skb_clone+0x212/0x3a0
[  410.281184][T15334]  skb_clone+0x212/0x3a0
[  410.281214][T15334]  __netlink_deliver_tap+0x404/0x850
[  410.281259][T15334]  ? netlink_deliver_tap+0x2e/0x1b0
[  410.281290][T15334]  netlink_deliver_tap+0x19c/0x1b0
[  410.281321][T15334]  netlink_sendskb+0x68/0x140
[  410.281349][T15334]  netlink_rcv_skb+0x2a0/0x490
[  410.281379][T15334]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  410.281408][T15334]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  410.281457][T15334]  ? netlink_deliver_tap+0x2e/0x1b0
[  410.281487][T15334]  ? netlink_deliver_tap+0x2e/0x1b0
[  410.281523][T15334]  netlink_unicast+0x75b/0x8d0
[  410.281563][T15334]  netlink_sendmsg+0x805/0xb30
[  410.281613][T15334]  ? __pfx_netlink_sendmsg+0x10/0x10
[  410.281648][T15334]  ? aa_sock_msg_perm+0x94/0x160
[  410.281676][T15334]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  410.281702][T15334]  ? __pfx_netlink_sendmsg+0x10/0x10
[  410.281733][T15334]  __sock_sendmsg+0x21c/0x270
[  410.281761][T15334]  ____sys_sendmsg+0x505/0x830
[  410.281800][T15334]  ? __pfx_____sys_sendmsg+0x10/0x10
[  410.281855][T15334]  ? import_iovec+0x74/0xa0
[  410.281891][T15334]  ___sys_sendmsg+0x21f/0x2a0
[  410.281927][T15334]  ? __pfx____sys_sendmsg+0x10/0x10
[  410.281998][T15334]  ? __fget_files+0x2a/0x420
[  410.282026][T15334]  ? __fget_files+0x3a0/0x420
[  410.282066][T15334]  __x64_sys_sendmsg+0x19b/0x260
[  410.282101][T15334]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  410.282152][T15334]  ? do_syscall_64+0xba/0x210
[  410.282180][T15334]  do_syscall_64+0xf6/0x210
[  410.282205][T15334]  ? clear_bhb_loop+0x60/0xb0
[  410.282231][T15334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.282250][T15334] RIP: 0033:0x7f57f438e969
[  410.282269][T15334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  410.282285][T15334] RSP: 002b:00007f57f5158038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  410.282307][T15334] RAX: ffffffffffffffda RBX: 00007f57f45b5fa0 RCX: 00007f57f438e969
[  410.282322][T15334] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 0000000000000005
[  410.282336][T15334] RBP: 00007f57f5158090 R08: 0000000000000000 R09: 0000000000000000
[  410.282348][T15334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  410.282362][T15334] R13: 0000000000000000 R14: 00007f57f45b5fa0 R15: 00007fff2797a288
[  410.282395][T15334]  </TASK>
[  410.622618][T15336] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2680'.
[  410.863718][T15347] x_tables: duplicate underflow at hook 3
[  410.908523][T15350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2685'.
[  411.244228][T15351] xt_CT: No such helper "pptp"
[  411.328941][T15373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2693'.
[  411.874476][T15402] xt_CT: No such helper "pptp"
[  412.019314][T15417] validate_nla: 2 callbacks suppressed
[  412.019335][T15417] netlink: 'syz.4.2707': attribute type 10 has an invalid length.
[  412.048946][T15417] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  412.281077][T15426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  412.478230][T15428] lo speed is unknown, defaulting to 1000
[  412.550236][T15441] __nla_validate_parse: 6 callbacks suppressed
[  412.550258][T15441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2714'.
[  412.567433][T15441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2714'.
[  412.604214][T15441] bond0: entered promiscuous mode
[  412.609493][T15441] bond_slave_0: entered promiscuous mode
[  412.615526][T15441] bond_slave_1: entered promiscuous mode
[  412.622968][T15441] bond0: left promiscuous mode
[  412.628035][T15441] bond_slave_0: left promiscuous mode
[  412.633828][T15441] bond_slave_1: left promiscuous mode
[  412.824414][T15445] xt_CT: No such helper "pptp"
[  412.891276][T15454] netlink: 'syz.1.2720': attribute type 3 has an invalid length.
[  413.291835][T15470] xt_TCPMSS: Only works on TCP SYN packets
[  413.499409][T15479] syzkaller0: entered promiscuous mode
[  413.504954][T15479] syzkaller0: entered allmulticast mode
[  413.916194][T15493] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2729'.
[  413.961922][T15493] netlink: 'syz.3.2729': attribute type 10 has an invalid length.
[  413.990451][T15486] xt_CT: No such helper "pptp"
[  414.052569][T15498] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2735'.
[  414.279558][T15510] xt_ecn: cannot match TCP bits for non-tcp packets
[  414.289636][T15514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2741'.
[  414.495294][T15525] netlink: 'syz.1.2745': attribute type 1 has an invalid length.
[  414.498258][T15530] netlink: 'syz.3.2743': attribute type 1 has an invalid length.
[  414.552837][T15525] bond1: entered promiscuous mode
[  414.558709][T15525] 8021q: adding VLAN 0 to HW filter on device bond1
[  414.608608][T15530] bond5: entered promiscuous mode
[  414.614182][T15530] 8021q: adding VLAN 0 to HW filter on device bond5
[  414.622917][T15530] netlink: 'syz.3.2743': attribute type 1 has an invalid length.
[  414.665230][T15528] 8021q: adding VLAN 0 to HW filter on device bond6
[  414.681776][T15528] bond5: (slave bond6): making interface the new active one
[  414.689941][T15528] bond6: entered promiscuous mode
[  414.695935][T15528] bond5: (slave bond6): Enslaving as an active interface with an up link
[  414.726117][T15541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2745'.
[  414.728475][T15533] 8021q: adding VLAN 0 to HW filter on device batadv1
[  414.747473][T15533] bond1: (slave batadv1): making interface the new active one
[  414.757700][T15533] batadv1: entered promiscuous mode
[  414.766188][T15533] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  414.801541][T15530] netlink: 'syz.3.2743': attribute type 1 has an invalid length.
[  414.842956][T15530] netlink: 'syz.3.2743': attribute type 1 has an invalid length.
[  414.857248][T15530] netlink: 'syz.3.2743': attribute type 1 has an invalid length.
[  414.894626][T15530] netlink: 'syz.3.2743': attribute type 1 has an invalid length.
[  414.942213][T15546] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2747'.
[  415.360961][T15555] xt_CT: No such helper "pptp"
[  415.385382][T15570] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2758'.
[  415.386199][T15574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2758'.
[  415.630896][T15583] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2759'.
[  415.965912][T15594] lo speed is unknown, defaulting to 1000
[  416.120226][T15610] xt_CT: No such helper "pptp"
[  416.384657][T15633] bond1: (slave vcan3): The slave device specified does not support setting the MAC address
[  416.401682][T15633] bond1: (slave vcan3): making interface the new active one
[  416.415579][T15633] bond1: (slave vcan3): Enslaving as an active interface with an up link
[  416.836467][T15647] xt_CT: No such helper "pptp"
[  417.062339][T15670] pim6reg1: entered allmulticast mode
[  417.308439][T15687] IPv6: NLM_F_REPLACE set, but no existing node found!
[  417.571502][T15689] xt_CT: No such helper "pptp"
[  417.651124][T15706] validate_nla: 60 callbacks suppressed
[  417.651145][T15706] netlink: 'syz.1.2803': attribute type 72 has an invalid length.
[  417.736272][T15709] syzkaller1: entered promiscuous mode
[  417.744159][T15709] syzkaller1: entered allmulticast mode
[  417.851257][T15714] netlink: 'syz.4.2807': attribute type 12 has an invalid length.
[  417.964001][T15719] __nla_validate_parse: 9 callbacks suppressed
[  417.964020][T15719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2809'.
[  418.485804][T15722] tipc: Resetting bearer <eth:syzkaller0>
[  418.874034][T15716] 8021q: adding VLAN 0 to HW filter on device bond0
[  418.908332][T15716] 8021q: adding VLAN 0 to HW filter on device team0
[  418.924325][T15716] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  418.956297][T15733] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  418.983160][ T6523] lo speed is unknown, defaulting to 1000
[  418.992435][ T6523] syz2: Port: 1 Link ACTIVE
[  419.341876][T15767] lo speed is unknown, defaulting to 1000
[  419.408135][T15768] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2821'.
[  419.472252][T15771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2821'.
[  420.430883][T15793] tap0: tun_chr_ioctl cmd 2147767507
[  421.030310][T15824] xt_CT: No such helper "pptp"
[  421.112656][T15832] veth4: entered allmulticast mode
[  421.441419][T15857] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  421.473445][T15857] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  421.523776][T15851] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2843'.
[  421.638970][T15868] xt_CT: No such helper "pptp"
[  422.143599][T15895] xt_CT: No such helper "pptp"
[  422.517983][T15918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2868'.
[  422.535889][T15918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2868'.
[  422.775376][T15927] netlink: 'syz.1.2872': attribute type 1 has an invalid length.
[  422.785982][T15927] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2872'.
[  423.068349][T15948] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969)
[  423.106941][T15948] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  423.154668][T15936] xt_CT: No such helper "pptp"
[  423.330219][   T30] audit: type=1800 audit(1747386967.651:10): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2870" name="cgroup.controllers" dev="tmpfs" ino=2816 res=0 errno=0
[  423.435740][T15962] netlink: 'syz.0.2881': attribute type 11 has an invalid length.
[  423.830375][T15981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2889'.
[  423.860859][T15981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2889'.
[  423.925234][T15985] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2888'.
[  423.987158][T15990] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2888'.
[  424.512746][T16014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2903'.
[  424.592281][T16015] lo speed is unknown, defaulting to 1000
[  424.625402][ T9068] tipc: Resetting bearer <eth:syzkaller0>
[  425.787583][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  425.805153][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  425.814945][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  425.826144][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  425.835796][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  425.871534][ T9068] tipc: Disabling bearer <eth:syzkaller0>
[  426.310711][ T9068] bond0 (unregistering): Released all slaves
[  426.419739][ T9068] bond1 (unregistering): (slave vcan3): Releasing backup interface
[  426.432463][ T9068] bond1 (unregistering): Released all slaves
[  426.448494][ T9068] bond2 (unregistering): Released all slaves
[  426.565178][ T9068] bond3 (unregistering): Released all slaves
[  426.673502][ T9068] bond4 (unregistering): Released all slaves
[  426.694206][T16045] tipc: Started in network mode
[  426.702295][T16045] tipc: Node identity ac14140f, cluster identity 4711
[  426.710322][T16045] tipc: New replicast peer: 255.255.255.255
[  426.717799][T16045] tipc: Enabled bearer <udp:syz2>, priority 10
[  426.880534][T16060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2913'.
[  426.910608][ T9068] tipc: Left network mode
[  426.943773][T16057] lo speed is unknown, defaulting to 1000
[  427.047922][ T9068] IPVS: stopping backup sync thread 11200 ...
[  427.348140][T16078] Dead loop on virtual device ip6_vti0, fix it urgently!
[  427.827102][T14112] tipc: Node number set to 2886997007
[  427.947169][ T5140] Bluetooth: hci0: command tx timeout
[  428.269280][ T9068] !
: left promiscuous mode
[  428.295205][T16110] netlink: 'syz.3.2928': attribute type 22 has an invalid length.
[  428.371673][T16110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2928'.
[  428.619937][T16122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2931'.
[  428.629389][T16122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2931'.
[  428.644806][T16123] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2930'.
[  429.475617][ T6523] lo speed is unknown, defaulting to 1000
[  429.501987][T16122] geneve2: entered promiscuous mode
[  429.506795][ T6523] infiniband syz2: ib_query_port failed (-19)
[  429.508042][T16122] geneve2: entered allmulticast mode
[  429.629810][T16057] chnl_net:caif_netlink_parms(): no params data found
[  430.035710][ T5140] Bluetooth: hci0: command tx timeout
[  430.170877][T16162] smc: net device bond0 applied user defined pnetid SYZ0
[  430.184075][T16162] smc: net device bond0 erased user defined pnetid SYZ0
[  430.208978][T16057] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.216423][T16057] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.225142][T16057] bridge_slave_0: entered allmulticast mode
[  430.234353][T16057] bridge_slave_0: entered promiscuous mode
[  430.367032][T16057] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.475626][T16057] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.500642][T16057] bridge_slave_1: entered allmulticast mode
[  430.509257][T16057] bridge_slave_1: entered promiscuous mode
[  430.583332][ T9068] IPVS: stop unused estimator thread 0...
[  430.590728][T16057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.619874][T16057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  430.823424][T16057] team0: Port device team_slave_0 added
[  430.867539][T16057] team0: Port device team_slave_1 added
[  430.997375][T16057] batman_adv: batadv0: Adding interface: batadv_slave_0
[  431.045697][T16057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.074572][T16057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  431.137967][T16057] batman_adv: batadv0: Adding interface: batadv_slave_1
[  431.159234][T16182] netlink: 'syz.1.2946': attribute type 7 has an invalid length.
[  431.160828][T16057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.232893][T16057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  431.257920][T16184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2944'.
[  431.355634][T16193] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  431.524626][T16184] batman_adv: batadv0: Removing interface: batadv_slave_1
[  431.666318][T16201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2950'.
[  431.694960][T16205] syz.1.2952: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  431.710853][T16205] CPU: 0 UID: 0 PID: 16205 Comm: syz.1.2952 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) 
[  431.710882][T16205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  431.710896][T16205] Call Trace:
[  431.710904][T16205]  <TASK>
[  431.710914][T16205]  dump_stack_lvl+0x189/0x250
[  431.710955][T16205]  ? __pfx_dump_stack_lvl+0x10/0x10
[  431.710987][T16205]  ? __pfx__printk+0x10/0x10
[  431.711010][T16205]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  431.711033][T16205]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  431.711059][T16205]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  431.711086][T16205]  warn_alloc+0x214/0x310
[  431.711118][T16205]  ? __pfx___schedule+0x10/0x10
[  431.711144][T16205]  ? __pfx_warn_alloc+0x10/0x10
[  431.711176][T16205]  ? kasan_save_track+0x4f/0x80
[  431.711201][T16205]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  431.711229][T16205]  ? xskq_create+0x56/0x170
[  431.711252][T16205]  ? __x64_sys_setsockopt+0x18b/0x220
[  431.711280][T16205]  ? do_syscall_64+0xf6/0x210
[  431.711305][T16205]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.711339][T16205]  __vmalloc_node_range_noprof+0x125/0x12c0
[  431.711406][T16205]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  431.711442][T16205]  ? __kasan_kmalloc+0x93/0xb0
[  431.711476][T16205]  vmalloc_user_noprof+0x74/0x80
[  431.711508][T16205]  ? xskq_create+0xbf/0x170
[  431.711529][T16205]  xskq_create+0xbf/0x170
[  431.711563][T16205]  xsk_init_queue+0xb0/0x110
[  431.711589][T16205]  xsk_setsockopt+0x43f/0x710
[  431.711613][T16205]  ? __pfx_xsk_setsockopt+0x10/0x10
[  431.711648][T16205]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  431.711674][T16205]  ? __pfx_xsk_setsockopt+0x10/0x10
[  431.711698][T16205]  do_sock_setsockopt+0x257/0x3e0
[  431.711732][T16205]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  431.711761][T16205]  ? __fget_files+0x2a/0x420
[  431.711797][T16205]  ? __fget_files+0x3a0/0x420
[  431.711825][T16205]  ? __fget_files+0x2a/0x420
[  431.711865][T16205]  __x64_sys_setsockopt+0x18b/0x220
[  431.711903][T16205]  do_syscall_64+0xf6/0x210
[  431.711930][T16205]  ? clear_bhb_loop+0x60/0xb0
[  431.711957][T16205]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.711978][T16205] RIP: 0033:0x7f9ffd58e969
[  431.711998][T16205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  431.712017][T16205] RSP: 002b:00007f9ffe4ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  431.712039][T16205] RAX: ffffffffffffffda RBX: 00007f9ffd7b5fa0 RCX: 00007f9ffd58e969
[  431.712055][T16205] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  431.712067][T16205] RBP: 00007f9ffd610ab1 R08: 0000000000000004 R09: 0000000000000000
[  431.712080][T16205] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  431.712093][T16205] R13: 0000000000000000 R14: 00007f9ffd7b5fa0 R15: 00007ffe2ac31278
[  431.712128][T16205]  </TASK>
[  431.712137][T16205] Mem-Info:
[  431.724089][T16204] lo speed is unknown, defaulting to 1000
[  431.725919][T16205] active_anon:6454 inactive_anon:0 isolated_anon:0
[  431.725919][T16205]  active_file:1853 inactive_file:39964 isolated_file:0
[  431.725919][T16205]  unevictable:768 dirty:240 writeback:0
[  431.725919][T16205]  slab_reclaimable:11777 slab_unreclaimable:113228
[  431.725919][T16205]  mapped:32267 shmem:4247 pagetables:668
[  431.725919][T16205]  sec_pagetables:0 bounce:0
[  431.725919][T16205]  kernel_misc_reclaimable:0
[  431.725919][T16205]  free:1326728 free_pcp:328 free_cma:0
[  431.809836][T16057] hsr_slave_0: entered promiscuous mode
[  431.812459][T16205] Node 0 active_anon:26016kB inactive_anon:0kB active_file:7412kB inactive_file:159652kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129068kB dirty:956kB writeback:0kB shmem:15452kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12824kB pagetables:2672kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  431.843165][T16057] hsr_slave_1: entered promiscuous mode
[  431.845223][T16205] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  431.874440][T16057] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  431.874835][T16205] Node 0 
[  431.899354][T16057] Cannot create hsr debugfs directory
[  431.900426][T16205] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  432.179886][ T5140] Bluetooth: hci0: command tx timeout
[  432.185455][T16205] lowmem_reserve[]: 0 2503 2504 2504 2504
[  432.191551][T16205] Node 0 DMA32 free:1382884kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:25972kB inactive_anon:0kB active_file:7412kB inactive_file:159560kB unevictable:1536kB writepending:1036kB present:3129332kB managed:2563988kB mlocked:0kB bounce:0kB free_pcp:2280kB local_pcp:792kB free_cma:0kB
[  432.222430][T16205] lowmem_reserve[]: 0 0 0 0 0
[  432.227449][T16205] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  432.254466][T16205] lowmem_reserve[]: 0 0 0 0 0
[  432.259457][T16205] Node 1 Normal free:3906700kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  432.272393][T16204] lo speed is unknown, defaulting to 1000
[  432.288512][T16205] lowmem_reserve[]: 0 0 0 0 0
[  432.288575][T16205] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  432.288725][T16205] Node 0 DMA32: 1*4kB (E) 316*8kB (ME) 206*16kB (UME) 44*32kB (UE) 478*64kB (UME) 558*128kB (UME) 533*256kB (UM) 315*512kB (UM) 149*1024kB (UM) 8*2048kB (UM) 197*4096kB (UME) = 1382852kB
[  432.288933][T16205] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  432.343299][T16205] Node 1 Normal: 251*4kB (UME) 64*8kB (UME) 54*16kB (UME) 232*32kB (UME) 107*64kB (UME) 31*128kB (UME) 16*256kB (UM) 12*512kB (UME) 5*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3906700kB
[  432.362842][T16205] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  432.372610][T16205] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  432.381981][T16205] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  432.391983][T16205] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  432.401370][T16205] 46067 total pagecache pages
[  432.406086][T16205] 0 pages in swap cache
[  432.410384][T16205] Free swap  = 124996kB
[  432.414563][T16205] Total swap = 124996kB
[  432.419121][T16205] 2097051 pages RAM
[  432.422956][T16205] 0 pages HighMem/MovableOnly
[  432.429029][T16205] 424396 pages reserved
[  432.433404][T16205] 0 pages cma reserved
[  432.472635][T16204] lo speed is unknown, defaulting to 1000
[  432.527855][T16204] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  432.650773][T16204] lo speed is unknown, defaulting to 1000
[  432.682193][T16204] lo speed is unknown, defaulting to 1000
[  432.702267][T16204] lo speed is unknown, defaulting to 1000
[  432.745925][T16204] lo speed is unknown, defaulting to 1000
[  432.812162][T16220] ipt_ECN: cannot use operation on non-tcp rule
[  432.814131][T16204] lo speed is unknown, defaulting to 1000
[  432.845839][T16204] lo speed is unknown, defaulting to 1000
[  433.168045][T16204] lo speed is unknown, defaulting to 1000
[  433.168114][T16224] syzkaller0: entered allmulticast mode
[  433.193543][T16223] syzkaller0 (unregistering): left allmulticast mode
[  433.531110][T16236] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2959'.
[  433.542974][T16225] lo speed is unknown, defaulting to 1000
[  434.018711][T16244] lo speed is unknown, defaulting to 1000
[  434.187292][ T5140] Bluetooth: hci0: command tx timeout
[  434.622467][T16266] netlink: 'syz.1.2971': attribute type 4 has an invalid length.
[  434.692385][T16057] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  434.713387][T16269] mac80211_hwsim hwsim34 wlan1: entered promiscuous mode
[  434.720958][T16269] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode
[  434.733974][T16057] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  434.802984][T16057] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  434.871620][T16057] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  435.178943][T16285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2975'.
[  435.501259][T16297] netlink: 'syz.4.2979': attribute type 1 has an invalid length.
[  435.665926][T16305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2983'.
[  435.685340][T16297] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  435.740572][T16296] veth3: entered promiscuous mode
[  435.775997][T16057] 8021q: adding VLAN 0 to HW filter on device bond0
[  435.831150][T16057] 8021q: adding VLAN 0 to HW filter on device team0
[  435.856931][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.864244][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  435.944966][ T9081] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.952186][ T9081] bridge0: port 2(bridge_slave_1) entered forwarding state
[  435.977550][T16318] netlink: 'syz.3.2987': attribute type 1 has an invalid length.
[  436.008440][T16318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2987'.
[  436.008836][T16319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2986'.
[  436.029086][T16318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2987'.
[  436.115154][T16319] netlink: 'syz.4.2986': attribute type 1 has an invalid length.
[  436.534072][T16339] netlink: 2716 bytes leftover after parsing attributes in process `syz.2.2992'.
[  436.570911][T16342] netlink: 'syz.3.2994': attribute type 1 has an invalid length.
[  436.635578][T16342] 8021q: adding VLAN 0 to HW filter on device bond7
[  436.701773][T16345] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2996'.
[  436.749206][T16342] bond7: (slave veth13): Enslaving as an active interface with a down link
[  437.047623][T16364] atomic_op ffff888046f19198 conn xmit_atomic 0000000000000000
[  437.085863][T16364] wg2: entered promiscuous mode
[  437.100859][T16364] wg2: entered allmulticast mode
[  437.353220][T16385] xt_HMARK: proto mask must be zero with L3 mode
[  437.437979][T16057] 8021q: adding VLAN 0 to HW filter on device batadv0
[  437.646603][T16393] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3009'.
[  437.662756][T16396] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3011'.
[  437.725793][T16393] pim6reg: entered allmulticast mode
[  437.752527][T16057] veth0_vlan: entered promiscuous mode
[  437.822469][T16406] lo speed is unknown, defaulting to 1000
[  438.092388][T16057] veth1_vlan: entered promiscuous mode
[  438.177156][T16057] veth0_macvtap: entered promiscuous mode
[  438.214376][T16057] veth1_macvtap: entered promiscuous mode
[  438.254679][T16057] batman_adv: batadv0: Interface activated: batadv_slave_0
[  438.282219][T16057] batman_adv: batadv0: Interface activated: batadv_slave_1
[  438.305460][T16057] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  438.314669][T16057] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  438.325637][T16057] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  438.334686][T16057] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  438.617351][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.625230][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.740156][ T9060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.767981][ T9060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.834917][T16425] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3018'.
[  438.859491][T16429] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3019'.
[  438.969115][T16437] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3021'.
[  438.978678][T16437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3021'.
[  439.006770][T16437] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3021'.
[  439.144021][T16443] netlink: 'syz.4.3024': attribute type 2 has an invalid length.
[  439.179202][T16443] netlink: 'syz.4.3024': attribute type 2 has an invalid length.
[  439.416292][T16455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3028'.
[  439.449096][T16455] xt_CT: You must specify a L4 protocol and not use inversions on it
[  439.746281][ T9070] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.976647][ T9070] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.123969][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  440.125874][T16475] lo speed is unknown, defaulting to 1000
[  440.197959][ T9070] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.329003][T16482] netlink: 'syz.3.3034': attribute type 13 has an invalid length.
[  440.381748][ T9070] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.795927][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  440.806926][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  440.815577][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  440.824342][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  440.835624][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  440.917732][T16475] geneve0: entered promiscuous mode
[  441.074459][T16507] netlink: 'syz.1.3041': attribute type 10 has an invalid length.
[  441.134080][ T9070] bridge_slave_1: left allmulticast mode
[  441.152594][T16510] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input10
[  441.153090][ T9070] bridge_slave_1: left promiscuous mode
[  441.193617][ T9070] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.234141][ T9070] bridge_slave_0: left allmulticast mode
[  441.251832][ T9070] bridge_slave_0: left promiscuous mode
[  441.264765][ T9070] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.355580][T16518] netlink: 'syz.4.3043': attribute type 21 has an invalid length.
[  441.720737][ T9070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  441.733209][ T9070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  441.744397][ T9070] bond0 (unregistering): Released all slaves
[  441.762539][T16507] lo: entered promiscuous mode
[  441.772284][T16507] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  441.791499][T16507] 8021q: adding VLAN 0 to HW filter on device bond0
[  441.803306][T16507] bond0: (slave lo): Enslaving as an active interface with an up link
[  441.829107][T16518] __nla_validate_parse: 1 callbacks suppressed
[  441.829129][T16518] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3043'.
[  441.919260][T16495] lo speed is unknown, defaulting to 1000
[  442.264806][T16523] lo speed is unknown, defaulting to 1000
[  442.316581][T16524] lo speed is unknown, defaulting to 1000
[  442.472101][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3048'.
[  442.515889][T16529] lo speed is unknown, defaulting to 1000
[  442.524556][T16531] lo speed is unknown, defaulting to 1000
[  442.649261][T16544] netlink: 'syz.4.3049': attribute type 27 has an invalid length.
[  442.735047][T16544] gretap0: left promiscuous mode
[  442.749496][T16544] batadv0: left promiscuous mode
[  442.754643][T16544] batadv0: left allmulticast mode
[  442.764168][T16544] bridge_slave_0: left allmulticast mode
[  442.772546][T16544] veth1_to_bond: left promiscuous mode
[  442.782174][T16544] macsec0: left allmulticast mode
[  442.794695][T16544] ip6gre1: left allmulticast mode
[  442.803280][T16544] ip6tnl1: left promiscuous mode
[  442.808358][T16544] ip6tnl1: left allmulticast mode
[  442.815633][T16544] bridge3: left promiscuous mode
[  442.823183][T16544] geneve2: left promiscuous mode
[  442.835533][T16544] sit2: left promiscuous mode
[  442.843993][T16544] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.853678][T16544] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.862426][T16544] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.871066][T16544] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.880375][T16544] geneve3: left promiscuous mode
[  442.885356][T16544] geneve3: left allmulticast mode
[  442.907738][ T5834] Bluetooth: hci0: command tx timeout
[  442.934014][T16548] 8021q: adding VLAN 0 to HW filter on device bond0
[  442.945667][T16548] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  442.979538][ T9070] hsr_slave_0: left promiscuous mode
[  442.985768][ T9070] hsr_slave_1: left promiscuous mode
[  442.994925][ T9070] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  443.002964][ T9070] batman_adv: batadv0: Removing interface: batadv_slave_0
[  443.012897][ T9070] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  443.020466][ T9070] batman_adv: batadv0: Removing interface: batadv_slave_1
[  443.047970][ T9070] veth1_macvtap: left promiscuous mode
[  443.053867][ T9070] veth0_macvtap: left promiscuous mode
[  443.059869][ T9070] veth1_vlan: left promiscuous mode
[  443.065386][ T9070] veth0_vlan: left promiscuous mode
[  443.586332][ T9070] team0 (unregistering): Port device team_slave_1 removed
[  443.633044][ T9070] team0 (unregistering): Port device team_slave_0 removed
[  444.077926][ T6542] lo speed is unknown, defaulting to 1000
[  444.096085][T14113] lo speed is unknown, defaulting to 1000
[  444.404049][T16560] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  444.499034][ T6542] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  444.670022][T16495] chnl_net:caif_netlink_parms(): no params data found
[  444.973337][T16581] netlink: 'syz.3.3061': attribute type 10 has an invalid length.
[  444.992122][ T5834] Bluetooth: hci0: command tx timeout
[  444.996953][T16581] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3061'.
[  445.019842][T16587] --map-set only usable from mangle table
[  445.069364][T16581] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  445.184733][T16599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3063'.
[  445.194931][T16599] openvswitch: netlink: Flow actions attr not present in new flow.
[  445.205559][T16495] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.258075][T16495] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.265408][T16495] bridge_slave_0: entered allmulticast mode
[  445.320773][T16495] bridge_slave_0: entered promiscuous mode
[  445.354763][T16495] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.374367][T16495] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.404656][ T5886] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  445.416541][T16495] bridge_slave_1: entered allmulticast mode
[  445.439292][T16495] bridge_slave_1: entered promiscuous mode
[  445.541644][ T9060] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  445.573596][T16620] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  445.586355][T16620] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3067'.
[  445.653112][T16603] lo speed is unknown, defaulting to 1000
[  445.785550][T16620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3067'.
[  445.813578][T16495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  445.827810][T16623] x_tables: ip_tables: icmp match: only valid for protocol 1
[  445.850046][T16623] netlink: 'syz.4.3068': attribute type 9 has an invalid length.
[  445.955292][T16495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  446.156658][T16637] netlink: 'syz.1.3074': attribute type 21 has an invalid length.
[  446.164838][T16637] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3074'.
[  446.185603][T16637] netlink: 'syz.1.3074': attribute type 5 has an invalid length.
[  446.193821][T16637] netlink: 'syz.1.3074': attribute type 6 has an invalid length.
[  446.203726][T16637] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3074'.
[  446.223916][T16495] team0: Port device team_slave_0 added
[  446.375548][T16642] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3073'.
[  446.405579][T16495] team0: Port device team_slave_1 added
[  446.533322][T16650] xt_CT: No such helper "pptp"
[  446.821869][T16656] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3078'.
[  447.037294][T16647] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  447.046389][T16647] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  447.056162][T16647] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  447.065555][T16647] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  447.075004][ T5834] Bluetooth: hci0: command tx timeout
[  447.083727][T16646] lo: left promiscuous mode
[  447.125884][T16646] 8021q: adding VLAN 0 to HW filter on device bond0
[  447.135020][T16646] 8021q: adding VLAN 0 to HW filter on device team0
[  447.147479][T16646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  447.193305][ T9074] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  447.207383][ T9074] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  447.273732][T16656] gretap0: entered promiscuous mode
[  447.324122][T16656] gretap0: left promiscuous mode
[  447.468632][T16495] batman_adv: batadv0: Adding interface: batadv_slave_0
[  447.479794][T16495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  447.519272][T16495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  447.562839][T16663] lo speed is unknown, defaulting to 1000
[  447.569341][T16663] lo speed is unknown, defaulting to 1000
[  447.576023][T16663] lo speed is unknown, defaulting to 1000
[  447.597830][T16663] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  447.628260][T16663] lo speed is unknown, defaulting to 1000
[  447.636423][T16663] lo speed is unknown, defaulting to 1000
[  447.644659][T16663] lo speed is unknown, defaulting to 1000
[  447.653881][T16663] lo speed is unknown, defaulting to 1000
[  447.662600][T16663] lo speed is unknown, defaulting to 1000
[  447.670499][T16663] lo speed is unknown, defaulting to 1000
[  447.739447][T16671] xt_CT: No such helper "pptp"
[  447.849220][T16495] batman_adv: batadv0: Adding interface: batadv_slave_1
[  447.856562][T16495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  447.904614][T16495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  447.946051][T14112] lo speed is unknown, defaulting to 1000
[  447.956130][T16675] SET target dimension over the limit!
[  447.970366][T14112] syz2: Port: 1 Link DOWN
[  448.027441][T14112] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  448.053447][T16674] lo speed is unknown, defaulting to 1000
[  448.091023][T16495] hsr_slave_0: entered promiscuous mode
[  448.101055][T16495] hsr_slave_1: entered promiscuous mode
[  448.113350][T16495] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  448.123540][T16495] Cannot create hsr debugfs directory
[  448.132437][T16674] lo speed is unknown, defaulting to 1000
[  448.158079][T16683] __nla_validate_parse: 1 callbacks suppressed
[  448.158101][T16683] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3087'.
[  448.238466][T16686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3088'.
[  448.665224][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3095'.
[  448.678696][T16709] netlink: 'syz.4.3095': attribute type 9 has an invalid length.
[  448.755424][T16710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3091'.
[  448.763035][T16704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3094'.
[  448.773960][T16704] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  448.782186][T16704] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  448.797880][T16710] netlink: 15 bytes leftover after parsing attributes in process `syz.3.3091'.
[  448.811264][T16710] netlink: 15 bytes leftover after parsing attributes in process `syz.3.3091'.
[  448.837604][T16709] macvlan0: entered allmulticast mode
[  448.843175][T16709] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  449.148581][ T5834] Bluetooth: hci0: command tx timeout
[  449.233427][T16725] Bluetooth: hci3: Opcode 0x0401 failed: -4
[  449.325570][T16727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3099'.
[  449.371293][ T9074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.416357][ T9074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  449.582157][T16729] lo speed is unknown, defaulting to 1000
[  449.618811][T16729] lo speed is unknown, defaulting to 1000
[  449.655356][T16734] smc: net device bond0 applied user defined pnetid SYZ0
[  449.695691][T16734] smc: net device bond0 erased user defined pnetid SYZ0
[  450.121246][T16741] xt_CT: No such helper "snmp"
[  450.233009][T16753] lo speed is unknown, defaulting to 1000
[  450.521089][T16753] lo speed is unknown, defaulting to 1000
[  450.583310][T16495] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  450.609290][T16495] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  450.637824][T16495] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  450.660028][T16768] ==================================================================
[  450.668241][T16768] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x391/0x990
[  450.676025][T16768] Read of size 1 at addr ffff8880469ac830 by task syz.1.3111/16768
[  450.684505][T16768] 
[  450.686909][T16768] CPU: 0 UID: 0 PID: 16768 Comm: syz.1.3111 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) 
[  450.686938][T16768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  450.686952][T16768] Call Trace:
[  450.686961][T16768]  <TASK>
[  450.686971][T16768]  dump_stack_lvl+0x189/0x250
[  450.687005][T16768]  ? __virt_addr_valid+0x18c/0x540
[  450.687033][T16768]  ? rcu_is_watching+0x15/0xb0
[  450.687051][T16768]  ? __kasan_check_byte+0x12/0x40
[  450.687079][T16768]  ? __pfx_dump_stack_lvl+0x10/0x10
[  450.687107][T16768]  ? rcu_is_watching+0x15/0xb0
[  450.687125][T16768]  ? lock_release+0x4b/0x3e0
[  450.687159][T16768]  ? __virt_addr_valid+0x18c/0x540
[  450.687186][T16768]  ? __virt_addr_valid+0x469/0x540
[  450.687216][T16768]  print_report+0xb4/0x290
[  450.687243][T16768]  ? rose_get_neigh+0x391/0x990
[  450.687264][T16768]  kasan_report+0x118/0x150
[  450.687293][T16768]  ? rose_get_neigh+0x391/0x990
[  450.687322][T16768]  rose_get_neigh+0x391/0x990
[  450.687349][T16768]  rose_connect+0x416/0x10a0
[  450.687380][T16768]  ? __pfx_current_check_access_socket+0x10/0x10
[  450.687409][T16768]  ? aa_sk_perm+0x81e/0x950
[  450.687429][T16768]  ? __might_fault+0xb0/0x130
[  450.687456][T16768]  ? __pfx_rose_connect+0x10/0x10
[  450.687487][T16768]  ? aa_af_perm+0x1f0/0x2b0
[  450.687507][T16768]  ? tomoyo_socket_connect_permission+0x164/0x290
[  450.687541][T16768]  ? bpf_lsm_socket_connect+0x9/0x20
[  450.687568][T16768]  __sys_connect+0x316/0x440
[  450.687606][T16768]  ? __pfx___sys_connect+0x10/0x10
[  450.687647][T16768]  __x64_sys_connect+0x7a/0x90
[  450.687674][T16768]  do_syscall_64+0xf6/0x210
[  450.687700][T16768]  ? clear_bhb_loop+0x60/0xb0
[  450.687724][T16768]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.687745][T16768] RIP: 0033:0x7f9ffd58e969
[  450.687764][T16768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  450.687783][T16768] RSP: 002b:00007f9ffe499038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  450.687805][T16768] RAX: ffffffffffffffda RBX: 00007f9ffd7b6080 RCX: 00007f9ffd58e969
[  450.687821][T16768] RDX: 000000000000001c RSI: 00002000000006c0 RDI: 0000000000000007
[  450.687834][T16768] RBP: 00007f9ffd610ab1 R08: 0000000000000000 R09: 0000000000000000
[  450.687847][T16768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  450.687860][T16768] R13: 0000000000000000 R14: 00007f9ffd7b6080 R15: 00007ffe2ac31278
[  450.687885][T16768]  </TASK>
[  450.687892][T16768] 
[  450.933636][T16768] Allocated by task 9072:
[  450.937973][T16768]  kasan_save_track+0x3e/0x80
[  450.942665][T16768]  __kasan_kmalloc+0x93/0xb0
[  450.949563][T16768]  __kmalloc_cache_noprof+0x230/0x3d0
[  450.955062][T16768]  __ipv6_dev_mc_inc+0x420/0xaf0
[  450.960030][T16768]  addrconf_dad_work+0x3d0/0x14b0
[  450.965078][T16768]  process_scheduled_works+0xade/0x17a0
[  450.970641][T16768]  worker_thread+0x8a0/0xda0
[  450.975329][T16768]  kthread+0x711/0x8a0
[  450.979506][T16768]  ret_from_fork+0x4b/0x80
[  450.983932][T16768]  ret_from_fork_asm+0x1a/0x30
[  450.988761][T16768] 
[  450.991107][T16768] Freed by task 9073:
[  450.995096][T16768]  kasan_save_track+0x3e/0x80
[  450.999929][T16768]  kasan_save_free_info+0x46/0x50
[  451.004972][T16768]  __kasan_slab_free+0x62/0x70
[  451.009766][T16768]  kmem_cache_free_bulk+0x2d1/0x520
[  451.014985][T16768]  kvfree_rcu_bulk+0xe5/0x1e0
[  451.019685][T16768]  kfree_rcu_work+0xed/0x170
[  451.024328][T16768]  process_scheduled_works+0xade/0x17a0
[  451.029884][T16768]  worker_thread+0x8a0/0xda0
[  451.034483][T16768]  kthread+0x711/0x8a0
[  451.038749][T16768]  ret_from_fork+0x4b/0x80
[  451.043182][T16768]  ret_from_fork_asm+0x1a/0x30
[  451.048066][T16768] 
[  451.050520][T16768] Last potentially related work creation:
[  451.056255][T16768]  kasan_save_stack+0x3e/0x60
[  451.060948][T16768]  kasan_record_aux_stack+0xbc/0xd0
[  451.066152][T16768]  kvfree_call_rcu+0xbb/0x410
[  451.070936][T16768]  __ipv6_dev_mc_dec+0x31f/0x390
[  451.075887][T16768]  __ipv6_ifa_notify+0x43d/0xac0
[  451.080843][T16768]  addrconf_ifdown+0xe69/0x1880
[  451.085707][T16768]  addrconf_notify+0x1bc/0x1010
[  451.090586][T16768]  notifier_call_chain+0x1b3/0x3e0
[  451.095813][T16768]  dev_close_many+0x29c/0x410
[  451.100592][T16768]  unregister_netdevice_many_notify+0x834/0x2320
[  451.106939][T16768]  default_device_exit_batch+0x819/0x890
[  451.112606][T16768]  ops_undo_list+0x525/0x990
[  451.117253][T16768]  cleanup_net+0x4c5/0x8a0
[  451.121726][T16768]  process_scheduled_works+0xade/0x17a0
[  451.127372][T16768]  worker_thread+0x8a0/0xda0
[  451.132059][T16768]  kthread+0x711/0x8a0
[  451.136229][T16768]  ret_from_fork+0x4b/0x80
[  451.140746][T16768]  ret_from_fork_asm+0x1a/0x30
[  451.145516][T16768] 
[  451.147864][T16768] The buggy address belongs to the object at ffff8880469ac800
[  451.147864][T16768]  which belongs to the cache kmalloc-512 of size 512
[  451.162101][T16768] The buggy address is located 48 bytes inside of
[  451.162101][T16768]  freed 512-byte region [ffff8880469ac800, ffff8880469aca00)
[  451.175855][T16768] 
[  451.178330][T16768] The buggy address belongs to the physical page:
[  451.185022][T16768] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x469ac
[  451.193879][T16768] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  451.202394][T16768] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  451.209947][T16768] page_type: f5(slab)
[  451.213941][T16768] raw: 00fff00000000040 ffff88801a041c80 ffffea00008dd400 dead000000000002
[  451.222531][T16768] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  451.231656][T16768] head: 00fff00000000040 ffff88801a041c80 ffffea00008dd400 dead000000000002
[  451.240337][T16768] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  451.249153][T16768] head: 00fff00000000002 ffffea00011a6b01 00000000ffffffff 00000000ffffffff
[  451.258472][T16768] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  451.267264][T16768] page dumped because: kasan: bad access detected
[  451.273693][T16768] page_owner tracks the page as allocated
[  451.279593][T16768] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11635, tgid 11634 (syz.1.1591), ts 316596462483, free_ts 313928836724
[  451.301622][T16768]  post_alloc_hook+0x1d8/0x230
[  451.306420][T16768]  get_page_from_freelist+0x21e0/0x22c0
[  451.307168][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  451.311974][T16768]  __alloc_frozen_pages_noprof+0x181/0x370
[  451.311998][T16768]  alloc_pages_mpol+0x232/0x4a0
[  451.331201][T16768]  allocate_slab+0x8a/0x3b0
[  451.335723][T16768]  ___slab_alloc+0xbfc/0x1480
[  451.340506][T16768]  __kmalloc_cache_noprof+0x296/0x3d0
[  451.345896][T16768]  sctp_endpoint_new+0x86/0xa20
[  451.350779][T16768]  sctp_init_sock+0x960/0x11f0
[  451.355818][T16768]  sctp_v6_init_sock+0x16/0x70
[  451.360602][T16768]  inet6_create+0xeb5/0x12a0
[  451.365208][T16768]  __sock_create+0x4b3/0x9f0
[  451.369811][T16768]  __sys_socket+0xd7/0x1b0
[  451.374245][T16768]  __x64_sys_socket+0x7a/0x90
[  451.378935][T16768]  do_syscall_64+0xf6/0x210
[  451.383544][T16768]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.389455][T16768] page last free pid 11467 tgid 11466 stack trace:
[  451.395987][T16768]  __free_frozen_pages+0xb14/0xce0
[  451.401118][T16768]  ringbuf_map_free+0xc0/0x110
[  451.405919][T16768]  bpf_map_free+0x96/0xc0
[  451.410276][T16768]  map_create+0xd85/0x1150
[  451.414810][T16768]  __sys_bpf+0x67e/0x860
[  451.419078][T16768]  __x64_sys_bpf+0x7c/0x90
[  451.423612][T16768]  do_syscall_64+0xf6/0x210
[  451.428223][T16768]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.434214][T16768] 
[  451.436542][T16768] Memory state around the buggy address:
[  451.442174][T16768]  ffff8880469ac700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  451.450245][T16768]  ffff8880469ac780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  451.458402][T16768] >ffff8880469ac800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  451.466480][T16768]                                      ^
[  451.472117][T16768]  ffff8880469ac880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  451.480281][T16768]  ffff8880469ac900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  451.488437][T16768] ==================================================================
[  451.496700][T16768] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  451.503935][T16768] CPU: 0 UID: 0 PID: 16768 Comm: syz.1.3111 Not tainted 6.15.0-rc6-syzkaller-01179-g1119e5519dcd #0 PREEMPT(full) 
[  451.516212][T16768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  451.526311][T16768] Call Trace:
[  451.529625][T16768]  <TASK>
[  451.532582][T16768]  dump_stack_lvl+0x99/0x250
[  451.537221][T16768]  ? __asan_memcpy+0x40/0x70
[  451.541857][T16768]  ? __pfx_dump_stack_lvl+0x10/0x10
[  451.547117][T16768]  ? __pfx__printk+0x10/0x10
[  451.551846][T16768]  panic+0x2db/0x790
[  451.555796][T16768]  ? __pfx_panic+0x10/0x10
[  451.560275][T16768]  ? check_panic_on_warn+0x75/0xb0
[  451.565445][T16768]  ? rose_get_neigh+0x391/0x990
[  451.570404][T16768]  check_panic_on_warn+0x89/0xb0
[  451.575374][T16768]  ? rose_get_neigh+0x391/0x990
[  451.580239][T16768]  end_report+0x78/0x160
[  451.584519][T16768]  kasan_report+0x129/0x150
[  451.589167][T16768]  ? rose_get_neigh+0x391/0x990
[  451.594044][T16768]  rose_get_neigh+0x391/0x990
[  451.598834][T16768]  rose_connect+0x416/0x10a0
[  451.603450][T16768]  ? __pfx_current_check_access_socket+0x10/0x10
[  451.609803][T16768]  ? aa_sk_perm+0x81e/0x950
[  451.614320][T16768]  ? __might_fault+0xb0/0x130
[  451.619193][T16768]  ? __pfx_rose_connect+0x10/0x10
[  451.624239][T16768]  ? aa_af_perm+0x1f0/0x2b0
[  451.628851][T16768]  ? tomoyo_socket_connect_permission+0x164/0x290
[  451.635291][T16768]  ? bpf_lsm_socket_connect+0x9/0x20
[  451.640706][T16768]  __sys_connect+0x316/0x440
[  451.645364][T16768]  ? __pfx___sys_connect+0x10/0x10
[  451.650558][T16768]  __x64_sys_connect+0x7a/0x90
[  451.655352][T16768]  do_syscall_64+0xf6/0x210
[  451.659879][T16768]  ? clear_bhb_loop+0x60/0xb0
[  451.664573][T16768]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.670660][T16768] RIP: 0033:0x7f9ffd58e969
[  451.675114][T16768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  451.694825][T16768] RSP: 002b:00007f9ffe499038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  451.703274][T16768] RAX: ffffffffffffffda RBX: 00007f9ffd7b6080 RCX: 00007f9ffd58e969
[  451.711272][T16768] RDX: 000000000000001c RSI: 00002000000006c0 RDI: 0000000000000007
[  451.719376][T16768] RBP: 00007f9ffd610ab1 R08: 0000000000000000 R09: 0000000000000000
[  451.727366][T16768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  451.735531][T16768] R13: 0000000000000000 R14: 00007f9ffd7b6080 R15: 00007ffe2ac31278
[  451.743613][T16768]  </TASK>
[  451.746905][T16768] Kernel Offset: disabled
[  451.751240][T16768] Rebooting in 86400 seconds..