last executing test programs:

5.099654701s ago: executing program 4 (id=4674):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)
syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast1, {[@cipso={0x86, 0x2a, 0x3, [{0x2, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @multicast1, @multicast2]}]}}}}}}}, 0x0)
sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
recvfrom(r2, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0xb8}}, 0x40)

4.577569472s ago: executing program 4 (id=4677):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@assoc={0x18, 0x117, 0x4, 0x202}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x30, 0x20000800}, 0x4004040) (async)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24}, 0x24}}, 0x1) (async)
recvmmsg(r3, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000600)=""/97, 0x61}, {&(0x7f0000000680)=""/114, 0x72}], 0x4}, 0x3f}], 0x2, 0x60, 0x0) (async)
socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0}) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) (async)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r3, 0x913e0000) (async)
r9 = openat$cgroup_ro(r8, &(0x7f0000000200)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r9, 0x0) (async)
mmap(&(0x7f00004a1000/0x3000)=nil, 0x3000, 0x1000000, 0x11, r8, 0x631eb000) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r10, 0xb4807000) (async)
r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r7)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
sendmsg$NLBL_MGMT_C_LISTALL(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000", @ANYRES16=r11, @ANYBLOB="819b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) (async)
sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000225bd7000ffdbdf250100000014000500fc000000000000000000000000000001140006000000000000000000000000000000000014000500000000000000000000e300ffff0a01010008000c00020000000800000025000000060001002a0000"], 0x68}, 0x1, 0x0, 0x0, 0x20008009}, 0x4000)
sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@getqdisc={0x3c, 0x26, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0xf}, {0x1, 0x5}, {0x3, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}}, 0x0)

4.339021098s ago: executing program 4 (id=4681):
bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x6, 0x10000, 0x0, 0xffffffffffffffff, 0x3}, 0x50) (async, rerun: 64)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0)
socket$isdn(0x22, 0x2, 0x21) (async, rerun: 32)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 32)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000780)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00', 0x9}, 0x94) (async, rerun: 64)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x3, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
close(0x3)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x300000000000000, 0x0, 0x24048050}, 0x40000)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) (async, rerun: 32)
r9 = socket$inet(0x2, 0x2, 0x1) (rerun: 32)
sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x38}, 0x40010) (async, rerun: 32)
r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0900000005000000fd09000084"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, r11}, 0x38) (async)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x3}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r12 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r12, 0x29, 0xcb, 0x0, 0x15)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r13}, 0x10)

3.635794258s ago: executing program 3 (id=4685):
r0 = socket$inet(0x2, 0x1, 0x0)
close(0x3)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xe}, 0x1c)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r6, 0x0, 0x7fffffffffffffff}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}}, 0x40000)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)

3.146148868s ago: executing program 4 (id=4690):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
unshare(0x24040400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
close(0x3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)

2.906260275s ago: executing program 4 (id=4692):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xffe6, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3", 0x17f}], 0x3}, 0x4)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r8}, 0x10)
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20048000)

2.878260905s ago: executing program 0 (id=4693):
r0 = socket$igmp6(0xa, 0x3, 0x2)
recvfrom$inet6(r0, 0x0, 0x0, 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', <r4=>0x0}) (rerun: 64)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) (async)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) (async)
unshare(0x68040200) (async)
socket$inet(0x2, 0x3, 0x7)
socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
epoll_create1(0x0) (async)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18) (async, rerun: 64)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32)
r7 = socket(0x1e, 0x4, 0x0)
r8 = socket(0x840000000002, 0x3, 0xff)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)={0x60, 0x1403, 0x100, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vxcan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netpci0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x48c0}, 0x881) (async)
sendmmsg$inet(r8, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) (async)
setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r7, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async)
sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async)
setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x0, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0x0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x4}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x2, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0, 0x4}, 0x2}], 0x100) (async)
close(0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2.732112853s ago: executing program 1 (id=4695):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000014000100005ec8e2364d2bb42d"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x200000c0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4030000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000003a00000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x5) (async)
setsockopt$inet6_tcp_int(r3, 0x6, 0x1, &(0x7f0000000080)=0xffffff7e, 0x4)
unshare(0x2c020400)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r4) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async, rerun: 32)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async, rerun: 32)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) (async, rerun: 64)
syz_open_procfs$namespace(0x0, 0x0) (async, rerun: 64)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async, rerun: 64)
bpf$LINK_DETACH(0x22, 0x0, 0x0) (rerun: 64)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async, rerun: 64)
socket$kcm(0xa, 0x5, 0x0) (rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff)

2.652874964s ago: executing program 3 (id=4696):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="24005a8020000180140003000000060006000200010007000120fb"], 0x40}}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003400010000000009ffdbdf2504000080"], 0x14}], 0x1}, 0x0)
bind$vsock_stream(r3, &(0x7f0000000440), 0x10)
listen(r3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'gretap0\x00'})
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0)
connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
shutdown(r5, 0x1)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x107c80, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1}, 0x3fe}], 0x2, 0x2101, 0x0)
write$tun(r8, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000700030200090003000400bbbbbbbbbbbbaaaaaaaaaaaa88a8310081002100884c013be5762b80f63b43abfeee0b37e64deac57c7aa221be4541f3af09785bebd668a1a9e8184e20a00d21f882f8fb7e0d8e23087a7daaac293c12711200ec7182d8e7750ac0a2f45c54e3e71c57f38d13b4bff1874bb0f91092aa1657533ccbcd05977f5b875f4e50fc770cbd00000000000000803eb348f6cd96bf86098fd62199311780dd6f791ec6c5ec37275badff1b3ccd20fe3da80df441f3324faff68a5d839aee4e70e28b"], 0x100)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

2.486000653s ago: executing program 1 (id=4697):
unshare(0x22020400)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='contention_end\x00', r1, 0x0, 0x1000000000005}, 0x18)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r3, 0x9, 0x5, 0x1})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0xf5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x40050)
read(r3, &(0x7f00000002c0)=""/1, 0x1)
ioctl$sock_bt_hci(r3, 0x400448c9, 0x0)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0xec, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}]}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2af}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0xec}, 0x1, 0x0, 0x0, 0x20004040}, 0x40081)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x2c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1402}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20040000)
unshare(0xa000000)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, 0x0, &(0x7f0000000000)=0xffffff63)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2)

2.412135907s ago: executing program 2 (id=4698):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x44002, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r3 = socket(0x8, 0x3, 0x3)
ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000000240)="1aa60fb3fd9511503544e3aa4bbfe809242bd72841e399059de439e7d448290a75456650c421ff8a3091b1c189", 0x2d}, {0x0, 0xfe10}], 0x2}}], 0x1, 0xc0000)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5) (async)
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000816d97990000000000000000"], 0x48) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000816d97990000000000000000"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f0000000340)="9f", &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r9, &(0x7f00000000c0)="afdb030e", &(0x7f0000000ac0)=""/68}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r9, &(0x7f00000000c0)="afdb030e", &(0x7f0000000ac0)=""/68}, 0x20)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xfffffff8, 0x7, 0x48c1, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x10, 0x6e39}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x7fffe, {0x0, 0x0, 0x0, r8, {0x4}, {0xb, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x808, 0x205, 0x1, 0xc}, 0x8, 0xffffffff, 0x5, 0x0, 0x9, 0x8, 0x49, 0xd, 0x1, 0x1, {0x7, 0x3, 0x1000, 0x101, 0xfffffffe, 0x401}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
accept4(r10, 0x0, 0x0, 0x80000)

2.027456707s ago: executing program 2 (id=4699):
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)=@llc={0x1a, 0x300, 0x80, 0x8, 0xc7, 0x1, @random="417b8d2c23e3"}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)="244ba84670caddebd7d37f01060a91de910713c8f1b4ae12972a7f2a3251f4e988f8e4d4940b5e728961e72661aef23f7aa63203d999cd6bf431d4267786bf9b7851ed93e6d4b852b19f6f1e567e36e7d0bf754f214ec39d6a0a7322047b736b1b45f57f8287582883306fa771167eb74f58e44745990b23c57d4d18eebfcb43bb848738f4f318a118dc334e30004b17fce527b2513c175a116b1180788326b5c0837904bf14e601b6d80c67e90e20e2d100b60b01a68b54046e37682e75cd0594d6fe065b5e0111ac6e0cfc706979a0eaf0ec6fd1b9e3e48c9676c258db75dc48", 0xe1}, {&(0x7f0000000180)="1a8f04efe5a64db0dfe8bf8edf58637e8145aafe7a274f0ac48931c9562db96e53e3c07da483d392f5f2d3df557504c20e6563db38c3b318aaa8c43aba8e4d0c74a7c4a659ecad2027ea6d2a2a422731bead75dfed41fab33acce50faaad53a39d7886828eb65252b96d44cb463dd95a9f15b21cc260785a1d3d2ff31f220dd25cad2bb8625c2bcd13ed661d926fd591161a9e", 0x93}], 0x2, &(0x7f0000000280)=[{0x78, 0xff, 0x7, "85c95fa8c84fd07f732bb257d293c095ce3f79d2073a3984b79b0a1c45bb7c24fd2724a4390ea4a6f99a0524679650976c71f738fb7f9aadd0d71c50d15e20c059d530f49fe4a405bd052e13fd6ce44481ff7251756c878f218981eedf5dfc380d"}], 0x78}, 0x44044)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000340), 0x10) (async)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/116, 0x74}], 0x1, 0x0, 0x0, 0x240040c1}, 0x80) (async)
r1 = socket(0x2b, 0x80000, 0x0)
sendto$inet6(r1, &(0x7f00000004c0)="627f64af1bc0fa32ebfe860abfc2e2e1865d1e07d6ee157643699d748c27cf707268705767b2391a9bc5fa533453da9d76470633c62ba9c026a76a86922a727758", 0x41, 0xc00, &(0x7f0000000540)={0xa, 0x4e20, 0x859, @private2, 0x7}, 0x1c) (async)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000580)={'IDLETIMER\x00'}, &(0x7f00000005c0)=0x1e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
clock_gettime(0x0, &(0x7f0000005800)={<r3=>0x0, <r4=>0x0})
recvmmsg$unix(r2, &(0x7f00000056c0)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001900)=[{&(0x7f00000006c0)=""/9, 0x9}, {&(0x7f0000000700)=""/11, 0xb}, {&(0x7f0000000740)=""/212, 0xd4}, {&(0x7f0000000840)=""/162, 0xa2}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x5, &(0x7f0000001980)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000019c0), 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001a40)=""/65, 0x41}, {&(0x7f0000001ac0)=""/82, 0x52}], 0x2, &(0x7f0000001b80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001bc0)=@abs, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001c40)=""/251, 0xfb}, {&(0x7f0000001d40)=""/71, 0x47}], 0x2, &(0x7f0000001e00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [<r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff, 0xffffffffffffffff, <r17=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f00000031c0)=[{&(0x7f0000002000)=""/123, 0x7b}, {&(0x7f0000002080)=""/40, 0x28}, {&(0x7f00000020c0)=""/60, 0x3c}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/164, 0xa4}], 0x5, &(0x7f0000003240)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000003280), 0x6e, &(0x7f0000005640)=[{&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/187, 0xbb}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000053c0)=""/48, 0x30}, {&(0x7f0000005400)=""/166, 0xa6}, {&(0x7f00000054c0)=""/170, 0xaa}, {&(0x7f0000005580)=""/5, 0x5}, {&(0x7f00000055c0)=""/93, 0x5d}], 0x8}}], 0x5, 0x3, &(0x7f0000005840)={r3, r4+10000000})
r18 = syz_genetlink_get_family_id$nl80211(&(0x7f00000058c0), r13)
sendmsg$NL80211_CMD_NEW_KEY(r12, &(0x7f00000059c0)={&(0x7f0000005880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005980)={&(0x7f0000005900)={0x54, r18, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "2d72539989e6394f2b0d7599c9"}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "b972d434"}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040050}, 0x20000001) (async)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r11, 0x8982, &(0x7f0000005a00)={0x0, 'team_slave_1\x00', {0x3}, 0x9}) (async)
syz_emit_ethernet(0x3d, &(0x7f0000005a40)={@random="67c54f67238e", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@mpls_mc={0x8848, {[{0x1, 0x0, 0x1}, {0xcb, 0x0, 0x1}, {0x1000}, {0x6, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0xff}, {0x47}, {0x400}, {0x4e88}], @generic="605b0972379a4c6d779f0f"}}}}, &(0x7f0000005a80)={0x1, 0x2, [0xcdd, 0x6f6, 0xbe, 0xedb]}) (async)
r19 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$int_in(r19, 0x0, &(0x7f0000005ac0)=0x2) (async)
setsockopt(r16, 0x8000000, 0x5, &(0x7f0000005b00)="20c94646c61d2c51c1984f9c4e71659a81ddf9ac7d2b131d4caa6fc2344d030652cf1e6df56d18363d35ed046b61be8011024a66d12af9c86488c80cddaabbf6ecb25e089d7f5f0d5373c296ddbb0782cb0c5e937c71c9adadbcedf7c86324ad0d3e3504d676df94e23db31c0731d914194405d58efc420128b888ea5d469bff1aa78a3335990d663df54ae7ef6bf739c74cd7cba79031af7f7dc79cf7f336f1f991600fbf422215488e5f22250feb0b2080267e6ea8ddb7d5c19ef5f44eccb8e40ef149ab0ea84ed99792552615164deb3ebca2920b0df66abda09dff67c9f394", 0xe1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r8, 0xc400941d, &(0x7f0000005c00)={<r20=>0x0, 0x0, 0x9, 0x1}) (async)
ioctl$BTRFS_IOC_DEV_INFO(r14, 0xd000941e, &(0x7f0000006000)={<r21=>0x0, "c5acaec0f6ef98d2263033f7f22adbc6"})
ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000007000)={<r22=>0x0, 0x8, 0x7})
ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000007400)={0x8, 0x3, {0x101, @struct={0x69, 0x2}, r20, 0x10, 0x6, 0x3, 0x5, 0x9, 0x0, @struct={0x8, 0xa9b}, 0x4, 0x7, [0xfff, 0x6, 0x101, 0x141, 0x1ff, 0x81]}, {0x1000, @usage=0x5, r21, 0x8000, 0xfff, 0x9, 0x9, 0x4, 0x9, @struct={0xe, 0x2cfcdde9}, 0x989, 0xd8a, [0x8, 0x7fffffff, 0xfffffffffffffe01, 0x1df, 0x0, 0x1]}, {0x0, @struct={0x200, 0x800}, r22, 0x4, 0x76a62d85, 0x2, 0xfffffffffffffffb, 0x7, 0x4ad, @usage=0x2, 0xb, 0x10001, [0x8000000000000000, 0xfd, 0x5, 0x7, 0x5, 0x1]}, {0xfffffffffffffffc, 0x40, 0x6}}) (async)
getpeername$ax25(r7, &(0x7f0000007800)={{0x3, @default}, [@null, @rose, @default, @netrom, @default, @netrom, @remote, @default]}, &(0x7f0000007880)=0x48)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r15, 0x84, 0x71, &(0x7f00000078c0)={<r23=>0x0, 0x8}, &(0x7f0000007900)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r10, 0x84, 0x23, &(0x7f0000007940)={r23, 0x5}, 0x8)
setsockopt$inet_sctp_SCTP_EVENTS(r16, 0x84, 0xb, &(0x7f0000007980)={0xf0, 0x7, 0x40, 0x2, 0x4, 0xc, 0xff, 0x7, 0x6, 0x9, 0xd, 0x4, 0x2, 0xf}, 0xe) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r24 = accept(r17, &(0x7f00000079c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000007a40)=0x80) (async)
clock_gettime(0x0, &(0x7f00000083c0)={<r25=>0x0, <r26=>0x0})
recvmmsg$unix(r24, &(0x7f0000008340)=[{{&(0x7f0000007a80), 0x6e, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/240, 0xf0}, {&(0x7f0000007c00)=""/107, 0x6b}, {&(0x7f0000007c80)=""/212, 0xd4}], 0x3, &(0x7f0000007dc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000007ec0), 0x6e, &(0x7f0000008240)=[{&(0x7f0000007f40)=""/150, 0x96}, {&(0x7f0000008000)=""/135, 0x87}, {&(0x7f00000080c0)=""/94, 0x5e}, {&(0x7f0000008140)=""/253, 0xfd}], 0x4, &(0x7f0000008280)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90}}], 0x2, 0x60, &(0x7f0000008400)={r25, r26+10000000}) (async)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r9, 0x28, 0x0, &(0x7f0000008440)=0x9, 0x8)

1.945301499s ago: executing program 2 (id=4700):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x2a, 0x0, 0xffffffffffffffff, 0x37}, 0x24)

1.684100699s ago: executing program 2 (id=4701):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000007000000ebffffff00"/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000004040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0)

1.683685569s ago: executing program 3 (id=4702):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
unshare(0x24040400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)

1.624313869s ago: executing program 3 (id=4703):
socket$igmp(0x2, 0x3, 0x2) (async)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4)
socket$netlink(0x10, 0x3, 0x1) (async)
socket$netlink(0x10, 0x3, 0x1)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0x2003206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010104}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async)
bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000003a80)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {0x0}, &(0x7f0000003a00)=[{&(0x7f00000016c0)=""/96, 0x60}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x2, 0x39, 0x2}}], 0x48, 0x4000000}, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r3, 0x1, 0x70bd6c, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40)
r6 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800)
sendto$netrom(r6, &(0x7f0000000140)="ff12740ec8984c5217906d7d10dd90b2325b4e2562ae46ee497e1edc5d321b4d325ca2f1d2e2980473b04b24ec5560f92f499c6a29e50740c3d66c92e8785a4d98e4e3b408f63baf3c70c7cd7b077116eef562bc8eec63263adff5eec5330af5372fa56b29993980e7fbc3cea6645db82b00ab171659e9fa13df0f8f3cfb8ab63423108623aa8c31dcbcb6dd36e913ee0ee26622760b9cf73c1086318912e41f79655a37c9eed3621e551eb3e7c28798b7901270ab5372c1e7b3cc5a1bd5d5bc", 0xc0, 0x40000, 0x0, 0x0)

1.567650947s ago: executing program 2 (id=4704):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850041000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$kcm(0x2, 0xa, 0x2)

1.473681908s ago: executing program 1 (id=4705):
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x4000}, 0xc)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64)
r3 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 64)
socket$vsock_stream(0x28, 0x1, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async, rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) (rerun: 32)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r5 = accept4(r3, 0x0, 0x0, 0x800)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', <r6=>0x0, 0x29, 0x5, 0x0, 0x2, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x1, 0x1, 0xffffffff}})
getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000680)=<r7=>0x0, &(0x7f00000006c0)=0x4) (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'syztnl1\x00', <r8=>0x0, 0x29, 0x4, 0x4, 0x9, 0x18, @dev={0xfe, 0x80, '\x00', 0x13}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x7, 0x3ff, 0xffffffff}}) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000007c0)={'wg1\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000a00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)={0x194, 0x0, 0x14, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async, rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r10 = socket(0x1e, 0x4, 0x0) (rerun: 32)
connect$tipc(r10, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async, rerun: 32)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) (async, rerun: 32)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 32)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x408c0, 0x0, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) (async, rerun: 64)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) (async, rerun: 64)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0)

1.196047838s ago: executing program 1 (id=4706):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c)
setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000200)="95de66096bcc111518d3640f969ee0f145ae77ab", 0x14)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async)
socket$inet6(0xa, 0x3, 0x3c) (async)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) (async)
setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000200)="95de66096bcc111518d3640f969ee0f145ae77ab", 0x14) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) (async)

1.195004512s ago: executing program 3 (id=4707):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_open_procfs$namespace(0x0, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x4000) (async)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0xbe, &(0x7f00000004c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x73, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0xc, "c8f46976e79e56c7a95e"}, {0x7, 0x2}]}, @cipso={0x86, 0xa, 0x2, [{0x1, 0x4, "7f36"}]}]}}}}}}}, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async)
socket(0x22, 0x800, 0x3) (async)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
unshare(0x58000880) (async)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000000)={0x0, 0xea60}, 0x10)

1.17704072s ago: executing program 4 (id=4708):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140005"], 0x80}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0)
r3 = socket(0x14, 0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x61d1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140fa"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x6b, 0x29, 0x0, @loopback, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x7, 0x40, 0x0, 0xffffff4c, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0xf, 0x29, 0x0, @local, @local}}}})

1.067192931s ago: executing program 1 (id=4709):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000dc0)="d080e8ebeba9344538a52a0d80e0abe44371281fd6b955ea0a7f5697f069e33c7f6448aa98a6017d2aa4b5066dbc25944786320229acab3e188a8d6c11a5bf3999c747fedab970bd7eb13903f06f5fe4cbd9b9fe42c6e939e9fc16f84936122a0964d07aed39e925f3acbb9b9062623f5b71a202ce3d3ca3f499c3b6d9280ab2f522451da142d8c7577ae95d501b8afd91e3879e674b821f5e7476958220932d42ce1907bd0c352a9c02c89c5af59c453538e21f0c188d762673636993612e0d", 0xc0}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18020000fdffffff00000000000000008500160028000000002a0000009500000000000000641a65c9abb238a1b42140b0f96958cf4d3d63c5145e1447fea0f59d601a37121895000000de62fb1c850afc76f12432ca9670f17646a2ce737b1e1616044f0a3eed314dba041d7165c5418edb92be8c8696e7af9dfbecaec3b896ed8d5d9c676e472bd21613837d8a2c50c8acd8b5ed6b88"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1c0000001800fe0100000020be5f7feecf91236784cdc05944581eb9d293911540beb9cc57b3e38c117bd0d0f03a2aec14ddc03fdc1f19490163e8446a3c1ff38c453c31bb0ef948012f139ce3f3a896311acead53dda69a8712d88eb0abe956f5a68fe523b0dd1709d6e7d8897340a575f7ecf7bf33bfc98ff4818499235413cab388d3d6a78cd752614d"], 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x1a, 0x0, &(0x7f00000004c0)="e0b9547ed387dbe9abc89b6f5becd437191fe68fc32262a940c34378940d24db1a4665abc18e423627bfc6f78e175cccbf6dd0ec42efd43c", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7cb6c7f2", @ANYRES16=<r6=>r4, @ANYBLOB="0100000010651fbe347b2c2b00000c00f17c4f8201"], 0x20}}, 0x4001)
r7 = socket(0x80000000000000a, 0x3, 0xd)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={<r10=>0x0, <r11=>0x0}, &(0x7f0000000080)=0xc)
r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="efff0b00fffffcdbdf250847700100000800", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000002e0001000000000000000000080000003aebc6ab3aafcbec6858eda9bbcb4dd0fc73872938583ab2f767c17eb1360822ed70b9485e0188e911c5520b36371a97d1940ed05e153a4da244ea9d9e29a02382c3f7f49ccc3f6fc4ad1c918aa91d55ef47fa72bb2f01894b002a49867d7c3d7c0633127ff1be52dd98381d06351277af99ec1463b54e101e704389ba9019f7fcd02bfe52725da891b6c7aa90ea840750c23c08a32df2df4cf54d7de97f9af60c58dbf818ee93644d", @ANYRES32=r11, @ANYBLOB="0b000080976b640868603000150001803fb3ebf5f9cbd1185eeba9c895d0e5001a000000"], 0x3c}], 0x1}, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="680100001700000328bd7000ffdbdf250a010100000000000000000000000000000004d46c000000ac14141e000000000000000000000000ac1e0101000000000000000000000000fe80000000000000000002000000000e4e2100014e2100050200800004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r6, @ANYRES16=r10, @ANYRES32=r11, @ANYBLOB="a00f0000000000000600000000000000c19a000000000000e200000000000000060000000000000003000000000000000400000000000000010000000000000036000000000000006e06000000000000000000000000000002000000000000000b000000b66b6e00020101f7000000003d0f000009000000ffffffff2abd70001c000400f9ff4e244e240000fe800000000000000000000000000037240009008304000000000000010000000000000000000000000000000200000000000000"], 0x168}, 0x1, 0x0, 0x0, 0x200000d4}, 0x10)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, 0x0, &(0x7f0000000100))
r14 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r14, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={<r15=>0x0}, &(0x7f0000000000)=0x8)
r16 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r16, 0x84, 0x1f, &(0x7f0000000580)={r15, @in6={{0xa, 0x4e24, 0xb, @empty, 0x4}}, 0x0, 0x1}, &(0x7f0000000640)=0x90)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000340)={0x7fff, 0xe, 0x8004, 0x0, 0xf7, 0x8001, 0x683, 0x0, r15}, &(0x7f0000000380)=0x20)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x7, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x2b8, 0x2e8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0x0, 0xffffff00, 0xffffff00], @ipv4=@multicast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], @ipv4=@private=0xa010100, [0xff, 0xff000000, 0x0, 0xffffff00], @ipv4=@local, [0xff000000, 0x0, 0xff], 0xffffffff, 0x3, 0x3b, 0x4e21, 0x4e23, 0x4e23, 0x4e21, 0x122, 0x300}, 0x1, 0x8f}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x4, 0x2, 0x1000, 0x6, 0x40000003}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="aa1953d3", 0x4}, {&(0x7f0000000400)="5bc85911edc5b467f28f00be364753a1795adbd5a59dfa2698276f82db7cce775e09ffe51e10acac4492ffd4f6e94e94eeb1fc1463ca6d21bcee49bbb1d442102961020af792eb7d79b08f310666bd416fb3e94c7b6bfe3948b16cb99b0ac892c65bd3ac58eecdd6f98b6475e292834c03620fdda1e9c2c42b08ad5037c6e7", 0x7f}, {&(0x7f0000000500)="10af20e70437d6a2", 0x8}], 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x700, 0x2, 0x0)

1.016125286s ago: executing program 3 (id=4710):
socket$unix(0x1, 0x1, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x4006000)
socket$caif_seqpacket(0x25, 0x5, 0x2)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@loopback, @private, <r7=>0x0}, &(0x7f00000002c0)=0xc)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
r9 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r9, 0x110, 0x5, &(0x7f0000000440)=[0x2, 0x2], 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000200)={'vxcan0\x00', <r10=>0x0})
connect$can_bcm(r8, &(0x7f0000000140)={0x1d, r10}, 0x10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0xf, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7, 0x20}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x4044885)
sendmsg$TEAM_CMD_NOOP(r6, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="cc010000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf250000000008000100", @ANYRES32=r7, @ANYBLOB="b00102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040022720000080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040007000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=r10, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000080000000000000000050003000e000000080004000200000008000600", @ANYRES32=r13, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040000f8ffff40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ffffffff08000600", @ANYRES32=0x0, @ANYBLOB], 0x1cc}, 0x1, 0x0, 0x0, 0x44}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$nl_route(0x10, 0x3, 0x0)

962.344307ms ago: executing program 0 (id=4711):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x2a, 0x0, 0xffffffffffffffff, 0x37}, 0x24)

829.733352ms ago: executing program 0 (id=4712):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
recvmmsg$unix(r0, &(0x7f0000006840)=[{{&(0x7f0000000600), 0x6e, &(0x7f0000000980)=[{&(0x7f0000000680)=""/125, 0x7d}, {&(0x7f0000000700)=""/152, 0x98}, {&(0x7f00000007c0)=""/84, 0x54}, {&(0x7f0000000840)=""/154, 0x9a}, {&(0x7f0000000900)=""/97, 0x61}], 0x5}}, {{&(0x7f0000000a00)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a80)=""/46, 0x2e}, {&(0x7f0000000ac0)=""/64, 0x40}, {&(0x7f0000000f80)=""/55, 0x37}], 0x3, &(0x7f0000000b80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000c00)=@abs, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/107, 0x6b}], 0x1, &(0x7f0000000d40)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}}, {{&(0x7f0000000e80), 0x6e, &(0x7f0000001000)=[{&(0x7f0000006a80)=""/128, 0x80}, {&(0x7f0000000f80)}, {&(0x7f0000000fc0)}], 0x3, &(0x7f0000001040)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000001180), 0x6e, &(0x7f00000027c0)=[{&(0x7f0000001200)=""/139, 0x8b}, {&(0x7f00000012c0)=""/7, 0x7}, {&(0x7f0000001300)=""/166, 0xa6}, {&(0x7f00000013c0)=""/241, 0xf1}, {&(0x7f00000014c0)=""/230, 0xe6}, {&(0x7f00000015c0)=""/123, 0x7b}, {&(0x7f0000001640)}, {&(0x7f0000001680)=""/178, 0xb2}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/99, 0x63}], 0xa, &(0x7f0000002880)}}, {{&(0x7f00000028c0), 0x6e, &(0x7f0000002a00)=[{&(0x7f0000002940)=""/9, 0x9}, {&(0x7f0000002980)=""/124, 0x7c}], 0x2, &(0x7f0000002a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f0000002b80), 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002c00)=""/98, 0x62}], 0x1, &(0x7f0000002cc0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f0000002e00), 0x6e, &(0x7f0000003280)=[{&(0x7f0000002e80)=""/190, 0xbe}, {&(0x7f0000002f40)=""/60, 0x3c}, {&(0x7f0000002f80)=""/204, 0xcc}, {&(0x7f0000003080)=""/116, 0x74}, {&(0x7f0000003100)=""/135, 0x87}, {&(0x7f00000031c0)=""/33, 0x21}, {&(0x7f0000003200)=""/128, 0x80}], 0x7, &(0x7f0000003300)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{0x0, 0x0, &(0x7f0000006680)=[{&(0x7f0000003380)=""/113, 0x71}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/179, 0xb3}, {&(0x7f00000044c0)=""/165, 0xa5}, {&(0x7f0000004580)=""/4096, 0x1000}, {&(0x7f0000005580)=""/201, 0xc9}, {&(0x7f0000005680)=""/4096, 0x1000}], 0x7, &(0x7f0000006700)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}], 0x9, 0x40000000, 0x0) (async)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000040)={0x2, 0xfffffffffffffffe, 0xee, &(0x7f0000000480)=""/238})
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x60, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x40010) (async)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r5=>0x0})
bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x401, 0x70bd28, 0x3, {0x0, 0x0, 0x0, r1, 0x0, 0x1c05}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x3}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4040000)

532.038167ms ago: executing program 0 (id=4713):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
unshare(0x24040400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)

526.598346ms ago: executing program 2 (id=4714):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x2000000000000019, &(0x7f00000038c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e27}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) (async)
sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e27}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200000000aa00000000ada4000000"], 0x5c}}, 0x0)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0x0, 0xc}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11}, {0x4, 0x1b}}]}]}, 0x50}}, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="130000dfffffffffffff2d00000008000300", @ANYRES32=r10, @ANYBLOB="0a00340002020202020200000800350000000000080026006c090000"], 0x38}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000300)=ANY=[@ANYBLOB="508000000802110000010802110000000803110000000000841940d26f6a1d000000000064000180"], 0x28)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x1e) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x1e)

187.375794ms ago: executing program 0 (id=4715):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x120, 0x6c, 0x0, 0x0, 0x0, 0x200, 0x258, 0x258, 0x200, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [0xff000000], [], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@inet=@udplite={{0x30}, {[0x4e21, 0x4e24], [0x4e24, 0x4e23], 0x3}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xff000000], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x330)

79.402715ms ago: executing program 0 (id=4716):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x454}, 0x1, 0x0, 0x0, 0x40004}, 0x80)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYBLOB="f890c752", @ANYRES16=r2, @ANYBLOB="010828bc7000fedbdf250b00000008000300", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000100000800090001ac0f000a0006000802110000010000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00'})
getsockname$l2tp(r4, &(0x7f0000000300)={0x2, 0x0, @dev}, &(0x7f0000000340)=0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='contention_end\x00', r7}, 0x18)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r9, 0xb0b}, 0x14}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r11 = socket$netlink(0x10, 0x3, 0x0)
writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1)
r12 = socket(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000000000001400410000000180140002046e65746465767369071c00d1e7000000"], 0x34}}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000080)}], 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850)
sendmmsg$alg(r12, &(0x7f0000000140), 0x4924b68, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711015000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)

0s ago: executing program 1 (id=4717):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socket(0x2a, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, 0x0, 0x0)
accept4(r4, 0x0, 0x0, 0x80000)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0)
unshare(0x62040200)
ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xc, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xcf, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]})

kernel console output (not intermixed with test programs):

z.4.3453 (pid 18729) Use of struct sctp_assoc_value in delayed_ack socket option.
[  494.615915][T18729] Use struct sctp_sack_info instead
[  494.626701][ T6520] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  494.675812][ T6512] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  494.724122][ T6512] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  495.005403][T18739] netlink: 'syz.2.3455': attribute type 8 has an invalid length.
[  495.091353][T18743] netlink: 'syz.2.3455': attribute type 9 has an invalid length.
[  495.121460][T18743] netlink: 'syz.2.3455': attribute type 7 has an invalid length.
[  495.148722][T18743] netlink: 'syz.2.3455': attribute type 8 has an invalid length.
[  495.768066][ T7478] dvmrp0 (unregistering): left allmulticast mode
[  495.820650][ T7478] dvmrp6 (unregistering): left allmulticast mode
[  495.871836][ T7478] bond0 (unregistering): (slave geneve2): Releasing backup interface
[  495.990084][T18759] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  496.079984][T18762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3462'.
[  496.090201][T18762] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  496.357779][ T5835] Bluetooth: hci3: command tx timeout
[  496.572708][ T7478] bond5 (unregistering): (slave bridge10): Releasing active interface
[  497.035908][ T7478] bond1 (unregistering): (slave veth7): Releasing active interface
[  497.050003][ T7478] bond1 (unregistering): Released all slaves
[  497.075618][ T7478] bond2 (unregistering): Released all slaves
[  497.273062][ T7478] bond3 (unregistering): Released all slaves
[  497.288676][ T7478] bond0 (unregistering): Released all slaves
[  497.452990][ T7478] bond4 (unregistering): (slave veth0_to_hsr): Releasing active interface
[  497.464816][ T7478] bond4 (unregistering): Released all slaves
[  497.481340][ T7478] bond5 (unregistering): Released all slaves
[  497.516196][T18750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3458'.
[  497.706672][ T7478] [†’Ì: left promiscuous mode
[  497.783894][ T7478] tipc: Disabling bearer <udp:syz2>
[  497.817474][ T7478] tipc: Left network mode
[  498.035870][T18791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3466'.
[  498.220657][T18716] chnl_net:caif_netlink_parms(): no params data found
[  498.324992][ T7478] mac80211_hwsim hwsim4 wlan1 (unregistering): left promiscuous mode
[  498.437386][ T5835] Bluetooth: hci3: command tx timeout
[  498.578729][T18810] netlink: 'syz.4.3473': attribute type 1 has an invalid length.
[  498.628729][T18810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3473'.
[  498.702397][T18716] bridge0: port 1(bridge_slave_0) entered blocking state
[  498.710325][T18716] bridge0: port 1(bridge_slave_0) entered disabled state
[  498.719366][T18716] bridge_slave_0: entered allmulticast mode
[  498.742024][T18810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3473'.
[  498.772414][T18716] bridge_slave_0: entered promiscuous mode
[  499.002426][T18716] bridge0: port 2(bridge_slave_1) entered blocking state
[  499.028800][T18716] bridge0: port 2(bridge_slave_1) entered disabled state
[  499.059455][T18716] bridge_slave_1: entered allmulticast mode
[  499.083943][T18716] bridge_slave_1: entered promiscuous mode
[  499.168927][ T7478] hsr_slave_0: left promiscuous mode
[  499.175575][ T7478] hsr_slave_1: left promiscuous mode
[  499.182672][ T7478] batman_adv: batadv0: Removing interface: macvtap0
[  499.192374][ T7478] batman_adv: batadv0: Removing interface: dummy0
[  499.504752][T18824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3476'.
[  500.365937][T18826] veth5: entered promiscuous mode
[  500.388381][T18830] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3477'.
[  500.408474][T18716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  500.472117][T18830] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3477'.
[  500.485875][T18716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  500.520211][ T5835] Bluetooth: hci3: command tx timeout
[  500.596058][T18837] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3479'.
[  500.663090][T18844] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3481'.
[  500.714158][T18716] team0: Port device team_slave_0 added
[  500.738453][T18716] team0: Port device team_slave_1 added
[  500.818679][T18716] batman_adv: batadv0: Adding interface: batadv_slave_0
[  500.831988][T18716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  500.861441][T18716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  500.875450][T18716] batman_adv: batadv0: Adding interface: batadv_slave_1
[  500.883980][T18716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  500.911227][T18716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  500.962184][T18854] pim6reg: entered allmulticast mode
[  500.996753][T18851] pim6reg: left allmulticast mode
[  501.114028][T18716] hsr_slave_0: entered promiscuous mode
[  501.126657][T18716] hsr_slave_1: entered promiscuous mode
[  501.184265][ T7478] IPVS: stop unused estimator thread 0...
[  501.326344][T18857] delete_channel: no stack
[  501.583207][T18867] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3486'.
[  501.810750][T18874] xt_hashlimit: size too large, truncated to 1048576
[  501.907140][T18716] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.134046][T18716] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.247733][T18716] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.410946][T18716] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.486682][T18883] nbd: socks must be embedded in a SOCK_ITEM attr
[  502.516118][T18884] nbd: device at index 64 is going down
[  502.598130][ T5835] Bluetooth: hci3: command tx timeout
[  502.739426][T18890] __nla_validate_parse: 2 callbacks suppressed
[  502.739457][T18890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3491'.
[  502.790493][T18716] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  502.854736][T18716] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  502.916196][T18716] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  502.970779][T18716] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  503.065447][T18901] pim6reg: entered allmulticast mode
[  503.083296][T18905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  503.131325][T18897] pim6reg: left allmulticast mode
[  503.454349][T18716] 8021q: adding VLAN 0 to HW filter on device bond0
[  503.526963][T18716] 8021q: adding VLAN 0 to HW filter on device team0
[  503.559664][ T6514] bridge0: port 1(bridge_slave_0) entered blocking state
[  503.567337][ T6514] bridge0: port 1(bridge_slave_0) entered forwarding state
[  503.584937][T18917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3500'.
[  503.612896][ T6514] bridge0: port 2(bridge_slave_1) entered blocking state
[  503.620533][ T6514] bridge0: port 2(bridge_slave_1) entered forwarding state
[  504.168080][T18716] 8021q: adding VLAN 0 to HW filter on device batadv0
[  504.263358][T18939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3507'.
[  504.314457][T18942] xt_CT: No such helper "snmp_trap"
[  504.325102][T18716] veth0_vlan: entered promiscuous mode
[  504.393303][T18939] netlink: 'syz.4.3507': attribute type 10 has an invalid length.
[  504.422768][T18939] team0: Cannot enslave team device to itself
[  504.489434][T18716] veth1_vlan: entered promiscuous mode
[  504.556251][T18716] veth0_macvtap: entered promiscuous mode
[  504.616101][T18716] veth1_macvtap: entered promiscuous mode
[  504.669247][T18716] batman_adv: batadv0: Interface activated: batadv_slave_0
[  504.741305][T18716] batman_adv: batadv0: Interface activated: batadv_slave_1
[  504.809811][ T6512] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  504.837348][ T6512] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  504.838126][T18953] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3510'.
[  504.867701][T18966] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3513'.
[  504.878251][ T6512] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  504.901811][ T6512] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  505.268097][ T6512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  505.286318][ T6512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  505.443075][ T6512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  505.473723][ T6512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  505.578012][T18988] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3518'.
[  506.155434][T19012] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3524'.
[  506.177690][T19012] 1ªX¹¦À: renamed from 
60ªX¹¦À
[  506.206669][T19009] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3524'.
[  506.262170][T19013] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3524'.
[  506.297729][T19012] 1ªX¹¦À: entered allmulticast mode
[  506.303013][T19012] A link change request failed with some changes committed already. Interface 
61ªX¹¦À may have been left with an inconsistent configuration, please check.
[  506.381402][T19017] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3527'.
[  506.827036][T19022] openvswitch: netlink: nsh attr 60 is out of range max 3
[  506.834981][T19022] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  506.914165][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  506.920696][T19031] netlink: 'syz.0.3532': attribute type 12 has an invalid length.
[  506.939699][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  506.949462][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  506.965171][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  506.975259][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  507.798195][ T5829] Bluetooth: hci3: command 0x0405 tx timeout
[  508.012618][T19032] chnl_net:caif_netlink_parms(): no params data found
[  508.193952][T19057] __nla_validate_parse: 2 callbacks suppressed
[  508.193973][T19057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3537'.
[  508.403013][T19072] sctp: [Deprecated]: syz.4.3540 (pid 19072) Use of struct sctp_assoc_value in delayed_ack socket option.
[  508.403013][T19072] Use struct sctp_sack_info instead
[  508.446461][T19032] bridge0: port 1(bridge_slave_0) entered blocking state
[  508.458715][T19032] bridge0: port 1(bridge_slave_0) entered disabled state
[  508.466598][T19032] bridge_slave_0: entered allmulticast mode
[  508.479967][T19032] bridge_slave_0: entered promiscuous mode
[  508.535669][T19032] bridge0: port 2(bridge_slave_1) entered blocking state
[  508.544905][T19032] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.553046][T19032] bridge_slave_1: entered allmulticast mode
[  508.563820][T19032] bridge_slave_1: entered promiscuous mode
[  508.639444][T19079] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  508.864690][T19032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  508.902146][T19032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  509.071471][T19096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3543'.
[  509.080815][ T5835] Bluetooth: hci2: command tx timeout
[  509.156454][T19032] team0: Port device team_slave_0 added
[  509.252958][T19032] team0: Port device team_slave_1 added
[  509.304522][T19100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3547'.
[  509.368670][T19032] batman_adv: batadv0: Adding interface: batadv_slave_0
[  509.386012][T19032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  509.419495][T19032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  509.469520][T19032] batman_adv: batadv0: Adding interface: batadv_slave_1
[  509.497641][T19032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  509.534817][T19032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  509.698554][T19113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3551'.
[  510.379900][T19032] hsr_slave_0: entered promiscuous mode
[  510.387916][T19032] hsr_slave_1: entered promiscuous mode
[  510.394957][T19032] debugfs: 'hsr0' already exists in 'hsr'
[  510.401393][T19032] Cannot create hsr debugfs directory
[  510.415235][T19118] bridge0: port 2(erspan0) entered blocking state
[  510.422614][T19118] bridge0: port 2(erspan0) entered disabled state
[  510.430046][T19118] erspan0: entered allmulticast mode
[  510.439246][T19118] erspan0: entered promiscuous mode
[  510.446736][T19121] erspan0: left allmulticast mode
[  510.454686][T19121] erspan0: left promiscuous mode
[  510.462074][T19121] bridge0: port 2(erspan0) entered disabled state
[  510.840008][T19137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3557'.
[  511.169549][ T5835] Bluetooth: hci2: command tx timeout
[  511.244758][T19149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3563'.
[  511.255571][T19149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3563'.
[  511.398343][T19152] netlink: 'syz.0.3562': attribute type 11 has an invalid length.
[  511.429759][T19152] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3562'.
[  511.583908][T19163] : entered promiscuous mode
[  511.664458][T19165] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  511.902927][T19176] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  511.991431][T19032] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  512.020066][T19032] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  512.063677][T19032] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  512.094363][T19032] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  512.411870][T19206] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.538961][T19032] 8021q: adding VLAN 0 to HW filter on device bond0
[  512.604451][T19206] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.670607][T19032] 8021q: adding VLAN 0 to HW filter on device team0
[  512.711100][T19206] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.746711][ T7472] bridge0: port 1(bridge_slave_0) entered blocking state
[  512.754145][ T7472] bridge0: port 1(bridge_slave_0) entered forwarding state
[  512.824982][T19206] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.849620][ T7472] bridge0: port 2(bridge_slave_1) entered blocking state
[  512.857252][ T7472] bridge0: port 2(bridge_slave_1) entered forwarding state
[  512.918794][T19224] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  512.934335][T19225] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  513.238206][ T5835] Bluetooth: hci2: command tx timeout
[  513.314981][ T6520] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  513.373142][ T6520] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  513.446789][ T6506] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  513.506980][ T6506] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  513.659533][T19246] netlink: 'syz.0.3584': attribute type 12 has an invalid length.
[  513.676037][T19250] smc: net device geneve0 applied user defined pnetid SYZ0
[  513.691793][T19032] 8021q: adding VLAN 0 to HW filter on device batadv0
[  514.022205][T19032] veth0_vlan: entered promiscuous mode
[  514.080322][T19032] veth1_vlan: entered promiscuous mode
[  514.131334][T19032] veth0_macvtap: entered promiscuous mode
[  514.150268][T19032] veth1_macvtap: entered promiscuous mode
[  514.171018][T19270] netlink: 'syz.0.3588': attribute type 12 has an invalid length.
[  514.182393][T19270] netlink: 'syz.0.3588': attribute type 4 has an invalid length.
[  514.274229][T19032] batman_adv: batadv0: Interface activated: batadv_slave_0
[  514.328311][T19032] batman_adv: batadv0: Interface activated: batadv_slave_1
[  514.350161][ T6506] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  514.384160][ T6506] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  514.386350][T19275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3589'.
[  514.396098][ T6506] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  514.465427][ T6506] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  514.719069][T19285] Bluetooth: MGMT ver 1.23
[  514.746519][ T6506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  514.773281][ T6506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  514.948757][ T4113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  514.975959][ T4113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  515.150915][T19299] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3594'.
[  515.243072][T19295] pim6reg1: entered promiscuous mode
[  515.323061][T19305] netlink: 'syz.3.3522': attribute type 4 has an invalid length.
[  515.327330][ T5835] Bluetooth: hci2: command tx timeout
[  515.337127][T19295] pim6reg1: entered allmulticast mode
[  515.351313][T19305] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3522'.
[  515.564150][T19316] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3598'.
[  516.130113][T19333] pim6reg: entered allmulticast mode
[  516.147553][T19332] pim6reg: left allmulticast mode
[  516.670525][ T7472] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  516.705526][ T7472] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.719536][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  516.744098][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  516.756487][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  516.774779][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  516.786420][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  516.830095][T19347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3606'.
[  516.850870][ T7472] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  516.883242][ T7472] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.976330][ T7472] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  516.997716][ T7472] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.035154][T19359] netlink: 'syz.2.3608': attribute type 2 has an invalid length.
[  517.085357][ T7472] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  517.112229][ T7472] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.398757][ T5839] Bluetooth: hci2: command 0x0405 tx timeout
[  517.438012][T19366] netlink: 'syz.2.3610': attribute type 10 has an invalid length.
[  517.453580][T19366] bridge0: port 3(macsec0) entered blocking state
[  517.474587][T19366] bridge0: port 3(macsec0) entered disabled state
[  517.499137][T19366] macsec0: entered allmulticast mode
[  517.512551][T19366] veth1_macvtap: entered allmulticast mode
[  517.525213][T19366] macsec0: entered promiscuous mode
[  517.533064][T19366] bridge0: port 3(macsec0) entered blocking state
[  517.540963][T19366] bridge0: port 3(macsec0) entered forwarding state
[  517.613016][ T7478] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  517.658105][ T4113] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  517.679571][ T4113] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  517.708904][ T6512] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  517.745673][ T7472] bond10: left allmulticast mode
[  517.763036][ T7472] bond10: left promiscuous mode
[  517.779039][ T7472] bridge0: port 1(bond10) entered disabled state
[  518.203241][ T7472] bond9 (unregistering): (slave geneve2): Releasing active interface
[  518.751556][ T7472] bond1 (unregistering): Released all slaves
[  518.844720][ T5839] Bluetooth: hci1: command tx timeout
[  518.943156][ T7472] bond2 (unregistering): (slave macvlan3): Releasing backup interface
[  518.955279][ T7472] bond2 (unregistering): Released all slaves
[  518.975842][ T7472] bond3 (unregistering): Released all slaves
[  519.132787][ T7472] bond4 (unregistering): Released all slaves
[  519.286495][ T7472] bond5 (unregistering): Released all slaves
[  519.442052][ T7472] bond6 (unregistering): Released all slaves
[  519.614690][ T7472] bond7 (unregistering): Released all slaves
[  519.655706][ T7472] bond0 (unregistering): Released all slaves
[  519.676042][ T7472] bond8 (unregistering): Released all slaves
[  519.849590][ T7472] bond9 (unregistering): Released all slaves
[  520.004079][ T7472] bond10 (unregistering): Released all slaves
[  520.024895][T19383] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[  520.042014][T19383] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[  520.050798][T19388] pim6reg: entered allmulticast mode
[  520.060482][T19388] pim6reg: left allmulticast mode
[  520.061590][T19383] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  520.194849][T19397] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  520.314010][ T7472] tipc: Disabling bearer <udp:syz2>
[  520.328829][ T7472] tipc: Disabling bearer <eth:veth0>
[  520.365441][ T7472] tipc: Disabling bearer <eth:bond_slave_1>
[  520.412254][T19406] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3621'.
[  520.436941][ T7472] tipc: Left network mode
[  520.666339][ T7472] IPVS: stopping backup sync thread 13196 ...
[  520.684061][T19338] chnl_net:caif_netlink_parms(): no params data found
[  520.695008][T19406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3621'.
[  520.812379][T19406] veth1_macvtap: left promiscuous mode
[  520.853278][T19424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3626'.
[  520.917808][ T5839] Bluetooth: hci1: command tx timeout
[  521.374202][T19338] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.400809][T19338] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.410138][T19338] bridge_slave_0: entered allmulticast mode
[  521.419796][T19338] bridge_slave_0: entered promiscuous mode
[  521.447960][T19438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3629'.
[  521.491144][T19444] pim6reg: entered allmulticast mode
[  521.498283][T19338] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.506206][T19338] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.515864][T19338] bridge_slave_1: entered allmulticast mode
[  521.525275][T19338] bridge_slave_1: entered promiscuous mode
[  521.533597][T19440] pim6reg: left allmulticast mode
[  521.822625][T19338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  521.898765][T19448] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20003
[  521.908189][T19338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  522.162022][ T7472] hsr_slave_0: left promiscuous mode
[  522.183624][ T7472] hsr_slave_1: left promiscuous mode
[  522.448659][T19464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3636'.
[  523.007660][ T5835] Bluetooth: hci1: command tx timeout
[  523.335008][T19467] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  523.608879][T19470] netlink: 'syz.1.3637': attribute type 83 has an invalid length.
[  523.631955][T19338] team0: Port device team_slave_0 added
[  523.644646][T19338] team0: Port device team_slave_1 added
[  524.081176][T19468] bond1: option miimon: invalid value (18446744073709551607)
[  524.093226][T19468] bond1: option miimon: allowed values 0 - 2147483647
[  524.123458][T19468] bond1 (unregistering): Released all slaves
[  524.128245][T19485] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3643'.
[  524.276921][T19338] batman_adv: batadv0: Adding interface: batadv_slave_0
[  524.299032][T19338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  524.362907][T19338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  524.408792][T19338] batman_adv: batadv0: Adding interface: batadv_slave_1
[  524.415937][T19338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  524.445535][ T7472] IPVS: stop unused estimator thread 0...
[  524.512875][T19487] netlink: 'syz.3.3644': attribute type 10 has an invalid length.
[  524.519882][T19338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  524.580175][T19487] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3644'.
[  524.655402][T19487] team0: entered promiscuous mode
[  524.683328][T19487] team_slave_0: entered promiscuous mode
[  524.697846][T19487] team_slave_1: entered promiscuous mode
[  524.712624][T19487] bridge0: port 3(team0) entered blocking state
[  524.727618][T19487] bridge0: port 3(team0) entered disabled state
[  524.742572][T19487] team0: entered allmulticast mode
[  524.753682][T19487] team_slave_0: entered allmulticast mode
[  524.771195][T19487] team_slave_1: entered allmulticast mode
[  524.796478][T19487] bridge0: port 3(team0) entered blocking state
[  524.803244][T19487] bridge0: port 3(team0) entered forwarding state
[  524.850335][T19338] hsr_slave_0: entered promiscuous mode
[  524.871825][T19338] hsr_slave_1: entered promiscuous mode
[  524.883717][T19338] debugfs: 'hsr0' already exists in 'hsr'
[  524.897089][T19338] Cannot create hsr debugfs directory
[  524.975895][T19505] v: renamed from ip6_vti0
[  525.079994][ T5835] Bluetooth: hci1: command tx timeout
[  525.086331][ T5829] Bluetooth: hci4: command 0x0401 tx timeout
[  525.325147][T19338] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.435162][T19515] netlink: 'syz.2.3653': attribute type 10 has an invalid length.
[  525.459538][T19338] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.474494][T19515] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3653'.
[  525.576776][T19515] team0: entered promiscuous mode
[  525.599100][T19515] team_slave_0: entered promiscuous mode
[  525.619763][T19515] team_slave_1: entered promiscuous mode
[  525.628505][T19515] bridge0: port 4(team0) entered blocking state
[  525.635814][T19515] bridge0: port 4(team0) entered disabled state
[  525.645384][T19515] team0: entered allmulticast mode
[  525.650816][T19515] team_slave_0: entered allmulticast mode
[  525.657579][T19515] team_slave_1: entered allmulticast mode
[  525.671149][T19515] bridge0: port 4(team0) entered blocking state
[  525.677661][T19515] bridge0: port 4(team0) entered forwarding state
[  525.693126][T19338] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.869208][T19338] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.440964][T19547] tipc: Started in network mode
[  526.447578][T19547] tipc: Node identity 469de3046b52, cluster identity 4711
[  526.457460][T19547] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  526.485171][T19547] syzkaller0: entered promiscuous mode
[  526.502444][T19547] syzkaller0: entered allmulticast mode
[  526.580950][T19546] tipc: Resetting bearer <eth:syzkaller0>
[  526.611486][T19546] tipc: Disabling bearer <eth:syzkaller0>
[  526.641123][T19338] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  526.654836][T19338] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  526.683024][T19338] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  526.733421][T19338] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  526.799929][T19555] Bluetooth: MGMT ver 1.23
[  527.021046][T19338] 8021q: adding VLAN 0 to HW filter on device bond0
[  527.092694][T19338] 8021q: adding VLAN 0 to HW filter on device team0
[  527.093396][T19558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3665'.
[  527.125090][T19558] nbd: must specify a size in bytes for the device
[  527.140877][ T7478] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.149141][ T7478] bridge0: port 1(bridge_slave_0) entered forwarding state
[  527.310424][T19559] bond1: entered promiscuous mode
[  527.336690][T19559] bond1: entered allmulticast mode
[  527.357839][T19559] 8021q: adding VLAN 0 to HW filter on device bond1
[  527.391963][T19562] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  527.404746][ T6520] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.421641][ T6520] bridge0: port 2(bridge_slave_1) entered forwarding state
[  527.673433][T19578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3671'.
[  527.675240][T19579] ve: renamed from lo (while UP)
[  527.759698][T19578] veth3: entered promiscuous mode
[  527.770053][T19585] 
: renamed from bond_slave_0 (while UP)
[  528.107865][T19591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3674'.
[  528.240396][ T6514] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  528.281641][T19600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3675'.
[  528.297852][T19596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3674'.
[  528.337406][ T6514] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  528.359779][ T6506] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  528.398725][ T6506] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  528.523487][T19338] 8021q: adding VLAN 0 to HW filter on device batadv0
[  528.695763][T19338] veth0_vlan: entered promiscuous mode
[  528.732614][T19338] veth1_vlan: entered promiscuous mode
[  528.775616][T19611] netlink: 'syz.3.3678': attribute type 30 has an invalid length.
[  528.978858][T19593] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  528.987774][T19338] veth0_macvtap: entered promiscuous mode
[  529.036630][T19338] veth1_macvtap: entered promiscuous mode
[  529.103371][T19338] batman_adv: batadv0: Interface activated: batadv_slave_0
[  529.164486][T19338] batman_adv: batadv0: Interface activated: batadv_slave_1
[  529.211791][ T7471] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  529.252270][ T7471] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  529.292186][T19623] pim6reg: entered allmulticast mode
[  529.310220][ T7471] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  529.341146][ T7471] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  529.357706][T19619] pim6reg: left allmulticast mode
[  529.703475][ T7472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  529.757531][ T7472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  529.820954][T19624] netlink: 'syz.3.3682': attribute type 21 has an invalid length.
[  529.990913][ T6506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  530.010800][ T6506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  530.241896][T19645] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3687'.
[  530.673097][T19660] syzkaller0: entered promiscuous mode
[  530.680184][T19660] syzkaller0: entered allmulticast mode
[  530.741135][T19664] pim6reg: entered allmulticast mode
[  530.994852][T19686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3696'.
[  533.214021][T19674] pim6reg: left allmulticast mode
[  533.256221][T19689] kthread_run failed with err -4
[  533.346408][T19694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3698'.
[  533.366234][T19694] bond0: entered promiscuous mode
[  533.373287][T19694] bond_slave_0: entered promiscuous mode
[  533.379927][T19694] bond_slave_1: entered promiscuous mode
[  533.391343][T19694] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  533.416249][T19694] bond0: left promiscuous mode
[  533.431759][T19696] netlink: 'syz.3.3698': attribute type 13 has an invalid length.
[  533.448036][T19694] bond_slave_0: left promiscuous mode
[  533.460117][T19696] netlink: 'syz.3.3698': attribute type 17 has an invalid length.
[  533.482422][T19694] bond_slave_1: left promiscuous mode
[  533.540323][T19699] vxcan3: entered allmulticast mode
[  533.975568][T19696] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  534.009685][T19715] netlink: 'syz.0.3704': attribute type 4 has an invalid length.
[  534.556816][T19738] netlink: 'syz.0.3709': attribute type 1 has an invalid length.
[  534.606571][T19744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3711'.
[  534.714430][T19745] pim6reg: entered allmulticast mode
[  534.831602][T19750] netlink: 'syz.0.3713': attribute type 8 has an invalid length.
[  534.982594][T19753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3714'.
[  534.994987][T19753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3714'.
[  535.052253][T19747] pim6reg: left allmulticast mode
[  535.446602][T19758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3715'.
[  535.494931][T19759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3716'.
[  535.552533][T19769] gre0: entered promiscuous mode
[  535.558653][T19769] gre0: entered allmulticast mode
[  535.625661][T19772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3716'.
[  535.802847][T19774] team0: left allmulticast mode
[  535.813444][T19774] team_slave_0: left allmulticast mode
[  535.842966][T19774] team_slave_1: left allmulticast mode
[  535.891141][T19774] bridge0: port 4(team0) entered disabled state
[  536.204709][T19774] bridge_slave_0: left allmulticast mode
[  536.249719][T19774] bridge_slave_0: left promiscuous mode
[  536.268240][T19774] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.475990][T19774] bridge_slave_1: left allmulticast mode
[  536.519739][T19774] bridge_slave_1: left promiscuous mode
[  536.525751][T19774] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.626351][T19774] bond0: (slave bond_slave_0): Releasing backup interface
[  536.697748][T19774] bond0: (slave bond_slave_1): Releasing backup interface
[  536.721659][T19774] team_slave_0: left promiscuous mode
[  536.749494][T19774] team0: Port device team_slave_0 removed
[  536.756922][T19774] team_slave_1: left promiscuous mode
[  536.776511][T19774] team0: Port device team_slave_1 removed
[  536.784494][T19774] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  536.795030][T19774] batman_adv: batadv0: Removing interface: batadv_slave_0
[  536.805614][T19774] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  536.815785][T19774] batman_adv: batadv0: Removing interface: batadv_slave_1
[  536.826230][T19774] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  537.495293][T19798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3724'.
[  537.577304][T11373] IPVS: starting estimator thread 0...
[  537.667323][T19802] IPVS: using max 31 ests per chain, 74400 per kthread
[  537.879260][T19814] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3729'.
[  538.948457][T19838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3736'.
[  538.995759][T19838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3736'.
[  539.326836][T19851] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3742'.
[  539.514678][T19862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3741'.
[  539.537688][T19851] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3742'.
[  539.565915][T19851] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3742'.
[  539.591278][T19849] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6)
[  539.606587][T19851] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3742'.
[  539.635518][T19851] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3742'.
[  539.762340][T19851] bridge0: port 3(team0) entered disabled state
[  539.770094][T19851] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.778023][T19851] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.995841][T19851] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  540.018596][T19851] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  540.298561][ T6520] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  540.329839][ T6520] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.357980][ T6520] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  540.369947][ T6520] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.414260][ T6520] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  540.463663][ T6520] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  540.496067][ T6520] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  540.533814][ T6520] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  541.310174][T19910] ªªªªªª: renamed from wg2
[  541.694454][T19925] pim6reg: entered allmulticast mode
[  541.720038][T19922] pim6reg: left allmulticast mode
[  542.110259][T19939] netlink: 'syz.1.3770': attribute type 83 has an invalid length.
[  542.150566][T19940] netlink: 'syz.2.3769': attribute type 1 has an invalid length.
[  542.208457][T19940] netlink: 'syz.2.3769': attribute type 3 has an invalid length.
[  542.252722][T19940] netlink: 'syz.2.3769': attribute type 7 has an invalid length.
[  542.312953][T19940] netlink: 'syz.2.3769': attribute type 8 has an invalid length.
[  542.343966][T19940] NCSI netlink: No device for ifindex 131092
[  542.367470][T19934] 8021q: VLANs not supported on wg0
[  542.414172][T19934] bond0: entered promiscuous mode
[  542.443104][T19934] batadv0: entered promiscuous mode
[  542.459073][T19934] debugfs: 'hsr1' already exists in 'hsr'
[  542.485881][T19934] Cannot create hsr debugfs directory
[  542.496309][T19934] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  542.528097][T19934] 8021q: adding VLAN 0 to HW filter on device hsr1
[  542.558012][T19934] bond0: left promiscuous mode
[  542.580925][T19934] batadv0: left promiscuous mode
[  543.177775][T19968] __nla_validate_parse: 146 callbacks suppressed
[  543.177800][T19968] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.3777'.
[  543.456846][T19974] pim6reg: entered allmulticast mode
[  543.546294][T19973] pim6reg: left allmulticast mode
[  544.064358][T19990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3784'.
[  544.178427][T19990] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  544.774031][T20027] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3789'.
[  544.995603][T20036] pim6reg: entered allmulticast mode
[  545.018252][T20031] pim6reg: left allmulticast mode
[  545.421849][T20055] netlink: 'syz.2.3799': attribute type 1 has an invalid length.
[  545.464731][T20055] bond2: entered promiscuous mode
[  545.471507][T20055] 8021q: adding VLAN 0 to HW filter on device bond2
[  545.491553][T20055] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3799'.
[  545.556430][T20058] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3800'.
[  545.575432][T20055] bond2: (slave bridge3): making interface the new active one
[  545.583465][T20055] bridge3: entered promiscuous mode
[  545.590853][T20055] bond2: (slave bridge3): Enslaving as an active interface with an up link
[  546.011921][T20091] netlink: 'syz.2.3805': attribute type 13 has an invalid length.
[  546.028886][T20090] syzkaller0: entered promiscuous mode
[  546.035782][T20091] netlink: 'syz.2.3805': attribute type 17 has an invalid length.
[  546.047399][T20090] syzkaller0: entered allmulticast mode
[  546.113844][T20091] team0: left promiscuous mode
[  546.125693][T20091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  546.152492][T20093] pim6reg: entered allmulticast mode
[  546.186682][T20086] pim6reg: left allmulticast mode
[  546.341239][T20109] netlink: 'syz.0.3809': attribute type 2 has an invalid length.
[  547.482464][T20138] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3817'.
[  548.160188][T20142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3819'.
[  548.212644][T20142] netlink: 'syz.2.3819': attribute type 2 has an invalid length.
[  548.252544][T20144] netlink: 'syz.1.3820': attribute type 1 has an invalid length.
[  548.372770][T20146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3820'.
[  549.025740][T20163] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3826'.
[  549.830163][T20195] pim6reg: entered allmulticast mode
[  549.860839][T20195] pim6reg: left allmulticast mode
[  550.134594][T20205] sit0: entered promiscuous mode
[  550.147435][T20205] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3838'.
[  550.684706][T20230] netlink: 'syz.2.3845': attribute type 3 has an invalid length.
[  550.710268][T20230] sctp: [Deprecated]: syz.2.3845 (pid 20230) Use of int in maxseg socket option.
[  550.710268][T20230] Use struct sctp_assoc_value instead
[  550.885017][T20233] vlan2: entered allmulticast mode
[  551.140780][T20247] pim6reg: entered allmulticast mode
[  551.154557][T20247] pim6reg: left allmulticast mode
[  551.412843][T20258] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  551.719332][T20274] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3855'.
[  551.739763][T11364] IPVS: starting estimator thread 0...
[  551.802826][T20277] gre0: left promiscuous mode
[  551.851980][T20277] gre0: left allmulticast mode
[  551.857395][T20276] IPVS: using max 25 ests per chain, 60000 per kthread
[  551.949416][T20277] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  552.134688][T20290] netlink: 'syz.1.3859': attribute type 31 has an invalid length.
[  552.413288][T20301] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3862'.
[  552.464690][T20301] team0: No ports can be present during mode change
[  552.499139][T20307] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  552.519853][T20307] syzkaller0: entered promiscuous mode
[  552.527353][T20307] syzkaller0: entered allmulticast mode
[  552.645093][T20307] tipc: Resetting bearer <eth:syzkaller0>
[  552.731854][T20307] tipc: Resetting bearer <eth:syzkaller0>
[  552.796204][T20307] tipc: Disabling bearer <eth:syzkaller0>
[  552.867622][T20317] pim6reg: entered allmulticast mode
[  552.906047][T20319] pim6reg: left allmulticast mode
[  553.225704][T20337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3872'.
[  553.254749][T20337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3872'.
[  553.274913][T20339] sctp: [Deprecated]: syz.0.3874 (pid 20339) Use of struct sctp_assoc_value in delayed_ack socket option.
[  553.274913][T20339] Use struct sctp_sack_info instead
[  553.311581][T20338] sctp: [Deprecated]: syz.0.3874 (pid 20338) Use of struct sctp_assoc_value in delayed_ack socket option.
[  553.311581][T20338] Use struct sctp_sack_info instead
[  553.419113][T20345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3875'.
[  553.869637][T20363] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3881'.
[  554.135747][T20374] dvmrp1: tun_chr_ioctl cmd 1074025677
[  554.142445][T20374] dvmrp1: linktype set to 774
[  554.231634][T20379] netlink: 448 bytes leftover after parsing attributes in process `syz.1.3888'.
[  554.630990][T20396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3895'.
[  554.670195][T20396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3895'.
[  554.680234][T20396] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3895'.
[  554.690345][T20395] xt_CT: No such helper "netbios-ns"
[  554.691586][T20396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3895'.
[  554.710271][T20396] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3895'.
[  554.747683][T20398] netlink: 'syz.0.3895': attribute type 15 has an invalid length.
[  554.763818][T20400] xfrm0: entered promiscuous mode
[  554.770903][T20396] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3895'.
[  554.781110][T20400] xfrm0: entered allmulticast mode
[  554.792729][T20396] team0: No ports can be present during mode change
[  555.057110][T20409] sctp: [Deprecated]: syz.1.3902 (pid 20409) Use of struct sctp_assoc_value in delayed_ack socket option.
[  555.057110][T20409] Use struct sctp_sack_info instead
[  555.132226][T20419] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3903'.
[  555.302126][T20416] block nbd1: server does not support multiple connections per device.
[  555.323978][T20416] block nbd1: shutting down sockets
[  555.357522][T20431] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  555.750473][T20444] rdma_rxe: rxe_newlink: failed to add bond0
[  555.901606][T20451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  555.928479][T20453] FAULT_INJECTION: forcing a failure.
[  555.928479][T20453] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  556.009300][T20460] sctp: [Deprecated]: syz.2.3915 (pid 20460) Use of int in max_burst socket option deprecated.
[  556.009300][T20460] Use struct sctp_assoc_value instead
[  556.057502][T20453] CPU: 1 UID: 0 PID: 20453 Comm: syz.1.3914 Not tainted syzkaller #0 PREEMPT(full) 
[  556.057534][T20453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  556.057548][T20453] Call Trace:
[  556.057558][T20453]  <TASK>
[  556.057568][T20453]  dump_stack_lvl+0x189/0x250
[  556.057604][T20453]  ? __pfx____ratelimit+0x10/0x10
[  556.057635][T20453]  ? __pfx_dump_stack_lvl+0x10/0x10
[  556.057659][T20453]  ? __pfx__printk+0x10/0x10
[  556.057678][T20453]  ? __might_fault+0xb0/0x130
[  556.057713][T20453]  should_fail_ex+0x414/0x560
[  556.057746][T20453]  _copy_from_user+0x2d/0xb0
[  556.057771][T20453]  do_tcp_getsockopt+0x1dd/0x2680
[  556.057804][T20453]  ? __pfx_do_tcp_getsockopt+0x10/0x10
[  556.057826][T20453]  ? sock_recv_errqueue+0x490/0x510
[  556.057857][T20453]  ? __might_fault+0xb0/0x130
[  556.057884][T20453]  ? _parse_integer_limit+0x1ae/0x1f0
[  556.057899][T20453]  ? aa_label_sk_perm+0x4cd/0x630
[  556.057932][T20453]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  556.057982][T20453]  ? __lock_acquire+0xab9/0xd20
[  556.058010][T20453]  ? __might_fault+0xb0/0x130
[  556.058045][T20453]  tcp_getsockopt+0x83/0x130
[  556.058080][T20453]  ? sock_recv_errqueue+0x490/0x510
[  556.058145][T20453]  ? sock_recv_errqueue+0x490/0x510
[  556.058169][T20453]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  556.058197][T20453]  do_sock_getsockopt+0x372/0x450
[  556.058223][T20453]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  556.058242][T20453]  ? do_syscall_64+0xa0/0xfa0
[  556.058270][T20453]  __x64_sys_getsockopt+0x1a5/0x250
[  556.058289][T20453]  ? do_syscall_64+0xa0/0xfa0
[  556.058307][T20453]  ? do_syscall_64+0xa0/0xfa0
[  556.058327][T20453]  do_syscall_64+0xfa/0xfa0
[  556.058343][T20453]  ? lockdep_hardirqs_on+0x9c/0x150
[  556.058361][T20453]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.058379][T20453]  ? clear_bhb_loop+0x60/0xb0
[  556.058401][T20453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.058418][T20453] RIP: 0033:0x7f775778f6c9
[  556.058435][T20453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  556.058450][T20453] RSP: 002b:00007f77585bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  556.058469][T20453] RAX: ffffffffffffffda RBX: 00007f77579e5fa0 RCX: 00007f775778f6c9
[  556.058482][T20453] RDX: 000000000000001d RSI: 0000000000000006 RDI: 0000000000000003
[  556.058492][T20453] RBP: 00007f77585bb090 R08: 0000200000000a40 R09: 0000000000000000
[  556.058504][T20453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  556.058513][T20453] R13: 00007f77579e6038 R14: 00007f77579e5fa0 R15: 00007fff3152a708
[  556.058542][T20453]  </TASK>
[  556.393172][T20468] sctp: [Deprecated]: syz.2.3915 (pid 20468) Use of int in max_burst socket option deprecated.
[  556.393172][T20468] Use struct sctp_assoc_value instead
[  557.102287][T20491] syzkaller1: entered promiscuous mode
[  557.108985][T20491] syzkaller1: entered allmulticast mode
[  557.581575][T20509] macvtap1: entered promiscuous mode
[  557.587543][T20509] batadv0: entered promiscuous mode
[  557.595198][T20509] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  558.534909][T20556] __nla_validate_parse: 5 callbacks suppressed
[  558.534927][T20556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3941'.
[  558.693990][T20564] netlink: 'syz.1.3943': attribute type 1 has an invalid length.
[  558.921767][T20564] bond1: entered promiscuous mode
[  558.932424][T20575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3945'.
[  558.958384][T20564] 8021q: adding VLAN 0 to HW filter on device bond1
[  559.319102][T20600] netlink: 'syz.2.3952': attribute type 13 has an invalid length.
[  559.330371][T20600] netlink: 'syz.2.3952': attribute type 17 has an invalid length.
[  559.389393][T20600] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  559.569750][T20597] syzkaller0: entered promiscuous mode
[  559.570591][T20614] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3955'.
[  559.575561][T20597] syzkaller0: entered allmulticast mode
[  559.964009][T20614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  559.976715][T20614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  559.988396][T20614] bond0 (unregistering): Released all slaves
[  560.503655][T20630] Cannot find set identified by id 1 to match
[  560.515482][T20640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3960'.
[  561.220135][T20644] netlink: 'syz.0.3961': attribute type 83 has an invalid length.
[  561.260726][T20645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3961'.
[  561.335667][T20646] netlink: 'syz.0.3961': attribute type 39 has an invalid length.
[  561.446061][T20646] hsr_slave_1 (unregistering): left promiscuous mode
[  561.748996][T20655] netlink: 448 bytes leftover after parsing attributes in process `syz.4.3964'.
[  561.762951][T20659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3965'.
[  561.880861][T20655] syzkaller0: entered promiscuous mode
[  561.886532][T20655] syzkaller0: entered allmulticast mode
[  564.364968][T20665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3968'.
[  564.374798][T20665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3968'.
[  564.384740][T20665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3968'.
[  564.549014][T20670] syzkaller0: entered promiscuous mode
[  564.555538][T20670] syzkaller0: entered allmulticast mode
[  565.090635][T20700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3979'.
[  566.432435][T20761] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3989'.
[  566.441754][T20761] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3989'.
[  568.715520][T20738] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3985'.
[  568.726153][T20731] syzkaller0: entered promiscuous mode
[  568.734012][T20731] syzkaller0: entered allmulticast mode
[  568.771246][T20749] syzkaller0: entered promiscuous mode
[  568.787914][T20749] syzkaller0: entered allmulticast mode
[  568.805905][T20759] tipc: Started in network mode
[  568.817393][T20759] tipc: Node identity ac14140f, cluster identity 4711
[  568.824626][T20759] tipc: New replicast peer: 255.255.255.32
[  568.857505][T20759] tipc: Enabled bearer <udp:syz2>, priority 6
[  568.945853][T20760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3989'.
[  568.955870][T20760] tipc: Disabling bearer <udp:syz2>
[  569.177383][T20773] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3994'.
[  569.272625][T20779] bridge0: entered promiscuous mode
[  569.286819][T20779] bridge0: port 3(macvtap1) entered blocking state
[  569.294523][T20779] bridge0: port 3(macvtap1) entered disabled state
[  569.301622][T20779] macvtap1: entered allmulticast mode
[  569.308900][T20779] bridge0: entered allmulticast mode
[  569.331285][T20779] macvtap1: left allmulticast mode
[  569.336511][T20779] bridge0: left allmulticast mode
[  569.346553][T20779] bridge0: left promiscuous mode
[  570.194574][T20801] netlink: 'syz.4.4000': attribute type 2 has an invalid length.
[  570.233883][T20801] netlink: 'syz.4.4000': attribute type 9 has an invalid length.
[  570.272105][T20807] netlink: 'syz.4.4000': attribute type 1 has an invalid length.
[  570.280660][T20801] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4000'.
[  570.416413][T20811] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4004'.
[  570.707925][T20822] IPVS: Scheduler module ip_vs_sip not found
[  570.793656][T20830] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  572.968909][T20944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4031'.
[  573.502348][T20964] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4037'.
[  573.842155][T20979] batman_adv: batadv0: Adding interface: dummy0
[  573.862390][T20979] batman_adv: batadv0: Interface activated: dummy0
[  573.891491][T20986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4044'.
[  573.894393][T20985] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4045'.
[  573.943409][T20979] batadv0: mtu less than device minimum
[  573.961133][T20979] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  573.973908][T20979] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  573.986087][T20979] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  573.998385][T20979] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  574.010693][T20979] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  574.022834][T20979] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  574.035263][T20979] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  574.047417][T20979] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  574.144475][T20986] macvtap1: entered promiscuous mode
[  574.168788][T20986] batadv0: entered promiscuous mode
[  574.176150][T20986] macvtap1: entered allmulticast mode
[  574.188541][T20986] batadv0: entered allmulticast mode
[  574.233657][T20986] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  574.300157][T20990] macvtap1: left promiscuous mode
[  574.324938][T20990] batadv0: left promiscuous mode
[  574.331366][T20990] macvtap1: left allmulticast mode
[  574.336540][T20990] batadv0: left allmulticast mode
[  574.783922][T21023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4053'.
[  575.476756][T21059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4065'.
[  575.723862][T20706] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  576.061193][T21072] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4069'.
[  576.268810][T21078] netlink: 'syz.2.4072': attribute type 3 has an invalid length.
[  576.315432][T21078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4072'.
[  576.371564][T21085] net_ratelimit: 11 callbacks suppressed
[  576.371584][T21085] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  576.450698][T21078] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4072'.
[  576.529269][T21092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4075'.
[  576.539740][T21092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4075'.
[  576.659479][T21096] FAULT_INJECTION: forcing a failure.
[  576.659479][T21096] name failslab, interval 1, probability 0, space 0, times 0
[  576.690064][T21096] CPU: 0 UID: 0 PID: 21096 Comm: syz.0.4076 Not tainted syzkaller #0 PREEMPT(full) 
[  576.690095][T21096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  576.690109][T21096] Call Trace:
[  576.690118][T21096]  <TASK>
[  576.690128][T21096]  dump_stack_lvl+0x189/0x250
[  576.690162][T21096]  ? __pfx____ratelimit+0x10/0x10
[  576.690195][T21096]  ? __pfx_dump_stack_lvl+0x10/0x10
[  576.690224][T21096]  ? __pfx__printk+0x10/0x10
[  576.690252][T21096]  ? __pfx___might_resched+0x10/0x10
[  576.690275][T21096]  ? fs_reclaim_acquire+0x7d/0x100
[  576.690300][T21096]  should_fail_ex+0x414/0x560
[  576.690340][T21096]  should_failslab+0xa8/0x100
[  576.690364][T21096]  __kmalloc_cache_noprof+0x6f/0x6f0
[  576.690395][T21096]  ? sctp_transport_new+0x7e/0x640
[  576.690430][T21096]  sctp_transport_new+0x7e/0x640
[  576.690461][T21096]  sctp_assoc_add_peer+0x260/0x13b0
[  576.690487][T21096]  ? sctp_bind_addr_copy+0x380/0x3c0
[  576.690527][T21096]  sctp_connect_new_asoc+0x30a/0x690
[  576.690555][T21096]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  576.690581][T21096]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  576.690604][T21096]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  576.690626][T21096]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  576.690650][T21096]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  576.690673][T21096]  ? security_sctp_bind_connect+0x7e/0x2e0
[  576.690702][T21096]  sctp_sendmsg+0x155c/0x2810
[  576.690739][T21096]  ? __pfx_sctp_sendmsg+0x10/0x10
[  576.690773][T21096]  ? aa_sk_perm+0x81e/0x950
[  576.690808][T21096]  ? __pfx_aa_sk_perm+0x10/0x10
[  576.690852][T21096]  ? sock_rps_record_flow+0x19/0x410
[  576.690878][T21096]  ? inet_sendmsg+0x2f4/0x370
[  576.690898][T21096]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  576.690923][T21096]  __sock_sendmsg+0x19c/0x270
[  576.690958][T21096]  __sys_sendto+0x3bd/0x520
[  576.690983][T21096]  ? __pfx___sys_sendto+0x10/0x10
[  576.691001][T21096]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  576.691045][T21096]  ? __fget_files+0x3a0/0x420
[  576.691078][T21096]  ? ksys_write+0x22a/0x250
[  576.691110][T21096]  ? __pfx_ksys_write+0x10/0x10
[  576.691144][T21096]  __x64_sys_sendto+0xde/0x100
[  576.691170][T21096]  do_syscall_64+0xfa/0xfa0
[  576.691189][T21096]  ? lockdep_hardirqs_on+0x9c/0x150
[  576.691209][T21096]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.691230][T21096]  ? clear_bhb_loop+0x60/0xb0
[  576.691256][T21096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.691276][T21096] RIP: 0033:0x7efc7ab8f6c9
[  576.691296][T21096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  576.691314][T21096] RSP: 002b:00007efc7bac7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  576.691337][T21096] RAX: ffffffffffffffda RBX: 00007efc7ade5fa0 RCX: 00007efc7ab8f6c9
[  576.691352][T21096] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003
[  576.691365][T21096] RBP: 00007efc7bac7090 R08: 000020000005ffe4 R09: 000000000000001c
[  576.691379][T21096] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001
[  576.691392][T21096] R13: 00007efc7ade6038 R14: 00007efc7ade5fa0 R15: 00007fffdd84d018
[  576.691428][T21096]  </TASK>
[  577.394363][T21122] netlink: 'syz.1.4084': attribute type 12 has an invalid length.
[  577.724541][T21143] FAULT_INJECTION: forcing a failure.
[  577.724541][T21143] name failslab, interval 1, probability 0, space 0, times 0
[  577.777627][T21143] CPU: 0 UID: 0 PID: 21143 Comm: syz.1.4090 Not tainted syzkaller #0 PREEMPT(full) 
[  577.777669][T21143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  577.777683][T21143] Call Trace:
[  577.777691][T21143]  <TASK>
[  577.777700][T21143]  dump_stack_lvl+0x189/0x250
[  577.777735][T21143]  ? __pfx____ratelimit+0x10/0x10
[  577.777768][T21143]  ? __pfx_dump_stack_lvl+0x10/0x10
[  577.777796][T21143]  ? __pfx__printk+0x10/0x10
[  577.777824][T21143]  ? __pfx___might_resched+0x10/0x10
[  577.777853][T21143]  should_fail_ex+0x414/0x560
[  577.777890][T21143]  should_failslab+0xa8/0x100
[  577.777915][T21143]  __kmalloc_cache_noprof+0x6f/0x6f0
[  577.777946][T21143]  ? sctp_stream_init_ext+0x57/0x180
[  577.777973][T21143]  ? __pfx_sctp_hash_transport+0x10/0x10
[  577.778006][T21143]  sctp_stream_init_ext+0x57/0x180
[  577.778038][T21143]  sctp_sendmsg_to_asoc+0x12f8/0x1810
[  577.778060][T21143]  ? __asan_memcpy+0x40/0x70
[  577.778097][T21143]  ? sctp_assoc_add_peer+0xcfa/0x13b0
[  577.778135][T21143]  ? sctp_connect_new_asoc+0x3f0/0x690
[  577.778158][T21143]  ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10
[  577.778181][T21143]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  577.778206][T21143]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  577.778229][T21143]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  577.778251][T21143]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  577.778276][T21143]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  577.778299][T21143]  ? security_sctp_bind_connect+0x7e/0x2e0
[  577.778329][T21143]  sctp_sendmsg+0x1941/0x2810
[  577.778365][T21143]  ? __pfx_sctp_sendmsg+0x10/0x10
[  577.778393][T21143]  ? aa_sk_perm+0x81e/0x950
[  577.778427][T21143]  ? __pfx_aa_sk_perm+0x10/0x10
[  577.778460][T21143]  ? sock_rps_record_flow+0x19/0x410
[  577.778486][T21143]  ? inet_sendmsg+0x2f4/0x370
[  577.778505][T21143]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  577.778530][T21143]  __sock_sendmsg+0x19c/0x270
[  577.778565][T21143]  __sys_sendto+0x3bd/0x520
[  577.778589][T21143]  ? __pfx___sys_sendto+0x10/0x10
[  577.778607][T21143]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  577.778652][T21143]  ? __fget_files+0x3a0/0x420
[  577.778684][T21143]  ? ksys_write+0x22a/0x250
[  577.778717][T21143]  ? __pfx_ksys_write+0x10/0x10
[  577.778750][T21143]  __x64_sys_sendto+0xde/0x100
[  577.778777][T21143]  do_syscall_64+0xfa/0xfa0
[  577.778796][T21143]  ? lockdep_hardirqs_on+0x9c/0x150
[  577.778816][T21143]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  577.778837][T21143]  ? clear_bhb_loop+0x60/0xb0
[  577.778862][T21143]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  577.778882][T21143] RIP: 0033:0x7f775778f6c9
[  577.778901][T21143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  577.778918][T21143] RSP: 002b:00007f77585bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  577.778941][T21143] RAX: ffffffffffffffda RBX: 00007f77579e5fa0 RCX: 00007f775778f6c9
[  577.778956][T21143] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003
[  577.778970][T21143] RBP: 00007f77585bb090 R08: 000020000005ffe4 R09: 000000000000001c
[  577.778983][T21143] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001
[  577.778996][T21143] R13: 00007f77579e6038 R14: 00007f77579e5fa0 R15: 00007fff3152a708
[  577.779032][T21143]  </TASK>
[  578.160091][T21159] gtp0: entered promiscuous mode
[  578.165111][T21159] gtp0: entered allmulticast mode
[  578.193901][T21160] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4096'.
[  578.228120][T21160] netlink: 'syz.1.4096': attribute type 13 has an invalid length.
[  578.236240][T21160] netlink: 'syz.1.4096': attribute type 17 has an invalid length.
[  578.408534][T21173] netlink: 'syz.3.4101': attribute type 6 has an invalid length.
[  578.417069][T21173] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4101'.
[  578.450445][T21160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  578.470588][T21176] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  578.542404][T21160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  578.633231][T21176] syzkaller0: entered promiscuous mode
[  578.647519][T21176] syzkaller0: entered allmulticast mode
[  578.973234][T21193] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  578.998819][T21192] netlink: 'syz.2.4105': attribute type 13 has an invalid length.
[  579.013196][T21193] syzkaller0: entered promiscuous mode
[  579.040365][T21193] syzkaller0: entered allmulticast mode
[  579.207756][T21203] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4107'.
[  579.226905][T21205] macvlan3: entered promiscuous mode
[  579.233975][T21192] tipc: Resetting bearer <eth:syzkaller0>
[  579.339528][T21206] Bluetooth: MGMT ver 1.23
[  579.370295][T21192] tipc: Disabling bearer <eth:syzkaller0>
[  579.538695][T21216] veth1_to_batadv: entered promiscuous mode
[  579.544911][T21216] veth1_to_batadv: entered allmulticast mode
[  580.194579][T21247] syzkaller1: entered promiscuous mode
[  580.222880][T21247] syzkaller1: entered allmulticast mode
[  580.294862][T21252] tun0: tun_chr_ioctl cmd 1074025681
[  580.619622][T21274] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4124'.
[  580.641101][T21276] FAULT_INJECTION: forcing a failure.
[  580.641101][T21276] name failslab, interval 1, probability 0, space 0, times 0
[  580.695342][T21276] CPU: 0 UID: 0 PID: 21276 Comm: syz.4.4126 Not tainted syzkaller #0 PREEMPT(full) 
[  580.695373][T21276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  580.695386][T21276] Call Trace:
[  580.695394][T21276]  <TASK>
[  580.695402][T21276]  dump_stack_lvl+0x189/0x250
[  580.695435][T21276]  ? __pfx____ratelimit+0x10/0x10
[  580.695467][T21276]  ? __pfx_dump_stack_lvl+0x10/0x10
[  580.695496][T21276]  ? __pfx__printk+0x10/0x10
[  580.695534][T21276]  should_fail_ex+0x414/0x560
[  580.695572][T21276]  should_failslab+0xa8/0x100
[  580.695597][T21276]  __kmalloc_cache_noprof+0x6f/0x6f0
[  580.695627][T21276]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  580.695656][T21276]  ? sctp_add_bind_addr+0x8c/0x370
[  580.695683][T21276]  ? sctp_add_bind_addr+0xb0/0x370
[  580.695717][T21276]  sctp_add_bind_addr+0x8c/0x370
[  580.695753][T21276]  sctp_copy_local_addr_list+0x30b/0x4e0
[  580.695788][T21276]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  580.695820][T21276]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  580.695854][T21276]  ? sctp_v6_is_any+0x64/0x80
[  580.695875][T21276]  ? sctp_copy_one_addr+0x93/0x360
[  580.695909][T21276]  sctp_bind_addr_copy+0xb3/0x3c0
[  580.695939][T21276]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  580.695971][T21276]  sctp_connect_new_asoc+0x2e0/0x690
[  580.696000][T21276]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  580.696021][T21276]  ? __local_bh_enable_ip+0x12d/0x1c0
[  580.696052][T21276]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  580.696075][T21276]  ? security_sctp_bind_connect+0x7e/0x2e0
[  580.696104][T21276]  sctp_sendmsg+0x155c/0x2810
[  580.696141][T21276]  ? __pfx_sctp_sendmsg+0x10/0x10
[  580.696168][T21276]  ? aa_sk_perm+0x81e/0x950
[  580.696202][T21276]  ? __pfx_aa_sk_perm+0x10/0x10
[  580.696236][T21276]  ? sock_rps_record_flow+0x19/0x410
[  580.696262][T21276]  ? inet_sendmsg+0x2f4/0x370
[  580.696288][T21276]  __sock_sendmsg+0x19c/0x270
[  580.696336][T21276]  __sys_sendto+0x3bd/0x520
[  580.696361][T21276]  ? __pfx___sys_sendto+0x10/0x10
[  580.696378][T21276]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  580.696413][T21276]  ? __fget_files+0x3a0/0x420
[  580.696445][T21276]  ? ksys_write+0x22a/0x250
[  580.696475][T21276]  ? __pfx_ksys_write+0x10/0x10
[  580.696509][T21276]  __x64_sys_sendto+0xde/0x100
[  580.696534][T21276]  do_syscall_64+0xfa/0xfa0
[  580.696552][T21276]  ? lockdep_hardirqs_on+0x9c/0x150
[  580.696572][T21276]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.696592][T21276]  ? clear_bhb_loop+0x60/0xb0
[  580.696617][T21276]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.696637][T21276] RIP: 0033:0x7f3062b8f6c9
[  580.696656][T21276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  580.696673][T21276] RSP: 002b:00007f3063aa0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  580.696696][T21276] RAX: ffffffffffffffda RBX: 00007f3062de5fa0 RCX: 00007f3062b8f6c9
[  580.696711][T21276] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003
[  580.696724][T21276] RBP: 00007f3063aa0090 R08: 000020000005ffe4 R09: 000000000000001c
[  580.696737][T21276] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002
[  580.696748][T21276] R13: 00007f3062de6038 R14: 00007f3062de5fa0 R15: 00007ffd6be9b728
[  580.696785][T21276]  </TASK>
[  581.247105][T21292] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4130'.
[  581.274953][T21292] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4130'.
[  581.546999][T21302] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4131'.
[  581.567756][T21302] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4131'.
[  581.623893][T21307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4131'.
[  581.745239][T21302] netlink: 'syz.3.4131': attribute type 12 has an invalid length.
[  582.042915][T21318] tipc: Started in network mode
[  582.070192][T21318] tipc: Node identity 2a1e0dac0d6f, cluster identity 4711
[  582.100129][T21318] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  582.122537][T21318] syzkaller0: entered promiscuous mode
[  582.137423][T21318] syzkaller0: entered allmulticast mode
[  582.170359][T21318] tipc: Resetting bearer <eth:syzkaller0>
[  582.237134][T21323] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  582.282500][T21317] tipc: Resetting bearer <eth:syzkaller0>
[  582.394204][T21317] tipc: Disabling bearer <eth:syzkaller0>
[  582.908830][T21345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4145'.
[  582.980848][T21345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4145'.
[  583.042609][T21346] netlink: 'syz.2.4145': attribute type 5 has an invalid length.
[  583.181589][T21358] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  583.197338][T21358] bond4 (unregistering): Released all slaves
[  583.213458][T21364] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4148'.
[  583.224786][T21364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4148'.
[  583.532267][T21378] FAULT_INJECTION: forcing a failure.
[  583.532267][T21378] name failslab, interval 1, probability 0, space 0, times 0
[  583.579442][T21378] CPU: 1 UID: 0 PID: 21378 Comm: syz.4.4154 Not tainted syzkaller #0 PREEMPT(full) 
[  583.579474][T21378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  583.579486][T21378] Call Trace:
[  583.579494][T21378]  <TASK>
[  583.579503][T21378]  dump_stack_lvl+0x189/0x250
[  583.579537][T21378]  ? __pfx____ratelimit+0x10/0x10
[  583.579571][T21378]  ? __pfx_dump_stack_lvl+0x10/0x10
[  583.579599][T21378]  ? __pfx__printk+0x10/0x10
[  583.579636][T21378]  should_fail_ex+0x414/0x560
[  583.579673][T21378]  should_failslab+0xa8/0x100
[  583.579697][T21378]  __kmalloc_cache_noprof+0x6f/0x6f0
[  583.579727][T21378]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  583.579756][T21378]  ? sctp_add_bind_addr+0x8c/0x370
[  583.579784][T21378]  ? sctp_add_bind_addr+0xb0/0x370
[  583.579821][T21378]  sctp_add_bind_addr+0x8c/0x370
[  583.579857][T21378]  sctp_copy_local_addr_list+0x30b/0x4e0
[  583.579893][T21378]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  583.579925][T21378]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  583.579973][T21378]  ? sctp_v6_is_any+0x64/0x80
[  583.579998][T21378]  ? sctp_copy_one_addr+0x93/0x360
[  583.580033][T21378]  sctp_bind_addr_copy+0xb3/0x3c0
[  583.580065][T21378]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  583.580099][T21378]  sctp_connect_new_asoc+0x2e0/0x690
[  583.580129][T21378]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  583.580150][T21378]  ? __local_bh_enable_ip+0x12d/0x1c0
[  583.580182][T21378]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  583.580204][T21378]  ? security_sctp_bind_connect+0x7e/0x2e0
[  583.580229][T21378]  sctp_sendmsg+0x155c/0x2810
[  583.580261][T21378]  ? __pfx_sctp_sendmsg+0x10/0x10
[  583.580288][T21378]  ? aa_sk_perm+0x81e/0x950
[  583.580322][T21378]  ? __pfx_aa_sk_perm+0x10/0x10
[  583.580356][T21378]  ? sock_rps_record_flow+0x19/0x410
[  583.580383][T21378]  ? inet_sendmsg+0x2f4/0x370
[  583.580410][T21378]  __sock_sendmsg+0x19c/0x270
[  583.580445][T21378]  __sys_sendto+0x3bd/0x520
[  583.580470][T21378]  ? __pfx___sys_sendto+0x10/0x10
[  583.580488][T21378]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  583.580527][T21378]  ? __fget_files+0x3a0/0x420
[  583.580562][T21378]  ? ksys_write+0x22a/0x250
[  583.580610][T21378]  ? __pfx_ksys_write+0x10/0x10
[  583.580644][T21378]  __x64_sys_sendto+0xde/0x100
[  583.580671][T21378]  do_syscall_64+0xfa/0xfa0
[  583.580690][T21378]  ? lockdep_hardirqs_on+0x9c/0x150
[  583.580711][T21378]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  583.580731][T21378]  ? clear_bhb_loop+0x60/0xb0
[  583.580755][T21378]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  583.580775][T21378] RIP: 0033:0x7f3062b8f6c9
[  583.580794][T21378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  583.580811][T21378] RSP: 002b:00007f3063aa0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  583.580834][T21378] RAX: ffffffffffffffda RBX: 00007f3062de5fa0 RCX: 00007f3062b8f6c9
[  583.580849][T21378] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003
[  583.580862][T21378] RBP: 00007f3063aa0090 R08: 000020000005ffe4 R09: 000000000000001c
[  583.580875][T21378] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002
[  583.580887][T21378] R13: 00007f3062de6038 R14: 00007f3062de5fa0 R15: 00007ffd6be9b728
[  583.580923][T21378]  </TASK>
[  584.199957][T21386] ip6gretap2: entered promiscuous mode
[  584.240356][T21386] ip6gretap2: entered allmulticast mode
[  584.318818][T21388] nbd: must specify at least one socket
[  584.428314][T21388] nbd1: detected capacity change from 0 to 127
[  584.446681][T21393] nbd: couldn't find a device at index 0
[  584.545677][ T5839] block nbd1: Receive control failed (result -32)
[  585.189523][T21415] netlink: 'syz.3.4165': attribute type 21 has an invalid length.
[  585.223846][T21415] netlink: 'syz.3.4165': attribute type 22 has an invalid length.
[  585.258642][T21415] netlink: 'syz.3.4165': attribute type 23 has an invalid length.
[  585.489508][T21427] pim6reg: entered allmulticast mode
[  585.593266][T21427] pim6reg: left allmulticast mode
[  585.910610][T21454] __nla_validate_parse: 4 callbacks suppressed
[  585.910631][T21454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4171'.
[  586.544152][T21471] netlink: 'syz.1.4176': attribute type 2 has an invalid length.
[  586.553795][T21471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4176'.
[  586.664066][T21481] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4180'.
[  586.694936][T21480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4181'.
[  587.131554][T21507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4186'.
[  587.158554][  T940] IPVS: starting estimator thread 0...
[  587.213273][T21510] syzkaller1: entered promiscuous mode
[  587.229162][T21510] syzkaller1: entered allmulticast mode
[  587.257635][T21509] IPVS: using max 26 ests per chain, 62400 per kthread
[  587.310001][T21513] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4188'.
[  588.002879][T21524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4191'.
[  590.861437][T21524] hsr_slave_0: left promiscuous mode
[  590.869078][T21524] hsr_slave_1: left promiscuous mode
[  590.922474][T21547] pim6reg1: tun_chr_ioctl cmd 1074025677
[  590.947945][T21547] pim6reg1: linktype set to 0
[  591.061285][   T24] IPVS: starting estimator thread 0...
[  591.157818][T21559] IPVS: using max 27 ests per chain, 64800 per kthread
[  591.199862][T21566] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  591.564626][T21585] FAULT_INJECTION: forcing a failure.
[  591.564626][T21585] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  591.588584][T21585] CPU: 0 UID: 0 PID: 21585 Comm: syz.3.4202 Not tainted syzkaller #0 PREEMPT(full) 
[  591.588618][T21585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  591.588633][T21585] Call Trace:
[  591.588641][T21585]  <TASK>
[  591.588650][T21585]  dump_stack_lvl+0x189/0x250
[  591.588687][T21585]  ? __pfx____ratelimit+0x10/0x10
[  591.588721][T21585]  ? __pfx_dump_stack_lvl+0x10/0x10
[  591.588751][T21585]  ? __pfx__printk+0x10/0x10
[  591.588788][T21585]  should_fail_ex+0x414/0x560
[  591.588827][T21585]  _copy_to_user+0x31/0xb0
[  591.588857][T21585]  simple_read_from_buffer+0xe1/0x170
[  591.588896][T21585]  proc_fail_nth_read+0x1b3/0x220
[  591.588927][T21585]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  591.588960][T21585]  ? rw_verify_area+0x2a6/0x4d0
[  591.588988][T21585]  ? __lock_acquire+0xab9/0xd20
[  591.589007][T21585]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  591.589037][T21585]  vfs_read+0x200/0xa30
[  591.589065][T21585]  ? fdget_pos+0x247/0x320
[  591.589090][T21585]  ? __pfx___mutex_lock+0x10/0x10
[  591.589116][T21585]  ? __pfx_vfs_read+0x10/0x10
[  591.589147][T21585]  ? __fget_files+0x2a/0x420
[  591.589172][T21585]  ? __fget_files+0x3a0/0x420
[  591.589191][T21585]  ? __fget_files+0x2a/0x420
[  591.589229][T21585]  ksys_read+0x145/0x250
[  591.589261][T21585]  ? __pfx_ksys_read+0x10/0x10
[  591.589293][T21585]  ? do_syscall_64+0xbe/0xfa0
[  591.589317][T21585]  do_syscall_64+0xfa/0xfa0
[  591.589474][T21585]  ? lockdep_hardirqs_on+0x9c/0x150
[  591.589500][T21585]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  591.589520][T21585]  ? clear_bhb_loop+0x60/0xb0
[  591.589544][T21585]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  591.589564][T21585] RIP: 0033:0x7f6d2cd8e0dc
[  591.589583][T21585] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  591.589600][T21585] RSP: 002b:00007f6d2dc75030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  591.589622][T21585] RAX: ffffffffffffffda RBX: 00007f6d2cfe6090 RCX: 00007f6d2cd8e0dc
[  591.589636][T21585] RDX: 000000000000000f RSI: 00007f6d2dc750a0 RDI: 0000000000000006
[  591.589649][T21585] RBP: 00007f6d2dc75090 R08: 0000000000000000 R09: 0000000000000000
[  591.589661][T21585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  591.589672][T21585] R13: 00007f6d2cfe6128 R14: 00007f6d2cfe6090 R15: 00007fffa5070108
[  591.589707][T21585]  </TASK>
[  591.943893][T21587] netlink: 'syz.3.4203': attribute type 4 has an invalid length.
[  593.114989][T21628] FAULT_INJECTION: forcing a failure.
[  593.114989][T21628] name failslab, interval 1, probability 0, space 0, times 0
[  593.132374][T21628] CPU: 1 UID: 0 PID: 21628 Comm: syz.1.4217 Not tainted syzkaller #0 PREEMPT(full) 
[  593.132407][T21628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  593.132421][T21628] Call Trace:
[  593.132430][T21628]  <TASK>
[  593.132440][T21628]  dump_stack_lvl+0x189/0x250
[  593.132479][T21628]  ? __pfx____ratelimit+0x10/0x10
[  593.132516][T21628]  ? __pfx_dump_stack_lvl+0x10/0x10
[  593.132548][T21628]  ? __pfx__printk+0x10/0x10
[  593.132580][T21628]  ? __pfx___might_resched+0x10/0x10
[  593.132605][T21628]  ? fs_reclaim_acquire+0x7d/0x100
[  593.132635][T21628]  should_fail_ex+0x414/0x560
[  593.132677][T21628]  should_failslab+0xa8/0x100
[  593.132703][T21628]  kmem_cache_alloc_noprof+0x74/0x6e0
[  593.132734][T21628]  ? _sctp_make_chunk+0x14e/0x430
[  593.132755][T21628]  ? skb_put+0x11b/0x210
[  593.132784][T21628]  _sctp_make_chunk+0x14e/0x430
[  593.132813][T21628]  sctp_make_datafrag_empty+0x122/0x230
[  593.132853][T21628]  ? __pfx_sctp_make_datafrag_empty+0x10/0x10
[  593.132893][T21628]  ? sctp_user_addto_chunk+0xa8/0x240
[  593.132922][T21628]  sctp_datamsg_from_user+0x729/0xef0
[  593.132983][T21628]  sctp_sendmsg_to_asoc+0xffe/0x1810
[  593.133007][T21628]  ? __asan_memcpy+0x40/0x70
[  593.133047][T21628]  ? sctp_assoc_add_peer+0xcfa/0x13b0
[  593.133102][T21628]  ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10
[  593.133129][T21628]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  593.133158][T21628]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  593.133185][T21628]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  593.133209][T21628]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  593.133237][T21628]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  593.133263][T21628]  ? security_sctp_bind_connect+0x7e/0x2e0
[  593.133296][T21628]  sctp_sendmsg+0x1941/0x2810
[  593.133337][T21628]  ? __pfx_sctp_sendmsg+0x10/0x10
[  593.133367][T21628]  ? aa_sk_perm+0x81e/0x950
[  593.133406][T21628]  ? __pfx_aa_sk_perm+0x10/0x10
[  593.133443][T21628]  ? sock_rps_record_flow+0x19/0x410
[  593.133472][T21628]  ? inet_sendmsg+0x2f4/0x370
[  593.133494][T21628]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  593.133522][T21628]  __sock_sendmsg+0x19c/0x270
[  593.133559][T21628]  __sys_sendto+0x3bd/0x520
[  593.133586][T21628]  ? __pfx___sys_sendto+0x10/0x10
[  593.133607][T21628]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  593.133648][T21628]  ? __fget_files+0x3a0/0x420
[  593.133685][T21628]  ? ksys_write+0x22a/0x250
[  593.133721][T21628]  ? __pfx_ksys_write+0x10/0x10
[  593.133759][T21628]  __x64_sys_sendto+0xde/0x100
[  593.133801][T21628]  do_syscall_64+0xfa/0xfa0
[  593.133820][T21628]  ? lockdep_hardirqs_on+0x9c/0x150
[  593.133840][T21628]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.133861][T21628]  ? clear_bhb_loop+0x60/0xb0
[  593.133885][T21628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.133906][T21628] RIP: 0033:0x7f775778f6c9
[  593.133925][T21628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  593.133942][T21628] RSP: 002b:00007f77585bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  593.133964][T21628] RAX: ffffffffffffffda RBX: 00007f77579e5fa0 RCX: 00007f775778f6c9
[  593.133979][T21628] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003
[  593.133992][T21628] RBP: 00007f77585bb090 R08: 000020000005ffe4 R09: 000000000000001c
[  593.134005][T21628] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002
[  593.134017][T21628] R13: 00007f77579e6038 R14: 00007f77579e5fa0 R15: 00007fff3152a708
[  593.134051][T21628]  </TASK>
[  593.761618][T21639] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  593.969545][T21662] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4222'.
[  594.315008][T21676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4227'.
[  595.570286][T21716] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4241'.
[  595.782269][T21719] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.018142][T21719] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.188249][T21719] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.390361][T21743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4249'.
[  596.413611][T21749] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4252'.
[  596.554423][T20706] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  596.611608][T20706] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  596.676337][T20707] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  596.741172][T20705] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  597.300151][T21785] FAULT_INJECTION: forcing a failure.
[  597.300151][T21785] name failslab, interval 1, probability 0, space 0, times 0
[  597.323519][T21785] CPU: 1 UID: 0 PID: 21785 Comm: syz.3.4261 Not tainted syzkaller #0 PREEMPT(full) 
[  597.323549][T21785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  597.323562][T21785] Call Trace:
[  597.323571][T21785]  <TASK>
[  597.323579][T21785]  dump_stack_lvl+0x189/0x250
[  597.323614][T21785]  ? __pfx____ratelimit+0x10/0x10
[  597.323647][T21785]  ? __pfx_dump_stack_lvl+0x10/0x10
[  597.323677][T21785]  ? __pfx__printk+0x10/0x10
[  597.323715][T21785]  should_fail_ex+0x414/0x560
[  597.323753][T21785]  should_failslab+0xa8/0x100
[  597.323778][T21785]  __kmalloc_cache_noprof+0x6f/0x6f0
[  597.323808][T21785]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  597.323838][T21785]  ? sctp_add_bind_addr+0x8c/0x370
[  597.323867][T21785]  ? sctp_add_bind_addr+0xb0/0x370
[  597.323902][T21785]  sctp_add_bind_addr+0x8c/0x370
[  597.323939][T21785]  sctp_copy_local_addr_list+0x30b/0x4e0
[  597.323975][T21785]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  597.324007][T21785]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  597.324040][T21785]  ? sctp_v6_is_any+0x64/0x80
[  597.324061][T21785]  ? sctp_copy_one_addr+0x93/0x360
[  597.324096][T21785]  sctp_bind_addr_copy+0xb3/0x3c0
[  597.324128][T21785]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  597.324160][T21785]  sctp_connect_new_asoc+0x2e0/0x690
[  597.324189][T21785]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  597.324210][T21785]  ? __local_bh_enable_ip+0x12d/0x1c0
[  597.324242][T21785]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  597.324266][T21785]  ? security_sctp_bind_connect+0x7e/0x2e0
[  597.324295][T21785]  sctp_sendmsg+0x155c/0x2810
[  597.324332][T21785]  ? __pfx_sctp_sendmsg+0x10/0x10
[  597.324359][T21785]  ? aa_sk_perm+0x81e/0x950
[  597.324394][T21785]  ? __pfx_aa_sk_perm+0x10/0x10
[  597.324436][T21785]  ? sock_rps_record_flow+0x19/0x410
[  597.324463][T21785]  ? inet_sendmsg+0x2f4/0x370
[  597.324490][T21785]  __sock_sendmsg+0x19c/0x270
[  597.324525][T21785]  __sys_sendto+0x3bd/0x520
[  597.324550][T21785]  ? __pfx___sys_sendto+0x10/0x10
[  597.324568][T21785]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  597.324607][T21785]  ? __fget_files+0x3a0/0x420
[  597.324640][T21785]  ? ksys_write+0x22a/0x250
[  597.324673][T21785]  ? __pfx_ksys_write+0x10/0x10
[  597.324708][T21785]  __x64_sys_sendto+0xde/0x100
[  597.324734][T21785]  do_syscall_64+0xfa/0xfa0
[  597.324754][T21785]  ? lockdep_hardirqs_on+0x9c/0x150
[  597.324773][T21785]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.324794][T21785]  ? clear_bhb_loop+0x60/0xb0
[  597.324820][T21785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.324839][T21785] RIP: 0033:0x7f6d2cd8f6c9
[  597.324858][T21785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  597.324875][T21785] RSP: 002b:00007f6d2dc96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  597.324897][T21785] RAX: ffffffffffffffda RBX: 00007f6d2cfe5fa0 RCX: 00007f6d2cd8f6c9
[  597.324913][T21785] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003
[  597.324926][T21785] RBP: 00007f6d2dc96090 R08: 000020000005ffe4 R09: 000000000000001c
[  597.324939][T21785] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002
[  597.324952][T21785] R13: 00007f6d2cfe6038 R14: 00007f6d2cfe5fa0 R15: 00007fffa5070108
[  597.324988][T21785]  </TASK>
[  597.367967][T21786] veth0_to_bridge: entered promiscuous mode
[  597.545337][   T31] audit: type=1107 audit(1763550190.210:10): pid=21784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  597.634340][T21789] veth0_to_bridge: left promiscuous mode
[  597.697035][T21788] bond0: (slave rose0): Enslaving as an active interface with an up link
[  597.963181][T21799] sch_tbf: burst 4398 is lower than device lo mtu (61420) !
[  597.969266][T21801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4266'.
[  599.053290][T21835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4278'.
[  599.230535][T21841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4279'.
[  599.970474][T21879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4288'.
[  600.074558][T21887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4289'.
[  600.148399][T21886] bond0: Caught tx_queue_len zero misconfig
[  600.402177][T21898] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4295'.
[  600.423020][T21898] Bluetooth: MGMT ver 1.23
[  600.536910][T21911] FAULT_INJECTION: forcing a failure.
[  600.536910][T21911] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  600.552464][T21911] CPU: 1 UID: 0 PID: 21911 Comm: syz.1.4297 Not tainted syzkaller #0 PREEMPT(full) 
[  600.552494][T21911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  600.552506][T21911] Call Trace:
[  600.552515][T21911]  <TASK>
[  600.552524][T21911]  dump_stack_lvl+0x189/0x250
[  600.552557][T21911]  ? __pfx____ratelimit+0x10/0x10
[  600.552589][T21911]  ? __pfx_dump_stack_lvl+0x10/0x10
[  600.552617][T21911]  ? __pfx__printk+0x10/0x10
[  600.552650][T21911]  should_fail_ex+0x414/0x560
[  600.552688][T21911]  _copy_to_user+0x31/0xb0
[  600.552718][T21911]  simple_read_from_buffer+0xe1/0x170
[  600.552756][T21911]  proc_fail_nth_read+0x1b3/0x220
[  600.552784][T21911]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  600.552816][T21911]  ? rw_verify_area+0x2a6/0x4d0
[  600.552843][T21911]  ? __lock_acquire+0xab9/0xd20
[  600.552863][T21911]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  600.552891][T21911]  vfs_read+0x200/0xa30
[  600.552919][T21911]  ? fdget_pos+0x247/0x320
[  600.552944][T21911]  ? __pfx___mutex_lock+0x10/0x10
[  600.552967][T21911]  ? __pfx_vfs_read+0x10/0x10
[  600.552998][T21911]  ? __fget_files+0x2a/0x420
[  600.553022][T21911]  ? __fget_files+0x3a0/0x420
[  600.553041][T21911]  ? __fget_files+0x2a/0x420
[  600.553081][T21911]  ksys_read+0x145/0x250
[  600.553112][T21911]  ? __pfx_ksys_read+0x10/0x10
[  600.553143][T21911]  ? do_syscall_64+0xbe/0xfa0
[  600.553169][T21911]  do_syscall_64+0xfa/0xfa0
[  600.553188][T21911]  ? lockdep_hardirqs_on+0x9c/0x150
[  600.553208][T21911]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  600.553228][T21911]  ? clear_bhb_loop+0x60/0xb0
[  600.553254][T21911]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  600.553274][T21911] RIP: 0033:0x7f775778e0dc
[  600.553293][T21911] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  600.553311][T21911] RSP: 002b:00007f77585bb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  600.553334][T21911] RAX: ffffffffffffffda RBX: 00007f77579e5fa0 RCX: 00007f775778e0dc
[  600.553349][T21911] RDX: 000000000000000f RSI: 00007f77585bb0a0 RDI: 0000000000000004
[  600.553362][T21911] RBP: 00007f77585bb090 R08: 0000000000000000 R09: 000000000000001c
[  600.553375][T21911] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002
[  600.553387][T21911] R13: 00007f77579e6038 R14: 00007f77579e5fa0 R15: 00007fff3152a708
[  600.553424][T21911]  </TASK>
[  600.958910][T21922] netlink: 'syz.4.4298': attribute type 2 has an invalid length.
[  601.056086][T21927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4300'.
[  601.070854][T21927] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4300'.
[  601.100943][T20072] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  601.101060][T21927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4300'.
[  601.117639][T20072] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  601.120710][T21927] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4300'.
[  601.145125][T20072] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  601.154290][T20072] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  601.390565][T21942] netlink: 'syz.4.4305': attribute type 13 has an invalid length.
[  601.513331][T21943] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4304'.
[  601.571329][T21943] hsr_slave_0: left promiscuous mode
[  601.606935][T21943] hsr_slave_1: left promiscuous mode
[  602.054302][T21961] netlink: 'syz.1.4308': attribute type 1 has an invalid length.
[  602.095331][T21961] 8021q: adding VLAN 0 to HW filter on device bond3
[  602.129365][T21961] 8021q: adding VLAN 0 to HW filter on device bond3
[  602.136871][T21961] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  602.150741][T21961] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  602.233346][T21963] veth5: entered promiscuous mode
[  602.242750][T21963] bond3: (slave veth5): Enslaving as an active interface with a down link
[  602.396959][T21971] syz_tun: entered allmulticast mode
[  602.439375][T21971] dvmrp8: entered allmulticast mode
[  602.457513][T21977] x_tables: duplicate underflow at hook 2
[  602.527595][ T5835] Bluetooth: hci2: command 0x0405 tx timeout
[  602.534996][ T5839] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  602.559506][T21969] syz_tun: left allmulticast mode
[  602.768746][T21983] netlink: 'syz.1.4314': attribute type 2 has an invalid length.
[  603.256074][T22004] wlan0 speed is unknown, defaulting to 1000
[  603.285290][T22004] wlan0 speed is unknown, defaulting to 1000
[  603.345134][T22004] wlan0 speed is unknown, defaulting to 1000
[  603.393120][T22004] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  603.468616][T22004] wlan0 speed is unknown, defaulting to 1000
[  603.488410][T22004] wlan0 speed is unknown, defaulting to 1000
[  603.504605][T22004] wlan0 speed is unknown, defaulting to 1000
[  603.523969][T22004] wlan0 speed is unknown, defaulting to 1000
[  603.545666][T22004] wlan0 speed is unknown, defaulting to 1000
[  603.588149][T22004] wlan0 speed is unknown, defaulting to 1000
[  603.797559][T22004] wlan0 speed is unknown, defaulting to 1000
[  603.805606][T22004] wlan0 speed is unknown, defaulting to 1000
[  604.189505][T22034] __nla_validate_parse: 6 callbacks suppressed
[  604.189527][T22034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4325'.
[  604.748035][T22056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4331'.
[  604.807707][T22052] nbd0: detected capacity change from 0 to 63
[  604.847263][T22054] nbd: must specify an index to disconnect
[  604.874853][T22066] bond0: entered promiscuous mode
[  604.912153][T22066] bond0: entered allmulticast mode
[  604.927426][T22066] 8021q: adding VLAN 0 to HW filter on device bond0
[  604.968888][ T5839] block nbd0: Receive control failed (result -32)
[  605.090889][T22078] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  605.330969][T22085] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4336'.
[  605.603963][T22095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4340'.
[  605.613964][T22095] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  605.640425][T22095] batadv0: mtu less than device minimum
[  605.653004][T22095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  605.665574][T22095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  605.677579][T22095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  605.689757][T22095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  605.701769][T22095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  605.713826][T22095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  605.725796][T22095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  605.737787][T22095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  605.749747][T22095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  605.794380][T22098] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4342'.
[  605.872192][T22095] batman_adv: batadv0: Removing interface: batadv_slave_1
[  605.958945][T22110] netlink: 'syz.2.4343': attribute type 4 has an invalid length.
[  606.152343][T22117] netlink: 'syz.0.4345': attribute type 2 has an invalid length.
[  606.170524][T22117] !: entered promiscuous mode
[  606.180932][T22117] netlink: 'syz.0.4345': attribute type 2 has an invalid length.
[  606.214910][T22117] !: left promiscuous mode
[  606.826555][T22153] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) !
[  606.885889][T22153] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4355'.
[  607.021524][T22161] xt_l2tp: v2 sid > 0xffff: 262147
[  607.060087][T22161] macsec0: entered promiscuous mode
[  607.093090][T22161] bridge0: entered promiscuous mode
[  607.129838][T22161] macsec0: entered allmulticast mode
[  607.135411][T22161] bridge0: entered allmulticast mode
[  607.150196][T22161] bridge0: port 4(macsec0) entered blocking state
[  607.166786][T22161] bridge0: port 4(macsec0) entered disabled state
[  607.219807][T22161] bridge0: left allmulticast mode
[  607.225078][T22161] bridge0: left promiscuous mode
[  607.552984][T22180] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4363'.
[  607.607649][T22185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4360'.
[  607.625096][T22180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4363'.
[  607.783092][T22197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4367'.
[  608.301347][T22223] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  608.737815][T22237] bond0: (slave rose0): Releasing backup interface
[  609.415633][T22254] xt_CT: You must specify a L4 protocol and not use inversions on it
[  609.532089][T22257] xt_CT: You must specify a L4 protocol and not use inversions on it
[  609.854474][T22277] tap0: tun_chr_ioctl cmd 1074025677
[  609.860985][T22277] tap0: linktype set to 6
[  610.167060][T22295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4385'.
[  610.796888][T22321] wg1 speed is unknown, defaulting to 1000
[  610.803808][T22321] wg1 speed is unknown, defaulting to 1000
[  610.811003][T22321] wg1 speed is unknown, defaulting to 1000
[  610.834151][T22321] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98
[  610.882222][T22321] wg1 speed is unknown, defaulting to 1000
[  610.891006][T22321] wg1 speed is unknown, defaulting to 1000
[  610.899542][T22321] wg1 speed is unknown, defaulting to 1000
[  610.909950][T22321] wg1 speed is unknown, defaulting to 1000
[  610.918595][T22321] wg1 speed is unknown, defaulting to 1000
[  610.926770][T22321] wg1 speed is unknown, defaulting to 1000
[  610.935169][T22321] wg1 speed is unknown, defaulting to 1000
[  610.965682][T22321] xt_TCPMSS: Only works on TCP SYN packets
[  611.293999][T22336] syzkaller0: entered promiscuous mode
[  611.301103][T22336] syzkaller0: entered allmulticast mode
[  611.333204][T22342] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4398'.
[  611.363768][T22342] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4398'.
[  611.614801][T22351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4401'.
[  611.637410][T22351] netlink: 620 bytes leftover after parsing attributes in process `syz.3.4401'.
[  611.658714][T22353] syzkaller0: entered promiscuous mode
[  611.669235][T22356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4401'.
[  611.674642][T22353] syzkaller0: entered allmulticast mode
[  611.678797][T22356] netlink: 620 bytes leftover after parsing attributes in process `syz.3.4401'.
[  611.989178][T22354] wlan0 speed is unknown, defaulting to 1000
[  611.997613][T22354] wg1 speed is unknown, defaulting to 1000
[  612.297896][T22375] team0: Device ve is loopback device. Loopback devices can't be added as a team port
[  612.328904][T22377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4405'.
[  612.337493][T22375] net_ratelimit: 11 callbacks suppressed
[  612.337517][T22375] A link change request failed with some changes committed already. Interface ve may have been left with an inconsistent configuration, please check.
[  612.396174][T22380] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  612.459239][T22368] wlan0 speed is unknown, defaulting to 1000
[  612.571300][T22368] wg1 speed is unknown, defaulting to 1000
[  613.071166][T22402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4412'.
[  613.482236][T22407] netlink: 'syz.4.4414': attribute type 3 has an invalid length.
[  613.981393][T22428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4421'.
[  614.059286][T22428] 8021q: adding VLAN 0 to HW filter on device bond2
[  614.606554][T22468] IPVS: set_ctl: invalid protocol: 12078 114.111.117.112:11875
[  615.167285][T22504] __nla_validate_parse: 6 callbacks suppressed
[  615.167308][T22504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4439'.
[  615.183938][T22507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4436'.
[  615.237852][T22510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4438'.
[  615.260918][T22500] bridge0: port 2(bridge_slave_1) entered disabled state
[  615.268729][T22500] bridge0: port 1(bridge_slave_0) entered disabled state
[  615.306464][T22500] batman_adv: batadv0: Interface deactivated: dummy0
[  615.454315][T22500] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  615.724045][T22500] macvlan3: left promiscuous mode
[  615.796979][T22500] bond0: left promiscuous mode
[  615.810771][T22500] bond0: left allmulticast mode
[  615.867990][T22490] netlink: 'syz.2.4436': attribute type 41 has an invalid length.
[  615.884316][T22510] hsr_slave_0: left promiscuous mode
[  615.916887][T22512] tipc: Started in network mode
[  615.924127][T22512] tipc: Node identity eab5c05e111, cluster identity 4711
[  615.931840][T22512] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  615.940452][T11364] wg1 speed is unknown, defaulting to 1000
[  615.946557][T20709] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  615.955811][T11364] syz: Port: 1 Link DOWN
[  615.962857][T20709] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  616.127764][T22532] netlink: 'syz.2.4443': attribute type 1 has an invalid length.
[  616.444686][T20707] team0: Port device bridge2 removed
[  616.857930][T20707] .` (unregistering): left promiscuous mode
[  616.863974][T20707] bond_slave_0: left promiscuous mode
[  616.869884][T20707] bond_slave_1: left promiscuous mode
[  616.877044][T20707] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  616.888523][T20707] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  616.897899][T20707] .` (unregistering): Released all slaves
[  616.912940][T20707] bond1 (unregistering): Released all slaves
[  617.055540][T20707] bond0 (unregistering): (slave wireguard0): Releasing backup interface
[  617.065618][T20707] bond0 (unregistering): (slave wireguard1): Releasing backup interface
[  617.074665][T20707] bond0 (unregistering): Released all slaves
[  617.215654][T20707] bond2 (unregistering): Released all slaves
[  617.237764][ T5835] Bluetooth: hci3: command 0x0405 tx timeout
[  617.372554][T20707] bond3 (unregistering): Released all slaves
[  617.523825][T20707] bond4 (unregistering): Released all slaves
[  617.540716][T22522] tipc: Resetting bearer <eth:syzkaller0>
[  617.547070][T20709] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  617.556312][T20709] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  617.665870][T22534] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  617.679509][T22534] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  617.714328][T22503] tipc: Disabling bearer <eth:syzkaller0>
[  617.764497][T22535] bond3: (slave gretap1): making interface the new active one
[  617.774039][T22535] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  617.784340][T11328] tipc: Node number set to 4221943902
[  617.880227][T20707] tipc: Left network mode
[  617.909790][T20707] IPVS: stopping backup sync thread 6902 ...
[  618.156974][T22556] lo: Caught tx_queue_len zero misconfig
[  618.165455][T22555] Bluetooth: hci0: Opcode 0x080f failed: -22
[  618.474789][T22566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4452'.
[  618.623955][T20707] dummy0: left promiscuous mode
[  618.651796][T20707] batman_adv: batadv0: Removing interface: batadv_slave_0
[  618.665489][T20707] batman_adv: batadv0: Removing interface: batadv_slave_1
[  619.970949][T20707] team0 (unregistering): Port device team_slave_1 removed
[  620.119936][T20707] team0 (unregistering): Port device team_slave_0 removed
[  620.203026][ T5839] Bluetooth: hci0: command tx timeout
[  621.174980][T22614] netlink: 'syz.3.4466': attribute type 5 has an invalid length.
[  621.554016][T20707] IPVS: stop unused estimator thread 0...
[  621.650229][T22627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4470'.
[  621.912127][T22622] wlan0 speed is unknown, defaulting to 1000
[  621.962586][T22622] wg1 speed is unknown, defaulting to 1000
[  622.200946][T22652] team0: Port device bridge4 added
[  622.239648][T22656] netlink: 71 bytes leftover after parsing attributes in process `syz.2.4480'.
[  622.353406][T22654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4479'.
[  622.362883][T22657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4479'.
[  622.400039][T22645] wlan0 speed is unknown, defaulting to 1000
[  622.418682][T22645] wg1 speed is unknown, defaulting to 1000
[  623.366785][T22671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4484'.
[  623.390493][T22665] bond4 (unregistering): Released all slaves
[  623.446415][T22668] netlink: 'syz.4.4482': attribute type 3 has an invalid length.
[  623.461059][T22668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4482'.
[  623.466047][T22671] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4484'.
[  623.642635][T22676] FAULT_INJECTION: forcing a failure.
[  623.642635][T22676] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  623.737576][T22676] CPU: 1 UID: 0 PID: 22676 Comm: syz.3.4485 Not tainted syzkaller #0 PREEMPT(full) 
[  623.737607][T22676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  623.737621][T22676] Call Trace:
[  623.737636][T22676]  <TASK>
[  623.737646][T22676]  dump_stack_lvl+0x189/0x250
[  623.737680][T22676]  ? __pfx____ratelimit+0x10/0x10
[  623.737714][T22676]  ? __pfx_dump_stack_lvl+0x10/0x10
[  623.737742][T22676]  ? __pfx__printk+0x10/0x10
[  623.737778][T22676]  should_fail_ex+0x414/0x560
[  623.737816][T22676]  _copy_to_user+0x31/0xb0
[  623.737845][T22676]  simple_read_from_buffer+0xe1/0x170
[  623.737883][T22676]  proc_fail_nth_read+0x1b3/0x220
[  623.737914][T22676]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  623.737944][T22676]  ? rw_verify_area+0x2a6/0x4d0
[  623.737971][T22676]  ? __lock_acquire+0xab9/0xd20
[  623.737990][T22676]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  623.738018][T22676]  vfs_read+0x200/0xa30
[  623.738045][T22676]  ? fdget_pos+0x247/0x320
[  623.738070][T22676]  ? __pfx___mutex_lock+0x10/0x10
[  623.738094][T22676]  ? __pfx_vfs_read+0x10/0x10
[  623.738125][T22676]  ? __fget_files+0x2a/0x420
[  623.738149][T22676]  ? __fget_files+0x3a0/0x420
[  623.738168][T22676]  ? __fget_files+0x2a/0x420
[  623.738198][T22676]  ksys_read+0x145/0x250
[  623.738231][T22676]  ? __pfx_ksys_read+0x10/0x10
[  623.738264][T22676]  ? do_syscall_64+0xbe/0xfa0
[  623.738289][T22676]  do_syscall_64+0xfa/0xfa0
[  623.738308][T22676]  ? lockdep_hardirqs_on+0x9c/0x150
[  623.738327][T22676]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  623.738348][T22676]  ? clear_bhb_loop+0x60/0xb0
[  623.738374][T22676]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  623.738394][T22676] RIP: 0033:0x7f6d2cd8e0dc
[  623.738413][T22676] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  623.738437][T22676] RSP: 002b:00007f6d2dc75030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  623.738459][T22676] RAX: ffffffffffffffda RBX: 00007f6d2cfe6090 RCX: 00007f6d2cd8e0dc
[  623.738474][T22676] RDX: 000000000000000f RSI: 00007f6d2dc750a0 RDI: 0000000000000006
[  623.738486][T22676] RBP: 00007f6d2dc75090 R08: 0000000000000000 R09: 0000000000000000
[  623.738498][T22676] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  623.738511][T22676] R13: 00007f6d2cfe6128 R14: 00007f6d2cfe6090 R15: 00007fffa5070108
[  623.738546][T22676]  </TASK>
[  624.103265][T22685] syzkaller0: tun_chr_ioctl cmd 2147767520
[  624.109973][T22689] syzkaller0: tun_chr_ioctl cmd 2147767520
[  624.165727][T22692] x_tables: duplicate underflow at hook 2
[  624.255826][T22696] tc_dump_action: action bad kind
[  624.652271][T22722] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4499'.
[  624.751650][T22724] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4499'.
[  624.906418][T22730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4501'.
[  625.087338][T22739] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  625.601340][T22753] syzkaller0: entered promiscuous mode
[  625.641837][T22753] syzkaller0: entered allmulticast mode
[  625.681491][T22709] wlan0 speed is unknown, defaulting to 1000
[  628.126661][T22709] wg1 speed is unknown, defaulting to 1000
[  628.129174][T22724] wlan0 speed is unknown, defaulting to 1000
[  628.171754][T22724] wg1 speed is unknown, defaulting to 1000
[  628.396317][T22783] netlink: 'syz.1.4516': attribute type 3 has an invalid length.
[  628.412497][T22783] netlink: 'syz.1.4516': attribute type 3 has an invalid length.
[  628.768741][T22772] wlan0 speed is unknown, defaulting to 1000
[  628.776884][T22772] wg1 speed is unknown, defaulting to 1000
[  629.416796][T22791] wlan0 speed is unknown, defaulting to 1000
[  629.438551][T22791] wg1 speed is unknown, defaulting to 1000
[  630.121967][T22813] batadv_slave_0: entered promiscuous mode
[  630.132075][T22814] __nla_validate_parse: 1 callbacks suppressed
[  630.132096][T22814] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4526'.
[  630.322371][T22818] netlink: 'syz.0.4527': attribute type 4 has an invalid length.
[  630.341736][T22818] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4527'.
[  630.718856][T22828] netlink: 'syz.3.4524': attribute type 11 has an invalid length.
[  630.961234][T22840] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4536'.
[  630.976665][T22842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4535'.
[  631.021549][T22843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4537'.
[  631.128859][T22825] wlan0 speed is unknown, defaulting to 1000
[  631.165010][T22849] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4539'.
[  631.185001][T22825] wg1 speed is unknown, defaulting to 1000
[  631.202563][T22849] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4539'.
[  631.248297][T20706] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  631.280622][T20706] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  631.293359][T20706] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  631.305179][T20706] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  631.315043][T22852] xt_TPROXY: Can be used only with -p tcp or -p udp
[  632.331957][T22883] dummy0: entered promiscuous mode
[  632.338695][T22883] vlan3: entered promiscuous mode
[  632.598705][ T5835] Bluetooth: hci2: command 0x0405 tx timeout
[  633.159865][T22918] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4559'.
[  633.461711][T22937] netlink: 'syz.4.4565': attribute type 32 has an invalid length.
[  633.506131][T22905] wlan0 speed is unknown, defaulting to 1000
[  633.515507][T22905] wg1 speed is unknown, defaulting to 1000
[  633.691203][T22947] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4570'.
[  634.587845][   T31] audit: type=1800 audit(1763550227.260:11): pid=22970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4576" name="memory.events" dev="tmpfs" ino=1242 res=0 errno=0
[  634.699171][T22976] syzkaller0: entered promiscuous mode
[  634.735534][T22976] syzkaller0: entered allmulticast mode
[  634.851135][T22982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4579'.
[  635.279378][T23004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4585'.
[  635.345417][T22992] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  635.398996][T23017] tipc: Enabled bearer <udp:syz2>, priority 6
[  635.428645][   T50] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  635.628475][   T50] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  635.723954][T23029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4591'.
[  635.756920][T23027] pim6reg1: entered promiscuous mode
[  635.762444][T23027] pim6reg1: entered allmulticast mode
[  635.802083][T23031] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4592'.
[  635.917469][T23033] netlink: 'syz.0.4593': attribute type 5 has an invalid length.
[  636.070618][T23018] delete_channel: no stack
[  636.233811][T23049] Unsupported ieee802154 address type: 0
[  636.244460][T23047] siw: device registration error -23
[  636.264998][T23049] pim6reg: entered allmulticast mode
[  636.344197][T23053] veth0_vlan: left allmulticast mode
[  636.359415][T23025] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4590'.
[  636.454748][T23053] veth7: left promiscuous mode
[  636.486071][T23067] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4602'.
[  636.518745][T23053] ip6gretap2: left promiscuous mode
[  636.545129][T23053] ip6gretap2: left allmulticast mode
[  636.579069][T11364] tipc: Node number set to 661720492
[  636.773883][T23083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4607'.
[  636.788606][T23083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4607'.
[  636.799493][T23083] netlink: 'syz.2.4607': attribute type 18 has an invalid length.
[  636.960352][T23066] wlan0 speed is unknown, defaulting to 1000
[  636.971356][T23066] wg1 speed is unknown, defaulting to 1000
[  637.038207][T23089] xt_ecn: cannot match TCP bits for non-tcp packets
[  637.608025][T23115] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4619'.
[  637.726854][T23115] team0: Port device bridge5 added
[  637.741291][T23121] bridge0: port 1(team0) entered blocking state
[  637.762533][T23121] bridge0: port 1(team0) entered disabled state
[  637.781924][T23121] team0: entered allmulticast mode
[  637.794585][T23121] dummy0: entered allmulticast mode
[  637.819436][T23121] bridge4: entered allmulticast mode
[  637.852903][T23121] bridge5: entered allmulticast mode
[  637.876690][T23121] team0: entered promiscuous mode
[  637.889246][T23121] dummy0: entered promiscuous mode
[  637.905498][T23121] bridge4: entered promiscuous mode
[  637.915156][T23121] bridge5: entered promiscuous mode
[  637.951132][T23115] geneve2: entered promiscuous mode
[  638.053940][T20706] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  638.083023][T23121] veth14: entered allmulticast mode
[  638.290600][T20706] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  638.328492][T20706] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  638.400866][T20706] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  638.534695][T23131] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4622'.
[  638.654067][T23133] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  638.907921][T23146] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) !
[  638.981739][T23150] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4627'.
[  638.991623][T23150] netlink: 'syz.4.4627': attribute type 5 has an invalid length.
[  639.009345][T23122] wlan0 speed is unknown, defaulting to 1000
[  639.017355][T23150] netlink: 'syz.4.4627': attribute type 6 has an invalid length.
[  639.019242][T23122] wg1 speed is unknown, defaulting to 1000
[  639.813324][T23182] netlink: 'syz.2.4637': attribute type 33 has an invalid length.
[  639.951139][T23189] ip6gre1: entered promiscuous mode
[  640.183064][T23201] bond4 (unregistering): Released all slaves
[  640.234231][T23207] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  640.321363][T23213] __nla_validate_parse: 11 callbacks suppressed
[  640.321384][T23213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4644'.
[  640.351597][T23213] batman_adv: batadv0: Removing interface: batadv_slave_0
[  640.396236][T23213] batman_adv: batadv0: Removing interface: batadv_slave_1
[  640.461798][T23213] batadv0 (unregistering): left promiscuous mode
[  640.516385][T23207] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  640.610706][T23207] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  640.712754][T23207] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  640.717431][T23227] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4648'.
[  640.759032][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  640.893344][T20705] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  640.934525][T20705] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  640.976220][T20705] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  641.045771][T20705] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  641.222342][T23217] geneve2: entered promiscuous mode
[  641.233593][T20705] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  641.262203][T20705] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  641.280822][T20705] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  641.320063][T20705] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  642.090907][T23282] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4667'.
[  642.159360][T23282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4667'.
[  642.652942][T23298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  642.726614][T23301] netlink: 'syz.4.4674': attribute type 13 has an invalid length.
[  642.999237][T20705] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  643.022160][T23294] wlan0 speed is unknown, defaulting to 1000
[  643.028006][T20705] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  643.058349][T20705] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  643.079920][T23294] wg1 speed is unknown, defaulting to 1000
[  643.079938][T20705] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  644.092633][T23325] delete_channel: no stack
[  644.097557][T23325] delete_channel: no stack
[  644.102421][T23325] delete_channel: no stack
[  644.112865][T23325] delete_channel: no stack
[  644.118027][T23325] delete_channel: no stack
[  644.122677][T23325] delete_channel: no stack
[  644.128082][T23325] delete_channel: no stack
[  644.132807][T23325] delete_channel: no stack
[  644.137905][T23325] delete_channel: no stack
[  644.152387][T23325] delete_channel: no stack
[  644.157083][T23325] delete_channel: no stack
[  644.164111][T23325] delete_channel: no stack
[  644.169124][T23320] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  644.183247][T23325] delete_channel: no stack
[  644.193273][T23325] delete_channel: no stack
[  644.213539][T23325] delete_channel: no stack
[  644.226123][T23325] delete_channel: no stack
[  644.251481][T23354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4686'.
[  644.254007][T23325] delete_channel: no stack
[  644.307054][T23325] delete_channel: no stack
[  644.322240][T23325] delete_channel: no stack
[  644.332248][T23325] delete_channel: no stack
[  644.336969][T23325] delete_channel: no stack
[  644.353585][T23325] delete_channel: no stack
[  644.362141][T23325] delete_channel: no stack
[  644.370193][T23355] bridge0: port 4(macvtap0) entered blocking state
[  644.377033][T23355] bridge0: port 4(macvtap0) entered disabled state
[  644.377107][T23325] delete_channel: no stack
[  644.384130][T23355] macvtap0: entered allmulticast mode
[  644.394008][T23355] bridge0: entered allmulticast mode
[  644.403864][T23325] delete_channel: no stack
[  644.410195][T23325] delete_channel: no stack
[  644.420776][T23325] delete_channel: no stack
[  644.427450][T23355] macvtap0: left allmulticast mode
[  644.432750][T23355] bridge0: left allmulticast mode
[  644.462837][T23325] delete_channel: no stack
[  644.471208][T23325] delete_channel: no stack
[  644.476460][T23325] delete_channel: no stack
[  644.536651][T23325] delete_channel: no stack
[  644.562833][T23325] delete_channel: no stack
[  644.578958][T23325] delete_channel: no stack
[  644.680036][T23367] netlink: 'syz.1.4689': attribute type 39 has an invalid length.
[  644.742558][T23371] netlink: 'syz.2.4691': attribute type 10 has an invalid length.
[  644.911699][T23374] syzkaller0: entered promiscuous mode
[  644.929382][T23374] syzkaller0: entered allmulticast mode
[  644.983061][T23376] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  645.013495][T23376] syzkaller0: entered promiscuous mode
[  645.037544][T23376] syzkaller0: entered allmulticast mode
[  645.081422][T23376] tipc: Resetting bearer <eth:syzkaller0>
[  645.092221][T23375] tipc: Resetting bearer <eth:syzkaller0>
[  645.129622][T23375] tipc: Disabling bearer <eth:syzkaller0>
[  645.222623][T23387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4696'.
[  645.785408][T23380] wlan0 speed is unknown, defaulting to 1000
[  645.802294][T23380] wg1 speed is unknown, defaulting to 1000
[  646.272379][T23422] pimreg3: entered allmulticast mode
[  646.374001][T23427] syz_tun: entered allmulticast mode
[  647.025787][T23458] syzkaller0: entered promiscuous mode
[  647.062777][T23458] syzkaller0: entered allmulticast mode
[  647.072761][T23461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4712'.
[  647.313024][T23469] netlink: 'syz.2.4714': attribute type 13 has an invalid length.
[  647.331707][T23469] netlink: 'syz.2.4714': attribute type 17 has an invalid length.
[  647.354507][T23469] netlink: 'syz.2.4714': attribute type 27 has an invalid length.
[  647.543139][T23441] lec:lec_vcc_attach: copy from user failed for 28 bytes
[  647.584103][T23474] x_tables: ip6_tables: udplite match: only valid for protocol 136
[  647.909542][T23479] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4716'.
[  647.978386][T23484] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4716'.
[  648.030856][T23487] 
[  648.033244][T23487] ======================================================
[  648.034161][T23488] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4716'.
[  648.040277][T23487] WARNING: possible circular locking dependency detected
[  648.040307][T23487] syzkaller #0 Not tainted
[  648.040319][T23487] ------------------------------------------------------
[  648.040329][T23487] syz.1.4717/23487 is trying to acquire lock:
[  648.040341][T23487] ffffffff8f426a58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_del_node+0x517/0x8d0
[  648.040407][T23487] 
[  648.040407][T23487] but task is already holding lock:
[  648.040416][T23487] ffff888053e47a70 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x152/0x8d0
[  648.099960][T23487] 
[  648.099960][T23487] which lock already depends on the new lock.
[  648.099960][T23487] 
[  648.110381][T23487] 
[  648.110381][T23487] the existing dependency chain (in reverse order) is:
[  648.119399][T23487] 
[  648.119399][T23487] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  648.127409][T23487]        lock_acquire+0x120/0x360
[  648.132631][T23487]        _raw_spin_lock_bh+0x36/0x50
[  648.138028][T23487]        nr_del_node+0x152/0x8d0
[  648.142989][T23487]        nr_rt_ioctl+0x989/0xd50
[  648.147954][T23487]        sock_do_ioctl+0xdc/0x300
[  648.153100][T23487]        sock_ioctl+0x576/0x790
[  648.157979][T23487]        __se_sys_ioctl+0xfc/0x170
[  648.163125][T23487]        do_syscall_64+0xfa/0xfa0
[  648.168181][T23487]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.174815][T23487] 
[  648.174815][T23487] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  648.182759][T23487]        lock_acquire+0x120/0x360
[  648.187806][T23487]        _raw_spin_lock_bh+0x36/0x50
[  648.193115][T23487]        nr_rt_device_down+0xa9/0x720
[  648.198507][T23487]        nr_device_event+0x137/0x150
[  648.203911][T23487]        notifier_call_chain+0x1b6/0x3e0
[  648.209648][T23487]        __dev_notify_flags+0x18d/0x2e0
[  648.215207][T23487]        netif_change_flags+0xe8/0x1a0
[  648.220872][T23487]        dev_change_flags+0x130/0x260
[  648.226258][T23487]        dev_ioctl+0x7b4/0x1150
[  648.231139][T23487]        sock_do_ioctl+0x22c/0x300
[  648.236267][T23487]        sock_ioctl+0x576/0x790
[  648.241150][T23487]        __se_sys_ioctl+0xfc/0x170
[  648.246279][T23487]        do_syscall_64+0xfa/0xfa0
[  648.251309][T23487]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.257735][T23487] 
[  648.257735][T23487] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  648.265658][T23487]        validate_chain+0xb9b/0x2140
[  648.270974][T23487]        __lock_acquire+0xab9/0xd20
[  648.276181][T23487]        lock_acquire+0x120/0x360
[  648.281213][T23487]        _raw_spin_lock_bh+0x36/0x50
[  648.286528][T23487]        nr_del_node+0x517/0x8d0
[  648.291917][T23487]        nr_rt_ioctl+0x989/0xd50
[  648.296897][T23487]        sock_do_ioctl+0xdc/0x300
[  648.301942][T23487]        sock_ioctl+0x576/0x790
[  648.306813][T23487]        __se_sys_ioctl+0xfc/0x170
[  648.311939][T23487]        do_syscall_64+0xfa/0xfa0
[  648.316985][T23487]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.323413][T23487] 
[  648.323413][T23487] other info that might help us debug this:
[  648.323413][T23487] 
[  648.333749][T23487] Chain exists of:
[  648.333749][T23487]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  648.333749][T23487] 
[  648.347602][T23487]  Possible unsafe locking scenario:
[  648.347602][T23487] 
[  648.355060][T23487]        CPU0                    CPU1
[  648.360520][T23487]        ----                    ----
[  648.365893][T23487]   lock(&nr_node->node_lock);
[  648.370845][T23487]                                lock(nr_node_list_lock);
[  648.377965][T23487]                                lock(&nr_node->node_lock);
[  648.385267][T23487]   lock(nr_neigh_list_lock);
[  648.389961][T23487] 
[  648.389961][T23487]  *** DEADLOCK ***
[  648.389961][T23487] 
[  648.398133][T23487] 2 locks held by syz.1.4717/23487:
[  648.403521][T23487]  #0: ffffffff8f426ab8 (nr_node_list_lock){+...}-{3:3}, at: nr_del_node+0xfc/0x8d0
[  648.413040][T23487]  #1: ffff888053e47a70 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x152/0x8d0
[  648.422735][T23487] 
[  648.422735][T23487] stack backtrace:
[  648.428639][T23487] CPU: 0 UID: 0 PID: 23487 Comm: syz.1.4717 Not tainted syzkaller #0 PREEMPT(full) 
[  648.428663][T23487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  648.428674][T23487] Call Trace:
[  648.428683][T23487]  <TASK>
[  648.428692][T23487]  dump_stack_lvl+0x189/0x250
[  648.428723][T23487]  ? __pfx_dump_stack_lvl+0x10/0x10
[  648.428746][T23487]  ? __pfx__printk+0x10/0x10
[  648.428766][T23487]  ? print_lock_name+0xde/0x100
[  648.428784][T23487]  print_circular_bug+0x2ee/0x310
[  648.428813][T23487]  check_noncircular+0x134/0x160
[  648.428838][T23487]  validate_chain+0xb9b/0x2140
[  648.428865][T23487]  ? irqentry_exit+0x74/0x90
[  648.428882][T23487]  ? lockdep_hardirqs_on+0x9c/0x150
[  648.428901][T23487]  __lock_acquire+0xab9/0xd20
[  648.428920][T23487]  ? nr_del_node+0x517/0x8d0
[  648.428943][T23487]  lock_acquire+0x120/0x360
[  648.428959][T23487]  ? nr_del_node+0x517/0x8d0
[  648.428983][T23487]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  648.429006][T23487]  ? do_raw_spin_unlock+0x122/0x240
[  648.429030][T23487]  ? nr_neigh_get_dev+0xbd/0x140
[  648.429057][T23487]  ? nr_del_node+0x517/0x8d0
[  648.429079][T23487]  _raw_spin_lock_bh+0x36/0x50
[  648.429104][T23487]  ? nr_del_node+0x517/0x8d0
[  648.429126][T23487]  nr_del_node+0x517/0x8d0
[  648.429152][T23487]  nr_rt_ioctl+0x989/0xd50
[  648.429179][T23487]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  648.429202][T23487]  ? lockdep_hardirqs_on+0x9c/0x150
[  648.429222][T23487]  ? apparmor_capable+0x137/0x1b0
[  648.429245][T23487]  ? capable+0x89/0xe0
[  648.429263][T23487]  ? nr_ioctl+0x1b1/0x3b0
[  648.429283][T23487]  sock_do_ioctl+0xdc/0x300
[  648.429309][T23487]  ? __pfx_sock_do_ioctl+0x10/0x10
[  648.429340][T23487]  sock_ioctl+0x576/0x790
[  648.429363][T23487]  ? __pfx_sock_ioctl+0x10/0x10
[  648.429388][T23487]  ? __fget_files+0x3a0/0x420
[  648.429404][T23487]  ? __fget_files+0x2a/0x420
[  648.429421][T23487]  ? bpf_lsm_file_ioctl+0x9/0x20
[  648.429441][T23487]  ? __pfx_sock_ioctl+0x10/0x10
[  648.429464][T23487]  __se_sys_ioctl+0xfc/0x170
[  648.429487][T23487]  do_syscall_64+0xfa/0xfa0
[  648.429503][T23487]  ? lockdep_hardirqs_on+0x9c/0x150
[  648.429519][T23487]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.429536][T23487]  ? clear_bhb_loop+0x60/0xb0
[  648.429555][T23487]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.429574][T23487] RIP: 0033:0x7f775778f6c9
[  648.429591][T23487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  648.429607][T23487] RSP: 002b:00007f7758558038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  648.429625][T23487] RAX: ffffffffffffffda RBX: 00007f77579e6270 RCX: 00007f775778f6c9
[  648.429638][T23487] RDX: 00002000000000c0 RSI: 000000000000890c RDI: 0000000000000004
[  648.429650][T23487] RBP: 00007f7757811f91 R08: 0000000000000000 R09: 0000000000000000
[  648.429661][T23487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  648.429672][T23487] R13: 00007f77579e6308 R14: 00007f77579e6270 R15: 00007fff3152a708
[  648.429692][T23487]  </TASK>
[  650.627362][T23479] 0ªX¹¦À: renamed from caif0
[  650.636995][T23479] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19
[  650.646360][T23479] caif:caif_disconnect_client(): nothing to disconnect
[  650.653584][T23479] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT
[  650.662756][T23479] chnl_net:chnl_net_open(): state disconnected
[  650.669237][T23479] 0ªX¹¦À: entered allmulticast mode
[  650.674633][T23479] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  650.711269][T23467] wlan0 speed is unknown, defaulting to 1000
[  650.735366][T23467] wg1 speed is unknown, defaulting to 1000
[  650.845518][T23486] wlan0 speed is unknown, defaulting to 1000
[  650.852668][T23486] wg1 speed is unknown, defaulting to 1000