last executing test programs:

7.965425265s ago: executing program 2 (id=3598):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r1, 0x51b0b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
getpeername$packet(r0, &(0x7f0000000280)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x4000000c, r2})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$sock(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e000000130005000000000000000000030107fe100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000320000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffecffffff"]}, 0x108)

7.504205581s ago: executing program 4 (id=3604):
r0 = socket(0x2d, 0x2, 0x0)
setsockopt(r0, 0x11d, 0x1, &(0x7f0000000500)="01000000", 0x4)
sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000800)=@generic={0x2d, "0000000000000800000019000000000f00"}, 0x80, 0x0}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x14, &(0x7f0000000100)={0xa, 0x4e23, 0x3f89, @loopback}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="bfa20000001f004007020000f0ffffffb70300000c000000b704000000000000b705000000000000850000006300000015000000000081011f000000000085000000560000009509000000303f000000", @ANYRES16=r1], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000980)={0xffffffffffffffff, &(0x7f0000000880)="fb30dc1aeb00760fd2dfaec87fb33c84f31e50f8fd31be186507c5ecfe50bb12102dc8089cb4b34b8b3698dda52ed7aabb52d31b6d1c3f6dfda32a9418f4ffd6a658bdcb0445466eceb9cff66157c50f0deedd26ebf7f13cc36af8c8f7af5d156b9b3fe2f9f8604ca74fefea5f4854a9feaeed76d909ef45435b9adf1073e68f0000538dbfc95d14c471d9d80ed233b58b3ebd39fd646c72e9068c0adf16bdf419daf74f6dc4d9bb0ccaad7ce298a01c3f287cb292956cdaa84c7fc00200905d4337d84598f2b9"}, 0x20)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0xb004}, 0x4)
openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000180))
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0xf0ffffff, {0x0, 0x0, 0x74, r3, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0)

6.756112416s ago: executing program 2 (id=3607):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x130, 0xc8, 0x8, 0x130, 0x5803, 0x250, 0x2e8, 0x2e8, 0x250, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xff], [0xffffff7f, 0xfffffefe, 0xffffffff, 0xffffffff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x84, 0xb7}, 0x0, 0x108, 0x130, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xc, 0x100, 0x3}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0xffffff00, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffffff], 'team0\x00', 'wg2\x00', {}, {}, 0x112, 0x6, 0x4, 0x10}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0x0, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000008c0000008c0000000b0000000900000000005f24010000000007000002000084010000000f00000003000000ffff000002000000050000008270000000000100010000000000000006000000dfd033130b000000050000000b0000000200000005000000000000000c0000000000000000000000050000000d000000040000000700000003000000000000000400000000000000040000000030615f5f5f0000300000"], &(0x7f0000000580), 0xaf, 0x0, 0x1, 0x80000001}, 0x28)
r1 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000440)={'tunl0\x00', <r4=>0x0, 0x1, 0x40, 0x103, 0x2, {{0x15, 0x4, 0x3, 0x3, 0x54, 0x65, 0x0, 0x5, 0x29, 0x0, @multicast1, @multicast2, {[@timestamp={0x44, 0x18, 0x36, 0x0, 0x5, [0x1, 0x6, 0x2, 0xa, 0x80002001]}, @generic={0x86, 0x7, "8b586b7e75"}, @lsrr={0x83, 0x1f, 0x92, [@private=0xa010102, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @multicast1]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r4, 0x4, 0x7, 0x4, 0x0, 0x8, @mcast1, @loopback, 0x7800, 0x10, 0x7, 0xa}})
socket$nl_route(0x10, 0x3, 0x0)
recvmsg(r1, &(0x7f0000000940)={&(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000800)=[{&(0x7f00000006c0)=""/42, 0x2a}, {&(0x7f0000000700)=""/143, 0x8f}, {&(0x7f00000007c0)=""/47, 0x2f}], 0x3, &(0x7f0000000840)=""/223, 0xdf}, 0x20a4)
sendmsg$nl_route_sched(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x4048014}, 0x8000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x18, 0x27, 0x1, 0x0, 0x0, {0xe}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="600000000514000228bd7000fcdbdf25080001000200000008000300018732"], 0x60}, 0x1, 0x0, 0x0, 0x40011}, 0x80)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000476f83ae7121473f86c5386a6e0000000000001a0100002020702500000000002020207b1ad8ff00000000bfa1000051688c90a852963ef8ffffffb702200008000000b703000000000000850000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)

6.406896539s ago: executing program 4 (id=3609):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x8, &(0x7f0000000780)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9}, 0x94) (async, rerun: 64)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000500)=r0, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8d}, 0x94) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (rerun: 64)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 64)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async, rerun: 64)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="15a94c5f0e715fc9411ce56593ddf9595889f340e2e866d70a6ad7e55bbd6112112eeb4242e30ece31691786b4cd0a73d91f675fc44c71f68a262308548f5e06c4ad757e366d67f2b2a79b7cf0dd3603f05e9a34720091ea1e1dbcc9a0515a5e822133e03dd6cfa7202de7e23f203e5ba2474aebd863a78afe7ed97c901ed7be58ad3bd0d45929adc88d30b3d5267830cb758721", 0x94, 0xc000, &(0x7f0000000380)={0xa, 0x4e23, 0x7f, @private0}, 0x1c)
close(r5) (async, rerun: 32)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64)
writev(r4, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d0984e7e6db7f90c5b959a5231eb5d6615538d482", 0x2c}], 0x2) (async, rerun: 64)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async)
writev(r1, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f00000002c0)=@ethtool_gstrings={0x1b, 0x4, 0x4, "987c804f"}})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000ffdbdf25120000001800018014000200626f6e645f736c6176655f310000000008000900ff030000080007000b000000857ee76e41bde95a41d25c6f66db8f67ad45f929fbe4ca91cfe3075a9c6d7d3bcbd460fc4c852db63acfb4f6c846ccf24744b00765e2399823f16a4a59cd7e91e172f61530727de5c7b0513498228cd7449ba226ebf26f8a94b01a1290b4a8", @ANYRES16=r8], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x2404c054)

6.031828258s ago: executing program 0 (id=3610):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x58}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x40000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffff8000}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x7, 0x5}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xffff}, {0x85, 0x0, 0x0, 0x81}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x520}, 0x94)

5.329110706s ago: executing program 2 (id=3614):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000002400dde580cd7ff932a1c2abcffcc105", @ANYRES32=r2], 0x3c}}, 0x0)
r3 = socket(0x22, 0x803, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r5=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500000400fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="61000100000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000480), 0x4) (async)
recvmmsg(r6, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001980)=""/96, 0x60}], 0x1, 0x0, 0x18}, 0x9}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/58, 0x3a}], 0x1, &(0x7f0000002300)=""/12, 0xc}, 0x90}], 0x2, 0x40002122, 0x0)
sendmsg$tipc(r6, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="e8", 0x1}], 0x1}, 0x4800) (async)
r7 = socket$unix(0x1, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async)
r8 = socket$kcm(0x10, 0x2, 0x0) (async)
r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r9, 0x118, 0x0, &(0x7f00000002c0)=0x7, 0x4)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
r10 = socket(0x2, 0x80805, 0x401)
sendmmsg$inet_sctp(r10, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)}], 0x1, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800599c6d0eab070004000523"], 0xfe33)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x9, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x2}, {0x0, 0x4}]}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x2}]}]}, {0x0, [0x0, 0x61, 0x2e, 0x2e, 0x2e, 0x61, 0x61]}}, &(0x7f0000000000)=""/28, 0x55, 0x1c, 0x1, 0xfffffffe}, 0x28) (async)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000030000000000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xf, 0x0, &(0x7f0000000a00)="1205678919379a35cb526f2d770903", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

5.32734035s ago: executing program 1 (id=3615):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x60, r1, 0x1, 0xffffffff, 0xfffffffe, {0x37}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x15}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004000}, 0x20040100)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002d40)=ANY=[@ANYBLOB="180000006a0001002abd7000fbdbdf2502000008"], 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000010)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}, [@nested={0x10, 0x138, 0x0, 0x1, [@nested={0xc, 0xa8, 0x0, 0x1, [@typed={0x8, 0xe, 0x0, 0x0, @u32=0xa0cb}]}]}]}, 0x24}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r6 = socket(0x1e, 0x5, 0x0)
connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0xfffffffe}}}, 0x10)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in6=@empty, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0xc4, 0x5, [{{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x2, 0x48, 0x4, 0xffff, 0x5}, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4d4, 0x2b}, 0xa, @in=@broadcast, 0x0, 0x2, 0x1, 0x3, 0x0, 0x2, 0x6}, {{@in=@multicast2, 0x4d4, 0x2b}, 0xa, @in=@local, 0x0, 0x1, 0x0, 0x3, 0xfffffff9, 0x103ff, 0xd9}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0xc800)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2)
r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r9, 0x4)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f00000006c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))

5.289685064s ago: executing program 0 (id=3616):
socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x3ffff, 0x0, 0x90, [0x200000000100, 0x200000000130, 0x200000000160, 0x200000000100, 0x200000000100, 0x200000000100], 0x0, 0x0, 0x0}, 0x108) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000009, 0x3032, 0xffffffffffffffff, 0xc6dd5000) (async)
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xfa, &(0x7f0000000600)=""/250, 0x0, 0x18, '\x00', 0x0, 0x0, r1}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'pim6reg0\x00', &(0x7f0000000040)=@ethtool_stats})

4.600159223s ago: executing program 3 (id=3618):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040)={0x0, 0x0, 0xffb0}, 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)

4.60000749s ago: executing program 4 (id=3619):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00')
ioctl$FICLONE(r0, 0x40049409, r0)
unshare(0x28040680)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140))
pwrite64(r1, &(0x7f00000000c0)="9a001e99", 0x4, 0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') (async)
ioctl$FICLONE(r0, 0x40049409, r0) (async)
unshare(0x28040680) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) (async)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) (async)
pwrite64(r1, &(0x7f00000000c0)="9a001e99", 0x4, 0x4) (async)

4.552479302s ago: executing program 0 (id=3620):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24008844)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000200025a726bd7000fddbdf250a0000cdff0000010200010008000600000000000c000c00e5"], 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0)
sendto(r0, &(0x7f0000000680)="91a3b6414f04ee2318953409bb585437e20085b82837d2a1ead253f724b7b6f38010fb215952c0aa57387a0afda61aa7dc19096e61a959f019c42d1d3b13970b4ade74ef6b4276f672480c0ce38576756896861dee3860302b3e8a6056d76d6432d51bba052c419dcb043c27c7eaa3d5f3bfa50497c1b20cc91ec2353f5a2bb12c9f5d1b4ab5c97a4fd1effb72241ec0273448d9a801fd00ae3589fbe0677f7c2be607254c25ceab75114a040631677f59103e777274b318081f623ea82e5131aa049196f87a647bd58fdb59e60f7cde5bd4dc3a398647478d2a2545629a6b49fa9d7bfb8365071ff166e2bb0d8b7c1ed2a5464bf74a50acf6abd1c845f0a115890e5391ee4a82977404630726855d56253dd0fe7568503b2c0b099f0856339d37f7a4998652a019dd6e6644670ca165897debf26caf1a011ef7130c97c9a77af953a3c0d8206088da480e5265238fbf1d70ee5772d72f7132a2267e7505693c53d652f1c1c6bd8d988337eda5053a1509cff725f1346f5bef08ba5a21bd4b2dfcb88fdd826baf7af74f3d6466b01f6bbbe99f8d5583d401a9f8673d6a6aa7c11d1f68dfb4658283b3c7347699df535fa8685a2870d5ac8bd67b23d449a04bf285a4839c40257f3652cc2e5370e83bbe98324d967951c1705da292f719079d806d23bef4f8a949bfcd9a4c5f0ddae017085ef9a5cd6abefa5858fc78c08544769d77137cafcf7a856a98043def97ddc5201387570d438a1706ba8b1ae1528cfed28a7866fcde2b07840fa4db2b60c784b38e371cc53c23c850c7ff95cb2ca3a73fb32a070bd7ffc924c6cc2f528d26458e2e7efa86ba603a0b947e18b1f01b2063d4b13d5b61fa480767abe2d6c93d4b3cd88f7b289467a75feb7b5ca55bf9ba2604f05177b1dfc7946a13b7003c6427460526f087db5cc93f246d7877febc694a30d90bd0cb79464ab5044ac3e0e01058a43c56181495adc13d288a4e06438634c3236054b273778f12a3eabeec753eb12aa81b5df231495415026eae9b99685ef64d984c43cb11424d9e051c37c7c5b5b5fc67f5f5aaf8f556952dc78d560bfd108446ca9b15340ba25d02a928059e87dcef85f063e882a5cdd6ad6b40c888cab2a980d172bf5fa7e114712a5e30e8d3aec5b1ec4426b831aa54077697aac1212f89ba82cc5c142e32830d20474a754c85fe22515c84f574f68e1120f3a2b054e2bf6d450852d43f6e9ca49e0e47415d34d327a6ac9d27531106b3380a677443e17215cec9ad4515c530e36846c0823711f65c0192b3febfa776ab80a8b75e7aeac6ff10e86436114e76d39c06bedada38874ce2ff3dace970347a502c1c34e7aa95fe1dd5a12e31f92bcd90881c4c552ce91594c40d62804a6cc4a80a1a71f741082a860c6c28999279691ecd065452fd83a21b20457409a98a0870c3f8e5e41d95b0cd78795dbf29cd2f0c1aecff745838f51b7727ecb02e76a6a3f51a8a420b782fab70993b4fd3204695a6ff60ba174923d193e31d023ad92d78c7de9e0b91a3be5a3603f3537e0a62e156aeb3201bd4572441c6b46c2bab449365bee7ec6001aef2cbe1ef8d79337ea9feb8c3c3db39cdb0cf20598fca897df72b0d19ccd59acf06d2b32136f7ec3214ff8e1b037afd3752f191fe0d145bfb0f0cee003562190234005bd8c48bd7c938a7ed458cf9e44cba712270cb906628c3b82721af8b76e3addd47451395520b448d78580d7625be93857c0119ac56d02889434251467d61c6748ba1cd93016d000c3161771d319006e2d6ab4d070af067db3750842b09536e95678f2a0df44de850d4508a2174adc462253b9ae7b41b3550a021c397b88da78fefb7fe531935921934ccb5eb26d521dcbaed505241cfe12f0f5d5708b095669ca5256aa03ff564408d935407f999b4042ef94ae9abd1ef3862acc3a4619ef33a75d257c92e556c980445c4dce5f111db4e86bc64269fbf718683766d5c0b3f702ec83aa33bb3dc2813e0c8918787132c8be5cb8bff62c9bfc1b04a8d357f04ae05c03090227c425a813b8534856a5eb9f5d0cf539cf7bcdb5742274c662a550c4562de673505370bf9845682b31c8f4a049b561a488b15ab02bb397f8cf38740ca91c74990bf17e90c7a5447a37ef37a724a49433f8215b76bac4b3d1c42786b19e7fac4daa7f725b511890c77eb53ac4150005e88447a0484bbfb2020918266905735c6b545a3529df64dadac4d52b4f26f016b18c140ad8b2b0dbe16ace28e05537fc9bb609ce883615bdaaacbb6ac11aecff5a8b0b95d2571b1e9b7c6112d62ee231818b8ebdb38d604fc997d161a272600ce70d14a862347503c0b9062ab169e5addaabb46bed2419bbf902d9f238e300214d0b47bbac61f726c50e2be1720de63d6ede1b97872e1cb1ee45ac0cb6372ebdbd5b5e201426e9b86e3773640a8834902d145f5759e1b1e601917f97666d42c68e42c304425c65af052b9ef436c3b93434c5d8ba3c6053637b7dee5193ed8a62245a0cb05e942dd6d4ad77e4f5336d6200c772903fcf8a6308ad6b39bdbe47861ec9e5f1e47649dffef25c89bf154e5536accd1f25d913221deb317fe68aa038b96ddcee794ee3ccb0e73c1dd56bf0303d919ce720e02493f4e1c8fb93a535a8aba223bd439088c642e19611d3b3cbcc34391008daeb09325977c293769fdd6d7334e098cfdfb6ebc8a410c05d1267a190403eb7e53d83277122d6d1c9866f09cac8beb551c29494b55f7ca4449f8d1420935f5084e1b266b0504e7ec106ac70fa7dc191c2435852cbdd795369dba3c1931414ee646064a8178f55285c664e76fa190b77cf815887a6b5988273ea178681bc0544425ed58e27866e67a2838c692a6161d4c5411926cb7bb8debd96f69c89f87fa4c406e7762d8a990741f228a7318c953814624440c5adfe3f8fdb94bad6623a959a39de7511c7f70cd36486e2ede7f78d3ad9711be1566f4e2902ff4944aaec7db61e836df4a02ee3328a0034285eed1391e5a3f6581c788a8a134173531b148f1e6c215045082c5a26e3b9b4407bd968549a9d0b4b619e3b98e9ec38b1cd7a0a7824aa91b09dcf6fe75d39192db44b076aa61974823f4bb7370182fabfc49746fb67804f4170ba3dbf218ee7af3c3921b7aff05de31163249db3382e0c893b852f229321fa9d4f1bc5d9d88aceb7bc8712d97425612daa068232141922be74f8abd94d419a80b7d165841b5481d977b1b639759a8c4367d06588c0eb4735f8f8f2d1f2f76c67886f05dc44b3e7e81893cbadbf55ada0fe939f868255bb80d3ff19d65845e2453564acd292130d99768ce1ffd8e390b0bc3dc08c98bbb8c69233fd8e3cec89dfa8033ba36523a3415b3b11d3f5681b6c952426afec110baaff2ce31c58bc93c3562638c199503d390d08f5584c2042a181db7f7548f0511d8aff3177bcaaf68cd184b6491295a69ebbe3595be16b78fcaba4cbd78d66baba9b6bf78f3a0e565b2adf6c6cba2e9ce381ead7742dd330d7829df18aedb310bf45140cb0e249c5a5a4d9b47b20bb62ed11fb54e61e6bc60b5d9c3e2d7b78dafd6fa1c49600e54837ff738cf14bdee1e163c6cb406df2a11724fc60f2984bf7e12a0ca368a025facac238e71209bb5918c7bb4c5b34bed4d5caf23aa99de7c80cc67cf42055d6d4f2d94af9ddfd8c7ec708a380726dff0b7ac7b94eb45923df12ddb8dbc77df069ff185ec15cf5b31d2a9b677506b4f85842ae559a323fef1c22e62f42094a22e2a473d7165f471d9d90d3138f276d1e5a9202e5f1dd8c6fc277de9742c3dd5de849ae653ff66836d8489ac5c8a283ae0165db0a87b5926740831c6201ecc9e60ba7dfee3edc0bb5b597ce3d519b85922acee5b4e2add00d49b162904708c472db5d31b981bb3f3e3eea2799aea9bc2dbb53e14db3a0a3d278dcf78a200f77def9956b34e96746993d15f4ca57de1a832493ff36751febfb9379285f3e5b9faf636b54e42defda47782112d1ac93c683375def5fec2f300634849df6eddf7d3f4c13f180cc13345caf8483d9467845b6f48ef96b8d0df7203af3cfb47ccdb3f88fb34c2d4d6a18eafd56d493f24161fa43d1df8de782383ce916138e49680e116fd0b1a431eef627d724b6a1dd015ee7c3e138136da8a502ae719ffce9d76d4f639ff6afb893f099f938f4c0972ba76e0ea4877ee1d8b210fd7a8c8854058f1d7da96906adecd935a89bce2e460744d552a0cc068e2aed0760b4c4a149aa58195570e51e868c0e1d4656ca57f8832917146d28a13ecaab804bc9d959016b54b2ba9cd8a796d6365a7134c040e6117af0cba53a371c76ddf153c881fc5981ec60ee4f736ba32f3e88ef25540fd35c2ec086f5f9466f0ba2faf6bd452f829eed8c38ec37a3cb0cda92f3468ff2dd0c3b433aa9b02fbe379c0f5a0f36487f576d9dfef3f2865cd8dcd901aeca9b04dac0651fa4bfad1fd5a600dc2753780c92675cc5060ac69fe13d8155b0d15fe97e26d2e72ac2fc5dcfc6ce24ad91bad222d833ea9d3c31f16b3513d9b715106f47d678ca2b59455411b7cfacd6f1c098052c015d270348cbe78bdf4b98e1f18f090de7601c0ef348eddbf5588ecb1027802a3779c687e255d5488aa843c853c8b6c8b2ab6866e6ec02ebd09524ee0d1bc5e11160c2c268a796f173d8d68fa20b950956188597605d293d76ed8da6c23daff78698ab936903183c939911f5d387df14073fc4046619833c784a41c5ab08a7df0a1dc8bf8af19e49d1d52e56e3c94ecc98e01a29eb447eef537fead0bff244db34e8a5eea996f4d0c9254ed98e2689da8221fe2a779638c470522a0df8e6948a33c06488dd9cfa2d2e31eef9000bc315aebab465f6e5cff76215e3b7cf3f66ad72f6e8bb9f1f922c6642a876e82327d9ccc2d3f8b93ff88b7007997b81ee2340563c164896af7d0cb516716af4020a0f6fd33ca4eacb042474f55f272b698d1a7db811c030d24f05a31a0f3098117677ee18a1e9e59afad7f6fc3830a23b35f62c52a2081f7adc9ce50989e58528c333efb5e841b43169b7fefe556ed3b79aa2770f819c354d366ed612ababecc972854a2754a22193f02f9d485dc34f8defe8798814e28ae2179072cf0499ce2e31cee3774679ee45ad2e859bbe77685f2e017735c8b1c0c18ac95098303bc6c17d3596ea12ecfb2064f62491a74b230002fac8d19559cd96d4c1b3a5a629d14515551129c9aaf7e93fe523eb770e8b9ef94f4e8ae25830f3c062eab8a5d684cb6aa9e81cb70869c6aba1767588f0f63f90b5d8b0b56a45821cc18d1ec234706cae98500aebc3687c557dd8dc79e967867956c475edf334dc08957a35c6bf00a9806001988b1e2df0a90d2a40bbca12baf9ba628b44d3db40c01ea1ae1158affa11beb047abe76c3132ac49cc0b5a8d8a44c49116b9210d9bcd38f397d056fddcb57212930e74d513192bc764ddcbc37cf3ba0f10af46f7f6dc7ac7d100b19bf6469293e1eefbde8dcde82597bd11b5941f532fa649bf11854721076c1b6072fd587419fccd290ee9ff01b6ee3f026966b8f3de427d8bf0135cf88f46978ad302241a2a9cd60b6350c35d0bf56b413289142f72d9e944ac962311ca42326ad7da5b922f68b4ddacbfe323d2d59955d8d9a69f828dfb50af6ea774c6c54f0717801a12e7c6eb3cf08e569d23b71cbb1b04f6d258c493c950629973bfb7d579f53aac281178dbd4e904d36aab5ded85ee6746f366ea541a2dc02d0f5fd2c7a3ed3a94b", 0x1000, 0x4000080, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x1, 0x1, 0x80000000}, 0x4, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x0, <r3=>0xffffffffffffffff, 0x80800}, &(0x7f0000000140)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000002000000732ac0ff00000000180200000a0000010000000000000000180200000a0000010000000000000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0800000004000000040000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00'], 0x50)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0x80, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e20, 0xa31, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e21, 0xfcbf, @local, 0x7}], 0x84)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r4, &(0x7f00000004c0)={0x24, @short={0x2, 0x0, 0xffff}}, 0x14)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

4.472157227s ago: executing program 2 (id=3621):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xfc, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xab1}, {0x6, 0x11, 0xff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x98e7}, {0x6, 0x11, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x9}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24048840}, 0x1)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x20}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x4000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x17}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x101}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xe}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x10001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x44) (async)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001600)={&(0x7f00000004c0)={0x1118, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc44}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NODE={0x1018, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfb}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}]}, 0x1118}, 0x1, 0x0, 0x0, 0x40800}, 0x20000004) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket(0x6, 0x803, 0x4)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x34, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x10) (async)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000017c0), r3)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000001980)={&(0x7f0000001780), 0xc, &(0x7f0000001940)={&(0x7f0000001800)={0x130, r5, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x80, @mcast1, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @empty, 0x1}}}}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14b3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe82}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb63}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe1b}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000}, 0x84) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000001c00)={'ip_vti0\x00', &(0x7f0000001b40)={'gre0\x00', <r6=>0x0, 0x7800, 0x700, 0x3ff, 0x0, {{0x1b, 0x4, 0x1, 0x29, 0x6c, 0x68, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010102, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x37, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x42}, 0xe}]}, @end, @lsrr={0x83, 0x2b, 0x3d, [@loopback, @private=0xa010102, @private=0xa010100, @multicast2, @dev={0xac, 0x14, 0x14, 0xa}, @local, @dev={0xac, 0x14, 0x14, 0x13}, @local, @broadcast, @remote]}, @end, @timestamp_addr={0x44, 0x1c, 0x9b, 0x1, 0x3, [{@remote, 0x100}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010101, 0xa}]}]}}}}}) (async)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000001e00)={{<r7=>r0, &(0x7f0000001c40)='K!\x18%)\x00', 0x4940, &(0x7f0000001c80)={@align, {0x5, 0x5, 0x81, 0xb48}}, 0x1, &(0x7f0000001cc0)={@_ha_fsid}, &(0x7f0000001d00)=0x2}, {[0x8, 0x4, 0x0, 0x8001]}, 0x7, 0xa9, &(0x7f0000001d40)=""/169}) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001f00)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002000)={0x6, 0xd, &(0x7f00000019c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf4b5}}, @ldst={0x0, 0x0, 0x1, 0xb, 0xa, 0x30, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000001a40)='syzkaller\x00', 0x0, 0xbb, &(0x7f0000001a80)=""/187, 0x41000, 0x1, '\x00', r6, 0x25, r7, 0x8, &(0x7f0000001e80)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001ec0)={0x2, 0x4, 0x40, 0x7}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001f40)=[r8, 0xffffffffffffffff, 0x1], &(0x7f0000001f80)=[{0x2, 0x2, 0x9, 0x7}, {0x4, 0x4, 0x1, 0xc}, {0x0, 0x2, 0x9, 0x2}, {0x3, 0x3, 0xb, 0x9}, {0x2, 0x1, 0x7, 0x7}]}, 0x94) (async)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000002100), r7)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x24, r9, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x6008891}, 0x4000840) (async, rerun: 64)
setsockopt$inet6_int(r4, 0x29, 0x7, &(0x7f0000002200)=0x80000001, 0x4) (async, rerun: 64)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002280), 0xffffffffffffffff) (rerun: 64)
sendmsg$NLBL_CIPSOV4_C_LIST(r10, &(0x7f0000002600)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000025c0)={&(0x7f00000022c0)={0x2d0, r11, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xc4, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb1e4}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x49d8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf52a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3932}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2515}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1865}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x276f59f0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d0dad51}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8ad5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60c55ea0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbfba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b5d3ebd}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x39d1}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ae3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xefb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f11}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ea2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e2a44e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1595ebf4}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7bdcae7b}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x144, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fce}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a75a141}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2390}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4de46d84}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcba2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51992bbc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e7d6622}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x400741d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc6d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d75}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b031c8d}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x99a8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6eee}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc6033ca}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfcdb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e96}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb69d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x172a}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb001}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92c6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b050cf8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2648}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x43b1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xccae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1980}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x790b9f4b}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe8a0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5baa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c5b9767}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1cd9f36b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e717c1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x44ef}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e10bfaa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cea8ce6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x57bd}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x64, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17b2b274}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65d2e863}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22f214ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa62d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12ad4555}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d6590a8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x146771db}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d5e3986}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x87dc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe98b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77fb3e77}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x48004}, 0x4040043)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002680)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000003840)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003800)={&(0x7f00000026c0)={0x1114, r2, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x7, 0x1e}}}}, [@NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "a532969946ac25158ad76f9e83e239c99a13a7c2f55150cc2761b775003178b20b9ecde78836123b4209a22ad85c2c88a0ea948da06b8f802375b65d5defeaa10a3622af82a90f94f07489fdc0073883fed0780dd41c122f0218c62e5f67532fb08312c34e9b94fb7a01cf00e6a2a41b382389481a5fa9cf25c3ca0ac25c1a5f830622054a649d7cd689b904be8db67fe530a2cad5c5ba80cd0c0e55223d163836ce092051beb791097f9a01f583f1335b4837d56ca8fa6dc799d29bfc4e1b5d0b5e00b3141ea6efb1376b60d9c6975b5b7c6ef14068c12439daf242d419b98176984ce2f2a2aca650158d9100323dc974dc28dc19f049e11a01dbc0e4980eb56bb72dc74133baa1044326b5e3a7f18e013ff689cab8b7e0b747ee0e9f4817fe4cb7e6798db57ef9376951e17789278f2cae05e36807945d0fd2f85df864630b0929f0dc0265b4a372c2faf32a635a96bcf003d2de04aa5577ab8562f9cd6c7366673c349bcb06984ecb40477e3d8efe67fcedf18536aff03c2c1164c55bde610415f0d104a072ee75b0175acc030224547664afa9358961bc36c8e5edc344d0c6da49d19fabb87cc191637e1a34bb87776476ea7b409c348d5a3f73352a1388e2ddcca7dbce5213db471aed368bea9b9dd8bb4901046697470a9d6c3459957b2822ab23c178413ea37870fc150aba0288a1c6c630222014983615f264ca4aeaddd5779e5541ccc76a3375082e19343b9844e2ef77e56c497d6687ea4fed7d3c4965afec72dd27ac8e8ad1ce742cd8100025b02d3c41e7f7b4a8554d371cb4d9b69ddb5a731e0c2961ab8a6c47cc6d2771a8f569e1104256d5f0f6c6481faf00c95389497e0319352ce74a0945339707870d293285ec982ef906404078f7ef9a9d35e375289772f2fadf56e9c1f1e47e4b98a2913c942096642b0e7549b7a50d5a7725e659b8ca7ad6453489ec254642a13ee71eeeb2daba9488c0c3e66e636c0a8a28c4850f3c16365d5a2616d9464cab6c26e606849e78d6a651dd4a51ea6da1bfde06ad9f813d20010e5bf9ead97aaccbed80e87cf80f4bb2cd933a2c42f1d192c11785e8b32a9333380a7656fea63214abe3474faf94613cce715749763f9a99f7f70d1dd51d81e9c660b0e649d8b8b757f0543402618781cda6e82dad4ea84c07a2cfe9e8370d423a558075e628b5df79f54bbc00262b3c6c6f055681d8df9e70379c9bb1469afca6da6e3aaeb03fc0dd540235e4d07d1bf5e9525d31e3be6d87b6e803e5cf974ae7b7ca9f861c48a2194c7dbcf481c4f23c4f4e24fceda83c75a5f6f13892585e1f39d8a44e62fe5d4904eb040d42255ca72d565999adaade7283e9f44a2985d4cf3e00746ccb68f77badfa3500784247c12082f43b4a619c3d2a8679731328ee001ee14c753fe3056f873c37013d74e9e6fc1f3dbb9f55f69d8c2ca1f8baa1af30e7c7f6b3ba55477c3c58211c4184d3a66d3589dee084febb86b29a628bdb7b2a05fd41e4141855e2f9fc74b51d281e55faba466172fb63da18689673a5d9f87ee3b1a23036ef6f1338c5f0fd816e22349e20ca5fc3fe2c7ecf3618836a59a0459a883a911a1cc18de71d09e42fac22e6f5c7eb77f715efac4f3229e2725b4ee969152a6d32086f9ac3f8cffb9a78ec981fd47e793db924fd8c6a8ae5562d4f5f831bbb4c6e969ea656b538480d824f25675887a417b687a7c708043939297066ec60ed6020bad310f8708122442fc6154836f00e09014c6da4446d27fa5799318311667386e3042d7abfa70fd83f376349d58659d0b609ecc83f07b1d883a872d32266805ddd3c148b3e065b8d43617216552b62be447e0c024c9438529edff9bd477bd68a4daae5c20b501239312c597456e8af86d3f65b90987db1d51e377a4ee593c00e3de8e4c39561a6be57a68bb80ff49402c8b0869920791a91b4a62caaf51e7192d8a910c51ee6ace5a628119ce4ff7a2bb314b99b05f2276519738397db10c430ae6cdf0183348b6af429f5d197c278167f10126aade00709dcb3421895baa62e1d331948496ab1109399be65d99d932b0d06d543f2677fe309282994a20637e4d793dca9fdedd5b6551e59b84991d11f8d418af9fc5651ba8f177ee0e7bd0d57ac1a99eb6039eeebed94e87fa80e531cc358a9246cf73967375e703ced23e8572e000ed7cd4d49d7342bd6c92cbb132a3b50c0fd808830e16213a0738ac2f6cbb6c02b07374d0d7b9a60ff7bb282c537268bd56b3b7f633b28314a3ac1cb28928c437e98c899bb26bf0533998ca1321604db7411648e1b486d878e52afc3aeea4a44eddeba3cba9f645b146234d3fff5919330c35f81718760d12d0fddc9149281960db50fba104f846e6d3ddd3d83c09489854798f7d96462720ca674c8f967859248d75aab61752b115162e3f47ea55a9b025060cdd50bb1d834479f6bb7b0ed9beef24cd7972b05f01ef18019fe4dd384e30ed3e05f31053e886fe3b7c4da8e280582c8f7f0c9a72737525e60fac77ba9a70376468f1b3a4d17043bf47de9bb69af5f5db505bcb75cc6c9c3923b9edfd5c716dc068772479b1736b68ddbcdfe4c48307ea2cd60a8785bd66499ccf818246570745f486515cbe411e12609a83c540594134b57a2728c7b20c11b9bdf9c780cbe9f7a713ece31d955ff0dfe10521866b318c01c5fa9df9de47d1182f36856463a73f38f597e5e185cdd0b5d4ca076563c1371bba2b3ba4683f78d4fe889dd27a632c1902f86febd53d09e4bc0a8784d1aa93fb5300bed2b1c9a08cac1180c2b6951753d151c58bc47815487564e6b6021360cb27c33c375194619976bc4a636f4e5733db09e8887fa024449acb9b28667435e4a545afb101f315bce43eaa192b362cf00cd7de93fcc0d058f18fb95f2f16e275722b5f9b2f1a1ce208af091ada1c6dc980ee5e0f068d0fb761232bc7ec503b2bddc91a15461c888ad690e88454587cf5d5c772658429371f07813b110c6a9624a36f9fd4a8c203443cd01e579728b4db38e01e3c86943a973cadfab50d90be851a669a4fb061113383a601315e63c48a27f724a5328a774dd38b4935d7e87816f29ba7ed9cadfa34384d775e292bb77ace3d4fef4074f1f20dc2b0775ef3feee74f34ba984af502b44f9b1d8ab2a9c58722b89a40dadf49f2140605eae6a50b14a17031baf11b804918ea7f2ec0a3a894134d60d253e25bac1802d25b45aef5c2c11e0cc565378505dd363ffa1f5e1cc3acc667a184e82bc354d63379ed5ec4452cdfcf4c22c08baaeab3fde553be443208fbea40515d597e0e25df84f9795d089dff04d17082ce484a9715cb51a563e3c31b191037198c623c92140a0d3c77990483ae78b7a38e396c22bbb5860c397e8583110285819d1efe37b145d627910a6aebc7ad8bfb7e48539fa7c12ce0935b994181dbb193ede03686a944938909a84af7cd20b7c2736df55d1903d1ddcfe684f49e90baf1e94b7fd9dd09f6dd131a1f704f1eb522ebfebc5437c61469b12db6810e109857f413076702d0a272c5243102567ebeeb613d5a6b4c405eda356593ff898d98fc79cce98f40bb42325e4b48cd93e4c9e0324335f52a788e073f2549bfdb6096048346ad568359a35e134dce9af1833c8db2ecdc60029cca629bda62849b16cd7748e2f955141f1c6071c065cc7003876af4c543b55bd3696cb60ea72686fed3b5cc7b02fc1d7c0eb0efb73ebe2b394293e8d04cdd25c76ddd3d4516eec37a85bd33a6340114ac24ad645b347f3503a354a2270f8fe4520bb2bf9fef4adc307d8772917b0f1e6cc5de9d70ec3b96e3a4394056efbfcbefcb62e6651f705010b429b3ec80a76ddfad342805e0823f2ab0ef34b64d65524f954390a21c0338b8625f96b5dd67a410d1fdbb58975b7c1421ab8f2e741b7de80dea1444967b557f2533c99af1eec8cbc7df495f1f11d9546c3b3ffda45f72d377badf421f46c29b34e8000e6e3d6a19b87def8f5a0458255599b8d3e1cbe1360369e5350569dbcb63867fc7f2e24be942d6763d4b933f8d314dc061cc7884d4c2c4f4850dc69ec3e6e2170cc71510a1825f2f772cb4ebec3559baaab141f73dda2b739c7ea660b0216d563ca67f56122632236a24e53ae63b11671d5931e7676b68e06d571fbf8760fdd3b04cee13ddcc69bb5c9ff41c4db34ccfbc2991db701129c2618b064bcdfd319c7ce904c9d92b43fcebe9cee907b442621f0e3b5df3ece6b3ae89f284c5ac4e0e32edfeaa2877264dfa8ee3b0c3b4e0a8e9558429d1f06558559a18362ea80e8cc6b41e5f107216925f3c639c0d4199a0bef70af19aa897c6ce54bea294455587bfd6816968b08bd5feb26e6578be1fe6bd63a5037f836aaaa5116814f07d4aacc03be49c83a8c88d16385be799b7c5c3da323f22a9c3773b093dd521d78aaa1aaaf00d34c607210f3c52a1ab67a318254c02f18e9fa9c1847937081482f0b99f6801359b9b9bee78423670299d3dd45a329ca81c2074c10d86eec0fb075d83f361726e5103c7dd284639c72347f255c21665a8c17d4a8277628226f2f0037fc7d2b9470de92000e10020b7408e60e501e85a0ecb37b7698812d9ad486fc5e7e8962123e781a15042e82dbff5281a4e751dc2d251b6db36c63d456a142e4a267224f973f0efaf8ed6459030fcdb68e9657c85800d2a73587cb2cf8c745036f486206665ea9ecfd09da65093e852837a0cd42428d1feab402df101eb26c7d754d5c42408b6d57c3fc241018e7c369b0d7820dbb8cda96dbd0d24928eda0dcc805fb4c8fb0ae9890dd65b1b16298d13caa8be0a63e0ac81e6642e83153ddf50a327948a6c0b471c9851de7d8f2e6a1ca98c8134e26b9e0481247dab113b8d23bd9b4c15e8925ef7ebff58192e4e2d551ee4c0daf74313c8bb62360dd78a09290961892c764a43dd7af9a4166e122849be2a7913b084e815949d60a6806862fbb721a768b020f169dad3adf7139384802d0442c8088a53ea82be9907ed465625edfec20bd6b01d1f9693663162b8c77a1ae39bb5d4e4021972ef614cdcfdf90c04664e804f59396d6f436680b89428929814955cc358d684837e2698d45994a092adfad2ce514925f93bbcd4b2aedba8803e2a494ed9a73bd5955c5a38bc254428d32d3f3bc93fc0001c49882e9b1ca76d3f57bfba96b2804fdb2a19bdaa6fe39a897e4073cb913756e5179de88dfbfe37608a398deb8fb1c63d6247927facb5c869c765d065146791975cd993abf352e698ce8c379155d533f53c2d3a05d8d76fc9d5ce0ebe4a35d8f8b4d8b83f2e224f56637bba16f30562f330ad2bf103e1e9272baeaf4b1fd68dd7d4d0d01da63655eabe5084d194b37660c26df31bf108748e77b0190c523012c8f8602b3439abe703646bcd53fa9f97f9168c2353bb4741ed9de2c2be0502fb720f198c6a5ede0dedc05c4b8610a2f6821c13c927590f7b2e36b84445fa27c66cace58efc73e316af6fcc24842c7fec368126e9e0f9021aa4379e393e8936111b258c5613250ea9a458ae4c653c973cb2ecd5fc7ed1102d8ea6bca95965831ef52bbe02102ee9ef6eada7127277d26547e702c4b06550d4fc8592f06368ce74083ef0c3c81bb92ee9457f327ad3d174b629eab4a17874b29a61ca96211a63ab8e105357c818a27f2ed338afba3f3199077bc9159890d249e3e0d08702328b564171bfdc960dac6d6a5b0e1a4e4fa0fb0b82e60c5d4164d2a2ffa6e2e2c880b3cf7af0bc20700fec35686e"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x10}, @NL80211_ATTR_VENDOR_DATA={0xdf, 0xc5, "b5103174993c10859e4b9d7972bb014d66abd399a05b199081ee6616ffb556717d3df0eb76a37a30a74ea88714bef63f43972f7ce56074992ce42160e1d8bb457c41a4c3135268e3deb05a14e5b5590b823c57fb267367028a4f1f2a74f824a80785d3acdba233a46a24116a25c2ea69157fdee902448eff1797b1c196e9417cf95b97700d211c99b09f58e58efe45d46b989e3d63d06276ade80c438c5c288048713ad3eebd3e5886d048e5b409591b6049a16a3ed6a8cefec6acb32bfe6e460341f19516b0a464571197c733d31d6ebc16b4f9c9b988033f884b"}]}, 0x1114}, 0x1, 0x0, 0x0, 0x40840}, 0x10008000) (async)
r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000038c0), r4) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000003900)={'batadv_slave_0\x00', <r14=>0x0})
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000003a00)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000039c0)={&(0x7f0000003940)={0x44, r13, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xbaa}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r14}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x4094) (async, rerun: 32)
sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000003e80)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003e40)={&(0x7f0000003a80)={0x3a8, 0x13, 0x200, 0x70bd26, 0x25dfdbfb, {0x1f, 0x0, 0x3, 0x7, {0x4e21, 0x4e20, [0x8, 0xfffffff3, 0xc7fc, 0x20000000], [0x6, 0x9e, 0xb6, 0x8], r14, [0x200, 0x6]}, 0xb, 0x74733120}, [@INET_DIAG_REQ_BYTECODE={0x103, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x6e, 0x1, "854afe9253da727535078fffece948e8e59f8650d7801774f6a19260d5bb9fe6538d21d16bc66916bd912650a3e5b5e5aa88e2a419b69aa9c1ae70c10ac1009aa7fabd5e2aafb3f8d136d615a0047cbc2b228561ddd0b54bc294755c62b48d73ea2af8057f2f0b6637bd"}, @INET_DIAG_REQ_BYTECODE={0x5a, 0x1, "c5b7d492b0c0ff120ea9e02cb606889fc77420bbd2571c082a2c8e87b4e05ec4827c579fc87a1191214b776382311fee91dcba1c44cfde346dcbc6e43b1dfeab79087bdf855dc1fb24ab292bd9dabdb9216eca1e05d0"}, @INET_DIAG_REQ_BYTECODE={0x1e, 0x1, "c083c2ce67b4dd62c117ebc1f5ac5ad9e603528eefbdd9928dd7"}, @INET_DIAG_REQ_BYTECODE={0xaf, 0x1, "2c000a27941199812cb2e5cf5db3ca6cbc4eda6b37d61c332ecd27daab6d9f4ab0b445b253abc76a86ad12ba64c1feedff51d205f37744bd17004ea5309ee4e5dfd01edc07f7e8adeb19733c43672ea1e4c5de4eb197025a71c933727dd518c8c4dbc0c837c9d96be6f1bd96ccd165b98346d72adb2fc1f30b052e00c00dddc1ebfd72535277b7fecfc7870d842319f98b986f70fcaea6aca022e7b5e6cd3109108726430ab769437b5d40"}, @INET_DIAG_REQ_BYTECODE={0x98, 0x1, "42f2587fb461715847787179e452b0c2470ca24241acbf0bae7c20c55b124b4890bddbfb6429f3d91dc1c968c79c933366ac642a84b7c3828327dd7fc35e6e039e8035ae81a2c4397ce055c1e5d5c5f55fce6188ac9814c5e218a425f1fb76281ffeff4b969845da131b2e8dc5d33e1ba44b640d54d3428f0a9676f906d26e0ad8d4f9651e0b9dbc90994bb27b49977a36edf47b"}, @INET_DIAG_REQ_BYTECODE={0x24, 0x1, "b02ccc1ee93bd5f8c07bd5a1895b94d739671ea93b0762d880fe0fec45bc79f0"}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async, rerun: 32)
sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000004040)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004000)={&(0x7f0000003f80)={0x80, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x20000814)

4.416330842s ago: executing program 3 (id=3622):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48)

4.309473716s ago: executing program 1 (id=3623):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000200)={0x7c, {{0x29, 0x0, 0x2000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, 0x34bbab12}}}, 0x88) (async)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000200)={0x7c, {{0x29, 0x0, 0x2000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, 0x34bbab12}}}, 0x88)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000080000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000080000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="f59a4cc3bce2a377edec679a3ca2", 0x0, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c150000410007012cbd7000fadbdf25037c00000400c280341501802d15108004000b8014000c"], 0x154c}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000)
ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000))

4.273501424s ago: executing program 0 (id=3624):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000400)={0x0, 0x8}, 0x8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRESHEX=r3, @ANYRESDEC=r3], 0x40)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5, <r6=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(0x4)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0xb, '\x00', 0x0, r4, 0x2, 0x3, 0x3}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x69590064}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@ldst={0x0, 0x0, 0x2, 0xb, 0x4, 0xfffffffffffffff8, 0xfffffffffffffff0}, @map_val={0x18, 0x2, 0x2, 0x0, r3}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0x8, 0x81, &(0x7f00000007c0)=""/129, 0x40f00, 0x0, '\x00', 0x0, 0x1c, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x4, 0x1, 0x0, 0x100}, 0x10, 0x2d95c, r0, 0x0, &(0x7f0000000940)=[r6, r6, r7, 0xffffffffffffffff, r6], 0x0, 0x10, 0x1000}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r11=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@datasec={0x7, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x3}], "44942d"}, @datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{0x7, 0xa4c, 0x2}], "9a"}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x50, 0x0, 0x1, 0x7fff}, 0x28)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r12=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r11, @ANYBLOB="0c00018008000100", @ANYRES32=r12], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040)
socket$inet6(0xa, 0x6, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x4412c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40))
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="40010000", @ANYRES16=r15, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getsockname$packet(r1, &(0x7f0000000640)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000680)=0x14)
sendmsg$nl_route_sched(r13, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@newchain={0x2c, 0x64, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r16, {0x3, 0x7}, {0x6, 0xffff}, {0x7, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc040}, 0x24000001)
sendmsg$WG_CMD_SET_DEVICE(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r15, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000)

4.202158008s ago: executing program 3 (id=3625):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
close(0x3)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x20000804)
recvmmsg(r1, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000008000000010001000900000001000000", @ANYRES32, @ANYBLOB="f8ffffff000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000080)=ANY=[@ANYRES64=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0xfffffffffffffe0f, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc)
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000500)={0x2, 0x8, 0x2, 0xc, 0x2, 0x0, [{0x100000001, 0x7, 0xd5, '\x00', 0x200}, {0xb, 0x5, 0x800}]})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r3, 0x0, 0xe5, 0xb1, &(0x7f0000000200)="d00fab422226bef5d8c66b03fe9b4dacdf0f3db186e846056efa8a0bfb2afb6408988053360f26c187e67b0406dea0f0a5991face9144612491637d8fd0ef8b6af60a71ce715e4e9890872afd371168e1387e8e7b7e1224a33ce189d798521dab773a96f14d96746ae9f5dcb676960e64a32e5377a3566a1c2b9c0363b5420ed15e0c300c39cb5c629e0f4813dcb7236d823a4d4f76a36bbb5320d59a0a93226699ecbb24eea7d27bf34b391b755d0898768c82444ddfdf4c3e8fc01ba7feab8b4405688dd4fc420456a657e1b649e160387a1f6544e905a66edebb06904fef1cc12618bf4", &(0x7f0000000300)=""/177, 0x4000, 0x0, 0xea, 0x18, &(0x7f0000000740)="328042931699e507b5bfc205e327f2eda9cf3125bd8d433b9956d35e694444feb2599196115b63793e8ff56960b7320c96885f2b85027313733dd69fd8fa0b7ca7d99da48d3c062b58419de3d834bb5980310feba13d053cbe998bdb47e66231610a295e97a4137d7f502428aa21647fd4cbd487f19964d76e707dd59d0fa33ebfc4c41ed05252602030140e2a89938a3a9583554c902fb46acba4f0995bd2295f99f27315391ba18035adc93fce35eb4aaa2206c1bbf32323949d238276a887bb1234256eaf9e74ee558dcc233e680ba895ce7508f095b48b0ae29ae595b326c3aef0fff56c3602a96a", &(0x7f0000000840)="6095edffb18442538018b50f550de05fe1582957d7aa223d", 0x4, 0x0, 0x87b4}, 0x50)

4.200897126s ago: executing program 4 (id=3626):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYBLOB='\b'], 0x38}}, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x6e6bb4}}, [@policy_type={0xa}, @mark={0xc}]}, 0xd8}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0)
sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\n\v\x00', @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

3.853177893s ago: executing program 2 (id=3627):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r2, 0xaa0f4000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r4, 0xe6905000)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003f000506010000000000000001010000000000000c0001006f76732d64703000080002000000000008000900e8030000"], 0x34}}, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="3000000041000506010000000000000001010000e8030000140001801000040000112233445500aabbccddee04000280"], 0x30}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r7=>0x0})
bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r7, 0x0, {}, 0xfe}, 0x18)
sendmmsg$sock(r5, &(0x7f0000001d40)=[{{&(0x7f0000000040)=@can={0x1d, r7}, 0x80, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000240)="a2b17cb7", 0x4}], 0x2}}], 0x1, 0x4000000)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0)
mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)

3.803857552s ago: executing program 3 (id=3628):
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x20400)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000033c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010400000000000000000a0000040900010073797a310000200008000540000000020900020073797a310000000008000a40fffffffc3c0000000e0a010200000000000000000a0000020900010073797a31000000000900020073797a3100000000100003800c000080080003400000000114"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000800)=@can, 0x80) (fail_nth: 1)

3.612538016s ago: executing program 4 (id=3629):
socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@delchain={0x17, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r3 = socket$igmp(0x2, 0x3, 0x2)
r4 = socket(0x10, 0x803, 0x2)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0x20000000, 0x100}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x1c, 0x39, 0x1, 0x7fffa, 0x25dfdbff, {0xa}, [@generic="ed7aca3d0f"]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000009cc7000000000000", @ANYRES32=0x0, @ANYBLOB="48310600003f000008000a00", @ANYRES32=r7, @ANYBLOB="140012800b00010062726964676500000400"], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={<r11=>0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x200140, &(0x7f0000000040)={@align=0x8001, {0x8, 0x1, 0x2, 0x7}}, 0x42, &(0x7f0000000080), &(0x7f00000000c0)=0xffffffff})
ioctl$sock_bt_hidp_HIDPCONNDEL(r11, 0x400448c9, &(0x7f0000000140)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xffffff01})
r12 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r13=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r13}, 0x10)
syz_emit_ethernet(0xd7f, &(0x7f00000011c0)={@multicast, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @tcp={0xf, 0x6, "870600", 0xd49, 0x6, 0xff, @loopback, @remote, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0x0, 0x0, 0x4}, {"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"}}}}}}}, 0x0)

3.437725663s ago: executing program 1 (id=3630):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x9)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x80, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)

3.437314613s ago: executing program 3 (id=3631):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000500)=0xd79d, 0x4)
write(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x7fff}, &(0x7f0000000200)=0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x1c, r3, 0x100, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040000)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xf9ffffff}, {0x66, 0x0, 0x0, 0x256c7520}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc9}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r8, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8004)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)

2.023964899s ago: executing program 1 (id=3632):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94)

1.866557059s ago: executing program 1 (id=3633):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r1, 0x20) (async)
r2 = socket$netlink(0x10, 0x3, 0x13) (async)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x44041) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) (async)
shutdown(r1, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15335}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x33bd66e7}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c011}, 0x44830)

355.485164ms ago: executing program 2 (id=3634):
socket$nl_crypto(0x10, 0x3, 0x15)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0], 0x64}, 0x1, 0x0, 0x0, 0x24008840}, 0x4000) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x75751a4fd574bbc2}, 0x4000081)
socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 64)
syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd60fca33f00306700fe800000000000000000000000000000fe8000000000000000000000000000aa2100"], 0x0) (rerun: 64)
socket$phonet(0x23, 0x2, 0x1) (async)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x5c, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x74}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x922f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8040001) (async)
socket$netlink(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000e00)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000003c0)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffb}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x54)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32)
socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32)
socket$inet6_mptcp(0xa, 0x1, 0x106)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff}) (async, rerun: 64)
write(r7, &(0x7f0000000240)="94", 0x1) (rerun: 64)
vmsplice(r8, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0)

244.467856ms ago: executing program 0 (id=3635):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, &(0x7f0000000400), &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0xe040400)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0xe}]}}, 0x0, 0x26}, 0x28)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r4, 0x20, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc804}, 0x8000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x2, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x22, 0x0, &(0x7f00000005c0)="001122334455001122334456080045000028000000004006f8ce0a0000010a000002", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

93.235891ms ago: executing program 3 (id=3636):
syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500002c4e22400100"/38, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000002020302"], 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x0, 0x84}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x1, 0x4000000000000}}}, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}, 0x1, 0x300}, 0x0)

88.007936ms ago: executing program 4 (id=3637):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
socket(0x15, 0x800, 0x7)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000180)="d80000001a0081044e81f782db4cb9040a1d0800fe007ca20e0000a115001c00ff11142603600e12080005007a010401a80016002000034004000000035c0461c9c67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b3d7a37077646f948017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a56e2b0137bdfc65025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000008c0)={0x20, 0x21, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}, @nested={0x4, 0x14}]}, 0x20}], 0x1}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6)
unshare(0x20400)
r10 = socket(0x2d, 0x2, 0x0)
connect$rxrpc(r10, 0x0, 0x0)
close(r6)
r11 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r7, &(0x7f0000000000)={0x4000200d})
sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x68, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x5, @media='eth\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8804}, 0x40000)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r2, 0x1040, 0x22900}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010100}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x40}}, 0x4040000)

13.239307ms ago: executing program 1 (id=3638):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000005c0)={{r0}, r2, 0xe, @unused=[0x2ad0b0c6, 0xfffffffffffffffc, 0xb23, 0xfffffffffffff53e], @subvolid=0x6})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x10000008})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000200)={0x4000201c})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x4, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000140)=r5, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r5}, @generic={0x61, 0x0, 0x1}, @exit], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

0s ago: executing program 0 (id=3639):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x9c940000, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r1, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@private1, 0x9c940000, 0x2, 0x3, 0x8, 0x1, 0xfffe}, 0x20)
r2 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=ANY=[], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x4004810)
recvmmsg(r2, &(0x7f0000004300), 0x4000000000000e9, 0x60, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

kernel console output (not intermixed with test programs):

tlink: 64 bytes leftover after parsing attributes in process `syz.4.2884'.
[  429.468901][T16649] syzkaller1: entered promiscuous mode
[  429.468940][T16649] syzkaller1: entered allmulticast mode
[  429.805969][T16659] ip_tables: iptables: counters copy to user failed while replacing table
[  430.019228][ T5627] Bluetooth: hci5: command tx timeout
[  430.531290][   T31] audit: type=1804 audit(1791371169.239:27): pid=16680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2892" name="/newroot/549/cgroup.controllers" dev="tmpfs" ino=2825 res=1 errno=0
[  430.532247][   T31] audit: type=1800 audit(1791371169.239:28): pid=16680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2892" name="cgroup.controllers" dev="tmpfs" ino=2825 res=0 errno=0
[  430.715234][T16680] openvswitch: ovs-dp0: Dropping previously announced user features
[  431.111454][T16701] netlink: 'syz.4.2897': attribute type 11 has an invalid length.
[  431.111480][T16701] netlink: 'syz.4.2897': attribute type 11 has an invalid length.
[  431.111494][T16701] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2897'.
[  431.491266][T16500] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  431.540191][T16500] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  431.545404][T16500] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  431.573909][T16500] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  431.576681][T16500] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  431.642014][T16500] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  431.643164][T16500] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  431.680353][T16500] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  432.070825][T16744] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  432.091142][T16500] 8021q: adding VLAN 0 to HW filter on device bond0
[  432.097331][ T5627] Bluetooth: hci5: command tx timeout
[  432.142333][T16500] 8021q: adding VLAN 0 to HW filter on device team0
[  432.172079][T10478] bridge0: port 1(bridge_slave_0) entered blocking state
[  432.172207][T10478] bridge0: port 1(bridge_slave_0) entered forwarding state
[  432.221821][T11992] bridge0: port 2(bridge_slave_1) entered blocking state
[  432.221914][T11992] bridge0: port 2(bridge_slave_1) entered forwarding state
[  432.289466][   T31] audit: type=1804 audit(1791371170.999:29): pid=16749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2906" name="/newroot/548/cgroup.controllers" dev="tmpfs" ino=2816 res=1 errno=0
[  432.289769][   T31] audit: type=1800 audit(1791371170.999:30): pid=16749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2906" name="cgroup.controllers" dev="tmpfs" ino=2816 res=0 errno=0
[  432.310036][T16749] openvswitch: ovs-dp0: Dropping previously announced user features
[  432.661488][T16760] batadv_slave_1: entered promiscuous mode
[  432.676128][T16758] batadv_slave_1: left promiscuous mode
[  432.961180][T16770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2910'.
[  433.053702][T16780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2912'.
[  433.053972][T16781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2912'.
[  433.075682][T16779] netlink: 'syz.4.2911': attribute type 1 has an invalid length.
[  433.239956][T16779] bond4: option mode: invalid value (7)
[  433.273551][T16779] bond4 (unregistering): Released all slaves
[  433.546638][T16804] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2915'.
[  433.641253][T16795] bridge0: port 1(syz_tun) entered disabled state
[  433.689710][T16795] batman_adv: batadv0: Interface deactivated: gretap1
[  433.840348][T16795] batman_adv: batadv0: Interface deactivated: ipvlan2
[  433.868470][T16809] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2917'.
[  433.890572][T16802] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  434.056891][   T31] audit: type=1804 audit(1791371172.759:31): pid=16814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2918" name="/newroot/557/cgroup.controllers" dev="tmpfs" ino=2868 res=1 errno=0
[  434.056956][   T31] audit: type=1800 audit(1791371172.759:32): pid=16814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2918" name="cgroup.controllers" dev="tmpfs" ino=2868 res=0 errno=0
[  434.087836][T16500] 8021q: adding VLAN 0 to HW filter on device batadv0
[  434.094143][T16814] openvswitch: ovs-dp0: Dropping previously announced user features
[  434.177958][ T5627] Bluetooth: hci5: command tx timeout
[  434.462487][T16500] veth0_vlan: entered promiscuous mode
[  434.526073][T16500] veth1_vlan: entered promiscuous mode
[  434.625086][T16834] block nbd4: not configured, cannot reconfigure
[  434.673232][T16500] veth0_macvtap: entered promiscuous mode
[  434.695854][T16500] veth1_macvtap: entered promiscuous mode
[  434.827532][T16500] batman_adv: batadv0: Interface activated: batadv_slave_0
[  434.886602][T16500] batman_adv: batadv0: Interface activated: batadv_slave_1
[  435.134950][T16899] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.135360][T16899] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.146653][T16899] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.146825][T16899] bridge0: port 2(bridge_slave_1) entered forwarding state
[  435.147186][T16899] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.147336][T16899] bridge0: port 1(bridge_slave_0) entered forwarding state
[  435.156913][T16899] team0: Device bridge0 failed to register rx_handler
[  435.161018][T16899] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.161229][T16899] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.585232][T16875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.585256][T16875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.608571][T16921] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  435.667671][T16875] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  435.668287][T10477] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  435.668659][T10477] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  435.693849][   T31] audit: type=1804 audit(1791371174.399:33): pid=16946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2931" name="/newroot/562/cgroup.controllers" dev="tmpfs" ino=2896 res=1 errno=0
[  435.694778][   T31] audit: type=1800 audit(1791371174.399:34): pid=16946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2931" name="cgroup.controllers" dev="tmpfs" ino=2896 res=0 errno=0
[  435.781215][T16946] openvswitch: ovs-dp0: Dropping previously announced user features
[  435.836353][T10477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.836379][T10477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.879385][T16954] hsr0: entered allmulticast mode
[  435.879410][T16954] hsr_slave_0: entered allmulticast mode
[  436.119560][T16948] hsr0: left allmulticast mode
[  436.119586][T16948] hsr_slave_0: left allmulticast mode
[  436.526480][ T5627] Bluetooth: hci4: Malformed Event: 0x13
[  436.541123][T16976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2938'.
[  436.619285][T16968] 8021q: adding VLAN 0 to HW filter on device bond4
[  436.808529][ T4934] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  436.828419][ T4934] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  436.830808][ T4934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  436.833577][ T4934] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  436.835864][ T4934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  436.948498][T16984] siw: device registration error -23
[  437.069954][T16985] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  437.295157][T16985] syzkaller0: entered promiscuous mode
[  437.295188][T16985] syzkaller0: entered allmulticast mode
[  437.296134][T16985] tipc: Resetting bearer <eth:syzkaller0>
[  437.499701][T16996] netlink: 'syz.3.2943': attribute type 2 has an invalid length.
[  437.499955][T16996] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  437.532272][T17009] syzkaller0: entered promiscuous mode
[  437.532295][T17009] syzkaller0: entered allmulticast mode
[  437.620285][T16982] tipc: Resetting bearer <eth:syzkaller0>
[  438.908765][ T4934] Bluetooth: hci2: command tx timeout
[  440.760062][T16982] tipc: Disabling bearer <eth:syzkaller0>
[  440.929626][T16875] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  440.929666][T16875] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.968855][T17033] syzkaller0: entered promiscuous mode
[  440.968883][T17033] syzkaller0: entered allmulticast mode
[  440.980292][ T4934] Bluetooth: hci2: command tx timeout
[  441.321714][T16875] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  441.321754][T16875] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.424294][T17065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2955'.
[  441.540175][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  441.605753][T16875] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  441.605791][T16875] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.819030][T16875] batman_adv: batadv0: Removing interface: vlan3
[  441.873861][T16875] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  441.873902][T16875] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.943698][T16981] ip_vti0 speed is unknown, defaulting to 1000
[  441.947310][T17071] syz_tun: left promiscuous mode
[  441.947596][T17071] bridge0: port 1(syz_tun) entered disabled state
[  441.994684][T17071] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  442.153513][T17084] batman_adv: batadv0: Adding interface: gretap1
[  442.153535][T17084] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  442.153571][T17084] batman_adv: batadv0: Interface activated: gretap1
[  442.687461][T17103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2966'.
[  443.057571][ T4934] Bluetooth: hci2: command tx timeout
[  443.099118][T16875] tipc: Resetting bearer <eth:syzkaller0>
[  443.184558][T17119] ieee802154 phy1 wpan1: encryption failed: -90
[  443.208505][T17117] block nbd3: not configured, cannot reconfigure
[  443.681120][T17145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2977'.
[  444.072948][T17159] netlink: 'syz.2.2980': attribute type 1 has an invalid length.
[  444.380934][T16875] tipc: Disabling bearer <eth:syzkaller0>
[  444.420441][T16875] bond0 (unregistering): Released all slaves
[  444.433194][T16875] bond1 (unregistering): Released all slaves
[  444.448120][T16875] bond2 (unregistering): (slave veth5): Releasing backup interface
[  444.448193][T16875] veth5: left promiscuous mode
[  444.449703][T16875] bond2 (unregistering): Released all slaves
[  444.465486][T16875] bond3 (unregistering): Released all slaves
[  444.479090][T16875] bond4 (unregistering): Released all slaves
[  444.510076][T17142] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  444.784220][T16931] smbdirect: ib_dev[syz1] removed
[  444.824276][T17159] 8021q: adding VLAN 0 to HW filter on device bond1
[  444.845814][T17172] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  445.038479][T17150] geneve5: entered promiscuous mode
[  445.038505][T17150] geneve5: entered allmulticast mode
[  445.040607][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2
[  445.065142][T16875] ovs-dp0: left promiscuous mode
[  445.138779][ T4934] Bluetooth: hci2: command tx timeout
[  445.304261][T16875] tipc: Left network mode
[  445.913491][T17195] syzkaller1: entered promiscuous mode
[  445.913518][T17195] syzkaller1: entered allmulticast mode
[  446.678107][ T1773] block nbd1: Possible stuck request ffff88802752e000: control (read@0,1024B). Runtime 30 seconds
[  446.678815][ T1773] block nbd1: Possible stuck request ffff88802752e1c0: control (read@1024,1024B). Runtime 30 seconds
[  446.681253][ T1773] block nbd1: Possible stuck request ffff88802752e380: control (read@2048,1024B). Runtime 30 seconds
[  446.681292][ T1773] block nbd1: Possible stuck request ffff88802752e540: control (read@3072,1024B). Runtime 30 seconds
[  447.174172][T17226] syzkaller0: entered promiscuous mode
[  447.174202][T17226] syzkaller0: entered allmulticast mode
[  447.283486][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3
[  447.351234][T17250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2995'.
[  447.679310][T17264] openvswitch: netlink: Unexpected mask (mask=100000090, allowed=100010058)
[  447.701484][T16981] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.701655][T16981] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.701821][T16981] bridge_slave_0: entered allmulticast mode
[  447.706248][T16981] bridge_slave_0: entered promiscuous mode
[  447.712843][T16981] bridge0: port 2(bridge_slave_1) entered blocking state
[  447.712963][T16981] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.713116][T16981] bridge_slave_1: entered allmulticast mode
[  447.716593][T16981] bridge_slave_1: entered promiscuous mode
[  448.034696][T17272] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2998'.
[  448.069994][T17273] syzkaller0: entered promiscuous mode
[  448.070019][T17273] syzkaller0: entered allmulticast mode
[  448.168161][T16981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  448.243941][T17281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3003'.
[  448.274542][T16981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  448.623987][T17292] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3006'.
[  448.639499][T16981] smc: adding net device veth1_to_team with user defined pnetid SYZ0
[  448.723077][T16981] team0: Port device team_slave_0 added
[  448.726184][T17290] netlink: 'syz.4.3005': attribute type 3 has an invalid length.
[  448.846022][T17297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3006'.
[  448.856703][T16875] hsr_slave_0: left promiscuous mode
[  448.867654][T16875] hsr_slave_1: left promiscuous mode
[  448.911510][T17302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3009'.
[  448.914563][T16875] veth1_macvtap: left promiscuous mode
[  448.914631][T16875] veth0_macvtap: left promiscuous mode
[  448.914706][T16875] veth1_vlan: left promiscuous mode
[  448.914754][T16875] veth0_vlan: left promiscuous mode
[  448.920017][T17304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3006'.
[  448.920052][T17304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3006'.
[  449.404424][T16981] team0: Port device team_slave_1 added
[  449.427231][T17300] vxcan5: entered promiscuous mode
[  449.691545][T16981] batman_adv: batadv0: Adding interface: batadv_slave_0
[  449.691563][T16981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  449.691586][T16981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  449.701423][T16981] batman_adv: batadv0: Adding interface: batadv_slave_1
[  449.701442][T16981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  449.701466][T16981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  449.989620][T16981] hsr_slave_0: entered promiscuous mode
[  449.993438][T16981] hsr_slave_1: entered promiscuous mode
[  450.072769][T17334] netlink: 'syz.3.3015': attribute type 2 has an invalid length.
[  450.629771][T16875] IPVS: stop unused estimator thread 0...
[  451.955234][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4
[  452.271704][T17392] sctp: [Deprecated]: syz.3.3021 (pid 17392) Use of int in maxseg socket option.
[  452.271704][T17392] Use struct sctp_assoc_value instead
[  452.363154][T17396] syzkaller1: tun_chr_ioctl cmd 2148553947
[  452.399150][T17398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3023'.
[  452.603035][T17406] ip_tables: iptables: counters copy to user failed while replacing table
[  452.661316][T17319] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  452.937733][T17416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3027'.
[  453.169638][T17400] syzkaller0: entered promiscuous mode
[  453.169667][T17400] syzkaller0: entered allmulticast mode
[  453.274673][T17416] 8021q: adding VLAN 0 to HW filter on device bond2
[  453.662016][T17434] netlink: 'syz.4.3029': attribute type 11 has an invalid length.
[  453.662041][T17434] netlink: 'syz.4.3029': attribute type 11 has an invalid length.
[  453.662052][T17434] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3029'.
[  453.844656][   T31] audit: type=1804 audit(1791371192.549:35): pid=17436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3031" name="/newroot/580/cgroup.controllers" dev="tmpfs" ino=2981 res=1 errno=0
[  453.844715][   T31] audit: type=1800 audit(1791371192.549:36): pid=17436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3031" name="cgroup.controllers" dev="tmpfs" ino=2981 res=0 errno=0
[  454.096769][T16981] netdevsim netdevsim1 netdevsim0: renamed from eth2
[  454.115878][   T31] audit: type=1800 audit(1791371192.819:37): pid=17440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3033" name="r" dev="tmpfs" ino=3024 res=0 errno=0
[  454.157384][T16981] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  454.162961][T16981] netdevsim netdevsim1 netdevsim1: renamed from eth3
[  454.185837][T16981] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  454.192646][T16981] netdevsim netdevsim1 netdevsim2: renamed from eth4
[  454.226324][T16981] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  454.248192][T16981] netdevsim netdevsim1 netdevsim3: renamed from eth5
[  454.282591][T16981] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  454.470832][   T31] audit: type=1804 audit(1791371193.179:38): pid=17448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3035" name="/newroot/587/cgroup.controllers" dev="tmpfs" ino=3030 res=1 errno=0
[  454.470897][   T31] audit: type=1800 audit(1791371193.179:39): pid=17448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3035" name="cgroup.controllers" dev="tmpfs" ino=3030 res=0 errno=0
[  454.532737][T17448] openvswitch: ovs-dp0: Dropping previously announced user features
[  454.684851][T16981] 8021q: adding VLAN 0 to HW filter on device team0
[  454.774898][T16875] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.775028][T16875] bridge0: port 1(bridge_slave_0) entered forwarding state
[  454.842121][T16875] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.842209][T16875] bridge0: port 2(bridge_slave_1) entered forwarding state
[  455.339603][T17472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3042'.
[  455.452313][T17478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3045'.
[  455.558873][T16936] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  455.560497][T16936] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  455.560539][T16936] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  455.560574][T16936] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  455.678058][T17491] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3048'.
[  456.348214][T17518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3051'.
[  456.464162][T17518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3051'.
[  456.747515][T16981] 8021q: adding VLAN 0 to HW filter on device batadv0
[  456.812869][T17528] netlink: 'syz.3.3053': attribute type 39 has an invalid length.
[  456.913359][T17528] syz_tun (unregistering): left allmulticast mode
[  457.376942][   T31] audit: type=1800 audit(1791371196.079:40): pid=17552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3057" name=030335 dev="tmpfs" ino=3069 res=0 errno=0
[  457.487693][T17542] pim6reg: entered allmulticast mode
[  457.490250][T17541] pim6reg: left allmulticast mode
[  457.508774][   T31] audit: type=1800 audit(1791371196.219:41): pid=17553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3057" name=030335 dev="tmpfs" ino=3069 res=0 errno=0
[  457.656286][T16981] veth0_vlan: entered promiscuous mode
[  457.674008][T16981] veth1_vlan: entered promiscuous mode
[  457.922604][T17568] netlink: 'syz.2.3061': attribute type 10 has an invalid length.
[  457.934568][T17569] netlink: 'syz.3.3062': attribute type 16 has an invalid length.
[  457.934603][T17569] netlink: 57994 bytes leftover after parsing attributes in process `syz.3.3062'.
[  457.945113][T17568] 8021q: adding VLAN 0 to HW filter on device team0
[  457.958064][T17568] bond0: (slave team0): Enslaving as an active interface with an up link
[  457.989981][T16981] veth1_macvtap: entered promiscuous mode
[  458.256893][T16981] batman_adv: batadv0: Interface activated: batadv_slave_0
[  458.293009][T16981] batman_adv: batadv0: Interface activated: batadv_slave_1
[  458.358149][T10477] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  458.358362][T10477] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  458.419543][T16866] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  458.479923][T10477] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  458.845039][T11994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.845063][T11994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.975707][T17608] netlink: 'syz.2.3067': attribute type 1 has an invalid length.
[  459.041053][T17608] bond3: option mode: invalid value (9)
[  459.045408][T17608] bond3 (unregistering): Released all slaves
[  459.193987][T17618] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3069'.
[  459.328401][T17615] ip6gretap1: entered promiscuous mode
[  459.347492][T16903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  459.347517][T16903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  459.470182][   T31] audit: type=1804 audit(1791371198.179:42): pid=17624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3070" name="/newroot/638/cgroup.controllers" dev="tmpfs" ino=3280 res=1 errno=0
[  459.470239][   T31] audit: type=1800 audit(1791371198.179:43): pid=17624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3070" name="cgroup.controllers" dev="tmpfs" ino=3280 res=0 errno=0
[  459.736953][T17637] Bluetooth: hci0: unsupported parameter 5135
[  459.737175][T17637] Bluetooth: hci0: invalid length 0, exp 2 for type 8
[  460.318854][T17656] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3076'.
[  460.650933][T17654] ip_vti0 speed is unknown, defaulting to 1000
[  460.708776][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  460.712095][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  460.735397][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  460.749252][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  460.750013][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  462.296098][T17718] netlink: 16556 bytes leftover after parsing attributes in process `syz.4.3087'.
[  462.448482][T17721] netlink: 'syz.1.3088': attribute type 11 has an invalid length.
[  462.448509][T17721] netlink: 'syz.1.3088': attribute type 11 has an invalid length.
[  462.448522][T17721] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3088'.
[  462.456064][T17672] ip_vti0 speed is unknown, defaulting to 1000
[  462.817342][ T4934] Bluetooth: hci1: command tx timeout
[  463.016152][T16875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  463.016193][T16875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.016220][T16875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 38125 - 0
[  463.016245][T16875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  464.898868][ T4934] Bluetooth: hci1: command tx timeout
[  466.187726][T17733] rdma_op ffff88805327ba38 conn xmit_rdma 0000000000000000
[  466.244149][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3092'.
[  466.244185][T17735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3092'.
[  466.252108][T16875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  466.252144][T16875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.252167][T16875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 38125 - 0
[  466.252190][T16875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  466.310609][T17738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3092'.
[  466.310652][T17738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3092'.
[  466.394959][T17742] netlink: 'syz.3.3093': attribute type 10 has an invalid length.
[  466.447374][T16903] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  466.448416][T16903] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  466.448458][T16903] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  466.593179][T17742] 8021q: adding VLAN 0 to HW filter on device bond0
[  466.596764][T17742] team0: Port device bond0 added
[  466.693405][T16875] team0: Port device netdevsim1 removed
[  466.715760][T16875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  466.715796][T16875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.715817][T16875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 38125 - 0
[  466.715837][T16875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  466.852216][T16903] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  466.977923][ T4934] Bluetooth: hci1: command tx timeout
[  467.041499][T16875] batman_adv: batadv0: Removing interface: vlan2
[  467.077444][T16875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  467.077484][T16875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.077510][T16875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 38125 - 0
[  467.077535][T16875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  467.134322][T17773] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  467.135701][T17773] sctp: [Deprecated]: syz.2.3098 (pid 17773) Use of struct sctp_assoc_value in delayed_ack socket option.
[  467.135701][T17773] Use struct sctp_sack_info instead
[  467.297472][T17778] netlink: 'syz.3.3101': attribute type 11 has an invalid length.
[  467.297502][T17778] netlink: 'syz.3.3101': attribute type 11 has an invalid length.
[  467.297516][T17778] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3101'.
[  467.591550][T17786] xt_hashlimit: size too large, truncated to 1048576
[  467.849190][T17790] vlan0: entered allmulticast mode
[  467.957259][T16936] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  467.957297][T16936] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  467.960211][T17803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3106'.
[  467.972996][T17790] xt_hashlimit: size too large, truncated to 1048576
[  468.366799][T17806] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3106'.
[  468.372620][T17808] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3106'.
[  468.522529][T16921] netdevsim netdevsim0 eth5: set [0, 0] type 1 family 0 port 8472 - 0
[  468.522567][T16921] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 6081 - 0
[  468.621350][T16875] bond0: left allmulticast mode
[  468.621377][T16875] bond_slave_0: left allmulticast mode
[  468.635284][T16875] bond0: left promiscuous mode
[  468.635322][T16875] bond_slave_0: left promiscuous mode
[  468.638524][T16875] bridge0: port 3(bond0) entered disabled state
[  468.679427][T16875] bridge_slave_1: left allmulticast mode
[  468.679461][T16875] bridge_slave_1: left promiscuous mode
[  468.681119][T16875] bridge0: port 2(bridge_slave_1) entered disabled state
[  468.714780][T16875] bridge_slave_0: left allmulticast mode
[  468.715328][T16875] bridge_slave_0: left promiscuous mode
[  468.715576][T16875] bridge0: port 1(bridge_slave_0) entered disabled state
[  468.982386][T17832] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3109'.
[  469.059629][ T4934] Bluetooth: hci1: command tx timeout
[  469.293023][T16875] bond1 (unregistering): (slave xfrm1): Releasing backup interface
[  469.293058][T16875] xfrm1 (unregistering): left promiscuous mode
[  469.488855][T16875] bond3 (unregistering): (slave geneve4): Releasing active interface
[  469.529807][T16875] batman_adv: batadv0: Interface deactivated: macvlan2
[  469.535039][T16875] batman_adv: batadv0: Removing interface: macvlan2
[  469.643914][T16875] bond7 (unregistering): (slave bridge3): Releasing backup interface
[  469.702397][T16875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  469.719766][T16875] bond0 (unregistering): Released all slaves
[  469.735113][T16875] bond1 (unregistering): Released all slaves
[  469.765083][T16875] bond2 (unregistering): (slave lo): Releasing backup interface
[  469.765594][T16875] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  469.790334][T16875] bond2 (unregistering): Released all slaves
[  469.813545][T16875] bond3 (unregistering): Released all slaves
[  469.842140][T16875] bond4 (unregistering): Released all slaves
[  469.865069][T16875] bond5 (unregistering): Released all slaves
[  469.902873][T16875] bond6 (unregistering): Released all slaves
[  469.946651][T16875] bond7 (unregistering): Released all slaves
[  470.045235][T17672] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.045364][T17672] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.045529][T17672] bridge_slave_0: entered allmulticast mode
[  470.055411][T17672] bridge_slave_0: entered promiscuous mode
[  470.073724][T17672] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.075669][T17672] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.075931][T17672] bridge_slave_1: entered allmulticast mode
[  470.092662][T17672] bridge_slave_1: entered promiscuous mode
[  470.098147][T16903] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  470.099057][T16903] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  470.099500][T16903] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0
[  470.099524][T16903] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  470.242011][T16875] ovs-dp0: left promiscuous mode
[  470.289815][T17839] netlink: 'syz.3.3113': attribute type 10 has an invalid length.
[  470.325679][T17672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  470.351089][T16875] tipc: Disabling bearer <udp:syz2>
[  470.351199][T16875] tipc: Left network mode
[  470.408495][T17839] team0 (unregistering): Port device bond0 removed
[  470.447889][T17672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  470.593398][T16875] IPVS: stopping master sync thread 7401 ...
[  470.606422][T17672] team0: Port device team_slave_0 added
[  470.619579][T17672] team0: Port device team_slave_1 added
[  470.672916][T17672] batman_adv: batadv0: Adding interface: batadv_slave_0
[  470.672938][T17672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  470.672965][T17672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  470.732117][T17672] batman_adv: batadv0: Adding interface: batadv_slave_1
[  470.732136][T17672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  470.732164][T17672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  471.006194][T17853] netlink: 'syz.3.3118': attribute type 8 has an invalid length.
[  471.056057][T17854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3117'.
[  471.209540][T17848] netlink: 'syz.4.3116': attribute type 16 has an invalid length.
[  471.209567][T17848] netlink: 'syz.4.3116': attribute type 17 has an invalid length.
[  471.231558][T17672] hsr_slave_0: entered promiscuous mode
[  471.232617][T17672] hsr_slave_1: entered promiscuous mode
[  471.233329][T17672] debugfs: 'hsr0' already exists in 'hsr'
[  471.233356][T17672] Cannot create hsr debugfs directory
[  471.233564][T17847] ip_vti0 speed is unknown, defaulting to 1000
[  471.326791][T17848] bridge0: port 2(bridge_slave_1) entered blocking state
[  471.326937][T17848] bridge0: port 2(bridge_slave_1) entered forwarding state
[  471.329026][T17848] bridge0: port 1(bridge_slave_0) entered blocking state
[  471.329179][T17848] bridge0: port 1(bridge_slave_0) entered forwarding state
[  471.374594][T17848] 8021q: adding VLAN 0 to HW filter on device batadv0
[  471.436466][T17848] ip6erspan0: left allmulticast mode
[  471.444720][T17864] No such timeout policy "syz1"
[  471.477110][T17848] bond2: left promiscuous mode
[  471.477139][T17848] bond2: left allmulticast mode
[  471.477995][T17848] hsr0: left promiscuous mode
[  471.479925][T17848] ip6tnl2: left allmulticast mode
[  471.482333][T17848] 8021q: adding VLAN 0 to HW filter on device bond3
[  471.483941][T17848] team1: left promiscuous mode
[  471.483965][T17848] team1: left allmulticast mode
[  471.543866][T17848] macvtap1: left promiscuous mode
[  471.556917][T17848] geneve3: left promiscuous mode
[  471.556943][T17848] geneve3: left allmulticast mode
[  471.574679][T17848] veth7: left allmulticast mode
[  471.581541][T17848] vxcan5: left promiscuous mode
[  471.751342][T10477] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  471.751657][T10477] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  471.752022][T10477] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  471.938755][T16903] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  472.502816][T17672] netdevsim netdevsim0 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  472.502858][T17672] netdevsim netdevsim0 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.623968][T17875] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  472.730504][T17884] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3127'.
[  473.003695][T17889] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3128'.
[  473.062792][T16875] hsr_slave_0: left promiscuous mode
[  473.063833][T16875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  473.063855][T16875] batman_adv: batadv0: Removing interface: batadv_slave_0
[  473.076214][T16875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  473.076238][T16875] batman_adv: batadv0: Removing interface: batadv_slave_1
[  473.088837][T16875] batadv_slave_1: left promiscuous mode
[  473.088961][T16875] veth1_vlan: left promiscuous mode
[  473.089060][T16875] veth0_vlan: left promiscuous mode
[  473.168216][T17901] Cannot find add_set index 0 as target
[  473.169157][T17901] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3130'.
[  473.173764][T17892] netlink: 'syz.3.3129': attribute type 3 has an invalid length.
[  473.173790][T17892] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3129'.
[  473.173825][T17892] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3129'.
[  473.433186][T16875] team0 (unregistering): Port device team_slave_1 removed
[  473.479652][T16875] team0 (unregistering): Port device team_slave_0 removed
[  473.628411][T17672] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  473.628438][T17672] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.695296][T17902] syzkaller1: entered allmulticast mode
[  473.733544][T17672] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  473.733584][T17672] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.916108][T17672] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  473.916147][T17672] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.086712][T17912] netlink: 'syz.3.3133': attribute type 1 has an invalid length.
[  474.357556][T17912] 8021q: adding VLAN 0 to HW filter on device bond6
[  474.661649][T17923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3136'.
[  474.674968][T17923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3136'.
[  474.863517][T17931] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3139'.
[  474.975288][T17672] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  475.005147][T17672] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  475.007829][T17672] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  475.045603][T17672] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  475.061113][T17672] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  475.099637][T17672] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  475.102433][T17672] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  475.125724][T17672] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  475.249362][T17941] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  475.501702][T17954] FAULT_INJECTION: forcing a failure.
[  475.501702][T17954] name failslab, interval 1, probability 0, space 0, times 0
[  475.501739][T17954] CPU: 0 UID: 0 PID: 17954 Comm: syz.2.3144 Not tainted syzkaller #0 PREEMPT(full) 
[  475.501762][T17954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  475.501774][T17954] Call Trace:
[  475.501783][T17954]  <TASK>
[  475.501792][T17954]  dump_stack_lvl+0xe8/0x150
[  475.501826][T17954]  should_fail_ex+0x410/0x560
[  475.501856][T17954]  should_failslab+0xa8/0x100
[  475.501881][T17954]  ? skb_clone+0x212/0x3a0
[  475.501910][T17954]  kmem_cache_alloc_noprof+0xa1/0x600
[  475.501944][T17954]  ? skb_clone+0x212/0x3a0
[  475.501980][T17954]  skb_clone+0x212/0x3a0
[  475.502051][T17954]  __netlink_deliver_tap+0x355/0x6e0
[  475.502082][T17954]  ? netlink_deliver_tap+0x2e/0x1b0
[  475.502105][T17954]  netlink_deliver_tap+0x19c/0x1b0
[  475.502129][T17954]  netlink_unicast+0x781/0x940
[  475.502162][T17954]  netlink_sendmsg+0x813/0xb40
[  475.502196][T17954]  ? __pfx_netlink_sendmsg+0x10/0x10
[  475.502227][T17954]  ? apparmor_socket_sendmsg+0x98/0x360
[  475.502307][T17954]  ? __pfx_netlink_sendmsg+0x10/0x10
[  475.502334][T17954]  sock_sendmsg_nosec+0x14e/0x190
[  475.502359][T17954]  ____sys_sendmsg+0x54e/0x850
[  475.502394][T17954]  ? __pfx_____sys_sendmsg+0x10/0x10
[  475.502431][T17954]  ? import_iovec+0x73/0xa0
[  475.502461][T17954]  ___sys_sendmsg+0x2a5/0x360
[  475.502487][T17954]  ? __lock_acquire+0x747/0x2de0
[  475.502513][T17954]  ? __pfx____sys_sendmsg+0x10/0x10
[  475.502597][T17954]  ? __fget_files+0x2a/0x420
[  475.502623][T17954]  ? __fget_files+0x3a2/0x420
[  475.502659][T17954]  __x64_sys_sendmsg+0x1b1/0x290
[  475.502691][T17954]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  475.502739][T17954]  do_syscall_64+0x166/0x520
[  475.502755][T17954]  ? trace_irq_disable+0x3b/0x140
[  475.502772][T17954]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.502788][T17954]  ? clear_bhb_loop+0x70/0xc0
[  475.502810][T17954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.503100][T17954] RIP: 0033:0x7fe9c5b9e199
[  475.503123][T17954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  475.503141][T17954] RSP: 002b:00007fe9c6a9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  475.503165][T17954] RAX: ffffffffffffffda RBX: 00007fe9c5e25fa0 RCX: 00007fe9c5b9e199
[  475.503181][T17954] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  475.503194][T17954] RBP: 00007fe9c6a9a090 R08: 0000000000000000 R09: 0000000000000000
[  475.503204][T17954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  475.503214][T17954] R13: 00007fe9c5e26038 R14: 00007fe9c5e25fa0 R15: 00007ffcf38b1728
[  475.503243][T17954]  </TASK>
[  476.021634][T17963] ip_vti0 speed is unknown, defaulting to 1000
[  476.201802][T17672] 8021q: adding VLAN 0 to HW filter on device bond0
[  476.352664][T17672] 8021q: adding VLAN 0 to HW filter on device team0
[  476.480208][T16903] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.480340][T16903] bridge0: port 1(bridge_slave_0) entered forwarding state
[  476.586757][T16931] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.586884][T16931] bridge0: port 2(bridge_slave_1) entered forwarding state
[  476.759341][ T1773] block nbd1: Possible stuck request ffff88802752e000: control (read@0,1024B). Runtime 60 seconds
[  476.759388][ T1773] block nbd1: Possible stuck request ffff88802752e1c0: control (read@1024,1024B). Runtime 60 seconds
[  476.759413][ T1773] block nbd1: Possible stuck request ffff88802752e380: control (read@2048,1024B). Runtime 60 seconds
[  476.759437][ T1773] block nbd1: Possible stuck request ffff88802752e540: control (read@3072,1024B). Runtime 60 seconds
[  476.821955][T17976] netlink: 'syz.3.3149': attribute type 1 has an invalid length.
[  477.196191][T17983] FAULT_INJECTION: forcing a failure.
[  477.196191][T17983] name failslab, interval 1, probability 0, space 0, times 0
[  477.196240][T17983] CPU: 1 UID: 0 PID: 17983 Comm: syz.3.3151 Not tainted syzkaller #0 PREEMPT(full) 
[  477.196263][T17983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  477.196275][T17983] Call Trace:
[  477.196284][T17983]  <TASK>
[  477.196293][T17983]  dump_stack_lvl+0xe8/0x150
[  477.196329][T17983]  should_fail_ex+0x410/0x560
[  477.196359][T17983]  ? __alloc_skb+0x1db/0x7a0
[  477.196386][T17983]  should_failslab+0xa8/0x100
[  477.196412][T17983]  ? __alloc_skb+0x1db/0x7a0
[  477.196437][T17983]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  477.196468][T17983]  ? __alloc_skb+0x18d/0x7a0
[  477.196494][T17983]  ? __alloc_skb+0x1db/0x7a0
[  477.196527][T17983]  __alloc_skb+0x1db/0x7a0
[  477.196557][T17983]  alloc_skb_with_frags+0xc6/0x760
[  477.196599][T17983]  sock_alloc_send_pskb+0xb66/0xc90
[  477.196640][T17983]  ? kernel_text_address+0xa5/0xe0
[  477.196668][T17983]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  477.196694][T17983]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  477.196733][T17983]  ? do_raw_spin_lock+0x12b/0x2f0
[  477.196767][T17983]  ? __lock_acquire+0x747/0x2de0
[  477.196794][T17983]  __ip_append_data+0x29ea/0x3cf0
[  477.196840][T17983]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  477.196882][T17983]  ? ipv4_mtu+0x23/0x670
[  477.196908][T17983]  ? __pfx___ip_append_data+0x10/0x10
[  477.196930][T17983]  ? ipv4_mtu+0x561/0x670
[  477.196959][T17983]  ? ip_setup_cork+0x512/0x920
[  477.196982][T17983]  ip_make_skb+0x22e/0x440
[  477.197010][T17983]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  477.197032][T17983]  ? __pfx_ip_make_skb+0x10/0x10
[  477.197073][T17983]  udp_sendmsg+0x1937/0x2140
[  477.197117][T17983]  ? __pfx_udp_sendmsg+0x10/0x10
[  477.197150][T17983]  ? tomoyo_supervisor+0x4d2/0x1560
[  477.197212][T17983]  ? lockdep_hardirqs_on+0x7b/0x110
[  477.197240][T17983]  ? get_random_u32+0x13a/0x8b0
[  477.197265][T17983]  ? get_random_u32+0x4ce/0x8b0
[  477.197304][T17983]  udpv6_sendmsg+0x915/0x2610
[  477.197367][T17983]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  477.197393][T17983]  ? udp_lib_get_port+0x177b/0x1c60
[  477.197440][T17983]  ? inet_send_prepare+0x1b4/0x260
[  477.197469][T17983]  ? lockdep_hardirqs_on+0x7b/0x110
[  477.197495][T17983]  ? inet_send_prepare+0x1b4/0x260
[  477.197514][T17983]  ? __local_bh_enable_ip+0xd6/0x140
[  477.197540][T17983]  ? inet_send_prepare+0x1b4/0x260
[  477.197566][T17983]  ? inet6_sendmsg+0xe4/0x120
[  477.197588][T17983]  ? __pfx_inet6_sendmsg+0x10/0x10
[  477.197608][T17983]  sock_sendmsg_nosec+0x90/0x190
[  477.197631][T17983]  ____sys_sendmsg+0x54e/0x850
[  477.197664][T17983]  ? __pfx_____sys_sendmsg+0x10/0x10
[  477.197701][T17983]  ? import_iovec+0x73/0xa0
[  477.197937][T17983]  ___sys_sendmsg+0x2a5/0x360
[  477.197965][T17983]  ? __lock_acquire+0x747/0x2de0
[  477.197990][T17983]  ? __pfx____sys_sendmsg+0x10/0x10
[  477.198047][T17983]  ? __fget_files+0x2a/0x420
[  477.198074][T17983]  ? __fget_files+0x3a2/0x420
[  477.198108][T17983]  __x64_sys_sendmsg+0x1b1/0x290
[  477.198139][T17983]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  477.198188][T17983]  do_syscall_64+0x166/0x520
[  477.198369][T17983]  ? trace_irq_disable+0x3b/0x140
[  477.198398][T17983]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.198417][T17983]  ? clear_bhb_loop+0x70/0xc0
[  477.198442][T17983]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.198461][T17983] RIP: 0033:0x7f8bb439e199
[  477.198481][T17983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  477.198506][T17983] RSP: 002b:00007f8bb52b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  477.198535][T17983] RAX: ffffffffffffffda RBX: 00007f8bb4625fa0 RCX: 00007f8bb439e199
[  477.198550][T17983] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003
[  477.198563][T17983] RBP: 00007f8bb52b9090 R08: 0000000000000000 R09: 0000000000000000
[  477.198575][T17983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  477.198586][T17983] R13: 00007f8bb4626038 R14: 00007f8bb4625fa0 R15: 00007ffd68a65c18
[  477.198616][T17983]  </TASK>
[  477.336649][   T31] audit: type=1800 audit(1791371216.029:44): pid=17982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3150" name="blkio.bfq.time_recursive" dev="tmpfs" ino=258 res=0 errno=0
[  477.789649][T17992] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  478.155379][T17999] ip6erspan0: entered allmulticast mode
[  478.277790][T18002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3154'.
[  479.085629][T18032] netlink: 'syz.3.3159': attribute type 11 has an invalid length.
[  479.085658][T18032] netlink: 'syz.3.3159': attribute type 11 has an invalid length.
[  479.085671][T18032] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3159'.
[  479.193552][T17672] 8021q: adding VLAN 0 to HW filter on device batadv0
[  479.351794][T18040] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  479.351907][T18040] FAULT_INJECTION: forcing a failure.
[  479.351907][T18040] name failslab, interval 1, probability 0, space 0, times 0
[  479.351935][T18040] CPU: 0 UID: 0 PID: 18040 Comm: syz.1.3161 Not tainted syzkaller #0 PREEMPT(full) 
[  479.351957][T18040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  479.351970][T18040] Call Trace:
[  479.351977][T18040]  <TASK>
[  479.351986][T18040]  dump_stack_lvl+0xe8/0x150
[  479.352021][T18040]  should_fail_ex+0x410/0x560
[  479.352050][T18040]  should_failslab+0xa8/0x100
[  479.352081][T18040]  __kmalloc_cache_noprof+0xa3/0x600
[  479.352114][T18040]  ? ip_setup_cork+0x24b/0x920
[  479.352136][T18040]  ? ip_setup_cork+0x24b/0x920
[  479.352158][T18040]  ? ipv4_mtu+0x561/0x670
[  479.352182][T18040]  ip_setup_cork+0x24b/0x920
[  479.352213][T18040]  ip_append_data+0x13a/0x190
[  479.352238][T18040]  ? __pfx_icmp_glue_bits+0x10/0x10
[  479.352270][T18040]  icmp_push_reply+0x87/0x410
[  479.352298][T18040]  ? rcu_is_watching+0x16/0xb0
[  479.352322][T18040]  ? trace_icmp_send+0x82/0x1e0
[  479.352350][T18040]  __icmp_send+0x128e/0x1710
[  479.352373][T18040]  ? __icmp_send+0x230/0x1710
[  479.352414][T18040]  ? __pfx___icmp_send+0x10/0x10
[  479.352454][T18040]  ? ip_vs_scheduler_err+0x1ca/0x3a0
[  479.352513][T18040]  ip_vs_leave+0x46e/0xc90
[  479.352554][T18040]  ? __pfx_ip_vs_leave+0x10/0x10
[  479.352582][T18040]  ? __ip_vs_svc_fwm_find+0x621/0x6b0
[  479.352622][T18040]  ? ip_vs_service_find+0xbc/0x3c0
[  479.352657][T18040]  udp_conn_schedule+0x442/0x7a0
[  479.352689][T18040]  ? __pfx_udp_conn_schedule+0x10/0x10
[  479.352784][T18040]  ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10
[  479.352849][T18040]  ? ipt_do_table+0x137f/0x15d0
[  479.352881][T18040]  ip_vs_in_hook+0xcc9/0x1c90
[  479.352920][T18040]  ? ip_vs_out_hook+0x99f/0x1030
[  479.352945][T18040]  ? __pfx_ip_vs_in_hook+0x10/0x10
[  479.352993][T18040]  ? nf_nat_ipv4_local_fn+0x321/0x570
[  479.353020][T18040]  ? __pfx_ip_vs_in_hook+0x10/0x10
[  479.353048][T18040]  nf_hook_slow+0xc5/0x220
[  479.353078][T18040]  ? __pfx_dst_output+0x10/0x10
[  479.353101][T18040]  nf_hook+0x22a/0x3a0
[  479.353128][T18040]  ? nf_hook+0xa1/0x3a0
[  479.353148][T18040]  ? __pfx_nf_hook+0x10/0x10
[  479.353173][T18040]  ? __pfx_dst_output+0x10/0x10
[  479.353200][T18040]  ? __ip_local_out+0x152/0x6a0
[  479.353227][T18040]  __ip_local_out+0x558/0x6a0
[  479.353256][T18040]  ? __pfx_dst_output+0x10/0x10
[  479.353284][T18040]  ip_local_out+0x2a/0x190
[  479.353307][T18040]  ip_send_skb+0x45/0xc0
[  479.353333][T18040]  udp_send_skb+0x7ed/0xf70
[  479.353372][T18040]  udp_sendmsg+0x1971/0x2140
[  479.353417][T18040]  ? __pfx_udp_sendmsg+0x10/0x10
[  479.353452][T18040]  ? tomoyo_supervisor+0x4d2/0x1560
[  479.353508][T18040]  ? lockdep_hardirqs_on+0x7b/0x110
[  479.353539][T18040]  ? get_random_u32+0x13a/0x8b0
[  479.353563][T18040]  ? get_random_u32+0x4ce/0x8b0
[  479.353687][T18040]  udpv6_sendmsg+0x915/0x2610
[  479.353730][T18040]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  479.353757][T18040]  ? udp_lib_get_port+0x177b/0x1c60
[  479.353813][T18040]  ? inet_send_prepare+0x1b4/0x260
[  479.353841][T18040]  ? lockdep_hardirqs_on+0x7b/0x110
[  479.353867][T18040]  ? inet_send_prepare+0x1b4/0x260
[  479.353889][T18040]  ? __local_bh_enable_ip+0xd6/0x140
[  479.353915][T18040]  ? inet_send_prepare+0x1b4/0x260
[  479.353944][T18040]  ? inet6_sendmsg+0xe4/0x120
[  479.353970][T18040]  ? __pfx_inet6_sendmsg+0x10/0x10
[  479.353990][T18040]  sock_sendmsg_nosec+0x90/0x190
[  479.354017][T18040]  ____sys_sendmsg+0x54e/0x850
[  479.354053][T18040]  ? __pfx_____sys_sendmsg+0x10/0x10
[  479.354091][T18040]  ? import_iovec+0x73/0xa0
[  479.354116][T18040]  ___sys_sendmsg+0x2a5/0x360
[  479.354139][T18040]  ? __lock_acquire+0x747/0x2de0
[  479.354166][T18040]  ? __pfx____sys_sendmsg+0x10/0x10
[  479.354235][T18040]  ? __fget_files+0x2a/0x420
[  479.354262][T18040]  ? __fget_files+0x3a2/0x420
[  479.354300][T18040]  __x64_sys_sendmsg+0x1b1/0x290
[  479.354332][T18040]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  479.354385][T18040]  do_syscall_64+0x166/0x520
[  479.354403][T18040]  ? trace_irq_disable+0x3b/0x140
[  479.354424][T18040]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.354445][T18040]  ? clear_bhb_loop+0x70/0xc0
[  479.354469][T18040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.354489][T18040] RIP: 0033:0x7fc07e19e199
[  479.354509][T18040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  479.354526][T18040] RSP: 002b:00007fc07efaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  479.354550][T18040] RAX: ffffffffffffffda RBX: 00007fc07e425fa0 RCX: 00007fc07e19e199
[  479.354564][T18040] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003
[  479.354576][T18040] RBP: 00007fc07efaf090 R08: 0000000000000000 R09: 0000000000000000
[  479.354599][T18040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  479.354611][T18040] R13: 00007fc07e426038 R14: 00007fc07e425fa0 R15: 00007ffc667c7a58
[  479.354642][T18040]  </TASK>
[  479.375774][T17672] veth0_vlan: entered promiscuous mode
[  479.429700][T17672] veth1_vlan: entered promiscuous mode
[  479.648392][T17672] veth0_macvtap: entered promiscuous mode
[  479.681160][T17672] veth1_macvtap: entered promiscuous mode
[  479.801583][T17672] batman_adv: batadv0: Interface activated: batadv_slave_0
[  479.883494][T17672] batman_adv: batadv0: Interface activated: batadv_slave_1
[  480.809214][T16904] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  480.809266][T16904] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  480.809301][T16904] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  480.809764][T18057] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  480.991211][T18078] ip_tables: iptables: counters copy to user failed while replacing table
[  481.037248][T18078] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3166'.
[  481.067145][T16875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  481.096098][T18078] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3166'.
[  481.096129][T18078] NCSI netlink: No device for ifindex 0
[  481.457736][T18093] ip_tables: iptables: counters copy to user failed while replacing table
[  481.458259][T18093] ip_tables: iptables: counters copy to user failed while replacing table
[  481.460510][T18093] ip_tables: iptables: counters copy to user failed while replacing table
[  481.461080][T18093] ip_tables: iptables: counters copy to user failed while replacing table
[  481.461516][T18093] ip_tables: iptables: counters copy to user failed while replacing table
[  481.461921][T18093] ip_tables: iptables: counters copy to user failed while replacing table
[  481.533757][T18093] ip_tables: iptables: counters copy to user failed while replacing table
[  481.534267][T18093] ip_tables: iptables: counters copy to user failed while replacing table
[  481.552993][T18092] geneve0: entered promiscuous mode
[  481.585264][T18092] batman_adv: batadv0: Adding interface: macvlan0
[  481.585286][T18092] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  481.585321][T18092] batman_adv: batadv0: Interface activated: macvlan0
[  481.730534][T16931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  481.730559][T16931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  481.929653][T16900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  481.929678][T16900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  481.993155][T18109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3172'.
[  481.993174][T18109] tipc: Invalid UDP bearer configuration
[  481.993208][T18109] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  482.135145][T18116] syzkaller0: entered promiscuous mode
[  482.135171][T18116] syzkaller0: entered allmulticast mode
[  483.421484][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  483.428222][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  483.436730][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  483.452620][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  483.455513][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  483.629880][T18112] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3173'.
[  483.629908][T18112] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3173'.
[  483.629926][T18112] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3173'.
[  483.956253][T18168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3181'.
[  484.189731][T18178] syz.0.3183: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  484.189851][T18178] CPU: 0 UID: 0 PID: 18178 Comm: syz.0.3183 Not tainted syzkaller #0 PREEMPT(full) 
[  484.189874][T18178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  484.189885][T18178] Call Trace:
[  484.189893][T18178]  <TASK>
[  484.189901][T18178]  dump_stack_lvl+0xe8/0x150
[  484.189936][T18178]  warn_alloc+0x24d/0x270
[  484.189957][T18178]  ? kasan_save_track+0x4f/0x80
[  484.189983][T18178]  ? kasan_save_track+0x3e/0x80
[  484.190006][T18178]  ? __pfx_warn_alloc+0x10/0x10
[  484.190024][T18178]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  484.190051][T18178]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.190093][T18178]  __vmalloc_node_range_noprof+0x127/0x1540
[  484.190146][T18178]  ? rcu_is_watching+0x16/0xb0
[  484.190179][T18178]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  484.190205][T18178]  ? __kmalloc_cache_noprof+0x321/0x600
[  484.190224][T18178]  ? __kmalloc_cache_noprof+0x14d/0x600
[  484.190253][T18178]  ? xskq_create+0x56/0x220
[  484.190282][T18178]  xskq_create+0x148/0x220
[  484.190306][T18178]  ? xsk_init_queue+0x8a/0xe0
[  484.190333][T18178]  xsk_init_queue+0x8a/0xe0
[  484.190362][T18178]  xsk_setsockopt+0x5e0/0x960
[  484.190391][T18178]  ? __pfx_xsk_setsockopt+0x10/0x10
[  484.190415][T18178]  ? __pfx_aa_sk_perm+0x10/0x10
[  484.190442][T18178]  ? aa_sock_opt_perm+0x142/0x1e0
[  484.190471][T18178]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  484.190496][T18178]  ? __pfx_xsk_setsockopt+0x10/0x10
[  484.190521][T18178]  do_sock_setsockopt+0x17c/0x1b0
[  484.190551][T18178]  __x64_sys_setsockopt+0x13d/0x1b0
[  484.190585][T18178]  do_syscall_64+0x166/0x520
[  484.190604][T18178]  ? trace_irq_disable+0x3b/0x140
[  484.190626][T18178]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.190647][T18178]  ? clear_bhb_loop+0x70/0xc0
[  484.190673][T18178]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.190692][T18178] RIP: 0033:0x7fdeb5f9e199
[  484.190712][T18178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  484.190729][T18178] RSP: 002b:00007fdeb41f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  484.190752][T18178] RAX: ffffffffffffffda RBX: 00007fdeb6225fa0 RCX: 00007fdeb5f9e199
[  484.190767][T18178] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[  484.190780][T18178] RBP: 00007fdeb60358e0 R08: 0000000000000004 R09: 0000000000000000
[  484.190792][T18178] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  484.190806][T18178] R13: 00007fdeb6226038 R14: 00007fdeb6225fa0 R15: 00007fff0d86cda8
[  484.190841][T18178]  </TASK>
[  484.193540][T18178] Mem-Info:
[  484.193557][T18178] active_anon:7466 inactive_anon:0 isolated_anon:0
[  484.193557][T18178]  active_file:390 inactive_file:43306 isolated_file:0
[  484.193557][T18178]  unevictable:0 dirty:295 writeback:0
[  484.193557][T18178]  slab_reclaimable:11953 slab_unreclaimable:110614
[  484.193557][T18178]  mapped:30465 shmem:662 pagetables:1300
[  484.193557][T18178]  sec_pagetables:0 bounce:0
[  484.193557][T18178]  kernel_misc_reclaimable:0
[  484.193557][T18178]  free:1308815 free_pcp:6214 free_cma:0
[  484.193608][T18178] Node 0 active_anon:29864kB inactive_anon:0kB active_file:1560kB inactive_file:173028kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121860kB dirty:1180kB writeback:0kB shmem:2648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15976kB pagetables:5104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  484.193660][T18178] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:96kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  484.193709][T18178] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  484.193764][T18178] lowmem_reserve[]: 0 2487 2487 2487 2487
[  484.193802][T18178] Node 0 DMA32 free:1283896kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:29864kB inactive_anon:0kB active_file:1560kB inactive_file:173028kB unevictable:0kB writepending:1180kB zspages:0kB present:3129332kB managed:2547076kB mlocked:0kB bounce:0kB free_pcp:24856kB local_pcp:10228kB free_cma:0kB
[  484.193860][T18178] lowmem_reserve[]: 0 0 0 0 0
[  484.193895][T18178] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  484.193948][T18178] lowmem_reserve[]: 0 0 0 0 0
[  484.193985][T18178] Node 1 Normal free:3936004kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  484.194040][T18178] lowmem_reserve[]: 0 0 0 0 0
[  484.194088][T18178] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  484.194207][T18178] Node 0 DMA32: 1306*4kB (UME) 798*8kB (UME) 588*16kB (UME) 345*32kB (UME) 126*64kB (UM) 38*128kB (UME) 13*256kB (UME) 3*512kB (UME) 21*1024kB (UME) 6*2048kB (ME) 293*4096kB (UM) = 1283768kB
[  484.194377][T18178] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  484.194497][T18178] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 5*16kB (UM) 5*32kB (UM) 8*64kB (UM) 6*128kB (UM) 5*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 959*4096kB (M) = 3936004kB
[  484.194663][T18178] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  484.194680][T18178] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  484.194696][T18178] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  484.194711][T18178] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  484.194727][T18178] 44354 total pagecache pages
[  484.194734][T18178] 0 pages in swap cache
[  484.194742][T18178] Free swap  = 124996kB
[  484.194749][T18178] Total swap = 124996kB
[  484.194757][T18178] 2097051 pages RAM
[  484.194764][T18178] 0 pages HighMem/MovableOnly
[  484.194772][T18178] 428666 pages reserved
[  484.194779][T18178] 0 pages cma reserved
[  484.289815][T18178] bond1: Unable to set down delay as MII monitoring is disabled
[  484.396648][T18178] bond1 (unregistering): Released all slaves
[  484.724033][T18195] FAULT_INJECTION: forcing a failure.
[  484.724033][T18195] name failslab, interval 1, probability 0, space 0, times 0
[  484.724067][T18195] CPU: 0 UID: 0 PID: 18195 Comm: syz.1.3186 Not tainted syzkaller #0 PREEMPT(full) 
[  484.724088][T18195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  484.724099][T18195] Call Trace:
[  484.724106][T18195]  <TASK>
[  484.724114][T18195]  dump_stack_lvl+0xe8/0x150
[  484.724145][T18195]  should_fail_ex+0x410/0x560
[  484.724169][T18195]  ? __alloc_skb+0x1db/0x7a0
[  484.724192][T18195]  should_failslab+0xa8/0x100
[  484.724215][T18195]  ? __alloc_skb+0x1db/0x7a0
[  484.724234][T18195]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  484.724261][T18195]  ? __alloc_skb+0x18d/0x7a0
[  484.724284][T18195]  ? __alloc_skb+0x1db/0x7a0
[  484.724311][T18195]  __alloc_skb+0x1db/0x7a0
[  484.724338][T18195]  netlink_sendmsg+0x5d4/0xb40
[  484.724369][T18195]  ? __pfx_netlink_sendmsg+0x10/0x10
[  484.724397][T18195]  ? apparmor_socket_sendmsg+0x98/0x360
[  484.724421][T18195]  ? __pfx_netlink_sendmsg+0x10/0x10
[  484.724440][T18195]  sock_sendmsg_nosec+0x14e/0x190
[  484.724463][T18195]  ____sys_sendmsg+0x54e/0x850
[  484.724504][T18195]  ? __pfx_____sys_sendmsg+0x10/0x10
[  484.724539][T18195]  ? import_iovec+0x73/0xa0
[  484.724565][T18195]  ___sys_sendmsg+0x2a5/0x360
[  484.724589][T18195]  ? __lock_acquire+0x747/0x2de0
[  484.724612][T18195]  ? __pfx____sys_sendmsg+0x10/0x10
[  484.724720][T18195]  ? __fget_files+0x2a/0x420
[  484.724745][T18195]  ? __fget_files+0x3a2/0x420
[  484.724779][T18195]  __x64_sys_sendmsg+0x1b1/0x290
[  484.724806][T18195]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  484.724851][T18195]  do_syscall_64+0x166/0x520
[  484.724869][T18195]  ? trace_irq_disable+0x3b/0x140
[  484.724887][T18195]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.724905][T18195]  ? clear_bhb_loop+0x70/0xc0
[  484.724928][T18195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.724950][T18195] RIP: 0033:0x7fc07e19e199
[  484.724968][T18195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  484.724983][T18195] RSP: 002b:00007fc07efaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  484.725004][T18195] RAX: ffffffffffffffda RBX: 00007fc07e425fa0 RCX: 00007fc07e19e199
[  484.725018][T18195] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  484.725029][T18195] RBP: 00007fc07efaf090 R08: 0000000000000000 R09: 0000000000000000
[  484.725041][T18195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  484.725051][T18195] R13: 00007fc07e426038 R14: 00007fc07e425fa0 R15: 00007ffc667c7a58
[  484.725081][T18195]  </TASK>
[  485.439110][T18212] netlink: 'syz.1.3190': attribute type 1 has an invalid length.
[  485.537256][ T4934] Bluetooth: hci0: command tx timeout
[  485.754941][T18218] net_ratelimit: 1 callbacks suppressed
[  485.754966][T18218] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  485.835563][T18228] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  485.942049][T18160] ip_vti0 speed is unknown, defaulting to 1000
[  486.004375][T18238] netlink: zone id is out of range
[  486.004457][T18238] netlink: zone id is out of range
[  486.004681][T18238] netlink: zone id is out of range
[  486.004705][T18238] netlink: zone id is out of range
[  486.004714][T18238] netlink: zone id is out of range
[  486.004721][T18238] netlink: zone id is out of range
[  486.004728][T18238] netlink: zone id is out of range
[  486.004753][T18238] netlink: zone id is out of range
[  486.004761][T18238] netlink: zone id is out of range
[  486.282440][T18245] netlink: 'syz.1.3195': attribute type 1 has an invalid length.
[  487.619278][ T5627] Bluetooth: hci0: command tx timeout
[  487.700707][T18284] ip6tnl0: Caught tx_queue_len zero misconfig
[  487.844321][T18292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3202'.
[  487.845771][T18160] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.845948][T18160] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.846197][T18160] bridge_slave_0: entered allmulticast mode
[  487.848430][T18160] bridge_slave_0: entered promiscuous mode
[  487.851640][T18160] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.851831][T18160] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.852327][T18160] bridge_slave_1: entered allmulticast mode
[  487.854218][T18160] bridge_slave_1: entered promiscuous mode
[  487.922381][T18160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  487.941091][T18160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  488.069640][T18160] team0: Port device team_slave_0 added
[  488.073512][T18160] team0: Port device team_slave_1 added
[  488.151791][T18160] batman_adv: batadv0: Adding interface: batadv_slave_0
[  488.151810][T18160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  488.151836][T18160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  488.154211][T18160] batman_adv: batadv0: Adding interface: batadv_slave_1
[  488.154228][T18160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  488.154253][T18160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  488.314799][T18309] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3203'.
[  488.351856][T18309] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  488.364182][T18160] hsr_slave_0: entered promiscuous mode
[  488.365330][T18160] hsr_slave_1: entered promiscuous mode
[  488.366634][T18160] debugfs: 'hsr0' already exists in 'hsr'
[  488.366668][T18160] Cannot create hsr debugfs directory
[  488.370095][T18313] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  488.677881][T18222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  488.868591][T18321] x_tables: unsorted underflow at hook 4
[  489.022863][T18326] syz_tun: entered allmulticast mode
[  489.155576][T18325] syz_tun: left allmulticast mode
[  489.317723][T16900] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  489.433648][T18344] syzkaller0: entered promiscuous mode
[  489.433669][T18344] syzkaller0: entered allmulticast mode
[  489.459818][T16931] syzkaller0: tun_net_xmit 70
[  489.478282][T18344] syzkaller0: tun_net_xmit 663
[  489.478336][T18344] syzkaller0: tun_net_xmit 663
[  489.478373][T18344] syzkaller0: tun_net_xmit 663
[  489.478408][T18344] syzkaller0: tun_net_xmit 663
[  489.478444][T18344] syzkaller0: tun_net_xmit 663
[  489.478479][T18344] syzkaller0: tun_net_xmit 663
[  489.478514][T18344] syzkaller0: tun_net_xmit 663
[  489.478547][T18344] syzkaller0: tun_net_xmit 663
[  489.478573][T18344] syzkaller0: tun_net_xmit 663
[  489.478608][T18344] syzkaller0: tun_net_xmit 663
[  489.479481][T18344] syzkaller0: tun_net_xmit 663
[  489.479518][T18344] syzkaller0: tun_net_xmit 663
[  489.479550][T18344] syzkaller0: tun_net_xmit 663
[  489.479582][T18344] syzkaller0: tun_net_xmit 663
[  489.479613][T18344] syzkaller0: tun_net_xmit 663
[  489.479652][T18344] syzkaller0: tun_net_xmit 663
[  489.479684][T18344] syzkaller0: tun_net_xmit 663
[  489.479726][T18344] syzkaller0: tun_net_xmit 663
[  489.479757][T18344] syzkaller0: tun_net_xmit 663
[  489.479786][T18344] syzkaller0: tun_net_xmit 663
[  489.479817][T18344] syzkaller0: tun_net_xmit 663
[  489.479847][T18344] syzkaller0: tun_net_xmit 663
[  489.479875][T18344] syzkaller0: tun_net_xmit 663
[  489.479905][T18344] syzkaller0: tun_net_xmit 663
[  489.479989][T18344] syzkaller0: tun_net_xmit 663
[  489.480021][T18344] syzkaller0: tun_net_xmit 663
[  489.480051][T18344] syzkaller0: tun_net_xmit 663
[  489.480104][T18344] syzkaller0: tun_net_xmit 663
[  489.480137][T18344] syzkaller0: tun_net_xmit 663
[  489.480168][T18344] syzkaller0: tun_net_xmit 663
[  489.480197][T18344] syzkaller0: tun_net_xmit 663
[  489.480228][T18344] syzkaller0: tun_net_xmit 663
[  489.480259][T18344] syzkaller0: tun_net_xmit 663
[  489.480290][T18344] syzkaller0: tun_net_xmit 663
[  489.480320][T18344] syzkaller0: tun_net_xmit 663
[  489.480350][T18344] syzkaller0: tun_net_xmit 663
[  489.480381][T18344] syzkaller0: tun_net_xmit 663
[  489.480411][T18344] syzkaller0: tun_net_xmit 663
[  489.480442][T18344] syzkaller0: tun_net_xmit 663
[  489.480472][T18344] syzkaller0: tun_net_xmit 663
[  489.480502][T18344] syzkaller0: tun_net_xmit 663
[  489.480533][T18344] syzkaller0: tun_net_xmit 663
[  489.480692][T18344] syzkaller0: tun_net_xmit 663
[  489.480745][T18344] syzkaller0: tun_net_xmit 663
[  489.480779][T18344] syzkaller0: tun_net_xmit 663
[  489.480812][T18344] syzkaller0: tun_net_xmit 663
[  489.480859][T18344] syzkaller0: tun_net_xmit 663
[  489.480893][T18344] syzkaller0: tun_net_xmit 663
[  489.480927][T18344] syzkaller0: tun_net_xmit 663
[  489.480963][T18344] syzkaller0: tun_net_xmit 663
[  489.480997][T18344] syzkaller0: tun_net_xmit 663
[  489.481029][T18344] syzkaller0: tun_net_xmit 663
[  489.481057][T18344] syzkaller0: tun_net_xmit 663
[  489.481087][T18344] syzkaller0: tun_net_xmit 663
[  489.481119][T18344] syzkaller0: tun_net_xmit 663
[  489.481152][T18344] syzkaller0: tun_net_xmit 663
[  489.481199][T18344] syzkaller0: tun_net_xmit 663
[  489.481231][T18344] syzkaller0: tun_net_xmit 663
[  489.481264][T18344] syzkaller0: tun_net_xmit 663
[  489.481297][T18344] syzkaller0: tun_net_xmit 663
[  489.481331][T18344] syzkaller0: tun_net_xmit 663
[  489.481368][T18344] syzkaller0: tun_net_xmit 663
[  489.481414][T18344] syzkaller0: tun_net_xmit 663
[  489.481453][T18344] syzkaller0: tun_net_xmit 663
[  489.481487][T18344] syzkaller0: tun_net_xmit 663
[  489.481530][T18344] syzkaller0: tun_net_xmit 663
[  489.481565][T18344] syzkaller0: tun_net_xmit 663
[  489.481602][T18344] syzkaller0: tun_net_xmit 663
[  489.481636][T18344] syzkaller0: tun_net_xmit 663
[  489.481678][T18344] syzkaller0: tun_net_xmit 663
[  489.481718][T18344] syzkaller0: tun_net_xmit 663
[  489.481764][T18344] syzkaller0: tun_net_xmit 663
[  489.481799][T18344] syzkaller0: tun_net_xmit 663
[  489.481912][T18344] syzkaller0: tun_net_xmit 663
[  489.481951][T18344] syzkaller0: tun_net_xmit 663
[  489.481988][T18344] syzkaller0: tun_net_xmit 663
[  489.482024][T18344] syzkaller0: tun_net_xmit 663
[  489.482068][T18344] syzkaller0: tun_net_xmit 663
[  489.482105][T18344] syzkaller0: tun_net_xmit 663
[  489.482142][T18344] syzkaller0: tun_net_xmit 663
[  489.482178][T18344] syzkaller0: tun_net_xmit 663
[  489.482213][T18344] syzkaller0: tun_net_xmit 663
[  489.482251][T18344] syzkaller0: tun_net_xmit 663
[  489.482287][T18344] syzkaller0: tun_net_xmit 663
[  489.482324][T18344] syzkaller0: tun_net_xmit 663
[  489.482359][T18344] syzkaller0: tun_net_xmit 663
[  489.482395][T18344] syzkaller0: tun_net_xmit 663
[  489.482426][T18344] syzkaller0: tun_net_xmit 663
[  489.482458][T18344] syzkaller0: tun_net_xmit 663
[  489.482512][T18344] syzkaller0: tun_net_xmit 663
[  489.482554][T18344] syzkaller0: tun_net_xmit 663
[  489.482589][T18344] syzkaller0: tun_net_xmit 663
[  489.482621][T18344] syzkaller0: tun_net_xmit 663
[  489.482656][T18344] syzkaller0: tun_net_xmit 663
[  489.482692][T18344] syzkaller0: tun_net_xmit 663
[  489.482729][T18344] syzkaller0: tun_net_xmit 663
[  489.482765][T18344] syzkaller0: tun_net_xmit 663
[  489.482800][T18344] syzkaller0: tun_net_xmit 663
[  489.482836][T18344] syzkaller0: tun_net_xmit 663
[  489.482880][T18344] syzkaller0: tun_net_xmit 663
[  489.482915][T18344] syzkaller0: tun_net_xmit 663
[  489.482951][T18344] syzkaller0: tun_net_xmit 663
[  489.482988][T18344] syzkaller0: tun_net_xmit 663
[  489.483031][T18344] syzkaller0: tun_net_xmit 663
[  489.483068][T18344] syzkaller0: tun_net_xmit 663
[  489.483105][T18344] syzkaller0: tun_net_xmit 663
[  489.483141][T18344] syzkaller0: tun_net_xmit 663
[  489.483177][T18344] syzkaller0: tun_net_xmit 663
[  489.483213][T18344] syzkaller0: tun_net_xmit 97
[  489.697677][ T5627] Bluetooth: hci0: command tx timeout
[  490.056661][T18363] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3214'.
[  491.777308][ T5627] Bluetooth: hci0: command tx timeout
[  492.125792][T18336] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  492.172924][T18160] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  492.209043][T18160] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  492.210086][T18160] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  492.262035][T18160] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  492.263246][T18160] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  492.293455][T18160] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  492.294520][T18160] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  492.336872][T18160] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  492.338000][T16900] wlan1: Trigger new scan to find an IBSS to join
[  492.498485][T18447] sctp: [Deprecated]: syz.0.3217 (pid 18447) Use of struct sctp_assoc_value in delayed_ack socket option.
[  492.498485][T18447] Use struct sctp_sack_info instead
[  492.535631][T18446] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3216'.
[  492.535927][T18448] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3216'.
[  492.686582][T18445] lo: Caught tx_queue_len zero misconfig
[  492.893959][T18160] 8021q: adding VLAN 0 to HW filter on device bond0
[  492.962026][T18160] 8021q: adding VLAN 0 to HW filter on device team0
[  493.012109][T16931] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.012247][T16931] bridge0: port 1(bridge_slave_0) entered forwarding state
[  493.035454][T16931] bridge0: port 2(bridge_slave_1) entered blocking state
[  493.035563][T16931] bridge0: port 2(bridge_slave_1) entered forwarding state
[  493.516168][T18472] syzkaller1: entered promiscuous mode
[  493.516193][T18472] syzkaller1: entered allmulticast mode
[  493.562242][T18472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3221'.
[  493.579860][T18474] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3222'.
[  493.586211][T18472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3221'.
[  493.618781][T18477] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3223'.
[  494.202567][T18497] netlink: 'syz.2.3225': attribute type 21 has an invalid length.
[  494.202594][T18497] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3225'.
[  494.202680][T18497] netlink: 'syz.2.3225': attribute type 4 has an invalid length.
[  494.202693][T18497] netlink: 'syz.2.3225': attribute type 5 has an invalid length.
[  494.202706][T18497] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3225'.
[  494.933333][T18160] 8021q: adding VLAN 0 to HW filter on device batadv0
[  495.149543][T18522] pim6reg: entered allmulticast mode
[  495.153263][T18160] veth0_vlan: entered promiscuous mode
[  495.154547][T18522] pim6reg: left allmulticast mode
[  495.247708][T18160] veth1_vlan: entered promiscuous mode
[  495.305014][T18522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3233'.
[  495.305064][T18522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3233'.
[  495.378892][T16901] wlan1: Trigger new scan to find an IBSS to join
[  495.380547][T18527] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3234'.
[  495.529402][T18160] veth0_macvtap: entered promiscuous mode
[  495.735514][T18160] veth1_macvtap: entered promiscuous mode
[  495.754629][T18545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3238'.
[  495.804707][T18545] x_tables: duplicate underflow at hook 1
[  495.814907][T18548] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3238'.
[  495.843970][T18160] batman_adv: batadv0: Interface activated: batadv_slave_0
[  495.847878][T18545] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3238'.
[  495.847899][T18545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3238'.
[  495.891438][T18160] batman_adv: batadv0: Interface activated: batadv_slave_1
[  495.967595][T16901] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  495.968691][T16901] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  495.968730][T16901] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  495.968763][T16901] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  496.339618][T16901] wlan1: Creating new IBSS network, BSSID a6:27:63:f9:26:44
[  496.431623][T18551] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled!
[  497.035072][T16900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  497.035180][T16900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  497.202748][T10477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  497.202773][T10477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  497.278440][T18591] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3244'.
[  497.278468][T18591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3244'.
[  497.288808][T18595] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3244'.
[  498.135855][ T4934] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  498.147852][ T4934] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  498.150184][ T4934] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  498.181837][ T4934] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  498.199361][ T4934] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  499.333181][T18680] Bluetooth: MGMT ver 1.23
[  499.333230][T18680] Bluetooth: hci0: invalid length 0, exp 2 for type 25
[  499.411005][T18682] netlink: 'syz.1.3257': attribute type 11 has an invalid length.
[  499.411035][T18682] netlink: 'syz.1.3257': attribute type 11 has an invalid length.
[  499.716675][T18628] ip_vti0 speed is unknown, defaulting to 1000
[  500.054687][T18665] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled!
[  500.257174][ T4934] Bluetooth: hci4: command tx timeout
[  500.380901][T18715] __nla_validate_parse: 6 callbacks suppressed
[  500.380918][T18715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3261'.
[  500.380950][T18715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3261'.
[  500.772079][T18729] netlink: 'syz.0.3265': attribute type 1 has an invalid length.
[  500.801199][T18729] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3265'.
[  501.319995][T18756] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3270'.
[  501.806438][T18628] bridge0: port 1(bridge_slave_0) entered blocking state
[  501.808578][T18628] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.808759][T18628] bridge_slave_0: entered allmulticast mode
[  501.814942][T18628] bridge_slave_0: entered promiscuous mode
[  501.855003][T18628] bridge0: port 2(bridge_slave_1) entered blocking state
[  501.855220][T18628] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.855938][T18628] bridge_slave_1: entered allmulticast mode
[  501.883609][T18628] bridge_slave_1: entered promiscuous mode
[  502.136326][T18790] sctp: [Deprecated]: syz.3.3276 (pid 18790) Use of int in max_burst socket option deprecated.
[  502.136326][T18790] Use struct sctp_assoc_value instead
[  502.339378][ T4934] Bluetooth: hci4: command tx timeout
[  502.415780][T18628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  502.466297][T18628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  502.712423][T18628] team0: Port device team_slave_0 added
[  502.861449][T18804] bond1: option arp_all_targets: invalid value (3)
[  502.880506][T18804] bond1 (unregistering): Released all slaves
[  502.986850][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  503.031986][T18628] team0: Port device team_slave_1 added
[  503.337420][T18628] batman_adv: batadv0: Adding interface: batadv_slave_0
[  503.337440][T18628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  503.337467][T18628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  503.346669][T18628] batman_adv: batadv0: Adding interface: batadv_slave_1
[  503.346689][T18628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  503.346716][T18628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  503.490509][T18829] netlink: 'syz.2.3283': attribute type 11 has an invalid length.
[  503.490537][T18829] netlink: 'syz.2.3283': attribute type 11 has an invalid length.
[  503.490551][T18829] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3283'.
[  503.744233][T18628] hsr_slave_0: entered promiscuous mode
[  503.751579][T18628] hsr_slave_1: entered promiscuous mode
[  503.757300][T18628] debugfs: 'hsr0' already exists in 'hsr'
[  503.757324][T18628] Cannot create hsr debugfs directory
[  504.428291][ T4934] Bluetooth: hci4: command tx timeout
[  504.813140][T18867] block nbd3: not configured, cannot reconfigure
[  504.884068][T18860] bond1: option arp_all_targets: invalid value (3)
[  504.899559][T18860] bond1 (unregistering): Released all slaves
[  504.939556][T18874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3293'.
[  505.306116][T18628] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  505.306156][T18628] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.171790][T18628] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  506.171831][T18628] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.441462][T18628] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  506.441512][T18628] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.489985][T18921] nbd: socks must be embedded in a SOCK_ITEM attr
[  506.498412][ T4934] Bluetooth: hci4: command tx timeout
[  506.529074][T18925] net_ratelimit: 63 callbacks suppressed
[  506.529097][T18925] ip_tables: iptables: counters copy to user failed while replacing table
[  506.574884][T18925] netlink: 'syz.1.3306': attribute type 1 has an invalid length.
[  506.822304][ T1773] block nbd1: Connection timed out, retrying (0/1 alive)
[  506.823268][ T1773] block nbd1: Connection timed out, retrying (0/1 alive)
[  506.823325][ T1773] block nbd1: Connection timed out, retrying (0/1 alive)
[  506.823366][ T1773] block nbd1: Connection timed out, retrying (0/1 alive)
[  506.827088][ T1773] block nbd1: Dead connection, failed to find a fallback
[  506.827115][ T1773] block nbd1: shutting down sockets
[  506.827224][ T1773] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  506.827311][ T1773] Buffer I/O error on dev nbd1, logical block 3, async page read
[  506.827577][ T1773] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  506.828893][ T1773] Buffer I/O error on dev nbd1, logical block 2, async page read
[  506.828932][ T1773] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  506.828955][ T1773] Buffer I/O error on dev nbd1, logical block 1, async page read
[  506.828979][ T1773] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  506.829002][ T1773] Buffer I/O error on dev nbd1, logical block 0, async page read
[  506.833716][ T1773] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  506.833753][ T1773] Buffer I/O error on dev nbd1, logical block 0, async page read
[  506.833891][ T1773] Buffer I/O error on dev nbd1, logical block 1, async page read
[  506.833906][ T1773] Buffer I/O error on dev nbd1, logical block 2, async page read
[  506.833919][ T1773] Buffer I/O error on dev nbd1, logical block 3, async page read
[  506.835052][ T1773] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  506.835890][ T1773] Buffer I/O error on dev nbd1, logical block 0, async page read
[  506.836044][ T1773] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  506.836068][ T1773] Buffer I/O error on dev nbd1, logical block 1, async page read
[  506.836164][ T1773] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  506.836270][ T1773] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  506.836388][ T1773] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  506.839898][T16149] ldm_validate_partition_table(): Disk read failed.
[  506.841912][T16149] Dev nbd1: unable to read RDB block 0
[  506.843617][T16149]  nbd1: unable to read partition table
[  506.852825][T18628] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  506.852862][T18628] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  507.023994][T18928] bond1: entered promiscuous mode
[  507.024020][T18928] bond1: entered allmulticast mode
[  507.110034][T18928] 8021q: adding VLAN 0 to HW filter on device bond1
[  507.156042][T16149] ldm_validate_partition_table(): Disk read failed.
[  507.164353][T16149] Dev nbd1: unable to read RDB block 0
[  507.173500][T16149]  nbd1: unable to read partition table
[  507.272162][T18929] bridge1: entered promiscuous mode
[  507.272422][T18929] bridge1: entered allmulticast mode
[  507.278364][T16931] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  507.283590][T18929] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  507.387938][T10477] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  507.420967][T18925] bridge2: entered promiscuous mode
[  507.421231][T18925] bridge2: entered allmulticast mode
[  507.472686][T18925] bond1: (slave bridge2): Enslaving as a backup interface with a down link
[  507.531130][T18936] bond1: option arp_all_targets: invalid value (3)
[  507.533404][T18936] bond1 (unregistering): Released all slaves
[  507.791905][T18925] bridge3: entered promiscuous mode
[  507.792158][T18925] bridge3: entered allmulticast mode
[  507.792999][T18925] bond1: (slave bridge3): Enslaving as a backup interface with a down link
[  507.962679][T18958] netlink: 'syz.0.3313': attribute type 11 has an invalid length.
[  507.962709][T18958] netlink: 'syz.0.3313': attribute type 11 has an invalid length.
[  507.962724][T18958] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3313'.
[  508.318593][T18974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3318'.
[  508.429085][T18979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3316'.
[  508.748814][T18628] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  509.079986][T18628] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  509.103015][T18628] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  509.651152][T19019] ip_tables: iptables: counters copy to user failed while replacing table
[  509.655264][T19019] x_tables: duplicate underflow at hook 3
[  509.792944][T18628] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  509.799698][T18628] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  509.842811][T18628] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  509.872362][T19019] bridge0: port 2(bridge_slave_1) entered disabled state
[  509.873083][T19019] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.051602][T19029] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  510.195294][T18628] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  510.211324][T18628] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  510.576087][T19050] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3326'.
[  510.693038][T19058] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3326'.
[  510.721662][   T31] audit: type=1804 audit(1791371249.419:45): pid=19056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3328" name="/newroot/106/cgroup.controllers" dev="tmpfs" ino=565 res=1 errno=0
[  510.721729][   T31] audit: type=1800 audit(1791371249.429:46): pid=19056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3328" name="cgroup.controllers" dev="tmpfs" ino=565 res=0 errno=0
[  510.839832][T19064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3330'.
[  510.965369][T19056] ovs-dp0: entered promiscuous mode
[  511.030893][T18628] 8021q: adding VLAN 0 to HW filter on device bond0
[  511.071295][T18628] 8021q: adding VLAN 0 to HW filter on device team0
[  511.125693][T10477] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.125823][T10477] bridge0: port 1(bridge_slave_0) entered forwarding state
[  511.172442][T19072] netlink: 'syz.3.3332': attribute type 2 has an invalid length.
[  511.191829][T16931] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.191952][T16931] bridge0: port 2(bridge_slave_1) entered forwarding state
[  511.424042][T19074] batman_adv: batadv0: Adding interface: syzkaller0
[  511.424062][T19074] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  511.424096][T19074] batman_adv: batadv0: Interface activated: syzkaller0
[  512.064443][T19073] batman_adv: batadv0: Interface deactivated: syzkaller0
[  512.245471][T19073] batman_adv: batadv0: Removing interface: syzkaller0
[  512.613203][T19096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3338'.
[  512.622741][T19107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3340'.
[  512.624247][T19105] netlink: 'syz.0.3339': attribute type 11 has an invalid length.
[  512.624270][T19105] netlink: 'syz.0.3339': attribute type 11 has an invalid length.
[  512.624283][T19105] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3339'.
[  512.855487][T19115] bond2: entered promiscuous mode
[  512.855517][T19115] bond2: entered allmulticast mode
[  513.509974][T18628] 8021q: adding VLAN 0 to HW filter on device batadv0
[  513.682222][T19151] batman_adv: batadv0: Adding interface: syzkaller0
[  513.682243][T19151] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  513.682278][T19151] batman_adv: batadv0: Interface activated: syzkaller0
[  513.894468][T19165] netlink: 'syz.1.3352': attribute type 11 has an invalid length.
[  513.894582][T19165] netlink: 'syz.1.3352': attribute type 11 has an invalid length.
[  513.894598][T19165] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3352'.
[  514.056476][T19173] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3353'.
[  514.544596][T18628] veth0_vlan: entered promiscuous mode
[  514.567609][T19191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3357'.
[  514.696692][T18628] veth1_vlan: entered promiscuous mode
[  514.832810][T19200] netlink: 'syz.0.3359': attribute type 6 has an invalid length.
[  514.894004][T18628] veth0_macvtap: entered promiscuous mode
[  514.915139][T19199] syzkaller0: entered promiscuous mode
[  514.915167][T19199] syzkaller0: entered allmulticast mode
[  514.949335][T18628] veth1_macvtap: entered promiscuous mode
[  515.169683][T18628] batman_adv: batadv0: Interface activated: batadv_slave_0
[  515.232945][T18628] batman_adv: batadv0: Interface activated: batadv_slave_1
[  515.321041][T19221] netlink: 'syz.1.3364': attribute type 11 has an invalid length.
[  515.321069][T19221] netlink: 'syz.1.3364': attribute type 11 has an invalid length.
[  515.321085][T19221] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3364'.
[  515.450308][T16875] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  515.451985][T16882] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  515.452037][T16882] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  515.452076][T16882] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  515.494419][T19216] x_tables: duplicate underflow at hook 1
[  515.494556][T19219] x_tables: duplicate underflow at hook 1
[  515.823901][T19235] netlink: 'syz.3.3368': attribute type 2 has an invalid length.
[  515.839465][T16931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  515.839486][T16931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  515.899836][T19232] syzkaller1: entered promiscuous mode
[  515.899864][T19232] syzkaller1: entered allmulticast mode
[  516.002561][T16875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  516.002586][T16875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  516.295309][T19255] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3246'.
[  516.553461][T19264] pim6reg: entered allmulticast mode
[  516.803068][T19266] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  516.806044][T19269] sit0: entered promiscuous mode
[  516.850320][T19269] netlink: 'syz.2.3376': attribute type 1 has an invalid length.
[  516.850348][T19269] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3376'.
[  516.969175][T19269] netlink: 'syz.2.3376': attribute type 1 has an invalid length.
[  516.969204][T19269] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3376'.
[  516.969465][T19269] netlink: 'syz.2.3376': attribute type 1 has an invalid length.
[  516.969479][T19269] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3376'.
[  516.969727][T19269] netlink: 'syz.2.3376': attribute type 1 has an invalid length.
[  516.969741][T19269] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3376'.
[  516.969988][T19269] netlink: 'syz.2.3376': attribute type 1 has an invalid length.
[  516.970002][T19269] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3376'.
[  516.970245][T19269] netlink: 'syz.2.3376': attribute type 1 has an invalid length.
[  516.976641][T19269] netlink: 'syz.2.3376': attribute type 1 has an invalid length.
[  516.976899][T19269] netlink: 'syz.2.3376': attribute type 1 has an invalid length.
[  517.392919][T19263] pim6reg: left allmulticast mode
[  517.661286][T19288] bond1 (unregistering): Released all slaves
[  517.765688][T19292] geneve2: entered promiscuous mode
[  517.850470][T19292] gretap1: entered allmulticast mode
[  518.556813][T19329] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  518.633822][T19329] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.996042][T19353] __nla_validate_parse: 68 callbacks suppressed
[  518.996071][T19353] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3393'.
[  518.996132][T19353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3393'.
[  518.996156][T19353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3393'.
[  519.216809][T19370] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3393'.
[  519.216835][T19370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3393'.
[  519.216846][T19370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3393'.
[  519.534318][T19383] sctp: [Deprecated]: syz.1.3396 (pid 19383) Use of int in max_burst socket option deprecated.
[  519.534318][T19383] Use struct sctp_assoc_value instead
[  519.921596][T19398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3401'.
[  519.921634][T19398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3401'.
[  519.954917][T19401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3401'.
[  519.955035][T19401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3401'.
[  519.988279][T10477] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  519.988330][T10477] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  519.988364][T10477] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  519.988397][T10477] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  520.014857][T19396] bridge0: port 3(syz_tun) entered blocking state
[  520.014976][T19396] bridge0: port 3(syz_tun) entered disabled state
[  520.015166][T19396] syz_tun: entered allmulticast mode
[  520.044471][T19396] syz_tun: entered promiscuous mode
[  520.045259][T19396] bridge0: port 3(syz_tun) entered blocking state
[  520.045382][T19396] bridge0: port 3(syz_tun) entered forwarding state
[  520.567119][T19418] Bluetooth: hci0: Invalid link address type 20 for 66:55:44:33:22:11
[  520.943664][T19442] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  521.026270][T19445] tc_dump_action: action bad kind
[  521.183126][T19446] ip_tables: iptables: counters copy to user failed while replacing table
[  521.527202][T19460] netlink: 'syz.3.3416': attribute type 11 has an invalid length.
[  521.527229][T19460] netlink: 'syz.3.3416': attribute type 11 has an invalid length.
[  522.223407][T19471] bond1: option arp_all_targets: invalid value (3)
[  522.242612][T19471] bond1 (unregistering): Released all slaves
[  522.493361][T19487] bridge4: entered promiscuous mode
[  522.493415][T19487] bridge4: entered allmulticast mode
[  522.925164][T19518] ipt_REJECT: ECHOREPLY no longer supported.
[  523.056082][T19521] netlink: 'syz.4.3429': attribute type 11 has an invalid length.
[  523.234186][T19526] tunl0: Caught tx_queue_len zero misconfig
[  523.540774][T16879] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  523.540856][T16879] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  523.540892][T16879] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  523.540926][T16879] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  523.763973][T19538] syzkaller0: entered promiscuous mode
[  523.763999][T19538] syzkaller0: entered allmulticast mode
[  523.806599][T19540] tipc: Started in network mode
[  523.806620][T19540] tipc: Node identity , cluster identity 4711
[  523.806634][T19540] tipc: Failed to obtain node identity
[  523.806662][T19540] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  523.808109][T19542] tipc: Started in network mode
[  523.808127][T19542] tipc: Node identity , cluster identity 4711
[  523.808143][T19542] tipc: Failed to obtain node identity
[  523.808173][T19542] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  524.515597][T19564] bond1: option arp_all_targets: invalid value (3)
[  524.544529][T19564] bond1 (unregistering): Released all slaves
[  525.301587][T19607] netlink: 'syz.4.3445': attribute type 11 has an invalid length.
[  525.301615][T19607] netlink: 'syz.4.3445': attribute type 11 has an invalid length.
[  525.301628][T19607] __nla_validate_parse: 8 callbacks suppressed
[  525.301639][T19607] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3445'.
[  525.449026][T19613] Cannot find add_set index 0 as target
[  525.453826][T19615] xt_l2tp: wrong L2TP version: 0
[  525.787500][T19632] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  525.809092][T19632] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3453'.
[  525.834055][T19632] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  526.259908][T19639] bond1: option arp_all_targets: invalid value (3)
[  526.269522][T19639] bond1 (unregistering): Released all slaves
[  526.305378][T19650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3456'.
[  526.416748][T19655] block nbd2: not configured, cannot reconfigure
[  526.425746][T16904] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  526.541006][T19646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3456'.
[  526.607161][T19650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3456'.
[  526.760402][T19664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3459'.
[  526.886076][T19664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3459'.
[  527.199694][T19620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3449'.
[  527.259021][T19677] xt_hashlimit: size too large, truncated to 1048576
[  527.271611][T19673] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3462'.
[  527.272061][T19673] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3462'.
[  527.330122][T19678] xt_CT: You must specify a L4 protocol and not use inversions on it
[  527.401365][T19681] 
@0Ù: renamed from bond_slave_1 (while UP)
[  527.970913][T19693] bond3: option arp_all_targets: invalid value (3)
[  528.006435][T19693] bond3 (unregistering): Released all slaves
[  528.192630][T16875] IPVS: starting estimator thread 0...
[  528.195402][T19705] IPVS: rr: UDP [::1]:8080 - no destination available
[  528.277770][T19714] IPVS: using max 25 ests per chain, 60000 per kthread
[  528.409881][T19725] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  528.409918][T19725] batman_adv: batadv0: Removing interface: batadv_slave_0
[  528.441910][T19725] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  528.441935][T19725] batman_adv: batadv0: Removing interface: batadv_slave_1
[  528.453603][ T6051] hid-generic 0005:07C0:4155.0002: unknown main item tag 0x0
[  528.492565][T19726] netlink: 'syz.4.3476': attribute type 11 has an invalid length.
[  528.492592][T19726] netlink: 'syz.4.3476': attribute type 11 has an invalid length.
[  528.579819][ T6051] hid-generic 0005:07C0:4155.0002: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa
[  529.896711][T19767] bond1: option arp_all_targets: invalid value (3)
[  529.917621][T19767] bond1 (unregistering): Released all slaves
[  530.593010][T19801] netlink: 'syz.2.3494': attribute type 11 has an invalid length.
[  530.593040][T19801] netlink: 'syz.2.3494': attribute type 11 has an invalid length.
[  530.593052][T19801] __nla_validate_parse: 12 callbacks suppressed
[  530.593065][T19801] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3494'.
[  530.763254][T19797] syzkaller0: entered promiscuous mode
[  530.763280][T19797] syzkaller0: entered allmulticast mode
[  530.827183][T19740] Bluetooth: hci4: command 0x0405 tx timeout
[  531.214073][T19820] IPv6: addrconf: prefix option has invalid lifetime
[  531.578030][T19837] block nbd2: server does not support multiple connections per device.
[  531.579546][T19837] block nbd2: shutting down sockets
[  531.609674][T19824] bond1: option arp_all_targets: invalid value (3)
[  531.632961][T19824] bond1 (unregistering): Released all slaves
[  531.736044][T19843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3509'.
[  532.029166][T19853] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  532.234185][T19858] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  532.272689][T19860] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  532.406794][T19865] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3514'.
[  532.470571][T19865] bridge0: port 3(syz_tun) entered blocking state
[  532.470719][T19865] bridge0: port 3(syz_tun) entered disabled state
[  532.470975][T19865] syz_tun: entered allmulticast mode
[  532.473994][T19865] syz_tun: entered promiscuous mode
[  532.474926][T19865] bridge0: port 3(syz_tun) entered blocking state
[  532.475074][T19865] bridge0: port 3(syz_tun) entered forwarding state
[  532.505128][T19868] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3512'.
[  532.633328][T19873] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3512'.
[  533.663085][T19887] ip6gre0: Caught tx_queue_len zero misconfig
[  533.663177][T19887] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  533.846126][T19892] syzkaller0: entered promiscuous mode
[  533.846154][T19892] syzkaller0: entered allmulticast mode
[  534.281337][T19908] validate_nla: 65 callbacks suppressed
[  534.281361][T19908] netlink: 'syz.0.3523': attribute type 2 has an invalid length.
[  534.281375][T19908] netlink: 'syz.0.3523': attribute type 11 has an invalid length.
[  534.281386][T19908] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3523'.
[  534.353683][T19899] bond4: option arp_all_targets: invalid value (3)
[  534.361947][T19913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3523'.
[  534.379130][T19899] bond4 (unregistering): Released all slaves
[  534.755301][T19933] netlink: 'syz.2.3527': attribute type 1 has an invalid length.
[  534.835269][T19933] 8021q: adding VLAN 0 to HW filter on device bond3
[  534.963341][T19940] 8021q: adding VLAN 0 to HW filter on device bond3
[  534.983166][T19940] bond3: (slave gre1): The slave device specified does not support setting the MAC address
[  535.011863][T19940] bond3: (slave gre1): Error -95 calling set_mac_address
[  535.250109][T19964] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3529'.
[  535.400811][T19940] gretap2: entered promiscuous mode
[  535.410664][T19964] IPVS: set_ctl: invalid protocol: 0 172.30.1.1:20001
[  535.448012][T19940] bond3: (slave gretap2): making interface the new active one
[  535.455056][T19940] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  535.991829][T19985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3532'.
[  536.243257][T19994] netlink: 'syz.2.3533': attribute type 1 has an invalid length.
[  536.382709][T20003] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3533'.
[  536.424554][T20008] FAULT_INJECTION: forcing a failure.
[  536.424554][T20008] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  536.424588][T20008] CPU: 1 UID: 0 PID: 20008 Comm: syz.0.3536 Not tainted syzkaller #0 PREEMPT(full) 
[  536.424610][T20008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  536.424622][T20008] Call Trace:
[  536.424631][T20008]  <TASK>
[  536.424639][T20008]  dump_stack_lvl+0xe8/0x150
[  536.424679][T20008]  should_fail_ex+0x410/0x560
[  536.424711][T20008]  _copy_to_user+0x31/0xb0
[  536.424837][T20008]  simple_read_from_buffer+0xe1/0x170
[  536.424872][T20008]  proc_fail_nth_read+0x1bb/0x230
[  536.424890][T20008]  ? common_file_perm+0x20e/0x2b0
[  536.424918][T20008]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  536.424941][T20008]  ? rw_verify_area+0x24a/0x4c0
[  536.424969][T20008]  ? tun_chr_write_iter+0xe0/0x200
[  536.424990][T20008]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  536.425008][T20008]  vfs_read+0x213/0xa80
[  536.425040][T20008]  ? __pfx___mutex_lock+0x10/0x10
[  536.425060][T20008]  ? __pfx_vfs_read+0x10/0x10
[  536.425090][T20008]  ? __fget_files+0x2a/0x420
[  536.425123][T20008]  ? __fget_files+0x3a2/0x420
[  536.425148][T20008]  ? __fget_files+0x2a/0x420
[  536.425186][T20008]  ksys_read+0x150/0x270
[  536.425219][T20008]  ? __pfx_ksys_read+0x10/0x10
[  536.425257][T20008]  do_syscall_64+0x166/0x520
[  536.425277][T20008]  ? trace_irq_disable+0x3b/0x140
[  536.425296][T20008]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  536.425316][T20008]  ? clear_bhb_loop+0x70/0xc0
[  536.425353][T20008]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  536.425373][T20008] RIP: 0033:0x7fdeb5f5e9ce
[  536.425393][T20008] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  536.425411][T20008] RSP: 002b:00007fdeb41b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  536.425433][T20008] RAX: ffffffffffffffda RBX: 00007fdeb41b46c0 RCX: 00007fdeb5f5e9ce
[  536.425447][T20008] RDX: 000000000000000f RSI: 00007fdeb41b40a0 RDI: 0000000000000004
[  536.425459][T20008] RBP: 00007fdeb41b4090 R08: 0000000000000000 R09: 0000000000000000
[  536.425471][T20008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  536.425483][T20008] R13: 00007fdeb6226218 R14: 00007fdeb6226180 R15: 00007fff0d86cda8
[  536.425516][T20008]  </TASK>
[  536.695412][T19993] bond4: (slave veth1): Enslaving as an active interface with a down link
[  536.701692][T20014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3537'.
[  536.788502][T20000] bond4: (slave veth5): Enslaving as an active interface with a down link
[  537.473939][T20049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3544'.
[  538.175615][T20070] netlink: 'syz.1.3545': attribute type 12 has an invalid length.
[  538.942657][T20033] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  539.297370][ T4934] Bluetooth: hci0: command 0x0401 tx timeout
[  539.737569][T20088] syzkaller0: entered promiscuous mode
[  539.737601][T20088] syzkaller0: entered allmulticast mode
[  539.821362][T20110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3552'.
[  540.088221][T20121] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3556'.
[  541.336671][T20137] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3558'.
[  541.482951][ T4934] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  544.015717][T20120] IPv6: sit1: Disabled Multicast RS
[  544.033123][T20121] bond0: ARP target 0.0.0.2 is already present
[  544.033171][T20121] bond0: option arp_ip_target: invalid value (33554432)
[  544.199627][T20142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3559'.
[  544.263127][T20138] macsec1: entered promiscuous mode
[  544.768708][T20174] netlink: 'syz.0.3568': attribute type 11 has an invalid length.
[  544.768738][T20174] netlink: 'syz.0.3568': attribute type 11 has an invalid length.
[  544.768752][T20174] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3568'.
[  545.209706][T20193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3574'.
[  545.560144][T20201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3577'.
[  545.785342][T20212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3579'.
[  545.785383][T20212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3579'.
[  546.173428][T20220] netlink: 'syz.3.3582': attribute type 34 has an invalid length.
[  546.173454][T20220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3582'.
[  546.533849][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3587'.
[  546.685383][T20241] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  546.857516][T20242] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6)
[  546.862449][T20242] bond1 (unregistering): Released all slaves
[  547.049161][T20258] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3593'.
[  547.269473][T20252] bond2 (unregistering): Released all slaves
[  547.571542][T20281] bridge2: entered promiscuous mode
[  547.571605][T20281] bridge2: entered allmulticast mode
[  547.578863][T20277] netlink: zone id is out of range
[  547.578918][T20277] netlink: zone id is out of range
[  547.579039][T20277] netlink: zone id is out of range
[  547.579078][T20277] netlink: zone id is out of range
[  547.579086][T20277] netlink: zone id is out of range
[  547.579093][T20277] netlink: zone id is out of range
[  547.579101][T20277] netlink: zone id is out of range
[  547.579108][T20277] netlink: zone id is out of range
[  547.579114][T20277] netlink: zone id is out of range
[  547.579121][T20277] netlink: zone id is out of range
[  547.680349][T20281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3598'.
[  547.848303][T20289] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3601'.
[  547.848333][T20289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3601'.
[  548.048834][T20281] virtio_blk virtio5: 1/0/0 default/read/poll queues
[  548.055731][T20281] virtio_blk virtio5: [vda] 262144 512-byte logical blocks (134 MB/128 MiB)
[  548.130967][T20310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3604'.
[  548.130996][T20310] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  548.131014][T20310] batman_adv: batadv0: Removing interface: batadv_slave_0
[  548.270702][T20313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3606'.
[  548.315765][T20318] netlink: 'syz.0.3601': attribute type 1 has an invalid length.
[  548.364125][T20310] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  548.364152][T20310] batman_adv: batadv0: Removing interface: batadv_slave_1
[  548.425386][T20281] Dev vda: unable to read RDB block 8
[  548.426229][T20281]  vda: unable to read partition table
[  548.534716][T20289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3601'.
[  548.752580][T20327] Cannot find del_set index 0 as target
[  548.977348][T20320] 8021q: adding VLAN 0 to HW filter on device bond2
[  549.012727][T20320] bond1: (slave bond2): making interface the new active one
[  549.015186][T20320] bond1: (slave bond2): Enslaving as an active interface with an up link
[  549.033371][T20338] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3608'.
[  549.033400][T20338] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3608'.
[  549.094668][T20303] bond1: (slave gretap1): Enslaving as a backup interface with an up link
[  549.117400][T20289] 8021q: adding VLAN 0 to HW filter on device bond1
[  550.492057][T20395] tipc: Failed to remove unknown binding: 66,0,0/0:2360212082/2360212084
[  550.492090][T20395] tipc: Failed to remove unknown binding: 66,0,0/0:2360212082/2360212083
[  550.497185][T20395] tipc: Failed to remove unknown binding: 66,0,0/0:2360212082/2360212084
[  550.497223][T20395] tipc: Failed to remove unknown binding: 66,0,0/0:2360212082/2360212083
[  551.139164][T19740] Bluetooth: hci5: command 0x0406 tx timeout
[  551.276656][T20425] block nbd0: reconnected socket
[  551.276803][T20425] block nbd0: reconnected socket
[  551.281250][T20430] netlink: 'syz.4.3626': attribute type 1 has an invalid length.
[  551.364578][T20434] netlink: 'syz.0.3624': attribute type 9 has an invalid length.
[  551.398367][T20430] 8021q: adding VLAN 0 to HW filter on device bond1
[  551.591265][   T31] audit: type=1804 audit(1791371290.299:47): pid=20441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3627" name="/newroot/173/cgroup.controllers" dev="tmpfs" ino=911 res=1 errno=0
[  551.593325][   T31] audit: type=1800 audit(1791371290.299:48): pid=20441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3627" name="cgroup.controllers" dev="tmpfs" ino=911 res=0 errno=0
[  551.664111][T20445] FAULT_INJECTION: forcing a failure.
[  551.664111][T20445] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  551.664173][T20445] CPU: 1 UID: 0 PID: 20445 Comm: syz.3.3628 Not tainted syzkaller #0 PREEMPT(full) 
[  551.664195][T20445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  551.664207][T20445] Call Trace:
[  551.664216][T20445]  <TASK>
[  551.664224][T20445]  dump_stack_lvl+0xe8/0x150
[  551.664260][T20445]  should_fail_ex+0x410/0x560
[  551.664286][T20445]  prepare_alloc_pages+0x223/0x600
[  551.664317][T20445]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  551.664344][T20445]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  551.664371][T20445]  ? __pfx_policy_nodemask+0x10/0x10
[  551.664405][T20445]  alloc_pages_mpol+0x21e/0x390
[  551.664436][T20445]  alloc_pages_noprof+0xb1/0x2b0
[  551.664462][T20445]  __pmd_alloc+0x3a/0x5c0
[  551.664493][T20445]  handle_mm_fault+0xe9d/0x3750
[  551.664531][T20445]  ? handle_mm_fault+0xf1/0x3750
[  551.664743][T20445]  ? __pfx_handle_mm_fault+0x10/0x10
[  551.664808][T20445]  ? lock_mm_and_find_vma+0xa7/0x340
[  551.664839][T20445]  do_user_addr_fault+0x746/0x1340
[  551.664966][T20445]  exc_page_fault+0x6a/0xc0
[  551.665000][T20445]  asm_exc_page_fault+0x26/0x30
[  551.665020][T20445] RIP: 0010:move_addr_to_user+0x49/0x210
[  551.665047][T20445] Code: 00 44 89 fe e8 a8 1b 20 f8 41 81 ff 80 00 00 00 0f 87 90 01 00 00 48 b8 00 f0 ff ff ff 7f 00 00 49 39 c5 4c 0f 47 e8 0f 01 cb <45> 8b 65 00 45 39 e7 44 89 e5 41 0f 4c ef bf ff ff ff ff 89 ee e8
[  551.665065][T20445] RSP: 0018:ffffc90005c2fc88 EFLAGS: 00050283
[  551.665086][T20445] RAX: 00007ffffffff000 RBX: 0000200000000800 RCX: ffff88807b2b3e80
[  551.665101][T20445] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000080
[  551.665112][T20445] RBP: ffffc90005c2fea0 R08: ffffffff9079a57f R09: 1ffffffff20f34af
[  551.665124][T20445] R10: dffffc0000000000 R11: fffffbfff20f34b0 R12: 0000000000000000
[  551.665135][T20445] R13: 0000000000000080 R14: ffffc90005c2fd20 R15: 000000000000000c
[  551.665164][T20445]  ? move_addr_to_user+0x28/0x210
[  551.665193][T20445]  __sys_recvfrom+0x26a/0x3a0
[  551.665220][T20445]  ? ksys_write+0x1e6/0x270
[  551.665256][T20445]  ? __pfx___sys_recvfrom+0x10/0x10
[  551.665281][T20445]  ? __mutex_unlock_slowpath+0x731/0x900
[  551.665336][T20445]  ? __pfx_ksys_write+0x10/0x10
[  551.665375][T20445]  __x64_sys_recvfrom+0xde/0x100
[  551.665408][T20445]  do_syscall_64+0x166/0x520
[  551.665428][T20445]  ? trace_irq_disable+0x3b/0x140
[  551.665449][T20445]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  551.665470][T20445]  ? clear_bhb_loop+0x70/0xc0
[  551.665497][T20445]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  551.665518][T20445] RIP: 0033:0x7f7bc9d9e199
[  551.665537][T20445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  551.665552][T20445] RSP: 002b:00007f7bc7fd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[  551.665573][T20445] RAX: ffffffffffffffda RBX: 00007f7bca026090 RCX: 00007f7bc9d9e199
[  551.665587][T20445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  551.665670][T20445] RBP: 00007f7bc7fd5090 R08: 0000200000000800 R09: 0000000000000080
[  551.665685][T20445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  551.665697][T20445] R13: 00007f7bca026128 R14: 00007f7bca026090 R15: 00007fff9b757688
[  551.665733][T20445]  </TASK>
[  551.966882][T19740] block nbd0: Receive control failed (result -32)
[  551.983463][ T4934] block nbd0: Receive control failed (result -32)
[  551.995019][T20448] netlink: 'syz.4.3629': attribute type 1 has an invalid length.
[  553.034795][T16936] bond0: left allmulticast mode
[  553.044362][T16936] bond0: left promiscuous mode
[  553.054088][T16936] bridge0: port 3(bond0) entered disabled state
[  553.194433][T16936] bridge_slave_1: left allmulticast mode
[  553.194465][T16936] bridge_slave_1: left promiscuous mode
[  553.194714][T16936] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.212513][T16936] bridge_slave_0: left allmulticast mode
[  553.212544][T16936] bridge_slave_0: left promiscuous mode
[  553.212782][T16936] bridge0: port 1(bridge_slave_0) entered disabled state
[  553.292530][T16936] batman_adv: batadv0: Interface deactivated: gretap1
[  553.796376][T16936] batman_adv: batadv0: Removing interface: gretap1
[  554.752444][T16936] bond1 (unregistering): Released all slaves
[  554.765373][T16936] bond2 (unregistering): Released all slaves
[  554.777847][T16936] bond3 (unregistering): Released all slaves
[  554.794964][T16936] bond0 (unregistering): Released all slaves
[  554.807834][T16936] bond4 (unregistering): Released all slaves
[  554.830866][T20441] openvswitch: ovs-dp0: Dropping previously announced user features
[  554.869348][T20459] __nla_validate_parse: 9 callbacks suppressed
[  554.869372][T20459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3629'.
[  554.966654][T20462] bridge1: entered promiscuous mode
[  555.087124][T20477] bond0: option packets_per_slave: invalid value (868050663)
[  555.087153][T20477] bond0: option packets_per_slave: allowed values 0 - 65535
[  555.239054][T16936] ovs-dp0: left promiscuous mode
[  555.520062][T20499] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3636'.
[  555.529270][T20267] 
[  555.542474][T20267] ======================================================
[  555.550375][T20267] WARNING: possible circular locking dependency detected
[  555.558302][T20267] syzkaller #0 Not tainted
[  555.563453][T20267] ------------------------------------------------------
[  555.571754][T20267] khidpd_00010003/20267 is trying to acquire lock:
[  555.578709][T20267] ffffffff8ee90400 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x5f/0x610
[  555.590951][T20267] 
[  555.590951][T20267] but task is already holding lock:
[  555.599144][T20267] ffffffff905f3240 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560
[  555.611440][T20267] 
[  555.611440][T20267] which lock already depends on the new lock.
[  555.611440][T20267] 
[  555.622224][T20267] 
[  555.622224][T20267] the existing dependency chain (in reverse order) is:
[  555.631603][T20267] 
[  555.631603][T20267] -> #8 (uevent_sock_mutex){+.+.}-{4:4}:
[  555.639532][T20267]        __mutex_lock+0x19d/0x1550
[  555.644832][T20267]        kobject_uevent_net_broadcast+0x27e/0x560
[  555.652770][T20267]        kobject_uevent_env+0x566/0x9e0
[  555.658562][T20267]        device_add+0x544/0xb80
[  555.664508][T20267]        device_create+0x269/0x300
[  555.670354][T20267]        msr_device_create+0x33/0x50
[  555.675763][T20267]        cpuhp_invoke_callback+0x434/0x810
[  555.681877][T20267]        cpuhp_thread_fun+0x362/0x780
[  555.690987][T20267]        smpboot_thread_fn+0x565/0xa70
[  555.700408][T20267]        kthread+0x38b/0x480
[  555.706720][T20267]        ret_from_fork+0x514/0xb70
[  555.712838][T20267]        ret_from_fork_asm+0x1a/0x30
[  555.718529][T20267] 
[  555.718529][T20267] -> #7 (cpuhp_state-up){+.+.}-{0:0}:
[  555.728702][T20267]        cpuhp_thread_fun+0x127/0x780
[  555.735327][T20267]        smpboot_thread_fn+0x565/0xa70
[  555.743656][T20267]        kthread+0x38b/0x480
[  555.750553][T20267]        ret_from_fork+0x514/0xb70
[  555.757324][T20267]        ret_from_fork_asm+0x1a/0x30
[  555.763893][T20267] 
[  555.763893][T20267] -> #6 (cpu_hotplug_lock){++++}-{0:0}:
[  555.773769][T20267]        cpus_read_lock+0x42/0x160
[  555.780326][T20267]        static_key_slow_inc+0x12/0x30
[  555.787589][T20267]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  555.795877][T20267]        nbd_genl_foreach_sock+0x265/0x450
[  555.804433][T20267]        nbd_genl_reconfigure+0xbbb/0x1040
[  555.811514][T20267]        genl_family_rcv_msg_doit+0x233/0x340
[  555.819085][T20267]        genl_rcv_msg+0x614/0x7a0
[  555.824511][T20267]        netlink_rcv_skb+0x226/0x4a0
[  555.831928][T20267]        genl_rcv+0x28/0x40
[  555.836995][T20267]        netlink_unicast+0x7bd/0x940
[  555.843021][T20267]        netlink_sendmsg+0x813/0xb40
[  555.848427][T20267]        sock_sendmsg_nosec+0x14e/0x190
[  555.854355][T20267]        ____sys_sendmsg+0x54e/0x850
[  555.860380][T20267]        ___sys_sendmsg+0x2a5/0x360
[  555.866091][T20267]        __x64_sys_sendmsg+0x1b1/0x290
[  555.871876][T20267]        do_syscall_64+0x166/0x520
[  555.878087][T20267]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.884762][T20267] 
[  555.884762][T20267] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  555.893958][T20267]        __mutex_lock+0x19d/0x1550
[  555.902333][T20267]        nbd_queue_rq+0x373/0xff0
[  555.909234][T20267]        blk_mq_dispatch_rq_list+0x499/0x1990
[  555.916544][T20267]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  555.927637][T20267]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  555.934817][T20267]        blk_mq_run_work_fn+0x16c/0x300
[  555.943795][T20267]        process_scheduled_works+0xc3d/0x1630
[  555.951241][T20267]        worker_thread+0xa47/0xfb0
[  555.957434][T20267]        kthread+0x38b/0x480
[  555.963390][T20267]        ret_from_fork+0x514/0xb70
[  555.968554][T20267]        ret_from_fork_asm+0x1a/0x30
[  555.974037][T20267] 
[  555.974037][T20267] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  555.982828][T20267]        __mutex_lock+0x19d/0x1550
[  555.990377][T20267]        nbd_queue_rq+0xc1/0xff0
[  555.995698][T20267]        blk_mq_dispatch_rq_list+0x499/0x1990
[  556.002697][T20267]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  556.012788][T20267]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  556.020830][T20267]        blk_mq_run_work_fn+0x16c/0x300
[  556.028765][T20267]        process_scheduled_works+0xc3d/0x1630
[  556.036503][T20267]        worker_thread+0xa47/0xfb0
[  556.043319][T20267]        kthread+0x38b/0x480
[  556.048375][T20267]        ret_from_fork+0x514/0xb70
[  556.054814][T20267]        ret_from_fork_asm+0x1a/0x30
[  556.060758][T20267] 
[  556.060758][T20267] -> #3 (set->srcu){.+.+}-{0:0}:
[  556.069206][T20267]        __synchronize_srcu+0xc9/0x2f0
[  556.076210][T20267]        elevator_switch+0x1e8/0x7b0
[  556.082335][T20267]        elevator_change+0x2fa/0x480
[  556.088453][T20267]        elevator_set_default+0x375/0x440
[  556.095981][T20267]        blk_register_queue+0x3f3/0x4e0
[  556.102461][T20267]        __add_disk+0x6b8/0xdb0
[  556.108063][T20267]        add_disk_fwnode+0x100/0x3a0
[  556.114011][T20267]        nbd_dev_add+0x733/0xb60
[  556.119925][T20267]        nbd_init+0x168/0x1f0
[  556.125032][T20267]        do_one_initcall+0x250/0x870
[  556.130615][T20267]        do_initcall_level+0x10a/0x1a0
[  556.136849][T20267]        do_initcalls+0x59/0xa0
[  556.141706][T20267]        kernel_init_freeable+0x29d/0x3e0
[  556.148304][T20267]        kernel_init+0x22/0x1d0
[  556.153514][T20267]        ret_from_fork+0x514/0xb70
[  556.159269][T20267]        ret_from_fork_asm+0x1a/0x30
[  556.164769][T20267] 
[  556.164769][T20267] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  556.175144][T20267]        __mutex_lock+0x19d/0x1550
[  556.181182][T20267]        elevator_change+0x1af/0x480
[  556.187305][T20267]        elevator_set_none+0xb5/0x140
[  556.194763][T20267]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  556.203969][T20267]        nbd_start_device+0x189/0xb30
[  556.211044][T20267]        nbd_genl_connect+0x167d/0x1cd0
[  556.216807][T20267]        genl_family_rcv_msg_doit+0x233/0x340
[  556.223698][T20267]        genl_rcv_msg+0x614/0x7a0
[  556.229680][T20267]        netlink_rcv_skb+0x226/0x4a0
[  556.236667][T20267]        genl_rcv+0x28/0x40
[  556.241284][T20267]        netlink_unicast+0x7bd/0x940
[  556.247295][T20267]        netlink_sendmsg+0x813/0xb40
[  556.253215][T20267]        sock_sendmsg_nosec+0x14e/0x190
[  556.259166][T20267]        ____sys_sendmsg+0x54e/0x850
[  556.264953][T20267]        ___sys_sendmsg+0x2a5/0x360
[  556.270710][T20267]        __x64_sys_sendmsg+0x1b1/0x290
[  556.276382][T20267]        do_syscall_64+0x166/0x520
[  556.282053][T20267]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.290003][T20267] 
[  556.290003][T20267] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  556.299347][T20267]        blk_alloc_queue+0x544/0x690
[  556.306151][T20267]        __blk_mq_alloc_disk+0x194/0x390
[  556.313411][T20267]        nbd_dev_add+0x494/0xb60
[  556.320428][T20267]        nbd_init+0x168/0x1f0
[  556.326044][T20267]        do_one_initcall+0x250/0x870
[  556.331810][T20267]        do_initcall_level+0x10a/0x1a0
[  556.337822][T20267]        do_initcalls+0x59/0xa0
[  556.343755][T20267]        kernel_init_freeable+0x29d/0x3e0
[  556.350193][T20267]        kernel_init+0x22/0x1d0
[  556.355234][T20267]        ret_from_fork+0x514/0xb70
[  556.361099][T20267]        ret_from_fork_asm+0x1a/0x30
[  556.367045][T20267] 
[  556.367045][T20267] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  556.375180][T20267]        __lock_acquire+0x164c/0x2de0
[  556.381103][T20267]        lock_acquire+0x115/0x350
[  556.386671][T20267]        fs_reclaim_acquire+0x71/0x100
[  556.392849][T20267]        kmem_cache_alloc_node_noprof+0x5f/0x610
[  556.399746][T20267]        __alloc_skb+0x1db/0x7a0
[  556.405776][T20267]        alloc_uevent_skb+0x7d/0x230
[  556.412552][T20267]        kobject_uevent_net_broadcast+0x2fa/0x560
[  556.419892][T20267]        kobject_uevent_env+0x566/0x9e0
[  556.425937][T20267]        led_trigger_set+0x708/0x940
[  556.431340][T20267]        led_classdev_unregister+0xa8/0x280
[  556.439040][T20267]        input_leds_disconnect+0x96/0x140
[  556.444804][T20267]        __input_unregister_device+0x356/0x650
[  556.452092][T20267]        input_unregister_device+0x9b/0x100
[  556.458733][T20267]        hidp_session_remove+0x181/0x2b0
[  556.464661][T20267]        l2cap_unregister_user+0x145/0x160
[  556.471204][T20267]        hidp_session_unregister_conn+0x8b/0xc0
[  556.478357][T20267]        hidp_session_thread+0x399/0x400
[  556.484813][T20267]        kthread+0x38b/0x480
[  556.489608][T20267]        ret_from_fork+0x514/0xb70
[  556.495653][T20267]        ret_from_fork_asm+0x1a/0x30
[  556.503748][T20267] 
[  556.503748][T20267] other info that might help us debug this:
[  556.503748][T20267] 
[  556.516753][T20267] Chain exists of:
[  556.516753][T20267]   fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex
[  556.516753][T20267] 
[  556.532891][T20267]  Possible unsafe locking scenario:
[  556.532891][T20267] 
[  556.540824][T20267]        CPU0                    CPU1
[  556.546999][T20267]        ----                    ----
[  556.553014][T20267]   lock(uevent_sock_mutex);
[  556.557840][T20267]                                lock(cpuhp_state-up);
[  556.565943][T20267]                                lock(uevent_sock_mutex);
[  556.573962][T20267]   lock(fs_reclaim);
[  556.578685][T20267] 
[  556.578685][T20267]  *** DEADLOCK ***
[  556.578685][T20267] 
[  556.588639][T20267] locks held by khidpd_00010003/20267: 5, last CPU#0:
[  556.596127][T20267]  #0: ffff88802907aaf8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_unregister_user+0x35/0x160
[  556.607413][T20267]  #1: ffffffff903f9f88 (hidp_session_sem){++++}-{4:4}, at: hidp_session_remove+0x2c/0x2b0
[  556.619828][T20267]  #2: ffffffff8fcc8a40 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x2d8/0x650
[  556.632159][T20267]  #3: ffff888068878210 (&led_cdev->trigger_lock){+.+.}-{4:4}, at: led_classdev_unregister+0x75/0x280
[  556.645063][T20267]  #4: ffffffff905f3240 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560
[  556.657737][T20267] 
[  556.657737][T20267] stack backtrace:
[  556.664385][T20267] CPU: 0 UID: 0 PID: 20267 Comm: khidpd_00010003 Not tainted syzkaller #0 PREEMPT(full) 
[  556.674489][T20267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  556.685466][T20267] Call Trace:
[  556.689080][T20267]  <TASK>
[  556.693289][T20267]  dump_stack_lvl+0xe8/0x150
[  556.699316][T20267]  print_circular_bug+0x2e2/0x300
[  556.705541][T20267]  check_noncircular+0x12f/0x150
[  556.711487][T20267]  __lock_acquire+0x164c/0x2de0
[  556.717547][T20267]  ? __lock_acquire+0x1511/0x2de0
[  556.723435][T20267]  lock_acquire+0x115/0x350
[  556.732091][T20267]  ? kmem_cache_alloc_node_noprof+0x5f/0x610
[  556.740127][T20267]  ? lock_acquire+0x115/0x350
[  556.746981][T20267]  ? __alloc_skb+0x1db/0x7a0
[  556.751821][T20267]  fs_reclaim_acquire+0x71/0x100
[  556.759494][T20267]  ? kmem_cache_alloc_node_noprof+0x5f/0x610
[  556.768082][T20267]  kmem_cache_alloc_node_noprof+0x5f/0x610
[  556.776034][T20267]  ? __alloc_skb+0x18d/0x7a0
[  556.780952][T20267]  ? __alloc_skb+0x1db/0x7a0
[  556.786213][T20267]  __alloc_skb+0x1db/0x7a0
[  556.790968][T20267]  alloc_uevent_skb+0x7d/0x230
[  556.796412][T20267]  kobject_uevent_net_broadcast+0x2fa/0x560
[  556.803576][T20267]  kobject_uevent_env+0x566/0x9e0
[  556.809506][T20267]  led_trigger_set+0x708/0x940
[  556.816149][T20267]  ? __pfx_led_trigger_set+0x10/0x10
[  556.821761][T20267]  ? kasan_quarantine_put+0xbb/0x1f0
[  556.827330][T20267]  led_classdev_unregister+0xa8/0x280
[  556.833014][T20267]  input_leds_disconnect+0x96/0x140
[  556.839036][T20267]  __input_unregister_device+0x356/0x650
[  556.848041][T20267]  ? enable_work+0x1fd/0x230
[  556.854408][T20267]  input_unregister_device+0x9b/0x100
[  556.862580][T20267]  hidp_session_remove+0x181/0x2b0
[  556.868728][T20267]  l2cap_unregister_user+0x145/0x160
[  556.876337][T20267]  hidp_session_unregister_conn+0x8b/0xc0
[  556.883574][T20267]  hidp_session_thread+0x399/0x400
[  556.890122][T20267]  ? __pfx_hidp_session_thread+0x10/0x10
[  556.897229][T20267]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  556.906405][T20267]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  556.915846][T20267]  ? __kthread_parkme+0x71/0x1f0
[  556.922389][T20267]  ? __kthread_parkme+0x199/0x1f0
[  556.929132][T20267]  kthread+0x38b/0x480
[  556.934176][T20267]  ? __pfx_hidp_session_thread+0x10/0x10
[  556.943760][T20267]  ? __pfx_kthread+0x10/0x10
[  556.951442][T20267]  ret_from_fork+0x514/0xb70
[  556.957975][T20267]  ? __pfx_ret_from_fork+0x10/0x10
[  556.964634][T20267]  ? __switch_to+0xc89/0x1420
[  556.970495][T20267]  ? __pfx_kthread+0x10/0x10
[  556.976433][T20267]  ret_from_fork_asm+0x1a/0x30
[  556.982480][T20267]  </TASK>
[  557.000988][T20498] netlink: 'syz.4.3637': attribute type 28 has an invalid length.
[  557.001016][T20498] netlink: 'syz.4.3637': attribute type 3 has an invalid length.
[  557.001028][T20498] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3637'.
[  557.003051][T20498] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  557.093183][T16936] tipc: Left network mode
[  557.356239][T16903] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  557.474278][T16936] veth1_to_team: left promiscuous mode
[  557.474867][T16936] veth0_to_team: left promiscuous mode
[  557.492478][T16936] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  557.492502][T16936] batman_adv: batadv0: Removing interface: batadv_slave_0
[  557.493600][T16936] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  557.493621][T16936] batman_adv: batadv0: Removing interface: batadv_slave_1
[  557.533830][T16936] veth1_macvtap: left promiscuous mode
[  557.533865][T16936] veth0_macvtap: left promiscuous mode
[  557.533955][T16936] veth1_vlan: left promiscuous mode
[  557.534001][T16936] veth0_vlan: left promiscuous mode
[  557.752207][T16936] team0 (unregistering): Port device team_slave_1 removed
[  557.766095][T16936] team0 (unregistering): Port device team_slave_0 removed
[  558.091779][T16936] IPVS: stop unused estimator thread 0...
[  561.378279][T19740] Bluetooth: hci2: command 0x0406 tx timeout
[  564.434015][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  564.436646][ T1311] net_ratelimit: 60 callbacks suppressed
[  564.436666][ T1311] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[  564.436700][ T1311] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len