last executing test programs:

2.569848504s ago: executing program 4 (id=805):
socket(0x10, 0x3, 0x0)
close(0x3)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x203, 0x4, @mcast2}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x1}, 0x8)

2.458039713s ago: executing program 1 (id=807):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x2a, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$phonet_pipe(0x23, 0x5, 0x2)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
close(0x4)

2.285237511s ago: executing program 2 (id=809):
r0 = socket(0x28, 0x80801, 0x0)
connect$bt_sco(r0, &(0x7f0000000340)={0x1f, @none}, 0x8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14)
ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0xa)
bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'pim6reg0\x00', {0x400}})

2.283104127s ago: executing program 3 (id=810):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "230000001000", "008d6900aa786ba4aaeeff0000f300", "f7dd5b2f", "651039552d881748"}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x300}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0x8)
r4 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x508}, &(0x7f00000000c0)=0x8)
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000180)={@loopback, <r5=>0x0}, &(0x7f0000000200)=0x14)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="00f3ffbd7000fcdbdf2508000000080004000c000000080003000700000008000300190000e708000400000000003c00018008000600060000000800030064010102060005004e210000060001000a00000008000700000000", @ANYRES32=r5, @ANYRES16=0x0], 0x84}, 0x1, 0x0, 0x0, 0x90}, 0x440c0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'caif0\x00', 0x1000})
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4000010)
socket$inet(0x2, 0x2, 0xfffffffc)
socket$caif_stream(0x25, 0x1, 0x3)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x8010, 0x8000, 0x8, 0x7, {{0x5, 0x4, 0x2, 0x13, 0x14, 0x466, 0x0, 0x6, 0x4, 0x0, @loopback, @remote}}}})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r8, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000300), 0x8)

2.261743104s ago: executing program 1 (id=811):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', r1, 0x0, 0x9}, 0x18)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x14}], 0x1}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00'})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdc03, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x802}, 0x48080)
sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x61}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c000}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x5c, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0x27, 0xc, "1d1227950e6661b5656516f7be86af4c33422b66ff7a081498cdc06303ae3ed4f54547"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
syz_emit_ethernet(0x1e, &(0x7f00000001c0)={@local, @link_local, @void, {@can={0xc, {{0x1, 0x0, 0x1}, 0x1, 0x2, 0x0, 0x0, "48018c24435bd3f1"}}}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000001300020000000000fbdbdf25fc0000000000000000000000000000000000001200000000000000000000000000000004000000000a006080"], 0xb4}, 0x1, 0x0, 0x0, 0x90}, 0x50)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0)

2.18875762s ago: executing program 0 (id=812):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)=ANY=[], 0xf0)
sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback={0x400000000000000}, 0xc5f}, 0x1c)

2.077253757s ago: executing program 2 (id=813):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
unshare(0x20000400)
pipe(&(0x7f0000001200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, &(0x7f00000064c0)=0x8, r4, 0x0, 0x2000000000000e, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000004a4cf8d7a955fe8288db276b0a61ff88202e4c84ba25717a7f8792f870b04bab11078feb7c87fd7f9c073e5f5179583a24943ed8118f245922ed0bf88326d55f834cd6fed90e6db9d23563457d2589c6bb801670c42eba58577e619258bdaf12af0081e46e8fc757af205cf0cf0e7b8e3ada004dcafa69c4d5f36ba6bef63fb3c12de416c280a4ce201d650bc6b366bcebc51fb9be0c1c4357398ebcce266d7b71482ae44a68f551c7c987c5", @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4080)

2.05979208s ago: executing program 3 (id=814):
r0 = socket(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
unshare(0x400)
r1 = socket(0x23, 0x80805, 0x0)
listen(r1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x800000000000}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000a00)={'syztnl0\x00', &(0x7f0000000980)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x6, 0x3, 0x55, @dev={0xfe, 0x80, '\x00', 0x10}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x7, 0x7, 0x4}})

2.017499077s ago: executing program 1 (id=815):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="200000000000e700000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES64=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x50)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01002cbd7000ffdbdb2504100000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x54)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='cpuhp_exit\x00', r0, 0x0, 0x7}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6gre0\x00', <r6=>0x0, 0x4, 0x7, 0x3, 0x6, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x12}, 0x20, 0x7, 0x8, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl0\x00', <r7=>0x0, 0x2f, 0x96, 0x48, 0x5, 0x69, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x10, 0x8008, 0x1, 0x2}})
socket$phonet(0x23, 0x2, 0x1)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x148, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf9}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x23}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4d}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x8008080}, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r8 = socket(0x1e, 0x4, 0x0)
getsockname$packet(r8, &(0x7f0000000280)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r9, 0x29, 0x9, 0x8, 0x800, 0x5, @ipv4={'\x00', '\xff\xff', @local}, @private1, 0x10, 0x80, 0xe6, 0x2}})

1.895981141s ago: executing program 2 (id=816):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000100)={0x0, {{0xa, 0x4e23, 0x98fe, @mcast2, 0x45103e9e}}, {{0xa, 0x4e23, 0xf, @mcast2, 0xffffffff}}}, 0x108)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000001e00), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001e40)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf2501000000100007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c0005004fc31bfd000000000c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x5})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFBR(r5, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000e86dd600000000000c70000000000000000000000ffffac1414bbff020000000000000000000000000001"], 0x0)

1.888615189s ago: executing program 3 (id=817):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='tlb_flush\x00', r3}, 0x18)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0xffffff7f, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x86, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @tunnel={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @dynset={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPR={0x0, 0x7, 0x0, 0x1, {{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x0, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SREG, @NFTA_LOOKUP_SREG={0x0, 0x2, 0x1, 0x0, 0x10}, @NFTA_LOOKUP_FLAGS, @NFTA_LOOKUP_SREG={0x0, 0x2, 0x1, 0x0, 0x16}, @NFTA_LOOKUP_SREG={0x0, 0x2, 0x1, 0x0, 0x13}]}}}, @NFTA_DYNSET_SET_ID={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SREG_KEY={0x0, 0x4, 0x1, 0x0, 0x1}, @NFTA_DYNSET_EXPR={0x0, 0x7, 0x0, 0x1, {{}, @void}}, @NFTA_DYNSET_EXPRESSIONS={0x0, 0xa, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @immediate={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x0, 0x1, 0x1, 0x0, 0xb}]}}}, {0x0, 0x1, 0x0, 0x1, @reject={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @lookup={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @redir={{}, @void}}]}, @NFTA_DYNSET_TIMEOUT={0x0, 0x6, 0x1, 0x0, 0x4}, @NFTA_DYNSET_EXPRESSIONS={0x0, 0xa, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @tproxy={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @dup_ipv4={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x0, 0x1, 0x1, 0x0, 0x8}]}}}, {0x0, 0x1, 0x0, 0x1, @inner={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x0, 0x3, 0x1, 0x0, 0x6}, @NFTA_INNER_EXPR={0x0, 0x5, 0x0, 0x1, @meta={{}, @void}}, @NFTA_INNER_TYPE={0x0, 0x2, 0x1, 0x0, 0x98}, @NFTA_INNER_TYPE={0x0, 0x2, 0x1, 0x0, 0x41}, @NFTA_INNER_EXPR={0x0, 0x5, 0x0, 0x1, @meta={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_META_SREG={0x0, 0x3, 0x1, 0x0, 0xf}, @NFTA_META_KEY={0x0, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x0, 0x1, 0x1, 0x0, 0x17}, @NFTA_META_DREG={0x0, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_SREG={0x0, 0x3, 0x1, 0x0, 0x17}, @NFTA_META_DREG={0x0, 0x1, 0x1, 0x0, 0x11}, @NFTA_META_KEY={0x0, 0x2, 0x1, 0x0, 0x22}]}}}, @NFTA_INNER_EXPR={0x0, 0x5, 0x0, 0x1, @meta={{}, @void}}, @NFTA_INNER_TYPE={0x0, 0x2, 0x1, 0x0, 0x39}, @NFTA_INNER_NUM]}}}, {0x0, 0x1, 0x0, 0x1, @objref={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x0, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_SET_ID={0x0, 0x5, 0x1, 0x0, 0x3}]}}}, {0x0, 0x1, 0x0, 0x1, @tproxy={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x0, 0x2, 0x1, 0x0, 0x13}, @NFTA_TPROXY_REG_PORT={0x0, 0x3, 0x1, 0x0, 0xc}]}}}]}, @NFTA_DYNSET_SET_NAME={0x0, 0x1, 'syz0\x00'}, @NFTA_DYNSET_TIMEOUT={0x0, 0x6, 0x1, 0x0, 0x1}]}}}, {0x0, 0x1, 0x0, 0x1, @fib={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @hash={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x0, 0x5, 0x1, 0x0, 0xa}, @NFTA_HASH_SEED={0x0, 0x5, 0x1, 0x0, 0x8}, @NFTA_HASH_DREG={0x0, 0x2, 0x1, 0x0, 0x11}]}}}, {0x0, 0x1, 0x0, 0x1, @exthdr={{}, @void}}]}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x22020400)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}, 0x1, 0x0, 0x9fff}, 0x0)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000010c0)=@mangle={'mangle\x00', 0x2, 0x6, 0xd30, 0x9c8, 0x8d8, 0x8d8, 0x8d8, 0xa98, 0xc60, 0xc60, 0xc60, 0xc60, 0xc60, 0x6, 0x0, {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0xb}, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {0xff}, 0x21}, 0x0, 0x8b0, 0x8d8, 0x0, {0x7a00000010000000}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x8, 0x1}, {0x5, 0x2}, {0x7fffffff, 0x1}, {0x64c, 0x2}, {0xb4, 0x3}, {0x3}, {0x981e, 0x2}, {}, {0x63b}, {0x8, 0x2}, {0x2}], [{0xfffffffa, 0x1}, {0xb, 0x9}, {0x200, 0x4}, {0x1, 0x9}, {0x7ff, 0x2}, {0x7, 0x5}, {0x1, 0x7}, {0x8001, 0x80}, {0x2, 0x2}, {0xffffffff}, {0x4, 0xd961}], 0x6, 0xa}, {[{0x5, 0x3}, {0x7fff, 0x3}, {0x8001}, {0xfd5, 0x1}, {0x7, 0x2}, {0xffffbf2c, 0x3}, {0x2, 0x2}, {0x1, 0x1}, {0x738}, {0x800, 0x3}, {0xc, 0x2}], [{0x1, 0x9}, {0xffff, 0xf}, {0x2, 0x41}, {0x4000, 0x8}, {0x2, 0x4797}, {0x2, 0x8000}, {0xe0, 0x1}, {0xe, 0x2}, {0x401, 0x6}, {0x3, 0xffff}, {0x7, 0x7}], 0x2, 0x1}, {[{0x0, 0x2}, {0xba}, {0x8, 0x3}, {0xfffffe00, 0x3}, {0x8, 0x1}, {0x4, 0x2}, {0x1, 0x3}, {0x3}, {0x9, 0x2}, {0x9, 0x3}, {0x1}], [{0xe, 0x7}, {0x8, 0x10}, {0x2, 0x6}, {0x80000000, 0x2}, {0x5384, 0x1}, {0x7fff, 0xf}, {0x6, 0x10000}, {0x2, 0xc0}, {0xe, 0x3}, {0x9, 0x1ff}, {0x9, 0x7f}], 0x5, 0x6}, {[{0x3, 0x3}, {0x5, 0x3}, {0x81, 0x2}, {0x2, 0x2}, {0x2, 0x2}, {0x2, 0x1}, {0x4, 0x2}, {0x6, 0x2}, {0x9, 0x2}, {0x80, 0x3}, {0x3ff, 0x3}], [{0x3, 0x4}, {0x401, 0x500}, {0xe, 0x1}, {0x3, 0xffffffc7}, {0x4c15, 0x10001}, {0x3, 0x4}, {0x3, 0x200}, {0x7fff, 0x8}, {0x2, 0xd39}, {0x7ffe, 0xc}, {0x4, 0x7f}], 0x9, 0xb}, {[{0x101, 0x1}, {0x5, 0x2}, {0xfffffffa}, {}, {0x8, 0x2}, {0x7, 0x2}, {0x100, 0x2}, {0x5, 0x1}, {0xfffffffd, 0x1}, {0xe}, {0x0, 0x1}], [{0x3, 0x9}, {0x8, 0x3}, {0x6, 0x9}, {0x8, 0x80}, {0x1, 0x6}, {0x81, 0x4}, {0x2, 0x7}, {0x80, 0x6}, {0x8, 0x40}, {0x9}, {0x0, 0xff}], 0xa, 0xa}, {[{0x5, 0x2}, {0x7600, 0x3}, {0x10001, 0x1}, {0x1, 0x2}, {0x84}, {0xd}, {0x136}, {0x1, 0x1}, {0x7, 0x3}, {0x3, 0x1}, {0x592c, 0x1}], [{0xf0c}, {0x9, 0xfffffff9}, {0x4, 0xffff1871}, {0x9, 0x101}, {0x6, 0x4}, {0x3000, 0xb}, {0x9, 0xd3f5}, {0x7}, {0x9, 0x9737}, {0xffff, 0xe49}, {0x7fffffff, 0x5}], 0x1, 0xa}, {[{0x1, 0x1}, {0x7fff, 0x3}, {0x9}, {0xfffffff6, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0xe92, 0x3}, {0x9}, {0xb372, 0x1}, {0x5, 0x1}, {0x8}], [{0x9, 0x9}, {0x4, 0x7}, {0x9bc, 0x6}, {0xffff8001, 0x100}, {0x9, 0x10}, {0x66e4, 0x8bf}, {0x6, 0x7}, {0xf639, 0x6}, {0x5, 0x8}, {0x9, 0x401}, {0x4, 0x100}], 0x4, 0x9}, {[{0x3, 0x1}, {0x4, 0x1}, {0x0, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x0, 0x3}, {0x4, 0x1}, {0xff, 0x3}, {0x6, 0x3}, {0x2}], [{0x7, 0x8000}, {0xfff, 0x6}, {0x2, 0x2}, {0xc, 0x3ff}, {0xa, 0x80000000}, {0x4, 0x783}, {0x6, 0x9}, {0x101, 0x8000}, {0x10001, 0x3}, {0x3, 0xd67}, {0xfffffff9, 0xfff}], 0xb, 0x1}, {[{0x80000001, 0x3}, {0x3}, {0x61c5c6cf, 0x2}, {0x0, 0x3}, {}, {0x806, 0x2}, {0x6, 0x3}, {0xfffffffa, 0x1}, {0xb43, 0x3}, {0x6, 0x2}, {0x400, 0x1}], [{0x1, 0x8000}, {0xce47, 0xfffffcef}, {0x100, 0x4}, {0x4, 0x3}, {0xd41, 0x8}, {0x8, 0x18000}, {0x8000, 0x6}, {0xf}, {0x4, 0x7f}, {0x4, 0x2}, {0x5, 0x1}], 0x6, 0x6}, {[{0x4}, {0xfff}, {0x0, 0x1}, {0x9, 0x1}, {0x365, 0x3}, {0x6, 0x2}, {0xfffffffe}, {0xfff, 0x8515453908d9a9fb}, {0xfffffffa, 0x3}, {0x0, 0x2}, {0x58c, 0x3}], [{0x8, 0xb}, {0x6, 0xffff}, {0x2, 0x9}, {0x8000, 0x8}, {0x1, 0x2}, {0x4, 0x29a0f484}, {0x6b, 0x5}, {0x4, 0x2f9}, {0x18a6, 0x2}, {0xd58, 0x10}, {0x8, 0x2}], 0x3, 0x6}, {[{0x4, 0x3}, {0x9}, {0xe, 0x3}, {0x5, 0x3}, {0x1, 0x1}, {0x5, 0x2}, {0xc16b, 0x2}, {0x6, 0x1}, {0x3, 0x3}, {0x41}, {0x5ae8}], [{0xfff, 0xffffff80}, {0x8, 0xa5}, {0x2, 0x5}, {0x6, 0xbe8f}, {0xfffffbff, 0x7ff}, {0x5, 0x8001}, {0x1, 0x47}, {0x400, 0x47d4}, {0x38a7, 0xfffffff7}, {0x7c6, 0xffff}, {0xbc8, 0x3}], 0x0, 0x4}], 0x3}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@multicast1=0xe0000000, 0x36, 0x11, 0x5}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xff000000], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xb96, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2b}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xd90)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x800, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10)

1.721980053s ago: executing program 2 (id=818):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000000)

1.584455912s ago: executing program 4 (id=819):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x2, 0x3, 0x2, 0x3, 0x800, 0x6, 0x6}}, {0x10, 0x2, [0x4, 0xf, 0x4, 0x2, 0x588, 0x7ff]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0xa, 0xb}, {0x9, 0xfffa}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xffffffff, 0x6, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0a2}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000080)={'gretap0\x00', <r8=>0x0, 0x1, 0x8000, 0x2, 0x10000, {{0x1b, 0x4, 0x0, 0x0, 0x6c, 0x68, 0x0, 0x7, 0x2f, 0x0, @empty, @loopback, {[@noop, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0xa4, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x43}, @loopback]}, @cipso={0x86, 0x13, 0x3, [{0x5, 0x9, "955c41bfebaaaa"}, {0x5, 0x4, "d3a1"}]}, @ssrr={0x89, 0x7, 0x5b, [@dev={0xac, 0x14, 0x14, 0x27}]}, @end, @ssrr={0x89, 0x27, 0x9b, [@empty, @private=0xa010100, @rand_addr=0x64010101, @multicast1, @broadcast, @empty, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r8, 0x24}, 0x94)

1.560348597s ago: executing program 2 (id=820):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r0)
sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x14, r1, 0x401, 0x70bd28, 0x10000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x100000000000000)

1.442890208s ago: executing program 1 (id=821):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x2a, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$phonet_pipe(0x23, 0x5, 0x2)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
close(0x4)

1.254942763s ago: executing program 2 (id=822):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
socket$inet6_sctp(0xa, 0x3, 0x84) (async)
socket$inet6_sctp(0xa, 0x3, 0x84)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x509a003776dd8c3e}, @TCA_NETEM_REORDER={0xc, 0x3, {0x5, 0x315e5514}}]}}}]}, 0x64}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendto$packet(r2, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002240)={'sit0\x00', &(0x7f0000002100)={'gretap0\x00', 0x0, 0x80, 0x700, 0x15, 0x1, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x64, 0x0, 0x2, 0x4, 0x0, @empty, @empty}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002240)={'sit0\x00', &(0x7f0000002100)={'gretap0\x00', 0x0, 0x80, 0x700, 0x15, 0x1, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x64, 0x0, 0x2, 0x4, 0x0, @empty, @empty}}}})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x70603, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
r9 = accept4(0xffffffffffffffff, &(0x7f0000000e00)=@tipc=@id, 0x0, 0x80800)
sendmsg$NFNL_MSG_ACCT_NEW(r9, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x20, 0x0, 0x7, 0x301, 0x0, 0x0, {0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xbb0}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4)
socket$igmp6(0xa, 0x3, 0x2) (async)
r10 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0x54, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}}, [@migrate={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4020800)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000206050000000000000000000a0000000900020073797a31000000000900020073797a31000000000500050002000000050001000600000005000400020000000400075705000500020000007086bbf173afe4d0ba86e063e046455e16bf16"], 0x50}, 0x1, 0x0, 0x0, 0x20004080}, 0x4004005)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

1.253995441s ago: executing program 0 (id=823):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x803, 0x0)
close(0x3)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000cf00000007"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=<r5=>r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRESHEX=r4, @ANYRESDEC, @ANYRES16=r5, @ANYRESDEC=r3], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000001c0)=0x3)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x6, 0x8}]})
write$ppp(0xffffffffffffffff, &(0x7f0000000300)="5af9", 0x2)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48)
ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x58, r9, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x58}}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0xff8c, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r7, @ANYBLOB="010025bd70000000000001000000800008807c00008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39225400098028000080060001000a00000014000200fc010000000000000000000000000000050003000300000028000080060001000a00000014000200fc00000000000000000000000000000005000300020000001400020077673000e4a7c8e400"/166], 0xa8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40804)
recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4078, 0xfee}, {&(0x7f00000001c0)=""/181, 0xb5}, {&(0x7f0000000100)=""/29, 0x1d}], 0x3}, 0x10100)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r10, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x0, @private2, 0x400}, @in6={0xa, 0x4e21, 0x7, @mcast2, 0x1c62}], 0x38)

1.253359174s ago: executing program 1 (id=824):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000400000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000dfffffff8500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000001000000080000004000000042000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r6, 0x0, &(0x7f0000000600)=""/98}, 0x20)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x3, 0x6, 0x6361, 0x5, 0x1, 0x6}, [@TCA_NETEM_DELAY_DIST={0x7, 0x2, "6ad2a3"}, @TCA_NETEM_CORR={0x10, 0x1, {0x5, 0x5, 0x9}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.047073667s ago: executing program 4 (id=825):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', r1, 0x0, 0x9}, 0x18)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x14}], 0x1}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00'})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdc03, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x802}, 0x48080)
sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x61}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c000}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x5c, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0x27, 0xc, "1d1227950e6661b5656516f7be86af4c33422b66ff7a081498cdc06303ae3ed4f54547"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
syz_emit_ethernet(0x1e, &(0x7f00000001c0)={@local, @link_local, @void, {@can={0xc, {{0x1, 0x0, 0x1}, 0x1, 0x2, 0x0, 0x0, "48018c24435bd3f1"}}}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000001300020000000000fbdbdf25fc0000000000000000000000000000000000001200000000000000000000000000000004000000000a006080"], 0xb4}, 0x1, 0x0, 0x0, 0x90}, 0x50)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0)

942.428443ms ago: executing program 3 (id=826):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x4, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000)

888.81823ms ago: executing program 0 (id=827):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0)

774.760079ms ago: executing program 4 (id=828):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f00000003c0))
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x4000000)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0)
sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

768.747699ms ago: executing program 0 (id=829):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000a3000000850000000c000000b700000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r4, &(0x7f0000000080)={0x1f, @none, 0xd}, 0xa)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="924016c29c99b475a6652c43fa2a2a819e4617b0c7ec8e24e3225e7a042396d9f1e1cdee0d487cd5706e1b702318cc7266672638d02fbd7d94be8996cad76152237ac716ebba90a30017026590e46c2f33af63ac95c2d373670e414288b9b3a9b3486fbfb2cb595b27091cd4e802d7b626608cdac25956ca10d9583c46496174af497a919b0b2343f578c18616b6fec46dd758f0690ddd5f437e", @ANYBLOB="01000000ffffff7f000000000000280017db2c955f26c824683a766c616e30000000140002800800010012100000060003ea"], 0x3c}}, 0xc020)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r6)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5d7238f96712e159dce4040000000000008e131c28590d0cb61078", @ANYRES16=r7, @ANYBLOB="07ef28bd7000fbdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x45080)
r8 = socket(0xa, 0x2, 0x4)
setsockopt$inet_int(r8, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4)
r9 = socket(0x10, 0x803, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0x0, 0x6}}]}}]}, 0x84}}, 0x24040084)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty, 0x7}, 0x1c)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000040), &(0x7f00000001c0)=0x4)
connect$bt_rfcomm(r4, &(0x7f0000000240)={0x1f, @any, 0x6}, 0xa)

616.949013ms ago: executing program 3 (id=830):
r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x0)
getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={<r4=>0x0, 0x5}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000180)={r4, 0x48, 0x10}, 0xc)
r5 = accept$packet(r0, &(0x7f00000001c0)={0x11, 0x0, <r6=>0x0}, &(0x7f0000000200)=0x14)
recvfrom$packet(r5, &(0x7f0000000240)=""/4, 0x4, 0x12020, &(0x7f0000000280)={0x11, 0x11, r1, 0x1, 0x9, 0x6, @remote}, 0x14)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x104, r8, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x4008040)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)=@newpolicy={0xf8, 0x13, 0x20, 0x70bd2b, 0x25dfdbfd, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x0, 0x4e23, 0x103, 0xa, 0x20, 0x20, 0x5c, 0x0, 0xffffffffffffffff}, {0x88e, 0x9, 0x9, 0xfffffffffffffff7, 0x9, 0x0, 0x3, 0x560000}, {0x1, 0x7, 0x80000000, 0x836}, 0x9d0, 0x6e6bba, 0x0, 0x1, 0x0, 0x3}, [@replay_esn_val={0x40, 0x17, {0x9, 0x70bd26, 0x70bd2d, 0x70bd2c, 0x70bd2d, 0xb, [0x8, 0x33, 0x7, 0x40, 0xf, 0x8001, 0x7, 0x9, 0x0]}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x48004}, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r7)
sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r11, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x40801)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00', 0x0, 0x8}, 0x18)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), r7)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r12, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r13, 0x482, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x2000c0c0)
setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000a40)=@assoc_value={r4}, 0x8)
r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a80)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000b00)={'wlan1\x00', <r15=>0x0})
sendmsg$NL80211_CMD_FRAME(r14, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x7c, r11, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r15}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x8000, 0x8, 0x9, 0x4, 0x1, 0x8]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2bf}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xeee}]}, 0x7c}}, 0x4000090)
ioctl$sock_kcm_SIOCKCMCLONE(r14, 0x89e2, &(0x7f0000000c40)={<r16=>r0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r16, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, r11, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x6, 0x7f}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xffff, 0x63}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x48800)
write$tun(r9, &(0x7f0000000d80)={@val={0x0, 0x60}, @val={0x1, 0x1, 0x4, 0x9, 0x0, 0x8}, @ipv4=@generic={{0xe, 0x4, 0x1, 0xa, 0x1038, 0x68, 0x7, 0x40, 0x2, 0x0, @broadcast, @loopback, {[@rr={0x7, 0x17, 0x80, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x33}, @loopback]}, @noop, @generic={0x82, 0xc, "e72e4812580e059b26ff"}]}}, "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"}}, 0x1046)
r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r7)
getsockopt$inet6_IPV6_XFRM_POLICY(r16, 0x29, 0x23, &(0x7f0000001e40)={{{@in6=@mcast2, @in=@remote}}, {{@in6=@private1}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000001f40)=0xe8)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_GET_WOWLAN(r16, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x28, r17, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x8b, 0x2c}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x18)

476.992371ms ago: executing program 1 (id=831):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000040)=0x2, 0x4)
socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'})
socket$inet(0xa, 0x801, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = socket$caif_seqpacket(0x25, 0x5, 0x4)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r5], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendfile(r8, r1, &(0x7f0000000140)=0x4b64, 0x800)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r8, 0x0, 0x1843}, 0x18)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9417cc274a7d0cef90fa4a"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x404c010)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000fef7ffff0000000000000000850000007d0000009500000000000000616f21a5d1a7bf033e3ad85a1895ef5b3f6428d8d36524102ad15038fd"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, 0x94)

475.75868ms ago: executing program 4 (id=832):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', r1, 0x0, 0x9}, 0x18)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x14}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x23, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x4, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0)
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x74, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0x4a, 0xc, "1d1227950e6661b5656516f7be86af4c33422b66ff7a081498cdc06303ae3ed4f545479b86389af1677ed7812f19b0014cc7170783fd6b27e63e13ff49dacb9187a8c6ac0423"}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000980)={'wg2\x00', <r3=>0x0})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff}, {0xc, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0xffffffff}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x2b3}]}}, @qdisc_kind_options=@q_etf={{0x8}, {0x11, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xe, 0xb, 0x3}}}}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x7, 0xfffa, 0x7, 0x2, 0x7, 0x800002, 0x5}}, {0xe, 0x2, [0x1ff, 0x4, 0x3, 0x0, 0x0]}}]}]}, 0x94}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(r5, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xb7}, {&(0x7f0000001400)="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", 0xfb6}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, 0x453, 0x200, 0x70bd2b, 0x25dfdbff, "5dc4df061eb5a66181038acf9a09dc7687b3edb2a99a7ef575ac7fc05487c91747ce8214620d1089b67cb16d2ae1fadb68ea0a39fb3686c887857d4e90f344b969229ae493e904540cacb6874f0f7cd4cd96", ["", "", "", "", "", "", ""]}, 0x64}, 0x1, 0x0, 0x0, 0x40480d0}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00'})
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
accept4(r8, 0x0, 0x0, 0x80800)

384.390657ms ago: executing program 3 (id=833):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="041000", 0x3}], 0x1, 0x0, 0x0, 0x20040004}, 0x20004011)
recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002)
sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x2404c140)

353.572399ms ago: executing program 0 (id=834):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x2a, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$phonet_pipe(0x23, 0x5, 0x2)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
close(0x4)

4.898161ms ago: executing program 0 (id=835):
r0 = socket$kcm(0x21, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
write$tun(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00')
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
getpeername$netrom(r3, &(0x7f00000002c0)={{}, [@remote, @null, @netrom, @default, @netrom, @bcast, @rose, @null]}, &(0x7f0000000400)=0x48)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0x8004b707, 0x0)
getsockname(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000240)=0x80)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000000308010200000000000000efffffffff130004800800094000000002080008400000000005000300841c00"], 0x30}}, 0x0)

0s ago: executing program 4 (id=836):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f00000000c0), 0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
unshare(0x62040200)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000000200000000000100"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)}, 0x0)
r6 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r6, &(0x7f0000000280), 0x9)
openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)

kernel console output (not intermixed with test programs):

lave_1 added
[   74.587970][ T5838] team0: Port device team_slave_1 added
[   74.606511][ T5825] team0: Port device team_slave_1 added
[   74.623097][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.630887][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.657881][ T5844] Bluetooth: hci4: command tx timeout
[   74.663693][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.709003][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.716638][ T5844] Bluetooth: hci3: command tx timeout
[   74.716792][ T5844] Bluetooth: hci1: command tx timeout
[   74.716911][ T5844] Bluetooth: hci0: command tx timeout
[   74.725176][ T5837] Bluetooth: hci2: command tx timeout
[   74.727996][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.765610][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.787452][ T5835] team0: Port device team_slave_0 added
[   74.815210][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.822978][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.850986][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.872293][ T5835] team0: Port device team_slave_1 added
[   74.879711][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.887220][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.914641][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.927016][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.935459][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.963926][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.977435][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.984581][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.011567][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.034129][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.041353][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.068070][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.155186][ T5826] hsr_slave_0: entered promiscuous mode
[   75.162077][ T5826] hsr_slave_1: entered promiscuous mode
[   75.182273][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.189511][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.215589][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.256251][ T5827] hsr_slave_0: entered promiscuous mode
[   75.262525][ T5827] hsr_slave_1: entered promiscuous mode
[   75.269098][ T5827] debugfs: 'hsr0' already exists in 'hsr'
[   75.274986][ T5827] Cannot create hsr debugfs directory
[   75.288815][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.296396][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.322500][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.356536][ T5825] hsr_slave_0: entered promiscuous mode
[   75.362818][ T5825] hsr_slave_1: entered promiscuous mode
[   75.369046][ T5825] debugfs: 'hsr0' already exists in 'hsr'
[   75.374771][ T5825] Cannot create hsr debugfs directory
[   75.420449][ T5838] hsr_slave_0: entered promiscuous mode
[   75.427203][ T5838] hsr_slave_1: entered promiscuous mode
[   75.433741][ T5838] debugfs: 'hsr0' already exists in 'hsr'
[   75.439554][ T5838] Cannot create hsr debugfs directory
[   75.488706][ T5835] hsr_slave_0: entered promiscuous mode
[   75.495167][ T5835] hsr_slave_1: entered promiscuous mode
[   75.501225][ T5835] debugfs: 'hsr0' already exists in 'hsr'
[   75.507435][ T5835] Cannot create hsr debugfs directory
[   76.069703][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   76.083041][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   76.094513][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   76.114297][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   76.190010][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   76.201943][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   76.213812][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   76.237299][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   76.301830][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   76.318570][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   76.340536][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   76.363571][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   76.441883][ T5825] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   76.452316][ T5825] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   76.486804][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.493657][ T5825] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   76.504397][ T5825] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   76.561397][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   76.621357][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.628891][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.649224][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   76.660339][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   76.684600][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.691791][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.700653][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   76.712024][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   76.727024][ T5837] Bluetooth: hci4: command tx timeout
[   76.788742][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.801687][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.805077][ T5837] Bluetooth: hci2: command tx timeout
[   76.814147][ T5831] Bluetooth: hci1: command tx timeout
[   76.820304][ T5831] Bluetooth: hci3: command tx timeout
[   76.826782][ T5844] Bluetooth: hci0: command tx timeout
[   76.856810][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.908159][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   76.920735][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   76.933133][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   76.966142][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.973301][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.984181][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.991338][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.000434][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.007591][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.037578][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.044721][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.054368][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.061606][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.071394][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.078519][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.244635][ T5825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   77.262005][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   77.340077][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.400433][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   77.471651][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.478873][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.512659][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.519867][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.590986][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.789367][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.819954][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.831167][ T5826] veth0_vlan: entered promiscuous mode
[   77.894131][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.924617][ T5826] veth1_vlan: entered promiscuous mode
[   77.953262][ T5838] veth0_vlan: entered promiscuous mode
[   78.014312][ T5827] veth0_vlan: entered promiscuous mode
[   78.029748][ T5838] veth1_vlan: entered promiscuous mode
[   78.088428][ T5827] veth1_vlan: entered promiscuous mode
[   78.102194][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.136447][ T5826] veth0_macvtap: entered promiscuous mode
[   78.153955][ T5838] veth0_macvtap: entered promiscuous mode
[   78.168764][ T5826] veth1_macvtap: entered promiscuous mode
[   78.192711][ T5838] veth1_macvtap: entered promiscuous mode
[   78.239085][ T5827] veth0_macvtap: entered promiscuous mode
[   78.256759][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.271051][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.290217][ T5827] veth1_macvtap: entered promiscuous mode
[   78.302871][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.317708][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.356026][   T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.377708][   T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.387944][   T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.402823][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.415263][   T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.424353][   T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.443856][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.453848][   T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.463039][   T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.487857][   T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.502491][ T5835] veth0_vlan: entered promiscuous mode
[   78.545849][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.571601][ T5835] veth1_vlan: entered promiscuous mode
[   78.579415][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.589881][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.631453][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.664864][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.676341][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.734612][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.741955][ T5835] veth0_macvtap: entered promiscuous mode
[   78.752987][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.772441][ T5825] veth0_vlan: entered promiscuous mode
[   78.795424][ T5837] Bluetooth: hci4: command tx timeout
[   78.818463][ T5825] veth1_vlan: entered promiscuous mode
[   78.826816][ T5835] veth1_macvtap: entered promiscuous mode
[   78.836076][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.843905][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.876304][ T5837] Bluetooth: hci2: command tx timeout
[   78.881749][ T5837] Bluetooth: hci0: command tx timeout
[   78.887534][ T5844] Bluetooth: hci3: command tx timeout
[   78.892948][ T5844] Bluetooth: hci1: command tx timeout
[   78.904036][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.918348][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.947197][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.954603][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.965090][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.986438][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.994371][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.016443][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.020564][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   79.026335][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.051374][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.138231][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.152077][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.189877][ T5825] veth0_macvtap: entered promiscuous mode
[   79.268586][ T5825] veth1_macvtap: entered promiscuous mode
[   79.300846][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.324691][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.383453][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.425107][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.494354][   T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.507101][ T5948] netlink: 'syz.0.1': attribute type 10 has an invalid length.
[   79.508692][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.535927][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.543696][   T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.576572][   T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.611422][ T5948] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   79.799462][   T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.140299][ T5971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   80.675530][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.683382][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.692165][ T6009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.738418][ T6009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.882062][ T5844] Bluetooth: hci4: command tx timeout
[   80.957692][ T5844] Bluetooth: hci1: command tx timeout
[   80.963235][ T5844] Bluetooth: hci2: command tx timeout
[   80.973179][ T5837] Bluetooth: hci3: command tx timeout
[   80.999716][  T117] cfg80211: failed to load regulatory.db
[   81.084214][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'.
[   81.094746][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'.
[   81.222579][ T6029] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   81.277756][ T6020] ref_tracker: memory allocation failure, unreliable refcount tracker.
[   82.000077][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12'.
[   82.012844][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12'.
[   82.030572][ T6036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.682319][ T6065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   82.750358][ T6059] syz.3.16 (6059) used greatest stack depth: 17976 bytes left
[   82.808020][ T6068] netlink: 'syz.2.17': attribute type 10 has an invalid length.
[   82.840579][ T6068] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17'.
[   82.889622][ T6061] syz.3.16 (6061) used greatest stack depth: 17832 bytes left
[   82.901872][ T6068] team0: Port device geneve0 added
[   83.113934][ T6076] netlink: 96 bytes leftover after parsing attributes in process `syz.3.19'.
[   83.196061][ T6078] erspan0: entered promiscuous mode
[   83.294088][ T6091] warning: `syz.0.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   83.810421][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'.
[   84.973094][ T6127] syz.1.33 uses obsolete (PF_INET,SOCK_PACKET)
[   85.117662][ T5844] Bluetooth: hci4: command 0x0405 tx timeout
[   85.130915][ T6131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   85.146225][    C1] vxcan1: j1939_tp_rxtimer: 0xffff8880599fc000: rx timeout, send abort
[   85.156180][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880599fc000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[   85.436040][ T6140] netlink: 68 bytes leftover after parsing attributes in process `syz.4.37'.
[   85.453421][ T6134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   85.481450][ T6139] netlink: 96 bytes leftover after parsing attributes in process `syz.3.35'.
[   85.533789][ T6140] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[   85.545327][ T6140] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[   85.615106][ T6140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.37'.
[   85.710823][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888024d6b000: rx timeout, send abort
[   85.720534][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888024d6b000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[   86.097459][ T6163] netlink: 'syz.0.45': attribute type 1 has an invalid length.
[   86.373506][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.532821][ T6177] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002
[   86.811559][ T6187] __nla_validate_parse: 1 callbacks suppressed
[   86.811577][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'.
[   87.018860][ T6186] Zero length message leads to an empty skb
[   87.434196][ T6201] syzkaller0: entered promiscuous mode
[   87.445238][ T6201] syzkaller0: entered allmulticast mode
[   87.511688][ T6204] erspan0: entered promiscuous mode
[   87.550902][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.56'.
[   87.742607][ T6216] netlink: 104 bytes leftover after parsing attributes in process `syz.2.61'.
[   87.881334][ T6205] bridge0: port 3(batadv1) entered blocking state
[   87.888090][ T6205] bridge0: port 3(batadv1) entered disabled state
[   87.896277][ T6205] batadv1: entered allmulticast mode
[   87.919001][ T6205] batadv1: entered promiscuous mode
[   88.290948][ T6234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.65'.
[   88.387825][   T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[   88.397880][   T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[   88.418717][ T6245] netlink: 'syz.4.65': attribute type 39 has an invalid length.
[   88.464096][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'.
[   89.016709][ T6269] erspan0: entered promiscuous mode
[   89.848204][ T6298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.83'.
[   89.886927][ T6298] tipc: Started in network mode
[   89.891843][ T6298] tipc: Node identity 0000000000002d210000000000000001, cluster identity 4711
[   89.918589][ T6298] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   90.024248][ T6307] netlink: 96 bytes leftover after parsing attributes in process `syz.0.81'.
[   91.206773][ T6352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.94'.
[   91.241666][ T6352] netlink: 'syz.1.94': attribute type 39 has an invalid length.
[   91.262350][ T6355] netlink: 1020 bytes leftover after parsing attributes in process `syz.2.97'.
[   91.563163][ T6365] vcan0: tx drop: invalid sa for name 0x0000000000000004
[   91.653201][ T6374] netlink: 16 bytes leftover after parsing attributes in process `syz.1.103'.
[   91.753179][ T6379] bond0: entered promiscuous mode
[   91.758675][ T6379] bond_slave_0: entered promiscuous mode
[   91.764550][ T6379] bond_slave_1: entered promiscuous mode
[   91.808447][ T6379] bond0: left promiscuous mode
[   91.828066][ T6379] bond_slave_0: left promiscuous mode
[   91.833824][ T6379] bond_slave_1: left promiscuous mode
[   91.949463][ T6387] netlink: 'syz.2.108': attribute type 1 has an invalid length.
[   92.085562][ T6393] __nla_validate_parse: 2 callbacks suppressed
[   92.085580][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'.
[   92.121803][ T6387] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.151427][ T6391] bond1: (slave geneve2): making interface the new active one
[   92.161664][ T6391] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   92.413434][ T6409] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   92.552608][ T6415] netlink: 96 bytes leftover after parsing attributes in process `syz.0.115'.
[   92.568276][ T6418] Bluetooth: MGMT ver 1.23
[   92.587142][ T6418] ªªªªªª: renamed from vlan0 (while UP)
[   92.797022][ T6423] netlink: 48 bytes leftover after parsing attributes in process `syz.4.118'.
[   92.849255][ T6424] sctp: [Deprecated]: syz.0.119 (pid 6424) Use of struct sctp_assoc_value in delayed_ack socket option.
[   92.849255][ T6424] Use struct sctp_sack_info instead
[   92.907531][ T6424] netlink: 'syz.0.119': attribute type 11 has an invalid length.
[   92.915496][ T6424] netlink: 224 bytes leftover after parsing attributes in process `syz.0.119'.
[   93.108940][ T6445] sctp: [Deprecated]: syz.3.124 (pid 6445) Use of int in maxseg socket option.
[   93.108940][ T6445] Use struct sctp_assoc_value instead
[   93.229022][ T6433] netlink: 'syz.4.123': attribute type 24 has an invalid length.
[   93.627955][ T6458] netlink: 24 bytes leftover after parsing attributes in process `syz.3.128'.
[   93.691981][ T6462] netlink: 'syz.3.128': attribute type 39 has an invalid length.
[   93.799631][ T6469] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   93.966637][ T6475] netlink: 32 bytes leftover after parsing attributes in process `syz.4.135'.
[   94.174189][ T6482] netlink: 'syz.4.138': attribute type 27 has an invalid length.
[   94.283278][ T6482] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.291276][ T6482] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.380838][ T6482] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.420271][ T6482] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.489021][ T6482] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[   94.496912][ T6482] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[   94.550188][ T6485] erspan0: left promiscuous mode
[   94.573164][ T6485] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.581589][ T6485] 8021q: adding VLAN 0 to HW filter on device team0
[   94.592481][ T6485] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   94.622028][ T6486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   94.663487][ T5997] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.680350][ T5997] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.691273][ T5997] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.731479][ T5997] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.741905][   T30] audit: type=1804 audit(1761174157.362:2): pid=6495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.141" name="/newroot/29/cgroup.controllers" dev="tmpfs" ino=166 res=1 errno=0
[   94.765384][   T30] audit: type=1800 audit(1761174157.362:3): pid=6495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.141" name="cgroup.controllers" dev="tmpfs" ino=166 res=0 errno=0
[   94.809018][ T6497] ieee802154 phy0 wpan0: encryption failed: -22
[   94.830575][ T6497] xt_CT: You must specify a L4 protocol and not use inversions on it
[   94.864550][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888057d5e000: rx timeout, send abort
[   94.873625][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888057d5e000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[   95.241533][ T6512] netlink: 24 bytes leftover after parsing attributes in process `syz.4.147'.
[   95.322086][ T6512] netlink: 'syz.4.147': attribute type 39 has an invalid length.
[   95.678005][ T6526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   96.197498][ T6541] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   96.294536][ T6550] netlink: 64 bytes leftover after parsing attributes in process `syz.4.158'.
[   96.345279][ T6545] netlink: 'syz.4.158': attribute type 11 has an invalid length.
[   96.684310][ T6561] netlink: 24 bytes leftover after parsing attributes in process `syz.2.162'.
[   96.740324][ T6560] netlink: 'syz.2.162': attribute type 39 has an invalid length.
[   96.843946][ T6567] sctp: [Deprecated]: syz.0.164 (pid 6567) Use of int in max_burst socket option deprecated.
[   96.843946][ T6567] Use struct sctp_assoc_value instead
[   96.957770][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888058f7c400: rx timeout, send abort
[   96.966467][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888058f7c400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[   97.089545][ T6571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   97.197523][ T6578] netlink: 40 bytes leftover after parsing attributes in process `syz.3.167'.
[   97.404413][ T6578] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[   97.567252][ T6591] netlink: 'syz.3.172': attribute type 1 has an invalid length.
[   97.584844][ T6591] netlink: 244 bytes leftover after parsing attributes in process `syz.3.172'.
[   97.654428][ T6594] nftables ruleset with unbound chain
[   97.687723][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.170'.
[   97.783015][ T6601] netlink: 20 bytes leftover after parsing attributes in process `syz.4.175'.
[   97.803612][ T6601] netlink: 36 bytes leftover after parsing attributes in process `syz.4.175'.
[   97.811268][ T6592] bond1: entered promiscuous mode
[   97.821642][ T6592] 8021q: adding VLAN 0 to HW filter on device bond1
[   97.876626][ T6604] netlink: 24 bytes leftover after parsing attributes in process `syz.2.177'.
[   97.933084][ T6608] vcan0: tx drop: invalid sa for name 0x0000000000000001
[   97.950490][ T6604] netlink: 'syz.2.177': attribute type 39 has an invalid length.
[   98.144309][ T6614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.180'.
[   98.198745][ T6614] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.218890][ T6614] 8021q: adding VLAN 0 to HW filter on device batadv1
[   98.228151][ T6614] bond1: (slave batadv1): Enslaving as an active interface with an up link
[   98.240458][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'.
[   98.292674][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'.
[   98.301938][ T6622] FAULT_INJECTION: forcing a failure.
[   98.301938][ T6622] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   98.315375][ T6622] CPU: 0 UID: 0 PID: 6622 Comm: syz.3.182 Not tainted syzkaller #0 PREEMPT(full) 
[   98.315398][ T6622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   98.315415][ T6622] Call Trace:
[   98.315422][ T6622]  <TASK>
[   98.315430][ T6622]  dump_stack_lvl+0x189/0x250
[   98.315464][ T6622]  ? __pfx____ratelimit+0x10/0x10
[   98.315490][ T6622]  ? __pfx_dump_stack_lvl+0x10/0x10
[   98.315512][ T6622]  ? __pfx__printk+0x10/0x10
[   98.315541][ T6622]  should_fail_ex+0x414/0x560
[   98.315570][ T6622]  _copy_from_user+0x2d/0xb0
[   98.315589][ T6622]  __copy_msghdr+0x3c5/0x5b0
[   98.315609][ T6622]  ___sys_sendmsg+0x1a5/0x2a0
[   98.315629][ T6622]  ? __pfx____sys_sendmsg+0x10/0x10
[   98.315681][ T6622]  ? __fget_files+0x2a/0x420
[   98.315697][ T6622]  ? __fget_files+0x3a0/0x420
[   98.315724][ T6622]  __x64_sys_sendmsg+0x19b/0x260
[   98.315743][ T6622]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   98.315768][ T6622]  ? __pfx_ksys_write+0x10/0x10
[   98.315794][ T6622]  ? do_syscall_64+0xbe/0xfa0
[   98.315815][ T6622]  do_syscall_64+0xfa/0xfa0
[   98.315832][ T6622]  ? lockdep_hardirqs_on+0x9c/0x150
[   98.315851][ T6622]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.315869][ T6622]  ? clear_bhb_loop+0x60/0xb0
[   98.315887][ T6622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.315903][ T6622] RIP: 0033:0x7f740998efc9
[   98.315923][ T6622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   98.315936][ T6622] RSP: 002b:00007f740a7d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   98.315953][ T6622] RAX: ffffffffffffffda RBX: 00007f7409be5fa0 RCX: 00007f740998efc9
[   98.315964][ T6622] RDX: 0000000000008005 RSI: 0000200000000380 RDI: 0000000000000006
[   98.315973][ T6622] RBP: 00007f740a7d7090 R08: 0000000000000000 R09: 0000000000000000
[   98.315983][ T6622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   98.315992][ T6622] R13: 00007f7409be6038 R14: 00007f7409be5fa0 R15: 00007ffdb4a02958
[   98.316020][ T6622]  </TASK>
[   98.334985][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'.
[   98.805991][ T6614] bond1 (unregistering): (slave batadv1): Releasing backup interface
[   98.824543][ T6614] bond1 (unregistering): Released all slaves
[   98.855839][ T6618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   98.919386][ T6627] team0: Port device team_slave_0 removed
[   99.128528][ T6634] vcan0: tx drop: invalid sa for name 0x0000000000000001
[   99.420915][ T6644] bond0: Unable to set peer notification delay as MII monitoring is disabled
[   99.487590][ T6641] netlink: 'syz.3.188': attribute type 10 has an invalid length.
[   99.530553][ T6647] netlink: 'syz.1.191': attribute type 39 has an invalid length.
[   99.534039][ T6641] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  100.769801][ T6690] netlink: 'syz.3.199': attribute type 11 has an invalid length.
[  100.846615][ T6690] netlink: 'syz.3.199': attribute type 11 has an invalid length.
[  100.912678][ T6675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.080717][ T6696] netlink: 'syz.3.204': attribute type 39 has an invalid length.
[  101.226903][ T6698] 8021q: adding VLAN 0 to HW filter on device bond1
[  101.588350][ T6715] delete_channel: no stack
[  101.746347][ T6721] sctp: [Deprecated]: syz.0.211 (pid 6721) Use of struct sctp_assoc_value in delayed_ack socket option.
[  101.746347][ T6721] Use struct sctp_sack_info instead
[  101.823363][ T6727] sctp: [Deprecated]: syz.0.211 (pid 6727) Use of struct sctp_assoc_value in delayed_ack socket option.
[  101.823363][ T6727] Use struct sctp_sack_info instead
[  102.626847][ T6702] bond1 (unregistering): Released all slaves
[  103.472332][ T6760] __nla_validate_parse: 13 callbacks suppressed
[  103.472348][ T6760] netlink: 24 bytes leftover after parsing attributes in process `syz.0.220'.
[  103.513586][ T6760] FAULT_INJECTION: forcing a failure.
[  103.513586][ T6760] name failslab, interval 1, probability 0, space 0, times 0
[  103.545046][ T6760] CPU: 1 UID: 0 PID: 6760 Comm: syz.0.220 Not tainted syzkaller #0 PREEMPT(full) 
[  103.545071][ T6760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  103.545081][ T6760] Call Trace:
[  103.545088][ T6760]  <TASK>
[  103.545095][ T6760]  dump_stack_lvl+0x189/0x250
[  103.545123][ T6760]  ? __pfx____ratelimit+0x10/0x10
[  103.545142][ T6760]  ? __pfx_dump_stack_lvl+0x10/0x10
[  103.545164][ T6760]  ? __pfx__printk+0x10/0x10
[  103.545188][ T6760]  ? __pfx___might_resched+0x10/0x10
[  103.545208][ T6760]  should_fail_ex+0x414/0x560
[  103.545236][ T6760]  should_failslab+0xa8/0x100
[  103.545254][ T6760]  kmem_cache_alloc_node_noprof+0x77/0x710
[  103.545277][ T6760]  ? __alloc_skb+0x112/0x2d0
[  103.545306][ T6760]  __alloc_skb+0x112/0x2d0
[  103.545331][ T6760]  smc_pnet_get+0xa9/0x410
[  103.545354][ T6760]  ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0
[  103.545382][ T6760]  genl_family_rcv_msg_doit+0x215/0x300
[  103.545408][ T6760]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  103.545439][ T6760]  ? stack_trace_save+0x9c/0xe0
[  103.545466][ T6760]  genl_rcv_msg+0x60e/0x790
[  103.545491][ T6760]  ? __pfx_genl_rcv_msg+0x10/0x10
[  103.545509][ T6760]  ? __pfx_smc_pnet_get+0x10/0x10
[  103.545546][ T6760]  netlink_rcv_skb+0x208/0x470
[  103.545568][ T6760]  ? __lock_acquire+0xab9/0xd20
[  103.545586][ T6760]  ? __pfx_genl_rcv_msg+0x10/0x10
[  103.545605][ T6760]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  103.545646][ T6760]  ? down_read+0x1ad/0x2e0
[  103.545670][ T6760]  genl_rcv+0x28/0x40
[  103.545687][ T6760]  netlink_unicast+0x82f/0x9e0
[  103.545718][ T6760]  ? __pfx_netlink_unicast+0x10/0x10
[  103.545756][ T6760]  ? netlink_sendmsg+0x642/0xb30
[  103.545781][ T6760]  ? skb_put+0x11b/0x210
[  103.545808][ T6760]  netlink_sendmsg+0x805/0xb30
[  103.545839][ T6760]  ? __pfx_netlink_sendmsg+0x10/0x10
[  103.545869][ T6760]  ? aa_sock_msg_perm+0xf1/0x1d0
[  103.545894][ T6760]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  103.545910][ T6760]  ? __pfx_netlink_sendmsg+0x10/0x10
[  103.545933][ T6760]  __sock_sendmsg+0x21c/0x270
[  103.545957][ T6760]  ____sys_sendmsg+0x505/0x830
[  103.545980][ T6760]  ? __pfx_____sys_sendmsg+0x10/0x10
[  103.546006][ T6760]  ? import_iovec+0x74/0xa0
[  103.546031][ T6760]  ___sys_sendmsg+0x21f/0x2a0
[  103.546051][ T6760]  ? __pfx____sys_sendmsg+0x10/0x10
[  103.546109][ T6760]  ? __fget_files+0x2a/0x420
[  103.546124][ T6760]  ? __fget_files+0x3a0/0x420
[  103.546151][ T6760]  __x64_sys_sendmsg+0x19b/0x260
[  103.546171][ T6760]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  103.546199][ T6760]  ? __pfx_ksys_write+0x10/0x10
[  103.546229][ T6760]  ? do_syscall_64+0xbe/0xfa0
[  103.546257][ T6760]  do_syscall_64+0xfa/0xfa0
[  103.546278][ T6760]  ? lockdep_hardirqs_on+0x9c/0x150
[  103.546298][ T6760]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.546315][ T6760]  ? clear_bhb_loop+0x60/0xb0
[  103.546337][ T6760]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.546353][ T6760] RIP: 0033:0x7fa1b638efc9
[  103.546370][ T6760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  103.546384][ T6760] RSP: 002b:00007fa1b7287038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  103.546403][ T6760] RAX: ffffffffffffffda RBX: 00007fa1b65e5fa0 RCX: 00007fa1b638efc9
[  103.546416][ T6760] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004
[  103.546427][ T6760] RBP: 00007fa1b7287090 R08: 0000000000000000 R09: 0000000000000000
[  103.546437][ T6760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  103.546447][ T6760] R13: 00007fa1b65e6038 R14: 00007fa1b65e5fa0 R15: 00007ffd43e9aa28
[  103.546477][ T6760]  </TASK>
[  104.088108][ T6767] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  104.137635][ T6777] netlink: 16 bytes leftover after parsing attributes in process `syz.4.225'.
[  104.178841][ T6775] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  104.821011][ T6807] netlink: 232 bytes leftover after parsing attributes in process `syz.2.232'.
[  105.147216][ T6814] netlink: 'syz.2.233': attribute type 10 has an invalid length.
[  105.160080][ T6814] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  105.467837][ T6836] netlink: 60 bytes leftover after parsing attributes in process `syz.4.236'.
[  105.501630][ T6837] pim6reg: entered allmulticast mode
[  105.510362][ T6837] pim6reg: left allmulticast mode
[  105.540671][ T6836] netlink: 60 bytes leftover after parsing attributes in process `syz.4.236'.
[  105.553718][ T6836] netlink: 60 bytes leftover after parsing attributes in process `syz.4.236'.
[  105.571013][ T6837] netlink: 28 bytes leftover after parsing attributes in process `syz.3.235'.
[  105.677373][ T6837] geneve2: entered promiscuous mode
[  105.748397][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888052d58000: rx timeout, send abort
[  105.765009][    C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888052d58000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  105.819365][ T6845] erspan0: entered promiscuous mode
[  105.852314][ T6846] netlink: 96 bytes leftover after parsing attributes in process `syz.3.239'.
[  106.020560][ T6851] vlan2: entered allmulticast mode
[  106.190739][ T6859] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  106.283709][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888053108c00: rx timeout, send abort
[  106.292406][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888053108c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  106.707941][ T6880] ip6gre1: entered allmulticast mode
[  106.718143][ T6885] sctp: [Deprecated]: syz.2.251 (pid 6885) Use of int in max_burst socket option.
[  106.718143][ T6885] Use struct sctp_assoc_value instead
[  107.062144][ T6898] netlink: 96 bytes leftover after parsing attributes in process `syz.1.253'.
[  107.101483][ T6900] netlink: 96 bytes leftover after parsing attributes in process `syz.0.255'.
[  107.238480][ T6906] FAULT_INJECTION: forcing a failure.
[  107.238480][ T6906] name failslab, interval 1, probability 0, space 0, times 0
[  107.251491][ T6906] CPU: 0 UID: 0 PID: 6906 Comm: syz.0.257 Not tainted syzkaller #0 PREEMPT(full) 
[  107.251512][ T6906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  107.251521][ T6906] Call Trace:
[  107.251528][ T6906]  <TASK>
[  107.251535][ T6906]  dump_stack_lvl+0x189/0x250
[  107.251560][ T6906]  ? __pfx____ratelimit+0x10/0x10
[  107.251580][ T6906]  ? __pfx_dump_stack_lvl+0x10/0x10
[  107.251601][ T6906]  ? __pfx__printk+0x10/0x10
[  107.251632][ T6906]  ? __pfx___might_resched+0x10/0x10
[  107.251649][ T6906]  ? fs_reclaim_acquire+0x7d/0x100
[  107.251676][ T6906]  should_fail_ex+0x414/0x560
[  107.251703][ T6906]  should_failslab+0xa8/0x100
[  107.251722][ T6906]  __kvmalloc_node_noprof+0x158/0x910
[  107.251742][ T6906]  ? xt_alloc_table_info+0x40/0xb0
[  107.251759][ T6906]  xt_alloc_table_info+0x40/0xb0
[  107.251769][ T6906]  do_arpt_set_ctl+0x8ae/0xf10
[  107.251785][ T6906]  ? __pfx___mutex_trylock_common+0x10/0x10
[  107.251796][ T6906]  ? __local_bh_enable_ip+0x12d/0x1c0
[  107.251807][ T6906]  ? __pfx_do_arpt_set_ctl+0x10/0x10
[  107.251819][ T6906]  ? rcu_is_watching+0x15/0xb0
[  107.251831][ T6906]  ? trace_contention_end+0x39/0x120
[  107.251862][ T6906]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  107.251889][ T6906]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  107.251918][ T6906]  ? __pfx_aa_sk_perm+0x10/0x10
[  107.251945][ T6906]  nf_setsockopt+0x26f/0x290
[  107.251966][ T6906]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  107.251989][ T6906]  do_sock_setsockopt+0x17c/0x1b0
[  107.252019][ T6906]  __x64_sys_setsockopt+0x13f/0x1b0
[  107.252048][ T6906]  do_syscall_64+0xfa/0xfa0
[  107.252067][ T6906]  ? lockdep_hardirqs_on+0x9c/0x150
[  107.252085][ T6906]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.252097][ T6906]  ? clear_bhb_loop+0x60/0xb0
[  107.252108][ T6906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.252122][ T6906] RIP: 0033:0x7fa1b638efc9
[  107.252138][ T6906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  107.252152][ T6906] RSP: 002b:00007fa1b7287038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  107.252170][ T6906] RAX: ffffffffffffffda RBX: 00007fa1b65e5fa0 RCX: 00007fa1b638efc9
[  107.252182][ T6906] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000003
[  107.252193][ T6906] RBP: 00007fa1b7287090 R08: 0000000000000447 R09: 0000000000000000
[  107.252203][ T6906] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001
[  107.252211][ T6906] R13: 00007fa1b65e6038 R14: 00007fa1b65e5fa0 R15: 00007ffd43e9aa28
[  107.252238][ T6906]  </TASK>
[  107.798006][ T6916] block nbd0: server does not support multiple connections per device.
[  107.832794][ T6916] block nbd0: shutting down sockets
[  107.882132][ T6926] netlink: 'syz.1.262': attribute type 10 has an invalid length.
[  107.913577][ T6926] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  107.942623][ T6927] netlink: 'syz.3.263': attribute type 12 has an invalid length.
[  107.953793][ T6927] netlink: 'syz.3.263': attribute type 4 has an invalid length.
[  108.552268][ T6944] __nla_validate_parse: 2 callbacks suppressed
[  108.552285][ T6944] netlink: 60 bytes leftover after parsing attributes in process `syz.0.272'.
[  108.605664][ T6946] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000
[  108.630645][ T6944] syzkaller0: entered promiscuous mode
[  108.652726][ T6944] syzkaller0: entered allmulticast mode
[  108.786671][ T6944] netlink: 60 bytes leftover after parsing attributes in process `syz.0.272'.
[  108.800325][ T6944] netlink: 60 bytes leftover after parsing attributes in process `syz.0.272'.
[  108.846372][ T6955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.275'.
[  109.062919][ T6960] ip6gre1: left allmulticast mode
[  109.077807][ T6966] netlink: 96 bytes leftover after parsing attributes in process `syz.1.277'.
[  109.329392][ T6990] netlink: 'syz.0.280': attribute type 10 has an invalid length.
[  110.502610][ T7023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  110.799307][ T7027] netlink: 96 bytes leftover after parsing attributes in process `syz.3.291'.
[  110.860865][ T7032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.292'.
[  110.889518][   T24] IPVS: starting estimator thread 0...
[  110.925461][ T7035] netlink: 'syz.1.292': attribute type 13 has an invalid length.
[  111.005185][ T7036] IPVS: using max 28 ests per chain, 67200 per kthread
[  111.139686][ T7051] netlink: 'syz.4.298': attribute type 1 has an invalid length.
[  111.148022][ T7051] netlink: 224 bytes leftover after parsing attributes in process `syz.4.298'.
[  111.177263][ T7035] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.184721][ T7035] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.266107][ T7035] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.281516][ T7035] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.442625][ T6000] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.466384][ T6000] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.508629][ T6000] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.519500][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.299'.
[  111.549148][ T6000] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.618468][ T7057] macvtap1: entered promiscuous mode
[  111.647814][ T7057] team0: entered promiscuous mode
[  111.660947][ T7057] team_slave_0: entered promiscuous mode
[  111.674574][ T7057] team_slave_1: entered promiscuous mode
[  111.683644][ T7057] macvtap1: entered allmulticast mode
[  111.690863][ T7057] team0: entered allmulticast mode
[  111.698020][ T7057] team_slave_0: entered allmulticast mode
[  111.703911][ T7057] team_slave_1: entered allmulticast mode
[  111.712594][ T7057] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  111.723985][ T7067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  111.748542][ T7060] netlink: 32 bytes leftover after parsing attributes in process `syz.0.300'.
[  111.777178][ T7069] veth0: entered promiscuous mode
[  111.904015][ T7069] veth0: left promiscuous mode
[  111.940551][ T7069] FAULT_INJECTION: forcing a failure.
[  111.940551][ T7069] name failslab, interval 1, probability 0, space 0, times 0
[  112.014919][ T7069] CPU: 0 UID: 0 PID: 7069 Comm: syz.4.303 Not tainted syzkaller #0 PREEMPT(full) 
[  112.014950][ T7069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  112.014960][ T7069] Call Trace:
[  112.014967][ T7069]  <TASK>
[  112.014975][ T7069]  dump_stack_lvl+0x189/0x250
[  112.015001][ T7069]  ? __pfx____ratelimit+0x10/0x10
[  112.015020][ T7069]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.015042][ T7069]  ? __pfx__printk+0x10/0x10
[  112.015074][ T7069]  should_fail_ex+0x414/0x560
[  112.015102][ T7069]  should_failslab+0xa8/0x100
[  112.015122][ T7069]  kmem_cache_alloc_node_noprof+0x77/0x710
[  112.015145][ T7069]  ? __alloc_skb+0x112/0x2d0
[  112.015165][ T7069]  ? rtnl_prop_list_size+0x1ba/0x1e0
[  112.015190][ T7069]  __alloc_skb+0x112/0x2d0
[  112.015215][ T7069]  rtmsg_ifinfo_build_skb+0x84/0x260
[  112.015246][ T7069]  rtmsg_ifinfo+0x8c/0x1a0
[  112.015272][ T7069]  __dev_notify_flags+0xf4/0x2e0
[  112.015299][ T7069]  ? __pfx___dev_notify_flags+0x10/0x10
[  112.015322][ T7069]  ? __pfx_netdev_info+0x10/0x10
[  112.015338][ T7069]  ? __mutex_lock+0x335/0x1350
[  112.015366][ T7069]  ? do_raw_spin_lock+0x121/0x290
[  112.015395][ T7069]  __dev_set_promiscuity+0x29f/0x740
[  112.015427][ T7069]  netif_set_promiscuity+0x50/0xe0
[  112.015454][ T7069]  dev_set_promiscuity+0x126/0x260
[  112.015482][ T7069]  packet_release+0x540/0xcb0
[  112.015512][ T7069]  ? __pfx_packet_release+0x10/0x10
[  112.015530][ T7069]  ? down_write+0x162/0x1f0
[  112.015556][ T7069]  ? __pfx_locks_remove_posix+0x10/0x10
[  112.015580][ T7069]  sock_close+0xc3/0x240
[  112.015597][ T7069]  ? __pfx_sock_close+0x10/0x10
[  112.015612][ T7069]  __fput+0x44c/0xa70
[  112.015637][ T7069]  fput_close_sync+0x119/0x200
[  112.015653][ T7069]  ? dnotify_flush+0x1db/0x5e0
[  112.015670][ T7069]  ? __pfx_fput_close_sync+0x10/0x10
[  112.015686][ T7069]  ? do_raw_spin_unlock+0x122/0x240
[  112.015710][ T7069]  __x64_sys_close+0x7f/0x110
[  112.015728][ T7069]  do_syscall_64+0xfa/0xfa0
[  112.015743][ T7069]  ? lockdep_hardirqs_on+0x9c/0x150
[  112.015760][ T7069]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.015777][ T7069]  ? clear_bhb_loop+0x60/0xb0
[  112.015797][ T7069]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.015813][ T7069] RIP: 0033:0x7f42a8f8efc9
[  112.015829][ T7069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.015843][ T7069] RSP: 002b:00007f42a9dcc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  112.015861][ T7069] RAX: ffffffffffffffda RBX: 00007f42a91e5fa0 RCX: 00007f42a8f8efc9
[  112.015874][ T7069] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  112.015884][ T7069] RBP: 00007f42a9dcc090 R08: 0000000000000000 R09: 0000000000000000
[  112.015893][ T7069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.015903][ T7069] R13: 00007f42a91e6038 R14: 00007f42a91e5fa0 R15: 00007ffc7bfe6738
[  112.015942][ T7069]  </TASK>
[  112.804336][ T7098] block nbd0: server does not support multiple connections per device.
[  112.813590][ T7098] block nbd0: shutting down sockets
[  112.894193][ T7092] netlink: 'syz.3.309': attribute type 10 has an invalid length.
[  113.192396][ T7121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  113.867507][ T7148] sctp: [Deprecated]: syz.0.325 (pid 7148) Use of struct sctp_assoc_value in delayed_ack socket option.
[  113.867507][ T7148] Use struct sctp_sack_info instead
[  114.016694][ T7151] __nla_validate_parse: 3 callbacks suppressed
[  114.016711][ T7151] netlink: 16 bytes leftover after parsing attributes in process `syz.3.326'.
[  114.485649][ T7166] Illegal XDP return value 4294967274 on prog  (id 111) dev N/A, expect packet loss!
[  114.487054][ T7167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  114.505098][ T7169] Bluetooth: MGMT ver 1.23
[  114.567533][ T7171] FAULT_INJECTION: forcing a failure.
[  114.567533][ T7171] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  114.655052][ T7171] CPU: 1 UID: 0 PID: 7171 Comm: syz.1.332 Not tainted syzkaller #0 PREEMPT(full) 
[  114.655077][ T7171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  114.655087][ T7171] Call Trace:
[  114.655094][ T7171]  <TASK>
[  114.655102][ T7171]  dump_stack_lvl+0x189/0x250
[  114.655129][ T7171]  ? __pfx____ratelimit+0x10/0x10
[  114.655148][ T7171]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.655170][ T7171]  ? __pfx__printk+0x10/0x10
[  114.655188][ T7171]  ? __might_fault+0xb0/0x130
[  114.655223][ T7171]  should_fail_ex+0x414/0x560
[  114.655253][ T7171]  _copy_from_user+0x2d/0xb0
[  114.655275][ T7171]  ___sys_recvmsg+0x12e/0x510
[  114.655299][ T7171]  ? __pfx____sys_recvmsg+0x10/0x10
[  114.655348][ T7171]  ? __might_fault+0xb0/0x130
[  114.655374][ T7171]  do_recvmmsg+0x307/0x770
[  114.655401][ T7171]  ? __pfx_do_recvmmsg+0x10/0x10
[  114.655431][ T7171]  ? bpf_trace_run2+0x322/0x4b0
[  114.655461][ T7171]  ? __pfx_bpf_trace_run2+0x10/0x10
[  114.655492][ T7171]  __x64_sys_recvmmsg+0x190/0x240
[  114.655513][ T7171]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  114.655541][ T7171]  do_syscall_64+0xfa/0xfa0
[  114.655560][ T7171]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.655579][ T7171]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.655596][ T7171]  ? clear_bhb_loop+0x60/0xb0
[  114.655617][ T7171]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.655634][ T7171] RIP: 0033:0x7f569bb8efc9
[  114.655649][ T7171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.655662][ T7171] RSP: 002b:00007f569ca87038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  114.655681][ T7171] RAX: ffffffffffffffda RBX: 00007f569bde6090 RCX: 00007f569bb8efc9
[  114.655693][ T7171] RDX: 00000000040001af RSI: 0000200000000a40 RDI: 0000000000000004
[  114.655704][ T7171] RBP: 00007f569ca87090 R08: 0000000000000000 R09: 0000000000000000
[  114.655714][ T7171] R10: 0000000000012122 R11: 0000000000000246 R12: 0000000000000001
[  114.655725][ T7171] R13: 00007f569bde6128 R14: 00007f569bde6090 R15: 00007fff4ce7a018
[  114.655755][ T7171]  </TASK>
[  115.105354][ T7182] netlink: 256 bytes leftover after parsing attributes in process `syz.2.336'.
[  115.109773][ T7184] netlink: 'syz.0.337': attribute type 11 has an invalid length.
[  115.154370][ T7184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.337'.
[  115.252376][ T7193] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = -1955794294, id = 0
[  115.283289][ T7194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.339'.
[  115.345335][ T7194] netlink: 'syz.2.339': attribute type 39 has an invalid length.
[  115.363923][ T7197] trusted_key: syz.3.341 sent an empty control message without MSG_MORE.
[  115.745713][ T7213] netlink: 'syz.2.347': attribute type 1 has an invalid length.
[  115.774689][ T7213] netlink: 224 bytes leftover after parsing attributes in process `syz.2.347'.
[  115.782132][ T7215] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  115.794471][ T7213] FAULT_INJECTION: forcing a failure.
[  115.794471][ T7213] name failslab, interval 1, probability 0, space 0, times 0
[  115.828529][ T7213] CPU: 0 UID: 0 PID: 7213 Comm: syz.2.347 Not tainted syzkaller #0 PREEMPT(full) 
[  115.828576][ T7213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  115.828587][ T7213] Call Trace:
[  115.828594][ T7213]  <TASK>
[  115.828602][ T7213]  dump_stack_lvl+0x189/0x250
[  115.828628][ T7213]  ? __pfx____ratelimit+0x10/0x10
[  115.828648][ T7213]  ? __pfx_dump_stack_lvl+0x10/0x10
[  115.828669][ T7213]  ? __pfx__printk+0x10/0x10
[  115.828692][ T7213]  ? __pfx___might_resched+0x10/0x10
[  115.828709][ T7213]  ? fs_reclaim_acquire+0x7d/0x100
[  115.828736][ T7213]  should_fail_ex+0x414/0x560
[  115.828765][ T7213]  should_failslab+0xa8/0x100
[  115.828784][ T7213]  __kmalloc_noprof+0xcb/0x7f0
[  115.828805][ T7213]  ? __alloc_workqueue+0x108/0x1b80
[  115.828833][ T7213]  __alloc_workqueue+0x108/0x1b80
[  115.828851][ T7213]  ? hwsim_add_one+0x365/0x1420
[  115.828865][ T7213]  ? genl_family_rcv_msg_doit+0x215/0x300
[  115.828884][ T7213]  ? genl_rcv_msg+0x60e/0x790
[  115.828899][ T7213]  ? netlink_rcv_skb+0x208/0x470
[  115.828919][ T7213]  ? genl_rcv+0x28/0x40
[  115.828934][ T7213]  ? netlink_unicast+0x82f/0x9e0
[  115.828952][ T7213]  ? netlink_sendmsg+0x805/0xb30
[  115.828974][ T7213]  ? ____sys_sendmsg+0x505/0x830
[  115.828988][ T7213]  ? ___sys_sendmsg+0x21f/0x2a0
[  115.829002][ T7213]  ? __x64_sys_sendmsg+0x19b/0x260
[  115.829016][ T7213]  ? do_syscall_64+0xfa/0xfa0
[  115.829041][ T7213]  alloc_workqueue_noprof+0xd4/0x210
[  115.829071][ T7213]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  115.829108][ T7213]  ieee802154_register_hw+0x13b/0x980
[  115.829136][ T7213]  ? __pfx_ieee802154_register_hw+0x10/0x10
[  115.829160][ T7213]  ? __kmalloc_cache_noprof+0x3d5/0x6f0
[  115.829191][ T7213]  hwsim_add_one+0x4b2/0x1420
[  115.829219][ T7213]  genl_family_rcv_msg_doit+0x215/0x300
[  115.829245][ T7213]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  115.829277][ T7213]  ? bpf_lsm_capable+0x9/0x20
[  115.829296][ T7213]  ? security_capable+0x7e/0x2e0
[  115.829322][ T7213]  genl_rcv_msg+0x60e/0x790
[  115.829348][ T7213]  ? __pfx_genl_rcv_msg+0x10/0x10
[  115.829366][ T7213]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  115.829406][ T7213]  netlink_rcv_skb+0x208/0x470
[  115.829427][ T7213]  ? __lock_acquire+0xab9/0xd20
[  115.829445][ T7213]  ? __pfx_genl_rcv_msg+0x10/0x10
[  115.829466][ T7213]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  115.829508][ T7213]  ? down_read+0x1ad/0x2e0
[  115.829538][ T7213]  genl_rcv+0x28/0x40
[  115.829561][ T7213]  netlink_unicast+0x82f/0x9e0
[  115.829591][ T7213]  ? __pfx_netlink_unicast+0x10/0x10
[  115.829610][ T7213]  ? netlink_sendmsg+0x642/0xb30
[  115.829627][ T7213]  ? skb_put+0x11b/0x210
[  115.829652][ T7213]  netlink_sendmsg+0x805/0xb30
[  115.829685][ T7213]  ? __pfx_netlink_sendmsg+0x10/0x10
[  115.829712][ T7213]  ? aa_sock_msg_perm+0xf1/0x1d0
[  115.829737][ T7213]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  115.829753][ T7213]  ? __pfx_netlink_sendmsg+0x10/0x10
[  115.829777][ T7213]  __sock_sendmsg+0x21c/0x270
[  115.829801][ T7213]  ____sys_sendmsg+0x505/0x830
[  115.829823][ T7213]  ? __pfx_____sys_sendmsg+0x10/0x10
[  115.829847][ T7213]  ? import_iovec+0x74/0xa0
[  115.829871][ T7213]  ___sys_sendmsg+0x21f/0x2a0
[  115.829889][ T7213]  ? __pfx____sys_sendmsg+0x10/0x10
[  115.829941][ T7213]  ? __fget_files+0x2a/0x420
[  115.829957][ T7213]  ? __fget_files+0x3a0/0x420
[  115.829982][ T7213]  __x64_sys_sendmsg+0x19b/0x260
[  115.830002][ T7213]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  115.830027][ T7213]  ? __pfx_ksys_write+0x10/0x10
[  115.830053][ T7213]  ? do_syscall_64+0xbe/0xfa0
[  115.830076][ T7213]  do_syscall_64+0xfa/0xfa0
[  115.830094][ T7213]  ? lockdep_hardirqs_on+0x9c/0x150
[  115.830111][ T7213]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.830128][ T7213]  ? clear_bhb_loop+0x60/0xb0
[  115.830148][ T7213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.830164][ T7213] RIP: 0033:0x7fe2e778efc9
[  115.830180][ T7213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.830193][ T7213] RSP: 002b:00007fe2e8619038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  115.830212][ T7213] RAX: ffffffffffffffda RBX: 00007fe2e79e5fa0 RCX: 00007fe2e778efc9
[  115.830224][ T7213] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  115.830235][ T7213] RBP: 00007fe2e8619090 R08: 0000000000000000 R09: 0000000000000000
[  115.830244][ T7213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  115.830254][ T7213] R13: 00007fe2e79e6038 R14: 00007fe2e79e5fa0 R15: 00007fffc08b9aa8
[  115.830285][ T7213]  </TASK>
[  116.598198][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.351'.
[  116.681027][ T7239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.354'.
[  116.699537][ T7234] netlink: 'syz.2.354': attribute type 39 has an invalid length.
[  117.316392][ T7262] netlink: 'syz.4.364': attribute type 10 has an invalid length.
[  117.366461][ T7266] netlink: 68 bytes leftover after parsing attributes in process `syz.3.366'.
[  117.366688][ T7262] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  117.378050][ T7266] netlink: 'syz.3.366': attribute type 1 has an invalid length.
[  117.400155][ T7266] netlink: 224 bytes leftover after parsing attributes in process `syz.3.366'.
[  117.559728][ T7272] netlink: 168 bytes leftover after parsing attributes in process `syz.1.368'.
[  117.700995][ T7276] netlink: 'syz.1.370': attribute type 39 has an invalid length.
[  117.936639][ T7291] FAULT_INJECTION: forcing a failure.
[  117.936639][ T7291] name failslab, interval 1, probability 0, space 0, times 0
[  118.025077][ T7291] CPU: 1 UID: 0 PID: 7291 Comm: syz.2.375 Not tainted syzkaller #0 PREEMPT(full) 
[  118.025103][ T7291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  118.025113][ T7291] Call Trace:
[  118.025120][ T7291]  <TASK>
[  118.025128][ T7291]  dump_stack_lvl+0x189/0x250
[  118.025156][ T7291]  ? __pfx____ratelimit+0x10/0x10
[  118.025176][ T7291]  ? __pfx_dump_stack_lvl+0x10/0x10
[  118.025198][ T7291]  ? __pfx__printk+0x10/0x10
[  118.025218][ T7291]  ? __pfx___might_resched+0x10/0x10
[  118.025237][ T7291]  ? fs_reclaim_acquire+0x7d/0x100
[  118.025267][ T7291]  should_fail_ex+0x414/0x560
[  118.025296][ T7291]  should_failslab+0xa8/0x100
[  118.025315][ T7291]  kmem_cache_alloc_lru_noprof+0x79/0x6d0
[  118.025338][ T7291]  ? __d_alloc+0x36/0x7a0
[  118.025362][ T7291]  __d_alloc+0x36/0x7a0
[  118.025385][ T7291]  d_alloc_pseudo+0x21/0xc0
[  118.025405][ T7291]  alloc_file_pseudo+0xcc/0x210
[  118.025429][ T7291]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  118.025454][ T7291]  ? alloc_fd+0x64c/0x6c0
[  118.025483][ T7291]  sock_alloc_file+0xb8/0x2e0
[  118.025501][ T7291]  ? __sys_socket+0x12c/0x1b0
[  118.025524][ T7291]  __sys_socket+0x13d/0x1b0
[  118.025549][ T7291]  __x64_sys_socket+0x7a/0x90
[  118.025572][ T7291]  do_syscall_64+0xfa/0xfa0
[  118.025590][ T7291]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.025610][ T7291]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.025632][ T7291]  ? clear_bhb_loop+0x60/0xb0
[  118.025653][ T7291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.025669][ T7291] RIP: 0033:0x7fe2e778efc9
[  118.025686][ T7291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.025705][ T7291] RSP: 002b:00007fe2e8619038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  118.025724][ T7291] RAX: ffffffffffffffda RBX: 00007fe2e79e5fa0 RCX: 00007fe2e778efc9
[  118.025737][ T7291] RDX: 0000000000000004 RSI: 0000000000000002 RDI: 0000000000000022
[  118.025747][ T7291] RBP: 00007fe2e8619090 R08: 0000000000000000 R09: 0000000000000000
[  118.025758][ T7291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  118.025768][ T7291] R13: 00007fe2e79e6038 R14: 00007fe2e79e5fa0 R15: 00007fffc08b9aa8
[  118.025797][ T7291]  </TASK>
[  118.858434][ T7332] tipc: Can't bind to reserved service type 1
[  118.928775][ T7331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  119.161682][ T7348] __nla_validate_parse: 8 callbacks suppressed
[  119.161699][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'.
[  119.382337][ T7360] netlink: 'syz.3.398': attribute type 1 has an invalid length.
[  119.425134][ T7360] netlink: 224 bytes leftover after parsing attributes in process `syz.3.398'.
[  119.712210][ T7377] Bluetooth: MGMT ver 1.23
[  119.833424][ T7381] netlink: 'syz.0.403': attribute type 10 has an invalid length.
[  119.878694][ T7383] netlink: 168 bytes leftover after parsing attributes in process `syz.3.404'.
[  120.046515][ T7394] netlink: 64 bytes leftover after parsing attributes in process `syz.3.406'.
[  132.877809][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  194.317893][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  196.401226][   T52] Bluetooth: hci1: command 0x0406 tx timeout
[  196.403289][ T5845] Bluetooth: hci2: command 0x0406 tx timeout
[  196.407313][ T5149] Bluetooth: hci3: command 0x0406 tx timeout
[  224.440805][ T7419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  224.515328][ T5844] Bluetooth: hci4: link tx timeout
[  224.521428][ T5844] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  224.530292][ T5844] Bluetooth: hci4: link tx timeout
[  224.535573][ T5844] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  224.773202][ T7433] netlink: 168 bytes leftover after parsing attributes in process `syz.0.416'.
[  224.793821][ T7434] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.415'.
[  225.089108][ T7444] netlink: 'syz.0.419': attribute type 10 has an invalid length.
[  225.098737][ T7452] netlink: 64 bytes leftover after parsing attributes in process `syz.3.420'.
[  225.570716][ T7469] netlink: 44 bytes leftover after parsing attributes in process `syz.3.422'.
[  225.604233][ T7469] netlink: 43 bytes leftover after parsing attributes in process `syz.3.422'.
[  225.646803][ T7469] netlink: 'syz.3.422': attribute type 5 has an invalid length.
[  225.685865][ T7469] netlink: 43 bytes leftover after parsing attributes in process `syz.3.422'.
[  225.697851][ T7476] FAULT_INJECTION: forcing a failure.
[  225.697851][ T7476] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  225.713578][ T7476] CPU: 1 UID: 0 PID: 7476 Comm: syz.0.426 Not tainted syzkaller #0 PREEMPT(full) 
[  225.713602][ T7476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  225.713612][ T7476] Call Trace:
[  225.713619][ T7476]  <TASK>
[  225.713626][ T7476]  dump_stack_lvl+0x189/0x250
[  225.713662][ T7476]  ? __pfx____ratelimit+0x10/0x10
[  225.713681][ T7476]  ? __pfx_dump_stack_lvl+0x10/0x10
[  225.713702][ T7476]  ? __pfx__printk+0x10/0x10
[  225.713732][ T7476]  should_fail_ex+0x414/0x560
[  225.713761][ T7476]  _copy_from_user+0x2d/0xb0
[  225.713782][ T7476]  __copy_msghdr+0x3c5/0x5b0
[  225.713804][ T7476]  ___sys_sendmsg+0x1a5/0x2a0
[  225.713823][ T7476]  ? __pfx____sys_sendmsg+0x10/0x10
[  225.713871][ T7476]  ? __fget_files+0x2a/0x420
[  225.713886][ T7476]  ? __fget_files+0x3a0/0x420
[  225.713910][ T7476]  __sys_sendmmsg+0x227/0x430
[  225.713930][ T7476]  ? __pfx___sys_sendmmsg+0x10/0x10
[  225.713955][ T7476]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  225.713998][ T7476]  ? ksys_write+0x22a/0x250
[  225.714022][ T7476]  ? __pfx_ksys_write+0x10/0x10
[  225.714047][ T7476]  __x64_sys_sendmmsg+0xa0/0xc0
[  225.714064][ T7476]  do_syscall_64+0xfa/0xfa0
[  225.714082][ T7476]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.714100][ T7476]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.714117][ T7476]  ? clear_bhb_loop+0x60/0xb0
[  225.714137][ T7476]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.714160][ T7476] RIP: 0033:0x7fa1b638efc9
[  225.714184][ T7476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  225.714198][ T7476] RSP: 002b:00007fa1b7287038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  225.714223][ T7476] RAX: ffffffffffffffda RBX: 00007fa1b65e5fa0 RCX: 00007fa1b638efc9
[  225.714235][ T7476] RDX: 17fd147c801ae9af RSI: 0000200000000ac0 RDI: 0000000000000003
[  225.714247][ T7476] RBP: 00007fa1b7287090 R08: 0000000000000000 R09: 0000000000000000
[  225.714257][ T7476] R10: 000000000000ff00 R11: 0000000000000246 R12: 0000000000000001
[  225.714266][ T7476] R13: 00007fa1b65e6038 R14: 00007fa1b65e5fa0 R15: 00007ffd43e9aa28
[  225.714294][ T7476]  </TASK>
[  226.189119][ T7489] netlink: 168 bytes leftover after parsing attributes in process `syz.0.429'.
[  226.499312][ T7502] netlink: 60 bytes leftover after parsing attributes in process `syz.0.435'.
[  226.510603][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'.
[  226.551042][ T7502] netlink: 60 bytes leftover after parsing attributes in process `syz.0.435'.
[  226.635722][ T5837] Bluetooth: hci4: command 0x0405 tx timeout
[  226.669068][ T7505] sctp: [Deprecated]: syz.3.437 (pid 7505) Use of struct sctp_assoc_value in delayed_ack socket option.
[  226.669068][ T7505] Use struct sctp_sack_info instead
[  226.698977][ T7506] netlink: 'syz.1.431': attribute type 11 has an invalid length.
[  226.725614][ T7506] netlink: 'syz.1.431': attribute type 11 has an invalid length.
[  226.955737][ T7479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.254311][ T5832] IPVS: starting estimator thread 0...
[  227.332438][ T7533] FAULT_INJECTION: forcing a failure.
[  227.332438][ T7533] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  227.366023][ T7530] IPVS: using max 30 ests per chain, 72000 per kthread
[  227.377418][ T7533] CPU: 0 UID: 0 PID: 7533 Comm: syz.1.444 Not tainted syzkaller #0 PREEMPT(full) 
[  227.377442][ T7533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  227.377451][ T7533] Call Trace:
[  227.377459][ T7533]  <TASK>
[  227.377466][ T7533]  dump_stack_lvl+0x189/0x250
[  227.377495][ T7533]  ? __pfx____ratelimit+0x10/0x10
[  227.377515][ T7533]  ? __pfx_dump_stack_lvl+0x10/0x10
[  227.377537][ T7533]  ? __pfx__printk+0x10/0x10
[  227.377555][ T7533]  ? __might_fault+0xb0/0x130
[  227.377590][ T7533]  should_fail_ex+0x414/0x560
[  227.377619][ T7533]  _copy_from_iter+0x589/0x1790
[  227.377652][ T7533]  ? policy_nodemask+0x27c/0x720
[  227.377675][ T7533]  ? __pfx__copy_from_iter+0x10/0x10
[  227.377699][ T7533]  ? set_page_refcounted+0xa0/0x1e0
[  227.377723][ T7533]  af_alg_sendmsg+0x1562/0x2440
[  227.377765][ T7533]  ? __pfx_af_alg_sendmsg+0x10/0x10
[  227.377785][ T7533]  ? __pfx_aa_sk_perm+0x10/0x10
[  227.377805][ T7533]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  227.377836][ T7533]  ? aa_sock_msg_perm+0xf1/0x1d0
[  227.377860][ T7533]  ? skcipher_sendmsg+0x26/0xf0
[  227.377878][ T7533]  ? __pfx_skcipher_sendmsg+0x10/0x10
[  227.377901][ T7533]  __sock_sendmsg+0x21c/0x270
[  227.377924][ T7533]  ____sys_sendmsg+0x52d/0x830
[  227.377947][ T7533]  ? __pfx_____sys_sendmsg+0x10/0x10
[  227.377971][ T7533]  ? import_iovec+0x74/0xa0
[  227.378008][ T7533]  ___sys_sendmsg+0x21f/0x2a0
[  227.378028][ T7533]  ? __pfx____sys_sendmsg+0x10/0x10
[  227.378050][ T7533]  ? __lock_acquire+0xab9/0xd20
[  227.378099][ T7533]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  227.378131][ T7533]  __sys_sendmmsg+0x227/0x430
[  227.378154][ T7533]  ? __pfx___sys_sendmmsg+0x10/0x10
[  227.378168][ T7533]  ? lockdep_hardirqs_on+0x9c/0x150
[  227.378213][ T7533]  ? ksys_write+0x1e1/0x250
[  227.378238][ T7533]  ? __pfx_ksys_write+0x10/0x10
[  227.378266][ T7533]  __x64_sys_sendmmsg+0xa0/0xc0
[  227.378292][ T7533]  do_syscall_64+0xfa/0xfa0
[  227.378311][ T7533]  ? lockdep_hardirqs_on+0x9c/0x150
[  227.378329][ T7533]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.378347][ T7533]  ? clear_bhb_loop+0x60/0xb0
[  227.378369][ T7533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.378386][ T7533] RIP: 0033:0x7f569bb8efc9
[  227.378402][ T7533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  227.378416][ T7533] RSP: 002b:00007f569caa8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  227.378435][ T7533] RAX: ffffffffffffffda RBX: 00007f569bde5fa0 RCX: 00007f569bb8efc9
[  227.378448][ T7533] RDX: 0000000000000001 RSI: 0000200000002f40 RDI: 0000000000000004
[  227.378459][ T7533] RBP: 00007f569caa8090 R08: 0000000000000000 R09: 0000000000000000
[  227.378470][ T7533] R10: 000000000004c848 R11: 0000000000000246 R12: 0000000000000001
[  227.378480][ T7533] R13: 00007f569bde6038 R14: 00007f569bde5fa0 R15: 00007fff4ce7a018
[  227.378512][ T7533]  </TASK>
[  227.737426][ T7537] FAULT_INJECTION: forcing a failure.
[  227.737426][ T7537] name failslab, interval 1, probability 0, space 0, times 0
[  227.750384][ T7537] CPU: 0 UID: 0 PID: 7537 Comm: syz.0.445 Not tainted syzkaller #0 PREEMPT(full) 
[  227.750405][ T7537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  227.750415][ T7537] Call Trace:
[  227.750422][ T7537]  <TASK>
[  227.750429][ T7537]  dump_stack_lvl+0x189/0x250
[  227.750456][ T7537]  ? __pfx____ratelimit+0x10/0x10
[  227.750475][ T7537]  ? __pfx_dump_stack_lvl+0x10/0x10
[  227.750496][ T7537]  ? __pfx__printk+0x10/0x10
[  227.750527][ T7537]  should_fail_ex+0x414/0x560
[  227.750555][ T7537]  should_failslab+0xa8/0x100
[  227.750572][ T7537]  __kmalloc_cache_noprof+0x6f/0x6f0
[  227.750594][ T7537]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  227.750613][ T7537]  ? sctp_add_bind_addr+0x8c/0x370
[  227.750638][ T7537]  sctp_add_bind_addr+0x8c/0x370
[  227.750662][ T7537]  sctp_copy_local_addr_list+0x30b/0x4e0
[  227.750685][ T7537]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  227.750704][ T7537]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  227.750728][ T7537]  ? sctp_v4_is_any+0x35/0x60
[  227.750746][ T7537]  ? sctp_copy_one_addr+0x93/0x360
[  227.750769][ T7537]  sctp_bind_addr_copy+0xb3/0x3c0
[  227.750790][ T7537]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  227.750819][ T7537]  sctp_connect_new_asoc+0x2e0/0x690
[  227.750847][ T7537]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  227.750868][ T7537]  ? __local_bh_enable_ip+0x12d/0x1c0
[  227.750895][ T7537]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  227.750913][ T7537]  ? security_sctp_bind_connect+0x7e/0x2e0
[  227.750937][ T7537]  sctp_sendmsg+0x155c/0x2810
[  227.750972][ T7537]  ? __pfx_sctp_sendmsg+0x10/0x10
[  227.750999][ T7537]  ? aa_sk_perm+0x81e/0x950
[  227.751021][ T7537]  ? __lock_acquire+0xab9/0xd20
[  227.751055][ T7537]  ? __pfx_aa_sk_perm+0x10/0x10
[  227.751081][ T7537]  ? sock_rps_record_flow+0x19/0x410
[  227.751108][ T7537]  ? inet_sendmsg+0x2f4/0x370
[  227.751133][ T7537]  __sock_sendmsg+0x19c/0x270
[  227.751158][ T7537]  ____sys_sendmsg+0x52d/0x830
[  227.751182][ T7537]  ? __pfx_____sys_sendmsg+0x10/0x10
[  227.751210][ T7537]  ? import_iovec+0x74/0xa0
[  227.751235][ T7537]  ___sys_sendmsg+0x21f/0x2a0
[  227.751256][ T7537]  ? __pfx____sys_sendmsg+0x10/0x10
[  227.751311][ T7537]  ? __fget_files+0x2a/0x420
[  227.751327][ T7537]  ? __fget_files+0x3a0/0x420
[  227.751360][ T7537]  __sys_sendmmsg+0x227/0x430
[  227.751384][ T7537]  ? __pfx___sys_sendmmsg+0x10/0x10
[  227.751412][ T7537]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  227.751449][ T7537]  ? ksys_write+0x22a/0x250
[  227.751475][ T7537]  ? __pfx_ksys_write+0x10/0x10
[  227.751504][ T7537]  __x64_sys_sendmmsg+0xa0/0xc0
[  227.751524][ T7537]  do_syscall_64+0xfa/0xfa0
[  227.751542][ T7537]  ? lockdep_hardirqs_on+0x9c/0x150
[  227.751561][ T7537]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.751578][ T7537]  ? clear_bhb_loop+0x60/0xb0
[  227.751599][ T7537]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.751616][ T7537] RIP: 0033:0x7fa1b638efc9
[  227.751632][ T7537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  227.751645][ T7537] RSP: 002b:00007fa1b7287038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  227.751664][ T7537] RAX: ffffffffffffffda RBX: 00007fa1b65e5fa0 RCX: 00007fa1b638efc9
[  227.751677][ T7537] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000003
[  227.751688][ T7537] RBP: 00007fa1b7287090 R08: 0000000000000000 R09: 0000000000000000
[  227.751698][ T7537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  227.751708][ T7537] R13: 00007fa1b65e6038 R14: 00007fa1b65e5fa0 R15: 00007ffd43e9aa28
[  227.751740][ T7537]  </TASK>
[  228.454516][ T7554] netlink: 'syz.3.451': attribute type 4 has an invalid length.
[  228.715239][ T5837] Bluetooth: hci4: command 0x0405 tx timeout
[  228.742566][ T7564] sctp: [Deprecated]: syz.4.455 (pid 7564) Use of struct sctp_assoc_value in delayed_ack socket option.
[  228.742566][ T7564] Use struct sctp_sack_info instead
[  228.903150][ T7572] ieee802154 phy0 wpan0: encryption failed: -90
[  228.915031][ T7573] ieee802154 phy0 wpan0: encryption failed: -90
[  229.019357][ T7573] dvmrp0: entered allmulticast mode
[  229.220552][ T7585] netlink: 'syz.4.461': attribute type 13 has an invalid length.
[  229.235804][ T7585] netlink: 'syz.4.461': attribute type 17 has an invalid length.
[  229.315921][ T7591] netlink: 'syz.1.462': attribute type 10 has an invalid length.
[  229.430843][ T7585] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.453418][ T7585] 8021q: adding VLAN 0 to HW filter on device team0
[  229.491158][ T7585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  230.438621][ T7629] __nla_validate_parse: 8 callbacks suppressed
[  230.438639][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.472'.
[  230.504614][ T7630] FAULT_INJECTION: forcing a failure.
[  230.504614][ T7630] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  230.542728][ T7630] CPU: 0 UID: 0 PID: 7630 Comm: syz.3.474 Not tainted syzkaller #0 PREEMPT(full) 
[  230.542753][ T7630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  230.542763][ T7630] Call Trace:
[  230.542770][ T7630]  <TASK>
[  230.542777][ T7630]  dump_stack_lvl+0x189/0x250
[  230.542804][ T7630]  ? __pfx____ratelimit+0x10/0x10
[  230.542825][ T7630]  ? __pfx_dump_stack_lvl+0x10/0x10
[  230.542847][ T7630]  ? __pfx__printk+0x10/0x10
[  230.542875][ T7630]  should_fail_ex+0x414/0x560
[  230.542903][ T7630]  _copy_to_user+0x31/0xb0
[  230.542932][ T7630]  simple_read_from_buffer+0xe1/0x170
[  230.542959][ T7630]  proc_fail_nth_read+0x1b3/0x220
[  230.542981][ T7630]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  230.543004][ T7630]  ? rw_verify_area+0x2a6/0x4d0
[  230.543024][ T7630]  ? __lock_acquire+0xab9/0xd20
[  230.543039][ T7630]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  230.543060][ T7630]  vfs_read+0x200/0xa30
[  230.543081][ T7630]  ? fdget_pos+0x247/0x320
[  230.543101][ T7630]  ? __pfx___mutex_lock+0x10/0x10
[  230.543121][ T7630]  ? __pfx_vfs_read+0x10/0x10
[  230.543143][ T7630]  ? __fget_files+0x2a/0x420
[  230.543163][ T7630]  ? __fget_files+0x3a0/0x420
[  230.543178][ T7630]  ? __fget_files+0x2a/0x420
[  230.543203][ T7630]  ksys_read+0x145/0x250
[  230.543228][ T7630]  ? __pfx_ksys_read+0x10/0x10
[  230.543252][ T7630]  ? do_syscall_64+0xbe/0xfa0
[  230.543274][ T7630]  do_syscall_64+0xfa/0xfa0
[  230.543292][ T7630]  ? lockdep_hardirqs_on+0x9c/0x150
[  230.543310][ T7630]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.543327][ T7630]  ? clear_bhb_loop+0x60/0xb0
[  230.543348][ T7630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.543365][ T7630] RIP: 0033:0x7f740998d9dc
[  230.543387][ T7630] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  230.543401][ T7630] RSP: 002b:00007f740a7b6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  230.543419][ T7630] RAX: ffffffffffffffda RBX: 00007f7409be6090 RCX: 00007f740998d9dc
[  230.543432][ T7630] RDX: 000000000000000f RSI: 00007f740a7b60a0 RDI: 0000000000000004
[  230.543443][ T7630] RBP: 00007f740a7b6090 R08: 0000000000000000 R09: 0000000000000000
[  230.543454][ T7630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  230.543464][ T7630] R13: 00007f7409be6128 R14: 00007f7409be6090 R15: 00007ffdb4a02958
[  230.543495][ T7630]  </TASK>
[  230.797112][ T5844] Bluetooth: hci4: command 0x0405 tx timeout
[  231.227374][ T7658] netlink: 52 bytes leftover after parsing attributes in process `syz.4.480'.
[  231.388456][ T7667] sctp: [Deprecated]: syz.1.484 (pid 7667) Use of struct sctp_assoc_value in delayed_ack socket option.
[  231.388456][ T7667] Use struct sctp_sack_info instead
[  231.641014][ T7678] netlink: 36 bytes leftover after parsing attributes in process `syz.4.486'.
[  231.660725][ T7678] netlink: 16 bytes leftover after parsing attributes in process `syz.4.486'.
[  231.673330][ T7678] netlink: 36 bytes leftover after parsing attributes in process `syz.4.486'.
[  231.691536][ T7678] netlink: 36 bytes leftover after parsing attributes in process `syz.4.486'.
[  232.302990][ T7698] netlink: 'syz.0.493': attribute type 10 has an invalid length.
[  232.417913][ T7708] netlink: 52 bytes leftover after parsing attributes in process `syz.3.494'.
[  232.849937][ T7719] FAULT_INJECTION: forcing a failure.
[  232.849937][ T7719] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  232.897196][ T7719] CPU: 1 UID: 0 PID: 7719 Comm: syz.2.497 Not tainted syzkaller #0 PREEMPT(full) 
[  232.897219][ T7719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  232.897228][ T7719] Call Trace:
[  232.897234][ T7719]  <TASK>
[  232.897242][ T7719]  dump_stack_lvl+0x189/0x250
[  232.897270][ T7719]  ? __pfx____ratelimit+0x10/0x10
[  232.897289][ T7719]  ? __pfx_dump_stack_lvl+0x10/0x10
[  232.897310][ T7719]  ? __pfx__printk+0x10/0x10
[  232.897338][ T7719]  should_fail_ex+0x414/0x560
[  232.897368][ T7719]  _copy_to_user+0x31/0xb0
[  232.897391][ T7719]  simple_read_from_buffer+0xe1/0x170
[  232.897418][ T7719]  proc_fail_nth_read+0x1b3/0x220
[  232.897439][ T7719]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  232.897481][ T7719]  ? rw_verify_area+0x2a6/0x4d0
[  232.897501][ T7719]  ? __lock_acquire+0xab9/0xd20
[  232.897514][ T7719]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  232.897534][ T7719]  vfs_read+0x200/0xa30
[  232.897553][ T7719]  ? fdget_pos+0x247/0x320
[  232.897571][ T7719]  ? __pfx___mutex_lock+0x10/0x10
[  232.897591][ T7719]  ? __pfx_vfs_read+0x10/0x10
[  232.897612][ T7719]  ? __fget_files+0x2a/0x420
[  232.897631][ T7719]  ? __fget_files+0x3a0/0x420
[  232.897644][ T7719]  ? __fget_files+0x2a/0x420
[  232.897666][ T7719]  ksys_read+0x145/0x250
[  232.897689][ T7719]  ? __pfx_ksys_read+0x10/0x10
[  232.897717][ T7719]  ? do_syscall_64+0xbe/0xfa0
[  232.897739][ T7719]  do_syscall_64+0xfa/0xfa0
[  232.897755][ T7719]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.897772][ T7719]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.897788][ T7719]  ? clear_bhb_loop+0x60/0xb0
[  232.897809][ T7719]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.897825][ T7719] RIP: 0033:0x7fe2e778d9dc
[  232.897840][ T7719] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  232.897853][ T7719] RSP: 002b:00007fe2e8619030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  232.897871][ T7719] RAX: ffffffffffffffda RBX: 00007fe2e79e5fa0 RCX: 00007fe2e778d9dc
[  232.897884][ T7719] RDX: 000000000000000f RSI: 00007fe2e86190a0 RDI: 0000000000000007
[  232.897895][ T7719] RBP: 00007fe2e8619090 R08: 0000000000000000 R09: 0000000000000000
[  232.897905][ T7719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  232.897913][ T7719] R13: 00007fe2e79e6038 R14: 00007fe2e79e5fa0 R15: 00007fffc08b9aa8
[  232.897941][ T7719]  </TASK>
[  233.291058][ T7729] netlink: 36 bytes leftover after parsing attributes in process `syz.1.500'.
[  233.317797][ T7729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.500'.
[  233.328799][ T7733] netlink: 'syz.4.501': attribute type 2 has an invalid length.
[  233.348614][ T7729] netlink: 36 bytes leftover after parsing attributes in process `syz.1.500'.
[  233.390311][ T7732] netlink: 'syz.2.503': attribute type 1 has an invalid length.
[  233.469457][ T7732] bond2 (unregistering): Released all slaves
[  233.891488][ T7749] netlink: 'syz.4.504': attribute type 1 has an invalid length.
[  233.964556][ T7750] netlink: 'syz.2.505': attribute type 10 has an invalid length.
[  234.021870][ T7758] netlink: 'syz.1.508': attribute type 1 has an invalid length.
[  234.031460][ T7758] FAULT_INJECTION: forcing a failure.
[  234.031460][ T7758] name failslab, interval 1, probability 0, space 0, times 0
[  234.060560][ T7758] CPU: 0 UID: 0 PID: 7758 Comm: syz.1.508 Not tainted syzkaller #0 PREEMPT(full) 
[  234.060585][ T7758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  234.060595][ T7758] Call Trace:
[  234.060603][ T7758]  <TASK>
[  234.060618][ T7758]  dump_stack_lvl+0x189/0x250
[  234.060647][ T7758]  ? __pfx____ratelimit+0x10/0x10
[  234.060667][ T7758]  ? __pfx_dump_stack_lvl+0x10/0x10
[  234.060690][ T7758]  ? __pfx__printk+0x10/0x10
[  234.060715][ T7758]  ? __pfx___might_resched+0x10/0x10
[  234.060740][ T7758]  should_fail_ex+0x414/0x560
[  234.060771][ T7758]  should_failslab+0xa8/0x100
[  234.060791][ T7758]  __kmalloc_cache_node_noprof+0x74/0x6f0
[  234.060816][ T7758]  ? __alloc_workqueue+0x6a9/0x1b80
[  234.060846][ T7758]  __alloc_workqueue+0x6a9/0x1b80
[  234.060872][ T7758]  ? netlink_sendmsg+0x805/0xb30
[  234.060909][ T7758]  alloc_workqueue_noprof+0xd4/0x210
[  234.060940][ T7758]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  234.060978][ T7758]  ieee802154_register_hw+0x13b/0x980
[  234.061007][ T7758]  ? __pfx_ieee802154_register_hw+0x10/0x10
[  234.061031][ T7758]  ? __kmalloc_cache_noprof+0x3d5/0x6f0
[  234.061064][ T7758]  hwsim_add_one+0x4b2/0x1420
[  234.061094][ T7758]  genl_family_rcv_msg_doit+0x215/0x300
[  234.061123][ T7758]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  234.061157][ T7758]  ? bpf_lsm_capable+0x9/0x20
[  234.061176][ T7758]  ? security_capable+0x7e/0x2e0
[  234.061206][ T7758]  genl_rcv_msg+0x60e/0x790
[  234.061233][ T7758]  ? __pfx_genl_rcv_msg+0x10/0x10
[  234.061252][ T7758]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  234.061294][ T7758]  netlink_rcv_skb+0x208/0x470
[  234.061316][ T7758]  ? __lock_acquire+0xab9/0xd20
[  234.061334][ T7758]  ? __pfx_genl_rcv_msg+0x10/0x10
[  234.061355][ T7758]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  234.061400][ T7758]  ? down_read+0x1ad/0x2e0
[  234.061425][ T7758]  genl_rcv+0x28/0x40
[  234.061442][ T7758]  netlink_unicast+0x82f/0x9e0
[  234.061475][ T7758]  ? __pfx_netlink_unicast+0x10/0x10
[  234.061499][ T7758]  ? netlink_sendmsg+0x642/0xb30
[  234.061521][ T7758]  ? skb_put+0x11b/0x210
[  234.061554][ T7758]  netlink_sendmsg+0x805/0xb30
[  234.061589][ T7758]  ? __pfx_netlink_sendmsg+0x10/0x10
[  234.061623][ T7758]  ? aa_sock_msg_perm+0xf1/0x1d0
[  234.061648][ T7758]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  234.061665][ T7758]  ? __pfx_netlink_sendmsg+0x10/0x10
[  234.061691][ T7758]  __sock_sendmsg+0x21c/0x270
[  234.061716][ T7758]  ____sys_sendmsg+0x505/0x830
[  234.061740][ T7758]  ? __pfx_____sys_sendmsg+0x10/0x10
[  234.061768][ T7758]  ? import_iovec+0x74/0xa0
[  234.061793][ T7758]  ___sys_sendmsg+0x21f/0x2a0
[  234.061814][ T7758]  ? __pfx____sys_sendmsg+0x10/0x10
[  234.061871][ T7758]  ? __fget_files+0x2a/0x420
[  234.061887][ T7758]  ? __fget_files+0x3a0/0x420
[  234.061916][ T7758]  __x64_sys_sendmsg+0x19b/0x260
[  234.061936][ T7758]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  234.061973][ T7758]  ? do_syscall_64+0xbe/0xfa0
[  234.061998][ T7758]  do_syscall_64+0xfa/0xfa0
[  234.062016][ T7758]  ? lockdep_hardirqs_on+0x9c/0x150
[  234.062036][ T7758]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.062053][ T7758]  ? clear_bhb_loop+0x60/0xb0
[  234.062071][ T7758]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.062086][ T7758] RIP: 0033:0x7f569bb8efc9
[  234.062102][ T7758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  234.062114][ T7758] RSP: 002b:00007f569caa8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  234.062132][ T7758] RAX: ffffffffffffffda RBX: 00007f569bde5fa0 RCX: 00007f569bb8efc9
[  234.062143][ T7758] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  234.062152][ T7758] RBP: 00007f569caa8090 R08: 0000000000000000 R09: 0000000000000000
[  234.062162][ T7758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  234.062172][ T7758] R13: 00007f569bde6038 R14: 00007f569bde5fa0 R15: 00007fff4ce7a018
[  234.062205][ T7758]  </TASK>
[  234.922242][ T7776] sctp: [Deprecated]: syz.2.515 (pid 7776) Use of struct sctp_assoc_value in delayed_ack socket option.
[  234.922242][ T7776] Use struct sctp_sack_info instead
[  235.146881][ T7785] bridge0: port 3(batadv1) entered blocking state
[  235.164451][ T7785] bridge0: port 3(batadv1) entered disabled state
[  235.172688][ T7785] batadv1: entered allmulticast mode
[  235.200559][ T7785] batadv1: entered promiscuous mode
[  235.351263][ T7795] erspan0: entered promiscuous mode
[  235.624953][ T6000] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  235.634246][ T6000] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  236.168237][ T7826] __nla_validate_parse: 17 callbacks suppressed
[  236.168254][ T7826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.528'.
[  236.208878][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.530'.
[  236.223401][ T7826] netlink: 'syz.3.528': attribute type 39 has an invalid length.
[  236.345666][ T7836] netlink: zone id is out of range
[  236.350812][ T7836] netlink: zone id is out of range
[  236.359425][ T7836] netlink: get zone limit has 4 unknown bytes
[  236.382797][ T7835] FAULT_INJECTION: forcing a failure.
[  236.382797][ T7835] name failslab, interval 1, probability 0, space 0, times 0
[  236.403306][ T7835] CPU: 1 UID: 0 PID: 7835 Comm: syz.3.532 Not tainted syzkaller #0 PREEMPT(full) 
[  236.403328][ T7835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  236.403337][ T7835] Call Trace:
[  236.403343][ T7835]  <TASK>
[  236.403351][ T7835]  dump_stack_lvl+0x189/0x250
[  236.403378][ T7835]  ? __pfx____ratelimit+0x10/0x10
[  236.403397][ T7835]  ? __pfx_dump_stack_lvl+0x10/0x10
[  236.403419][ T7835]  ? __pfx__printk+0x10/0x10
[  236.403442][ T7835]  ? __pfx___might_resched+0x10/0x10
[  236.403460][ T7835]  ? fs_reclaim_acquire+0x7d/0x100
[  236.403488][ T7835]  should_fail_ex+0x414/0x560
[  236.403517][ T7835]  should_failslab+0xa8/0x100
[  236.403536][ T7835]  kmem_cache_alloc_node_noprof+0x77/0x710
[  236.403559][ T7835]  ? __alloc_skb+0x112/0x2d0
[  236.403582][ T7835]  ? __pfx_netlink_unicast+0x10/0x10
[  236.403607][ T7835]  __alloc_skb+0x112/0x2d0
[  236.403634][ T7835]  netlink_sendmsg+0x5c6/0xb30
[  236.403667][ T7835]  ? __pfx_netlink_sendmsg+0x10/0x10
[  236.403694][ T7835]  ? aa_sock_msg_perm+0xf1/0x1d0
[  236.403720][ T7835]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  236.403737][ T7835]  ? __pfx_netlink_sendmsg+0x10/0x10
[  236.403761][ T7835]  __sock_sendmsg+0x21c/0x270
[  236.403784][ T7835]  ____sys_sendmsg+0x52d/0x830
[  236.403806][ T7835]  ? __pfx_____sys_sendmsg+0x10/0x10
[  236.403830][ T7835]  ? import_iovec+0x74/0xa0
[  236.403853][ T7835]  ___sys_sendmsg+0x21f/0x2a0
[  236.403873][ T7835]  ? __pfx____sys_sendmsg+0x10/0x10
[  236.403933][ T7835]  ? __might_fault+0xb0/0x130
[  236.403959][ T7835]  __sys_sendmmsg+0x227/0x430
[  236.403981][ T7835]  ? __pfx___sys_sendmmsg+0x10/0x10
[  236.404007][ T7835]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  236.404044][ T7835]  ? ksys_write+0x22a/0x250
[  236.404068][ T7835]  ? __pfx_ksys_write+0x10/0x10
[  236.404094][ T7835]  __x64_sys_sendmmsg+0xa0/0xc0
[  236.404113][ T7835]  do_syscall_64+0xfa/0xfa0
[  236.404132][ T7835]  ? lockdep_hardirqs_on+0x9c/0x150
[  236.404150][ T7835]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.404174][ T7835]  ? clear_bhb_loop+0x60/0xb0
[  236.404195][ T7835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.404211][ T7835] RIP: 0033:0x7f740998efc9
[  236.404227][ T7835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  236.404240][ T7835] RSP: 002b:00007f740a7d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  236.404258][ T7835] RAX: ffffffffffffffda RBX: 00007f7409be5fa0 RCX: 00007f740998efc9
[  236.404269][ T7835] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006
[  236.404280][ T7835] RBP: 00007f740a7d7090 R08: 0000000000000000 R09: 0000000000000000
[  236.404290][ T7835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  236.404300][ T7835] R13: 00007f7409be6038 R14: 00007f7409be5fa0 R15: 00007ffdb4a02958
[  236.404333][ T7835]  </TASK>
[  236.932489][ T7850] vlan2: entered allmulticast mode
[  236.946983][ T7852] sctp: [Deprecated]: syz.0.536 (pid 7852) Use of struct sctp_assoc_value in delayed_ack socket option.
[  236.946983][ T7852] Use struct sctp_sack_info instead
[  236.948004][ T7849] ieee802154 phy0 wpan0: encryption failed: -22
[  237.177974][ T7860] FAULT_INJECTION: forcing a failure.
[  237.177974][ T7860] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  237.215954][ T7860] CPU: 1 UID: 0 PID: 7860 Comm: syz.0.541 Not tainted syzkaller #0 PREEMPT(full) 
[  237.215978][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  237.215988][ T7860] Call Trace:
[  237.215995][ T7860]  <TASK>
[  237.216003][ T7860]  dump_stack_lvl+0x189/0x250
[  237.216031][ T7860]  ? __pfx____ratelimit+0x10/0x10
[  237.216051][ T7860]  ? __pfx_dump_stack_lvl+0x10/0x10
[  237.216082][ T7860]  ? __pfx__printk+0x10/0x10
[  237.216113][ T7860]  should_fail_ex+0x414/0x560
[  237.216141][ T7860]  _copy_to_user+0x31/0xb0
[  237.216165][ T7860]  simple_read_from_buffer+0xe1/0x170
[  237.216194][ T7860]  proc_fail_nth_read+0x1b3/0x220
[  237.216218][ T7860]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  237.216241][ T7860]  ? rw_verify_area+0x2a6/0x4d0
[  237.216262][ T7860]  ? __lock_acquire+0xab9/0xd20
[  237.216277][ T7860]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  237.216298][ T7860]  vfs_read+0x200/0xa30
[  237.216318][ T7860]  ? fdget_pos+0x247/0x320
[  237.216338][ T7860]  ? __pfx___mutex_lock+0x10/0x10
[  237.216359][ T7860]  ? __pfx_vfs_read+0x10/0x10
[  237.216383][ T7860]  ? __fget_files+0x2a/0x420
[  237.216402][ T7860]  ? __fget_files+0x3a0/0x420
[  237.216417][ T7860]  ? __fget_files+0x2a/0x420
[  237.216441][ T7860]  ksys_read+0x145/0x250
[  237.216466][ T7860]  ? __pfx_ksys_read+0x10/0x10
[  237.216492][ T7860]  ? do_syscall_64+0xbe/0xfa0
[  237.216515][ T7860]  do_syscall_64+0xfa/0xfa0
[  237.216533][ T7860]  ? lockdep_hardirqs_on+0x9c/0x150
[  237.216550][ T7860]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.216567][ T7860]  ? clear_bhb_loop+0x60/0xb0
[  237.216588][ T7860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.216604][ T7860] RIP: 0033:0x7fa1b638d9dc
[  237.216620][ T7860] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  237.216633][ T7860] RSP: 002b:00007fa1b7287030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  237.216650][ T7860] RAX: ffffffffffffffda RBX: 00007fa1b65e5fa0 RCX: 00007fa1b638d9dc
[  237.216663][ T7860] RDX: 000000000000000f RSI: 00007fa1b72870a0 RDI: 0000000000000004
[  237.216673][ T7860] RBP: 00007fa1b7287090 R08: 0000000000000000 R09: 0000000000000000
[  237.216684][ T7860] R10: 0000000000005000 R11: 0000000000000246 R12: 0000000000000001
[  237.216693][ T7860] R13: 00007fa1b65e6038 R14: 00007fa1b65e5fa0 R15: 00007ffd43e9aa28
[  237.216721][ T7860]  </TASK>
[  237.503396][ T7866] netlink: 24 bytes leftover after parsing attributes in process `syz.0.544'.
[  237.557603][ T7868] SET target dimension over the limit!
[  237.574098][ T7864] vlan2: entered allmulticast mode
[  237.579876][ T7864] bridge0: port 3(vlan2) entered blocking state
[  237.586654][ T7864] bridge0: port 3(vlan2) entered disabled state
[  237.642114][ T7864] vlan2: entered promiscuous mode
[  237.704202][ T7874] FAULT_INJECTION: forcing a failure.
[  237.704202][ T7874] name failslab, interval 1, probability 0, space 0, times 0
[  237.767728][ T7874] CPU: 1 UID: 0 PID: 7874 Comm: syz.3.547 Not tainted syzkaller #0 PREEMPT(full) 
[  237.767752][ T7874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  237.767762][ T7874] Call Trace:
[  237.767769][ T7874]  <TASK>
[  237.767777][ T7874]  dump_stack_lvl+0x189/0x250
[  237.767805][ T7874]  ? __pfx____ratelimit+0x10/0x10
[  237.767824][ T7874]  ? __pfx_dump_stack_lvl+0x10/0x10
[  237.767846][ T7874]  ? __pfx__printk+0x10/0x10
[  237.767868][ T7874]  ? __pfx___might_resched+0x10/0x10
[  237.767887][ T7874]  ? fs_reclaim_acquire+0x7d/0x100
[  237.767916][ T7874]  should_fail_ex+0x414/0x560
[  237.767947][ T7874]  should_failslab+0xa8/0x100
[  237.767966][ T7874]  __kmalloc_cache_noprof+0x6f/0x6f0
[  237.767990][ T7874]  ? netlbl_mgmt_add_common+0x6a1/0x13b0
[  237.768021][ T7874]  netlbl_mgmt_add_common+0x6a1/0x13b0
[  237.768057][ T7874]  netlbl_mgmt_add+0x2ae/0x340
[  237.768082][ T7874]  ? __pfx_netlbl_mgmt_add+0x10/0x10
[  237.768108][ T7874]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  237.768138][ T7874]  genl_family_rcv_msg_doit+0x215/0x300
[  237.768166][ T7874]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  237.768199][ T7874]  ? bpf_lsm_capable+0x9/0x20
[  237.768219][ T7874]  ? security_capable+0x7e/0x2e0
[  237.768248][ T7874]  genl_rcv_msg+0x60e/0x790
[  237.768271][ T7874]  ? __pfx_genl_rcv_msg+0x10/0x10
[  237.768289][ T7874]  ? __pfx_netlbl_mgmt_add+0x10/0x10
[  237.768331][ T7874]  netlink_rcv_skb+0x208/0x470
[  237.768353][ T7874]  ? __lock_acquire+0xab9/0xd20
[  237.768370][ T7874]  ? __pfx_genl_rcv_msg+0x10/0x10
[  237.768392][ T7874]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  237.768434][ T7874]  ? down_read+0x1ad/0x2e0
[  237.768458][ T7874]  genl_rcv+0x28/0x40
[  237.768475][ T7874]  netlink_unicast+0x82f/0x9e0
[  237.768506][ T7874]  ? __pfx_netlink_unicast+0x10/0x10
[  237.768530][ T7874]  ? netlink_sendmsg+0x642/0xb30
[  237.768556][ T7874]  ? skb_put+0x11b/0x210
[  237.768584][ T7874]  netlink_sendmsg+0x805/0xb30
[  237.768618][ T7874]  ? __pfx_netlink_sendmsg+0x10/0x10
[  237.768645][ T7874]  ? aa_sock_msg_perm+0xf1/0x1d0
[  237.768670][ T7874]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  237.768686][ T7874]  ? __pfx_netlink_sendmsg+0x10/0x10
[  237.768711][ T7874]  __sock_sendmsg+0x21c/0x270
[  237.768735][ T7874]  ____sys_sendmsg+0x505/0x830
[  237.768758][ T7874]  ? __pfx_____sys_sendmsg+0x10/0x10
[  237.768785][ T7874]  ? import_iovec+0x74/0xa0
[  237.768810][ T7874]  ___sys_sendmsg+0x21f/0x2a0
[  237.768830][ T7874]  ? __pfx____sys_sendmsg+0x10/0x10
[  237.768882][ T7874]  ? __fget_files+0x2a/0x420
[  237.768898][ T7874]  ? __fget_files+0x3a0/0x420
[  237.768925][ T7874]  __x64_sys_sendmsg+0x19b/0x260
[  237.768945][ T7874]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  237.768973][ T7874]  ? __pfx_ksys_write+0x10/0x10
[  237.769000][ T7874]  ? do_syscall_64+0xbe/0xfa0
[  237.769023][ T7874]  do_syscall_64+0xfa/0xfa0
[  237.769041][ T7874]  ? lockdep_hardirqs_on+0x9c/0x150
[  237.769059][ T7874]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.769076][ T7874]  ? clear_bhb_loop+0x60/0xb0
[  237.769097][ T7874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.769114][ T7874] RIP: 0033:0x7f740998efc9
[  237.769130][ T7874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.769144][ T7874] RSP: 002b:00007f740a7d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  237.769163][ T7874] RAX: ffffffffffffffda RBX: 00007f7409be5fa0 RCX: 00007f740998efc9
[  237.769175][ T7874] RDX: 0000000004000080 RSI: 0000200000000500 RDI: 0000000000000004
[  237.769187][ T7874] RBP: 00007f740a7d7090 R08: 0000000000000000 R09: 0000000000000000
[  237.769197][ T7874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  237.769207][ T7874] R13: 00007f7409be6038 R14: 00007f7409be5fa0 R15: 00007ffdb4a02958
[  237.769238][ T7874]  </TASK>
[  238.161316][ T5844] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  238.207978][ T7877] syzkaller1: entered promiscuous mode
[  238.242386][ T7877] syzkaller1: entered allmulticast mode
[  238.638904][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.553'.
[  238.747258][ T7906] netlink: 36 bytes leftover after parsing attributes in process `syz.2.557'.
[  239.688145][ T7935] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  240.117335][ T7952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.570'.
[  240.758100][ T7981] netlink: 36 bytes leftover after parsing attributes in process `syz.0.579'.
[  240.834989][ T7984] netlink: 'syz.3.581': attribute type 1 has an invalid length.
[  240.999746][ T7988] bond1: entered promiscuous mode
[  241.038060][ T7988] bond1: entered allmulticast mode
[  241.057993][ T7988] 8021q: adding VLAN 0 to HW filter on device bond1
[  241.058156][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.585'.
[  241.084037][ T7998] netlink: 'syz.0.585': attribute type 5 has an invalid length.
[  241.092499][ T7998] netlink: 'syz.0.585': attribute type 8 has an invalid length.
[  241.100526][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.585'.
[  241.111259][ T7992] 8021q: adding VLAN 0 to HW filter on device bond2
[  241.121586][ T7992] bond2: entered promiscuous mode
[  241.127703][ T7992] bond2: entered allmulticast mode
[  241.134297][ T7992] bond1: (slave bond2): Enslaving as a backup interface with a down link
[  241.159388][ T7995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  241.238841][ T7998] geneve2: entered promiscuous mode
[  241.244186][ T7998] geneve2: entered allmulticast mode
[  241.252937][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'.
[  241.262902][ T6009] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  241.284610][ T6009] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  241.370023][ T6009] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  241.389331][ T6009] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  241.393958][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.588'.
[  242.141533][ T8032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  242.440769][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.596'.
[  242.450307][ T8050] netlink: 'syz.2.596': attribute type 20 has an invalid length.
[  242.458899][ T8050] netlink: 'syz.2.596': attribute type 21 has an invalid length.
[  242.890811][ T8067] netlink: 68 bytes leftover after parsing attributes in process `syz.1.599'.
[  242.903423][ T8067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.599'.
[  242.923199][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.599'.
[  242.988429][ T8068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.601'.
[  243.108933][ T8076] Bluetooth: MGMT ver 1.23
[  243.830224][ T8099] syzkaller0: entered promiscuous mode
[  243.843000][ T8099] syzkaller0: entered allmulticast mode
[  243.873564][ T8106] netlink: 64 bytes leftover after parsing attributes in process `syz.0.614'.
[  243.894961][ T8106] block nbd0: not configured, cannot reconfigure
[  245.577719][ T8112] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[  245.588150][ T8112] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[  245.598928][ T8112] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  246.043448][ T8162] netlink: 36 bytes leftover after parsing attributes in process `syz.2.630'.
[  246.273926][ T8169] netlink: 36 bytes leftover after parsing attributes in process `syz.1.632'.
[  246.395088][ T8169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.632'.
[  246.461616][ T8169] netlink: 36 bytes leftover after parsing attributes in process `syz.1.632'.
[  246.539555][ T8169] netlink: 36 bytes leftover after parsing attributes in process `syz.1.632'.
[  246.712475][ T8188] netlink: 184 bytes leftover after parsing attributes in process `syz.4.637'.
[  247.394739][ T8208] netlink: 68 bytes leftover after parsing attributes in process `syz.0.641'.
[  247.535475][ T8214] netlink: 24 bytes leftover after parsing attributes in process `syz.1.645'.
[  247.550285][ T8214] netlink: 24 bytes leftover after parsing attributes in process `syz.1.645'.
[  247.605070][ T8213] netlink: 'syz.0.643': attribute type 10 has an invalid length.
[  247.645347][ T8217] bridge_slave_0: left allmulticast mode
[  247.664940][ T8217] bridge_slave_0: left promiscuous mode
[  247.675997][ T8217] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.365419][ T8217] bridge_slave_1: left allmulticast mode
[  248.371100][ T8217] bridge_slave_1: left promiscuous mode
[  248.378789][ T8217] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.460553][ T8217] bond0: (slave bond_slave_0): Releasing backup interface
[  248.482305][ T8217] bond0: (slave bond_slave_1): Releasing backup interface
[  248.504412][ T8217] team_slave_0: left promiscuous mode
[  248.516575][ T8217] team_slave_0: left allmulticast mode
[  248.531494][ T8217] team0: Port device team_slave_0 removed
[  248.539217][ T8217] team_slave_1: left promiscuous mode
[  248.545688][ T8217] team_slave_1: left allmulticast mode
[  248.553055][ T8217] team0: Port device team_slave_1 removed
[  248.563211][ T8217] batman_adv: batadv0: Removing interface: batadv_slave_0
[  248.572504][ T8217] batman_adv: batadv0: Removing interface: batadv_slave_1
[  248.582379][ T8217] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  248.833637][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.653'.
[  249.095611][ T8242] batadv1: left allmulticast mode
[  249.100824][ T8242] batadv1: left promiscuous mode
[  249.106280][ T8242] bridge0: port 3(batadv1) entered disabled state
[  249.116483][ T8242] bridge_slave_1: left allmulticast mode
[  249.122138][ T8242] bridge_slave_1: left promiscuous mode
[  249.128327][ T8242] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.139078][ T8242] ¾x9ÿ: left allmulticast mode
[  249.143848][ T8242] ¾x9ÿ: left promiscuous mode
[  249.150171][ T8242] bridge0: port 1(
1¾x9ÿ) entered disabled state
[  249.243774][ T8252] netlink: 212 bytes leftover after parsing attributes in process `syz.2.657'.
[  249.458040][ T8260] netlink: 'syz.1.658': attribute type 1 has an invalid length.
[  249.707016][ T8260] 8021q: adding VLAN 0 to HW filter on device bond1
[  249.818734][ T8267] ipvlan2: entered allmulticast mode
[  249.849776][ T8267] bond1: entered allmulticast mode
[  249.910951][ T8272] bond1: (slave gretap1): making interface the new active one
[  249.919024][ T8272] gretap1: entered allmulticast mode
[  249.926052][ T8272] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  250.343918][ T8288] sctp: [Deprecated]: syz.1.664 (pid 8288) Use of int in max_burst socket option deprecated.
[  250.343918][ T8288] Use struct sctp_assoc_value instead
[  250.433834][ T8292] netlink: 'syz.3.665': attribute type 13 has an invalid length.
[  250.449718][ T8292] netlink: 'syz.3.665': attribute type 17 has an invalid length.
[  250.588864][ T8298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  250.763037][ T8292] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  251.122211][ T8318] FAULT_INJECTION: forcing a failure.
[  251.122211][ T8318] name failslab, interval 1, probability 0, space 0, times 0
[  251.135525][ T8318] CPU: 1 UID: 0 PID: 8318 Comm: syz.0.675 Not tainted syzkaller #0 PREEMPT(full) 
[  251.135548][ T8318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  251.135568][ T8318] Call Trace:
[  251.135576][ T8318]  <TASK>
[  251.135584][ T8318]  dump_stack_lvl+0x189/0x250
[  251.135612][ T8318]  ? __pfx____ratelimit+0x10/0x10
[  251.135632][ T8318]  ? __pfx_dump_stack_lvl+0x10/0x10
[  251.135655][ T8318]  ? __pfx__printk+0x10/0x10
[  251.135676][ T8318]  ? __pfx___might_resched+0x10/0x10
[  251.135695][ T8318]  ? fs_reclaim_acquire+0x7d/0x100
[  251.135739][ T8318]  should_fail_ex+0x414/0x560
[  251.135770][ T8318]  should_failslab+0xa8/0x100
[  251.135790][ T8318]  __kmalloc_cache_noprof+0x6f/0x6f0
[  251.135812][ T8318]  ? netlink_lookup+0x30/0x200
[  251.135834][ T8318]  ? genl_start+0x1c9/0x6c0
[  251.135859][ T8318]  genl_start+0x1c9/0x6c0
[  251.135877][ T8318]  ? netlink_lookup+0x30/0x200
[  251.135907][ T8318]  __netlink_dump_start+0x469/0x7e0
[  251.135940][ T8318]  genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  251.135964][ T8318]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  251.135989][ T8318]  ? genl_get_cmd+0x7d9/0x910
[  251.136010][ T8318]  ? __pfx___mutex_lock+0x10/0x10
[  251.136032][ T8318]  ? __pfx_genl_start+0x10/0x10
[  251.136048][ T8318]  ? __pfx_genl_dumpit+0x10/0x10
[  251.136065][ T8318]  ? __pfx_genl_done+0x10/0x10
[  251.136100][ T8318]  genl_rcv_msg+0x5da/0x790
[  251.136125][ T8318]  ? __pfx_genl_rcv_msg+0x10/0x10
[  251.136143][ T8318]  ? __pfx_tipc_dump_start+0x10/0x10
[  251.136165][ T8318]  ? __pfx_tipc_nl_sk_dump+0x10/0x10
[  251.136180][ T8318]  ? __pfx_tipc_dump_done+0x10/0x10
[  251.136205][ T8318]  ? __asan_memcpy+0x40/0x70
[  251.136226][ T8318]  ? __pfx_ref_tracker_free+0x10/0x10
[  251.136259][ T8318]  netlink_rcv_skb+0x208/0x470
[  251.136281][ T8318]  ? __lock_acquire+0xab9/0xd20
[  251.136299][ T8318]  ? __pfx_genl_rcv_msg+0x10/0x10
[  251.136321][ T8318]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  251.136364][ T8318]  ? down_read+0x1ad/0x2e0
[  251.136389][ T8318]  genl_rcv+0x28/0x40
[  251.136406][ T8318]  netlink_unicast+0x82f/0x9e0
[  251.136438][ T8318]  ? __pfx_netlink_unicast+0x10/0x10
[  251.136462][ T8318]  ? netlink_sendmsg+0x642/0xb30
[  251.136484][ T8318]  ? skb_put+0x11b/0x210
[  251.136512][ T8318]  netlink_sendmsg+0x805/0xb30
[  251.136551][ T8318]  ? __pfx_netlink_sendmsg+0x10/0x10
[  251.136579][ T8318]  ? aa_sock_msg_perm+0xf1/0x1d0
[  251.136604][ T8318]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  251.136621][ T8318]  ? __pfx_netlink_sendmsg+0x10/0x10
[  251.136646][ T8318]  __sock_sendmsg+0x21c/0x270
[  251.136671][ T8318]  ____sys_sendmsg+0x505/0x830
[  251.136696][ T8318]  ? __pfx_____sys_sendmsg+0x10/0x10
[  251.136723][ T8318]  ? import_iovec+0x74/0xa0
[  251.136748][ T8318]  ___sys_sendmsg+0x21f/0x2a0
[  251.136768][ T8318]  ? __pfx____sys_sendmsg+0x10/0x10
[  251.136825][ T8318]  ? __fget_files+0x2a/0x420
[  251.136841][ T8318]  ? __fget_files+0x3a0/0x420
[  251.136866][ T8318]  __x64_sys_sendmsg+0x19b/0x260
[  251.136885][ T8318]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  251.136912][ T8318]  ? __pfx_ksys_write+0x10/0x10
[  251.136936][ T8318]  ? do_syscall_64+0xbe/0xfa0
[  251.136960][ T8318]  do_syscall_64+0xfa/0xfa0
[  251.136983][ T8318]  ? lockdep_hardirqs_on+0x9c/0x150
[  251.137003][ T8318]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.137020][ T8318]  ? clear_bhb_loop+0x60/0xb0
[  251.137041][ T8318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.137058][ T8318] RIP: 0033:0x7fa1b638efc9
[  251.137075][ T8318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  251.137089][ T8318] RSP: 002b:00007fa1b7287038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  251.137108][ T8318] RAX: ffffffffffffffda RBX: 00007fa1b65e5fa0 RCX: 00007fa1b638efc9
[  251.137121][ T8318] RDX: 00000000000000a4 RSI: 0000200000000200 RDI: 0000000000000005
[  251.137133][ T8318] RBP: 00007fa1b7287090 R08: 0000000000000000 R09: 0000000000000000
[  251.137143][ T8318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  251.137153][ T8318] R13: 00007fa1b65e6038 R14: 00007fa1b65e5fa0 R15: 00007ffd43e9aa28
[  251.137186][ T8318]  </TASK>
[  251.739714][ T8324] netlink: 'syz.4.679': attribute type 4 has an invalid length.
[  251.748085][ T8324] __nla_validate_parse: 7 callbacks suppressed
[  251.748101][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.679'.
[  251.811174][ T8327] netlink: 60 bytes leftover after parsing attributes in process `syz.0.678'.
[  251.824381][ T8327] netlink: 60 bytes leftover after parsing attributes in process `syz.0.678'.
[  251.886194][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.678'.
[  252.127500][ T8342] netlink: 'syz.0.684': attribute type 12 has an invalid length.
[  252.152517][ T8342] netlink: 56 bytes leftover after parsing attributes in process `syz.0.684'.
[  252.224335][ T8347] netlink: 'syz.2.685': attribute type 10 has an invalid length.
[  252.304089][ T8352] netlink: 36 bytes leftover after parsing attributes in process `syz.4.688'.
[  252.392215][ T8342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.684'.
[  252.895715][ T8370] netlink: 32 bytes leftover after parsing attributes in process `syz.2.694'.
[  252.923095][ T8370] netlink: 'syz.2.694': attribute type 29 has an invalid length.
[  252.933157][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.694'.
[  252.948022][ T8370] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  253.220302][ T8378] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  253.696586][ T8399] netlink: 52 bytes leftover after parsing attributes in process `syz.4.703'.
[  254.383567][ T8426] syz_tun: entered allmulticast mode
[  254.470953][ T8422] syz_tun: left allmulticast mode
[  254.744276][ T8438] FAULT_INJECTION: forcing a failure.
[  254.744276][ T8438] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  254.777442][ T8438] CPU: 1 UID: 0 PID: 8438 Comm: syz.2.713 Not tainted syzkaller #0 PREEMPT(full) 
[  254.777465][ T8438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  254.777474][ T8438] Call Trace:
[  254.777481][ T8438]  <TASK>
[  254.777488][ T8438]  dump_stack_lvl+0x189/0x250
[  254.777516][ T8438]  ? __pfx____ratelimit+0x10/0x10
[  254.777535][ T8438]  ? __pfx_dump_stack_lvl+0x10/0x10
[  254.777558][ T8438]  ? __pfx__printk+0x10/0x10
[  254.777576][ T8438]  ? __might_fault+0xb0/0x130
[  254.777611][ T8438]  should_fail_ex+0x414/0x560
[  254.777640][ T8438]  _copy_from_user+0x2d/0xb0
[  254.777669][ T8438]  sctp_setsockopt+0x19f/0x1200
[  254.777692][ T8438]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  254.777717][ T8438]  do_sock_setsockopt+0x17c/0x1b0
[  254.777747][ T8438]  __x64_sys_setsockopt+0x13f/0x1b0
[  254.777777][ T8438]  do_syscall_64+0xfa/0xfa0
[  254.777795][ T8438]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.777815][ T8438]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.777832][ T8438]  ? clear_bhb_loop+0x60/0xb0
[  254.777853][ T8438]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.777870][ T8438] RIP: 0033:0x7fe2e778efc9
[  254.777886][ T8438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  254.777900][ T8438] RSP: 002b:00007fe2e85f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  254.777919][ T8438] RAX: ffffffffffffffda RBX: 00007fe2e79e6090 RCX: 00007fe2e778efc9
[  254.777933][ T8438] RDX: 0000000000000079 RSI: 0000000000000084 RDI: 0000000000000005
[  254.777943][ T8438] RBP: 00007fe2e85f8090 R08: 0000000000000008 R09: 0000000000000000
[  254.777954][ T8438] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  254.777965][ T8438] R13: 00007fe2e79e6128 R14: 00007fe2e79e6090 R15: 00007fffc08b9aa8
[  254.777995][ T8438]  </TASK>
[  255.289764][ T8450] netlink: 'syz.3.716': attribute type 39 has an invalid length.
[  255.768739][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  256.309999][ T8495] bridge1: entered promiscuous mode
[  256.319761][ T8495] bridge1: entered allmulticast mode
[  256.331268][ T8495] team0: Port device bridge1 added
[  256.390240][ T8495] bridge0: port 4(team0) entered blocking state
[  256.398620][ T8495] bridge0: port 4(team0) entered disabled state
[  256.406970][ T8495] team0: entered allmulticast mode
[  256.412778][ T8495] team_slave_0: entered allmulticast mode
[  256.458352][ T8495] team_slave_1: entered allmulticast mode
[  256.464270][ T8495] geneve0: entered allmulticast mode
[  256.490568][ T8495] team0: entered promiscuous mode
[  256.509133][ T8495] team_slave_0: entered promiscuous mode
[  256.515671][ T8495] team_slave_1: entered promiscuous mode
[  256.521558][ T8495] geneve0: entered promiscuous mode
[  256.529348][ T8495] bridge0: port 4(team0) entered blocking state
[  256.535923][ T8495] bridge0: port 4(team0) entered forwarding state
[  256.658785][ T8509] 
: renamed from bond_slave_0 (while UP)
[  256.741370][ T8493] pim6reg1: entered promiscuous mode
[  256.748327][ T8493] pim6reg1: entered allmulticast mode
[  256.820429][ T8513] __nla_validate_parse: 4 callbacks suppressed
[  256.820446][ T8513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.735'.
[  257.001182][ T8524] netlink: 132 bytes leftover after parsing attributes in process `syz.4.739'.
[  257.206559][ T8532] netlink: 40 bytes leftover after parsing attributes in process `syz.4.742'.
[  257.248464][ T8533] netlink: 'syz.2.741': attribute type 1 has an invalid length.
[  257.376272][ T8533] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  257.392284][ T8533] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  257.419900][ T8538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  257.454482][ T8540] vlan3: entered allmulticast mode
[  257.463043][ T8540] bridge0: entered allmulticast mode
[  257.471164][ T8540] bridge0: entered promiscuous mode
[  257.477715][ T8540] bridge0: left promiscuous mode
[  257.487615][ T8540] bond2: (slave vlan3): making interface the new active one
[  257.495361][ T8540] bridge0: entered promiscuous mode
[  257.504686][ T8540] bond2: (slave vlan3): Enslaving as an active interface with an up link
[  258.113804][ T8568] sctp: [Deprecated]: syz.0.756 (pid 8568) Use of struct sctp_assoc_value in delayed_ack socket option.
[  258.113804][ T8568] Use struct sctp_sack_info instead
[  258.516908][ T8588] FAULT_INJECTION: forcing a failure.
[  258.516908][ T8588] name failslab, interval 1, probability 0, space 0, times 0
[  258.554416][ T8588] CPU: 1 UID: 0 PID: 8588 Comm: syz.1.761 Not tainted syzkaller #0 PREEMPT(full) 
[  258.554441][ T8588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  258.554450][ T8588] Call Trace:
[  258.554457][ T8588]  <TASK>
[  258.554464][ T8588]  dump_stack_lvl+0x189/0x250
[  258.554492][ T8588]  ? __pfx____ratelimit+0x10/0x10
[  258.554512][ T8588]  ? __pfx_dump_stack_lvl+0x10/0x10
[  258.554533][ T8588]  ? __pfx__printk+0x10/0x10
[  258.554556][ T8588]  ? __pfx___might_resched+0x10/0x10
[  258.554579][ T8588]  should_fail_ex+0x414/0x560
[  258.554608][ T8588]  should_failslab+0xa8/0x100
[  258.554627][ T8588]  kmem_cache_alloc_node_noprof+0x77/0x710
[  258.554650][ T8588]  ? __alloc_skb+0x112/0x2d0
[  258.554679][ T8588]  __alloc_skb+0x112/0x2d0
[  258.554705][ T8588]  netlink_ack+0x146/0xa50
[  258.554727][ T8588]  ? __pfx_genl_rcv_msg+0x10/0x10
[  258.554764][ T8588]  netlink_rcv_skb+0x28c/0x470
[  258.554786][ T8588]  ? __lock_acquire+0xab9/0xd20
[  258.554807][ T8588]  ? __pfx_genl_rcv_msg+0x10/0x10
[  258.554825][ T8588]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  258.554868][ T8588]  ? down_read+0x1ad/0x2e0
[  258.554892][ T8588]  genl_rcv+0x28/0x40
[  258.554908][ T8588]  netlink_unicast+0x82f/0x9e0
[  258.554938][ T8588]  ? __pfx_netlink_unicast+0x10/0x10
[  258.554961][ T8588]  ? netlink_sendmsg+0x642/0xb30
[  258.554981][ T8588]  ? skb_put+0x11b/0x210
[  258.555006][ T8588]  netlink_sendmsg+0x805/0xb30
[  258.555056][ T8588]  ? __pfx_netlink_sendmsg+0x10/0x10
[  258.555082][ T8588]  ? aa_sock_msg_perm+0xf1/0x1d0
[  258.555107][ T8588]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  258.555122][ T8588]  ? __pfx_netlink_sendmsg+0x10/0x10
[  258.555151][ T8588]  __sock_sendmsg+0x21c/0x270
[  258.555174][ T8588]  ____sys_sendmsg+0x505/0x830
[  258.555197][ T8588]  ? __pfx_____sys_sendmsg+0x10/0x10
[  258.555223][ T8588]  ? import_iovec+0x74/0xa0
[  258.555247][ T8588]  ___sys_sendmsg+0x21f/0x2a0
[  258.555266][ T8588]  ? __pfx____sys_sendmsg+0x10/0x10
[  258.555325][ T8588]  ? __fget_files+0x2a/0x420
[  258.555341][ T8588]  ? __fget_files+0x3a0/0x420
[  258.555368][ T8588]  __x64_sys_sendmsg+0x19b/0x260
[  258.555388][ T8588]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  258.555415][ T8588]  ? __pfx_ksys_write+0x10/0x10
[  258.555441][ T8588]  ? do_syscall_64+0xbe/0xfa0
[  258.555463][ T8588]  do_syscall_64+0xfa/0xfa0
[  258.555481][ T8588]  ? lockdep_hardirqs_on+0x9c/0x150
[  258.555501][ T8588]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.555518][ T8588]  ? clear_bhb_loop+0x60/0xb0
[  258.555539][ T8588]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.555556][ T8588] RIP: 0033:0x7f569bb8efc9
[  258.555572][ T8588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  258.555587][ T8588] RSP: 002b:00007f569caa8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  258.555610][ T8588] RAX: ffffffffffffffda RBX: 00007f569bde5fa0 RCX: 00007f569bb8efc9
[  258.555624][ T8588] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004
[  258.555635][ T8588] RBP: 00007f569caa8090 R08: 0000000000000000 R09: 0000000000000000
[  258.555646][ T8588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  258.555657][ T8588] R13: 00007f569bde6038 R14: 00007f569bde5fa0 R15: 00007fff4ce7a018
[  258.555688][ T8588]  </TASK>
[  260.366312][ T8659] netlink: 180 bytes leftover after parsing attributes in process `syz.2.778'.
[  261.455915][ T8697] netlink: 'syz.0.790': attribute type 1 has an invalid length.
[  261.478838][ T8702] netlink: 40 bytes leftover after parsing attributes in process `syz.3.791'.
[  261.496747][ T8697] netlink: 224 bytes leftover after parsing attributes in process `syz.0.790'.
[  261.526885][ T8704] netlink: 'syz.4.792': attribute type 4 has an invalid length.
[  261.530675][ T8702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.791'.
[  262.060017][ T8728] FAULT_INJECTION: forcing a failure.
[  262.060017][ T8728] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  262.102939][ T8728] CPU: 1 UID: 0 PID: 8728 Comm: syz.3.794 Not tainted syzkaller #0 PREEMPT(full) 
[  262.102964][ T8728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  262.102973][ T8728] Call Trace:
[  262.102980][ T8728]  <TASK>
[  262.102988][ T8728]  dump_stack_lvl+0x189/0x250
[  262.103015][ T8728]  ? __pfx____ratelimit+0x10/0x10
[  262.103034][ T8728]  ? __pfx_dump_stack_lvl+0x10/0x10
[  262.103055][ T8728]  ? __pfx__printk+0x10/0x10
[  262.103074][ T8728]  ? __might_fault+0xb0/0x130
[  262.103108][ T8728]  should_fail_ex+0x414/0x560
[  262.103137][ T8728]  _copy_from_user+0x2d/0xb0
[  262.103158][ T8728]  __sys_bpf+0x1e3/0x860
[  262.103177][ T8728]  ? __pfx___sys_bpf+0x10/0x10
[  262.103208][ T8728]  ? ksys_write+0x22a/0x250
[  262.103233][ T8728]  ? __pfx_ksys_write+0x10/0x10
[  262.103261][ T8728]  __x64_sys_bpf+0x7c/0x90
[  262.103286][ T8728]  do_syscall_64+0xfa/0xfa0
[  262.103304][ T8728]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.103324][ T8728]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.103342][ T8728]  ? clear_bhb_loop+0x60/0xb0
[  262.103363][ T8728]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.103380][ T8728] RIP: 0033:0x7f740998efc9
[  262.103396][ T8728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  262.103411][ T8728] RSP: 002b:00007f740a7d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  262.103430][ T8728] RAX: ffffffffffffffda RBX: 00007f7409be5fa0 RCX: 00007f740998efc9
[  262.103443][ T8728] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  262.103454][ T8728] RBP: 00007f740a7d7090 R08: 0000000000000000 R09: 0000000000000000
[  262.103465][ T8728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  262.103475][ T8728] R13: 00007f7409be6038 R14: 00007f7409be5fa0 R15: 00007ffdb4a02958
[  262.103505][ T8728]  </TASK>
[  262.353851][ T8732] netlink: 36 bytes leftover after parsing attributes in process `syz.0.797'.
[  262.385044][ T8732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.797'.
[  262.393950][ T8732] netlink: 36 bytes leftover after parsing attributes in process `syz.0.797'.
[  262.403006][ T8732] netlink: 36 bytes leftover after parsing attributes in process `syz.0.797'.
[  262.509368][ T8739] netlink: 36 bytes leftover after parsing attributes in process `syz.2.795'.
[  262.528261][ T8739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.795'.
[  262.570516][ T8739] netlink: 36 bytes leftover after parsing attributes in process `syz.2.795'.
[  262.612142][ T8739] netlink: 36 bytes leftover after parsing attributes in process `syz.2.795'.
[  263.870026][ T5844] block nbd0: Receive control failed (result -32)
[  263.882177][ T8802] netlink: 36 bytes leftover after parsing attributes in process `syz.1.815'.
[  263.937729][ T8802] netlink: 16 bytes leftover after parsing attributes in process `syz.1.815'.
[  263.951644][ T8804] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  264.295017][ T8822] tipc: Started in network mode
[  264.299927][ T8822] tipc: Node identity 169b8e67d3e2, cluster identity 4711
[  264.309484][ T8822] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.340871][ T8818] syzkaller0: entered promiscuous mode
[  264.355076][ T8818] syzkaller0: entered allmulticast mode
[  264.402106][ T8818] tipc: Resetting bearer <eth:syzkaller0>
[  264.437596][ T8817] tipc: Resetting bearer <eth:syzkaller0>
[  264.502230][ T8817] tipc: Disabling bearer <eth:syzkaller0>
[  264.566216][ T8835] tipc: Started in network mode
[  264.571130][ T8835] tipc: Node identity e6cd125b7b8d, cluster identity 4711
[  264.591052][ T8835] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.606425][ T8839] syzkaller0: entered promiscuous mode
[  264.614980][ T8839] syzkaller0: entered allmulticast mode
[  264.786684][ T8839] tipc: Resetting bearer <eth:syzkaller0>
[  264.845142][ T8831] tipc: Resetting bearer <eth:syzkaller0>
[  264.919924][ T8831] tipc: Disabling bearer <eth:syzkaller0>
[  265.734954][ T5837]  non-paged memory
[  265.739998][ T5837] list_del corruption, ffff88805931a180->next is LIST_POISON1 (dead000000000100)
[  265.750086][ T5837] ------------[ cut here ]------------
[  265.755635][ T5837] kernel BUG at lib/list_debug.c:58!
[  265.761041][ T5837] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  265.767287][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) 
[  265.776749][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  265.786807][ T5837] Workqueue: hci4 hci_conn_timeout
[  265.791924][ T5837] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190
[  265.798939][ T5837] Code: e0 0b bf 8b 48 89 de e8 30 44 95 fc 90 0f 0b 4c 89 e7 e8 05 9f 71 fd 48 c7 c7 40 0c bf 8b 48 89 de 4c 89 e2 e8 13 44 95 fc 90 <0f> 0b 4c 89 e7 e8 e8 9e 71 fd 48 c7 c7 a0 0c bf 8b 48 89 de 4c 89
[  265.818527][ T5837] RSP: 0018:ffffc9000418f960 EFLAGS: 00010246
[  265.824579][ T5837] RAX: 000000000000004e RBX: ffff88805931a180 RCX: 0f16b564eca43c00
[  265.832536][ T5837] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  265.840489][ T5837] RBP: ffffffff8a5309d0 R08: ffffc9000418f687 R09: 1ffff92000831ed0
[  265.848444][ T5837] R10: dffffc0000000000 R11: fffff52000831ed1 R12: dead000000000100
[  265.856400][ T5837] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122
[  265.864356][ T5837] FS:  0000000000000000(0000) GS:ffff888126240000(0000) knlGS:0000000000000000
[  265.873265][ T5837] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  265.879834][ T5837] CR2: 0000000000000000 CR3: 000000006ba7e000 CR4: 00000000003526f0
[  265.887793][ T5837] Call Trace:
[  265.891056][ T5837]  <TASK>
[  265.893973][ T5837]  hci_cmd_sync_dequeue_once+0x24a/0x370
[  265.899595][ T5837]  hci_cancel_connect_sync+0xc8/0x120
[  265.904959][ T5837]  hci_abort_conn+0x191/0x330
[  265.909622][ T5837]  ? process_scheduled_works+0x9ef/0x17b0
[  265.915327][ T5837]  process_scheduled_works+0xae1/0x17b0
[  265.920865][ T5837]  ? __pfx_process_scheduled_works+0x10/0x10
[  265.926832][ T5837]  worker_thread+0x8a0/0xda0
[  265.931416][ T5837]  kthread+0x711/0x8a0
[  265.935474][ T5837]  ? __pfx_worker_thread+0x10/0x10
[  265.940568][ T5837]  ? __pfx_kthread+0x10/0x10
[  265.945147][ T5837]  ? _raw_spin_unlock_irq+0x23/0x50
[  265.950328][ T5837]  ? lockdep_hardirqs_on+0x9c/0x150
[  265.955510][ T5837]  ? __pfx_kthread+0x10/0x10
[  265.960085][ T5837]  ret_from_fork+0x4bc/0x870
[  265.964663][ T5837]  ? __pfx_ret_from_fork+0x10/0x10
[  265.969757][ T5837]  ? __switch_to_asm+0x39/0x70
[  265.974500][ T5837]  ? __switch_to_asm+0x33/0x70
[  265.979245][ T5837]  ? __pfx_kthread+0x10/0x10
[  265.983827][ T5837]  ret_from_fork_asm+0x1a/0x30
[  265.988578][ T5837]  </TASK>
[  265.991586][ T5837] Modules linked in:
[  265.995958][ T5837] ---[ end trace 0000000000000000 ]---
[  266.004855][ T5837] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190
[  266.011966][ T5837] Code: e0 0b bf 8b 48 89 de e8 30 44 95 fc 90 0f 0b 4c 89 e7 e8 05 9f 71 fd 48 c7 c7 40 0c bf 8b 48 89 de 4c 89 e2 e8 13 44 95 fc 90 <0f> 0b 4c 89 e7 e8 e8 9e 71 fd 48 c7 c7 a0 0c bf 8b 48 89 de 4c 89
[  266.032088][ T5837] RSP: 0018:ffffc9000418f960 EFLAGS: 00010246
[  266.038431][ T5837] RAX: 000000000000004e RBX: ffff88805931a180 RCX: 0f16b564eca43c00
[  266.046507][ T5837] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  266.054556][ T5837] RBP: ffffffff8a5309d0 R08: ffffc9000418f687 R09: 1ffff92000831ed0
[  266.062638][ T5837] R10: dffffc0000000000 R11: fffff52000831ed1 R12: dead000000000100
[  266.070717][ T5837] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122
[  266.078768][ T5837] FS:  0000000000000000(0000) GS:ffff888126240000(0000) knlGS:0000000000000000
[  266.087796][ T5837] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  266.094441][ T5837] CR2: 0000000000000000 CR3: 00000000112b8000 CR4: 00000000003526f0
[  266.102510][ T5837] Kernel panic - not syncing: Fatal exception
[  266.108832][ T5837] Kernel Offset: disabled
[  266.113142][ T5837] Rebooting in 86400 seconds..