last executing test programs:

1m4.302612829s ago: executing program 1 (id=1135):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000160005", @ANYRES32=0x0, @ANYBLOB="1400"], 0x2c}}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x1, 0x0, @loopback, 0xfffffffd}, 0x18)
r1 = socket(0x40000000015, 0x6, 0x1)
syz_emit_ethernet(0x6a, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x7, 0x3]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x86ddffff, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000015c0)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0x1}, 0x1, 0x9, 0x7, 0x401, 0xc, 'syz0\x00', "d754e14a27f0e1250c21e059a0fff1866c050127ff60f0b7ddfdb850db68e19d", "22d6be71170be5c7b27f4ef512c1d8181f98a75e379bc72ac53198a89e9ea7b3", [{0x8e, 0x9, {0x1, 0x4}}, {0xf0, 0x10, {0x0, 0x3}}, {0x8, 0x2, {0x1, 0x3}}, {0xa, 0xfff7, {0x1, 0x5}}, {0x3, 0x8000, {0xe3c9e7f91ce89a2b}}, {0x10, 0x1, {0x3, 0xfffffffb}}, {0x78a0, 0xf800, {0x3, 0x5}}, {0x5, 0xf, {0x3, 0x8}}, {0x0, 0x450, {0x3, 0x101}}, {0xcc35, 0x0, {0x3, 0x6}}, {0x9, 0x5, {0x1, 0x4}}, {0x7f, 0x3, {0x0, 0xffffffff}}, {0x4, 0x6b, {0x2, 0xfffffff5}}, {0x3, 0x8001, {0x0, 0x2}}, {0x9, 0xfff8, {0x0, 0xc}}, {0x8, 0x1, {0x3, 0x6}}, {0x2, 0x5, {0x3, 0x2}}, {0xffff, 0xff, {0x3, 0x7}}, {0x1, 0x1000, {0x3, 0x8000}}, {0x98b, 0x3, {0x0, 0x4}}, {0x0, 0x7ff, {0x1}}, {0x7, 0xfff, {0x1, 0xc}}, {0xa43, 0x3, {0x1, 0xfffffff5}}, {0x286, 0x8, {0x0, 0x3}}, {0x7, 0xb2b, {0x0, 0xfff}}, {0xd, 0xfffd, {0x2, 0x9}}, {0x101, 0x6, {0x3, 0x3}}, {0x0, 0x5, {0x1, 0x93}}, {0x4f8, 0x1, {0x2}}, {0x8, 0x7, {0x2, 0x2}}, {0x2, 0x401, {0x3, 0x7}}, {0x6, 0xd7, {0x2, 0x200}}, {0x6, 0x1, {0x1, 0x4}}, {0xe, 0x3, {0x1, 0xffffffff}}, {0x1, 0x7, {0x3, 0x8}}, {0x6, 0x3, {0x2, 0x2}}, {0x6, 0x9, {0x2, 0xc5}}, {0x80, 0x6, {0x3, 0x2}}, {0x3, 0x8, {0x3, 0x8000}}, {0x3, 0x4c5, {0x3, 0xff}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x10)
pipe(0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x24)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
connect$inet(r1, 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
r6 = accept$netrom(r1, &(0x7f0000000380)={{0x3, @default}, [@default, @null, @bcast, @rose, @null, @rose]}, &(0x7f0000000140)=0x48)
connect$netrom(r6, &(0x7f0000000400)={{0x3, @bcast}, [@null, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x458, 0x220, 0x98, 0x0, 0x130, 0x98, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, &(0x7f00000001c0), {[{{@ip={@local, @loopback, 0xffffffff, 0x0, 'team_slave_1\x00', 'team_slave_0\x00', {0xff}, {}, 0x5c, 0x2, 0x60}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0xff, 0xffffffff, 'wlan0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x16, 0x3, 0x4}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xf8}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x0, 'syzkaller1\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x0, 0xd10cbbeaa814fe04}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x52, 0x421, 0x0, 0x1}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0xd, 0x3}}}, {{@uncond, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x1]}}, @common=@ttl={{0x28}, {0x0, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5a1, 0xffffffff, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8)
syz_emit_ethernet(0x26, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x6, 0x1}, {0x8100, 0x5, 0x1, 0x2}}, {@can={0xc, {{0x2, 0x1, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "c2d8513b27599400"}}}}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)='%ps    \x00'}, 0x20)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000c40)="67d8902400aa303e97380e90231bdb0300000000000000cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26dade9f49e5e7c9538277f1067ed4baeb25b18153561d64b50276bb68e6b524cdc052ee7ab1e1e5637ee49b3520642b014928834b11999652011a349cfa49e4e399941f8aa24511bc5685dbdc5c4364a2c3f477ec5f3fea9b375c9f9441eeeb6e6813c50fffd33f88c75b2e21eb479f5612861179fd82e9d61546b1893c58e", 0xd8}, {&(0x7f0000000900)="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", 0x31d}, {&(0x7f0000000680)="a12f50812c89df0cdffa97f637075748c8325c3c5e70e8662d93b18fc8fc92b91cf310793dc10b5ed503ac860eb8ba910d2ef52781657bb6c20f32eb8f7231565a349316f4c38892cd0af115261eb1899b819a2e918952a50de9bae8d5fb116b050422de0bc7aa22107166f2a6d5f33e7519df4b43581cb31bbf02ecac9f2c1277c1b2ecd5118ce4f61bc7a9", 0x8c}], 0x3, 0x0, 0x0, 0x80}, 0x0)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000002c0), 0x4)

53.710344033s ago: executing program 1 (id=1135):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000160005", @ANYRES32=0x0, @ANYBLOB="1400"], 0x2c}}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x1, 0x0, @loopback, 0xfffffffd}, 0x18)
r1 = socket(0x40000000015, 0x6, 0x1)
syz_emit_ethernet(0x6a, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x7, 0x3]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x86ddffff, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000015c0)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0x1}, 0x1, 0x9, 0x7, 0x401, 0xc, 'syz0\x00', "d754e14a27f0e1250c21e059a0fff1866c050127ff60f0b7ddfdb850db68e19d", "22d6be71170be5c7b27f4ef512c1d8181f98a75e379bc72ac53198a89e9ea7b3", [{0x8e, 0x9, {0x1, 0x4}}, {0xf0, 0x10, {0x0, 0x3}}, {0x8, 0x2, {0x1, 0x3}}, {0xa, 0xfff7, {0x1, 0x5}}, {0x3, 0x8000, {0xe3c9e7f91ce89a2b}}, {0x10, 0x1, {0x3, 0xfffffffb}}, {0x78a0, 0xf800, {0x3, 0x5}}, {0x5, 0xf, {0x3, 0x8}}, {0x0, 0x450, {0x3, 0x101}}, {0xcc35, 0x0, {0x3, 0x6}}, {0x9, 0x5, {0x1, 0x4}}, {0x7f, 0x3, {0x0, 0xffffffff}}, {0x4, 0x6b, {0x2, 0xfffffff5}}, {0x3, 0x8001, {0x0, 0x2}}, {0x9, 0xfff8, {0x0, 0xc}}, {0x8, 0x1, {0x3, 0x6}}, {0x2, 0x5, {0x3, 0x2}}, {0xffff, 0xff, {0x3, 0x7}}, {0x1, 0x1000, {0x3, 0x8000}}, {0x98b, 0x3, {0x0, 0x4}}, {0x0, 0x7ff, {0x1}}, {0x7, 0xfff, {0x1, 0xc}}, {0xa43, 0x3, {0x1, 0xfffffff5}}, {0x286, 0x8, {0x0, 0x3}}, {0x7, 0xb2b, {0x0, 0xfff}}, {0xd, 0xfffd, {0x2, 0x9}}, {0x101, 0x6, {0x3, 0x3}}, {0x0, 0x5, {0x1, 0x93}}, {0x4f8, 0x1, {0x2}}, {0x8, 0x7, {0x2, 0x2}}, {0x2, 0x401, {0x3, 0x7}}, {0x6, 0xd7, {0x2, 0x200}}, {0x6, 0x1, {0x1, 0x4}}, {0xe, 0x3, {0x1, 0xffffffff}}, {0x1, 0x7, {0x3, 0x8}}, {0x6, 0x3, {0x2, 0x2}}, {0x6, 0x9, {0x2, 0xc5}}, {0x80, 0x6, {0x3, 0x2}}, {0x3, 0x8, {0x3, 0x8000}}, {0x3, 0x4c5, {0x3, 0xff}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x10)
pipe(0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x24)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
connect$inet(r1, 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
r6 = accept$netrom(r1, &(0x7f0000000380)={{0x3, @default}, [@default, @null, @bcast, @rose, @null, @rose]}, &(0x7f0000000140)=0x48)
connect$netrom(r6, &(0x7f0000000400)={{0x3, @bcast}, [@null, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x458, 0x220, 0x98, 0x0, 0x130, 0x98, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, &(0x7f00000001c0), {[{{@ip={@local, @loopback, 0xffffffff, 0x0, 'team_slave_1\x00', 'team_slave_0\x00', {0xff}, {}, 0x5c, 0x2, 0x60}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0xff, 0xffffffff, 'wlan0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x16, 0x3, 0x4}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xf8}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x0, 'syzkaller1\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x0, 0xd10cbbeaa814fe04}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x52, 0x421, 0x0, 0x1}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0xd, 0x3}}}, {{@uncond, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x1]}}, @common=@ttl={{0x28}, {0x0, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5a1, 0xffffffff, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8)
syz_emit_ethernet(0x26, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x6, 0x1}, {0x8100, 0x5, 0x1, 0x2}}, {@can={0xc, {{0x2, 0x1, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "c2d8513b27599400"}}}}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)='%ps    \x00'}, 0x20)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000c40)="67d8902400aa303e97380e90231bdb0300000000000000cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26dade9f49e5e7c9538277f1067ed4baeb25b18153561d64b50276bb68e6b524cdc052ee7ab1e1e5637ee49b3520642b014928834b11999652011a349cfa49e4e399941f8aa24511bc5685dbdc5c4364a2c3f477ec5f3fea9b375c9f9441eeeb6e6813c50fffd33f88c75b2e21eb479f5612861179fd82e9d61546b1893c58e", 0xd8}, {&(0x7f0000000900)="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", 0x31d}, {&(0x7f0000000680)="a12f50812c89df0cdffa97f637075748c8325c3c5e70e8662d93b18fc8fc92b91cf310793dc10b5ed503ac860eb8ba910d2ef52781657bb6c20f32eb8f7231565a349316f4c38892cd0af115261eb1899b819a2e918952a50de9bae8d5fb116b050422de0bc7aa22107166f2a6d5f33e7519df4b43581cb31bbf02ecac9f2c1277c1b2ecd5118ce4f61bc7a9", 0x8c}], 0x3, 0x0, 0x0, 0x80}, 0x0)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000002c0), 0x4)

41.841638248s ago: executing program 1 (id=1135):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000160005", @ANYRES32=0x0, @ANYBLOB="1400"], 0x2c}}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x1, 0x0, @loopback, 0xfffffffd}, 0x18)
r1 = socket(0x40000000015, 0x6, 0x1)
syz_emit_ethernet(0x6a, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x7, 0x3]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x86ddffff, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000015c0)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0x1}, 0x1, 0x9, 0x7, 0x401, 0xc, 'syz0\x00', "d754e14a27f0e1250c21e059a0fff1866c050127ff60f0b7ddfdb850db68e19d", "22d6be71170be5c7b27f4ef512c1d8181f98a75e379bc72ac53198a89e9ea7b3", [{0x8e, 0x9, {0x1, 0x4}}, {0xf0, 0x10, {0x0, 0x3}}, {0x8, 0x2, {0x1, 0x3}}, {0xa, 0xfff7, {0x1, 0x5}}, {0x3, 0x8000, {0xe3c9e7f91ce89a2b}}, {0x10, 0x1, {0x3, 0xfffffffb}}, {0x78a0, 0xf800, {0x3, 0x5}}, {0x5, 0xf, {0x3, 0x8}}, {0x0, 0x450, {0x3, 0x101}}, {0xcc35, 0x0, {0x3, 0x6}}, {0x9, 0x5, {0x1, 0x4}}, {0x7f, 0x3, {0x0, 0xffffffff}}, {0x4, 0x6b, {0x2, 0xfffffff5}}, {0x3, 0x8001, {0x0, 0x2}}, {0x9, 0xfff8, {0x0, 0xc}}, {0x8, 0x1, {0x3, 0x6}}, {0x2, 0x5, {0x3, 0x2}}, {0xffff, 0xff, {0x3, 0x7}}, {0x1, 0x1000, {0x3, 0x8000}}, {0x98b, 0x3, {0x0, 0x4}}, {0x0, 0x7ff, {0x1}}, {0x7, 0xfff, {0x1, 0xc}}, {0xa43, 0x3, {0x1, 0xfffffff5}}, {0x286, 0x8, {0x0, 0x3}}, {0x7, 0xb2b, {0x0, 0xfff}}, {0xd, 0xfffd, {0x2, 0x9}}, {0x101, 0x6, {0x3, 0x3}}, {0x0, 0x5, {0x1, 0x93}}, {0x4f8, 0x1, {0x2}}, {0x8, 0x7, {0x2, 0x2}}, {0x2, 0x401, {0x3, 0x7}}, {0x6, 0xd7, {0x2, 0x200}}, {0x6, 0x1, {0x1, 0x4}}, {0xe, 0x3, {0x1, 0xffffffff}}, {0x1, 0x7, {0x3, 0x8}}, {0x6, 0x3, {0x2, 0x2}}, {0x6, 0x9, {0x2, 0xc5}}, {0x80, 0x6, {0x3, 0x2}}, {0x3, 0x8, {0x3, 0x8000}}, {0x3, 0x4c5, {0x3, 0xff}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x10)
pipe(0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x24)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
connect$inet(r1, 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
r6 = accept$netrom(r1, &(0x7f0000000380)={{0x3, @default}, [@default, @null, @bcast, @rose, @null, @rose]}, &(0x7f0000000140)=0x48)
connect$netrom(r6, &(0x7f0000000400)={{0x3, @bcast}, [@null, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x458, 0x220, 0x98, 0x0, 0x130, 0x98, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, &(0x7f00000001c0), {[{{@ip={@local, @loopback, 0xffffffff, 0x0, 'team_slave_1\x00', 'team_slave_0\x00', {0xff}, {}, 0x5c, 0x2, 0x60}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0xff, 0xffffffff, 'wlan0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x16, 0x3, 0x4}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xf8}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x0, 'syzkaller1\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x0, 0xd10cbbeaa814fe04}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x52, 0x421, 0x0, 0x1}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0xd, 0x3}}}, {{@uncond, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x1]}}, @common=@ttl={{0x28}, {0x0, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5a1, 0xffffffff, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8)
syz_emit_ethernet(0x26, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x6, 0x1}, {0x8100, 0x5, 0x1, 0x2}}, {@can={0xc, {{0x2, 0x1, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "c2d8513b27599400"}}}}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)='%ps    \x00'}, 0x20)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000c40)="67d8902400aa303e97380e90231bdb0300000000000000cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26dade9f49e5e7c9538277f1067ed4baeb25b18153561d64b50276bb68e6b524cdc052ee7ab1e1e5637ee49b3520642b014928834b11999652011a349cfa49e4e399941f8aa24511bc5685dbdc5c4364a2c3f477ec5f3fea9b375c9f9441eeeb6e6813c50fffd33f88c75b2e21eb479f5612861179fd82e9d61546b1893c58e", 0xd8}, {&(0x7f0000000900)="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", 0x31d}, {&(0x7f0000000680)="a12f50812c89df0cdffa97f637075748c8325c3c5e70e8662d93b18fc8fc92b91cf310793dc10b5ed503ac860eb8ba910d2ef52781657bb6c20f32eb8f7231565a349316f4c38892cd0af115261eb1899b819a2e918952a50de9bae8d5fb116b050422de0bc7aa22107166f2a6d5f33e7519df4b43581cb31bbf02ecac9f2c1277c1b2ecd5118ce4f61bc7a9", 0x8c}], 0x3, 0x0, 0x0, 0x80}, 0x0)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000002c0), 0x4)

27.887828841s ago: executing program 1 (id=1135):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000160005", @ANYRES32=0x0, @ANYBLOB="1400"], 0x2c}}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x1, 0x0, @loopback, 0xfffffffd}, 0x18)
r1 = socket(0x40000000015, 0x6, 0x1)
syz_emit_ethernet(0x6a, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x7, 0x3]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x86ddffff, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000015c0)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0x1}, 0x1, 0x9, 0x7, 0x401, 0xc, 'syz0\x00', "d754e14a27f0e1250c21e059a0fff1866c050127ff60f0b7ddfdb850db68e19d", "22d6be71170be5c7b27f4ef512c1d8181f98a75e379bc72ac53198a89e9ea7b3", [{0x8e, 0x9, {0x1, 0x4}}, {0xf0, 0x10, {0x0, 0x3}}, {0x8, 0x2, {0x1, 0x3}}, {0xa, 0xfff7, {0x1, 0x5}}, {0x3, 0x8000, {0xe3c9e7f91ce89a2b}}, {0x10, 0x1, {0x3, 0xfffffffb}}, {0x78a0, 0xf800, {0x3, 0x5}}, {0x5, 0xf, {0x3, 0x8}}, {0x0, 0x450, {0x3, 0x101}}, {0xcc35, 0x0, {0x3, 0x6}}, {0x9, 0x5, {0x1, 0x4}}, {0x7f, 0x3, {0x0, 0xffffffff}}, {0x4, 0x6b, {0x2, 0xfffffff5}}, {0x3, 0x8001, {0x0, 0x2}}, {0x9, 0xfff8, {0x0, 0xc}}, {0x8, 0x1, {0x3, 0x6}}, {0x2, 0x5, {0x3, 0x2}}, {0xffff, 0xff, {0x3, 0x7}}, {0x1, 0x1000, {0x3, 0x8000}}, {0x98b, 0x3, {0x0, 0x4}}, {0x0, 0x7ff, {0x1}}, {0x7, 0xfff, {0x1, 0xc}}, {0xa43, 0x3, {0x1, 0xfffffff5}}, {0x286, 0x8, {0x0, 0x3}}, {0x7, 0xb2b, {0x0, 0xfff}}, {0xd, 0xfffd, {0x2, 0x9}}, {0x101, 0x6, {0x3, 0x3}}, {0x0, 0x5, {0x1, 0x93}}, {0x4f8, 0x1, {0x2}}, {0x8, 0x7, {0x2, 0x2}}, {0x2, 0x401, {0x3, 0x7}}, {0x6, 0xd7, {0x2, 0x200}}, {0x6, 0x1, {0x1, 0x4}}, {0xe, 0x3, {0x1, 0xffffffff}}, {0x1, 0x7, {0x3, 0x8}}, {0x6, 0x3, {0x2, 0x2}}, {0x6, 0x9, {0x2, 0xc5}}, {0x80, 0x6, {0x3, 0x2}}, {0x3, 0x8, {0x3, 0x8000}}, {0x3, 0x4c5, {0x3, 0xff}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x10)
pipe(0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x24)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
connect$inet(r1, 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
r6 = accept$netrom(r1, &(0x7f0000000380)={{0x3, @default}, [@default, @null, @bcast, @rose, @null, @rose]}, &(0x7f0000000140)=0x48)
connect$netrom(r6, &(0x7f0000000400)={{0x3, @bcast}, [@null, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x458, 0x220, 0x98, 0x0, 0x130, 0x98, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, &(0x7f00000001c0), {[{{@ip={@local, @loopback, 0xffffffff, 0x0, 'team_slave_1\x00', 'team_slave_0\x00', {0xff}, {}, 0x5c, 0x2, 0x60}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0xff, 0xffffffff, 'wlan0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x16, 0x3, 0x4}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xf8}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x0, 'syzkaller1\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x0, 0xd10cbbeaa814fe04}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x52, 0x421, 0x0, 0x1}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0xd, 0x3}}}, {{@uncond, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x1]}}, @common=@ttl={{0x28}, {0x0, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5a1, 0xffffffff, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8)
syz_emit_ethernet(0x26, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x6, 0x1}, {0x8100, 0x5, 0x1, 0x2}}, {@can={0xc, {{0x2, 0x1, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "c2d8513b27599400"}}}}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)='%ps    \x00'}, 0x20)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000c40)="67d8902400aa303e97380e90231bdb0300000000000000cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26dade9f49e5e7c9538277f1067ed4baeb25b18153561d64b50276bb68e6b524cdc052ee7ab1e1e5637ee49b3520642b014928834b11999652011a349cfa49e4e399941f8aa24511bc5685dbdc5c4364a2c3f477ec5f3fea9b375c9f9441eeeb6e6813c50fffd33f88c75b2e21eb479f5612861179fd82e9d61546b1893c58e", 0xd8}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3cc8897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d30002000000000000f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0dabf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830bfb89ea05761d2d369853bea84dfb8081ed8e891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd0000000000000000", 0x31d}, {&(0x7f0000000680)="a12f50812c89df0cdffa97f637075748c8325c3c5e70e8662d93b18fc8fc92b91cf310793dc10b5ed503ac860eb8ba910d2ef52781657bb6c20f32eb8f7231565a349316f4c38892cd0af115261eb1899b819a2e918952a50de9bae8d5fb116b050422de0bc7aa22107166f2a6d5f33e7519df4b43581cb31bbf02ecac9f2c1277c1b2ecd5118ce4f61bc7a9", 0x8c}], 0x3, 0x0, 0x0, 0x80}, 0x0)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000002c0), 0x4)

15.423596786s ago: executing program 1 (id=1135):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000160005", @ANYRES32=0x0, @ANYBLOB="1400"], 0x2c}}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x1, 0x0, @loopback, 0xfffffffd}, 0x18)
r1 = socket(0x40000000015, 0x6, 0x1)
syz_emit_ethernet(0x6a, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x7, 0x3]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x86ddffff, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000015c0)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0x1}, 0x1, 0x9, 0x7, 0x401, 0xc, 'syz0\x00', "d754e14a27f0e1250c21e059a0fff1866c050127ff60f0b7ddfdb850db68e19d", "22d6be71170be5c7b27f4ef512c1d8181f98a75e379bc72ac53198a89e9ea7b3", [{0x8e, 0x9, {0x1, 0x4}}, {0xf0, 0x10, {0x0, 0x3}}, {0x8, 0x2, {0x1, 0x3}}, {0xa, 0xfff7, {0x1, 0x5}}, {0x3, 0x8000, {0xe3c9e7f91ce89a2b}}, {0x10, 0x1, {0x3, 0xfffffffb}}, {0x78a0, 0xf800, {0x3, 0x5}}, {0x5, 0xf, {0x3, 0x8}}, {0x0, 0x450, {0x3, 0x101}}, {0xcc35, 0x0, {0x3, 0x6}}, {0x9, 0x5, {0x1, 0x4}}, {0x7f, 0x3, {0x0, 0xffffffff}}, {0x4, 0x6b, {0x2, 0xfffffff5}}, {0x3, 0x8001, {0x0, 0x2}}, {0x9, 0xfff8, {0x0, 0xc}}, {0x8, 0x1, {0x3, 0x6}}, {0x2, 0x5, {0x3, 0x2}}, {0xffff, 0xff, {0x3, 0x7}}, {0x1, 0x1000, {0x3, 0x8000}}, {0x98b, 0x3, {0x0, 0x4}}, {0x0, 0x7ff, {0x1}}, {0x7, 0xfff, {0x1, 0xc}}, {0xa43, 0x3, {0x1, 0xfffffff5}}, {0x286, 0x8, {0x0, 0x3}}, {0x7, 0xb2b, {0x0, 0xfff}}, {0xd, 0xfffd, {0x2, 0x9}}, {0x101, 0x6, {0x3, 0x3}}, {0x0, 0x5, {0x1, 0x93}}, {0x4f8, 0x1, {0x2}}, {0x8, 0x7, {0x2, 0x2}}, {0x2, 0x401, {0x3, 0x7}}, {0x6, 0xd7, {0x2, 0x200}}, {0x6, 0x1, {0x1, 0x4}}, {0xe, 0x3, {0x1, 0xffffffff}}, {0x1, 0x7, {0x3, 0x8}}, {0x6, 0x3, {0x2, 0x2}}, {0x6, 0x9, {0x2, 0xc5}}, {0x80, 0x6, {0x3, 0x2}}, {0x3, 0x8, {0x3, 0x8000}}, {0x3, 0x4c5, {0x3, 0xff}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x10)
pipe(0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x24)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
connect$inet(r1, 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
r6 = accept$netrom(r1, &(0x7f0000000380)={{0x3, @default}, [@default, @null, @bcast, @rose, @null, @rose]}, &(0x7f0000000140)=0x48)
connect$netrom(r6, &(0x7f0000000400)={{0x3, @bcast}, [@null, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x458, 0x220, 0x98, 0x0, 0x130, 0x98, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, &(0x7f00000001c0), {[{{@ip={@local, @loopback, 0xffffffff, 0x0, 'team_slave_1\x00', 'team_slave_0\x00', {0xff}, {}, 0x5c, 0x2, 0x60}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0xff, 0xffffffff, 'wlan0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x16, 0x3, 0x4}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xf8}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x0, 'syzkaller1\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x0, 0xd10cbbeaa814fe04}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x52, 0x421, 0x0, 0x1}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0xd, 0x3}}}, {{@uncond, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x1]}}, @common=@ttl={{0x28}, {0x0, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5a1, 0xffffffff, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8)
syz_emit_ethernet(0x26, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x6, 0x1}, {0x8100, 0x5, 0x1, 0x2}}, {@can={0xc, {{0x2, 0x1, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "c2d8513b27599400"}}}}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)='%ps    \x00'}, 0x20)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000c40)="67d8902400aa303e97380e90231bdb0300000000000000cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26dade9f49e5e7c9538277f1067ed4baeb25b18153561d64b50276bb68e6b524cdc052ee7ab1e1e5637ee49b3520642b014928834b11999652011a349cfa49e4e399941f8aa24511bc5685dbdc5c4364a2c3f477ec5f3fea9b375c9f9441eeeb6e6813c50fffd33f88c75b2e21eb479f5612861179fd82e9d61546b1893c58e", 0xd8}, {&(0x7f0000000900)="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", 0x31d}, {&(0x7f0000000680)="a12f50812c89df0cdffa97f637075748c8325c3c5e70e8662d93b18fc8fc92b91cf310793dc10b5ed503ac860eb8ba910d2ef52781657bb6c20f32eb8f7231565a349316f4c38892cd0af115261eb1899b819a2e918952a50de9bae8d5fb116b050422de0bc7aa22107166f2a6d5f33e7519df4b43581cb31bbf02ecac9f2c1277c1b2ecd5118ce4f61bc7a9", 0x8c}], 0x3, 0x0, 0x0, 0x80}, 0x0)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000002c0), 0x4)

6.859450049s ago: executing program 2 (id=2288):
syz_emit_ethernet(0x1106, &(0x7f0000002580)={@random="5b37182347bc", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10d0, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, {[@srh={0x3b, 0x4, 0x4, 0x2, 0x1, 0x8, 0xe, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00']}, @routing={0x1d, 0x4, 0x1, 0x8, 0x0, [@local, @private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x5e, 0x0, 0x2, 0x80}, @routing={0x88, 0x8, 0x0, 0xe, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2]}, @fragment={0x29, 0x0, 0xf1, 0x1, 0x0, 0x6, 0x67}, @fragment={0x5c, 0x0, 0x5, 0x1, 0x0, 0x0, 0x66}, @fragment={0x89, 0x0, 0x6, 0x0, 0x0, 0x11, 0x64}, @dstopts={0x33, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}], @echo_reply={0x81, 0x0, 0x0, 0x3, 0x400, "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"}}}}}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x145000, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c0, 0x0, 0xe8, 0x0, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffff00, 0xffffff00, 0x10, 0x6, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@random="2a158333a072", {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x9, 0xff00, 0xe, 0xba, 0x101, 'batadv_slave_0\x00', 'bridge0\x00', {}, {}, 0x0, 0x2}, 0xc0, 0x100, 0x0, {0x0, 0x1e03}}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "2c3bb27d9d5b379b853c7744b526e29755ec721db80fdb00f95f8a608b8d"}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r2, 0x404, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x48845)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="18490000fbffffff0000000000000000184b004ce686e25b5fdf490000000000950000000000000036323ffc2345f4b7568cdd194e67f26f21b4e9dcf5fd4c948db6d316aa8723acfe3462f1dd3ab8b78333b6b21676b8b549443519e188f759bd51d2aeee81a16090bdc26a3c713dd5e5394cfac2b1bf5df8d45c2b1f99c4f51ed612f0c87905b9f3099e8399c65bbfa506c165f2c4ce5d34ccebae489c1eca54c8a168c6496207f3a07837661c1748c824c8fb96103a3b7fe6e2f2f79a527add7e558b22977d000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree_skb\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffca3, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x0, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x1}, 0x50)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r6)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718", @ANYRES16=r6], 0x398}}, 0x0)
r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a80)=@base={0x20, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff)
r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r11, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan3\x00', <r12=>0x0})
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000096c0), r13)
sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000a40)={0x3c, r10, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048834}, 0x8040)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r9}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x4, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70000000000000000001da00000000000009500002000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x65)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000500)={'wg0\x00'})

6.814423334s ago: executing program 1 (id=1135):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000160005", @ANYRES32=0x0, @ANYBLOB="1400"], 0x2c}}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x1, 0x0, @loopback, 0xfffffffd}, 0x18)
r1 = socket(0x40000000015, 0x6, 0x1)
syz_emit_ethernet(0x6a, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x7, 0x3]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x86ddffff, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000015c0)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0x1}, 0x1, 0x9, 0x7, 0x401, 0xc, 'syz0\x00', "d754e14a27f0e1250c21e059a0fff1866c050127ff60f0b7ddfdb850db68e19d", "22d6be71170be5c7b27f4ef512c1d8181f98a75e379bc72ac53198a89e9ea7b3", [{0x8e, 0x9, {0x1, 0x4}}, {0xf0, 0x10, {0x0, 0x3}}, {0x8, 0x2, {0x1, 0x3}}, {0xa, 0xfff7, {0x1, 0x5}}, {0x3, 0x8000, {0xe3c9e7f91ce89a2b}}, {0x10, 0x1, {0x3, 0xfffffffb}}, {0x78a0, 0xf800, {0x3, 0x5}}, {0x5, 0xf, {0x3, 0x8}}, {0x0, 0x450, {0x3, 0x101}}, {0xcc35, 0x0, {0x3, 0x6}}, {0x9, 0x5, {0x1, 0x4}}, {0x7f, 0x3, {0x0, 0xffffffff}}, {0x4, 0x6b, {0x2, 0xfffffff5}}, {0x3, 0x8001, {0x0, 0x2}}, {0x9, 0xfff8, {0x0, 0xc}}, {0x8, 0x1, {0x3, 0x6}}, {0x2, 0x5, {0x3, 0x2}}, {0xffff, 0xff, {0x3, 0x7}}, {0x1, 0x1000, {0x3, 0x8000}}, {0x98b, 0x3, {0x0, 0x4}}, {0x0, 0x7ff, {0x1}}, {0x7, 0xfff, {0x1, 0xc}}, {0xa43, 0x3, {0x1, 0xfffffff5}}, {0x286, 0x8, {0x0, 0x3}}, {0x7, 0xb2b, {0x0, 0xfff}}, {0xd, 0xfffd, {0x2, 0x9}}, {0x101, 0x6, {0x3, 0x3}}, {0x0, 0x5, {0x1, 0x93}}, {0x4f8, 0x1, {0x2}}, {0x8, 0x7, {0x2, 0x2}}, {0x2, 0x401, {0x3, 0x7}}, {0x6, 0xd7, {0x2, 0x200}}, {0x6, 0x1, {0x1, 0x4}}, {0xe, 0x3, {0x1, 0xffffffff}}, {0x1, 0x7, {0x3, 0x8}}, {0x6, 0x3, {0x2, 0x2}}, {0x6, 0x9, {0x2, 0xc5}}, {0x80, 0x6, {0x3, 0x2}}, {0x3, 0x8, {0x3, 0x8000}}, {0x3, 0x4c5, {0x3, 0xff}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x10)
pipe(0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x24)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
connect$inet(r1, 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
r6 = accept$netrom(r1, &(0x7f0000000380)={{0x3, @default}, [@default, @null, @bcast, @rose, @null, @rose]}, &(0x7f0000000140)=0x48)
connect$netrom(r6, &(0x7f0000000400)={{0x3, @bcast}, [@null, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x458, 0x220, 0x98, 0x0, 0x130, 0x98, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, &(0x7f00000001c0), {[{{@ip={@local, @loopback, 0xffffffff, 0x0, 'team_slave_1\x00', 'team_slave_0\x00', {0xff}, {}, 0x5c, 0x2, 0x60}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0xff, 0xffffffff, 'wlan0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x16, 0x3, 0x4}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xf8}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x0, 'syzkaller1\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x0, 0xd10cbbeaa814fe04}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x52, 0x421, 0x0, 0x1}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0xd, 0x3}}}, {{@uncond, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x1]}}, @common=@ttl={{0x28}, {0x0, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5a1, 0xffffffff, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8)
syz_emit_ethernet(0x26, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x6, 0x1}, {0x8100, 0x5, 0x1, 0x2}}, {@can={0xc, {{0x2, 0x1, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "c2d8513b27599400"}}}}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)='%ps    \x00'}, 0x20)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000c40)="67d8902400aa303e97380e90231bdb0300000000000000cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26dade9f49e5e7c9538277f1067ed4baeb25b18153561d64b50276bb68e6b524cdc052ee7ab1e1e5637ee49b3520642b014928834b11999652011a349cfa49e4e399941f8aa24511bc5685dbdc5c4364a2c3f477ec5f3fea9b375c9f9441eeeb6e6813c50fffd33f88c75b2e21eb479f5612861179fd82e9d61546b1893c58e", 0xd8}, {&(0x7f0000000900)="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", 0x31d}, {&(0x7f0000000680)="a12f50812c89df0cdffa97f637075748c8325c3c5e70e8662d93b18fc8fc92b91cf310793dc10b5ed503ac860eb8ba910d2ef52781657bb6c20f32eb8f7231565a349316f4c38892cd0af115261eb1899b819a2e918952a50de9bae8d5fb116b050422de0bc7aa22107166f2a6d5f33e7519df4b43581cb31bbf02ecac9f2c1277c1b2ecd5118ce4f61bc7a9", 0x8c}], 0x3, 0x0, 0x0, 0x80}, 0x0)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000002c0), 0x4)

5.194321553s ago: executing program 2 (id=2289):
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000300)=<r0=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000580)={"8c3ef01be86258108b331b07f91efab2", r0, r0, {0x6, 0x9044}, {0x1, 0x1}, 0x7fff, [0x3, 0x5, 0x9, 0x9, 0x20000000000007, 0x5, 0x10, 0xe5, 0x1, 0xfffffffffffffffe, 0x8008, 0xfffffffffffffffc, 0x2, 0x4, 0x2, 0x5]})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
unshare(0x20000400)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00'}, 0x18)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c1bbdbe3160578f5aa421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e6405c0cf5329cb7f1821ec7ecca1d3ffb2d7144f29af11fe6557f8a74d923d12c43bc0000004d0012"], 0xb4}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xf, 0x200000005c832, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000180)={@private1}, 0x14)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0x4, "179da51e"}, &(0x7f00000000c0)=0xc)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000425bd7000ffdbdf250d00000008000600", @ANYRES32=0x0, @ANYBLOB="050033000000000005002d0000000000050035000600000005002e0001000000050035000900000008000300", @ANYRES32=r8, @ANYBLOB="06002800010069d2afe7d7a169000008003a000800000066cc98010b00cc5d356fc116a71309f209d9f7fe472806f625"], 0x5c}, 0x1, 0x0, 0x0, 0x8804}, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r9, 0x400448ca, 0x0)
bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r9, &(0x7f00000004c0)=ANY=[@ANYBLOB="010120"], 0xc)

4.537649239s ago: executing program 2 (id=2295):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x0, 0x110, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty, 0x4}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xa7, 0xe8}, {0x28}}}}, 0xfc54)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80800, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000440)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000001880)={'wg1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="290a00000000000000000100000008000100", @ANYRES32=r6, @ANYBLOB="24000300000000"], 0x40}}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x40}}, 0x0)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x124, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20004841}, 0x4000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="680000002d000100000002000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000480012800e00010069"], 0x68}}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000300), &(0x7f0000000340)='%-5lx  \x00'}, 0x20)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r10, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private0, @empty, 0x16, 0x1d}})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50)
socket$inet6_udp(0xa, 0x2, 0x0)
r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, r11, 0x200, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048041}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x2}]}, {0x0, [0x2e, 0x61, 0x1e]}}, 0x0, 0x29, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28)

3.88767132s ago: executing program 2 (id=2302):
r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r1)
socket$alg(0x26, 0x5, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = socket(0x10, 0x3, 0x0) (async)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x12, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x80000000}]}}]}, 0x40}}, 0x44000) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESOCT=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) (async)
unshare(0x2040400) (async)
pipe(&(0x7f00000001c0)={<r7=>0xffffffffffffffff}) (async)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000000000006a0a00fe80000000850000000a000000b700000059a700009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async)
ppoll(&(0x7f0000000480)=[{r2, 0x4000}, {r0}, {r7}], 0x3, 0x0, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x0, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_USERDATA={0x0, 0xc, "592055a32b528d509fdb5804ba0c68a51770931b6152a4895658e31dd959419013b644beae8ca1abc3784faed49351bd985b829fadc007773c3d53558d44558b3bea58f51385"}, @NFTA_CHAIN_NAME={0x0, 0x3, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x20000040)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_int(r9, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
writev(r10, &(0x7f0000000a40)=[{&(0x7f00000007c0)='T', 0x1}], 0x1) (async)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)

2.942528982s ago: executing program 2 (id=2311):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f00000001c0), 0x10)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000001a80)=0x7, 0x4)
recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000017c0)=""/4093, 0xffd}], 0x1}, 0xd619}], 0x1, 0x40000002, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4)
sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x0)
sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=@canfd={{0x3, 0x1, 0x0, 0x1}, 0x2b, 0x3, 0x0, 0x0, "95b7beb13cae82ef69e445027ca8bd5f4cd47728b39235471b088d2d97c79abb0bc91566a2a7f97891c160a7a59e2ca403faf37e61a7668fab0f40fa48c0f0fd"}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x40080)

1.799854145s ago: executing program 4 (id=2316):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000400002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c410280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010)

1.799485597s ago: executing program 2 (id=2317):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x4, 0x4, 0x0, 0x8a}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe)
sendmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000880)="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", 0x2a1}], 0x1}}], 0x1, 0x4)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', <r2=>0x0, 0x2f, 0x3, 0x8, 0x6, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x40, 0x8000}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="240000001bf0565c19fa97a5740000000a37380070607700b3386d45af8ab594f10aa19846c342bc3adcb4c16c829a286931b21ae808d5280ec0f3a5ea4d867e58d6e40e35180c32a2c58e0c973a1bb189ee9b630df37f15e19f1a0d0ab71523cd1626471b77389b366085e06736a9fdaf38cb5c2a", @ANYRES32=0x0, @ANYBLOB="030000000800020004000000"], 0x24}}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="e9eb247ffbe5be6caf9ac8c119e8a2b2b6a2cbe0b6f9a2a3f3850eb24418daee017a1086eb0b7553199b253ae79aa36ac30dbc126ddb345c6b65cbec71d34f04632c682947d945fafdf5d8b38059a7be185717160cba5a040f2c88373520befa19a9f4929cb704c1122ec8219de568c279a666c5c0bbbbfbb1e642f6c39c4dbbc1c2bdfc8790f5fed4bf20c3d96256600f", @ANYBLOB="67ededb97deea49c97ae0a5b6e613665bd80cd3ce0d690a0cef109ed09fc51ab1ea5f72e92d027810badec52d84453de1846786b70ccbeb043748b3b45065919a057818d18a01f7d4c7c3a7874733fe06f781e90858b5ba7dd640d7e0d743f3024030b3e123373bc8c40f619645b4b40e8683e9cd614d2d60a86ce34c5680b387f99e692c2d52664c89699721ab23e38ed26f437e67a6a82abf9c546c97dc7e29c2d5abca5f7688d44c7960515e3627ef6748a6d6cacf9d4c551452f7d78b1f38f7125111eebdcc08d26f62833d1eeec09c1059f6a02926cc3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', r2, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0xfffffffffffffc62)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000004000000000000000000000000000000fa", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000700181100004b76785aefa34f7612e005e8c39ac1cf33efb3ff785ae7ccb751119a2d2f7fb2c45d089d4b910537fa5d855204c12a74e3513e6d6a21b6b9eb8e497e854b2284b0450548a46f4669ebf0463ea0ebe64055679db8f908f1bb469db8ed93da382c1de75706f0fcfd", @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x24)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001208000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f00000002c0)=0x78)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000ffff0000000000008510000003000000180000000000000000000000000000009500e900000040000f000000000000000000000000000000930400799ec619ac78fc12c2c390374de255e3e3682cb1a53f"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
connect$unix(r8, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e)
socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)

1.797258372s ago: executing program 0 (id=2318):
writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000140)="f4339bc23dab73e5dbab037672b419271fda3770b06ecedd11", 0x19}, {&(0x7f00000002c0)="628a31b6d7ba4817f9e7171f59f6ba02d142ac1df6b7ee697448e1d1df8e6f1bad0f1ef1889722dfbe78cc1a58a59f2d3881", 0x32}, {&(0x7f0000000400)="e66517c292238b5473", 0x9}, {&(0x7f0000000640)="50eab642bf632c5cde2c2827b6b0f95a7e02e4c01968105ea31a5397f228b4aeb94841e6689f44f65623f08281f6e880f1349f8926e11f238e91ce034152d363e018fa2d2176994818c3c7e6e78cab5bbba1f2", 0x53}], 0x4)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="700000001400010000000000fbdbdf25e00000010000000000000000000000000000000000000000000000000000000100000000000700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080004000800000000000c0015"], 0x70}}, 0x4004040)

1.649971694s ago: executing program 0 (id=2320):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x12, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000100001020000000000000000730115000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)

1.470410273s ago: executing program 0 (id=2322):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x20}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0x1, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1114a}}, 0x20}, 0x1, 0x0, 0x0, 0x7e63def3f98af9a3}, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000500)="fc484e55021886bb", 0x8}], 0x1}}], 0x1, 0x0)

1.277215733s ago: executing program 0 (id=2323):
syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[@ANYBLOB="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"], 0x0)

1.199799024s ago: executing program 4 (id=2324):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x158, 0x150, 0x150, 0x0, 0xf8010000, 0x270, 0x238, 0x238, 0x270, 0x238, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0xb66, 0x0, 0x0, 0x9}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "decb585218ebf5805f7356720db1714438ea1c4e4d43886e34ad04218b895e9936aa46525113c03de9cf73687ca94feda35eefade1197a320d00"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x44, r2, 0x1, 0x0, 0x25dfdbfb, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2000008}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) (async)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000d40)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}, {{&(0x7f0000000340)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000480)=')', 0x1}], 0x1}}], 0x2, 0x0)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmmsg$inet(r4, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r7=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r7, 0x10005}, &(0x7f0000000100)=0x8) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000380)={0x4, 0xc, 0x6, 0xb, 0xfc, 0x6, 0x6, 0xff, 0x1, 0x4e, 0xf, 0x2, 0xd8, 0x6}, 0xe)
ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

1.146110414s ago: executing program 0 (id=2325):
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r0 = socket(0x40000000015, 0x5, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000000)="3b000000010001", 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="aeaa000000000000711011000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4cdeeddd5793a427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a958df39f9c5a8c8e876a52816446d0106f4a81dba144c80fda0b401f0774edbf73b3de44d7ca5c28b0830910f3b02b", 0x425}], 0x2}, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
recvmmsg$unix(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000100, 0x0)

1.119758751s ago: executing program 3 (id=2326):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0xca231000)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x84000000, 0x40, &(0x7f0000000480)=@security={'security\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0xf0, 0x1c0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xc0000000, 0xfffffff2, 0x49, 0x7, 0xb, 0x2, 0xfffffff5, 0x3]}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x0, 0x1, 0x2, 0x4], 0x4, 0x5}, {0x2, [0x5, 0x2, 0x1, 0x1, 0x2], 0x23, 0x7}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x1, 0x2, 0x9, 0x6, 0x3, 0x7], 0x6, 0x7}, {0x2, [0x4, 0x2, 0x3, 0x0, 0x2, 0x1], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348)

960.525725ms ago: executing program 4 (id=2327):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
close(r0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x14, r4, 0x1, 0x0, 0x25dfdbfc}, 0x14}}, 0x4)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0xc, &(0x7f0000000780)=0x3, 0x4)
sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="737d3ca3", @ANYRES16=r4, @ANYBLOB="080027bd7000fedbdf2503000000080001000300000008000200020000000800010002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000)
write$cgroup_int(r1, &(0x7f0000000200), 0x48400)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58)
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)="f4339bc23dab73e5dbab037672b419271fda3770b06ecedd11", 0x19}, {&(0x7f00000002c0)="628a31b6d7ba4817f9e7171f59f6ba02d142ac1df6b7ee697448e1d1df8e6f1bad0f1ef1889722dfbe78cc1a58a59f2d3881ae40ded75e48ec1d1782df4cdfbf37cbc45995b26e7abb0cd849ea66e80fba985a82232c84", 0x57}, {&(0x7f0000000400)="e66517c292238b5473a56969563d87f550c05d72253a40a38d96e51d3de1226c1776c1e45c5dd2cfbcec83", 0x2b}, {&(0x7f0000000480)="57c761f654db5f3098ae64ce385ffcfed0ef110d93cbe7fa1f4f2327602a291192f5fe9863d527e303153f68b04c18db5a48756a583789e9895746c12b9d4e1224c9e17563edff39dd0b7d73fbb4b5a64e7b6db65b84b82f6c938205b2d8560f0da2f775e85175f74ed70033681e96d30fe8a7c2866c59e8f2e2d253ee55115be95aef4a8688989faa6f27db0ea71914ea8150aa35afc828c97af0ec5cc718ca2a58b335388cfebd804d367af99611817fed2c6b73", 0xb5}, {&(0x7f0000001680)="50eab642bf632c5cde2c2827b6b0f95a7e02e4c01968105ea31a5397f228b4aeb94841e6689f44f65623f08281f6e880f1349f8926e11f238e91ce034152d363e018fa2d2176994818c3c7e6e78cab5bbba1f26c80457ceacf706c54e5b1f431a8df03f7376096b86b8ac804d9dde5f9eca2dc99bf2cb9c6ebf5a6c9db3db0d4a2e15002854bcb86bb89ea0e5511db578021e8cd35ff5d1f46a24dd14e248fc171e0d094a27510d418a5b467230f11b0a224362e6e9b3331f22ad5c10fc6e21c2297d9a21ce00af6ea39b66254f66189929b12973020c175bafd2d", 0xdb}], 0x5)
r7 = accept4(r6, 0x0, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000100)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018000280140003"], 0x50}}, 0x0)
sendfile(r7, r0, 0x0, 0xfacf)

879.890296ms ago: executing program 3 (id=2328):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000062dced683b1fddab23042448bcdd077557518252f468782ebcb147f404eb97d976545510b732a4a3d6e5fb5e34e853f6b585597979a7cf467a57b8d49b92d5f288676c94bfe8acceaf903916faef1d02", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x8)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)
unshare(0x24020400)
r4 = socket(0x2c, 0x2, 0x83)
shutdown(r0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r6, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_emit_ethernet(0x22, &(0x7f0000000540)=ANY=[@ANYBLOB="059fc0619f0b0180c200000081003c00000c010000e008020000691073e9e324feb62b9c8ef7214ca375457daff488962227cbf5bc07ab4be680a30961be783991d89f0bb8ed9f6d68d70e04029035f92a4791d02bfe7db4b009a4b30fa0e9f143b3df67b0402471b74347a7fdcc4320c7f3b528ae3480c0c067c1a813e1c3f34c867a1eb6c0852c5f438b52cb"], &(0x7f0000000380)={0x0, 0x2, [0x106, 0xd2c, 0xd04, 0xbd2]})
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r4)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00022abdfedbdf2501000000000000000b000000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40084}, 0x880d8)
connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r9, 0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYRES8], &(0x7f0000000100)=0x29)
accept(r6, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="e8fb0face9757beef5503c8b8900b6232781b893", @ANYRES32=r0, @ANYRES64=r4, @ANYRESDEC, @ANYRES64=r5, @ANYRES64=r3], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
r11 = socket$igmp(0x2, 0x3, 0x2)
sendmmsg$inet(r11, &(0x7f0000004840)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="2400000000000000000000000700000001071336ac1414aaac1414aaac1e080100000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14141d"], 0x48}}], 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f00000000c0)='syzkaller0\x00', 0x10)
unshare(0x22020600)

665.055343ms ago: executing program 4 (id=2329):
syz_emit_ethernet(0x1106, &(0x7f0000002580)={@random="5b37182347bc", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10d0, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, {[@srh={0x3b, 0x4, 0x4, 0x2, 0x1, 0x8, 0xe, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00']}, @routing={0x1d, 0x4, 0x1, 0x8, 0x0, [@local, @private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x5e, 0x0, 0x2, 0x80}, @routing={0x88, 0x8, 0x0, 0xe, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2]}, @fragment={0x29, 0x0, 0xf1, 0x1, 0x0, 0x6, 0x67}, @fragment={0x5c, 0x0, 0x5, 0x1, 0x0, 0x0, 0x66}, @fragment={0x89, 0x0, 0x6, 0x0, 0x0, 0x11, 0x64}, @dstopts={0x33, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}], @echo_reply={0x81, 0x0, 0x0, 0x3, 0x400, "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"}}}}}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x145000, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c0, 0x0, 0xe8, 0x0, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffff00, 0xffffff00, 0x10, 0x6, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@random="2a158333a072", {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x9, 0xff00, 0xe, 0xba, 0x101, 'batadv_slave_0\x00', 'bridge0\x00', {}, {}, 0x0, 0x2}, 0xc0, 0x100, 0x0, {0x0, 0x1e03}}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "2c3bb27d9d5b379b853c7744b526e29755ec721db80fdb00f95f8a608b8d"}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r2, 0x404, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x48845)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="18490000fbffffff0000000000000000184b004ce686e25b5fdf490000000000950000000000000036323ffc2345f4b7568cdd194e67f26f21b4e9dcf5fd4c948db6d316aa8723acfe3462f1dd3ab8b78333b6b21676b8b549443519e188f759bd51d2aeee81a16090bdc26a3c713dd5e5394cfac2b1bf5df8d45c2b1f99c4f51ed612f0c87905b9f3099e8399c65bbfa506c165f2c4ce5d34ccebae489c1eca54c8a168c6496207f3a07837661c1748c824c8fb96103a3b7fe6e2f2f79a527add7e558b22977d000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree_skb\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffca3, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd60e0ffff04128700631177fbac141416e000030a44079f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x1}, 0x50)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r6)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718", @ANYRES16=r6], 0x398}}, 0x0)
r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a80)=@base={0x20, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff)
r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r11, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan3\x00', <r12=>0x0})
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000009700)={'wpan1\x00'})
sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000a40)={0x3c, r10, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048834}, 0x8040)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r9}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x4, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70000000000000000001da00000000000009500002000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x65)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000500)={'wg0\x00'})

635.459554ms ago: executing program 3 (id=2330):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010000304000c04dd014cde872309d200", @ANYRES32=r1, @ANYBLOB="e8bf010004a701002c00128009000100626f6e64000000001c000280060018"], 0x4c}, 0x1, 0x200000000000000, 0x0, 0x11}, 0x4000044)

387.978186ms ago: executing program 3 (id=2331):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001cb4d0d6850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

387.576033ms ago: executing program 4 (id=2332):
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}}, 0x0)

323.720885ms ago: executing program 4 (id=2333):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x80)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd0f000040", 0x6}], 0x1, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x72, 0x400, 0x3, 0x801, 0x0, 0x8, 'syz1\x00'})

226.01021ms ago: executing program 3 (id=2334):
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x37}, 0x1}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="b5640a", 0x3}], 0x1}, 0x8080)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="96f5", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0xf5)

140.827046ms ago: executing program 0 (id=2335):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) (async)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000006800010000000000000000000a0000000000000008000500", @ANYRES32=0x0, @ANYBLOB="040001"], 0x24}}, 0x0)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) (async)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000001880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/17, 0x11}, 0x2}], 0x1, 0x10002, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) (async)
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x24}}, 0x40)
socket(0x1e, 0x4, 0x0) (async)
socket(0x1e, 0x4, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon, @chandef_params, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x34}}, 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd29}, 0x1c}}, 0x0) (async)
sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd29}, 0x1c}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x60}}, 0x4048095)
recvfrom(r0, &(0x7f0000000080)=""/4, 0x4, 0x40000000, &(0x7f0000000200)=@generic={0x26, "4a8a572ee6818b6258436bc98c14d3a761e3c0c5c1cab15586f21473171d366ee6a10dd6bc1211819cc473c5f582807caab74159dec664bc0e78365af7a6aa762ff54bf74d7363bd4943be141d5874d4e2b497f5b0abc33f22c118a5bd8f5e60cd004f9f2cac350a201ba316a529bbba959163d9aecf750077f1130f10e3"}, 0x80) (async)
recvfrom(r0, &(0x7f0000000080)=""/4, 0x4, 0x40000000, &(0x7f0000000200)=@generic={0x26, "4a8a572ee6818b6258436bc98c14d3a761e3c0c5c1cab15586f21473171d366ee6a10dd6bc1211819cc473c5f582807caab74159dec664bc0e78365af7a6aa762ff54bf74d7363bd4943be141d5874d4e2b497f5b0abc33f22c118a5bd8f5e60cd004f9f2cac350a201ba316a529bbba959163d9aecf750077f1130f10e3"}, 0x80)
r11 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r11, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18)
setsockopt$inet6_int(r11, 0x29, 0x24, &(0x7f0000000040)=0xe6fb, 0x4) (async)
setsockopt$inet6_int(r11, 0x29, 0x24, &(0x7f0000000040)=0xe6fb, 0x4)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r11, 0x29, 0x37, &(0x7f00000006c0), 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)

0s ago: executing program 3 (id=2336):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4000000010000570000000600000000000012805d918fc0830900"/79, 0x4f}, {&(0x7f0000002180)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292e24a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb013c9d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8ee005e78877a072d12d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42afd1f89cdb29dfdd6676c55ea00d35321bc4878170c62b056b4e03ae556ac804026cabcbc8e79e7a18f2f56442cd650aa2bc88f62ebb65bfafd3e5b4c62ac2e720ff0fdf03c46889df55ff91058319c953f90cd6e7f7b15d56a58ff6128357510c4c618aa25434881d58c39092969ba1f7c444465f16d1f2561991e357bda928f2a50422f774f318fb41169a0d0324a8efd19b940a17c28cda06b750cd02155dbdbd1dc695e190a997ae8f4bb8766983d8db8678a78ae8f044b868549e9c60f7ce25a36300ce07f304e75d285e914b3aec703969df969b2736dd99fcab1944c751f8ef4c34cbb86d5f27ef9982be245949d5579b540750d1eac428b0cd2541295b577573b27e9ecac3934987e85b44bc85e6e307cf6f5683bf1c817369d556a368bc5560a1737aa2bec3cac4689e04fbe851ed4b6c1a355950522f8918af3855fe97ec285da15a20e8119483e7419fa2b063da5add10b396a8033ec2b98d9a9fca3fc4202d0a6bcfa55798eacafa4c8efafb73a2ab89bb58b0c20364a6ad9c233dfb1bdbb87b8f91e3ab9790e876f906107183419aa7480e327388c01dc5f2d5bcb8a7565cddc4e1275741116416b66bf3adf9e7e31c3fc518740446ed2a394e7699baf9408c62b4c0e7a11dec8f4a67e78a3f00bedae9f55f36c52a1fd4ee3a8be7285f9ca898ee63d3718a7c4603bcb9a24537b34a41a6c0eee4cc609b014d3f4fb928aa7e3fa7a4f97dcef5c0e526b650284ffeda82f603ed9ea1eb6627d29d8bcd6c7e6fe128b1c4463b2cfe50c0ff9a46090635dde4b4d4a984e5a91f7486856cd2bf85088fa4d27b219628be8cdba7004d00985a73fb5b0b4b0f96844e73a8ff7884bdee1a0d6e62decfeebfb56351c135e6580fd61ea806ee5592fe4ffba5c73b8a4a04d44aa52645320cb73fe0c5f14a971d3b3f64c85f5ebaab5e1a061f5186050230286331048e43368e45cfc88e8f4d0d3b1b86b64d5394bc68c2b754389b3c18a45c1edb0496dd88cb3113bbdf1a0f127eb8cd52caf8da95b83d0decad3775b2f2e43776d0d32d447cdd0b267b32775e3473f51a233f8c91a4c07ad669da1844f3d9554f399d43ca1eda29c5c761b3936f845f0c4d1c6a56b8b34b5ab3291e06cd86de6116fc3236a11343d6f4ad02199717054ac1f15471c5a2b8efe67bd4bea33c0ca36e2c4209026849de21c1da1057f353cc824947d75119e4501b98cb9e621d0644e3f4a75353093557afcee7da41ad368fe1cbb426922772b9b262a861fb6967e86d6e8c5a8de6a1e8f03456c0a354277a2f3ff46a62b6d6cdee4febf23e2350f94b47a05a4d0e7da37a2e97b899d92ca1f3bd1cded5588593e8bb99b9dce0731fa1174de14b63be2bf7e424f870551f213fab437aac092c2e9798959fa3616465e2b36fd49cc9af902d47debec02558c036ed991f1a3895b37cd70f3c405cca362c885542fd976e73be4cf7580a0c4d5a9527c77c189573e3be07ed15472f6b012939abb5be9f3e8a5b720307fb2dbca48b35d121702cfb6b3690559b08fbeb77d53d37582d7f44fe269ac51665632bf070cfc7445741b70306cb3f19b7fbecd19a78092dfd086a0da019734d95660ba4e5ce5bcf25f09403c32e3ec902f3717cca0eca05e791c2b8c2b8988645afa2446d5218abce136c0dbbafb95e4f4727a29cc567b3f73d5dbc1aeee746653a7f5c445add24a9c1b67d1bfeec85d2a6478e80c3acdb9439aa46c8cf14a98ffa89790ef7a94b3146088566812e28ccbafb466772b7fbb98dcf1e792eb6d0de0829c3c49c5ecdeea3e80017324a0fe724565c4e7a242764e9012442cae44b57c7121889c044be05b5eca70efb649bb528e751f072af93ae2c5053fdce196cce158136f904cf64f2cb8becc2d024f5ec32a38d78b87a4dfe7c53769dadef890efd160eb662cedb18a756aed83edfb9efbbb3648eb399e61f80077e64b95eae9d17083aed05cfc2e148621e36be1f41d373c721a11804fce269c688b0c647d6e1083e336d1f7f90a7a080a83397773cc351531070af5c1a1418f28dce95c01052a314a9ebe39cb9cddb8e7855e58c4a636b7f6250ecad312ede18664c03d92e330935295a35ea3e0306f25ca971300f782ae2f6e79a513732d22ef9b9bc41d17df3352a855cdd19b18f5abd6e6420f4f42f01750a64f6acdb6b46622fafebe3e913c64a1a6a59f980e97deae0dc83c12ccae6b430d7a28f21c3e0e38b32f3d5f1d44927fc34ed5c9ddb5be8eb936dbdcd327b63ea69d86c2da15cb834a18ee51a44f2da7b11d79486942fd04eade92fe5d93342970ca4cc73861b15facf97e9c53c15488c5630b17b9364c58652cfa6de0918327498ba8d6120d3be9139c51a6e9017525772397529ddd4fd1905614fd1cc7f1370a577ad10ec9ea742f9aedc9fee42c3df38f4b35ccb1cf8590eaf770b3f74af21f5119ac238e82e92c83321b06f106530abbbd321c3e1dc948accdc21a586ff37253ad1d0c5bfb51541f876be1b6e4f490046204b9edfe9a9721b9019a495d1efed10d4570f4c75ac56aa862f738b46cfe8899f6d92e862611b35be8931a2460dc646ed332b3046baf48613bbb543f4abda22d3d62a484665ba5bbf8fec1bb199b430a6e96cfad417a1644cc5f7f640004836c60f15a174eb7eb1750a71a141549f393c7d88b8729a33f841f7f8f2bd03dccaaa825f2e29105f6b4c11ac8e06bb3be9dfdecce66294a0be9dbc5f40123644fcac59ed0c968eb62fb14d111e900ad1c038f17d5471ab088f704de7db35753f818f55669a76e621b29d975253d177791e1434644a81b2b8bc4c8e147961b4f1b7f3e225571fecb10906957791b27d35a89e3ce84c91a2dc60aee460d8f41eb7b5e171516ef34d8c7dbbc8122cdeffa51b5a393d2cae7f69826d342d4d81b58ca7ddb0e688a15b39a00ef1aed5db337d1ab87e86f835663a4968c8bf5afd7cf80549f42588d9b8ea04ff3d9eac2b8ffd1155a504230103a68bd8b3c416a10d76cee236442a68393896587bc66c01a5f7f411325578d023d7619a89d0bcbbacae99b925fb72994e1ef4240cddad2294a56bec6d6243b95b04345c215bd48a3aa89786ba39b4d2f5015d8bd038c32a7b0eb02a4eb5a640371d9b4af540eb99a1e26547cc214da21e9538754a802972411a0bf416707b95457d0b77daac9bdf27a82b9aa7992ad1d3815f9a56a746eefa6f7e1913b6e3e859b2cc7797adcae825b7aad17c11e66597042c327a6473489a9664c5ce0ff8b1ecfb691daa0bd50c17f4597826553686bc2ee08eaca8dd6f77c626691699141a698e5b517e02130587ee503c7b5f638cbf32166b0d4ebe9222b6c9d50fb3db9d1ab060c31aabeef52cd51e5cf485eecc741e37a47c4996068f1d4b25f182b9d7bee4bec5cb070d3cea2f9762a41bb8d9ec5896ebcb2b17ca82f29bcce456412d8ed531afda50d259fcb7794216b6a9a873b6c3c4493c0c6d3e6a4f81f3b40dcc745a4e2383c678c472b1d5bf3ff02992bfe893a5bc96824039da1ee3cf8593e7d616d62f6e3c3e2c4e0cc58d5445998cf5b1c91c2468b2571b118709668efbbe72911f1bfa96b97c32f71cd7071f4c729e88631a89b53dd4bae6ef9c4ed082916e267479195599e9871b26b92c6885ded29f990070fddc4d8535088ddc70d6e83f797b6fa2260a92602eb90800000001cb7394f0c90fb5913b2f8d8d24c8f1056920e1facbe643dd49d8983b277da7282a986c28d5468aed9a4730579a20346d35f78b6bd2cacb4b9237fbfb0b7a2314105ff3b074a0e340b904e715e99c501e1435c15eaa262893c2883c90f26d2ff91792d46e4d867b62570e0c1e4739b8ac4fff8f778960de1ae40d4c85c51e1c47040bb2caeaf0c71dbb67c30715b8c14d6921831d7678522eeed29444df421ee206ca3be20d1b5fd2d2baf832f097fef590290eea77f8f3ed00b39841421b61f1c0d01def54bec0348be2216a8dad60838f3ad3595a744edeb6202dbcbd9c73a126a79cbefa43c7db0493103c2aa8fecb5cde1773ad0cdd03f5b0cfb0270642a96a9e14d116e9140501df48cdbf725611b398eb2b9e93f8da49e601099e0b2e880a95525b5f3f2edd74ae9d664a1f2e932493b61634ab53a1e2f3bf56add0a7f09c16853814b03a4212b9a0119420948da26bb171b288a66a2f0a4063754c2910512aa1cead69b94b498b5d4c44ce0a4aaa7855ee1a3b7ca738756a00a435062ccb86a40cc01f666d372f323e087ef5db2bc2d17ed1f72db14c52ca6723ce92ada6ff0c4f498d42d4218a9f799a216facb7377a1532e0755b894bfc0ee99a4072ac54ee5727846631574f348bf650e7d54b0ef3a1b5cc8233e660a2615bb7401f6c23e08ff0ddb488b9d504fc42508449b8fdd70afb387016e8c9206482c334f37d26fa3bdb6063f8147db9363e22c4b43b89ba0f68d06646fc1eb74fec0be4f59a17b274e0db67b2c0398250da219c9caf7e0f6cb1f828b6f89a67cacfd0fe0132bd94261410f8d8d7eb819bc783b8e66a178628", 0xed6}, {&(0x7f0000000640)="bce217fab8bcdfe60af39e03ece24b1da76dc86238db4d8f37ee2b3eaf96df0ab781b3e32be9e2dcef3bb379cc43ac544a987f896e54", 0x36}], 0x3}, 0x4000)

kernel console output (not intermixed with test programs):

3] tap0: linktype set to 280
[  276.001457][T10827] veth0_macvtap: entered promiscuous mode
[  276.024840][T10827] veth1_macvtap: entered promiscuous mode
[  276.138157][T10827] batman_adv: batadv0: Interface activated: batadv_slave_0
[  276.159925][T11066] lo: entered allmulticast mode
[  276.167053][T11066] tunl0: entered allmulticast mode
[  276.183399][T11066] gre0: entered allmulticast mode
[  276.195495][T11066] gretap0: entered allmulticast mode
[  276.210457][T11066] erspan0: entered allmulticast mode
[  276.221688][T11066] ip_vti0: entered allmulticast mode
[  276.234013][T11066] ip6_vti0: entered allmulticast mode
[  276.246389][T11066] sit0: entered allmulticast mode
[  276.282614][T11066] ip6tnl0: entered allmulticast mode
[  276.288258][T11066] ip6gre0: entered allmulticast mode
[  276.313487][T11066] bridge0: entered allmulticast mode
[  276.329224][T11066] vcan0: entered allmulticast mode
[  276.334528][T11066] bond0: entered allmulticast mode
[  276.349048][T11066] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  276.356627][T11066] team0: entered allmulticast mode
[  276.364461][T11066] dummy0: entered allmulticast mode
[  276.370034][T11066] nlmon0: entered allmulticast mode
[  276.375476][T11066] caif0: entered allmulticast mode
[  276.383225][T11066] vxcan0: entered allmulticast mode
[  276.388570][T11066] vxcan1: entered allmulticast mode
[  276.394003][T11066] veth0: entered allmulticast mode
[  276.401755][T11066] veth1: entered allmulticast mode
[  276.406979][T11066] wg0: entered allmulticast mode
[  276.413862][T11066] wg1: entered allmulticast mode
[  276.419160][T11066] wg2: entered allmulticast mode
[  276.424213][T11066] veth0_to_bridge: entered allmulticast mode
[  276.430522][T11066] bridge_slave_0: entered allmulticast mode
[  276.436645][T11066] veth1_to_bridge: entered allmulticast mode
[  276.442828][T11066] bridge_slave_1: entered allmulticast mode
[  276.449453][T11066] veth0_to_bond: entered allmulticast mode
[  276.455522][T11066] bond_slave_0: entered allmulticast mode
[  276.461504][T11066] veth1_to_bond: entered allmulticast mode
[  276.467510][T11066] bond_slave_1: entered allmulticast mode
[  276.473474][T11066] veth0_to_team: entered allmulticast mode
[  276.479564][T11066] team_slave_0: entered allmulticast mode
[  276.485410][T11066] veth1_to_team: entered allmulticast mode
[  276.491705][T11066] team_slave_1: entered allmulticast mode
[  276.497605][T11066] veth0_to_batadv: entered allmulticast mode
[  276.503947][T11066] batadv_slave_0: entered allmulticast mode
[  276.510322][T11066] veth1_to_batadv: entered allmulticast mode
[  276.516460][T11066] batadv_slave_1: entered allmulticast mode
[  276.523690][T11066] xfrm0: entered allmulticast mode
[  276.529568][T11066] veth0_to_hsr: entered allmulticast mode
[  276.535433][T11066] hsr_slave_0: entered allmulticast mode
[  276.541385][T11066] veth1_to_hsr: entered allmulticast mode
[  276.547241][T11066] hsr_slave_1: entered allmulticast mode
[  276.553635][T11066] hsr0: entered allmulticast mode
[  276.558778][T11066] geneve0: entered allmulticast mode
[  276.564386][T11066] geneve1: entered allmulticast mode
[  276.573212][T11066] netdevsim netdevsim3 netdevsim1: entered allmulticast mode
[  276.580835][T11066] netdevsim netdevsim3 netdevsim2: entered allmulticast mode
[  276.588411][T11066] netdevsim netdevsim3 netdevsim3: entered allmulticast mode
[  276.596348][T11066] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  276.608516][T11066] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  276.618044][T11066] syztnl1: entered allmulticast mode
[  276.632871][T11066] ip6erspan0: left promiscuous mode
[  276.638158][T11066] ip6erspan0: entered allmulticast mode
[  276.650962][T11066] vxlan0: entered allmulticast mode
[  276.656780][T11066] veth2: entered allmulticast mode
[  276.662363][T11066] veth3: entered allmulticast mode
[  276.667654][T11066] bridge1: entered allmulticast mode
[  276.673485][T11066] ip6gre1: entered allmulticast mode
[  276.681759][T11066] bridge2: entered allmulticast mode
[  276.690778][T11066] ip6gretap1: entered allmulticast mode
[  276.698578][T11066] bridge3: entered allmulticast mode
[  276.709514][T11066] ��: entered allmulticast mode
[  276.717396][T11066] bridge4: left promiscuous mode
[  276.728288][T11066] bridge5: entered allmulticast mode
[  276.736580][T11066] gretap1: entered allmulticast mode
[  276.746583][T11066] sit1: left promiscuous mode
[  276.752705][T11066] ip6tnl1: entered allmulticast mode
[  276.765840][T11066] bond1: left promiscuous mode
[  276.770991][T11066] bond1: entered allmulticast mode
[  276.782980][T11066] batadv0: left promiscuous mode
[  276.790088][T11066] ip6_vti1: entered allmulticast mode
[  276.795618][T11066] bridge6: entered allmulticast mode
[  276.806459][   T59] lo speed is unknown, defaulting to 1000
[  276.836232][T11072] gretap0: entered promiscuous mode
[  276.863021][T11072] gretap0: left promiscuous mode
[  276.933743][T10827] batman_adv: batadv0: Interface activated: batadv_slave_1
[  277.006298][T10827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  277.017243][T10827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  277.026074][T10827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  277.034894][T10827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  277.150617][T11083] netlink: 'syz.3.1571': attribute type 10 has an invalid length.
[  277.182402][T11083] bond0: entered promiscuous mode
[  277.187952][T11083] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  277.196288][T11083] bond0: left allmulticast mode
[  277.203385][ T8029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.225306][ T8029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.278399][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.294820][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.321171][T11089] bond0: option resend_igmp: invalid value (7540)
[  277.334250][T11089] bond0: option resend_igmp: allowed values 0 - 255
[  277.586946][T11096] netem: incorrect ge model size
[  277.593829][T11096] netem: change failed
[  277.694986][T11103] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.070348][T11118] __nla_validate_parse: 7 callbacks suppressed
[  278.070373][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1585'.
[  278.138349][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.467224][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.620222][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.708037][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.865067][   T12] bridge_slave_1: left allmulticast mode
[  278.877545][   T12] bridge_slave_1: left promiscuous mode
[  278.883462][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.892745][   T12] bridge_slave_0: left allmulticast mode
[  278.898456][   T12] bridge_slave_0: left promiscuous mode
[  278.905075][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.227700][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  279.240661][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  279.249193][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  279.258200][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  279.267226][ T5143] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  279.275022][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  279.707973][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  279.719882][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  279.731508][   T12] bond0 (unregistering): Released all slaves
[  279.751115][T11134] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1588'.
[  280.062292][T11137] lo speed is unknown, defaulting to 1000
[  280.377145][T11137] lo speed is unknown, defaulting to 1000
[  280.490900][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1599'.
[  280.645865][T11173] bond2: entered promiscuous mode
[  280.662741][T11173] bond2: entered allmulticast mode
[  280.673117][T11173] 8021q: adding VLAN 0 to HW filter on device bond2
[  280.783584][T11178] netlink: 'syz.4.1601': attribute type 4 has an invalid length.
[  280.834975][T11181] netlink: 'syz.4.1601': attribute type 4 has an invalid length.
[  280.988099][T11173] bond2 (unregistering): Released all slaves
[  281.037837][   T12] hsr_slave_0: left promiscuous mode
[  281.058084][   T12] hsr_slave_1: left promiscuous mode
[  281.071914][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  281.079708][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  281.089405][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  281.097208][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  281.140490][   T12] veth1_macvtap: left promiscuous mode
[  281.146096][   T12] veth0_macvtap: left promiscuous mode
[  281.165837][   T12] veth1_vlan: left promiscuous mode
[  281.174751][   T12] veth0_vlan: left promiscuous mode
[  281.295845][T11191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1605'.
[  281.373575][ T5848] Bluetooth: hci2: command tx timeout
[  281.866228][   T12] team0 (unregistering): Port device team_slave_1 removed
[  281.918166][   T12] team0 (unregistering): Port device team_slave_0 removed
[  282.385138][T11197] netlink: 'syz.3.1603': attribute type 1 has an invalid length.
[  282.622941][T11137] chnl_net:caif_netlink_parms(): no params data found
[  282.665338][T11210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1608'.
[  282.695127][T11205] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1607'.
[  282.762626][T11216] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1606'.
[  282.799167][T11210] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  282.841113][T11218] nr0: entered promiscuous mode
[  283.009035][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1612'.
[  283.096075][T11137] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.104884][T11137] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.112309][T11137] bridge_slave_0: entered allmulticast mode
[  283.119578][T11137] bridge_slave_0: entered promiscuous mode
[  283.127480][T11137] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.134840][T11137] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.142164][T11137] bridge_slave_1: entered allmulticast mode
[  283.151349][T11137] bridge_slave_1: entered promiscuous mode
[  283.240810][T11137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  283.253047][T11236] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1616'.
[  283.266634][T11137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  283.283656][T11236] veth0_to_batadv: entered promiscuous mode
[  283.292959][T11236] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check.
[  283.384397][T11137] team0: Port device team_slave_0 added
[  283.393662][T11239] openvswitch: netlink: IP tunnel dst address not specified
[  283.402868][T11137] team0: Port device team_slave_1 added
[  283.418060][T11239] netlink: 'syz.4.1617': attribute type 1 has an invalid length.
[  283.449112][ T5848] Bluetooth: hci2: command tx timeout
[  283.468639][T11137] batman_adv: batadv0: Adding interface: batadv_slave_0
[  283.486822][T11137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.519242][T11137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  283.561243][T11137] batman_adv: batadv0: Adding interface: batadv_slave_1
[  283.568273][T11137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.622699][T11137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  283.682892][T11137] hsr_slave_0: entered promiscuous mode
[  283.705857][T11137] hsr_slave_1: entered promiscuous mode
[  283.741424][T11137] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  283.757612][T11137] Cannot create hsr debugfs directory
[  284.045780][T11263] veth0_to_hsr: mtu less than device minimum
[  284.083383][T11263] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1626'.
[  284.144732][T11273] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1628'.
[  284.255628][T11273] lo speed is unknown, defaulting to 1000
[  284.541736][T11137] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  284.585883][T11137] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  284.622984][T11137] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  284.675607][T11137] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  284.762081][T11273] lo speed is unknown, defaulting to 1000
[  284.954335][T11137] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.004629][T11137] 8021q: adding VLAN 0 to HW filter on device team0
[  285.045170][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.052456][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.121927][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.129189][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.529220][ T5848] Bluetooth: hci2: command tx timeout
[  285.635780][T11137] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.731855][T11312] xt_TCPMSS: Only works on TCP SYN packets
[  285.771694][T11312] netlink: 'syz.2.1640': attribute type 1 has an invalid length.
[  285.788748][T11137] veth0_vlan: entered promiscuous mode
[  285.844747][T11312] 8021q: adding VLAN 0 to HW filter on device bond4
[  285.866846][T11316] bond4: (slave bridge5): making interface the new active one
[  285.875718][T11316] bond4: (slave bridge5): Enslaving as an active interface with an up link
[  285.936025][T11137] veth1_vlan: entered promiscuous mode
[  285.975539][T11137] veth0_macvtap: entered promiscuous mode
[  286.017507][T11137] veth1_macvtap: entered promiscuous mode
[  286.042846][T11137] batman_adv: batadv0: Interface activated: batadv_slave_0
[  286.077343][T11137] batman_adv: batadv0: Interface activated: batadv_slave_1
[  286.112766][T11137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  286.155475][T11137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  286.178907][T11137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  286.187678][T11137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  286.387950][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  286.432396][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  286.557051][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  286.573722][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  286.927202][T11354] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1656'.
[  287.094862][T11362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1660'.
[  287.675802][T11390] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1670'.
[  287.729583][T11390] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1670'.
[  287.991273][T11399] netlink: 'syz.0.1673': attribute type 1 has an invalid length.
[  287.999577][T11399] netlink: 'syz.0.1673': attribute type 4 has an invalid length.
[  288.007678][T11399] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1673'.
[  288.119768][   T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.865745][   T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.928177][   T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.270630][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  289.289354][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  289.300540][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  289.311863][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  289.323742][ T5143] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  289.336100][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  289.351088][   T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.416751][T11422] lo speed is unknown, defaulting to 1000
[  289.470305][T11435] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1683'.
[  289.523879][T11422] lo speed is unknown, defaulting to 1000
[  289.660701][   T53] bridge_slave_1: left allmulticast mode
[  289.666433][   T53] bridge_slave_1: left promiscuous mode
[  289.676132][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.693397][   T53] bridge_slave_0: left allmulticast mode
[  289.701141][   T53] bridge_slave_0: left promiscuous mode
[  289.707107][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.728202][T11439] netlink: 'syz.2.1684': attribute type 2 has an invalid length.
[  289.736917][T11439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1684'.
[  290.000248][T11443] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  290.116174][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  290.136568][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  290.148599][   T53] bond0 (unregistering): Released all slaves
[  290.324551][T11449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1687'.
[  290.564729][T11458] netlink: 'syz.4.1688': attribute type 16 has an invalid length.
[  290.589341][T11458] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1688'.
[  290.606621][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1688'.
[  290.876182][T11475] SET target dimension over the limit!
[  290.892998][    T9] hid-generic 0005:0B57:0040.0002: item fetching failed at offset 0/1
[  290.923498][T11422] chnl_net:caif_netlink_parms(): no params data found
[  290.949392][    T9] hid-generic 0005:0B57:0040.0002: probe with driver hid-generic failed with error -22
[  291.449662][ T5143] Bluetooth: hci2: command tx timeout
[  291.912623][   T53] hsr_slave_0: left promiscuous mode
[  291.926378][   T53] hsr_slave_1: left promiscuous mode
[  291.970059][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  291.978313][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  291.987146][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  291.996370][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  292.025870][   T53] veth1_macvtap: left promiscuous mode
[  292.032135][   T53] veth0_macvtap: left promiscuous mode
[  292.037941][   T53] veth1_vlan: left promiscuous mode
[  292.047327][   T53] veth0_vlan: left promiscuous mode
[  292.574509][   T53] team0 (unregistering): Port device team_slave_1 removed
[  292.627304][   T53] team0 (unregistering): Port device team_slave_0 removed
[  293.276679][T11422] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.299097][T11422] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.306413][T11422] bridge_slave_0: entered allmulticast mode
[  293.317373][T11422] bridge_slave_0: entered promiscuous mode
[  293.355004][T11422] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.362321][T11422] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.369800][T11422] bridge_slave_1: entered allmulticast mode
[  293.377001][T11422] bridge_slave_1: entered promiscuous mode
[  293.447342][T11422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  293.511952][T11422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  293.529071][ T5143] Bluetooth: hci2: command tx timeout
[  293.647974][T11422] team0: Port device team_slave_0 added
[  293.676615][T11422] team0: Port device team_slave_1 added
[  293.774110][T11422] batman_adv: batadv0: Adding interface: batadv_slave_0
[  293.788781][T11422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.841872][T11422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  293.853914][T11523] atomic_op ffff88807bb97198 conn xmit_atomic 0000000000000000
[  293.867429][T11422] batman_adv: batadv0: Adding interface: batadv_slave_1
[  293.882672][T11422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.912896][T11422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  293.934426][T11523] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  294.015366][T11422] hsr_slave_0: entered promiscuous mode
[  294.031395][T11422] hsr_slave_1: entered promiscuous mode
[  294.044047][T11422] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  294.058659][T11422] Cannot create hsr debugfs directory
[  294.146421][T11527] sctp: [Deprecated]: syz.3.1710 (pid 11527) Use of struct sctp_assoc_value in delayed_ack socket option.
[  294.146421][T11527] Use struct sctp_sack_info instead
[  294.383989][T11535] SET target dimension over the limit!
[  294.433680][T11538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1712'.
[  294.750738][T11422] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  294.763871][T11546] sctp: [Deprecated]: syz.3.1715 (pid 11546) Use of struct sctp_assoc_value in delayed_ack socket option.
[  294.763871][T11546] Use struct sctp_sack_info instead
[  294.789229][T11422] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  294.805052][T11422] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  294.835157][T11422] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  294.944266][T11548] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.980382][    C1] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:ffff:fffd with DS=0xb
[  295.137891][T11558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1720'.
[  295.140817][T11548] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.184424][T11558] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  295.273293][T11548] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.362125][T11548] tipc: Resetting bearer <eth:netdevsim0>
[  295.433662][T11548] tipc: Disabling bearer <eth:netdevsim0>
[  295.442878][T11548] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.496642][T11422] 8021q: adding VLAN 0 to HW filter on device bond0
[  295.533029][T11422] 8021q: adding VLAN 0 to HW filter on device team0
[  295.573184][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.580540][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  295.610268][ T5143] Bluetooth: hci2: command tx timeout
[  295.655418][T11548] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  295.735667][T11548] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  295.775103][T11548] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  295.794958][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.802186][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.824294][T11548] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.906056][T11422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  296.009685][ T5143] Bluetooth: hci0: command tx timeout
[  296.064661][T11581] netlink: 428 bytes leftover after parsing attributes in process `syz.4.1729'.
[  296.114691][T11581] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1729'.
[  296.151830][T11581] netlink: 'syz.4.1729': attribute type 2 has an invalid length.
[  296.266328][T11422] 8021q: adding VLAN 0 to HW filter on device batadv0
[  296.348454][T11422] veth0_vlan: entered promiscuous mode
[  296.376406][T11422] veth1_vlan: entered promiscuous mode
[  296.465713][T11422] veth0_macvtap: entered promiscuous mode
[  296.486012][T11422] veth1_macvtap: entered promiscuous mode
[  296.522584][T11422] batman_adv: batadv0: Interface activated: batadv_slave_0
[  296.580147][T11599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1733'.
[  296.581140][T11422] batman_adv: batadv0: Interface activated: batadv_slave_1
[  296.642801][T11422] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  296.652318][T11422] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  296.669079][T11422] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  296.678195][T11422] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  296.726733][T11602] ax25_connect(): syz.2.1735 uses autobind, please contact jreuter@yaina.de
[  296.818489][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.837260][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.919807][T11602] lo speed is unknown, defaulting to 1000
[  296.928327][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.947407][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.003967][T11610] netlink: 'syz.3.1737': attribute type 10 has an invalid length.
[  297.015600][T11610] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  297.039312][T11610] bond0: (slave netdevsim0): Releasing backup interface
[  297.067191][T11611] netlink: 'syz.3.1737': attribute type 10 has an invalid length.
[  297.089846][T11610] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  297.111383][T11610] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  297.153293][T11610] team0: Port device netdevsim0 added
[  297.221513][T11611] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  297.250630][T11611] team0: Port device netdevsim0 removed
[  297.259518][T11611] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  297.267395][T11611] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  297.323512][T11602] lo speed is unknown, defaulting to 1000
[  297.431742][T11617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1740'.
[  297.903289][   T83] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.488179][   T83] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.199370][   T83] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.242543][T11648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1753'.
[  299.246854][T11646] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  299.265795][T11650] netlink: 'syz.2.1754': attribute type 1 has an invalid length.
[  299.270420][T11646] macvlan0: entered allmulticast mode
[  299.273890][T11650] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1754'.
[  299.310443][T11646] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  299.327846][T11646] mac80211_hwsim hwsim8 wlan0: left promiscuous mode
[  299.418298][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  299.427946][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  299.437369][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  299.445960][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  299.455265][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  299.484618][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  299.507487][   T83] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.543774][T11648] lo speed is unknown, defaulting to 1000
[  299.653400][T11656] lo speed is unknown, defaulting to 1000
[  299.733333][T11660] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1756'.
[  299.775223][T11659] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.891366][T11659] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.971228][T11659] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.039587][T11659] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.075816][   T83] bridge_slave_1: left allmulticast mode
[  300.089296][   T83] bridge_slave_1: left promiscuous mode
[  300.102546][   T83] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.112447][   T83] bridge_slave_0: left allmulticast mode
[  300.118614][   T83] bridge_slave_0: left promiscuous mode
[  300.128259][   T83] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.519660][   T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  300.534303][   T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  300.544895][   T83] bond0 (unregistering): Released all slaves
[  300.556250][T11674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1761'.
[  300.569290][T11648] lo speed is unknown, defaulting to 1000
[  300.603662][T11659] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  300.625523][T11659] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  300.656492][T11659] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  300.748632][T11659] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  300.911029][T11656] lo speed is unknown, defaulting to 1000
[  301.272211][T11689] geneve2: entered promiscuous mode
[  301.297993][T11689] geneve2: entered allmulticast mode
[  301.321285][T11691] netlink: 'syz.0.1766': attribute type 4 has an invalid length.
[  301.346649][T11692] netlink: 'syz.0.1766': attribute type 4 has an invalid length.
[  301.474093][T11696] sctp: [Deprecated]: syz.2.1767 (pid 11696) Use of struct sctp_assoc_value in delayed_ack socket option.
[  301.474093][T11696] Use struct sctp_sack_info instead
[  301.529861][ T5848] Bluetooth: hci2: command tx timeout
[  301.550155][T11689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1766'.
[  301.569505][T11689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1766'.
[  301.741422][T11696] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1767'.
[  301.810730][   T83] hsr_slave_0: left promiscuous mode
[  301.836199][   T83] hsr_slave_1: left promiscuous mode
[  301.845268][   T83] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  301.846192][    C0] IPv6: addrconf: prefix option has invalid lifetime
[  301.861644][   T83] batman_adv: batadv0: Removing interface: batadv_slave_0
[  301.929385][   T83] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  301.936881][   T83] batman_adv: batadv0: Removing interface: batadv_slave_1
[  301.940058][T11710] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1771'.
[  302.013225][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1771'.
[  302.037140][   T83] veth1_macvtap: left promiscuous mode
[  302.047419][   T83] veth0_macvtap: left promiscuous mode
[  302.059086][   T83] veth1_vlan: left promiscuous mode
[  302.064485][   T83] veth0_vlan: left promiscuous mode
[  302.574511][   T83] team0 (unregistering): Port device team_slave_1 removed
[  302.623253][   T83] team0 (unregistering): Port device team_slave_0 removed
[  303.276513][T11656] chnl_net:caif_netlink_parms(): no params data found
[  303.330459][T11733] siw: device registration error -23
[  303.452304][T11738] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1779'.
[  303.580043][T11656] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.602182][T11656] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.610482][ T5848] Bluetooth: hci2: command tx timeout
[  303.625070][T11656] bridge_slave_0: entered allmulticast mode
[  303.640206][T11656] bridge_slave_0: entered promiscuous mode
[  303.663096][T11656] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.682679][T11656] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.696351][T11656] bridge_slave_1: entered allmulticast mode
[  303.715016][T11656] bridge_slave_1: entered promiscuous mode
[  303.786895][T11656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.817872][T11656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  303.863646][T11656] team0: Port device team_slave_0 added
[  303.873957][T11656] team0: Port device team_slave_1 added
[  303.924101][T11656] batman_adv: batadv0: Adding interface: batadv_slave_0
[  303.932027][T11656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  303.958574][T11656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  303.977234][T11656] batman_adv: batadv0: Adding interface: batadv_slave_1
[  303.984840][T11656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.018995][T11656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  304.181248][T11656] hsr_slave_0: entered promiscuous mode
[  304.216341][T11656] hsr_slave_1: entered promiscuous mode
[  304.233049][T11656] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  304.252629][T11656] Cannot create hsr debugfs directory
[  304.836801][T11774] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1792'.
[  304.862259][T11656] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  304.884020][T11656] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  304.900022][T11776] bond0: option resend_igmp: invalid value (7540)
[  304.907412][T11776] bond0: option resend_igmp: allowed values 0 - 255
[  304.924778][T11774] gretap0: entered promiscuous mode
[  304.933766][T11774] gretap0: left promiscuous mode
[  304.979453][T11656] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  304.990496][T11656] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  305.002534][T11780] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  305.137406][T11656] 8021q: adding VLAN 0 to HW filter on device bond0
[  305.182760][T11783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1796'.
[  305.213950][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1796'.
[  305.226693][T11656] 8021q: adding VLAN 0 to HW filter on device team0
[  305.290865][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.298064][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[  305.344834][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.352029][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[  305.386715][T11789] netlink: 'syz.3.1799': attribute type 1 has an invalid length.
[  305.532792][T11800] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  305.548269][T11801] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 3, id = 0
[  305.565594][T11800] __nla_validate_parse: 1 callbacks suppressed
[  305.565615][T11800] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.1803'.
[  305.667450][T11804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1805'.
[  305.685551][T11804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1805'.
[  305.694833][ T5848] Bluetooth: hci2: command tx timeout
[  305.787453][T11656] 8021q: adding VLAN 0 to HW filter on device batadv0
[  305.818329][T11809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1806'.
[  305.875533][T11656] veth0_vlan: entered promiscuous mode
[  305.895732][T11656] veth1_vlan: entered promiscuous mode
[  305.901999][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1806'.
[  305.913570][T11809] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1806'.
[  305.940601][T11813] sit1: entered promiscuous mode
[  305.945950][T11813] sit1: entered allmulticast mode
[  305.996109][T11656] veth0_macvtap: entered promiscuous mode
[  306.006705][T11656] veth1_macvtap: entered promiscuous mode
[  306.035078][T11656] batman_adv: batadv0: Interface activated: batadv_slave_0
[  306.055626][T11656] batman_adv: batadv0: Interface activated: batadv_slave_1
[  306.077949][T11656] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  306.088641][T11656] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  306.103337][T11656] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.116639][T11656] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.233925][T11820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[  306.267291][T11820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[  306.282117][T11823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1809'.
[  306.305216][T11823] IPVS: stopping backup sync thread 10008 ...
[  306.312114][T11820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[  306.337016][T11820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[  306.358315][T11820] geneve2: entered promiscuous mode
[  306.412484][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.431179][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.485888][T11820] netlink: 'syz.3.1809': attribute type 1 has an invalid length.
[  306.487130][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.520142][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.547989][T11820] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1809'.
[  306.697475][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1813'.
[  307.031045][T11853] netlink: 'syz.4.1818': attribute type 1 has an invalid length.
[  307.209181][T11856] can: request_module (can-proto-0) failed.
[  307.224916][T11856] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1820'.
[  307.235736][T11856] netlink: 'syz.3.1820': attribute type 2 has an invalid length.
[  307.346742][T11867] batadv_slave_1: entered promiscuous mode
[  307.356267][T11866] batadv_slave_1: left promiscuous mode
[  307.749925][ T3462] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.706302][ T3462] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.903212][T11883] bond0: entered promiscuous mode
[  308.908769][T11883] bond_slave_0: entered promiscuous mode
[  308.929219][T11883] bond_slave_1: entered promiscuous mode
[  308.936190][T11883] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  308.996774][T11883] bond0: left promiscuous mode
[  309.001801][T11883] bond_slave_0: left promiscuous mode
[  309.016586][T11883] bond_slave_1: left promiscuous mode
[  309.111413][ T3462] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.152916][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  309.181223][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  309.206997][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  309.229602][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  309.244648][ T5143] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  309.252250][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  309.331373][T11897] FAULT_INJECTION: forcing a failure.
[  309.331373][T11897] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  309.377870][T11897] CPU: 0 UID: 0 PID: 11897 Comm: syz.3.1834 Not tainted 6.13.0-rc2-syzkaller-00389-g2c27c7663390 #0
[  309.388712][T11897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  309.398829][T11897] Call Trace:
[  309.402136][T11897]  <TASK>
[  309.405089][T11897]  dump_stack_lvl+0x241/0x360
[  309.409799][T11897]  ? __pfx_dump_stack_lvl+0x10/0x10
[  309.415051][T11897]  ? __pfx__printk+0x10/0x10
[  309.419682][T11897]  should_fail_ex+0x3b0/0x4e0
[  309.424408][T11897]  prepare_alloc_pages+0x1da/0x5b0
[  309.429633][T11897]  __alloc_pages_noprof+0x16f/0x710
[  309.434939][T11897]  ? is_bpf_text_address+0x285/0x2a0
[  309.440333][T11897]  ? __pfx___alloc_pages_noprof+0x10/0x10
[  309.446241][T11897]  ? register_lock_class+0x102/0x980
[  309.451552][T11897]  ? __pfx_register_lock_class+0x10/0x10
[  309.457205][T11897]  ? mark_lock+0x9a/0x360
[  309.461557][T11897]  alloc_pages_mpol_noprof+0x3e8/0x680
[  309.467044][T11897]  ? __pfx_alloc_pages_mpol_noprof+0x10/0x10
[  309.473063][T11897]  ? alloc_pages_noprof+0xef/0x170
[  309.478198][T11897]  pte_alloc_one+0x8f/0x510
[  309.482730][T11897]  ? __pfx_pte_alloc_one+0x10/0x10
[  309.487874][T11897]  ? __pfx_lock_release+0x10/0x10
[  309.492925][T11897]  handle_pte_fault+0x2913/0x5ed0
[  309.497973][T11897]  ? up_write+0x1a9/0x590
[  309.502334][T11897]  ? __pfx_validate_chain+0x10/0x10
[  309.507573][T11897]  ? __pfx_handle_pte_fault+0x10/0x10
[  309.513068][T11897]  ? __lock_acquire+0x1397/0x2100
[  309.518162][T11897]  ? __thp_vma_allowable_orders+0x8ff/0x9c0
[  309.524169][T11897]  ? __pfx_lock_release+0x10/0x10
[  309.529261][T11897]  handle_mm_fault+0x1106/0x1bb0
[  309.534226][T11897]  ? mt_find+0x2a9/0x920
[  309.538496][T11897]  ? __pfx_handle_mm_fault+0x10/0x10
[  309.543812][T11897]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  309.550159][T11897]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  309.555467][T11897]  exc_page_fault+0x2b9/0x8b0
[  309.560169][T11897]  asm_exc_page_fault+0x26/0x30
[  309.565037][T11897] RIP: 0010:rep_movs_alternative+0x4a/0x70
[  309.570861][T11897] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1
[  309.590485][T11897] RSP: 0018:ffffc90003c2fa70 EFLAGS: 00050202
[  309.596588][T11897] RAX: 0000000000000001 RBX: 0000000020000480 RCX: 0000000000000060
[  309.604581][T11897] RDX: 0000000000000001 RSI: 0000000020000480 RDI: ffffc90003c2fb70
[  309.612574][T11897] RBP: ffffc90003c2fd10 R08: ffffc90003c2fbcf R09: 1ffff92000785f79
[  309.620563][T11897] R10: dffffc0000000000 R11: fffff52000785f7a R12: 0000000020000480
[  309.628553][T11897] R13: ffffc90003c2fb70 R14: ffffc90003c2fb70 R15: 0000000000000060
[  309.636563][T11897]  _copy_from_user+0x7f/0xc0
[  309.641183][T11897]  do_ipt_set_ctl+0x731/0x1250
[  309.645969][T11897]  ? __pfx___mutex_trylock_common+0x10/0x10
[  309.651883][T11897]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[  309.657098][T11897]  ? __pfx_lock_release+0x10/0x10
[  309.662134][T11897]  ? rcu_is_watching+0x15/0xb0
[  309.666917][T11897]  ? trace_contention_end+0x3c/0x120
[  309.672231][T11897]  ? __mutex_unlock_slowpath+0x21e/0x790
[  309.677886][T11897]  ? __pfx___mutex_lock+0x10/0x10
[  309.682932][T11897]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  309.688932][T11897]  ? aa_sk_perm+0x96d/0xab0
[  309.693547][T11897]  ? __pfx_aa_sk_perm+0x10/0x10
[  309.698420][T11897]  nf_setsockopt+0x295/0x2c0
[  309.703026][T11897]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  309.708940][T11897]  do_sock_setsockopt+0x3af/0x720
[  309.713987][T11897]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  309.719566][T11897]  ? __fget_files+0x395/0x410
[  309.724270][T11897]  ? __fget_files+0x2a/0x410
[  309.728898][T11897]  __x64_sys_setsockopt+0x1ee/0x280
[  309.734131][T11897]  do_syscall_64+0xf3/0x230
[  309.738644][T11897]  ? clear_bhb_loop+0x35/0x90
[  309.743336][T11897]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.749239][T11897] RIP: 0033:0x7efffc585d19
[  309.753679][T11897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  309.773305][T11897] RSP: 002b:00007efffd2e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  309.781738][T11897] RAX: ffffffffffffffda RBX: 00007efffc775fa0 RCX: 00007efffc585d19
[  309.789737][T11897] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003
[  309.797728][T11897] RBP: 00007efffd2e4090 R08: 0000000000000348 R09: 0000000000000000
[  309.805716][T11897] R10: 0000000020000480 R11: 0000000000000246 R12: 0000000000000001
[  309.813732][T11897] R13: 0000000000000000 R14: 00007efffc775fa0 R15: 00007fff252a8ae8
[  309.821764][T11897]  </TASK>
[  309.925833][ T3462] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.973689][T11892] lo speed is unknown, defaulting to 1000
[  310.079395][T11911] netlink: 'syz.4.1839': attribute type 10 has an invalid length.
[  310.083257][T11892] lo speed is unknown, defaulting to 1000
[  310.126382][T11908] bond0: entered promiscuous mode
[  310.152575][T11908] bond_slave_0: entered promiscuous mode
[  310.179192][T11908] bond_slave_1: entered promiscuous mode
[  310.192274][T11916] netlink: 'syz.4.1839': attribute type 9 has an invalid length.
[  310.200338][T11916] netlink: 'syz.4.1839': attribute type 7 has an invalid length.
[  310.208295][T11916] netlink: 'syz.4.1839': attribute type 8 has an invalid length.
[  310.247140][T11918] hsr_slave_0: left promiscuous mode
[  310.264000][T11918] hsr_slave_1: left promiscuous mode
[  310.302313][T11908] xt_hashlimit: size too large, truncated to 1048576
[  310.309759][T11908] xt_hashlimit: max too large, truncated to 1048576
[  310.318234][T11908] xt_hashlimit: overflow, try lower: 0/0
[  310.513398][T11924] tipc: Started in network mode
[  310.518587][T11924] tipc: Node identity 06d997549bc4, cluster identity 4711
[  310.533077][T11924] tipc: Enabled bearer <eth:netdevsim0>, priority 3
[  310.552280][ T3462] bridge_slave_1: left allmulticast mode
[  310.558000][ T3462] bridge_slave_1: left promiscuous mode
[  310.565179][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.578190][ T3462] bridge_slave_0: left allmulticast mode
[  310.588696][ T3462] bridge_slave_0: left promiscuous mode
[  310.597874][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.968430][T11938] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2
[  311.054314][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  311.067049][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  311.078784][ T3462] bond0 (unregistering): Released all slaves
[  311.096522][T11926] bond0: (slave vlan0): Opening slave failed
[  311.099462][T11943] __nla_validate_parse: 10 callbacks suppressed
[  311.099489][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1847'.
[  311.123426][T11929] veth0_to_bridge: entered promiscuous mode
[  311.135261][T11930] batadv_slave_1: entered promiscuous mode
[  311.212431][T11935] batadv_slave_1 (unregistering): left promiscuous mode
[  311.295059][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1847'.
[  311.332989][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1849'.
[  311.370747][ T5143] Bluetooth: hci2: command tx timeout
[  311.467828][T11928] veth0_to_bridge: left promiscuous mode
[  311.480299][T11892] chnl_net:caif_netlink_parms(): no params data found
[  311.658694][   T59] tipc: Node number set to 2635962196
[  311.809419][T11892] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.819997][T11892] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.827306][T11892] bridge_slave_0: entered allmulticast mode
[  311.840880][T11892] bridge_slave_0: entered promiscuous mode
[  311.864563][T11892] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.879263][T11892] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.886571][T11892] bridge_slave_1: entered allmulticast mode
[  311.916104][T11892] bridge_slave_1: entered promiscuous mode
[  311.991952][T11892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  312.055702][T11892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  312.089872][T11980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1861'.
[  312.227852][T11892] team0: Port device team_slave_0 added
[  312.326373][T11892] team0: Port device team_slave_1 added
[  312.366309][ T3462] hsr_slave_0: left promiscuous mode
[  312.373315][ T3462] hsr_slave_1: left promiscuous mode
[  312.380077][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  312.387610][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0
[  312.397803][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  312.414540][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1
[  312.467387][ T3462] veth1_macvtap: left promiscuous mode
[  312.471346][T11992] netlink: 'syz.2.1865': attribute type 1 has an invalid length.
[  312.475112][ T3462] veth0_macvtap: left promiscuous mode
[  312.486952][ T3462] veth1_vlan: left promiscuous mode
[  312.493736][ T3462] veth0_vlan: left promiscuous mode
[  313.228024][ T3462] team0 (unregistering): Port device team_slave_1 removed
[  313.276336][ T3462] team0 (unregistering): Port device team_slave_0 removed
[  313.452571][ T5143] Bluetooth: hci2: command tx timeout
[  313.786678][T11999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1868'.
[  313.800593][T11892] batman_adv: batadv0: Adding interface: batadv_slave_0
[  313.807599][T11892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.841172][T11892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  313.869001][T12001] lo speed is unknown, defaulting to 1000
[  313.878592][T12005] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  313.918580][T11892] batman_adv: batadv0: Adding interface: batadv_slave_1
[  313.927056][T11892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.985479][T11892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  314.051215][T12011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1872'.
[  314.126863][T11892] hsr_slave_0: entered promiscuous mode
[  314.136159][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1873'.
[  314.156943][T11892] hsr_slave_1: entered promiscuous mode
[  314.178162][T11892] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  314.196305][T11892] Cannot create hsr debugfs directory
[  314.369373][T12001] lo speed is unknown, defaulting to 1000
[  314.905101][T12029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1878'.
[  315.118443][T11892] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  315.160317][T11892] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  315.179937][T11892] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  315.191558][T11892] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  315.380412][T11892] 8021q: adding VLAN 0 to HW filter on device bond0
[  315.436712][T11892] 8021q: adding VLAN 0 to HW filter on device team0
[  315.475578][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.483045][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[  315.513403][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.520668][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state
[  315.539210][ T5143] Bluetooth: hci2: command tx timeout
[  315.634271][T12046] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1883'.
[  315.676890][T12048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1885'.
[  316.183026][T12071] dvmrp8: entered allmulticast mode
[  316.227875][T11892] 8021q: adding VLAN 0 to HW filter on device batadv0
[  316.350518][T11892] veth0_vlan: entered promiscuous mode
[  316.368751][T11892] veth1_vlan: entered promiscuous mode
[  316.425133][T11892] veth0_macvtap: entered promiscuous mode
[  316.448473][T11892] veth1_macvtap: entered promiscuous mode
[  316.483829][T11892] batman_adv: batadv0: Interface activated: batadv_slave_0
[  316.508730][T11892] batman_adv: batadv0: Interface activated: batadv_slave_1
[  316.535913][T11892] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  316.545752][T11892] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  316.556230][T11892] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  316.566646][T11892] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  316.682321][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.700262][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.751578][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.774375][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.900844][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1897'.
[  317.059437][T12096] bond0: option resend_igmp: invalid value (7540)
[  317.079524][T12096] bond0: option resend_igmp: allowed values 0 - 255
[  317.263342][T12100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1902'.
[  317.709655][T12117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1910'.
[  317.890407][T12120] nftables ruleset with unbound set
[  318.200298][T12114] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  318.502666][   T83] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.530643][T12141] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1918'.
[  319.540069][T12141] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1918'.
[  319.554337][T12141] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1918'.
[  319.571915][T12141] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1918'.
[  319.596009][T12147] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.1918'.
[  319.646608][T12147] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  319.709854][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  319.741202][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  319.787045][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  319.825493][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  319.834932][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  319.847481][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  319.884915][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'.
[  319.895633][T12149] lo speed is unknown, defaulting to 1000
[  320.002540][T12149] lo speed is unknown, defaulting to 1000
[  320.194019][T12168] xt_l2tp: invalid flags combination: c
[  320.331850][T12149] chnl_net:caif_netlink_parms(): no params data found
[  320.558604][T12149] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.582279][T12149] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.589902][T12149] bridge_slave_0: entered allmulticast mode
[  320.597064][T12149] bridge_slave_0: entered promiscuous mode
[  320.605622][T12149] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.619270][T12149] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.627044][T12149] bridge_slave_1: entered allmulticast mode
[  320.636219][T12149] bridge_slave_1: entered promiscuous mode
[  320.674771][T12186] bond0: (slave team0): Releasing backup interface
[  320.755418][T12186] bond0: (slave bond_slave_0): Releasing backup interface
[  320.787768][T12186] bond0: (slave bond_slave_1): Releasing backup interface
[  320.788111][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1931'.
[  320.824793][T12186] infiniband syz1: set down
[  320.832529][T12186] team0: Port device team_slave_0 removed
[  320.857524][T12186] team0: Port device team_slave_1 removed
[  320.874518][T12186] bond1: (slave batadv1): Releasing active interface
[  320.953662][   T83] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.002470][T12192] bridge_slave_1: left allmulticast mode
[  321.013231][T12192] bridge_slave_1: left promiscuous mode
[  321.024577][T12192] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.051893][T12192] bridge_slave_0: left allmulticast mode
[  321.058018][T12192] bridge_slave_0: left promiscuous mode
[  321.068198][T12192] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.164677][T12149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  321.213492][   T83] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.244290][T12149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  321.408375][   T83] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.443292][T12149] team0: Port device team_slave_0 added
[  321.455205][T12149] team0: Port device team_slave_1 added
[  321.561144][T12149] batman_adv: batadv0: Adding interface: batadv_slave_0
[  321.591430][T12149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.677396][T12149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  321.792208][T12149] batman_adv: batadv0: Adding interface: batadv_slave_1
[  321.809474][T12149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.883695][T12149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  321.930468][ T5848] Bluetooth: hci2: command tx timeout
[  322.057897][T12227] syzkaller1: entered promiscuous mode
[  322.063609][T12227] syzkaller1: entered allmulticast mode
[  322.157203][   T83] bridge_slave_1: left allmulticast mode
[  322.173309][   T83] bridge_slave_1: left promiscuous mode
[  322.193512][   T83] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.261494][   T83] bridge_slave_0: left allmulticast mode
[  322.267341][   T83] bridge_slave_0: left promiscuous mode
[  322.278288][   T83] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.362680][T12249] netlink: 'syz.3.1948': attribute type 4 has an invalid length.
[  322.437611][T12252] netlink: 'syz.3.1948': attribute type 4 has an invalid length.
[  322.823680][   T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  322.837441][   T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  322.852368][   T83] bond0 (unregistering): Released all slaves
[  322.902912][T12149] hsr_slave_0: entered promiscuous mode
[  322.944557][T12149] hsr_slave_1: entered promiscuous mode
[  322.963563][T12149] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  322.971721][T12149] Cannot create hsr debugfs directory
[  323.017930][   T47] lo speed is unknown, defaulting to 1000
[  323.183628][T12267] netlink: 'syz.4.1955': attribute type 14 has an invalid length.
[  323.200006][T12267] __nla_validate_parse: 2 callbacks suppressed
[  323.200026][T12267] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1955'.
[  323.236131][T12265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1957'.
[  323.817242][T12290] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1967'.
[  323.834082][T12290] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  324.009068][ T5848] Bluetooth: hci2: command tx timeout
[  324.160460][   T83] hsr_slave_0: left promiscuous mode
[  324.167968][   T83] hsr_slave_1: left promiscuous mode
[  324.183514][   T83] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  324.203627][   T83] batman_adv: batadv0: Removing interface: batadv_slave_0
[  324.215131][   T83] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  324.227684][   T83] batman_adv: batadv0: Removing interface: batadv_slave_1
[  324.272341][   T83] veth1_macvtap: left promiscuous mode
[  324.278314][   T83] veth0_macvtap: left promiscuous mode
[  324.291120][   T83] veth1_vlan: left promiscuous mode
[  324.296541][   T83] veth0_vlan: left promiscuous mode
[  324.704659][T12317] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  325.097098][   T83] team0 (unregistering): Port device team_slave_1 removed
[  325.167973][   T83] team0 (unregistering): Port device team_slave_0 removed
[  325.774845][T12330] veth0: entered promiscuous mode
[  325.962354][T12149] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  326.022773][T12149] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  326.074626][T12149] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  326.089103][ T5848] Bluetooth: hci2: command tx timeout
[  326.101511][T12149] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  326.232899][T12346] lo speed is unknown, defaulting to 1000
[  326.302614][T12149] 8021q: adding VLAN 0 to HW filter on device bond0
[  326.321441][T12149] 8021q: adding VLAN 0 to HW filter on device team0
[  326.389769][T12134] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.397002][T12134] bridge0: port 1(bridge_slave_0) entered forwarding state
[  326.423648][T12134] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.430895][T12134] bridge0: port 2(bridge_slave_1) entered forwarding state
[  326.695234][T12363] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1986'.
[  326.727888][T12365] FAULT_INJECTION: forcing a failure.
[  326.727888][T12365] name failslab, interval 1, probability 0, space 0, times 0
[  326.752188][T12365] CPU: 1 UID: 0 PID: 12365 Comm: syz.3.1987 Not tainted 6.13.0-rc2-syzkaller-00389-g2c27c7663390 #0
[  326.763044][T12365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  326.773156][T12365] Call Trace:
[  326.776483][T12365]  <TASK>
[  326.779460][T12365]  dump_stack_lvl+0x241/0x360
[  326.784203][T12365]  ? __pfx_dump_stack_lvl+0x10/0x10
[  326.789469][T12365]  ? __pfx__printk+0x10/0x10
[  326.794159][T12365]  ? kmem_cache_alloc_noprof+0x48/0x380
[  326.799773][T12365]  ? __pfx___might_resched+0x10/0x10
[  326.805120][T12365]  should_fail_ex+0x3b0/0x4e0
[  326.809868][T12365]  should_failslab+0xac/0x100
[  326.814621][T12365]  ? ptlock_alloc+0x20/0x70
[  326.819234][T12365]  kmem_cache_alloc_noprof+0x70/0x380
[  326.824770][T12365]  ptlock_alloc+0x20/0x70
[  326.829154][T12365]  pte_alloc_one+0xd3/0x510
[  326.833718][T12365]  ? __pfx_pte_alloc_one+0x10/0x10
[  326.838888][T12365]  ? __pfx_lock_release+0x10/0x10
[  326.840876][T12346] lo speed is unknown, defaulting to 1000
[  326.843950][T12365]  handle_pte_fault+0x2913/0x5ed0
[  326.854781][T12365]  ? up_write+0x1a9/0x590
[  326.859177][T12365]  ? __pfx_validate_chain+0x10/0x10
[  326.864452][T12365]  ? __pfx_handle_pte_fault+0x10/0x10
[  326.869892][T12365]  ? __lock_acquire+0x1397/0x2100
[  326.875010][T12365]  ? __thp_vma_allowable_orders+0x8ff/0x9c0
[  326.880963][T12365]  ? __pfx_lock_release+0x10/0x10
[  326.886057][T12365]  handle_mm_fault+0x1106/0x1bb0
[  326.891059][T12365]  ? mt_find+0x2a9/0x920
[  326.895383][T12365]  ? __pfx_handle_mm_fault+0x10/0x10
[  326.900756][T12365]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  326.907206][T12365]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  326.912568][T12365]  exc_page_fault+0x2b9/0x8b0
[  326.917317][T12365]  asm_exc_page_fault+0x26/0x30
[  326.922226][T12365] RIP: 0010:rep_movs_alternative+0x4a/0x70
[  326.928181][T12365] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1
[  326.947890][T12365] RSP: 0018:ffffc900051c7a70 EFLAGS: 00050202
[  326.954015][T12365] RAX: 0000000000000001 RBX: 0000000020000480 RCX: 0000000000000060
[  326.962066][T12365] RDX: 0000000000000001 RSI: 0000000020000480 RDI: ffffc900051c7b70
[  326.970154][T12365] RBP: ffffc900051c7d10 R08: ffffc900051c7bcf R09: 1ffff92000a38f79
[  326.978269][T12365] R10: dffffc0000000000 R11: fffff52000a38f7a R12: 0000000020000480
[  326.986307][T12365] R13: ffffc900051c7b70 R14: ffffc900051c7b70 R15: 0000000000000060
[  326.994348][T12365]  _copy_from_user+0x7f/0xc0
[  326.999023][T12365]  do_ipt_set_ctl+0x731/0x1250
[  327.003847][T12365]  ? __pfx___mutex_trylock_common+0x10/0x10
[  327.009896][T12365]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[  327.015152][T12365]  ? __pfx_lock_release+0x10/0x10
[  327.020230][T12365]  ? rcu_is_watching+0x15/0xb0
[  327.025051][T12365]  ? trace_contention_end+0x3c/0x120
[  327.030451][T12365]  ? __mutex_unlock_slowpath+0x21e/0x790
[  327.036236][T12365]  ? __pfx___mutex_lock+0x10/0x10
[  327.041317][T12365]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  327.047369][T12365]  ? aa_sk_perm+0x96d/0xab0
[  327.051990][T12365]  ? __pfx_aa_sk_perm+0x10/0x10
[  327.056892][T12365]  nf_setsockopt+0x295/0x2c0
[  327.061534][T12365]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  327.067489][T12365]  do_sock_setsockopt+0x3af/0x720
[  327.072559][T12365]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  327.078151][T12365]  ? __fget_files+0x395/0x410
[  327.082878][T12365]  ? __fget_files+0x2a/0x410
[  327.087533][T12365]  __x64_sys_setsockopt+0x1ee/0x280
[  327.092787][T12365]  do_syscall_64+0xf3/0x230
[  327.097340][T12365]  ? clear_bhb_loop+0x35/0x90
[  327.102070][T12365]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.108025][T12365] RIP: 0033:0x7efffc585d19
[  327.112493][T12365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  327.132159][T12365] RSP: 002b:00007efffd2e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  327.140640][T12365] RAX: ffffffffffffffda RBX: 00007efffc775fa0 RCX: 00007efffc585d19
[  327.148671][T12365] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003
[  327.156693][T12365] RBP: 00007efffd2e4090 R08: 0000000000000348 R09: 0000000000000000
[  327.164721][T12365] R10: 0000000020000480 R11: 0000000000000246 R12: 0000000000000001
[  327.172838][T12365] R13: 0000000000000000 R14: 00007efffc775fa0 R15: 00007fff252a8ae8
[  327.180885][T12365]  </TASK>
[  327.237837][T12368] syzkaller0: refused to change device tx_queue_len
[  327.246007][T12373] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  327.453456][T12149] 8021q: adding VLAN 0 to HW filter on device batadv0
[  327.495849][T12149] veth0_vlan: entered promiscuous mode
[  327.522090][T12149] veth1_vlan: entered promiscuous mode
[  327.676462][T12390] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1992'.
[  327.795306][T12391] xt_cluster: node mask cannot exceed total number of nodes
[  327.818258][T12149] veth0_macvtap: entered promiscuous mode
[  327.846722][T12391] netlink: 428 bytes leftover after parsing attributes in process `syz.4.1994'.
[  327.867380][T12149] veth1_macvtap: entered promiscuous mode
[  327.952987][T12149] batman_adv: batadv0: Interface activated: batadv_slave_0
[  328.160691][T12149] batman_adv: batadv0: Interface activated: batadv_slave_1
[  328.178659][ T5848] Bluetooth: hci2: command tx timeout
[  328.187279][T12149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  328.196594][T12149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  328.205707][T12149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  328.214887][T12149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  328.237860][T12400] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1997'.
[  328.365288][T12399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1998'.
[  328.528510][T12134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.546947][T12134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.596808][T12411] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2001'.
[  328.622909][T12415] bond0: (slave vlan0): Opening slave failed
[  328.656043][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.657623][T12411] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2001'.
[  328.678098][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.906819][T12422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2006'.
[  329.082523][T12429] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2006'.
[  329.502169][T12463] Cannot find del_set index 65534 as target
[  329.569457][T12470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2018'.
[  329.590335][T12471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  329.704401][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2022'.
[  329.994896][T12493] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2027'.
[  330.243892][T12134] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.638631][T12134] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.724868][T12134] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.816091][T12134] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.931181][T12134] bridge_slave_1: left allmulticast mode
[  330.936985][T12134] bridge_slave_1: left promiscuous mode
[  330.943507][T12134] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.953276][T12134] bridge_slave_0: left allmulticast mode
[  330.960652][T12134] bridge_slave_0: left promiscuous mode
[  330.966408][T12134] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.310298][T12134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  331.321968][T12134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  331.334331][T12134] bond0 (unregistering): Released all slaves
[  331.649356][T12507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2033'.
[  331.890723][T12518] team0: Mode changed to "random"
[  331.937546][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  331.954834][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  331.966975][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  332.129028][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  332.214995][ T5143] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  332.254180][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  332.383833][T12134] hsr_slave_0: left promiscuous mode
[  332.395521][T12134] hsr_slave_1: left promiscuous mode
[  332.404766][T12134] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  332.413443][T12134] batman_adv: batadv0: Removing interface: batadv_slave_0
[  332.433951][T12134] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  332.442988][T12134] batman_adv: batadv0: Removing interface: batadv_slave_1
[  332.465054][T12537] Timeout policy `syz0' can only be used by L3 protocol number 35064
[  332.519387][T12134] veth1_macvtap: left promiscuous mode
[  332.525076][T12134] veth0_macvtap: left promiscuous mode
[  332.531382][T12134] veth1_vlan: left promiscuous mode
[  332.536838][T12134] veth0_vlan: left promiscuous mode
[  333.343232][T12134] team0 (unregistering): Port device team_slave_1 removed
[  333.452166][T12134] team0 (unregistering): Port device team_slave_0 removed
[  334.075641][T12519] lo speed is unknown, defaulting to 1000
[  334.095769][T12550] ip6gre1: entered allmulticast mode
[  334.207385][T12555] batadv_slave_1: entered promiscuous mode
[  334.235856][T12552] __nla_validate_parse: 1 callbacks suppressed
[  334.235882][T12552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2045'.
[  334.340457][ T5848] Bluetooth: hci2: command tx timeout
[  334.456639][T12564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2049'.
[  334.576104][T12571] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2049'.
[  334.654496][T12565] bond2: entered promiscuous mode
[  334.668947][T12565] bond2: entered allmulticast mode
[  334.674603][T12565] 8021q: adding VLAN 0 to HW filter on device bond2
[  334.877312][T12565] bond2 (unregistering): Released all slaves
[  334.892060][T12554] batadv_slave_1: left promiscuous mode
[  334.907950][T12519] lo speed is unknown, defaulting to 1000
[  334.939596][T12577] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  335.139523][T12581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2055'.
[  335.172361][T12581] netlink: 'syz.0.2055': attribute type 7 has an invalid length.
[  335.222630][T12581] netlink: 'syz.0.2055': attribute type 8 has an invalid length.
[  335.301683][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2055'.
[  335.517631][T12591] lo speed is unknown, defaulting to 1000
[  335.526968][T12585] netlink: 'syz.2.2056': attribute type 10 has an invalid length.
[  335.601369][T12600] FAULT_INJECTION: forcing a failure.
[  335.601369][T12600] name failslab, interval 1, probability 0, space 0, times 0
[  335.629057][T12600] CPU: 1 UID: 0 PID: 12600 Comm: syz.4.2059 Not tainted 6.13.0-rc2-syzkaller-00389-g2c27c7663390 #0
[  335.639929][T12600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  335.650037][T12600] Call Trace:
[  335.653359][T12600]  <TASK>
[  335.656420][T12600]  dump_stack_lvl+0x241/0x360
[  335.661155][T12600]  ? __pfx_dump_stack_lvl+0x10/0x10
[  335.666409][T12600]  ? __pfx__printk+0x10/0x10
[  335.671085][T12600]  ? __kmalloc_cache_noprof+0x48/0x390
[  335.673924][T12606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2061'.
[  335.676593][T12600]  ? __pfx___might_resched+0x10/0x10
[  335.676629][T12600]  should_fail_ex+0x3b0/0x4e0
[  335.686261][T12606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2061'.
[  335.691338][T12600]  should_failslab+0xac/0x100
[  335.691380][T12600]  __kmalloc_cache_noprof+0x70/0x390
[  335.691411][T12600]  ? vlan_vid_add+0x31c/0x760
[  335.691442][T12600]  vlan_vid_add+0x31c/0x760
[  335.691477][T12600]  bond_vlan_rx_add_vid+0x14f/0x2f0
[  335.691507][T12600]  ? __pfx_bond_vlan_rx_add_vid+0x10/0x10
[  335.691544][T12600]  ? __kmalloc_cache_noprof+0x243/0x390
[  335.691574][T12600]  ? vlan_vid_add+0x31c/0x760
[  335.691606][T12600]  vlan_vid_add+0x64b/0x760
[  335.691644][T12600]  register_vlan_dev+0x9f/0x810
[  335.691675][T12600]  ? vlan_changelink+0x4c8/0x570
[  335.691705][T12600]  ? vlan_check_real_dev+0x10c/0x320
[  335.691737][T12600]  vlan_newlink+0x476/0x5c0
[  335.691774][T12600]  ? __pfx_vlan_newlink+0x10/0x10
[  335.704338][T12606] netlink: zone id is out of range
[  335.705591][T12600]  rtnl_newlink_create+0x2ee/0xa40
[  335.710449][T12606] netlink: zone id is out of range
[  335.715577][T12600]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  335.720396][T12606] netlink: zone id is out of range
[  335.724748][T12600]  ? ns_capable+0x8a/0xf0
[  335.724792][T12600]  rtnl_newlink+0x160d/0x2150
[  335.810437][T12600]  ? __pfx_rtnl_newlink+0x10/0x10
[  335.815506][T12600]  ? __netlink_deliver_tap+0x56b/0x7f0
[  335.821039][T12600]  ? __pfx_validate_chain+0x10/0x10
[  335.826271][T12600]  ? __sock_sendmsg+0x221/0x270
[  335.831140][T12600]  ? ____sys_sendmsg+0x52a/0x7e0
[  335.836103][T12600]  ? __sys_sendmsg+0x269/0x350
[  335.840891][T12600]  ? do_syscall_64+0xf3/0x230
[  335.845606][T12600]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.851709][T12600]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  335.857711][T12600]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  335.864073][T12600]  ? mark_lock+0x9a/0x360
[  335.868427][T12600]  ? __lock_acquire+0x1397/0x2100
[  335.873517][T12600]  ? __pfx_lock_release+0x10/0x10
[  335.878588][T12600]  ? __pfx_rtnl_newlink+0x10/0x10
[  335.883634][T12600]  rtnetlink_rcv_msg+0x791/0xcf0
[  335.888605][T12600]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  335.893744][T12600]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  335.899329][T12600]  ? ref_tracker_free+0x643/0x7e0
[  335.904376][T12600]  netlink_rcv_skb+0x1e3/0x430
[  335.909158][T12600]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  335.914640][T12600]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  335.919966][T12600]  ? netlink_deliver_tap+0x2e/0x1b0
[  335.925186][T12600]  netlink_unicast+0x7f6/0x990
[  335.929983][T12600]  ? __pfx_netlink_unicast+0x10/0x10
[  335.935290][T12600]  ? __virt_addr_valid+0x45f/0x530
[  335.940426][T12600]  ? __phys_addr_symbol+0x2f/0x70
[  335.945473][T12600]  ? __check_object_size+0x47a/0x730
[  335.950789][T12600]  netlink_sendmsg+0x8e4/0xcb0
[  335.955588][T12600]  ? __pfx_netlink_sendmsg+0x10/0x10
[  335.960895][T12600]  ? aa_sock_msg_perm+0x91/0x160
[  335.965946][T12600]  ? __pfx_netlink_sendmsg+0x10/0x10
[  335.971246][T12600]  __sock_sendmsg+0x221/0x270
[  335.975958][T12600]  ____sys_sendmsg+0x52a/0x7e0
[  335.980752][T12600]  ? __pfx_____sys_sendmsg+0x10/0x10
[  335.986060][T12600]  ? __fget_files+0x2a/0x410
[  335.990768][T12600]  ? __fget_files+0x2a/0x410
[  335.995404][T12600]  __sys_sendmsg+0x269/0x350
[  336.000197][T12600]  ? __pfx_lock_release+0x10/0x10
[  336.005242][T12600]  ? __pfx___sys_sendmsg+0x10/0x10
[  336.010399][T12600]  ? __pfx_vfs_write+0x10/0x10
[  336.015224][T12600]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  336.021575][T12600]  ? do_syscall_64+0x100/0x230
[  336.026356][T12600]  ? do_syscall_64+0xb6/0x230
[  336.031054][T12600]  do_syscall_64+0xf3/0x230
[  336.035583][T12600]  ? clear_bhb_loop+0x35/0x90
[  336.040282][T12600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.046197][T12600] RIP: 0033:0x7f2b15785d19
[  336.050633][T12600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  336.070261][T12600] RSP: 002b:00007f2b16511038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  336.078879][T12600] RAX: ffffffffffffffda RBX: 00007f2b15975fa0 RCX: 00007f2b15785d19
[  336.086875][T12600] RDX: 0000000000008000 RSI: 0000000020000280 RDI: 0000000000000003
[  336.094865][T12600] RBP: 00007f2b16511090 R08: 0000000000000000 R09: 0000000000000000
[  336.102853][T12600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  336.110839][T12600] R13: 0000000000000000 R14: 00007f2b15975fa0 R15: 00007ffc599a3f88
[  336.118847][T12600]  </TASK>
[  336.191832][T12519] chnl_net:caif_netlink_parms(): no params data found
[  336.235356][T12585] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  336.408926][ T5848] Bluetooth: hci2: command tx timeout
[  336.620379][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2065'.
[  336.633003][T12613] syzkaller0: entered promiscuous mode
[  336.638650][T12613] syzkaller0: entered allmulticast mode
[  336.668743][T12591] lo speed is unknown, defaulting to 1000
[  336.884308][T12631] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2064'.
[  336.964471][T12519] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.972626][T12519] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.980277][T12519] bridge_slave_0: entered allmulticast mode
[  336.987232][T12519] bridge_slave_0: entered promiscuous mode
[  337.017534][T12519] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.029960][T12519] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.037352][T12519] bridge_slave_1: entered allmulticast mode
[  337.051683][T12519] bridge_slave_1: entered promiscuous mode
[  337.999170][T12642] siw: device registration error -23
[  338.499013][ T5848] Bluetooth: hci2: command tx timeout
[  339.103913][T12637] sit2: entered promiscuous mode
[  339.109262][T12637] sit2: entered allmulticast mode
[  339.231656][T12519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  339.266590][T12519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  339.437175][T12647] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  339.465441][T12647] batman_adv: batadv0: Adding interface: ip6gretap1
[  339.485332][T12647] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.569228][T12647] batman_adv: batadv0: Interface activated: ip6gretap1
[  339.606927][T12519] team0: Port device team_slave_0 added
[  339.625176][T12519] team0: Port device team_slave_1 added
[  339.639760][T12661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2077'.
[  339.742804][T12519] batman_adv: batadv0: Adding interface: batadv_slave_0
[  339.755561][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.760411][T12661] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2077'.
[  339.794635][T12519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  339.873616][T12519] batman_adv: batadv0: Adding interface: batadv_slave_1
[  339.898919][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.968906][T12519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  340.057920][T12675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2082'.
[  340.199286][T12680] SET target dimension over the limit!
[  340.220123][T12675] bond1: (slave batadv0): Releasing active interface
[  340.313300][T12519] hsr_slave_0: entered promiscuous mode
[  340.351126][T12519] hsr_slave_1: entered promiscuous mode
[  340.367230][T12519] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  340.379028][T12519] Cannot create hsr debugfs directory
[  340.569148][ T5848] Bluetooth: hci2: command tx timeout
[  340.983256][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'.
[  341.004285][T12697] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  341.021852][T12697] batman_adv: batadv0: Removing interface: ip6gretap1
[  341.066431][T12700] SET target dimension over the limit!
[  341.172982][T12519] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  341.202502][T12519] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  341.236700][T12519] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  341.294528][T12519] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  341.613586][T12519] 8021q: adding VLAN 0 to HW filter on device bond0
[  341.672860][T12519] 8021q: adding VLAN 0 to HW filter on device team0
[  341.711644][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.719321][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.752369][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.759677][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.790174][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2092'.
[  341.898378][T12708] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2092'.
[  342.274323][T12725] netlink: 'syz.2.2095': attribute type 1 has an invalid length.
[  342.276146][T12722] netlink: 'syz.4.2094': attribute type 6 has an invalid length.
[  342.300278][T12726] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  342.301298][T12725] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2095'.
[  342.310272][T12722] netlink: 'syz.4.2094': attribute type 7 has an invalid length.
[  342.340048][T12722] netlink: 'syz.4.2094': attribute type 8 has an invalid length.
[  342.365955][T12519] 8021q: adding VLAN 0 to HW filter on device batadv0
[  342.496276][T12519] veth0_vlan: entered promiscuous mode
[  342.521385][T12519] veth1_vlan: entered promiscuous mode
[  342.599800][T12519] veth0_macvtap: entered promiscuous mode
[  342.620832][T12519] veth1_macvtap: entered promiscuous mode
[  342.678425][T12519] batman_adv: batadv0: Interface activated: batadv_slave_0
[  342.706630][T12519] batman_adv: batadv0: Interface activated: batadv_slave_1
[  342.731980][T12519] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  342.753494][T12519] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  342.769291][T12744] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2102'.
[  342.783826][T12519] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  342.799133][T12519] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  342.833245][T12744] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  343.018060][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  343.043107][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.053416][T12754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2106'.
[  343.088455][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  343.114563][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.154967][T12755] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2104'.
[  343.512905][T12769] netlink: 'syz.0.2110': attribute type 10 has an invalid length.
[  344.200577][T12659] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.239341][T12800] gretap0: entered promiscuous mode
[  344.264973][T12800] gretap0: left promiscuous mode
[  345.230454][T12659] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.447892][T12659] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.506774][T12659] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.721299][T12659] bridge_slave_1: left allmulticast mode
[  345.727404][T12659] bridge_slave_1: left promiscuous mode
[  345.738588][T12659] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.762075][T12659] bridge_slave_0: left allmulticast mode
[  345.767898][T12659] bridge_slave_0: left promiscuous mode
[  345.777642][T12659] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.893923][T12823] FAULT_INJECTION: forcing a failure.
[  345.893923][T12823] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  345.929156][T12823] CPU: 1 UID: 0 PID: 12823 Comm: syz.4.2129 Not tainted 6.13.0-rc2-syzkaller-00389-g2c27c7663390 #0
[  345.940187][T12823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  345.950390][T12823] Call Trace:
[  345.953754][T12823]  <TASK>
[  345.956779][T12823]  dump_stack_lvl+0x241/0x360
[  345.961523][T12823]  ? __pfx_dump_stack_lvl+0x10/0x10
[  345.966786][T12823]  ? __pfx__printk+0x10/0x10
[  345.971467][T12823]  ? snprintf+0xda/0x120
[  345.975771][T12823]  should_fail_ex+0x3b0/0x4e0
[  345.980525][T12823]  _copy_to_user+0x31/0xb0
[  345.985004][T12823]  simple_read_from_buffer+0xca/0x150
[  345.990443][T12823]  proc_fail_nth_read+0x1e9/0x250
[  345.995535][T12823]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  346.001153][T12823]  ? rw_verify_area+0x55e/0x6f0
[  346.006060][T12823]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  346.011679][T12823]  vfs_read+0x1fc/0xb70
[  346.015897][T12823]  ? __pfx___mutex_lock+0x10/0x10
[  346.019808][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  346.020953][T12823]  ? __pfx_vfs_read+0x10/0x10
[  346.020992][T12823]  ? __fget_files+0x2a/0x410
[  346.037544][T12823]  ? __fget_files+0x395/0x410
[  346.042259][T12823]  ? __fget_files+0x2a/0x410
[  346.046884][T12823]  ksys_read+0x18f/0x2b0
[  346.051146][T12823]  ? __pfx_ksys_read+0x10/0x10
[  346.055941][T12823]  ? do_syscall_64+0x100/0x230
[  346.060729][T12823]  ? do_syscall_64+0xb6/0x230
[  346.065423][T12823]  do_syscall_64+0xf3/0x230
[  346.069948][T12823]  ? clear_bhb_loop+0x35/0x90
[  346.074646][T12823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.080566][T12823] RIP: 0033:0x7f2b1578472c
[  346.085048][T12823] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  346.104763][T12823] RSP: 002b:00007f2b16511030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  346.113202][T12823] RAX: ffffffffffffffda RBX: 00007f2b15975fa0 RCX: 00007f2b1578472c
[  346.121191][T12823] RDX: 000000000000000f RSI: 00007f2b165110a0 RDI: 0000000000000005
[  346.129181][T12823] RBP: 00007f2b16511090 R08: 0000000000000000 R09: 0000000000000000
[  346.137177][T12823] R10: 0000000020000480 R11: 0000000000000246 R12: 0000000000000001
[  346.145249][T12823] R13: 0000000000000000 R14: 00007f2b15975fa0 R15: 00007ffc599a3f88
[  346.153342][T12823]  </TASK>
[  346.173109][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  346.182458][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  346.193474][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  346.203359][ T5143] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  346.217455][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  346.580607][T12659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  346.594807][T12659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  346.606425][T12659] bond0 (unregistering): Released all slaves
[  346.698468][T12825] lo speed is unknown, defaulting to 1000
[  346.759869][T12833] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  346.815096][T12837] netlink: 'syz.4.2133': attribute type 1 has an invalid length.
[  346.877228][T12838] __nla_validate_parse: 10 callbacks suppressed
[  346.877251][T12838] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2133'.
[  346.978068][T12838] batadv0: entered promiscuous mode
[  346.990707][T12838] batadv0: entered allmulticast mode
[  347.092805][T12825] lo speed is unknown, defaulting to 1000
[  347.149411][T12842] lo speed is unknown, defaulting to 1000
[  347.863536][T12659] hsr_slave_0: left promiscuous mode
[  347.883234][T12659] hsr_slave_1: left promiscuous mode
[  347.901162][T12659] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  347.908698][T12659] batman_adv: batadv0: Removing interface: batadv_slave_0
[  347.934960][T12659] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  347.953086][T12659] batman_adv: batadv0: Removing interface: batadv_slave_1
[  347.983227][T12659] veth1_macvtap: left promiscuous mode
[  347.989253][T12659] veth0_macvtap: left promiscuous mode
[  347.993374][T12878] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2147'.
[  347.995061][T12659] veth1_vlan: left promiscuous mode
[  348.011946][T12659] veth0_vlan: left promiscuous mode
[  348.330399][ T5848] Bluetooth: hci2: command tx timeout
[  348.664455][T12659] team0 (unregistering): Port device team_slave_1 removed
[  348.708693][T12659] team0 (unregistering): Port device team_slave_0 removed
[  349.144568][T12842] lo speed is unknown, defaulting to 1000
[  349.144585][T12879] netlink: 'syz.0.2146': attribute type 21 has an invalid length.
[  349.144639][T12879] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2146'.
[  349.248146][T12825] chnl_net:caif_netlink_parms(): no params data found
[  349.552887][T12825] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.565409][T12825] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.584570][T12825] bridge_slave_0: entered allmulticast mode
[  349.602817][T12825] bridge_slave_0: entered promiscuous mode
[  349.705445][T12825] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.713458][T12825] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.739302][T12825] bridge_slave_1: entered allmulticast mode
[  349.746437][T12825] bridge_slave_1: entered promiscuous mode
[  349.868359][T12825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  349.922791][T12825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  350.214119][T12825] team0: Port device team_slave_0 added
[  350.252260][T12825] team0: Port device team_slave_1 added
[  350.409375][ T5848] Bluetooth: hci2: command tx timeout
[  350.479774][T12825] batman_adv: batadv0: Adding interface: batadv_slave_0
[  350.489708][T12825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  350.516919][T12825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  350.534793][T12825] batman_adv: batadv0: Adding interface: batadv_slave_1
[  350.544360][T12825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  350.573427][T12825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  350.700161][T12825] hsr_slave_0: entered promiscuous mode
[  350.710055][T12825] hsr_slave_1: entered promiscuous mode
[  350.721430][T12825] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  350.731471][T12825] Cannot create hsr debugfs directory
[  350.962578][T12949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2167'.
[  350.986818][T12951] netlink: 'syz.4.2168': attribute type 1 has an invalid length.
[  351.010230][T12952] netlink: 'syz.4.2168': attribute type 1 has an invalid length.
[  351.156270][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2171'.
[  351.481840][T12976] netlink: 'syz.4.2177': attribute type 10 has an invalid length.
[  351.501512][T12976] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2177'.
[  351.527401][T12982] netlink: 'syz.3.2179': attribute type 12 has an invalid length.
[  351.572414][T12982] FAULT_INJECTION: forcing a failure.
[  351.572414][T12982] name failslab, interval 1, probability 0, space 0, times 0
[  351.596957][T12982] CPU: 0 UID: 0 PID: 12982 Comm: syz.3.2179 Not tainted 6.13.0-rc2-syzkaller-00389-g2c27c7663390 #0
[  351.607814][T12982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  351.617924][T12982] Call Trace:
[  351.621244][T12982]  <TASK>
[  351.624208][T12982]  dump_stack_lvl+0x241/0x360
[  351.628949][T12982]  ? __pfx_dump_stack_lvl+0x10/0x10
[  351.634202][T12982]  ? __pfx__printk+0x10/0x10
[  351.638841][T12982]  ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0
[  351.645398][T12982]  ? __pfx___might_resched+0x10/0x10
[  351.650731][T12982]  should_fail_ex+0x3b0/0x4e0
[  351.655474][T12982]  should_failslab+0xac/0x100
[  351.660204][T12982]  __kmalloc_node_track_caller_noprof+0xdc/0x4c0
[  351.666592][T12982]  ? kasprintf+0xd5/0x120
[  351.670994][T12982]  kvasprintf+0xdf/0x190
[  351.675295][T12982]  ? __pfx_kvasprintf+0x10/0x10
[  351.680195][T12982]  ? lockdep_unlock+0x16a/0x300
[  351.685088][T12982]  ? __pfx_lockdep_unlock+0x10/0x10
[  351.690312][T12982]  ? preempt_count_add+0x93/0x190
[  351.695370][T12982]  kasprintf+0xd5/0x120
[  351.699570][T12982]  ? __pfx_kasprintf+0x10/0x10
[  351.704384][T12982]  alloc_workqueue+0x121/0x210
[  351.709180][T12982]  ? ieee80211_register_hw+0x297c/0x3e10
[  351.714842][T12982]  ? __pfx_alloc_workqueue+0x10/0x10
[  351.720243][T12982]  ? rcu_is_watching+0x15/0xb0
[  351.725035][T12982]  ? trace_kmalloc+0x1f/0xd0
[  351.729658][T12982]  ieee80211_register_hw+0x2a2d/0x3e10
[  351.735145][T12982]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  351.741505][T12982]  ? ieee80211_register_hw+0x16f1/0x3e10
[  351.747189][T12982]  ? ieee80211_register_hw+0x15f1/0x3e10
[  351.752869][T12982]  ? ieee80211_register_hw+0x14f1/0x3e10
[  351.758800][T12982]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  351.764664][T12982]  ? __asan_memset+0x23/0x50
[  351.769290][T12982]  ? __hrtimer_init+0x170/0x250
[  351.774182][T12982]  mac80211_hwsim_new_radio+0x2a9f/0x4a90
[  351.779956][T12982]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  351.786069][T12982]  hwsim_new_radio_nl+0xece/0x2290
[  351.791217][T12982]  ? __pfx___nla_validate_parse+0x10/0x10
[  351.796973][T12982]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  351.802578][T12982]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  351.808939][T12982]  genl_rcv_msg+0xb14/0xec0
[  351.813479][T12982]  ? __pfx_genl_rcv_msg+0x10/0x10
[  351.818628][T12982]  ? __pfx_lock_acquire+0x10/0x10
[  351.823761][T12982]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  351.829334][T12982]  ? __pfx___might_resched+0x10/0x10
[  351.834650][T12982]  netlink_rcv_skb+0x1e3/0x430
[  351.839433][T12982]  ? __pfx_genl_rcv_msg+0x10/0x10
[  351.844482][T12982]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  351.849808][T12982]  genl_rcv+0x28/0x40
[  351.853831][T12982]  netlink_unicast+0x7f6/0x990
[  351.858628][T12982]  ? __pfx_netlink_unicast+0x10/0x10
[  351.863937][T12982]  ? __virt_addr_valid+0x45f/0x530
[  351.869071][T12982]  ? __phys_addr_symbol+0x2f/0x70
[  351.874121][T12982]  ? __check_object_size+0x47a/0x730
[  351.879429][T12982]  netlink_sendmsg+0x8e4/0xcb0
[  351.884222][T12982]  ? __pfx_netlink_sendmsg+0x10/0x10
[  351.889529][T12982]  ? aa_sock_msg_perm+0x91/0x160
[  351.894493][T12982]  ? __pfx_netlink_sendmsg+0x10/0x10
[  351.899794][T12982]  __sock_sendmsg+0x221/0x270
[  351.904497][T12982]  ____sys_sendmsg+0x52a/0x7e0
[  351.909286][T12982]  ? __pfx_____sys_sendmsg+0x10/0x10
[  351.914586][T12982]  ? __fget_files+0x2a/0x410
[  351.919206][T12982]  ? __fget_files+0x2a/0x410
[  351.923828][T12982]  __sys_sendmsg+0x269/0x350
[  351.928450][T12982]  ? __pfx_lock_release+0x10/0x10
[  351.933511][T12982]  ? __pfx___sys_sendmsg+0x10/0x10
[  351.938659][T12982]  ? __pfx_vfs_write+0x10/0x10
[  351.943464][T12982]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  351.949813][T12982]  ? do_syscall_64+0x100/0x230
[  351.954597][T12982]  ? do_syscall_64+0xb6/0x230
[  351.959292][T12982]  do_syscall_64+0xf3/0x230
[  351.963831][T12982]  ? clear_bhb_loop+0x35/0x90
[  351.968529][T12982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.974469][T12982] RIP: 0033:0x7efffc585d19
[  351.979082][T12982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  351.998718][T12982] RSP: 002b:00007efffd2e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  352.007172][T12982] RAX: ffffffffffffffda RBX: 00007efffc775fa0 RCX: 00007efffc585d19
[  352.015595][T12982] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004
[  352.023592][T12982] RBP: 00007efffd2e4090 R08: 0000000000000000 R09: 0000000000000000
[  352.031695][T12982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  352.039680][T12982] R13: 0000000000000000 R14: 00007efffc775fa0 R15: 00007fff252a8ae8
[  352.047684][T12982]  </TASK>
[  352.112778][T12990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2181'.
[  352.127975][T12989] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  352.145977][T12990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2181'.
[  352.241777][T12991] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  352.326364][T12825] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  352.379545][T12825] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  352.499129][ T5848] Bluetooth: hci2: command tx timeout
[  352.537513][T12998] lo speed is unknown, defaulting to 1000
[  352.548934][T12825] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  352.584314][T12825] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  352.696980][T12825] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.716984][T12825] 8021q: adding VLAN 0 to HW filter on device team0
[  352.740519][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.747710][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state
[  352.801877][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.809051][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[  352.986357][T12998] lo speed is unknown, defaulting to 1000
[  353.151542][T13022] FAULT_INJECTION: forcing a failure.
[  353.151542][T13022] name failslab, interval 1, probability 0, space 0, times 0
[  353.166635][T13022] CPU: 1 UID: 0 PID: 13022 Comm: syz.3.2191 Not tainted 6.13.0-rc2-syzkaller-00389-g2c27c7663390 #0
[  353.177471][T13022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  353.187567][T13022] Call Trace:
[  353.190906][T13022]  <TASK>
[  353.193872][T13022]  dump_stack_lvl+0x241/0x360
[  353.198695][T13022]  ? __pfx_dump_stack_lvl+0x10/0x10
[  353.203945][T13022]  ? __pfx__printk+0x10/0x10
[  353.208674][T13022]  ? __kmalloc_cache_noprof+0x48/0x390
[  353.214169][T13022]  ? __pfx___might_resched+0x10/0x10
[  353.219498][T13022]  should_fail_ex+0x3b0/0x4e0
[  353.224222][T13022]  should_failslab+0xac/0x100
[  353.228943][T13022]  __kmalloc_cache_noprof+0x70/0x390
[  353.234276][T13022]  ? garp_init_applicant+0x184/0x450
[  353.239604][T13022]  garp_init_applicant+0x184/0x450
[  353.244737][T13022]  ? vlan_gvrp_init_applicant+0xd/0x20
[  353.250224][T13022]  register_vlan_dev+0x1eb/0x810
[  353.255202][T13022]  vlan_newlink+0x476/0x5c0
[  353.259730][T13022]  ? __pfx_vlan_newlink+0x10/0x10
[  353.264803][T13022]  rtnl_newlink_create+0x2ee/0xa40
[  353.269947][T13022]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  353.275613][T13022]  ? ns_capable+0x8a/0xf0
[  353.279970][T13022]  rtnl_newlink+0x160d/0x2150
[  353.284783][T13022]  ? __pfx_rtnl_newlink+0x10/0x10
[  353.289827][T13022]  ? __pfx_validate_chain+0x10/0x10
[  353.295086][T13022]  ? validate_chain+0x11e/0x5920
[  353.300047][T13022]  ? __pfx_lock_acquire+0x10/0x10
[  353.305092][T13022]  ? __pfx_lock_release+0x10/0x10
[  353.310134][T13022]  ? __pfx_validate_chain+0x10/0x10
[  353.315356][T13022]  ? mark_lock+0x9a/0x360
[  353.319720][T13022]  ? __lock_acquire+0x1397/0x2100
[  353.324961][T13022]  ? __pfx_lock_release+0x10/0x10
[  353.330012][T13022]  ? __pfx_rtnl_newlink+0x10/0x10
[  353.335059][T13022]  rtnetlink_rcv_msg+0x791/0xcf0
[  353.340016][T13022]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  353.345149][T13022]  ? __lock_acquire+0x1397/0x2100
[  353.350212][T13022]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  353.355705][T13022]  netlink_rcv_skb+0x1e3/0x430
[  353.360487][T13022]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  353.365967][T13022]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  353.371290][T13022]  ? netlink_deliver_tap+0x2e/0x1b0
[  353.376514][T13022]  netlink_unicast+0x7f6/0x990
[  353.381488][T13022]  ? __pfx_netlink_unicast+0x10/0x10
[  353.386793][T13022]  ? __virt_addr_valid+0x45f/0x530
[  353.391927][T13022]  ? __phys_addr_symbol+0x2f/0x70
[  353.396976][T13022]  ? __check_object_size+0x47a/0x730
[  353.402304][T13022]  netlink_sendmsg+0x8e4/0xcb0
[  353.407184][T13022]  ? __pfx_netlink_sendmsg+0x10/0x10
[  353.412492][T13022]  ? aa_sock_msg_perm+0x91/0x160
[  353.417454][T13022]  ? __pfx_netlink_sendmsg+0x10/0x10
[  353.422758][T13022]  __sock_sendmsg+0x221/0x270
[  353.427461][T13022]  ____sys_sendmsg+0x52a/0x7e0
[  353.432250][T13022]  ? __pfx_____sys_sendmsg+0x10/0x10
[  353.437555][T13022]  ? __fget_files+0x2a/0x410
[  353.442177][T13022]  ? __fget_files+0x2a/0x410
[  353.446802][T13022]  __sys_sendmsg+0x269/0x350
[  353.451435][T13022]  ? __pfx_lock_release+0x10/0x10
[  353.456485][T13022]  ? __pfx___sys_sendmsg+0x10/0x10
[  353.461626][T13022]  ? __pfx_vfs_write+0x10/0x10
[  353.466515][T13022]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  353.472890][T13022]  ? do_syscall_64+0x100/0x230
[  353.477675][T13022]  ? do_syscall_64+0xb6/0x230
[  353.482395][T13022]  do_syscall_64+0xf3/0x230
[  353.486911][T13022]  ? clear_bhb_loop+0x35/0x90
[  353.491609][T13022]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.497516][T13022] RIP: 0033:0x7efffc585d19
[  353.501952][T13022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  353.521607][T13022] RSP: 002b:00007efffd2e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  353.530568][T13022] RAX: ffffffffffffffda RBX: 00007efffc775fa0 RCX: 00007efffc585d19
[  353.538573][T13022] RDX: 0000000000008000 RSI: 0000000020000280 RDI: 0000000000000003
[  353.546580][T13022] RBP: 00007efffd2e4090 R08: 0000000000000000 R09: 0000000000000000
[  353.554571][T13022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  353.562575][T13022] R13: 0000000000000000 R14: 00007efffc775fa0 R15: 00007fff252a8ae8
[  353.570682][T13022]  </TASK>
[  353.582468][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2192'.
[  353.593168][T13018] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2192'.
[  353.643636][T12825] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.793070][T12825] veth0_vlan: entered promiscuous mode
[  353.819851][T12825] veth1_vlan: entered promiscuous mode
[  353.905177][T12825] veth0_macvtap: entered promiscuous mode
[  353.912403][    T9] IPVS: starting estimator thread 0...
[  353.945011][T12825] veth1_macvtap: entered promiscuous mode
[  354.001911][T12825] batman_adv: batadv0: Interface activated: batadv_slave_0
[  354.043440][T13032] IPVS: using max 25 ests per chain, 60000 per kthread
[  354.055876][T12825] batman_adv: batadv0: Interface activated: batadv_slave_1
[  354.087081][T12825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.099785][T12825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.109520][T12825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.118280][T12825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.569139][ T5848] Bluetooth: hci2: command tx timeout
[  355.008195][T13041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2199'.
[  355.110349][   T29] audit: type=1107 audit(1734128257.326:7): pid=13043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�'
[  355.163594][T13041] lo speed is unknown, defaulting to 1000
[  355.183750][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.203232][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.255602][ T3462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.275380][ T3462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.446321][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2203'.
[  355.525460][T13056] veth0_to_bridge: entered promiscuous mode
[  355.536365][T13054] veth0_to_bridge: left promiscuous mode
[  355.586841][T13041] lo speed is unknown, defaulting to 1000
[  355.765479][T13062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2206'.
[  355.782610][T13062] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2206'.
[  355.857639][T13064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2207'.
[  355.871920][T13064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2207'.
[  356.388512][T13080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  356.442058][T13083] lo speed is unknown, defaulting to 1000
[  356.815813][ T8029] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.941580][T13083] lo speed is unknown, defaulting to 1000
[  357.301169][ T8029] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.361124][ T8029] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.453425][ T8029] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.594425][ T8029] bridge_slave_1: left allmulticast mode
[  357.600759][ T8029] bridge_slave_1: left promiscuous mode
[  357.608602][ T8029] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.617830][ T8029] bridge_slave_0: left allmulticast mode
[  357.624241][ T8029] bridge_slave_0: left promiscuous mode
[  357.630144][ T8029] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.960409][ T8029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  357.971750][ T8029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  357.983652][ T8029] bond0 (unregistering): Released all slaves
[  358.630383][T13116] __nla_validate_parse: 2 callbacks suppressed
[  358.630406][T13116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2220'.
[  358.748522][ T8029] hsr_slave_0: left promiscuous mode
[  358.778288][ T8029] hsr_slave_1: left promiscuous mode
[  358.802352][ T8029] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  358.825137][ T8029] batman_adv: batadv0: Removing interface: batadv_slave_0
[  358.837296][T13120] netlink: 204156 bytes leftover after parsing attributes in process `syz.2.2222'.
[  358.873061][T13120] netlink: zone id is out of range
[  358.880730][ T8029] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  358.888493][T13125] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2220'.
[  358.900401][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  358.910919][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  358.910974][T13120] netlink: zone id is out of range
[  358.923701][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  358.924152][ T8029] batman_adv: batadv0: Removing interface: batadv_slave_1
[  358.943549][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  358.959518][ T5143] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  358.967193][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  358.967790][T13120] netlink: zone id is out of range
[  359.039544][T13120] netlink: zone id is out of range
[  359.047181][ T8029] veth1_macvtap: left promiscuous mode
[  359.053169][T13120] netlink: zone id is out of range
[  359.063344][T13120] netlink: zone id is out of range
[  359.068642][ T8029] veth0_macvtap: left promiscuous mode
[  359.078545][T13120] netlink: zone id is out of range
[  359.086227][ T8029] veth1_vlan: left promiscuous mode
[  359.094040][T13120] netlink: zone id is out of range
[  359.099482][ T8029] veth0_vlan: left promiscuous mode
[  359.099652][T13120] netlink: zone id is out of range
[  359.645539][ T8029] team0 (unregistering): Port device team_slave_1 removed
[  359.701397][ T8029] team0 (unregistering): Port device team_slave_0 removed
[  360.207376][T13122] lo speed is unknown, defaulting to 1000
[  360.320940][T13142] netlink: 'syz.4.2227': attribute type 2 has an invalid length.
[  360.350357][T13142] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2227'.
[  360.388179][T13148] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2230'.
[  360.484818][T13122] lo speed is unknown, defaulting to 1000
[  360.646558][T13155] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2231'.
[  360.672994][T13155] bond0: entered promiscuous mode
[  360.683115][T13155] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  360.692209][T13155] bond0: left promiscuous mode
[  360.739545][T13157] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2233'.
[  360.920216][T13122] chnl_net:caif_netlink_parms(): no params data found
[  361.032390][T13165] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2235'.
[  361.050057][ T5848] Bluetooth: hci2: command tx timeout
[  361.122793][T13122] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.138514][T13122] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.176704][T13122] bridge_slave_0: entered allmulticast mode
[  361.189420][T13122] bridge_slave_0: entered promiscuous mode
[  361.206854][T13122] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.219083][T13122] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.226569][T13122] bridge_slave_1: entered allmulticast mode
[  361.234722][T13122] bridge_slave_1: entered promiscuous mode
[  361.318446][T13122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  361.350037][T13122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  361.486460][T13122] team0: Port device team_slave_0 added
[  361.514353][T13122] team0: Port device team_slave_1 added
[  361.528710][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2240'.
[  361.566057][T13122] batman_adv: batadv0: Adding interface: batadv_slave_0
[  361.576340][T13122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.607384][T13122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  361.621020][T13122] batman_adv: batadv0: Adding interface: batadv_slave_1
[  361.628018][T13122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.662082][T13122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  361.726344][T13122] hsr_slave_0: entered promiscuous mode
[  361.734017][T13122] hsr_slave_1: entered promiscuous mode
[  361.749130][T13122] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  361.756890][T13122] Cannot create hsr debugfs directory
[  361.796429][T13193] netlink: 'syz.2.2245': attribute type 10 has an invalid length.
[  361.945683][T13197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2247'.
[  362.283620][T13122] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  362.304085][T13122] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  362.326956][T13122] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  362.375160][T13122] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  362.574992][T13220] syz_tun (unregistering): left promiscuous mode
[  362.601702][T13223] nr0: left promiscuous mode
[  362.673937][T13122] 8021q: adding VLAN 0 to HW filter on device bond0
[  362.722128][T13122] 8021q: adding VLAN 0 to HW filter on device team0
[  362.752572][T12134] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.759780][T12134] bridge0: port 1(bridge_slave_0) entered forwarding state
[  362.812381][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.819605][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state
[  363.133534][ T5143] Bluetooth: hci2: command tx timeout
[  363.265598][T13122] 8021q: adding VLAN 0 to HW filter on device batadv0
[  363.371021][T13122] veth0_vlan: entered promiscuous mode
[  363.384989][T13122] veth1_vlan: entered promiscuous mode
[  363.438658][T13122] veth0_macvtap: entered promiscuous mode
[  363.474562][T13122] veth1_macvtap: entered promiscuous mode
[  363.552574][T13255] can: request_module (can-proto-4) failed.
[  363.562490][T13122] batman_adv: batadv0: Interface activated: batadv_slave_0
[  363.580954][T13259] net_ratelimit: 4 callbacks suppressed
[  363.580974][T13259] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  363.584519][T13122] batman_adv: batadv0: Interface activated: batadv_slave_1
[  363.662361][T13122] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.673812][T13122] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.700410][T13122] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  363.714204][T13122] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  363.870687][T13265] bridge0: entered allmulticast mode
[  363.903423][T13267] __nla_validate_parse: 3 callbacks suppressed
[  363.903448][T13267] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2271'.
[  363.953287][ T8029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.961295][ T8029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.045958][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2271'.
[  364.056332][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.065525][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.132805][T13275] tap0: tun_chr_ioctl cmd 1074025677
[  364.138496][T13275] tap0: linktype set to 770
[  364.326357][T13273] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2272'.
[  364.477229][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2275'.
[  364.816657][T13298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2277'.
[  364.849652][T13298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2277'.
[  364.864036][T13298] ip6gretap0: left promiscuous mode
[  364.870514][T13298] bridge0: port 1(ip6gretap0) entered disabled state
[  365.136983][T13318] bond0: (slave vlan0): Opening slave failed
[  365.156920][T13320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2288'.
[  365.292890][ T1106] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.175908][ T1106] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.366479][ T1106] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.404371][ T1106] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.507951][ T1106] bridge_slave_1: left allmulticast mode
[  366.514513][ T1106] bridge_slave_1: left promiscuous mode
[  366.521302][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.532903][ T1106] bridge_slave_0: left allmulticast mode
[  366.538575][ T1106] bridge_slave_0: left promiscuous mode
[  366.544563][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.857103][T13324] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2291'.
[  366.866928][T13324] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2291'.
[  367.231680][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  367.243939][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  367.268933][ T1106] bond0 (unregistering): Released all slaves
[  367.357157][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  367.375354][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  367.393366][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  367.413766][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  367.424858][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  367.432440][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  367.566860][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2294'.
[  367.581272][T13342] lo speed is unknown, defaulting to 1000
[  367.981154][T13342] lo speed is unknown, defaulting to 1000
[  368.046243][T13365] bond0: option resend_igmp: invalid value (7540)
[  368.089261][T13365] bond0: option resend_igmp: allowed values 0 - 255
[  368.624128][ T1106] hsr_slave_0: left promiscuous mode
[  368.632355][ T1106] hsr_slave_1: left promiscuous mode
[  368.660090][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  368.671302][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0
[  368.681511][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  368.689803][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1
[  368.736288][ T1106] veth1_macvtap: left promiscuous mode
[  368.741988][ T1106] veth0_macvtap: left promiscuous mode
[  368.747636][ T1106] veth1_vlan: left promiscuous mode
[  368.753119][ T1106] veth0_vlan: left promiscuous mode
[  368.754574][   T29] audit: type=1107 audit(1734128270.986:8): pid=13392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�'
[  368.960755][T13402] __nla_validate_parse: 6 callbacks suppressed
[  368.960778][T13402] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2309'.
[  369.453876][ T1106] team0 (unregistering): Port device team_slave_1 removed
[  369.508327][ T1106] team0 (unregistering): Port device team_slave_0 removed
[  369.536117][ T5848] Bluetooth: hci2: command tx timeout
[  370.253221][T13342] chnl_net:caif_netlink_parms(): no params data found
[  370.261657][T13434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2318'.
[  370.332295][T13438] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2316'.
[  370.373736][T13437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2317'.
[  370.582737][T13342] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.590346][T13342] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.597749][T13342] bridge_slave_0: entered allmulticast mode
[  370.616457][T13342] bridge_slave_0: entered promiscuous mode
[  370.656470][T13342] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.674266][T13342] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.706614][T13342] bridge_slave_1: entered allmulticast mode
[  370.732787][T13342] bridge_slave_1: entered promiscuous mode
[  370.759993][T13437] lo speed is unknown, defaulting to 1000
[  370.875695][T13461] xt_HMARK: spi-set and port-set can't be combined
[  370.920097][T13461] xt_HMARK: spi-set and port-set can't be combined
[  370.926844][T13461] xt_HMARK: spi-set and port-set can't be combined
[  370.971406][T13342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  370.983616][T13342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  371.075618][T13342] team0: Port device team_slave_0 added
[  371.088037][T13342] team0: Port device team_slave_1 added
[  371.155103][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2327'.
[  371.165821][T13470] netlink: 'syz.4.2327': attribute type 3 has an invalid length.
[  371.182275][T13437] lo speed is unknown, defaulting to 1000
[  371.183535][T13342] batman_adv: batadv0: Adding interface: batadv_slave_0
[  371.209394][T13342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  371.244912][T13342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  371.259338][T13342] batman_adv: batadv0: Adding interface: batadv_slave_1
[  371.266353][T13342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  371.296621][T13342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  371.402985][T13477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2329'.
[  371.427602][T13342] hsr_slave_0: entered promiscuous mode
[  371.433774][T13479] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2330'.
[  371.443555][T13342] hsr_slave_1: entered promiscuous mode
[  371.461331][T13342] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  371.477931][T13342] Cannot create hsr debugfs directory
[  371.484220][T13479] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  371.609762][ T5143] Bluetooth: hci2: command tx timeout
[  371.733719][T13489] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  371.919969][T13494] netlink: 'syz.0.2335': attribute type 1 has an invalid length.
[  371.962195][T13494] ------------[ cut here ]------------
[  371.968005][T13494] WARNING: CPU: 0 PID: 13494 at net/rxrpc/sendmsg.c:296 rxrpc_send_data+0x2969/0x2b30
[  371.977990][T13494] Modules linked in:
[  371.982356][T13494] CPU: 0 UID: 0 PID: 13494 Comm: syz.0.2335 Not tainted 6.13.0-rc2-syzkaller-00389-g2c27c7663390 #0
[  371.993588][T13494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  372.003974][T13494] RIP: 0010:rxrpc_send_data+0x2969/0x2b30
[  372.010096][T13494] Code: 24 48 48 89 de e8 77 33 b3 f6 4c 39 f3 b8 00 fe ff ff 41 bf fc ff ff ff 44 0f 44 f8 45 31 f6 e9 71 fd ff ff e8 78 2e b3 f6 90 <0f> 0b 90 48 8b 7c 24 28 e8 8a f2 0d f7 e9 46 fd ff ff 89 d9 80 e1
[  372.030141][T13494] RSP: 0018:ffffc9000b52f3a0 EFLAGS: 00010293
[  372.036262][T13494] RAX: ffffffff8aec2fc8 RBX: ffff8880785bb080 RCX: ffff8880607e9e00
[  372.044330][T13494] RDX: 0000000000000000 RSI: 00000000000000ff RDI: ffff8880574bd440
[  372.052401][T13494] RBP: ffffc9000b52f650 R08: ffff8880574bd43f R09: 0000000000000000
[  372.060637][T13494] R10: ffff8880574bd340 R11: ffffed100ae97a88 R12: ffff8880785bb048
[  372.068655][T13494] R13: 1ffff1100f0b760f R14: ffff8880574bd000 R15: 0000000000000000
[  372.076719][T13494] FS:  00007f1ee25f36c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  372.085763][T13494] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  372.092689][T13494] CR2: 00005555936135c8 CR3: 000000005c390000 CR4: 00000000003526f0
[  372.100797][T13494] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  372.108904][T13494] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  372.116927][T13494] Call Trace:
[  372.120310][T13494]  <TASK>
[  372.123292][T13494]  ? __warn+0x165/0x4d0
[  372.127507][T13494]  ? rxrpc_send_data+0x2969/0x2b30
[  372.132696][T13494]  ? report_bug+0x2b3/0x500
[  372.137215][T13494]  ? rxrpc_send_data+0x2969/0x2b30
[  372.142400][T13494]  ? handle_bug+0x60/0x90
[  372.146754][T13494]  ? exc_invalid_op+0x1a/0x50
[  372.151495][T13494]  ? asm_exc_invalid_op+0x1a/0x20
[  372.156747][T13494]  ? rxrpc_send_data+0x2968/0x2b30
[  372.161963][T13494]  ? rxrpc_send_data+0x2969/0x2b30
[  372.167170][T13494]  ? __pfx_rxrpc_send_data+0x10/0x10
[  372.172576][T13494]  ? __local_bh_enable_ip+0x168/0x200
[  372.178049][T13494]  ? lockdep_hardirqs_on+0x99/0x150
[  372.183388][T13494]  ? __local_bh_enable_ip+0x168/0x200
[  372.188845][T13494]  ? __pfx_default_wake_function+0x10/0x10
[  372.194835][T13494]  rxrpc_do_sendmsg+0x1569/0x1910
[  372.199976][T13494]  ? __pfx_rxrpc_do_sendmsg+0x10/0x10
[  372.205398][T13494]  ? rxrpc_sendmsg+0x127/0x920
[  372.210430][T13494]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  372.216204][T13494]  ? do_raw_spin_unlock+0x13c/0x8b0
[  372.221482][T13494]  ? rxrpc_sendmsg+0x5d8/0x920
[  372.226286][T13494]  ? __pfx_rxrpc_sendmsg+0x10/0x10
[  372.231468][T13494]  __sock_sendmsg+0x221/0x270
[  372.236193][T13494]  ____sys_sendmsg+0x52a/0x7e0
[  372.241082][T13494]  ? __pfx_____sys_sendmsg+0x10/0x10
[  372.246432][T13494]  ? __fget_files+0x2a/0x410
[  372.251214][T13494]  ? __fget_files+0x2a/0x410
[  372.255872][T13494]  __sys_sendmmsg+0x36a/0x720
[  372.260631][T13494]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  372.267097][T13494]  ? __pfx___sys_sendmmsg+0x10/0x10
[  372.272377][T13494]  ? try_to_wake_up+0x9c3/0x1470
[  372.277369][T13494]  ? __pfx_lock_release+0x10/0x10
[  372.282469][T13494]  ? wake_up_q+0xdc/0x120
[  372.286822][T13494]  ? futex_wake+0x523/0x5c0
[  372.291378][T13494]  ? __pfx_futex_wake+0x10/0x10
[  372.296356][T13494]  ? __pfx___sys_sendmsg+0x10/0x10
[  372.301572][T13494]  ? do_futex+0x392/0x560
[  372.305948][T13494]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  372.312039][T13494]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  372.318421][T13494]  ? do_syscall_64+0x100/0x230
[  372.323358][T13494]  __x64_sys_sendmmsg+0xa0/0xb0
[  372.328232][T13494]  do_syscall_64+0xf3/0x230
[  372.332968][T13494]  ? clear_bhb_loop+0x35/0x90
[  372.337671][T13494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.343644][T13494] RIP: 0033:0x7f1ee1785d19
[  372.348073][T13494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  372.367835][T13494] RSP: 002b:00007f1ee25f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  372.376367][T13494] RAX: ffffffffffffffda RBX: 00007f1ee1975fa0 RCX: 00007f1ee1785d19
[  372.384418][T13494] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000003
[  372.392499][T13494] RBP: 00007f1ee1801a20 R08: 0000000000000000 R09: 0000000000000000
[  372.400664][T13494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  372.408730][T13494] R13: 0000000000000000 R14: 00007f1ee1975fa0 R15: 00007ffd3f323888
[  372.416862][T13494]  </TASK>
[  372.420020][T13494] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  372.427353][T13494] CPU: 0 UID: 0 PID: 13494 Comm: syz.0.2335 Not tainted 6.13.0-rc2-syzkaller-00389-g2c27c7663390 #0
[  372.438152][T13494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  372.448229][T13494] Call Trace:
[  372.451536][T13494]  <TASK>
[  372.454498][T13494]  dump_stack_lvl+0x241/0x360
[  372.459215][T13494]  ? __pfx_dump_stack_lvl+0x10/0x10
[  372.464478][T13494]  ? __pfx__printk+0x10/0x10
[  372.469115][T13494]  ? _printk+0xd5/0x120
[  372.473400][T13494]  ? __init_begin+0x41000/0x41000
[  372.478528][T13494]  ? vscnprintf+0x5d/0x90
[  372.482877][T13494]  panic+0x349/0x880
[  372.486793][T13494]  ? __warn+0x174/0x4d0
[  372.490971][T13494]  ? __pfx_panic+0x10/0x10
[  372.495441][T13494]  __warn+0x344/0x4d0
[  372.499464][T13494]  ? rxrpc_send_data+0x2969/0x2b30
[  372.504774][T13494]  report_bug+0x2b3/0x500
[  372.509146][T13494]  ? rxrpc_send_data+0x2969/0x2b30
[  372.514307][T13494]  handle_bug+0x60/0x90
[  372.518498][T13494]  exc_invalid_op+0x1a/0x50
[  372.523020][T13494]  asm_exc_invalid_op+0x1a/0x20
[  372.527891][T13494] RIP: 0010:rxrpc_send_data+0x2969/0x2b30
[  372.533666][T13494] Code: 24 48 48 89 de e8 77 33 b3 f6 4c 39 f3 b8 00 fe ff ff 41 bf fc ff ff ff 44 0f 44 f8 45 31 f6 e9 71 fd ff ff e8 78 2e b3 f6 90 <0f> 0b 90 48 8b 7c 24 28 e8 8a f2 0d f7 e9 46 fd ff ff 89 d9 80 e1
[  372.553290][T13494] RSP: 0018:ffffc9000b52f3a0 EFLAGS: 00010293
[  372.559384][T13494] RAX: ffffffff8aec2fc8 RBX: ffff8880785bb080 RCX: ffff8880607e9e00
[  372.567375][T13494] RDX: 0000000000000000 RSI: 00000000000000ff RDI: ffff8880574bd440
[  372.575454][T13494] RBP: ffffc9000b52f650 R08: ffff8880574bd43f R09: 0000000000000000
[  372.583445][T13494] R10: ffff8880574bd340 R11: ffffed100ae97a88 R12: ffff8880785bb048
[  372.591434][T13494] R13: 1ffff1100f0b760f R14: ffff8880574bd000 R15: 0000000000000000
[  372.599428][T13494]  ? rxrpc_send_data+0x2968/0x2b30
[  372.604604][T13494]  ? __pfx_rxrpc_send_data+0x10/0x10
[  372.609910][T13494]  ? __local_bh_enable_ip+0x168/0x200
[  372.615349][T13494]  ? lockdep_hardirqs_on+0x99/0x150
[  372.620572][T13494]  ? __local_bh_enable_ip+0x168/0x200
[  372.625974][T13494]  ? __pfx_default_wake_function+0x10/0x10
[  372.631812][T13494]  rxrpc_do_sendmsg+0x1569/0x1910
[  372.636868][T13494]  ? __pfx_rxrpc_do_sendmsg+0x10/0x10
[  372.642257][T13494]  ? rxrpc_sendmsg+0x127/0x920
[  372.647040][T13494]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  372.652783][T13494]  ? do_raw_spin_unlock+0x13c/0x8b0
[  372.658002][T13494]  ? rxrpc_sendmsg+0x5d8/0x920
[  372.662791][T13494]  ? __pfx_rxrpc_sendmsg+0x10/0x10
[  372.667943][T13494]  __sock_sendmsg+0x221/0x270
[  372.672669][T13494]  ____sys_sendmsg+0x52a/0x7e0
[  372.677474][T13494]  ? __pfx_____sys_sendmsg+0x10/0x10
[  372.682778][T13494]  ? __fget_files+0x2a/0x410
[  372.687392][T13494]  ? __fget_files+0x2a/0x410
[  372.692011][T13494]  __sys_sendmmsg+0x36a/0x720
[  372.696711][T13494]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  372.703085][T13494]  ? __pfx___sys_sendmmsg+0x10/0x10
[  372.708305][T13494]  ? try_to_wake_up+0x9c3/0x1470
[  372.713274][T13494]  ? __pfx_lock_release+0x10/0x10
[  372.718336][T13494]  ? wake_up_q+0xdc/0x120
[  372.722680][T13494]  ? futex_wake+0x523/0x5c0
[  372.727213][T13494]  ? __pfx_futex_wake+0x10/0x10
[  372.732095][T13494]  ? __pfx___sys_sendmsg+0x10/0x10
[  372.737229][T13494]  ? do_futex+0x392/0x560
[  372.741588][T13494]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  372.747591][T13494]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  372.753973][T13494]  ? do_syscall_64+0x100/0x230
[  372.758797][T13494]  __x64_sys_sendmmsg+0xa0/0xb0
[  372.763695][T13494]  do_syscall_64+0xf3/0x230
[  372.768216][T13494]  ? clear_bhb_loop+0x35/0x90
[  372.772943][T13494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.778851][T13494] RIP: 0033:0x7f1ee1785d19
[  372.783277][T13494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  372.803010][T13494] RSP: 002b:00007f1ee25f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  372.811534][T13494] RAX: ffffffffffffffda RBX: 00007f1ee1975fa0 RCX: 00007f1ee1785d19
[  372.819525][T13494] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000003
[  372.827511][T13494] RBP: 00007f1ee1801a20 R08: 0000000000000000 R09: 0000000000000000
[  372.835496][T13494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  372.843477][T13494] R13: 0000000000000000 R14: 00007f1ee1975fa0 R15: 00007ffd3f323888
[  372.851476][T13494]  </TASK>
[  372.854658][T13494] Kernel Offset: disabled
[  372.859049][T13494] Rebooting in 86400 seconds..