last executing test programs:

6.255099276s ago: executing program 4 (id=1695):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000006c0)=0x13, 0x4)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x13, 0x4)
syz_emit_ethernet(0xda, &(0x7f00000005c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x4c, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0xe, "ccf02b4e2a3bdb4aa40b248a"}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}, "a815a23da43974ff"}}}}}, 0x0)

6.051385403s ago: executing program 4 (id=1698):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
listen(r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0)
setsockopt$MRT_TABLE(r2, 0x0, 0xcf, &(0x7f0000000000)=0x1, 0x4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0)

5.85964628s ago: executing program 4 (id=1702):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f0000001100)='cgroup.controllers\x00', 0x0, 0x0) (async)
r2 = openat$cgroup_ro(r1, &(0x7f0000001100)='cgroup.controllers\x00', 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r6, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x4, r5, 0x1, 0x7}, 0x14)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002280), 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002300)={0xb, <r8=>0x0}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000024c0)={0x11, 0x6, &(0x7f0000002340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000002380)='GPL\x00', 0x9d, 0x0, &(0x7f00000023c0), 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002400)={0x5, 0xc, 0x9, 0x98}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002440)=[0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000002480)=[{0x5, 0x1, 0xe, 0x6}, {0x5, 0x4, 0xe, 0xa}], 0x10, 0xd4a, @void, @value}, 0x94) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000024c0)={0x11, 0x6, &(0x7f0000002340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000002380)='GPL\x00', 0x9d, 0x0, &(0x7f00000023c0), 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002400)={0x5, 0xc, 0x9, 0x98}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002440)=[0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000002480)=[{0x5, 0x1, 0xe, 0x6}, {0x5, 0x4, 0xe, 0xa}], 0x10, 0xd4a, @void, @value}, 0x94)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r12 = openat$cgroup_ro(r11, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
preadv(r12, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0) (async)
preadv(r12, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0)
r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002640)=@o_path={&(0x7f0000002600)='./file0\x00', 0x0, 0x10, r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0x1b, 0x13, &(0x7f0000001140)=@raw=[@call={0x85, 0x0, 0x0, 0x39}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], &(0x7f0000001240)='syzkaller\x00', 0x83, 0x1000, &(0x7f0000001280)=""/4096, 0x41100, 0x1, '\x00', r5, @fallback=0x2, r7, 0x8, &(0x7f00000022c0)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, r8, r9, 0x6, &(0x7f0000002680)=[r10, r12, r13], &(0x7f00000026c0)=[{0x4, 0x2, 0x10, 0x8}, {0x0, 0x4, 0xc, 0x2}, {0x2, 0x4, 0x2, 0xb}, {0x3, 0x5, 0x9, 0x6}, {0x0, 0x2, 0x1}, {0x1, 0x3, 0x7, 0x2}], 0x10, 0x6, @void, @value}, 0x94)
openat$cgroup_int(r1, &(0x7f0000000040)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) (async)
r14 = openat$cgroup_int(r1, &(0x7f0000000040)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0)
preadv(r14, &(0x7f0000001200)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

5.628176259s ago: executing program 4 (id=1706):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @local, 0x46}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000850000009d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1)
vmsplice(r3, &(0x7f0000000440)=[{&(0x7f0000001340)="8300", 0x2}], 0x1, 0xc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000080)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="02"], 0x10)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r7, @ANYRES32=r2, @ANYBLOB="02"], 0x10)
sendto$inet6(r0, &(0x7f0000000000)="80003792a88f13ce", 0x8, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sched_process_wait\x00', r9}, 0x10)
r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x15, 0x10, 0x80, 0x0, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000008000000000000005805000018100000", @ANYRES32=r12, @ANYBLOB="000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
close(r11)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
recvfrom$inet(r11, &(0x7f0000000680)=""/155, 0x9b, 0x20002102, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r11, r13, 0x4, r8}, 0x10)

5.240102528s ago: executing program 4 (id=1711):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r2=>0x0}) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x57, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000009000)=r3, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r2, @ANYBLOB="08001180040008000a000600"], 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x0)

4.944520787s ago: executing program 4 (id=1717):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x40, 0x4]}, 0x8)
r1 = socket(0x80000000000000a, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x87}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x100)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414"], 0x528}}, 0xc000)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001304000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x11, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2d, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)

4.944195232s ago: executing program 0 (id=1718):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth1_vlan\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYRES64=r3, @ANYRES32=r0, @ANYBLOB="00000000000000001c001a800800068004000500080000003e"], 0x44}}, 0x4000004)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
unshare(0x12010000)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001b80)=@gcm_256={{0x303}, "e11fd25f228e7de8", "8452fe0e66fa615e00e1c0742c52d98f60149ba20f6258068c42e89f4175c12c", "8c11f4c2", "1bd80c52b34eb5b5"}, 0x38)
nanosleep(&(0x7f0000000340)={0x77359400}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth1_vlan\x00'}) (async)
socket(0x10, 0x80002, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYRES64=r3, @ANYRES32=r0, @ANYBLOB="00000000000000001c001a800800068004000500080000003e"], 0x44}}, 0x4000004) (async)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
unshare(0x12010000) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001b80)=@gcm_256={{0x303}, "e11fd25f228e7de8", "8452fe0e66fa615e00e1c0742c52d98f60149ba20f6258068c42e89f4175c12c", "8c11f4c2", "1bd80c52b34eb5b5"}, 0x38) (async)
nanosleep(&(0x7f0000000340)={0x77359400}, 0x0) (async)

4.63107901s ago: executing program 0 (id=1719):
syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344, <r0=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb6e92fb42868181003300884700000000000d0f00000000000000000f019078ac141434ac1414aa0f00907800040007"], &(0x7f0000000080)={0x1, 0x3, [0xdb9, 0xb2f, 0xdba, 0x620]})
syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, r0, 0x0, 0x2, 0x5, 0x10}, {"ab3130a2"}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dbc08", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, r0, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

4.519056338s ago: executing program 0 (id=1721):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x54, r1, 0x11, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x9b}, {0xc}}]}, 0x54}}, 0x0) (async)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90000010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x140d, 0x10, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d5}, 0x20000014)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r3, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095", @ANYRESDEC, @ANYRESOCT=r3], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="12cdde26e7c496e99a9cf8625ec9", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xc6}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe5, @void, @value}, 0x94)

3.502951221s ago: executing program 0 (id=1725):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="75c1bc0eb4f870b9fb7230778ce17bda527e58d7f270d14b579cd833f53c94ff4451b8a8b6c10ac54afa", @ANYRES64=0x0], 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="5161ed0862fe5b664c39e7dc7e92f9a615833b4551431c860140823ba97bfed26294244366760933f2d95824a9d8f50696eb99d775bfa2e9aba4d7d08cde52a90000000024672b661a041bf1351590d4b0f66ab38a8090339c44129e5a9e477924996b42bd47c35fe5985f47ed2b9d03d2c83e4845d162a36812529f8df282ab833667aae0c0990c79be3ef14403fc113b7240f11b2ad3d0de5df22f5fa8f24d73329d23eb56912ff5c7de578270c7d65f2aee811590ebd741b93548ae1bc197c21d3149b1ed3c28d7d35ff70b865c279dc88d11b49d", @ANYRES64=0x0], 0x10)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2, 0x0, @void, @value}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x8e, &(0x7f0000000080)=""/142, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$inet(r6, &(0x7f0000000300)={&(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10, 0xfffffffffffffffe}, 0x20000001)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xffffffffffffff35}, @val={0x14}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}}, 0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r9, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0xd1383000)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r10, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r10, 0x1000)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r11, 0x0)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r8, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r7, 0x0)
mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r8, 0x0)

3.19220608s ago: executing program 0 (id=1729):
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000d00)={0x11, 0x1c, r2, 0x1, 0xc8, 0x6, @dev}, 0x14)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = socket(0x2a, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x7, 0x4, 0x0, 0x4000}, {0x7, 0x9, 0x5}, {0x0, 0x3, 0x2, 0x8}]}, 0x10)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xc0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x0, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x1, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0)
bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x8, 0x7, 0x5, 0x3, 0x7, 0x0, 0x52, 0x3}}]}}]}, 0x44}}, 0x4000)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.90957194s ago: executing program 0 (id=1733):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000007e94d89213c0a0e54017256500"/40], 0x48)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58)
close(r1)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

1.46025074s ago: executing program 2 (id=1749):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1900000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc1, 0xc1, 0x6, [@fwd={0x9}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x2}}, @datasec={0xc, 0x9, 0x0, 0xf, 0x1, [{0x3, 0xfffffffe, 0x4}, {0x1, 0x6b, 0x2}, {0x1, 0x1, 0x4}, {0x1, 0x6, 0x5}, {0x5, 0x80, 0x9}, {0x5, 0x3, 0x3}, {0x2, 0x0, 0x6}, {0x5, 0x0, 0x4}, {0x1, 0xa, 0xff}], 'f'}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @func={0x6, 0x0, 0x0, 0xc, 0x3}, @enum={0xf}]}, {0x0, [0x5f, 0x2e, 0x30, 0x0]}}, &(0x7f0000000040)=""/101, 0xe2, 0x65, 0x1, 0x2, 0x0, @void, @value}, 0x28) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x7, 0xb, &(0x7f0000000200)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x6c}}, 0x0) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0)
r4 = socket(0x10, 0x3, 0x0) (async)
r5 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r6, 0x0, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bond_slave_0\x00', <r7=>0x0}) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000500)={'syztnl1\x00', <r8=>0x0, 0x40, 0x7800, 0x0, 0x4251, {{0x10, 0x4, 0x1, 0x1, 0x40, 0x65, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@noop, @end, @timestamp_addr={0x44, 0x14, 0xf6, 0x1, 0x0, [{@remote, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @generic={0x7, 0xb, "7bd7e073f099a4383f"}, @generic={0x4f, 0x9, "38f5e1568f4183"}]}}}}})
getpeername$packet(r0, &(0x7f0000000580)={0x11, 0x0, <r9=>0x0}, &(0x7f00000005c0)=0x14) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000008c0)={'ip6_vti0\x00', &(0x7f0000000600)={'ip6tnl0\x00', <r10=>0x0, 0x2f, 0x80, 0x4, 0x51f1, 0x10, @mcast2, @rand_addr=' \x01\x00', 0x1, 0x80, 0x6, 0x4}}) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000080)={'team0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0) (async)
r14 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r15 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r15, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x60, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0xc080) (async)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000000c0)={'geneve1\x00', <r16=>0x0})
sendto$packet(r15, &(0x7f0000000180)="0b03f6ffe0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r16}, 0x14) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'ip6_vti0\x00', <r17=>0x0, 0x2f, 0xa, 0x0, 0xf, 0x46, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x8, 0x1, 0x3ff}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000c00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x1d4, r3, 0xb00, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x2000c001}, 0x2000c004)

1.373522409s ago: executing program 1 (id=1750):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x10e6, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @remote, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x100, @void}}}}}}}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bac0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="1b9f", 0x2}], 0x1}}], 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x201}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x24008801)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x2a, 0xb, 0x0, 0x0, {0x5}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010000000000000000000000000000006050001"], 0x4c}, 0x1, 0x0, 0x0, 0x95}, 0x0)

1.366725626s ago: executing program 3 (id=1751):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x403, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x74, r1, 0x800, 0x11203}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x6e1, '\x00', r1, r4, 0x2, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r4, <r6=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%pi6   \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x1d, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r4}, @map_fd={0x18, 0x6, 0x1, 0x0, r4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff001}}, @generic={0x7, 0x0, 0x7, 0x4000}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x23, 0x71, &(0x7f00000001c0)=""/113, 0x41000, 0x8, '\x00', r1, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xe, 0xb3, 0x7ff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000500)=[r4, r5, r4, r4, r6, r4], &(0x7f0000000540)=[{0x3, 0x4, 0x3, 0xc}, {0x4, 0x2, 0x7}], 0x10, 0x7f, @void, @value}, 0x94)

1.152575631s ago: executing program 2 (id=1752):
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r3)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r4=>0x0, 0x29, 0x1, 0x0, 0x6, 0x22, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x8000, 0xfffffff9}})
setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000001c0)={r4, @empty, @empty}, 0xc)
setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xf}, 0x56, 0x0}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="ac0000001a000100000000000000000002000000000000000000000005001b0000000000850008"], 0xac}}, 0x0)

1.098312822s ago: executing program 3 (id=1753):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r2, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002980)=""/4096, 0x1000}], 0x1}, 0x9}], 0x3, 0x2000, 0x0)
recvmmsg(r2, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/78, 0x4e}, {&(0x7f00000013c0)=""/96, 0x60}], 0x3}, 0x5}], 0x1, 0x100, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000000, 0x0, 0xff, 0x1, 0xfffc}, 0x20)
r3 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, <r4=>0x0}, &(0x7f0000000bc0)=0xc)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r4}]}, 0x1c}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x6, 0x4e22, 0xfffc, 0xa, 0x80, 0x20, 0x3a, 0x0, r4}, {0x7, 0x9, 0xf867, 0x9, 0x3e5a, 0x4, 0x8001, 0xffff}, {0x5, 0x0, 0x8, 0xa8b}, 0x7, 0x6e6bbc, 0x1, 0x1, 0x3, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x15}, 0x4d4, 0x2b}, 0xa, @in=@loopback, 0x3507, 0x1, 0x2, 0x4, 0x0, 0x0, 0x1}}, 0xe8)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x5, 0x1, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018210000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000cf000000bf0900000000000055090100000000409500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000000)={'wlan1\x00', 0x805})

964.453124ms ago: executing program 1 (id=1754):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r2)
sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x14, r3, 0x5170c560dce29b81, 0x8, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r4) (async)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) (async)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x4008000)
sendmsg$NL802154_CMD_SET_LBT_MODE(r4, 0x0, 0x80)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) (async, rerun: 64)
sendto(r0, 0x0, 0x0, 0x2, 0x0, 0x0) (async, rerun: 64)
socket$netlink(0x10, 0x3, 0xa)

916.367373ms ago: executing program 2 (id=1755):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@delqdisc={0x8c, 0x25, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xf}, {0xd, 0x7}, {0x5, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x5}}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x10, 0x2c, 0xfffffffd, 0x1, 0x8, 0x6, 0x6}}, {0x10, 0x2, [0x7fff, 0x8, 0x2, 0xfff, 0x8001, 0x6]}}]}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x2, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x211}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xffffff16}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40004}, 0x48000)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r2=>0x0}) (async)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000}})
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000240)=@rose={'rose', 0x0}, 0x10) (async)
ioctl$sock_netdev_private(r4, 0x2008914, &(0x7f0000000140)="c5165152c604eb08418f4097189c93faffffffffffffff5fd2eb1e7a3d8692a5e5100e6fb6ede78b612e896ee85b27e6ee46430471de32a2cdbc7ac994bdf77535e92fc4c1028414798c751929761f384c551990c3067abe7929356d70a5850746f34280fcd64e9a71fd75afe7ca5d57cf8ea7c4ed22f948812b8d0449f2f700cf25113830adca775cc9bd059beb7db67f5a3028b86bb249e28d6a981341b636bab3db46ed378c07d1b9a6e621c114febdb62c992c4f6547732a576618e2823f6337") (async)
ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]})
syz_init_net_socket$ax25(0x3, 0x3, 0xc4) (async)
r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2901}, {0x85, 0x0, 0x0, 0x8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x60}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r1, <r6=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%-010d \x00'}, 0x20)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r7, 0x1f4d2000) (async)
write$tun(r7, &(0x7f0000000000)={@val={0x0, 0xf6}, @void, @eth={@empty, @local, @void, {@can={0xc, {{0x2, 0x1, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "6345afc09b81b5ef"}}}}}, 0x22)
close(r7)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r8, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x0, 0x8001, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r9, 0x0, &(0x7f0000001700)=""/53}, 0x20)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80000000, '\x00', r2, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
pipe(&(0x7f0000000500)={<r12=>0xffffffffffffffff})
splice(r12, 0x0, r11, 0x0, 0xffffffffffff8000, 0x0)
pipe(&(0x7f0000000040)={<r13=>0xffffffffffffffff})
ioctl$int_in(r13, 0x5421, &(0x7f00000003c0)=0x3d49)
read$alg(r13, &(0x7f0000000140)=""/116, 0x74) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="18480000faffffff000000000000000018000000020000000000000000433c033715d049f9c10e9d00109a4c790200f0000000005800000200000000000000000000001e71"], &(0x7f0000000440)='GPL\x00', 0xfffff60e, 0x0, 0x0, 0x41100, 0x2, '\x00', r2, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x9, 0x80000000, 0xc}, 0x10, 0x0, r4, 0x7, &(0x7f0000000640)=[r5, r6, r9, r1, r10, r12, r13], &(0x7f0000000680)=[{0x2, 0x5, 0xe, 0xc}, {0x4, 0x3, 0x3, 0x1}, {0x2, 0x4, 0x5, 0x6}, {0x4, 0x4, 0xa, 0x3}, {0x0, 0x5, 0x7, 0x5}, {0x2, 0x5, 0x9, 0x6}, {0x5, 0x2, 0xf, 0x5}], 0x10, 0x7, @void, @value}, 0x94)

806.923567ms ago: executing program 1 (id=1756):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x36)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x96, 0x4, 0x9a17, 0x0, 0xffffffffffffffff, 0x367, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x8, 0x5, 0x8, 0x8, r2, 0x3ff, '\x00', 0x0, r3, 0x4, 0x3, 0x3, 0x11, @void, @value, @void, @value}, 0x50)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$unix(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="c1", 0x1}], 0x1}, 0x0)
setsockopt$sock_int(r6, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4)
recvmsg$unix(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)}, 0x40000000)
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001200230500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000efff002100010007031c000a"], 0x70}}, 0x0)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r9, 0x0, 0x1, &(0x7f0000000440)=0xb537, 0x4)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xec, r7, 0x4, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xec}, 0x1, 0x0, 0x0, 0x60}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x36) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x96, 0x4, 0x9a17, 0x0, 0xffffffffffffffff, 0x367, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x8, 0x5, 0x8, 0x8, r2, 0x3ff, '\x00', 0x0, r3, 0x4, 0x3, 0x3, 0x11, @void, @value, @void, @value}, 0x50) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) (async)
sendmsg$unix(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="c1", 0x1}], 0x1}, 0x0) (async)
setsockopt$sock_int(r6, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) (async)
recvmsg$unix(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)}, 0x40000000) (async)
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001200230500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000efff002100010007031c000a"], 0x70}}, 0x0) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
setsockopt$bt_hci_HCI_DATA_DIR(r9, 0x0, 0x1, &(0x7f0000000440)=0xb537, 0x4) (async)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xec, r7, 0x4, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xec}, 0x1, 0x0, 0x0, 0x60}, 0x0) (async)

754.759805ms ago: executing program 2 (id=1757):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x2b}, {0x0, 0x6faa, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3e0}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000107010d0000000000000000020000060e0007800800014010cb304a40000000000000001ab6116c9bd1dd7201008e7a3f99e23c383958d9f246f1b8cf83b4f777805120f3f7984f516159cd859c1a3394eb31e39300"/101], 0x28}, 0x1, 0x0, 0x0, 0x2404e006}, 0x20840)
sendmmsg$inet6(r1, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x84, @local, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)='L', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000580), &(0x7f0000000380)=0x8)

749.134558ms ago: executing program 3 (id=1758):
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001800210200000000000000001d01000008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00%'], 0x24}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0xe8, 0xe8, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000040), {[{{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'nicvf0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @broadcast}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x20, 'ERROR\x00', 0x0, "d1b7201e6851dcc361a7eb546f513b69c23cd84d078ce2b4e1b29dcf3fb6"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430)
socket$nl_route(0x10, 0x3, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$inet6(0xa, 0x1, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x0, 0x0, 0xf}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r3, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840)

604.637754ms ago: executing program 1 (id=1759):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x9) (async, rerun: 64)
r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r3 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, <r4=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x11, 0x10d, 0x0, 0x1, [@generic="905176c518740da397a9423603"]}]}]}, 0x3c}], 0x1}, 0x0) (async)
sendmsg$nl_generic(r1, &(0x7f0000001480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x13b8, 0x2e, 0x100, 0x70bd29, 0x25dfdbfc, {0x5}, [@nested={0x184, 0x136, 0x0, 0x1, [@generic="6965503e6204dc69e0bf19b28f77b9cccd553c3ff56adb79fab107b33c28db9309d1f6eff8e485915e3611e18c5929fa41e08911524e31dc7286a37a4e28da3e262a854a4d8916fe686f1e472a25d6ac03c3656ae4df2bf118584d4cf9542108065b914cabf8", @nested={0x4, 0xf4}, @typed={0x8, 0xdc, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="c831ce4c8e6332ef13dd2fcb5c596dd405f90071933c413ee73681fa94310a7cd404431cef993e7a019e05fe257a7674bcb0a4c59e25dbe863d9538cafb30dc0fa600c4bb37f2bb9a266a94d4e56cc4b02e161e0943959dc1640932f0bae668bf019677459da94ab8a808141449fb5466bc1552b349e7fad038a88fa0a65128fe31a24aa2968dd4bc39102d833f05b8f74dc0abdcb5485b315ac2fb5fbb03b69c073a94e8e3f97a1f3ee47f2998881d5b942d79e676d3e0b699bb93295", @typed={0x8, 0x66, 0x0, 0x0, @uid=r4}, @generic="61661a6288fb7514a64fad1b11491226ef9b33d43ace983335696dbdbd09b90797423064d251181963b8c02e84f1ce8324e81b296f4cc41d05dcd238758a3c3a22bf461c108f166c6f"]}, @generic="c4061dc4b1b8712006c013632094ea20753beed495950a6b1a7fc8c219985c4dbe4770b06004132008ac70d337e8c7043424fdd6eb514effa0cadd4d6ebe4a123274570d51d6a57a5770c226ef7f1219f0b01deb2c8638f827dd0baff33157c1b4bae43e1e73c9ff83b6a60c50563d4aae04", @generic="7bba22bc40d97274f3e6cbd4a80304be00d10f404dd8c776b91f8f71b66eccc58e2ced0b0ff27b5cf612e96d3a66f231e94170d7c6a07e34740d7f3d88a44f4c53b1df0543fa7eb3524a37d44c18ad4f039793c25bb722d99026b90b0725ef0468eaeb5ac9f70a0d99268747d85cc7d20f84bb37f815e1fddffd4e2e16e48246381c47c7d76a49aa5d5ab16fc7ef575f17b2662fdd99", @nested={0x30, 0x6c, 0x0, 0x1, [@typed={0xc, 0x14, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x2, 0x0, 0x0, @u32=0x9}, @nested={0x4, 0x8e}, @nested={0x4, 0x38}, @typed={0xc, 0xc1, 0x0, 0x0, @u64=0xc}, @nested={0x4, 0xb2}]}, @nested={0xd8, 0x11a, 0x0, 0x1, [@generic="94c623641c6cc5a482691ef99c3bf14d19b60198b7b02d6cdf3126477b0733d76f63077df973f153d5db8a7dd0592ae4398431a938378485f7c5cfd64a293919aab0d82243c208f9b26bbc5aaf0f86b209cdfdecc76f0679a276dafc65c9ce3f1755868a3dc27871399b369dfc89637988a690ef39832f12f51db24735ac84b2651bae9547115980ea48daa9be0df077a313d5e152df5a8dc70c7e8bb44d6901b12ba853cef0fff4f7a738fd28348ff56168d252d0f20f649f125c", @generic="9de22cfa5b22928112840fc86f93a0d15b37075884e830a08c"]}, @typed={0x8, 0xc1, 0x0, 0x0, @pid}, @generic="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", @typed={0x8, 0xe2, 0x0, 0x0, @ipv4=@private=0xa010102}]}, 0x13b8}, 0x1, 0x0, 0x0, 0x91}, 0x0) (async)
ioctl$TUNSETOFFLOAD(r0, 0x40047438, 0x58e48e4c6b288518)

506.162544ms ago: executing program 1 (id=1760):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x28000600)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0)
setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000040)=0x2000000, 0x4)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x1, &(0x7f0000000200)=""/16, 0x10}, &(0x7f00000003c0)=0x40)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r6, 0x0)
getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000400)=0x1, &(0x7f0000000440)=0x4)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000001100)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x6, 0x2, [{}, {0x0, 0x5}]}]}]}]}, 0x30}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x30}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r9)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r10, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x16, 0x8, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}}, 0x11)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x55}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x80}}, 0x1004c005)
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="0306000300"/18, @ANYRES32=r11, @ANYBLOB="0500880000000000"], 0x24}}, 0x0)

419.380127ms ago: executing program 2 (id=1761):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000100)="0817b984558c9db4d1c1e379ce093a756f", 0x11)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27031600590214000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0)

308.570326ms ago: executing program 3 (id=1762):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffff8, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6gre0\x00', <r3=>0x0, 0x2, 0x7, 0x7f, 0x8, 0x2, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x700, 0x40, 0x8}})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, <r4=>0x0}, &(0x7f0000000100)=0xc)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private2, @in=@multicast2, 0x4e21, 0x0, 0x4e23, 0x4, 0x2, 0x20, 0x20, 0x2c, r3, r4}, {0x1, 0xab3, 0x8000000000000000, 0x294, 0x81, 0x7, 0x3, 0x3}, {0x10000000000, 0xfffffffffffffffe, 0xfffffffffffffff8, 0x2}, 0xd89, 0x6e6bb7, 0x2, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d5, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3500, 0x2, 0x2, 0x72, 0x80000001, 0x4, 0x401}}, 0xe8)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffff8, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2, 0x7, 0x7f, 0x8, 0x2, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x700, 0x40, 0x8}}) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private2, @in=@multicast2, 0x4e21, 0x0, 0x4e23, 0x4, 0x2, 0x20, 0x20, 0x2c, r3, r4}, {0x1, 0xab3, 0x8000000000000000, 0x294, 0x81, 0x7, 0x3, 0x3}, {0x10000000000, 0xfffffffffffffffe, 0xfffffffffffffff8, 0x2}, 0xd89, 0x6e6bb7, 0x2, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d5, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3500, 0x2, 0x2, 0x72, 0x80000001, 0x4, 0x401}}, 0xe8) (async)

210.213586ms ago: executing program 3 (id=1763):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000001800010000000000000000001d0100000800050000fd000008000900", @ANYRES32=0x0, @ANYBLOB="05000d000100000008000a00", @ANYRES32=0x0, @ANYBLOB="15000100000000000000e2020000000000000070040000000c000b00000000000000000008"], 0x60}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x3}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}]}, 0x30}}, 0x0)

190.924149ms ago: executing program 2 (id=1764):
r0 = socket(0x8000000010, 0x2, 0x0)
write(r0, &(0x7f00000002c0)="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", 0xfc)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x203, 0xfffffffc, 0x9}}], 0x20, 0x20000000}], 0x1, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2500, 0x7315, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010101, @private}}}})

144.4078ms ago: executing program 1 (id=1765):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000a6ddd182e5000000000000080000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x7800, 0xe3fe455afc4629a5, 0x1, 0x2, {{0x19, 0x4, 0x0, 0x4, 0x64, 0x68, 0x0, 0x2, 0x2f, 0x0, @private=0xa010100, @empty, {[@lsrr={0x83, 0x17, 0xfd, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1, @remote]}, @ssrr={0x89, 0x2b, 0x15, [@dev={0xac, 0x14, 0x14, 0x16}, @broadcast, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @private=0xa010100, @broadcast, @empty, @broadcast]}, @timestamp={0x44, 0x8, 0x9f, 0x0, 0x0, [0x9]}, @generic={0x7, 0x5, "1d5544"}]}}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f00000002c0)={'gre0\x00', <r2=>0x0, 0x7800, 0xe3fe455afc4629a5, 0x1, 0x2, {{0x19, 0x4, 0x0, 0x4, 0x64, 0x68, 0x0, 0x2, 0x2f, 0x0, @private=0xa010100, @empty, {[@lsrr={0x83, 0x17, 0xfd, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1, @remote]}, @ssrr={0x89, 0x2b, 0x15, [@dev={0xac, 0x14, 0x14, 0x16}, @broadcast, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @private=0xa010100, @broadcast, @empty, @broadcast]}, @timestamp={0x44, 0x8, 0x9f, 0x0, 0x0, [0x9]}, @generic={0x7, 0x5, "1d5544"}]}}}}})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x8, [@enum={0x10, 0x4, 0x0, 0x6, 0x4, [{0x9, 0x1}, {0x1, 0x6}, {0x1, 0x5}, {0x7, 0x4}]}]}, {0x0, [0x2e, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, &(0x7f0000000440)=""/208, 0x4c, 0xd0, 0x1, 0x401, 0x10000, @value}, 0x28) (async)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x8, [@enum={0x10, 0x4, 0x0, 0x6, 0x4, [{0x9, 0x1}, {0x1, 0x6}, {0x1, 0x5}, {0x7, 0x4}]}]}, {0x0, [0x2e, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, &(0x7f0000000440)=""/208, 0x4c, 0xd0, 0x1, 0x401, 0x10000, @value}, 0x28)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, <r5=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r5, 0x4)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @private2={0xfc, 0x2, '\x00', 0x1}, [], [], 'veth0_macvtap\x00', 'batadv0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x403}}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@mcast2, [0xffffff00, 0xffffffff, 0xff000000, 0x677600862d7518af], @ipv4=@multicast1, [0xffffffff, 0xffffffff, 0xffffffff], 0x4d5, 0x3502, 0x32, 0x0, 0x6, 0x4}, {@ipv6=@private0, [0x1fffffffe, 0xff, 0xff000000], @ipv6=@empty, [0xff000000, 0x0, 0xff, 0xff], 0x4d2, 0x3501, 0x1d, 0x0, 0x1b, 0x3}, {@ipv4=@broadcast, [0x0, 0xffffff00, 0xff000000, 0xffffff00], @ipv6=@mcast2, [0x0, 0xff, 0xffff00, 0xffffff00], 0x4d2, 0x3501, 0xd5, 0x1}, {@ipv6=@remote, [0xff, 0xffffffff, 0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010102, [0xff000000, 0x0, 0xffffff00, 0x968dcf91dbb7ce5], 0x4d1, 0x3503, 0x3a, 0x1, 0xb, 0x6}], 0x7}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @private2={0xfc, 0x2, '\x00', 0x1}, [], [], 'veth0_macvtap\x00', 'batadv0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x403}}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@mcast2, [0xffffff00, 0xffffffff, 0xff000000, 0x677600862d7518af], @ipv4=@multicast1, [0xffffffff, 0xffffffff, 0xffffffff], 0x4d5, 0x3502, 0x32, 0x0, 0x6, 0x4}, {@ipv6=@private0, [0x1fffffffe, 0xff, 0xff000000], @ipv6=@empty, [0xff000000, 0x0, 0xff, 0xff], 0x4d2, 0x3501, 0x1d, 0x0, 0x1b, 0x3}, {@ipv4=@broadcast, [0x0, 0xffffff00, 0xff000000, 0xffffff00], @ipv6=@mcast2, [0x0, 0xff, 0xffff00, 0xffffff00], 0x4d2, 0x3501, 0xd5, 0x1}, {@ipv6=@remote, [0xff, 0xffffffff, 0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010102, [0xff000000, 0x0, 0xffffff00, 0x968dcf91dbb7ce5], 0x4d1, 0x3503, 0x3a, 0x1, 0xb, 0x6}], 0x7}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x5, &(0x7f0000000000)=@raw=[@generic={0x9, 0xb, 0xc, 0x7, 0x3}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x35}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], &(0x7f0000000180)='GPL\x00', 0x5, 0xff, &(0x7f00000001c0)=""/255, 0x41000, 0x30, '\x00', r2, @fallback=0x1f, r3, 0x8, &(0x7f0000000580)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x6, 0xe, 0x200}, 0x10, r5, 0xffffffffffffffff, 0x2, &(0x7f0000000600)=[r1, r1, r0, r0], &(0x7f0000000640)=[{0x5, 0x5, 0x5, 0x7}, {0x2, 0x4, 0xf, 0xb}], 0x10, 0x7, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x22a}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x1, 0x1, 0xc, 0x8, 0xdf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

0s ago: executing program 3 (id=1766):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r2=>0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000700)={{}, "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"})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xbd, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d285f29882fbd9423debbb86f9dba4a2dba4dbe076c02262600c43443efd6f5091dfbd56183a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9e4606d2e4cc898739222c5d3a83c00341c5ae846a60cf93ab48d68e8e9467d1ccadc42"}]}, 0xe0}], 0x1}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@dev}, {@in=@remote, 0x0, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x7}}]}, 0x184}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={0x70, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x54, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffff}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x604c054}, 0x8000)

kernel console output (not intermixed with test programs):

_slave_1 (retrying later): interface not active
[   63.377049][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.384475][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.391643][ T5840] bridge_slave_0: entered allmulticast mode
[   63.398446][ T5840] bridge_slave_0: entered promiscuous mode
[   63.407666][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.415772][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.422969][ T5840] bridge_slave_1: entered allmulticast mode
[   63.429916][ T5840] bridge_slave_1: entered promiscuous mode
[   63.438454][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.458289][ T5835] team0: Port device team_slave_1 added
[   63.478223][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.521369][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.528448][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.554668][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.575010][ T5843] team0: Port device team_slave_0 added
[   63.582791][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.599270][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.606397][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.632806][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.646070][ T5843] team0: Port device team_slave_1 added
[   63.653574][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.694625][ T5147] Bluetooth: hci0: command tx timeout
[   63.731145][ T5830] hsr_slave_0: entered promiscuous mode
[   63.737403][ T5830] hsr_slave_1: entered promiscuous mode
[   63.743817][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.751672][ T5830] Cannot create hsr debugfs directory
[   63.759238][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.766319][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.792633][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.792636][ T5147] Bluetooth: hci1: command tx timeout
[   63.806111][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.817048][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.843750][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.857614][ T5840] team0: Port device team_slave_0 added
[   63.866516][ T5840] team0: Port device team_slave_1 added
[   63.934157][ T5147] Bluetooth: hci4: command tx timeout
[   63.943872][ T5147] Bluetooth: hci2: command tx timeout
[   63.950177][ T5835] hsr_slave_0: entered promiscuous mode
[   63.956807][ T5835] hsr_slave_1: entered promiscuous mode
[   63.962699][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.970914][ T5835] Cannot create hsr debugfs directory
[   63.987421][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.994644][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.020994][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.031930][ T5147] Bluetooth: hci3: command tx timeout
[   64.039007][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.046146][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.072334][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.170460][ T5843] hsr_slave_0: entered promiscuous mode
[   64.177190][ T5843] hsr_slave_1: entered promiscuous mode
[   64.183168][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.190867][ T5843] Cannot create hsr debugfs directory
[   64.200130][ T5840] hsr_slave_0: entered promiscuous mode
[   64.206562][ T5840] hsr_slave_1: entered promiscuous mode
[   64.213856][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.221453][ T5840] Cannot create hsr debugfs directory
[   64.278698][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   64.312090][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   64.321505][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   64.363510][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   64.555000][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.573974][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.585531][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.607506][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.651023][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.678681][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.706662][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.719090][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.744850][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.806878][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   64.819886][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   64.831634][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   64.865000][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   64.879295][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.886572][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.908079][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.915241][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.925039][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   64.958758][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.970487][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.985075][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.000621][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.082126][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.149640][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   65.171012][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.178230][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.196664][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.203835][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.253178][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.296644][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.338770][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   65.356799][ T3020] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.363987][ T3020] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.388972][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.407934][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   65.429697][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.436889][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.472554][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.479766][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.499281][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.506423][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.541847][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   65.588622][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.595791][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.618222][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.645573][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.652684][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.751043][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.775933][ T5147] Bluetooth: hci0: command tx timeout
[   65.853791][ T5147] Bluetooth: hci1: command tx timeout
[   65.866268][ T5835] veth0_vlan: entered promiscuous mode
[   65.872351][ T5834] veth0_vlan: entered promiscuous mode
[   65.910345][ T5834] veth1_vlan: entered promiscuous mode
[   65.958563][ T5835] veth1_vlan: entered promiscuous mode
[   66.014090][ T5147] Bluetooth: hci2: command tx timeout
[   66.014184][ T5837] Bluetooth: hci4: command tx timeout
[   66.031880][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.052166][ T5834] veth0_macvtap: entered promiscuous mode
[   66.079963][ T5834] veth1_macvtap: entered promiscuous mode
[   66.089882][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.096890][ T5837] Bluetooth: hci3: command tx timeout
[   66.127123][ T5835] veth0_macvtap: entered promiscuous mode
[   66.155474][ T5835] veth1_macvtap: entered promiscuous mode
[   66.185848][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.219697][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.243144][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.267882][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.280168][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.289512][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.301194][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.328076][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.342032][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.355539][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.402567][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.415349][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.428945][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.470501][ T5830] veth0_vlan: entered promiscuous mode
[   66.477625][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.487485][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.497103][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.506541][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.531851][ T5830] veth1_vlan: entered promiscuous mode
[   66.581672][ T5840] veth0_vlan: entered promiscuous mode
[   66.584271][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.599515][ T5840] veth1_vlan: entered promiscuous mode
[   66.605524][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.648675][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.658383][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.730629][ T5843] veth0_vlan: entered promiscuous mode
[   66.749850][  T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.772537][  T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.792554][ T5830] veth0_macvtap: entered promiscuous mode
[   66.805987][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.811836][ T5840] veth0_macvtap: entered promiscuous mode
[   66.837427][ T3020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.848977][ T3020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.858760][ T5830] veth1_macvtap: entered promiscuous mode
[   66.878872][ T5840] veth1_macvtap: entered promiscuous mode
[   66.900182][ T5843] veth1_vlan: entered promiscuous mode
[   66.960224][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.975748][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.986038][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.997132][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.008449][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.018581][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.029287][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.039888][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.050641][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.061051][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.073226][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.085567][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.113286][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.142172][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.165444][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.176279][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.187733][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.198303][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.211876][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.232121][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.242636][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.253212][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.263890][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.276209][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.286410][ T5843] veth0_macvtap: entered promiscuous mode
[   67.295425][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.304887][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.314688][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.323559][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.340727][ T5919] (unnamed net_device) (uninitialized): option arp_validate: invalid value (258)
[   67.380520][ T5843] veth1_macvtap: entered promiscuous mode
[   67.405119][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.406395][ T5921] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.423577][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.435517][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.444918][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.481649][ T5921] bridge0: entered promiscuous mode
[   67.502174][ T5921] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.2'.
[   67.526558][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.549298][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.559573][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.576982][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.588391][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.599218][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.609219][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.621385][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.632950][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.671782][ T5920] bridge0: left promiscuous mode
[   67.681764][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.694942][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.705052][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.715736][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.725664][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.736153][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.746257][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.756816][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.767799][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.814868][ T5843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.853765][ T5837] Bluetooth: hci0: command tx timeout
[   67.882847][ T5843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.894598][ T5843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.903447][ T5843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.933992][ T5837] Bluetooth: hci1: command tx timeout
[   67.947221][ T5928] netlink: 404 bytes leftover after parsing attributes in process `syz.1.8'.
[   67.961262][ T5928] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8'.
[   67.964888][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.970513][ T5928] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8'.
[   67.987378][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.987520][ T5928] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8'.
[   68.047234][ T5931] warning: `syz.3.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   68.076186][  T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.095399][ T5837] Bluetooth: hci4: command tx timeout
[   68.103494][ T5837] Bluetooth: hci2: command tx timeout
[   68.122700][  T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.173642][ T5837] Bluetooth: hci3: command tx timeout
[   68.213715][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.239398][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.386876][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.421585][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.426016][  T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.462424][  T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.545044][ T5878] IPVS: starting estimator thread 0...
[   68.572924][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.612709][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.634531][ T5951] IPVS: using max 20 ests per chain, 48000 per kthread
[   69.094069][ T5970] netlink: 'syz.0.14': attribute type 7 has an invalid length.
[   69.125466][ T5970] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14'.
[   69.152703][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15'.
[   69.184376][ T5974] netlink: 'syz.4.16': attribute type 1 has an invalid length.
[   69.268666][ T5978] syz.0.17: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   69.286286][ T5978] CPU: 1 UID: 0 PID: 5978 Comm: syz.0.17 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0
[   69.286309][ T5978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   69.286325][ T5978] Call Trace:
[   69.286334][ T5978]  <TASK>
[   69.286343][ T5978]  dump_stack_lvl+0x241/0x360
[   69.286373][ T5978]  ? __pfx_dump_stack_lvl+0x10/0x10
[   69.286390][ T5978]  ? __pfx__printk+0x10/0x10
[   69.286414][ T5978]  ? __rcu_read_unlock+0xa1/0x110
[   69.286445][ T5978]  warn_alloc+0x278/0x410
[   69.286466][ T5978]  ? __vmalloc_node_range_noprof+0x106/0x1380
[   69.286493][ T5978]  ? __pfx_warn_alloc+0x10/0x10
[   69.286510][ T5978]  ? kasan_save_track+0x3f/0x80
[   69.286525][ T5978]  ? __kasan_kmalloc+0x98/0xb0
[   69.286543][ T5978]  ? xsk_setsockopt+0x4aa/0x810
[   69.286558][ T5978]  ? do_sock_setsockopt+0x3af/0x720
[   69.286580][ T5978]  ? __x64_sys_setsockopt+0x1ee/0x280
[   69.286602][ T5978]  ? do_syscall_64+0xf3/0x230
[   69.286623][ T5978]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.286653][ T5978]  __vmalloc_node_range_noprof+0x126/0x1380
[   69.286703][ T5978]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   69.286731][ T5978]  ? __kasan_kmalloc+0x98/0xb0
[   69.286754][ T5978]  vmalloc_user_noprof+0x74/0x80
[   69.286769][ T5978]  ? xskq_create+0xb6/0x170
[   69.286783][ T5978]  xskq_create+0xb6/0x170
[   69.286801][ T5978]  xsk_init_queue+0xa1/0x100
[   69.286821][ T5978]  xsk_setsockopt+0x4aa/0x810
[   69.286840][ T5978]  ? __pfx_xsk_setsockopt+0x10/0x10
[   69.286858][ T5978]  ? __pfx_aa_sk_perm+0x10/0x10
[   69.286893][ T5978]  ? aa_sock_opt_perm+0x79/0x120
[   69.286924][ T5978]  ? __pfx_xsk_setsockopt+0x10/0x10
[   69.286940][ T5978]  do_sock_setsockopt+0x3af/0x720
[   69.286969][ T5978]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   69.286996][ T5978]  ? __fget_files+0x395/0x410
[   69.287017][ T5978]  ? __fget_files+0x2a/0x410
[   69.287043][ T5978]  __x64_sys_setsockopt+0x1ee/0x280
[   69.287071][ T5978]  do_syscall_64+0xf3/0x230
[   69.287090][ T5978]  ? clear_bhb_loop+0x35/0x90
[   69.287113][ T5978]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.287134][ T5978] RIP: 0033:0x7f02ef58d169
[   69.287156][ T5978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.287170][ T5978] RSP: 002b:00007f02f0484038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   69.287189][ T5978] RAX: ffffffffffffffda RBX: 00007f02ef7a5fa0 RCX: 00007f02ef58d169
[   69.287202][ T5978] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[   69.287212][ T5978] RBP: 00007f02ef60e2a0 R08: 0000000000000004 R09: 0000000000000000
[   69.287222][ T5978] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000
[   69.287233][ T5978] R13: 0000000000000000 R14: 00007f02ef7a5fa0 R15: 00007fff0c013788
[   69.287259][ T5978]  </TASK>
[   69.288812][ T5978] Mem-Info:
[   69.406810][ T5984] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16'.
[   69.425653][ T5953] Zero length message leads to an empty skb
[   69.462042][ T5978] active_anon:7932 inactive_anon:0 isolated_anon:0
[   69.462042][ T5978]  active_file:1089 inactive_file:38295 isolated_file:0
[   69.462042][ T5978]  unevictable:768 dirty:1386 writeback:0
[   69.462042][ T5978]  slab_reclaimable:9908 slab_unreclaimable:95878
[   69.462042][ T5978]  mapped:31222 shmem:4324 pagetables:876
[   69.462042][ T5978]  sec_pagetables:0 bounce:0
[   69.462042][ T5978]  kernel_misc_reclaimable:0
[   69.462042][ T5978]  free:1348426 free_pcp:462 free_cma:0
[   69.655669][ T5978] Node 0 active_anon:31328kB inactive_anon:0kB active_file:4356kB inactive_file:153108kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116988kB dirty:5540kB writeback:0kB shmem:15660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10800kB pagetables:3504kB sec_pagetables:0kB all_unreclaimable? no
[   69.708578][ T5978] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[   69.753148][ T5978] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   69.824226][ T5978] lowmem_reserve[]: 0 2490 2490 0 0
[   69.829568][ T5978] Node 0 DMA32 free:1470056kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:26988kB inactive_anon:0kB active_file:4356kB inactive_file:152796kB unevictable:1536kB writepending:5536kB present:3129332kB managed:2549864kB mlocked:0kB bounce:0kB free_pcp:5124kB local_pcp:4632kB free_cma:0kB
[   69.896464][ T5978] lowmem_reserve[]: 0 0 0 0 0
[   69.912159][ T5978] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[   69.934210][ T5837] Bluetooth: hci0: command tx timeout
[   69.963171][ T5978] lowmem_reserve[]: 0 0 0 0 0
[   69.968229][ T5978] Node 1 Normal free:3909440kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:440kB local_pcp:440kB free_cma:0kB
[   70.007322][ T5978] lowmem_reserve[]: 0 0 0 0 0
[   70.022593][ T5837] Bluetooth: hci1: command tx timeout
[   70.068296][ T5978] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   70.081351][ T5978] Node 0 DMA32: 276*4kB (UME) 324*8kB (U) 70*16kB (UM) 47*32kB (UME) 33*64kB (UME) 24*128kB (UM) 10*256kB (UM) 6*512kB (ME) 4*1024kB (UM) 3*2048kB (M) 355*4096kB (M) = 1481456kB
[   70.103742][ T5978] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[   70.120737][ T5978] Node 1 Normal: 158*4kB (UE) 61*8kB (UME) 40*16kB (UME) 212*32kB (UME) 100*64kB (UME) 28*128kB (UM) 13*256kB (UME) 9*512kB (UME) 4*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3909472kB
[   70.156830][ T5996] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0
[   70.179428][ T5837] Bluetooth: hci2: command tx timeout
[   70.185151][ T5837] Bluetooth: hci4: command tx timeout
[   70.208916][ T5978] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   70.236479][ T6001] sctp: [Deprecated]: syz.2.23 (pid 6001) Use of int in max_burst socket option deprecated.
[   70.236479][ T6001] Use struct sctp_assoc_value instead
[   70.255559][ T5978] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   70.259537][ T5837] Bluetooth: hci3: command tx timeout
[   70.282998][ T6001] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.295142][ T5978] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   70.296203][ T6001] xt_TCPMSS: Only works on TCP SYN packets
[   70.354674][ T5978] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   70.383737][ T5978] 40813 total pagecache pages
[   70.389349][ T5978] 0 pages in swap cache
[   70.414977][ T5978] Free swap  = 124996kB
[   70.463493][ T5978] Total swap = 124996kB
[   70.471855][ T5978] 2097051 pages RAM
[   70.487122][ T5978] 0 pages HighMem/MovableOnly
[   70.500567][ T5978] 427863 pages reserved
[   70.570001][ T5978] 0 pages cma reserved
[   70.572443][ T6012] Cannot find add_set index 0 as target
[   70.707672][ T6018] netlink: 10 bytes leftover after parsing attributes in process `syz.2.30'.
[   70.809088][ T6026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.33'.
[   70.984254][ T6030] netlink: 'syz.3.35': attribute type 29 has an invalid length.
[   70.999475][ T6030] netlink: 'syz.3.35': attribute type 29 has an invalid length.
[   71.118333][ T6038] openvswitch: netlink: Message has 44053 unknown bytes.
[   71.204277][ T6040] trusted_key: syz.2.40 sent an empty control message without MSG_MORE.
[   71.222995][ T6042] netlink: 'syz.3.41': attribute type 1 has an invalid length.
[   71.250610][ T6045] netlink: 'syz.3.41': attribute type 1 has an invalid length.
[   71.293289][ T6047] openvswitch: netlink: Port -1 exceeds max allowable 65535
[   71.422308][ T6044] dvmrp0: entered allmulticast mode
[   71.706091][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[   71.721652][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[   71.932598][ T6074] syz.0.54 uses obsolete (PF_INET,SOCK_PACKET)
[   71.997109][ T6071] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   72.368969][ T6100] xt_CT: You must specify a L4 protocol and not use inversions on it
[   72.563698][ T6111] __nla_validate_parse: 9 callbacks suppressed
[   72.563717][ T6111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.64'.
[   72.624302][ T6116] openvswitch: netlink: Geneve opt len 31 is not a multiple of 4.
[   72.682623][ T6116] netlink: 'syz.2.67': attribute type 9 has an invalid length.
[   72.691860][ T6119] netlink: 'syz.1.66': attribute type 1 has an invalid length.
[   72.711131][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'.
[   72.729945][ T6119] netlink: 'syz.1.66': attribute type 10 has an invalid length.
[   72.754686][ T6119] netlink: 236 bytes leftover after parsing attributes in process `syz.1.66'.
[   72.782866][ T6120] netlink: 'syz.1.66': attribute type 8 has an invalid length.
[   72.848961][ T6123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.68'.
[   72.865962][ T6130] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[   72.876286][ T6130] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[   72.948673][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'.
[   73.630745][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'.
[   73.946302][ T6177] netlink: 16 bytes leftover after parsing attributes in process `syz.1.84'.
[   73.967309][ T6177] netlink: 72 bytes leftover after parsing attributes in process `syz.1.84'.
[   74.150839][ T5881] IPVS: starting estimator thread 0...
[   74.274813][ T6188] IPVS: using max 21 ests per chain, 50400 per kthread
[   74.713174][ T6208] batadv_slave_0: entered promiscuous mode
[   74.778334][ T6208] batadv_slave_0: left promiscuous mode
[   74.891210][ T6218] netlink: 48 bytes leftover after parsing attributes in process `syz.0.96'.
[   75.931929][ T6233] wlan0 speed is unknown, defaulting to 1000
[   75.952140][ T6233] wlan0 speed is unknown, defaulting to 1000
[   75.991295][ T6233] wlan0 speed is unknown, defaulting to 1000
[   76.042340][ T6233] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   76.124351][ T6233] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   76.203117][ T6246] pim6reg: entered allmulticast mode
[   76.235380][ T6233] wlan0 speed is unknown, defaulting to 1000
[   76.262426][ T6246] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[   76.312843][ T6233] wlan0 speed is unknown, defaulting to 1000
[   76.328191][ T6233] wlan0 speed is unknown, defaulting to 1000
[   76.365506][ T6233] wlan0 speed is unknown, defaulting to 1000
[   76.401054][ T6233] wlan0 speed is unknown, defaulting to 1000
[   76.792360][ T6271] xt_limit: Overflow, try lower: 2147483649/128
[   77.132944][ T6277] syz.0.117 (6277) used greatest stack depth: 17840 bytes left
[   77.300338][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'.
[   77.426432][ T6298] openvswitch: netlink: Flow key attr not present in new flow.
[   77.590686][ T6306] netlink: 9 bytes leftover after parsing attributes in process `syz.3.126'.
[   77.701778][ T6306] gretap0: entered promiscuous mode
[   77.916849][ T6330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.133'.
[   77.969194][ T6335] xt_cgroup: invalid path, errno=-2
[   77.973023][ T6334] Bluetooth: MGMT ver 1.23
[   77.984001][ T6333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.134'.
[   78.010412][ T6333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.134'.
[   78.069484][ T6333] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.134'.
[   78.254714][ T6343] pimreg: entered allmulticast mode
[   78.281606][ T6344] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.138'.
[   78.301266][ T6350] validate_nla: 1 callbacks suppressed
[   78.301283][ T6350] netlink: 'syz.1.140': attribute type 33 has an invalid length.
[   78.310347][ T6344] netlink: 'syz.3.138': attribute type 21 has an invalid length.
[   78.356024][ T6350] netlink: 152 bytes leftover after parsing attributes in process `syz.1.140'.
[   78.378858][ T6344] netlink: 132 bytes leftover after parsing attributes in process `syz.3.138'.
[   78.658561][ T6364] IPv6: sit1: Disabled Multicast RS
[   78.956997][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'.
[   79.006368][ T6379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.148'.
[   79.063004][ T6379] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   79.504532][ T6410] netlink: 'syz.0.160': attribute type 4 has an invalid length.
[   79.640405][ T6418] tipc: Started in network mode
[   79.663676][ T6418] tipc: Node identity ac14140f, cluster identity 4711
[   79.671584][ T6418] tipc: New replicast peer: 255.255.255.255
[   79.720722][ T6418] tipc: Enabled bearer <udp:syz2>, priority 10
[   79.756053][ T6418] netlink: 'syz.1.161': attribute type 142 has an invalid length.
[   79.902509][ T6432] IPv6: sit1: Disabled Multicast RS
[   80.835834][ T5910] tipc: Node number set to 2886997007
[   80.995809][ T6489] netlink: 'syz.2.180': attribute type 11 has an invalid length.
[   81.081837][ T6493] netlink: set zone limit has 8 unknown bytes
[   81.096897][ T6493] netlink: set zone limit has 8 unknown bytes
[   81.107724][ T6493] netlink: set zone limit has 8 unknown bytes
[   81.116665][ T6495] netlink: 'syz.1.182': attribute type 12 has an invalid length.
[   81.133646][ T5837] Bluetooth: hci0: command tx timeout
[   81.143153][ T6494] netlink: 'syz.3.183': attribute type 1 has an invalid length.
[   81.942569][   T80] cfg80211: failed to load regulatory.db
[   82.102285][ T6537] nbd: socks must be embedded in a SOCK_ITEM attr
[   82.115136][ T6281] block nbd64: NBD_DISCONNECT
[   82.147273][ T6542] nbd: nbd64 already in use
[   82.447813][ T6558] netlink: 'syz.4.200': attribute type 13 has an invalid length.
[   82.588283][ T6566] openvswitch: netlink: Port -1 exceeds max allowable 65535
[   82.797095][ T6573] __nla_validate_parse: 14 callbacks suppressed
[   82.797115][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.206'.
[   82.818838][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.206'.
[   82.848973][ T6573] netlink: 'syz.4.206': attribute type 14 has an invalid length.
[   82.871438][ T6582] netlink: 28 bytes leftover after parsing attributes in process `syz.0.209'.
[   82.912389][ T6573] netlink: 'syz.4.206': attribute type 13 has an invalid length.
[   83.123216][ T6595] syzkaller1: tun_chr_ioctl cmd 1074025673
[   83.144697][ T6598] syzkaller1: tun_chr_ioctl cmd 1074025677
[   83.158316][ T6598] syzkaller1: Linktype set failed because interface is up
[   83.198661][ T6600] netlink: 32 bytes leftover after parsing attributes in process `syz.2.213'.
[   83.227176][ T5882] syzkaller1: tun_net_xmit 90
[   83.238816][ T6597] netlink: 32 bytes leftover after parsing attributes in process `syz.2.213'.
[   83.434186][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'.
[   83.447232][ T6616] openvswitch: netlink: Geneve opt len 31 is not a multiple of 4.
[   83.457066][ T6614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.216'.
[   83.637049][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.221'.
[   83.697388][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.221'.
[   83.820319][ T6633] netlink: 24 bytes leftover after parsing attributes in process `syz.4.223'.
[   83.840839][ T6635] 0·: renamed from hsr0 (while UP)
[   83.887309][ T6635] 0·: entered promiscuous mode
[   83.894902][ T6635] A link change request failed with some changes committed already. Interface 
70· may have been left with an inconsistent configuration, please check.
[   83.989987][ T6640] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[   84.009055][ T6640] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[   84.089799][ T6640] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[   84.964791][ T6697] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   85.386942][ T6722] dvmrp0: entered allmulticast mode
[   85.622634][ T6735] netlink: 'syz.3.253': attribute type 1 has an invalid length.
[   85.664037][ T6735] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   85.671632][ T6735] IPv6: NLM_F_CREATE should be set when creating new route
[   85.735859][ T6742] netlink: 'syz.3.253': attribute type 1 has an invalid length.
[   85.744869][ T6738] netlink: 'syz.2.255': attribute type 1 has an invalid length.
[   85.752909][ T6738] netlink: 'syz.2.255': attribute type 2 has an invalid length.
[   85.774802][ T6738] netlink: 'syz.2.255': attribute type 1 has an invalid length.
[   85.786163][ T6742] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   86.410461][ T6776] netlink: 'syz.0.261': attribute type 9 has an invalid length.
[   86.726051][ T6790] bridge: RTM_NEWNEIGH with invalid ether address
[   86.751457][ T6791] bridge: RTM_NEWNEIGH with invalid ether address
[   86.790095][ T6790] netlink: 'syz.3.266': attribute type 1 has an invalid length.
[   86.861553][ T6801] openvswitch: netlink: Multiple metadata blocks provided
[   87.401508][   T29] audit: type=1107 audit(1740707229.636:2): pid=6824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=']µqŸ6�
ØÌv+ë‘ç·–¹m#ÍÓ)ô‚².K„Ê•h‹ŠØmD
li•KM¼ú'
[   87.568853][ T6831] xt_TPROXY: Can be used only with -p tcp or -p udp
[   87.681183][ T6840] veth0_macvtap: entered allmulticast mode
[   87.937600][ T6848] veth0_macvtap (unregistering): left allmulticast mode
[   88.021290][ T6862] bond_slave_0: entered allmulticast mode
[   88.210658][ T6874] netlink: 'syz.0.287': attribute type 1 has an invalid length.
[   88.446176][ T6889] __nla_validate_parse: 13 callbacks suppressed
[   88.446194][ T6889] netlink: 24 bytes leftover after parsing attributes in process `syz.0.291'.
[   88.607967][ T6896] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   88.745626][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'.
[   88.762486][ T6900] netlink: 80 bytes leftover after parsing attributes in process `syz.2.294'.
[   88.806419][ T6901] tipc: Started in network mode
[   88.811430][ T6901] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[   88.820583][ T6901] tipc: Enabled bearer <eth:ipvlan1>, priority 28
[   89.076195][ T6912] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   89.128026][ T6912] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   89.185196][ T6912] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   89.198999][ T6912] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   89.215549][ T6912] geneve2: entered promiscuous mode
[   89.257258][ T6912] geneve2: entered allmulticast mode
[   89.364128][ T6912] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[   89.388363][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.301'.
[   89.402639][ T6937] netlink: 16 bytes leftover after parsing attributes in process `syz.2.298'.
[   89.406149][ T6912] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[   89.426702][ T6933] raw_sendmsg: syz.3.302 forgot to set AF_INET. Fix it!
[   89.436432][ T6912] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[   89.481891][ T6912] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[   89.915949][ T6956] hsr0: entered promiscuous mode
[   89.939750][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.308'.
[   89.964278][ T5880] tipc: Node number set to 10136234
[   90.057722][ T6956] hsr_slave_0: left promiscuous mode
[   90.089577][ T6956] hsr_slave_1: left promiscuous mode
[   90.146870][ T6956] hsr0 (unregistering): left promiscuous mode
[   90.401443][ T6983] netlink: 576 bytes leftover after parsing attributes in process `syz.4.319'.
[   90.718700][ T6997] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[   90.938094][ T7007] netlink: 'syz.0.326': attribute type 29 has an invalid length.
[   90.947500][ T7007] netlink: 'syz.0.326': attribute type 29 has an invalid length.
[   90.970809][ T7007] netlink: 'syz.0.326': attribute type 29 has an invalid length.
[   90.974032][ T7008] xt_CT: You must specify a L4 protocol and not use inversions on it
[   91.144861][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.327'.
[   91.161760][ T7013] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   91.164454][ T7015] xt_hashlimit: max too large, truncated to 1048576
[   91.209502][ T7017] xt_hashlimit: max too large, truncated to 1048576
[   91.534505][ T7029] wlan0 speed is unknown, defaulting to 1000
[   91.653128][ T7039] netlink: 16 bytes leftover after parsing attributes in process `syz.3.335'.
[   91.879987][ T7051] netlink: 'syz.2.338': attribute type 2 has an invalid length.
[   91.892889][ T7051] netlink: 'syz.2.338': attribute type 1 has an invalid length.
[   92.153143][ T7066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.342'.
[   92.342021][ T7069] bond0: entered promiscuous mode
[   92.373944][ T7069] bond_slave_0: entered promiscuous mode
[   92.400232][ T7069] bond_slave_1: entered promiscuous mode
[   92.416468][ T7069] batadv0: entered promiscuous mode
[   92.422487][ T7069] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.432484][ T7069] Cannot create hsr debugfs directory
[   92.440119][ T7069] 8021q: adding VLAN 0 to HW filter on device hsr0
[   92.460517][ T7077] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   92.494482][ T7071] bond_slave_1: entered promiscuous mode
[   92.686391][ T5881] wlan0 speed is unknown, defaulting to 1000
[   92.790997][ T7093] netlink: 'syz.2.352': attribute type 1 has an invalid length.
[   92.879777][ T7093] 8021q: adding VLAN 0 to HW filter on device bond1
[   93.030947][ T7102] ieee802154 phy0 wpan0: encryption failed: -22
[   93.050452][ T7102] xt_policy: neither incoming nor outgoing policy selected
[   93.212024][ T7113] netlink: 'syz.2.359': attribute type 1 has an invalid length.
[   93.225499][ T7116] netlink: 'syz.2.359': attribute type 1 has an invalid length.
[   93.635667][ T7142] netlink: 'syz.3.365': attribute type 10 has an invalid length.
[   93.671256][ T7142] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link
[   93.706550][ T7144] lo speed is unknown, defaulting to 1000
[   93.717163][ T7144] lo speed is unknown, defaulting to 1000
[   93.731661][ T7144] lo speed is unknown, defaulting to 1000
[   93.739766][    C0] Illegal XDP return value 16128 on prog  (id 60) dev veth1_to_bridge, expect packet loss!
[   93.747007][ T7144] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   93.870102][ T7144] lo speed is unknown, defaulting to 1000
[   93.879766][ T7149] netlink: 'syz.2.370': attribute type 10 has an invalid length.
[   93.889647][ T7144] lo speed is unknown, defaulting to 1000
[   93.907068][ T7149] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.940552][ T7153] __nla_validate_parse: 10 callbacks suppressed
[   93.940570][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.372'.
[   93.959632][ T7144] lo speed is unknown, defaulting to 1000
[   94.024314][ T7144] lo speed is unknown, defaulting to 1000
[   94.031139][ T7144] lo speed is unknown, defaulting to 1000
[   94.097112][ T7158] mac80211_hwsim hwsim11 ÿ
: renamed from wlan1 (while UP)
[   94.117952][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.373'.
[   94.579719][ T7179] dvmrp0: entered allmulticast mode
[   94.596482][ T7182] IPVS: Error connecting to the multicast addr
[   94.646578][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.382'.
[   94.885106][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.385'.
[   94.896008][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.385'.
[   94.946808][ T7203] netlink: 596 bytes leftover after parsing attributes in process `syz.2.387'.
[   95.336974][ T7226] netlink: 36 bytes leftover after parsing attributes in process `syz.4.393'.
[   95.373031][ T7226] netlink: 40 bytes leftover after parsing attributes in process `syz.4.393'.
[   95.614610][ T7238] netlink: 45 bytes leftover after parsing attributes in process `syz.4.399'.
[   95.806448][ T7247] tipc: Failed to remove unknown binding: 66,1,1/10136234:4059202367/4059202369
[   95.855761][ T7247] tipc: Failed to remove unknown binding: 66,1,1/10136234:4059202367/4059202369
[   96.054998][ T7256] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[   96.518357][ T7273] netlink: 28 bytes leftover after parsing attributes in process `syz.3.408'.
[   96.556323][ T7280] openvswitch: netlink: Flow actions attr not present in new flow.
[   97.042640][ T7303] validate_nla: 6 callbacks suppressed
[   97.042660][ T7303] netlink: 'syz.4.419': attribute type 1 has an invalid length.
[   97.071325][ T7303] netlink: 'syz.4.419': attribute type 1 has an invalid length.
[   97.093570][ T7303] netlink: 'syz.4.419': attribute type 1 has an invalid length.
[   97.094084][ T7304] bond1: entered promiscuous mode
[   97.121703][ T7303] netlink: 'syz.4.419': attribute type 2 has an invalid length.
[   97.135068][ T7304] bond1: entered allmulticast mode
[   97.140718][ T7304] 8021q: adding VLAN 0 to HW filter on device bond1
[   97.228474][ T7310] netlink: 'syz.2.421': attribute type 1 has an invalid length.
[   97.239622][ T7310] netlink: 'syz.2.421': attribute type 2 has an invalid length.
[   98.854396][ T7383] netlink: 'syz.2.439': attribute type 12 has an invalid length.
[   99.134039][ T7403] __nla_validate_parse: 5 callbacks suppressed
[   99.134057][ T7403] netlink: 76 bytes leftover after parsing attributes in process `syz.1.442'.
[   99.205881][ T7403] nbd: illegal input index -8454144
[   99.261023][ T7403] netlink: 'syz.1.442': attribute type 8 has an invalid length.
[   99.631176][ T7435] netlink: 124 bytes leftover after parsing attributes in process `syz.3.448'.
[   99.650866][ T7435] netlink: 32 bytes leftover after parsing attributes in process `syz.3.448'.
[   99.939187][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.451'.
[   99.986615][ T7461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.452'.
[  100.205725][ T7473] netlink: 3648 bytes leftover after parsing attributes in process `syz.0.455'.
[  100.232468][ T7473] netlink: 3648 bytes leftover after parsing attributes in process `syz.0.455'.
[  101.160852][ T7529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.498616][ T7549] netlink: 165 bytes leftover after parsing attributes in process `syz.2.472'.
[  101.548177][ T7553] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.474'.
[  101.558391][ T7554] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.474'.
[  101.574311][ T7554] openvswitch: netlink: Missing key (keys=40, expected=80)
[  101.582793][ T7554] openvswitch: netlink: Missing key (keys=40, expected=80)
[  101.588322][ T7553] openvswitch: netlink: Missing key (keys=40, expected=80)
[  101.596828][ T7554] openvswitch: netlink: Missing key (keys=40, expected=80)
[  101.629397][ T7554] openvswitch: netlink: Missing key (keys=40, expected=80)
[  101.642092][ T7554] openvswitch: netlink: Missing key (keys=40, expected=80)
[  101.679584][ T7554] openvswitch: netlink: Missing key (keys=40, expected=80)
[  101.690490][ T7554] openvswitch: netlink: Missing key (keys=40, expected=80)
[  101.710730][ T7554] openvswitch: netlink: Missing key (keys=40, expected=80)
[  101.728361][ T7554] openvswitch: netlink: Missing key (keys=40, expected=80)
[  101.884962][ T7565] team0: No ports can be present during mode change
[  102.392142][ T7602] sctp: [Deprecated]: syz.0.488 (pid 7602) Use of struct sctp_assoc_value in delayed_ack socket option.
[  102.392142][ T7602] Use struct sctp_sack_info instead
[  102.461828][ T7606] xfrm1: entered allmulticast mode
[  102.616070][ T7612] IPv6: sit3: Disabled Multicast RS
[  102.644740][ T7612] sit3: entered allmulticast mode
[  103.111799][ T7645] netlink: 'syz.0.503': attribute type 29 has an invalid length.
[  103.122782][ T7645] netlink: 'syz.0.503': attribute type 29 has an invalid length.
[  103.831912][ T7676] netlink: 'syz.3.511': attribute type 3 has an invalid length.
[  104.041681][ T7690] x_tables: duplicate underflow at hook 1
[  104.173036][ T7694] veth1_macvtap: left promiscuous mode
[  104.367536][ T7698] syzkaller1: entered promiscuous mode
[  104.373333][ T7698] syzkaller1: entered allmulticast mode
[  104.422968][ T7702] netlink: 'syz.4.520': attribute type 3 has an invalid length.
[  104.632328][ T7706] __nla_validate_parse: 59 callbacks suppressed
[  104.632346][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.522'.
[  104.900404][ T7711] netlink: 20 bytes leftover after parsing attributes in process `syz.0.523'.
[  105.014133][ T7715] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  105.891638][ T7753] veth5: entered allmulticast mode
[  105.935397][ T7766] netlink: 'syz.3.535': attribute type 10 has an invalid length.
[  105.989601][ T7766] macvlan0: entered promiscuous mode
[  106.012378][ T7766] macvlan0: entered allmulticast mode
[  106.055068][ T7766] veth1_vlan: entered allmulticast mode
[  106.070834][ T7766] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  106.089349][ T7770] tipc: Started in network mode
[  106.107925][ T7770] tipc: Node identity aaaaaaaaaa34, cluster identity 4711
[  106.128582][ T7770] tipc: Enabled bearer <eth:macvlan0>, priority 10
[  106.330447][ T7786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.540'.
[  106.395750][ T7786] geneve2: entered promiscuous mode
[  106.556261][ T7802] netlink: 132 bytes leftover after parsing attributes in process `syz.1.544'.
[  106.845213][ T7818] netlink: 20 bytes leftover after parsing attributes in process `syz.2.548'.
[  107.248689][ T5882] tipc: Node number set to 10398378
[  107.285323][ T7846] net_ratelimit: 45 callbacks suppressed
[  107.285341][ T7846] openvswitch: netlink: IP tunnel dst address not specified
[  108.161378][ T7896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.565'.
[  108.373268][ T7907] netlink: 9 bytes leftover after parsing attributes in process `syz.4.568'.
[  108.434588][ T7907] gretap0: entered promiscuous mode
[  108.462851][ T7911] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20003
[  108.504374][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.571'.
[  108.731197][ T7926] netlink: 'syz.0.575': attribute type 9 has an invalid length.
[  108.784857][ T7917] DRBG: could not allocate digest TFM handle: hmac(sha384)
[  108.954695][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.576'.
[  110.002134][ T7999] netlink: 'syz.3.590': attribute type 12 has an invalid length.
[  110.042727][ T8000] netlink: 'syz.3.590': attribute type 12 has an invalid length.
[  110.251191][ T8008] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[  110.525057][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'.
[  110.581532][ T8028] netlink: 71 bytes leftover after parsing attributes in process `syz.4.596'.
[  110.634314][ T8033] netlink: 44 bytes leftover after parsing attributes in process `syz.1.597'.
[  110.648418][ T8028] netlink: 108 bytes leftover after parsing attributes in process `syz.4.596'.
[  110.690847][ T8028] netlink: 108 bytes leftover after parsing attributes in process `syz.4.596'.
[  110.706886][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'.
[  110.725138][ T8028] netlink: 108 bytes leftover after parsing attributes in process `syz.4.596'.
[  111.091461][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.605'.
[  111.091485][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.605'.
[  111.197358][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.606'.
[  111.401922][ T8066] Cannot find del_set index 0 as target
[  111.536819][ T8074] 8021q: adding VLAN 0 to HW filter on device bond1
[  111.698017][ T8079] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  112.156340][ T8105] netlink: 'syz.0.621': attribute type 7 has an invalid length.
[  112.447816][ T8121] netlink: 'syz.1.626': attribute type 20 has an invalid length.
[  112.475543][ T8124] FAULT_INJECTION: forcing a failure.
[  112.475543][ T8124] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  112.519618][ T8124] CPU: 0 UID: 0 PID: 8124 Comm: syz.0.627 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0
[  112.519644][ T8124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  112.519654][ T8124] Call Trace:
[  112.519661][ T8124]  <TASK>
[  112.519668][ T8124]  dump_stack_lvl+0x241/0x360
[  112.519700][ T8124]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.519716][ T8124]  ? __pfx__printk+0x10/0x10
[  112.519734][ T8124]  ? __pfx_lock_release+0x10/0x10
[  112.519764][ T8124]  should_fail_ex+0x40a/0x550
[  112.519789][ T8124]  _copy_from_user+0x2d/0xb0
[  112.519809][ T8124]  copy_msghdr_from_user+0xae/0x680
[  112.519833][ T8124]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  112.519849][ T8124]  ? __fget_files+0x2a/0x410
[  112.519873][ T8124]  ? __fget_files+0x2a/0x410
[  112.519901][ T8124]  __sys_sendmmsg+0x32b/0x720
[  112.519935][ T8124]  ? __pfx___sys_sendmmsg+0x10/0x10
[  112.519967][ T8124]  ? __pfx_lock_release+0x10/0x10
[  112.519987][ T8124]  ? kstrtouint_from_user+0x128/0x190
[  112.520023][ T8124]  ? ksys_write+0x22a/0x2b0
[  112.520039][ T8124]  ? __pfx_lock_release+0x10/0x10
[  112.520066][ T8124]  ? sb_end_write+0xe9/0x1c0
[  112.520087][ T8124]  ? vfs_write+0x7fa/0xd10
[  112.520104][ T8124]  ? __mutex_unlock_slowpath+0x227/0x800
[  112.520149][ T8124]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  112.520173][ T8124]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  112.520196][ T8124]  ? do_syscall_64+0x100/0x230
[  112.520219][ T8124]  __x64_sys_sendmmsg+0xa0/0xb0
[  112.520243][ T8124]  do_syscall_64+0xf3/0x230
[  112.520263][ T8124]  ? clear_bhb_loop+0x35/0x90
[  112.520286][ T8124]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.520306][ T8124] RIP: 0033:0x7f02ef58d169
[  112.520325][ T8124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.520337][ T8124] RSP: 002b:00007f02f0484038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  112.520355][ T8124] RAX: ffffffffffffffda RBX: 00007f02ef7a5fa0 RCX: 00007f02ef58d169
[  112.520367][ T8124] RDX: 0000000000000001 RSI: 00004000000000c0 RDI: 0000000000000003
[  112.520376][ T8124] RBP: 00007f02f0484090 R08: 0000000000000000 R09: 0000000000000000
[  112.520386][ T8124] R10: 0000000020048044 R11: 0000000000000246 R12: 0000000000000001
[  112.520396][ T8124] R13: 0000000000000000 R14: 00007f02ef7a5fa0 R15: 00007fff0c013788
[  112.520421][ T8124]  </TASK>
[  112.920157][ T8119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.392544][ T8161] FAULT_INJECTION: forcing a failure.
[  113.392544][ T8161] name failslab, interval 1, probability 0, space 0, times 1
[  113.446029][ T8161] CPU: 1 UID: 0 PID: 8161 Comm: syz.2.640 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0
[  113.446054][ T8161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  113.446064][ T8161] Call Trace:
[  113.446070][ T8161]  <TASK>
[  113.446078][ T8161]  dump_stack_lvl+0x241/0x360
[  113.446102][ T8161]  ? __pfx_dump_stack_lvl+0x10/0x10
[  113.446120][ T8161]  ? __pfx__printk+0x10/0x10
[  113.446138][ T8161]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  113.446162][ T8161]  ? __pfx___might_resched+0x10/0x10
[  113.446186][ T8161]  should_fail_ex+0x40a/0x550
[  113.446213][ T8161]  should_failslab+0xac/0x100
[  113.446235][ T8161]  kmem_cache_alloc_node_noprof+0x77/0x380
[  113.446255][ T8161]  ? __alloc_skb+0x1c3/0x440
[  113.446281][ T8161]  __alloc_skb+0x1c3/0x440
[  113.446307][ T8161]  ? __pfx___alloc_skb+0x10/0x10
[  113.446326][ T8161]  ? __local_bh_enable_ip+0x168/0x200
[  113.446344][ T8161]  ? pppoe_sendmsg+0xb1/0x8a0
[  113.446364][ T8161]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  113.446395][ T8161]  sock_wmalloc+0xab/0x120
[  113.446414][ T8161]  pppoe_sendmsg+0x312/0x8a0
[  113.446440][ T8161]  ? __pfx_pppoe_sendmsg+0x10/0x10
[  113.446462][ T8161]  ? aa_sock_msg_perm+0x91/0x160
[  113.446490][ T8161]  ? __pfx_pppoe_sendmsg+0x10/0x10
[  113.446509][ T8161]  __sock_sendmsg+0x221/0x270
[  113.446531][ T8161]  ____sys_sendmsg+0x53a/0x860
[  113.446562][ T8161]  ? __pfx_____sys_sendmsg+0x10/0x10
[  113.446583][ T8161]  ? __fget_files+0x2a/0x410
[  113.446607][ T8161]  ? __fget_files+0x2a/0x410
[  113.446635][ T8161]  __sys_sendmmsg+0x36a/0x720
[  113.446670][ T8161]  ? __pfx___sys_sendmmsg+0x10/0x10
[  113.446704][ T8161]  ? __pfx_lock_release+0x10/0x10
[  113.446724][ T8161]  ? kstrtouint_from_user+0x128/0x190
[  113.446769][ T8161]  ? ksys_write+0x22a/0x2b0
[  113.446785][ T8161]  ? __pfx_lock_release+0x10/0x10
[  113.446813][ T8161]  ? sb_end_write+0xe9/0x1c0
[  113.446834][ T8161]  ? vfs_write+0x7fa/0xd10
[  113.446852][ T8161]  ? __mutex_unlock_slowpath+0x227/0x800
[  113.446902][ T8161]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  113.446927][ T8161]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  113.446950][ T8161]  ? do_syscall_64+0x100/0x230
[  113.446974][ T8161]  __x64_sys_sendmmsg+0xa0/0xb0
[  113.446999][ T8161]  do_syscall_64+0xf3/0x230
[  113.447019][ T8161]  ? clear_bhb_loop+0x35/0x90
[  113.447042][ T8161]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.447062][ T8161] RIP: 0033:0x7fecb958d169
[  113.447077][ T8161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  113.447089][ T8161] RSP: 002b:00007fecba447038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  113.447107][ T8161] RAX: ffffffffffffffda RBX: 00007fecb97a5fa0 RCX: 00007fecb958d169
[  113.447119][ T8161] RDX: 0000000000000001 RSI: 00004000000000c0 RDI: 0000000000000003
[  113.447129][ T8161] RBP: 00007fecba447090 R08: 0000000000000000 R09: 0000000000000000
[  113.447139][ T8161] R10: 0000000020048044 R11: 0000000000000246 R12: 0000000000000001
[  113.447149][ T8161] R13: 0000000000000000 R14: 00007fecb97a5fa0 R15: 00007fff0d8d8988
[  113.447175][ T8161]  </TASK>
[  114.098825][ T8177] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  114.494750][ T8205] netlink: 'syz.3.652': attribute type 11 has an invalid length.
[  114.888046][ T8228] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.981323][ T8228] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.357956][ T8257] FAULT_INJECTION: forcing a failure.
[  115.357956][ T8257] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  115.402744][ T8257] CPU: 0 UID: 0 PID: 8257 Comm: syz.1.670 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0
[  115.402771][ T8257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  115.402780][ T8257] Call Trace:
[  115.402786][ T8257]  <TASK>
[  115.402792][ T8257]  dump_stack_lvl+0x241/0x360
[  115.402817][ T8257]  ? __pfx_dump_stack_lvl+0x10/0x10
[  115.402832][ T8257]  ? __pfx__printk+0x10/0x10
[  115.402853][ T8257]  ? snprintf+0xda/0x120
[  115.402873][ T8257]  should_fail_ex+0x40a/0x550
[  115.402900][ T8257]  _copy_to_user+0x31/0xb0
[  115.402922][ T8257]  simple_read_from_buffer+0xca/0x150
[  115.402946][ T8257]  proc_fail_nth_read+0x1e9/0x250
[  115.402970][ T8257]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  115.402993][ T8257]  ? rw_verify_area+0x243/0x630
[  115.403008][ T8257]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  115.403030][ T8257]  vfs_read+0x1f8/0xb40
[  115.403048][ T8257]  ? fdget_pos+0x254/0x320
[  115.403070][ T8257]  ? __pfx___mutex_lock+0x10/0x10
[  115.403091][ T8257]  ? __pfx_vfs_read+0x10/0x10
[  115.403111][ T8257]  ? __fget_files+0x2a/0x410
[  115.403133][ T8257]  ? __fget_files+0x395/0x410
[  115.403152][ T8257]  ? __fget_files+0x2a/0x410
[  115.403182][ T8257]  ksys_read+0x18f/0x2b0
[  115.403200][ T8257]  ? __pfx_ksys_read+0x10/0x10
[  115.403216][ T8257]  ? do_syscall_64+0x100/0x230
[  115.403239][ T8257]  ? do_syscall_64+0xb6/0x230
[  115.403260][ T8257]  do_syscall_64+0xf3/0x230
[  115.403279][ T8257]  ? clear_bhb_loop+0x35/0x90
[  115.403304][ T8257]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.403324][ T8257] RIP: 0033:0x7fe42b38bb7c
[  115.403338][ T8257] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  115.403353][ T8257] RSP: 002b:00007fe42c2ce030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  115.403370][ T8257] RAX: ffffffffffffffda RBX: 00007fe42b5a5fa0 RCX: 00007fe42b38bb7c
[  115.403380][ T8257] RDX: 000000000000000f RSI: 00007fe42c2ce0a0 RDI: 0000000000000004
[  115.403389][ T8257] RBP: 00007fe42c2ce090 R08: 0000000000000000 R09: 0000000000000000
[  115.403398][ T8257] R10: 0000000020048044 R11: 0000000000000246 R12: 0000000000000001
[  115.403407][ T8257] R13: 0000000000000000 R14: 00007fe42b5a5fa0 R15: 00007ffdfffa7bc8
[  115.403433][ T8257]  </TASK>
[  115.750939][ T8265] tipc: Resetting bearer <eth:macvlan0>
[  115.805479][ T8265] netlink: 'syz.0.672': attribute type 2 has an invalid length.
[  115.875803][ T8273] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  115.885074][  T978] IPVS: starting estimator thread 0...
[  115.984022][ T8274] IPVS: using max 18 ests per chain, 43200 per kthread
[  116.173333][ T8290] netlink: 'syz.1.678': attribute type 10 has an invalid length.
[  116.196279][ T8289] netlink: 'syz.2.680': attribute type 10 has an invalid length.
[  116.201936][ T8291] netlink: 'syz.1.678': attribute type 10 has an invalid length.
[  116.272617][ T8291] team0: Cannot enslave team device to itself
[  116.309169][ T8289] team0: Device ipvlan1 failed to register rx_handler
[  116.394278][ T8290] team0: Cannot enslave team device to itself
[  116.478634][ T8305] __nla_validate_parse: 18 callbacks suppressed
[  116.478652][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'.
[  116.490779][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.680'.
[  116.653224][ T8309] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  117.179111][ T8324] netlink: 19 bytes leftover after parsing attributes in process `syz.1.690'.
[  117.238481][ T8326] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  117.740009][ T8345] 8021q: adding VLAN 0 to HW filter on device bond2
[  117.819062][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.697'.
[  118.300133][ T8384] netlink: 'syz.3.702': attribute type 1 has an invalid length.
[  118.396042][ T8389] openvswitch: netlink: Flow key attr not present in new flow.
[  118.609758][ T8397] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.657525][ T8400] xt_TPROXY: Can be used only with -p tcp or -p udp
[  118.894405][ T8398] gretap0: left promiscuous mode
[  118.961092][ T8398] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  119.048814][ T8417] netlink: 14 bytes leftover after parsing attributes in process `syz.1.713'.
[  119.617869][ T8446] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[  119.865643][ T8461] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  120.137535][ T8472] x_tables: duplicate underflow at hook 2
[  120.665709][ T8504] netlink: 'syz.2.735': attribute type 4 has an invalid length.
[  120.956118][ T8473] netlink: 104 bytes leftover after parsing attributes in process `syz.3.728'.
[  121.489980][ T8545] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  121.541809][ T8545] team0: entered promiscuous mode
[  121.554746][ T8545] team_slave_0: entered promiscuous mode
[  121.593800][ T8545] team_slave_1: entered promiscuous mode
[  121.624831][ T8545] batadv_slave_1: entered promiscuous mode
[  121.626209][ T8554] netlink: 'syz.3.744': attribute type 4 has an invalid length.
[  121.640106][ T8555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.742'.
[  121.676491][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'.
[  121.682083][ T8545] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  121.700025][ T8545] Cannot create hsr debugfs directory
[  121.738359][ T8553] netlink: 'syz.3.744': attribute type 4 has an invalid length.
[  121.784923][ T8563] netlink: 'syz.2.745': attribute type 28 has an invalid length.
[  121.804115][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'.
[  121.834578][ T8563] netlink: 'syz.2.745': attribute type 3 has an invalid length.
[  121.869881][ T8563] netlink: 132 bytes leftover after parsing attributes in process `syz.2.745'.
[  122.158258][ T8582] lo speed is unknown, defaulting to 1000
[  122.220253][ T8582] lo speed is unknown, defaulting to 1000
[  122.237987][ T8585] openvswitch: netlink: nsh attr 0 has unexpected len 188 expected 0
[  122.257280][ T8582] lo speed is unknown, defaulting to 1000
[  122.268104][ T8585] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.710997][ T8582] infiniband syz: set active
[  122.731842][ T8582] infiniband syz: added lo
[  122.753207][ T8582] syz: rxe_create_cq: returned err = -12
[  122.762330][ T8582] infiniband syz: Couldn't create ib_mad CQ
[  122.777161][ T8582] infiniband syz: Couldn't open port 1
[  122.862641][ T8582] RDS/IB: syz: added
[  122.880146][ T8582] smc: adding ib device syz with port count 1
[  122.898679][ T8582] smc:    ib device syz port 1 has pnetid 
[  124.339981][ T5881] lo speed is unknown, defaulting to 1000
[  124.357002][ T5882] lo speed is unknown, defaulting to 1000
[  124.385464][ T8582] lo speed is unknown, defaulting to 1000
[  124.644914][ T8633] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20003
[  124.679122][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.763'.
[  126.413142][ T8582] lo speed is unknown, defaulting to 1000
[  126.414806][ T8633] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  126.691228][ T8582] lo speed is unknown, defaulting to 1000
[  126.726486][ T8654] hsr0: entered allmulticast mode
[  126.754059][ T8654] hsr_slave_0: entered allmulticast mode
[  126.777777][ T8654] hsr_slave_1: entered allmulticast mode
[  126.913273][ T8658] netlink: 56 bytes leftover after parsing attributes in process `syz.2.768'.
[  126.941002][ T8658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.768'.
[  126.999794][ T8658] netlink: 31 bytes leftover after parsing attributes in process `syz.2.768'.
[  127.029955][ T8658] netlink: 'syz.2.768': attribute type 2 has an invalid length.
[  127.059056][ T8658] netlink: 31 bytes leftover after parsing attributes in process `syz.2.768'.
[  127.082437][ T8670] netlink: 24 bytes leftover after parsing attributes in process `syz.4.774'.
[  127.112247][ T8582] lo speed is unknown, defaulting to 1000
[  127.119824][ T8670] netlink: 'syz.4.774': attribute type 1 has an invalid length.
[  127.136337][ T8670] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) !
[  127.149283][ T8673] netlink: 40 bytes leftover after parsing attributes in process `syz.3.775'.
[  127.186720][ T8673] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  127.235310][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.775'.
[  127.255905][ T8673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.775'.
[  127.469533][ T8582] lo speed is unknown, defaulting to 1000
[  127.518121][ T8683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.623024][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.780'.
[  127.708015][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.782'.
[  127.852320][ T8696] dvmrp0: left allmulticast mode
[  127.901132][ T8698] bridge0: port 3(batadv1) entered blocking state
[  127.909350][ T8698] bridge0: port 3(batadv1) entered disabled state
[  127.916104][ T8699] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20003
[  127.916720][ T8698] batadv1: entered allmulticast mode
[  127.940222][ T8698] batadv1: entered promiscuous mode
[  128.111885][ T8706] nftables ruleset with unbound chain
[  128.311559][ T8717] mac80211_hwsim hwsim9 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  128.410083][   T60] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  128.420200][   T60] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  128.510777][ T8734] netlink: 'syz.1.796': attribute type 12 has an invalid length.
[  128.522808][   T29] audit: type=1107 audit(1740707270.756:3): pid=8733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹�5ž÷Œ•%èÍUýAÊ�ÃËÙ ë0ä�™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›'
[  128.548293][ T8736] netlink: 'syz.1.796': attribute type 12 has an invalid length.
[  128.560114][ T5881] wlan0 speed is unknown, defaulting to 1000
[  128.818497][ T8752] vcan0: tx drop: invalid da for name 0x0000000000000002
[  128.990837][ T8757] netlink: 'syz.1.803': attribute type 15 has an invalid length.
[  129.572421][ T8778] x_tables: duplicate underflow at hook 1
[  129.611797][ T8780] bridge: RTM_NEWNEIGH with invalid ether address
[  130.516967][ T8829] hsr0: entered promiscuous mode
[  130.545983][ T8829] bond0: left promiscuous mode
[  130.550828][ T8829] bond_slave_0: left promiscuous mode
[  130.604094][ T8829] bond_slave_1: left promiscuous mode
[  130.641430][ T8836] netlink: zone id is out of range
[  130.648472][ T8829] batadv0: left promiscuous mode
[  130.655086][ T8836] netlink: del zone limit has 8 unknown bytes
[  130.688830][ T8829] hsr0 (unregistering): left promiscuous mode
[  130.906627][ T8847] delete_channel: no stack
[  130.914195][ T8847] netlink: zone id is out of range
[  130.919356][ T8847] netlink: zone id is out of range
[  130.974152][ T8847] netlink: zone id is out of range
[  130.990849][ T8847] netlink: zone id is out of range
[  131.037461][ T8852] ip6gretap0: entered allmulticast mode
[  131.052409][ T8852] batman_adv: batadv0: Adding interface: ip6gretap0
[  131.053523][ T8847] netlink: zone id is out of range
[  131.071528][ T8847] netlink: zone id is out of range
[  131.072870][ T8852] batman_adv: batadv0: The MTU of interface ip6gretap0 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.077656][ T8847] netlink: zone id is out of range
[  131.104021][ T5880] IPVS: starting estimator thread 0...
[  131.115555][ T8847] netlink: zone id is out of range
[  131.134301][ T8852] batman_adv: batadv0: Not using interface ip6gretap0 (retrying later): interface not active
[  131.229308][ T8857] IPVS: using max 21 ests per chain, 50400 per kthread
[  131.579598][ T8883] netlink: 'syz.0.842': attribute type 1 has an invalid length.
[  131.703032][ T8891] netlink: 'syz.0.842': attribute type 1 has an invalid length.
[  131.729245][ T8894] bridge_slave_0: left allmulticast mode
[  131.757759][ T8894] bridge_slave_0: left promiscuous mode
[  131.781546][ T8894] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.821279][ T8894] bridge_slave_1: left allmulticast mode
[  131.836796][ T8894] bridge_slave_1: left promiscuous mode
[  131.842752][ T8894] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.867136][ T8894] bond0: (slave bond_slave_0): Releasing backup interface
[  131.886842][ T8894] bond0: (slave bond_slave_1): Releasing backup interface
[  131.907358][ T8894] team_slave_0: left promiscuous mode
[  131.945634][ T8894] team0: Port device team_slave_0 removed
[  131.971075][ T8894] team_slave_1: left promiscuous mode
[  131.986830][ T8910] __nla_validate_parse: 23 callbacks suppressed
[  131.986849][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.848'.
[  132.021951][ T8894] team0: Port device team_slave_1 removed
[  132.036388][ T8894] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.044254][ T8894] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.053056][ T8894] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.061604][ T8894] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.194014][ T8822] wlan0: Trigger new scan to find an IBSS to join
[  132.243275][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.849'.
[  132.618441][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.853'.
[  132.790131][ T8945] netlink: 80 bytes leftover after parsing attributes in process `syz.0.860'.
[  132.809963][ T8945] netlink: 56 bytes leftover after parsing attributes in process `syz.0.860'.
[  132.849006][ T8945] netlink: 'syz.0.860': attribute type 1 has an invalid length.
[  132.884374][ T8945] bond3: entered promiscuous mode
[  132.889556][ T8945] bond3: entered allmulticast mode
[  133.138424][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  133.444977][ T8978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'.
[  133.683057][ T8993] IPv6: NLM_F_CREATE should be specified when creating new route
[  133.699847][ T8992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  133.703025][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'.
[  133.787170][ T8997] macsec0: entered promiscuous mode
[  134.140079][ T5881] IPVS: starting estimator thread 0...
[  134.180586][ T9022] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  134.234410][ T9023] IPVS: using max 17 ests per chain, 40800 per kthread
[  134.250741][ T9030] ieee802154 phy0 wpan0: encryption failed: -90
[  134.554564][ T9050] IPVS: Error joining to the multicast group
[  134.874862][ T9067] netlink: 'syz.2.890': attribute type 10 has an invalid length.
[  134.912448][ T9067] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  134.928621][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'.
[  134.936495][ T9067] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  135.232711][ T9090] : entered promiscuous mode
[  135.239360][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.897'.
[  135.304547][ T9096] netlink: 'syz.1.898': attribute type 1 has an invalid length.
[  135.364553][ T9101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.898'.
[  135.770058][ T9127] rdma_rxe: rxe_newlink: failed to add wg1
[  135.797555][ T9131] netlink: 'syz.0.908': attribute type 12 has an invalid length.
[  135.844093][ T9131] netlink: 'syz.0.908': attribute type 29 has an invalid length.
[  135.911589][ T9131] netlink: 'syz.0.908': attribute type 12 has an invalid length.
[  135.921013][ T9131] netlink: 'syz.0.908': attribute type 29 has an invalid length.
[  136.589253][ T9172] net_ratelimit: 3 callbacks suppressed
[  136.589353][ T9172] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  136.693965][ T9182] netlink: 'syz.2.919': attribute type 25 has an invalid length.
[  136.962697][ T9201] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  137.014837][ T9201] __nla_validate_parse: 8 callbacks suppressed
[  137.014856][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'.
[  137.114876][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.924'.
[  137.243277][ T8811] wlan0: Trigger new scan to find an IBSS to join
[  137.278547][ T9224] syz_tun: entered allmulticast mode
[  137.321640][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.928'.
[  137.609433][ T9247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.934'.
[  137.673558][ T9249] xt_CT: You must specify a L4 protocol and not use inversions on it
[  138.182207][ T1145] wlan0: Creating new IBSS network, BSSID da:ba:bc:7a:39:05
[  138.207845][ T5880] wlan0 speed is unknown, defaulting to 1000
[  138.490529][ T9292] netlink: 'syz.4.945': attribute type 10 has an invalid length.
[  138.534470][ T9292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.945'.
[  138.557363][ T9292] netlink: 576 bytes leftover after parsing attributes in process `syz.4.945'.
[  138.852918][ T9310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.950'.
[  139.748200][ T9344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.959'.
[  140.230183][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.964'.
[  140.359837][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.967'.
[  140.601511][ T9381] xt_CT: No such helper "snmp_trap"
[  140.694594][ T9392] netlink: 'syz.0.972': attribute type 3 has an invalid length.
[  140.721548][ T9394] netlink: 'syz.0.972': attribute type 3 has an invalid length.
[  140.771097][ T9391] sctp: [Deprecated]: syz.2.973 (pid 9391) Use of struct sctp_assoc_value in delayed_ack socket option.
[  140.771097][ T9391] Use struct sctp_sack_info instead
[  140.819127][ T9398] sctp: [Deprecated]: syz.2.973 (pid 9398) Use of struct sctp_assoc_value in delayed_ack socket option.
[  140.819127][ T9398] Use struct sctp_sack_info instead
[  140.957538][ T9403] vlan2: entered allmulticast mode
[  141.206217][ T9415] netlink: 'syz.2.978': attribute type 29 has an invalid length.
[  141.247546][ T9420] netlink: 'syz.3.980': attribute type 7 has an invalid length.
[  141.274736][ T9420] netlink: 'syz.3.980': attribute type 8 has an invalid length.
[  141.892174][ T9451] netlink: 'syz.0.989': attribute type 1 has an invalid length.
[  141.986998][ T9459] delete_channel: no stack
[  142.382121][ T9491] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:4
[  142.985337][ T9513] veth7: entered allmulticast mode
[  143.235690][ T9518] syzkaller0: entered promiscuous mode
[  143.241818][ T9518] syzkaller0: entered allmulticast mode
[  143.290472][ T9532] netlink: 'syz.0.1004': attribute type 29 has an invalid length.
[  143.315162][ T9531] __nla_validate_parse: 6 callbacks suppressed
[  143.315180][ T9531] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1006'.
[  143.318760][ T9532] netlink: 'syz.0.1004': attribute type 1 has an invalid length.
[  143.594699][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1008'.
[  143.732970][ T9551] netlink: 'syz.4.1010': attribute type 8 has an invalid length.
[  143.920406][ T9561] netlink: 576 bytes leftover after parsing attributes in process `syz.4.1010'.
[  145.695396][ T9569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1016'.
[  145.705547][ T9574] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1014'.
[  145.846293][ T9576] xt_CT: No such helper "pptp"
[  146.186023][ T9600] x_tables: duplicate underflow at hook 2
[  146.201706][ T9598] wlan0 speed is unknown, defaulting to 1000
[  146.218109][ T9600] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1020'.
[  146.238373][ T9598] lo speed is unknown, defaulting to 1000
[  146.247226][ T9598] lo speed is unknown, defaulting to 1000
[  146.293910][ T9600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1020'.
[  146.652052][ T9618] dccp_v6_rcv: dropped packet with invalid checksum
[  146.672538][ T9617] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.165741][ T9644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1029'.
[  147.564316][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1034'.
[  147.617388][ T9665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1034'.
[  147.697574][ T9661] netlink: 'syz.4.1034': attribute type 1 has an invalid length.
[  147.792063][ T9671] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  148.185511][ T9697] netlink: 'syz.2.1045': attribute type 1 has an invalid length.
[  148.291832][ T9704] sctp: [Deprecated]: syz.1.1047 (pid 9704) Use of struct sctp_assoc_value in delayed_ack socket option.
[  148.291832][ T9704] Use struct sctp_sack_info instead
[  148.315443][ T9704] x_tables: ip_tables: osf match: only valid for protocol 6
[  148.565895][ T9716] __nla_validate_parse: 3 callbacks suppressed
[  148.565914][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1049'.
[  148.995812][ T9736] sctp: [Deprecated]: syz.1.1053 (pid 9736) Use of int in maxseg socket option.
[  148.995812][ T9736] Use struct sctp_assoc_value instead
[  149.070490][ T9738] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1055'.
[  149.238220][ T9757] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1059'.
[  149.273573][ T9757] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1059'.
[  149.315636][ T9757] gretap1: entered promiscuous mode
[  149.344019][ T9757] gretap1: entered allmulticast mode
[  149.638603][ T9770] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1061'.
[  149.687518][ T9770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'.
[  168.241080][ T8814] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  169.918928][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1065'.
[  169.968950][ T9875] hsr_slave_0: left promiscuous mode
[  170.025055][ T9875] hsr_slave_1: left promiscuous mode
[  170.257595][ T9895] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1070'.
[  170.475580][ T9904] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.483292][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1075'.
[  170.530682][ T9904] bridge_slave_0 (unregistering): left allmulticast mode
[  170.538397][ T9904] bridge_slave_0 (unregistering): left promiscuous mode
[  170.552057][ T9904] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.570623][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1076'.
[  170.591973][ T9902] netlink: 'syz.4.1073': attribute type 16 has an invalid length.
[  170.620979][ T9902] netlink: 'syz.4.1073': attribute type 17 has an invalid length.
[  170.755441][ T9920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1078'.
[  171.002769][ T9929] netlink: 'syz.4.1082': attribute type 1 has an invalid length.
[  171.011171][ T9929] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1082'.
[  171.206638][ T9941] netlink: 'syz.2.1085': attribute type 4 has an invalid length.
[  171.238182][ T9947] netlink: 'syz.2.1085': attribute type 4 has an invalid length.
[  171.664070][ T9969] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1095'.
[  171.756970][ T9976] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1097'.
[  171.801321][ T9977] SET target dimension over the limit!
[  172.320616][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1105'.
[  172.368594][T10003] bridge_slave_1: left allmulticast mode
[  172.404616][T10003] bridge_slave_1: left promiscuous mode
[  172.419701][T10003] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.461896][T10003] bridge_slave_0: left allmulticast mode
[  172.489770][T10003] bridge_slave_0: left promiscuous mode
[  172.503792][T10003] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.624430][T10018] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1110'.
[  172.959535][T10034] can: request_module (can-proto-0) failed.
[  174.199744][T10106] netlink: 'syz.0.1140': attribute type 1 has an invalid length.
[  174.302622][T10106] 8021q: adding VLAN 0 to HW filter on device bond4
[  174.334401][T10107] bond4: (slave gretap1): making interface the new active one
[  174.355074][T10107] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  174.789280][T10148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  174.817679][T10153] nft_compat: unsupported protocol 0
[  174.890894][T10155] x_tables: duplicate underflow at hook 2
[  174.995384][T10159] __nla_validate_parse: 12 callbacks suppressed
[  174.995402][T10159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1156'.
[  175.071722][T10165] netlink: 'syz.0.1159': attribute type 1 has an invalid length.
[  175.284730][T10175] openvswitch: netlink: Missing key (keys=40, expected=100)
[  175.346816][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1164'.
[  175.522888][T10190] netlink: 'syz.1.1165': attribute type 21 has an invalid length.
[  175.759686][T10204] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1165'.
[  175.827970][T10210] ieee802154 phy0 wpan0: encryption failed: -22
[  175.836120][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1170'.
[  176.130190][T10201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1170'.
[  176.357189][T10230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1176'.
[  176.459709][T10233] netlink: 'syz.3.1179': attribute type 11 has an invalid length.
[  176.535815][T10230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1176'.
[  176.668597][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1182'.
[  176.679885][T10242] sctp: [Deprecated]: syz.0.1181 (pid 10242) Use of struct sctp_assoc_value in delayed_ack socket option.
[  176.679885][T10242] Use struct sctp_sack_info instead
[  176.725995][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1182'.
[  176.775340][T10246] netlink: 'syz.4.1182': attribute type 15 has an invalid length.
[  177.295211][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1193'.
[  177.339032][T10289] netlink: 'syz.4.1193': attribute type 4 has an invalid length.
[  177.458367][T10299] netlink: 'syz.0.1198': attribute type 178 has an invalid length.
[  178.244992][T10342] lo speed is unknown, defaulting to 1000
[  178.264623][T10342] lo speed is unknown, defaulting to 1000
[  178.271012][T10342] lo speed is unknown, defaulting to 1000
[  178.329425][T10342] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  178.338915][T10340] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  178.367032][T10352] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  178.402115][T10342] lo speed is unknown, defaulting to 1000
[  178.412957][T10342] lo speed is unknown, defaulting to 1000
[  178.428323][T10340] netlink: 'syz.4.1212': attribute type 4 has an invalid length.
[  178.453307][T10342] lo speed is unknown, defaulting to 1000
[  178.475006][T10342] lo speed is unknown, defaulting to 1000
[  178.482030][T10342] lo speed is unknown, defaulting to 1000
[  179.149421][T10401] tipc: Resetting bearer <eth:ipvlan1>
[  179.310878][ T5881] wlan0 speed is unknown, defaulting to 1000
[  180.296189][T10446] ieee802154 phy0 wpan0: encryption failed: -22
[  180.682898][T10473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.855440][T10492] __nla_validate_parse: 11 callbacks suppressed
[  180.855458][T10492] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1251'.
[  181.012787][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1256'.
[  181.380031][T10521] netlink: 'syz.3.1261': attribute type 15 has an invalid length.
[  181.597903][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1265'.
[  181.614361][T10532] ieee802154 phy0 wpan0: encryption failed: -22
[  181.662336][T10532] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1266'.
[  182.038033][T10555] netlink: 'syz.2.1272': attribute type 1 has an invalid length.
[  182.078984][T10555] bond4: entered promiscuous mode
[  182.085236][T10555] 8021q: adding VLAN 0 to HW filter on device bond4
[  182.100956][T10555] ipip0: entered promiscuous mode
[  182.107002][T10555] ipip0: entered allmulticast mode
[  182.142959][T10555] 8021q: adding VLAN 0 to HW filter on device bond4
[  182.186749][T10555] bond4: (slave ipip0): The slave device specified does not support setting the MAC address
[  182.245312][T10555] bond4: (slave ipip0): Setting fail_over_mac to active for active-backup mode
[  182.305363][T10555] bond4: (slave ipip0): making interface the new active one
[  182.322048][T10555] bond4: (slave ipip0): Enslaving as an active interface with an up link
[  182.503053][T10568] team0: Device vti1 is of different type
[  182.542825][T10574] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[  182.563695][T10572] ipt_rpfilter: unknown options
[  182.779717][T10586] hsr0: entered promiscuous mode
[  182.820307][T10586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1282'.
[  182.858585][T10586] hsr_slave_0: left promiscuous mode
[  182.904163][T10586] hsr_slave_1: left promiscuous mode
[  183.036604][T10600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1284'.
[  183.228854][T10611] netlink: 'syz.1.1287': attribute type 1 has an invalid length.
[  183.251793][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1284'.
[  183.336554][T10619] netlink: 1275 bytes leftover after parsing attributes in process `syz.0.1288'.
[  183.388492][T10619] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.629976][T10633] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  183.775987][T10643] openvswitch: netlink: Flow key attr not present in new flow.
[  184.250414][T10671] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1304'.
[  184.317337][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1304'.
[  184.356860][T10674] netlink: 'syz.1.1305': attribute type 1 has an invalid length.
[  184.464948][T10674] 8021q: adding VLAN 0 to HW filter on device bond3
[  184.503033][   T29] audit: type=1800 audit(1740707326.736:4): pid=10686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1308" name="memory.events" dev="tmpfs" ino=1343 res=0 errno=0
[  184.551421][T10681] bond3: (slave gretap1): making interface the new active one
[  184.577491][T10681] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  184.588171][   T29] audit: type=1804 audit(1740707326.766:5): pid=10686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1308" name="/newroot/261/memory.events" dev="tmpfs" ino=1343 res=1 errno=0
[  184.635678][T10687] veth0_macvtap: entered allmulticast mode
[  184.847494][T10690] veth0_macvtap (unregistering): left allmulticast mode
[  185.197588][T10722] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  185.219744][T10722] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.525690][T10734] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  185.634118][T10747] unknown channel width for channel at 909000KHz?
[  185.645520][T10742] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.661542][T10747] unknown channel width for channel at 909000KHz?
[  185.685859][T10747] unknown channel width for channel at 909000KHz?
[  186.058103][T10777] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20002
[  186.081076][T10778] x_tables: duplicate underflow at hook 2
[  186.104141][T10777] IPVS: set_ctl: invalid protocol: 58 172.30.1.3:20001
[  186.260308][T10789] __nla_validate_parse: 4 callbacks suppressed
[  186.260326][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1334'.
[  186.321181][T10789] bond5: entered promiscuous mode
[  186.331117][T10789] 8021q: adding VLAN 0 to HW filter on device bond5
[  186.420372][ T5844] Bluetooth: hci1: command 0x0406 tx timeout
[  186.420550][ T5833] Bluetooth: hci2: command 0x0406 tx timeout
[  186.426735][ T5844] Bluetooth: hci3: command 0x0406 tx timeout
[  186.441677][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'.
[  187.174984][T10813] netlink: 'syz.4.1340': attribute type 21 has an invalid length.
[  187.256383][T10817] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  187.271402][T10815] sctp: [Deprecated]: syz.1.1341 (pid 10815) Use of struct sctp_assoc_value in delayed_ack socket option.
[  187.271402][T10815] Use struct sctp_sack_info instead
[  187.321805][T10827] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  187.321963][T10825] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  187.337094][T10826] vxcan0: entered allmulticast mode
[  187.365554][T10824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1344'.
[  187.373620][T10827] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.439455][T10825] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.459730][T10824] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  187.504850][T10833] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1343'.
[  187.779563][T10853] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.1348'.
[  187.954772][T10871] xt_l2tp: missing protocol rule (udp|l2tpip)
[  187.978254][T10871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1352'.
[  188.029419][T10871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1352'.
[  188.131123][T10884] netlink: 'syz.2.1356': attribute type 1 has an invalid length.
[  188.200034][T10884] bond6: entered promiscuous mode
[  188.205970][T10884] bond6: entered allmulticast mode
[  188.229821][T10884] netlink: 644 bytes leftover after parsing attributes in process `syz.2.1356'.
[  188.273934][T10884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1356'.
[  188.328316][T10884] bond6: left promiscuous mode
[  188.333182][T10884] bond6: left allmulticast mode
[  188.408966][T10884] 8021q: adding VLAN 0 to HW filter on device bond6
[  188.418911][T10893] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1357'.
[  188.896523][T10924] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  189.023623][T10933] sch_tbf: burst 0 is lower than device team_slave_0 mtu (1514) !
[  189.217540][T10943] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.295570][T10949] sctp: [Deprecated]: syz.2.1373 (pid 10949) Use of int in max_burst socket option deprecated.
[  189.295570][T10949] Use struct sctp_assoc_value instead
[  189.786787][T10981] Bluetooth: MGMT ver 1.23
[  190.038860][T10996] Cannot find map_set index 0 as target
[  190.075492][T10999] netlink: 'syz.0.1382': attribute type 29 has an invalid length.
[  190.150124][T10998] netlink: 'syz.0.1382': attribute type 29 has an invalid length.
[  190.163889][T10998] netlink: 'syz.0.1382': attribute type 29 has an invalid length.
[  190.244725][T11008] bridge_slave_0: entered promiscuous mode
[  190.545073][T11024] bond0: (slave bond_slave_0): Releasing backup interface
[  190.608269][T11024] bond0: (slave bond_slave_1): Releasing backup interface
[  190.678582][T11024] team0: Port device team_slave_0 removed
[  190.690982][T11034] netlink: 'syz.4.1392': attribute type 1 has an invalid length.
[  190.739789][T11024] team0: Port device team_slave_1 removed
[  190.774828][T11024] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  190.802656][T11024] batman_adv: batadv0: Removing interface: batadv_slave_0
[  190.836971][T11024] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  190.844791][T11024] batman_adv: batadv0: Removing interface: batadv_slave_1
[  190.861943][T11024] bond0: (slave wlan1): Releasing backup interface
[  190.884497][T11024] bond4: (slave ipip0): Releasing backup interface
[  190.905238][   T25] lo speed is unknown, defaulting to 1000
[  190.990894][T11034] 8021q: adding VLAN 0 to HW filter on device bond3
[  191.029648][T11041] bond3: (slave gretap1): making interface the new active one
[  191.064339][T11041] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  191.306043][T11065] __nla_validate_parse: 6 callbacks suppressed
[  191.306061][T11065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1398'.
[  191.791198][T11090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1408'.
[  191.880065][T11101] netlink: 'syz.0.1405': attribute type 3 has an invalid length.
[  191.936020][T11103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1405'.
[  191.958810][T11101] netlink: 'syz.0.1405': attribute type 11 has an invalid length.
[  191.970136][T11101] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1405'.
[  192.229207][T11116] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  192.311954][T11118] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  192.399006][T11127] netem: change failed
[  192.500174][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1418'.
[  192.522324][T11131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1419'.
[  192.861008][T11154] netlink: 'syz.0.1426': attribute type 4 has an invalid length.
[  193.258503][T11175] bond5: entered promiscuous mode
[  193.266339][T11175] bond5: entered allmulticast mode
[  193.272097][T11175] 8021q: adding VLAN 0 to HW filter on device bond5
[  193.410683][T11186] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1436'.
[  193.445190][T11186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1436'.
[  193.545407][T11194] smc: net device bond0 applied user defined pnetid SYZ0
[  193.671392][T11200] openvswitch: netlink: Actions may not be safe on all matching packets
[  193.697337][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1441'.
[  193.716475][T11202] openvswitch: netlink: IP tunnel TTL not specified.
[  193.740050][T11206] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1444'.
[  193.750631][T11200] netlink: 'syz.0.1441': attribute type 15 has an invalid length.
[  193.795678][T11206] team0: Mode changed to "loadbalance"
[  193.989043][T11210] netlink: 'syz.1.1446': attribute type 4 has an invalid length.
[  194.035008][T11210] netlink: 'syz.1.1446': attribute type 4 has an invalid length.
[  194.103293][T11219] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  194.521206][T11246] netlink: 'syz.1.1456': attribute type 1 has an invalid length.
[  194.586080][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  195.222689][T11291] netlink: 'syz.2.1469': attribute type 30 has an invalid length.
[  195.350381][T11300] netlink: 'syz.0.1471': attribute type 12 has an invalid length.
[  195.386949][T11300] netlink: 'syz.0.1471': attribute type 39 has an invalid length.
[  195.497560][T11309] netlink: 'syz.2.1474': attribute type 10 has an invalid length.
[  195.544168][T11309] team0: Cannot enslave team device to itself
[  195.589903][T11309] vlan2: entered promiscuous mode
[  195.596922][T11309] vlan2: entered allmulticast mode
[  195.619743][T11309] vlan0: entered allmulticast mode
[  195.648307][T11309] veth0_vlan: entered allmulticast mode
[  195.661865][T11309] vlan0: entered promiscuous mode
[  195.724863][T11309] team0: Port device vlan2 added
[  195.773771][T11313] syzkaller1: entered promiscuous mode
[  195.779297][T11313] syzkaller1: entered allmulticast mode
[  195.968003][T11332] Cannot find del_set index 65531 as target
[  195.988935][T11331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  196.037420][ T5881] lo speed is unknown, defaulting to 1000
[  196.306401][T11351] tap0: tun_chr_ioctl cmd 1074025676
[  196.311791][T11351] tap0: owner set to 0
[  196.514605][T11366] __nla_validate_parse: 11 callbacks suppressed
[  196.514623][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1489'.
[  196.560557][T11372] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1490'.
[  196.615565][T11375] netlink: 'syz.4.1489': attribute type 39 has an invalid length.
[  197.227980][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1498'.
[  197.701968][T11427] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1507'.
[  197.714576][T11424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1506'.
[  197.790598][T11427] 0·: renamed from hsr_slave_1 (while UP)
[  197.827692][T11427] 0·: entered allmulticast mode
[  197.837357][T11427] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  198.156552][T11456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1510'.
[  198.881892][T11506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1524'.
[  198.892880][T11504] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1525'.
[  198.936440][T11507] validate_nla: 2 callbacks suppressed
[  198.936458][T11507] netlink: 'syz.1.1525': attribute type 1 has an invalid length.
[  198.939533][T11506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1524'.
[  199.021672][T11507] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  199.218100][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1528'.
[  199.490142][T11544] IPv6: Can't replace route, no match found
[  199.628827][T11554] sctp: [Deprecated]: syz.1.1535 (pid 11554) Use of int in maxseg socket option.
[  199.628827][T11554] Use struct sctp_assoc_value instead
[  200.395193][T11589] netlink: 'syz.4.1544': attribute type 2 has an invalid length.
[  200.406620][T11591] Bluetooth: MGMT ver 1.23
[  200.692630][T11609] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  201.565981][T11637] __nla_validate_parse: 8 callbacks suppressed
[  201.566002][T11637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1555'.
[  201.642488][T11641] hsr0: entered promiscuous mode
[  201.650971][T11640] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1556'.
[  201.676570][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1557'.
[  201.746416][T11640] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  201.766546][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1557'.
[  201.774223][T11640] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  201.904027][T11640] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  201.924052][T11640] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  201.977027][T11640] geneve3: entered promiscuous mode
[  202.005983][T11640] geneve3: entered allmulticast mode
[  202.027741][T11640] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  202.038122][T11640] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  202.059439][T11640] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  202.084028][T11640] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  202.138471][T11644] hsr0: left promiscuous mode
[  202.160166][T11642] team0: left promiscuous mode
[  202.175837][T11642] batadv_slave_1: left promiscuous mode
[  202.459119][T11663] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1561'.
[  202.528693][T11671] bond0: entered promiscuous mode
[  202.618140][T11674] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1565'.
[  202.672346][T11679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1567'.
[  202.721879][T11679] bond4: entered promiscuous mode
[  202.730245][T11679] 8021q: adding VLAN 0 to HW filter on device bond4
[  202.910763][T11697] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.995839][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802f7b8000: rx timeout, send abort
[  203.006596][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802f7bb400: rx timeout, send abort
[  203.015095][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802f7b8000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  203.029804][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802f7bb400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  203.116339][T11702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1574'.
[  203.134043][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1574'.
[  203.144547][T11702] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1574'.
[  203.154097][T11702] block nbd1: Unsupported socket: shutdown callout must be supported.
[  203.171959][T11704] bridge0: entered allmulticast mode
[  203.281701][T11703] bridge0: left allmulticast mode
[  203.544488][T11717] netlink: 'syz.3.1580': attribute type 1 has an invalid length.
[  204.221337][T11745] Unsupported ieee802154 address type: 0
[  204.838610][T11792] wlan0 speed is unknown, defaulting to 1000
[  204.872237][T11791] wlan0 speed is unknown, defaulting to 1000
[  204.879661][T11792] lo speed is unknown, defaulting to 1000
[  204.888267][T11792] lo speed is unknown, defaulting to 1000
[  204.895645][T11791] lo speed is unknown, defaulting to 1000
[  205.164384][T11809] Cannot find del_set index 4 as target
[  205.232931][T11807] vlan0: left allmulticast mode
[  205.241696][T11807] veth0_vlan: left allmulticast mode
[  205.253479][T11807] vlan0: left promiscuous mode
[  205.298288][T11807] team0: Port device vlan2 removed
[  205.343910][T11810] team0: Unable to change to the same mode the team is in
[  205.364550][T11792] lo speed is unknown, defaulting to 1000
[  205.375666][T11791] lo speed is unknown, defaulting to 1000
[  205.768626][T11842] netlink: 'syz.1.1612': attribute type 11 has an invalid length.
[  205.800621][T11791] lo speed is unknown, defaulting to 1000
[  206.594148][T11886] __nla_validate_parse: 6 callbacks suppressed
[  206.594168][T11886] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1620'.
[  206.644580][T11890] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1621'.
[  206.666385][T11886] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1620'.
[  206.981796][T11900] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.102394][T11905] netlink: 'syz.4.1627': attribute type 1 has an invalid length.
[  207.241247][T11905] 8021q: adding VLAN 0 to HW filter on device bond5
[  207.259915][T11916] netlink: 'syz.0.1629': attribute type 10 has an invalid length.
[  207.303685][T11916] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.363050][T11916] batman_adv: batadv0: Removing interface: batadv_slave_0
[  207.426158][T11925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1632'.
[  207.575807][T11928] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1633'.
[  207.922353][T11945] netlink: 'syz.2.1639': attribute type 5 has an invalid length.
[  207.934261][T11946] IPv6: Can't replace route, no match found
[  207.935677][ T5147] Bluetooth: hci4: command 0x0405 tx timeout
[  207.957592][T11945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1639'.
[  208.272876][T11959] ipt_REJECT: ECHOREPLY no longer supported.
[  208.654654][T11983] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  208.684583][T11986] netlink: 'syz.3.1652': attribute type 18 has an invalid length.
[  208.705478][T11987] netlink: 'syz.3.1652': attribute type 18 has an invalid length.
[  208.901316][T11994] ax25_connect(): syz.3.1654 uses autobind, please contact jreuter@yaina.de
[  208.924695][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1654'.
[  209.129202][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1657'.
[  209.146350][T12007] xt_recent: Unsupported userspace flags (00000042)
[  209.423183][T12020] sit2: entered promiscuous mode
[  209.428638][T12018] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1661'.
[  209.463049][T12020] sit2: entered allmulticast mode
[  209.482670][T12018] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1661'.
[  209.549806][T12027] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96
[  209.564584][T12023] syzkaller0: entered promiscuous mode
[  209.570176][T12023] syzkaller0: entered allmulticast mode
[  209.645222][T12035] netlink: 'syz.2.1665': attribute type 16 has an invalid length.
[  209.670016][T12035] netlink: 'syz.2.1665': attribute type 17 has an invalid length.
[  211.704671][T12048] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  211.850055][T12060] netlink: 'syz.2.1671': attribute type 1 has an invalid length.
[  211.864215][T12060] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.110746][T12069] __nla_validate_parse: 3 callbacks suppressed
[  212.110765][T12069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1677'.
[  212.257092][T12077] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  212.299544][T12077] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  212.535805][T12095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1686'.
[  212.711124][T12100] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  214.767204][T12110] bond0: entered promiscuous mode
[  214.772274][T12110] bond_slave_0: entered promiscuous mode
[  214.778787][T12110] veth1_to_bridge: entered promiscuous mode
[  214.924935][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1694'.
[  215.236216][T12143] xt_cgroup: path and classid specified
[  215.543758][T12164] sctp: [Deprecated]: syz.2.1705 (pid 12164) Use of int in max_burst socket option deprecated.
[  215.543758][T12164] Use struct sctp_assoc_value instead
[  215.595306][T12164] sctp: [Deprecated]: syz.2.1705 (pid 12164) Use of int in max_burst socket option deprecated.
[  215.595306][T12164] Use struct sctp_assoc_value instead
[  215.656162][T12164] sctp: [Deprecated]: syz.2.1705 (pid 12164) Use of int in max_burst socket option deprecated.
[  215.656162][T12164] Use struct sctp_assoc_value instead
[  215.718354][T12164] sctp: [Deprecated]: syz.2.1705 (pid 12164) Use of int in max_burst socket option deprecated.
[  215.718354][T12164] Use struct sctp_assoc_value instead
[  215.776905][T12164] sctp: [Deprecated]: syz.2.1705 (pid 12164) Use of int in max_burst socket option deprecated.
[  215.776905][T12164] Use struct sctp_assoc_value instead
[  215.828700][T12164] sctp: [Deprecated]: syz.2.1705 (pid 12164) Use of int in max_burst socket option deprecated.
[  215.828700][T12164] Use struct sctp_assoc_value instead
[  215.852416][T12164] sctp: [Deprecated]: syz.2.1705 (pid 12164) Use of int in max_burst socket option deprecated.
[  215.852416][T12164] Use struct sctp_assoc_value instead
[  215.932151][T12164] sctp: [Deprecated]: syz.2.1705 (pid 12164) Use of int in max_burst socket option deprecated.
[  215.932151][T12164] Use struct sctp_assoc_value instead
[  215.975240][T12164] sctp: [Deprecated]: syz.2.1705 (pid 12164) Use of int in max_burst socket option deprecated.
[  215.975240][T12164] Use struct sctp_assoc_value instead
[  216.024155][T12164] sctp: [Deprecated]: syz.2.1705 (pid 12164) Use of int in max_burst socket option deprecated.
[  216.024155][T12164] Use struct sctp_assoc_value instead
[  216.059628][T12185] lo: entered allmulticast mode
[  216.075806][T12187] netlink: 'syz.0.1713': attribute type 4 has an invalid length.
[  216.076603][T12185] tunl0: entered allmulticast mode
[  216.120549][T12185] gre0: entered allmulticast mode
[  216.194488][T12185] gretap0: entered allmulticast mode
[  216.216737][T12185] erspan0: entered allmulticast mode
[  216.245037][T12185] ip_vti0: entered allmulticast mode
[  216.276398][T12185] ip6_vti0: entered allmulticast mode
[  216.306761][T12185] sit0: entered allmulticast mode
[  216.375249][T12185] ip6tnl0: entered allmulticast mode
[  216.394381][T12185] ip6gre0: entered allmulticast mode
[  216.424426][T12185] ip6gretap0: entered allmulticast mode
[  216.446022][T12185] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.453428][T12185] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.474117][T12185] bridge0: entered allmulticast mode
[  216.492101][T12185] vcan0: entered allmulticast mode
[  216.527089][T12185] bond0: entered allmulticast mode
[  216.543501][T12185] bond_slave_0: entered allmulticast mode
[  216.554909][T12185] bond_slave_1: entered allmulticast mode
[  216.580573][T12185] team0: entered allmulticast mode
[  216.599537][T12185] team_slave_0: entered allmulticast mode
[  216.621761][T12185] team_slave_1: entered allmulticast mode
[  216.632009][T12185] dummy0: entered allmulticast mode
[  216.659341][T12185] nlmon0: entered allmulticast mode
[  216.686216][T12185] caif0: entered allmulticast mode
[  216.699052][T12185] batadv0: entered allmulticast mode
[  216.710487][T12185] veth0: entered allmulticast mode
[  216.720992][T12185] veth1: entered allmulticast mode
[  216.731910][T12185] wg0: entered allmulticast mode
[  216.752716][T12185] wg1: entered allmulticast mode
[  216.768514][T12185] wg2: entered allmulticast mode
[  216.781755][T12185] veth0_to_bridge: entered allmulticast mode
[  216.802908][T12185] veth1_to_bridge: entered allmulticast mode
[  216.828346][T12185] veth0_to_bond: entered allmulticast mode
[  216.851723][T12185] veth1_to_bond: entered allmulticast mode
[  216.873259][T12185] veth0_to_team: entered allmulticast mode
[  216.892670][T12185] veth1_to_team: entered allmulticast mode
[  216.916195][T12185] veth0_to_batadv: entered allmulticast mode
[  216.931769][T12185] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  216.940590][T12185] batadv_slave_0: entered allmulticast mode
[  216.941456][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  216.950973][T12185] veth1_to_batadv: entered allmulticast mode
[  216.966781][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  216.979857][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  216.995567][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  216.996914][T12185] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.011523][T12185] batadv_slave_1: entered allmulticast mode
[  217.017886][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  217.020822][T12185] xfrm0: entered allmulticast mode
[  217.030634][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  217.035595][T12185] veth0_to_hsr: entered allmulticast mode
[  217.055214][T12185] veth1_to_hsr: entered allmulticast mode
[  217.076272][T12185] veth1_virt_wifi: entered allmulticast mode
[  217.089075][T12185] veth0_virt_wifi: entered allmulticast mode
[  217.097478][T12185] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  217.112760][T12185] veth1_vlan: entered allmulticast mode
[  217.120739][T12185] veth0_vlan: entered allmulticast mode
[  217.136021][T12185] vlan0: entered allmulticast mode
[  217.141273][T12185] vlan1: entered allmulticast mode
[  217.155079][T12185] macvlan0: entered allmulticast mode
[  217.162630][T12185] macvlan1: entered allmulticast mode
[  217.172778][T12185] ipvlan0: entered allmulticast mode
[  217.178374][T12185] ipvlan1: entered allmulticast mode
[  217.187750][T12185] geneve0: entered allmulticast mode
[  217.197304][T12185] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.207463][T12185] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.216556][T12185] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.226101][T12185] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.235489][T12185] geneve1: entered allmulticast mode
[  217.243072][T12185] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  217.254672][T12185] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  217.265579][T12185] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[  217.275401][T12185] netdevsim netdevsim1 netdevsim3: entered allmulticast mode
[  217.291406][T12185] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  217.307618][T12185] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  217.317781][T12185] syztnl0: entered allmulticast mode
[  217.328771][T12185] bridge1: entered allmulticast mode
[  217.335881][T12185] wg0.2: entered allmulticast mode
[  217.341106][T12185] gre1: entered allmulticast mode
[  217.347799][T12185] macvlan2: entered allmulticast mode
[  217.353930][T12185] bridge2: entered allmulticast mode
[  217.360095][T12185] bond1: entered allmulticast mode
[  217.366463][T12185] mac80211_hwsim hwsim4 veth1_to_bo
d: entered allmulticast mode
[  217.375467][T12185] ip6erspan0: entered allmulticast mode
[  217.382841][T12185] bond2: entered allmulticast mode
[  217.390721][T12185] mac80211_hwsim hwsim21 wlan2: entered allmulticast mode
[  217.398525][T12185] veth2: entered allmulticast mode
[  217.404032][T12185] veth3: entered allmulticast mode
[  217.414103][T12185] bond3: entered allmulticast mode
[  217.419252][T12185] gretap1: entered allmulticast mode
[  217.431864][T12185] bond4: entered allmulticast mode
[  217.438678][T12185] veth4: entered allmulticast mode
[  217.444265][T12185] veth5: entered allmulticast mode
[  217.449597][T12185] vxlan0: entered allmulticast mode
[  217.456002][T12185] syztnl2: entered allmulticast mode
[  217.479815][T12208] netdevsim netdevsim2: Direct firmware load for .
[  217.479815][T12208]  failed with error -2
[  217.506476][T12208] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  217.506476][T12208] 
[  217.645472][T12223] xt_cgroup: path and classid specified
[  217.659923][T12216] wlan0 speed is unknown, defaulting to 1000
[  217.672097][T12216] lo speed is unknown, defaulting to 1000
[  217.732789][T12216] lo speed is unknown, defaulting to 1000
[  217.736042][T12226] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1725'.
[  217.761136][T12226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1725'.
[  218.089343][T12216] lo speed is unknown, defaulting to 1000
[  218.210174][T12246] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1730'.
[  218.246629][T12246] Unsupported ieee802154 address type: 0
[  218.525285][T12216] chnl_net:caif_netlink_parms(): no params data found
[  218.915423][T12272] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1741'.
[  218.924804][T12216] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.932107][T12216] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.977231][T12216] bridge_slave_0: entered allmulticast mode
[  218.985090][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  218.988203][T12216] bridge_slave_0: entered promiscuous mode
[  219.000459][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  219.010850][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  219.013149][T12280] openvswitch: netlink: Geneve opt len 31 is not a multiple of 4.
[  219.035852][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  219.037551][T12216] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.053743][ T5147] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  219.058044][ T5846] Bluetooth: hci4: command tx timeout
[  219.068256][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  219.116618][T12216] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.130553][T12216] bridge_slave_1: entered allmulticast mode
[  219.143232][T12216] bridge_slave_1: entered promiscuous mode
[  219.265001][T12290] netlink: 'syz.3.1744': attribute type 21 has an invalid length.
[  219.279553][T12285] vlan3: entered allmulticast mode
[  219.286946][T12285] bridge_slave_0: entered allmulticast mode
[  219.296692][T12285] bridge_slave_0: left allmulticast mode
[  219.339293][T12277] wlan0 speed is unknown, defaulting to 1000
[  219.341267][T12216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  219.374697][T12216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  219.387602][T12290] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  219.416520][T12277] lo speed is unknown, defaulting to 1000
[  219.515249][T12277] lo speed is unknown, defaulting to 1000
[  219.520402][T12216] team0: Port device team_slave_0 added
[  219.565150][T12216] team0: Port device team_slave_1 added
[  219.565492][T12302] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1747'.
[  219.676540][T12216] batman_adv: batadv0: Adding interface: batadv_slave_0
[  219.703562][T12216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.733228][T12307] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1749'.
[  219.772770][T12216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  219.881247][T12312] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.907687][T12314] netlink: 'syz.1.1750': attribute type 1 has an invalid length.
[  219.928730][T12216] batman_adv: batadv0: Adding interface: batadv_slave_1
[  219.943944][T12216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.944796][T12314] netlink: 'syz.1.1750': attribute type 1 has an invalid length.
[  219.983011][T12216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  220.032963][T12318] netlink: 'syz.1.1750': attribute type 1 has an invalid length.
[  220.094820][T12277] lo speed is unknown, defaulting to 1000
[  220.159166][T12216] hsr_slave_0: entered promiscuous mode
[  220.184956][T12216] hsr_slave_1: entered promiscuous mode
[  220.275261][T12323] mac80211_hwsim hwsim3 : renamed from wlan1 (while UP)
[  220.550917][T12344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1757'.
[  220.592526][T12344] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1757'.
[  220.605584][T12353] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1758'.
[  220.678709][T12353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1758'.
[  221.038629][T12216] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.066698][T12376] netlink: 'syz.2.1764': attribute type 12 has an invalid length.
[  221.089335][T12277] chnl_net:caif_netlink_parms(): no params data found
[  221.091763][T12381] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  221.134402][ T5837] Bluetooth: hci0: command tx timeout
[  221.135732][  T978] ==================================================================
[  221.140987][ T5837] Bluetooth: hci4: command tx timeout
[  221.148562][  T978] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0xd7/0x140
[  221.148615][  T978] Read of size 8 at addr ffff888058d3e188 by task kworker/0:2/978
[  221.148628][  T978] 
[  221.148644][  T978] CPU: 0 UID: 0 PID: 978 Comm: kworker/0:2 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0
[  221.148660][  T978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  221.148671][  T978] Workqueue: events l2cap_info_timeout
[  221.148691][  T978] Call Trace:
[  221.148700][  T978]  <TASK>
[  221.148708][  T978]  dump_stack_lvl+0x241/0x360
[  221.148728][  T978]  ? __pfx_dump_stack_lvl+0x10/0x10
[  221.148744][  T978]  ? __pfx__printk+0x10/0x10
[  221.148759][  T978]  ? _printk+0xd5/0x120
[  221.148773][  T978]  ? __virt_addr_valid+0x183/0x530
[  221.148789][  T978]  ? __virt_addr_valid+0x183/0x530
[  221.148803][  T978]  print_report+0x16e/0x5b0
[  221.148818][  T978]  ? __virt_addr_valid+0x183/0x530
[  221.148832][  T978]  ? __virt_addr_valid+0x183/0x530
[  221.148845][  T978]  ? __virt_addr_valid+0x45f/0x530
[  221.148858][  T978]  ? __phys_addr+0xba/0x170
[  221.148880][  T978]  ? l2cap_sock_ready_cb+0xd7/0x140
[  221.148901][  T978]  kasan_report+0x143/0x180
[  221.148920][  T978]  ? l2cap_sock_ready_cb+0xd7/0x140
[  221.148944][  T978]  l2cap_sock_ready_cb+0xd7/0x140
[  221.148966][  T978]  l2cap_conn_start+0x8e2/0x1150
[  221.148989][  T978]  ? __pfx_l2cap_conn_start+0x10/0x10
[  221.149006][  T978]  ? l2cap_info_timeout+0x60/0xa0
[  221.149024][  T978]  ? __pfx___mutex_lock+0x10/0x10
[  221.149044][  T978]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  221.149066][  T978]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  221.149091][  T978]  l2cap_info_timeout+0x68/0xa0
[  221.149109][  T978]  ? process_scheduled_works+0x9c6/0x18e0
[  221.149127][  T978]  process_scheduled_works+0xabe/0x18e0
[  221.149157][  T978]  ? __pfx_process_scheduled_works+0x10/0x10
[  221.149179][  T978]  ? assign_work+0x364/0x3d0
[  221.149205][  T978]  worker_thread+0x870/0xd30
[  221.149226][  T978]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  221.149245][  T978]  ? __kthread_parkme+0x169/0x1d0
[  221.149266][  T978]  ? __pfx_worker_thread+0x10/0x10
[  221.149284][  T978]  kthread+0x7a9/0x920
[  221.149304][  T978]  ? __pfx_kthread+0x10/0x10
[  221.149324][  T978]  ? __pfx_worker_thread+0x10/0x10
[  221.149342][  T978]  ? __pfx_kthread+0x10/0x10
[  221.149362][  T978]  ? __pfx_kthread+0x10/0x10
[  221.149384][  T978]  ? __pfx_kthread+0x10/0x10
[  221.149403][  T978]  ? _raw_spin_unlock_irq+0x23/0x50
[  221.149419][  T978]  ? lockdep_hardirqs_on+0x99/0x150
[  221.149435][  T978]  ? __pfx_kthread+0x10/0x10
[  221.149457][  T978]  ret_from_fork+0x4b/0x80
[  221.149475][  T978]  ? __pfx_kthread+0x10/0x10
[  221.149495][  T978]  ret_from_fork_asm+0x1a/0x30
[  221.149519][  T978]  </TASK>
[  221.149525][  T978] 
[  221.418749][  T978] Allocated by task 12194:
[  221.423152][  T978]  kasan_save_track+0x3f/0x80
[  221.427827][  T978]  __kasan_kmalloc+0x98/0xb0
[  221.432404][  T978]  __kmalloc_noprof+0x285/0x4c0
[  221.437246][  T978]  sk_prot_alloc+0xe0/0x210
[  221.441746][  T978]  sk_alloc+0x3e/0x370
[  221.445816][  T978]  bt_sock_alloc+0x3c/0x340
[  221.450309][  T978]  l2cap_sock_create+0x13d/0x300
[  221.455236][  T978]  bt_sock_create+0x161/0x230
[  221.459905][  T978]  __sock_create+0x4c0/0xa30
[  221.464481][  T978]  __sys_socket+0x150/0x3c0
[  221.468972][  T978]  __x64_sys_socket+0x7a/0x90
[  221.473634][  T978]  do_syscall_64+0xf3/0x230
[  221.478126][  T978]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.484009][  T978] 
[  221.486318][  T978] Freed by task 12192:
[  221.490372][  T978]  kasan_save_track+0x3f/0x80
[  221.495048][  T978]  kasan_save_free_info+0x40/0x50
[  221.500064][  T978]  __kasan_slab_free+0x59/0x70
[  221.504828][  T978]  kfree+0x196/0x430
[  221.508713][  T978]  __sk_destruct+0x50c/0x690
[  221.513294][  T978]  l2cap_sock_release+0x15b/0x1d0
[  221.518308][  T978]  sock_close+0xbc/0x240
[  221.522535][  T978]  __fput+0x3e9/0x9f0
[  221.526514][  T978]  task_work_run+0x24f/0x310
[  221.531091][  T978]  syscall_exit_to_user_mode+0x13f/0x340
[  221.536714][  T978]  do_syscall_64+0x100/0x230
[  221.541292][  T978]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.547175][  T978] 
[  221.549484][  T978] The buggy address belongs to the object at ffff888058d3e000
[  221.549484][  T978]  which belongs to the cache kmalloc-2k of size 2048
[  221.563525][  T978] The buggy address is located 392 bytes inside of
[  221.563525][  T978]  freed 2048-byte region [ffff888058d3e000, ffff888058d3e800)
[  221.577396][  T978] 
[  221.579705][  T978] The buggy address belongs to the physical page:
[  221.586101][  T978] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888058d38000 pfn:0x58d38
[  221.596162][  T978] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  221.604646][  T978] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  221.612614][  T978] page_type: f5(slab)
[  221.616582][  T978] raw: 00fff00000000040 ffff88801b042000 0000000000000000 dead000000000001
[  221.625152][  T978] raw: ffff888058d38000 0000000000080007 00000000f5000000 0000000000000000
[  221.633722][  T978] head: 00fff00000000040 ffff88801b042000 0000000000000000 dead000000000001
[  221.642377][  T978] head: ffff888058d38000 0000000000080007 00000000f5000000 0000000000000000
[  221.651036][  T978] head: 00fff00000000003 ffffea0001634e01 ffffffffffffffff 0000000000000000
[  221.659691][  T978] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  221.668342][  T978] page dumped because: kasan: bad access detected
[  221.674748][  T978] page_owner tracks the page as allocated
[  221.680444][  T978] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10189, tgid 10186 (syz.3.1166), ts 175532927953, free_ts 175519493170
[  221.701975][  T978]  post_alloc_hook+0x1f4/0x240
[  221.706741][  T978]  get_page_from_freelist+0x365c/0x37a0
[  221.712276][  T978]  __alloc_frozen_pages_noprof+0x292/0x710
[  221.718066][  T978]  alloc_pages_mpol+0x311/0x660
[  221.722906][  T978]  allocate_slab+0x8f/0x3a0
[  221.727396][  T978]  ___slab_alloc+0xc27/0x14a0
[  221.732060][  T978]  __slab_alloc+0x58/0xa0
[  221.736375][  T978]  __kmalloc_node_track_caller_noprof+0x2e9/0x4c0
[  221.742782][  T978]  kmalloc_reserve+0x111/0x2a0
[  221.747535][  T978]  __alloc_skb+0x1f3/0x440
[  221.751937][  T978]  netlink_sendmsg+0x634/0xcb0
[  221.756686][  T978]  __sock_sendmsg+0x221/0x270
[  221.761350][  T978]  ____sys_sendmsg+0x53a/0x860
[  221.766104][  T978]  __sys_sendmsg+0x269/0x350
[  221.770683][  T978]  do_syscall_64+0xf3/0x230
[  221.775178][  T978]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.781060][  T978] page last free pid 10183 tgid 10183 stack trace:
[  221.787538][  T978]  free_frozen_pages+0xe0d/0x10e0
[  221.792550][  T978]  __put_partials+0x160/0x1c0
[  221.797216][  T978]  put_cpu_partial+0x17c/0x250
[  221.801969][  T978]  __slab_free+0x290/0x380
[  221.806370][  T978]  qlist_free_all+0x9a/0x140
[  221.810942][  T978]  kasan_quarantine_reduce+0x14f/0x170
[  221.816385][  T978]  __kasan_slab_alloc+0x23/0x80
[  221.821220][  T978]  kmem_cache_alloc_noprof+0x1d9/0x380
[  221.826668][  T978]  vm_area_dup+0x27/0x290
[  221.830979][  T978]  __split_vma+0x1bf/0xbf0
[  221.835381][  T978]  vma_modify+0x144/0x330
[  221.839694][  T978]  vma_modify_flags+0x3a5/0x430
[  221.844541][  T978]  mprotect_fixup+0x45a/0xaa0
[  221.849202][  T978]  do_mprotect_pkey+0x99d/0xdd0
[  221.854041][  T978]  __x64_sys_mprotect+0x80/0x90
[  221.858872][  T978]  do_syscall_64+0xf3/0x230
[  221.863367][  T978] 
[  221.865677][  T978] Memory state around the buggy address:
[  221.871285][  T978]  ffff888058d3e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  221.879325][  T978]  ffff888058d3e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  221.887366][  T978] >ffff888058d3e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  221.895407][  T978]                       ^
[  221.899718][  T978]  ffff888058d3e200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  221.907761][  T978]  ffff888058d3e280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  221.915803][  T978] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  222.114981][  T978] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  222.122229][  T978] CPU: 0 UID: 0 PID: 978 Comm: kworker/0:2 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0
[  222.132895][  T978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  222.142947][  T978] Workqueue: events l2cap_info_timeout
[  222.148404][  T978] Call Trace:
[  222.151669][  T978]  <TASK>
[  222.154590][  T978]  dump_stack_lvl+0x241/0x360
[  222.159261][  T978]  ? __pfx_dump_stack_lvl+0x10/0x10
[  222.164445][  T978]  ? __pfx__printk+0x10/0x10
[  222.169017][  T978]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  222.174996][  T978]  ? vscnprintf+0x5d/0x90
[  222.179319][  T978]  panic+0x349/0x880
[  222.183201][  T978]  ? check_panic_on_warn+0x21/0xb0
[  222.188310][  T978]  ? __pfx_panic+0x10/0x10
[  222.192714][  T978]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[  222.198682][  T978]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  222.204999][  T978]  check_panic_on_warn+0x86/0xb0
[  222.209930][  T978]  ? l2cap_sock_ready_cb+0xd7/0x140
[  222.215126][  T978]  end_report+0x77/0x160
[  222.219357][  T978]  kasan_report+0x154/0x180
[  222.223869][  T978]  ? l2cap_sock_ready_cb+0xd7/0x140
[  222.229062][  T978]  l2cap_sock_ready_cb+0xd7/0x140
[  222.234078][  T978]  l2cap_conn_start+0x8e2/0x1150
[  222.239009][  T978]  ? __pfx_l2cap_conn_start+0x10/0x10
[  222.244366][  T978]  ? l2cap_info_timeout+0x60/0xa0
[  222.249375][  T978]  ? __pfx___mutex_lock+0x10/0x10
[  222.254388][  T978]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  222.260389][  T978]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  222.266711][  T978]  l2cap_info_timeout+0x68/0xa0
[  222.271552][  T978]  ? process_scheduled_works+0x9c6/0x18e0
[  222.277262][  T978]  process_scheduled_works+0xabe/0x18e0
[  222.282805][  T978]  ? __pfx_process_scheduled_works+0x10/0x10
[  222.288773][  T978]  ? assign_work+0x364/0x3d0
[  222.293374][  T978]  worker_thread+0x870/0xd30
[  222.297976][  T978]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  222.303869][  T978]  ? __kthread_parkme+0x169/0x1d0
[  222.308903][  T978]  ? __pfx_worker_thread+0x10/0x10
[  222.314010][  T978]  kthread+0x7a9/0x920
[  222.318155][  T978]  ? __pfx_kthread+0x10/0x10
[  222.322733][  T978]  ? __pfx_worker_thread+0x10/0x10
[  222.327837][  T978]  ? __pfx_kthread+0x10/0x10
[  222.332420][  T978]  ? __pfx_kthread+0x10/0x10
[  222.337000][  T978]  ? __pfx_kthread+0x10/0x10
[  222.341576][  T978]  ? _raw_spin_unlock_irq+0x23/0x50
[  222.346761][  T978]  ? lockdep_hardirqs_on+0x99/0x150
[  222.351949][  T978]  ? __pfx_kthread+0x10/0x10
[  222.356529][  T978]  ret_from_fork+0x4b/0x80
[  222.360934][  T978]  ? __pfx_kthread+0x10/0x10
[  222.365515][  T978]  ret_from_fork_asm+0x1a/0x30
[  222.370270][  T978]  </TASK>
[  222.373540][  T978] Kernel Offset: disabled
[  222.377845][  T978] Rebooting in 86400 seconds..