last executing test programs:

12.841687241s ago: executing program 2 (id=3069):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x25}}]}, 0x1c}}, 0x0)
close(0x3)

12.618451582s ago: executing program 2 (id=3071):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x4, 0x4, 0x2}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x11, 0x4, 0x4, 0x2}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19"], 0x48)
getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000280)={0x7, 0x7, 0x1}, &(0x7f0000000480)=0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000300)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000440)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000101010400000000000000000200ffff240002800c000280040001000100000014000180080001007f000001080002"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0)

12.320515039s ago: executing program 2 (id=3073):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044)
r1 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast1, @in=@local, 0x3, 0x8, 0x4e24, 0x10, 0x2}, {0x0, 0x0, 0x2000000, 0x2, 0x800, 0x2000000, 0x1, 0x400}, {0x1ff, 0xfffffffffffffff9, 0x4, 0xbfffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@empty, 0xffffffff, 0x32}, 0xa, @in=@loopback, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x9}}, 0xe8)
connect$inet6(r1, &(0x7f0000001200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000540)={0x2001, 0x0, 0x1}, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@newsa={0xf0, 0x1e, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, {@in6=@local, 0x0, 0x32}, @in6=@mcast1, {0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0xc}, {}, {0x0, 0x0, 0x6}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x3c}}, 0xf0}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff)
bind$tipc(r2, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x30, r5, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000006c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r6, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x28, r7, 0x800, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0xfffffffffffffef3}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0xffffffffffffff2d, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x8001}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @private0}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041890}, 0x0)
ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000001080)={0x3})
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r4)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000e40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x249c70ae62759b49}, 0xc, &(0x7f0000000e00)={&(0x7f0000000980)={0x470, r9, 0x500, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x114, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\/*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ')!}\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '%#{!}E%!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#.+\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x94, 0x5, "0089c93c4e778490cc26a801d10f058140a803957d4eb2b82af6231e3cdcd13db1332346f0bd450c3d7a21375fad12c5d67c3471b78fb27a6d6b4a24756b962d1a49529644b348e00071ce8ce54cee376e60ff579c3f83db508e6a6cbad5335f35ad0481e5ee807788c94d69abc572fbbaf8e6c59e8d22936bba513863a8fadc3d7995e8ccd8e6d4587e7fb80bf0658d"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x340, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x101}, @ETHTOOL_A_BITSET_MASK={0xd0, 0x5, "298f222876292b5bfba3ec3e67bccf6463cf0687f4113028824b317a66c5e92097a89fc52c8811e3e503974d34de1b5ba2bdf96391233ff7ddb8feeece0c281ffb6b54bd0980c3fa96b3c1993d170c5a4002a8aa2fb681852a62255b833ec98752242d6ff157d2d4cad60a0e712f05f25e89d976e0b25353c00e7ac0589e84d5e315e14d5d2fd2de5702c7757c366755e7a648cb89958e1fc91e2737d62fccd2f40c3ba4442fc1f5f57e5fffa73c07aa999130373107f72cbc03e5e1118409ea62696a146a29ee07d27846ba"}, @ETHTOOL_A_BITSET_VALUE={0x100, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0xe6, 0x4, "e5fc1868e1f5c5a490a9f9e6471e31783372d1bd9be39aa69cfe61004089b84e85f0b67bf3e8f4133460d5aebe63d34eebe1c67a86027a1f02cb7700bb284784a94c27af79cd57e5620d896fcc17eafb10ab77bd3d5f8c87b77d155829ce2baeca0017d85009b570f2ea497e5e428bb0dbe83beffb895bf22307bf4e8daac4918f109e66b1839663c25fd42f513f5f0ba0b949443d9ffcad4b33d681bf5455f35ab51115a9dee1397a3a36f726a29753554c87d3e1da5ad1803b815eb8b765daea6bc5facd77f0ecc1e20e7e54585382f22e31b7eb5e961b5262ef8279c9a04c0afb"}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000000}]}]}, 0x470}, 0x1, 0x0, 0x0, 0x40}, 0x40)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000001680)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe)
r10 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, 0xffffffffffffffff, &(0x7f0000001800)={0x80000010})
sendto$inet6(0xffffffffffffffff, &(0x7f0000001840)="8b", 0x34000, 0x0, &(0x7f0000001880)={0xa, 0x0, 0x0, @private1}, 0x1c)

11.187966486s ago: executing program 2 (id=3079):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000580)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private=0xa010100, 0x8, 0x15}}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32)
r3 = socket$unix(0x1, 0x5, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
r5 = socket(0x29, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0x90, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x4, 0x6}, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2000e890}, 0x8080)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x74, 0x0, 0x8}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)
socket$inet6_tcp(0xa, 0x1, 0x0)

10.520913709s ago: executing program 2 (id=3085):
r0 = socket(0x2b, 0x3, 0x1)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x5, 0x0, 0x5, 0x2, 0x0, 0x0, 0x10000, 0xffffffff}})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048050}, 0x20040090)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES16=r5, @ANYRESOCT=r5], 0x32600)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000700)='GPL\x00', 0x8, 0x61, &(0x7f0000000740)=""/97, 0x1e00, 0x2a, '\x00', r3, 0x0, r5, 0x8, &(0x7f00000007c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0xd, 0x7, 0x6fd7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000840)=[r5], &(0x7f0000000880)=[{0x5, 0x4, 0x3, 0x6}, {0x3, 0x5, 0x0, 0x9}], 0x10, 0x6}, 0x94)
sendmsg$NFT_MSG_GETSETELEM(r7, 0x0, 0x8000)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a300000000005000400000000000500050002000000140007800800134040000000080012400080"], 0x64}}, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0xb, &(0x7f0000000680)=0x3, 0xa5)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
pipe(0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a)

7.551856665s ago: executing program 2 (id=3089):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x1, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000200)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x12, &(0x7f00000006c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0xcb}}]}, &(0x7f0000000780)='GPL\x00', 0x2, 0x2b, &(0x7f00000007c0)=""/222}, 0x94)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0x403, 0x78bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x6f, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x10}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MTU={0x8, 0x4, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x400b0)

4.869172796s ago: executing program 3 (id=3120):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101})
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x24, 0x10000, 0x4, 0xb, 0x0, 0x735e22e545e5c50a}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x38, r4, 0x201, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc004}, 0x44010) (async)
sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="24010000", @ANYRES16=r4, @ANYBLOB="040029bd7000fbdbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000635f69735f6d756c7469636173740005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c7469636173740005008300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f75726365400061635f69735f6d756c7469636173740005008300010000000e0001006e657464657673696d0000000f0002006e657464657673696d635f69735f6d756c746963617374000500830000000000"], 0x124}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ec0), 0xffffffffffffffff) (rerun: 32)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000f00)={0x0, 0x2800, &(0x7f0000000f40)={&(0x7f0000001040)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async, rerun: 64)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)={0x34, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040194) (rerun: 64)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000001380)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001180)={0x184, r6, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8278}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd27}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x679}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1e740000000}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x187}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x967}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x9c}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000}, 0x2800)
r7 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', <r8=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x6, &(0x7f0000000180)=@raw=[@generic={0x4, 0x2, 0x3, 0x8000, 0xf}, @map_idx={0x18, 0xe, 0x5, 0x0, 0xe}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x10, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x8, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff], 0x0, 0x10, 0xe5ec70f1}, 0x94)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000e40)={{r3, &(0x7f00000007c0)='((@\x00', 0x200000, &(0x7f0000000800)={@_ha_fsid={[0x40, 0x7]}, {0xca27, 0x5, 0x2, 0x1b2}}, 0xfffffe85, &(0x7f0000000840)={@_ha_fsid}, &(0x7f0000000880)=0x7}, 0x6, &(0x7f0000000d80)=[{0x1, 0x0, &(0x7f00000008c0)='.\x17///}\x00', &(0x7f0000000900)="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", 0xfa, 0x1a}, {0x2, 0x9, &(0x7f0000000a00)='.(,+\x00', &(0x7f0000000a40)="7a1955b1d22af6e05616c22cc48bb664089f3824fbcb2ae288e7eb0f7bfdd57ba14597190e04ac53bbbee4a9", 0x2c, 0x22}, {0x3, 0xa, &(0x7f0000000a80)='/dev/net/tun\x00', &(0x7f0000000ac0)="e539b961be87ef6013c3a382f8b21427d35f0a833dbea71a40f7ad8ebdc63b50cb7602ac0c469a", 0x27, 0x3a}, {0x1, 0x2, &(0x7f0000000b00)='^&]-%\x00', &(0x7f0000000b40)="de8532a9b8b77f158c50a296884daa2755ead8ae5b9bb2760fd0cffb0e0b516f3673e26db403179412610dedf55a407a990e2e407d1a14693e223361a16ce3c2f71394fc8423b274ac9a53d558068697f3c08e26e30997ddd86c1f5e2e513b2ca0e72fe9e84a2d1e8ecc198ab4b5fdff9461c628a39603a237f102f16c0140cbd41ba7baa25c19505df53043ca9075ec1555bcb95e0c0bd41348472d8dab33306ae8801ffc09f34a816d4a77ae22aecf80", 0xb1, 0x31}, {0x2, 0x10000, &(0x7f0000000c00)='-\',{-!\x00', &(0x7f0000000c40)="42a84ffef3510ceddde72d246ddcdc80dcf77729e12770d62a119ba8dfcf21509fddcdeb78b69a0e4cefec3cb51c3bf0190e5cb4e790891888b8294ca46399befe67b0af55cace0e2241b7c55d24c371b621ce07de92e055b141c0d77338fcb36eaf5f378955d0b6975e0fcc60ca35a78bafd3b0e91df586ed102add440896e7c1ad3848ecf513fc56d95e6b2fd7c55003a50ab7247d", 0x96, 0x28}, {0x1, 0x7, &(0x7f0000000d00)='!\x00', &(0x7f0000000d40)="3ba8d6df55133a24076d82d77f33cb80837f587a8e4a108f620a8529102fb0f2f85534bc4e28e9d61c1a1e51", 0x2c, 0x12}]}) (async, rerun: 32)
r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000fc0)=@newtfilter={0x44, 0x2c, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xf, 0xc}, {0x4, 0xb}, {0xffff, 0x5}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x3, 0x9b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40891}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r8, {0x2, 0x3da48c8682330ab8}, {}, {0xfff3, 0xfffa}}, [@filter_kind_options=@f_fw={{0x12}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880)

4.212416619s ago: executing program 3 (id=3126):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_emit_ethernet(0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaa290000000000000000831e4700000000"], 0x0)
recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2000)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x4000800, 0x1, 0x2, 0x1}, 0x20)
r2 = socket(0x11, 0x2, 0x0)
setsockopt(r2, 0x107, 0x1, &(0x7f0000000080)="110000000000060000071a80010061cc", 0x10)
r3 = accept4$tipc(r2, 0x0, &(0x7f00000000c0), 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b25, &(0x7f0000000340)={'wlan1\x00'})
ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000100))
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2)
sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r5, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x2}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x810)
close(0x3)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x200000000000000}, 0x800, 0x0, 0x2, 0x1}, 0x20)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1, 0x0, 0x0, 0x8}, 0x0)

3.985118559s ago: executing program 3 (id=3127):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="480000000000000029000000370000002b0500000000000007280000000308480400030000000000000008000000000000000104000000000000080000000000000004010300000014000000000000002900000043000000080000000000000050"], 0xb0}}], 0x1, 0x4000801) (async, rerun: 32)
r0 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 32)
bind$l2tp6(r0, &(0x7f0000000300)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) (async)
connect$l2tp6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f00000003c0)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0xf3a, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r1, 0x84, 0x81, &(0x7f0000000080)={0x1, 0x4367c66}, 0x8)

3.308330158s ago: executing program 4 (id=3137):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wg0\x00', <r3=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x10, r3, 0x1, 0x80, 0x6, @broadcast}, 0x14)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0xfffffc01, 0x8, 0x4, 0xfffffff8, 0xb34c6af, 0x5, 0xe}, 0x1c)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0)
write(r1, &(0x7f00000000c0)="010000000000000020", 0x9)
recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010000, 0x0)
r4 = socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x3}})
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180), 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)

3.194455619s ago: executing program 4 (id=3138):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x18000000000002a0, 0xce8, 0x0, &(0x7f00000002c0)="8d50895c4c690dea156e85f7db65", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0xb0, 0x46, 0x109, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x9c, 0x4, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x8d, 0x4a, 0x0, 0x1, [@typed={0x8, 0x40, 0x0, 0x0, @pid}, @nested={0x10, 0xfb, 0x0, 0x1, [@nested={0x4, 0xd2}, @typed={0x8, 0xff, 0x0, 0x0, @ipv4=@remote}]}, @nested={0x55, 0xb5, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @pid}, @typed={0xc, 0x101, 0x0, 0x0, @u64=0x7}, @generic="6025b13aecdbbd988c900cc15004149c067d6d5f9cf4c816cd8e7d86f3db2989f3becd261d69ecf1ad0cfced746f917a409382dd63", @typed={0x8, 0xba, 0x0, 0x0, @pid}]}, @typed={0x8, 0x3f, 0x0, 0x0, @uid}, @typed={0x8, 0xd9, 0x0, 0x0, @ipv4=@remote}, @generic="6be335a761385c26f3"]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x18000000000002a0, 0xce8, 0x0, &(0x7f00000002c0)="8d50895c4c690dea156e85f7db65", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50) (async)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0xb0, 0x46, 0x109, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x9c, 0x4, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x8d, 0x4a, 0x0, 0x1, [@typed={0x8, 0x40, 0x0, 0x0, @pid}, @nested={0x10, 0xfb, 0x0, 0x1, [@nested={0x4, 0xd2}, @typed={0x8, 0xff, 0x0, 0x0, @ipv4=@remote}]}, @nested={0x55, 0xb5, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @pid}, @typed={0xc, 0x101, 0x0, 0x0, @u64=0x7}, @generic="6025b13aecdbbd988c900cc15004149c067d6d5f9cf4c816cd8e7d86f3db2989f3becd261d69ecf1ad0cfced746f917a409382dd63", @typed={0x8, 0xba, 0x0, 0x0, @pid}]}, @typed={0x8, 0x3f, 0x0, 0x0, @uid}, @typed={0x8, 0xd9, 0x0, 0x0, @ipv4=@remote}, @generic="6be335a761385c26f3"]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async)

3.02609916s ago: executing program 3 (id=3141):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r2], 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x0) (async)
listen(r0, 0x0)
accept4$inet6(r0, 0x0, 0x0, 0x80000) (async)
shutdown(r0, 0x1) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

2.824332546s ago: executing program 4 (id=3143):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x3) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x4, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x8}, 0x94) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000500)=0x474c, 0x4)
connect$inet(r3, &(0x7f0000000740)={0x2, 0x2, @multicast1}, 0x10) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="500000002100010026bd7000fbdbdf2564010102000000000000000000000000fc0000000000000000000000000000014e2400004e21ffff0200a0a03a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b36b6eff0f000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x90)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r5) (async, rerun: 32)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000a00)=<r7=>0x0) (rerun: 32)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYRES32=r6, @ANYRES64, @ANYRES32=0x0], 0x1c}}, 0x4008054)
r8 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000001340), &(0x7f00000013c0)=0x60, 0x80000)
sendmmsg(r8, &(0x7f0000003e40), 0x1, 0x300)
setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f00000008c0)=0x8, 0x4)
setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000900)=0x3, 0x4) (async, rerun: 64)
recvmmsg(r3, &(0x7f0000000940), 0x291962b, 0x45833af92e4b39ff, 0x0) (async, rerun: 64)
r9 = accept$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000880)=0x14)
setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000040)=@req3={0xfffffffc, 0x101, 0x8, 0x0, 0x7, 0x6, 0x3}, 0x1c) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000500), &(0x7f0000000540)=@udp=r0}, 0x20) (async, rerun: 64)
close(0x4) (async, rerun: 64)
close(r2)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0xe, 0x4, 0x4, 0x8}, 0x50) (async, rerun: 64)
close(0x3) (async, rerun: 64)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00), &(0x7f0000000c40), 0x5, r10}, 0x38) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)

2.679317221s ago: executing program 0 (id=3145):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x200c8016}, 0x24004894)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000b300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.582376424s ago: executing program 0 (id=3146):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000400000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a00850000003b000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)

2.488006536s ago: executing program 4 (id=3147):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@getnexthop={0x28, 0x6a, 0x519, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xa6}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x5, 0x1, 0x0, &(0x7f0000000200)='%', 0x0, 0xd01, 0x0, 0xfffffffffffffd7d, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async)
ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000000500)={&(0x7f00000004c0)=[{&(0x7f00000002c0)="ad0de9a95fb9c4029d4c8c16a506fb124925a5f56077a4b132a0059361a4d5366c7804563943a7acf6d7cac193f17857763181e7291fa6e91f31286fe7f6dca07bec949644f71d736ec8fd5f6008d48f087221bf9132dd015ed5a82b55d3a79e4477898fa6bf9da27085a8e1431e7f32751c20177196de4d79d0ea75d8a59939de0e9cb49203748cef6df5f0ad4ae28da2ab8759292cf97f51eab226eadb69bfee81d358d48c328e0bdef0828508c1455a9ae62a255d456f58e9861139557f83585e202eb56a9a1dd877959466604de799167a5ffbd834f2e09bb7f056ac782b55d3f16db8fd835da16f51b2da9d224a0bde65cfa62b4f", 0xf7}, {&(0x7f00000003c0)="b3bd245f6814693edb0513d4fa6fb4fc89517659d307dd036dab225256be1be6ee23a50c0525a71a7ef30d5087d4618594e570a69035ed47f4554d2becc1e64682ee7f894b710d45522947641d02fd35aab277edae31d78e42da7f5da892d0666e8cbfbee8fa4a7e1fc0c6f2df121620cee9d142b52c0e250631c0f63f8dd3b18185f1346ba651f0a888ca4097c24d14ca79fc595db11fa1bd6a64710bc79aeee82411c3e751ed77413453d85847f63c97650a3e002ded4643df374fd6579116852f95ec5d8afa5b24ee", 0xca}], 0x2, 0x9, 0x0, 0x3, 0xfffffffffffffffc, 0x5, 0x2, 0x2}) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async, rerun: 64)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)

2.473389471s ago: executing program 0 (id=3148):
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000100100000b"], 0x10b8}, 0x80e0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000880)=ANY=[@ANYBLOB="18080000000010c30000000003111100851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000001000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000940)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000980)=""/222, 0x0, 0x8}, 0x78)

2.216150015s ago: executing program 0 (id=3150):
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
clock_gettime(0x0, &(0x7f00000000c0)={<r1=>0x0, <r2=>0x0})
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000100)={r1, r2/1000+10000}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r5, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r5, 0xaa0f4000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r7, 0xe6905000)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x1000)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0xfffff000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000011c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001200), 0xfffffedf, 0x10, &(0x7f0000001240), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x4, 0x10, &(0x7f0000001340)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000001000085000000550000001500020000000000bf010000000000008500000056000000b70000000200000095"], &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r8, 0x0, 0xe, 0x0, &(0x7f0000001480)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0)
ioctl$SIOCGIFHWADDR(r7, 0x8927, &(0x7f0000000040)={'pim6reg\x00'})
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
r9 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty, 0x0, 0x8, 0x80000001}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @dev, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x0, 0x10}})
mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0)
mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r4, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)

1.962880479s ago: executing program 4 (id=3151):
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x8, 0x2000000000032, 0xffffffffffffffff, 0x0)
socketpair(0xa, 0x3, 0x36, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x13, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000f00511b48013d030100000000001c20000000000000bc26000000000000bf67200000000000070300000fff07006702000020000000360600000ee600f0bf050000000000000f370000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000001380)='GPL\x00'}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001000)={r2, &(0x7f0000001040), &(0x7f0000001080)=@tcp}, 0x20)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000ec0)={0x2, 'vlan0\x00', {}, 0x400})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
getsockopt$inet6_mptcp_MPTCP_FULL_INFO(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000d00)={0x0, 0x84, 0x0, 0x108, 0x0, 0x4, &(0x7f00000000c0)=[{0x0, {@in={{0x2, 0x0, @initdev}}, @in6={{0xa, 0x0, 0x0, @remote}}}}, {0x0, {@in, @in={{0x2, 0x0, @private}}}}, {0x0, {@in={{0x2, 0x0, @remote}}, @in6={{0xa, 0x0, 0x0, @private2}}}}, {0x0, {@in={{0x2, 0x0, @multicast2}}, @in={{0x2, 0x0, @multicast2}}}}], &(0x7f0000000500), {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, &(0x7f0000000dc0)=0x88)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r6, 0x84, 0x7f, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000f00))
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000e80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x3c, r4, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x1)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x8, 0x2000000000032, 0xffffffffffffffff, 0x0) (async)
socketpair(0xa, 0x3, 0x36, &(0x7f0000000000)) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x13, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000f00511b48013d030100000000001c20000000000000bc26000000000000bf67200000000000070300000fff07006702000020000000360600000ee600f0bf050000000000000f370000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000001380)='GPL\x00'}, 0x48) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001000)={r2, &(0x7f0000001040), &(0x7f0000001080)=@tcp}, 0x20) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000ec0)={0x2, 'vlan0\x00', {}, 0x400}) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async)
getsockopt$inet6_mptcp_MPTCP_FULL_INFO(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000d00)={0x0, 0x84, 0x0, 0x108, 0x0, 0x4, &(0x7f00000000c0)=[{0x0, {@in={{0x2, 0x0, @initdev}}, @in6={{0xa, 0x0, 0x0, @remote}}}}, {0x0, {@in, @in={{0x2, 0x0, @private}}}}, {0x0, {@in={{0x2, 0x0, @remote}}, @in6={{0xa, 0x0, 0x0, @private2}}}}, {0x0, {@in={{0x2, 0x0, @multicast2}}, @in={{0x2, 0x0, @multicast2}}}}], &(0x7f0000000500)}, &(0x7f0000000dc0)=0x88) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
setsockopt(r6, 0x84, 0x7f, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000f00)) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000e80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x3c, r4, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) (async)

1.895524627s ago: executing program 3 (id=3152):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000003c0), 0x0, 0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e26, @multicast2}, 0x10)
r4 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000080)={<r5=>r4})
r6 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000140)={<r7=>r4})
close(0x4)
connect$inet(r3, &(0x7f0000000500)={0x2, 0x3, @multicast1}, 0x10)
splice(r5, 0x0, r7, 0x0, 0x2000000002fffb, 0x5)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
getsockopt$packet_int(r9, 0x107, 0xb, &(0x7f0000000040), 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14008952}, 0x20000005)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES32=r9, @ANYBLOB="010025bd7000fedbdf25090000000800010001000000050008001a006000050007"], 0x2c}, 0x1, 0x0, 0x0, 0x8044010}, 0x6014)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000a00)={'macvlan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000a40)={'batadv0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4400000010000104000000000018000000000000", @ANYBLOB="d9c3a69a5162c8ed4c5bb5da85737f83954ec2a447f39fbff48f4c4e447fefca3f8f547e9ce9e3e6c78dc6709959fb2024e851741d3daf4caf4eb1e79ba7389b7b2f01f630d8abdd3ab31a79bfc879e72aa01129bd6137fbb9c12cabd7902f764777b8cda718ba1e45c27f9f9aaacd29ce668f514bfd115a7388bb80557e9c88b09a6ad08be0b32f4a48198107cc5c1f74d23b4c3f09ff9d6dd033e4ca80ceb37ec39c9f2ee177fab7fbbce0a133756d66b031b554a5d51fba29f5ff9eeb6b9ac33c531e91bc8887dd2ba7115fa406b76640e09ed008fb0cc6d12bedd5392ec86a8ba2d67a3d", @ANYBLOB="0380000000000000140012800b0001006d616373ffffff7f0000000008000500", @ANYRES32, @ANYBLOB="3795edaf", @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000b80)={'syz_tun\x00', <r14=>0x0})
r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0xc, &(0x7f0000000c80)=ANY=[], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r12, @fallback=0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000d00)={r15, r14, 0x25, 0x0, @void}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, 0x0)

1.784445275s ago: executing program 0 (id=3153):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a0101000000000000000000030900010073797a30000000000900030073797a320000000058000000060a010400000000000000000100000008000b4000000000300004802c0001800c00010062697477697365001c0002800800034000000004080001400000000f08000240000000120900010073797a3000000000140000001100010000000000000000000700000a"], 0xcc}}, 0x0)
bind$inet6(r0, &(0x7f0000000a80)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x402)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60000000001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c200000100000000000000a901d1f4a985fbf19afea3d18a6433710f046b5ede785fb033e968e76efd42baf31533d6399f92ff54572f4b950458e0fd18d872f39791dc6f07ab5d7c8679ba35f522db3b18833248ef0f0000004f1334f94063cf47e043fe6583dca5c699dd"], 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000840), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000540), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000580)={'vxcan1\x00', <r4=>0x0})
sendmsg$can_bcm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000d000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5}, 0xc)
sendmsg$can_bcm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r6, 0x6, 0x4, &(0x7f0000000980)=0x7, 0x4)
setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f00000009c0)=0x1001, 0x4)
sendmsg$can_bcm(r3, &(0x7f0000000740)={&(0x7f0000000780)={0x1d, r4}, 0x10, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010002000000fcdbdf25310000000c000180080001"], 0x20}}, 0x4000000)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000880)={0x2, <r9=>0xffffffffffffffff, 0x800}, &(0x7f00000008c0)=0xc)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r9, 0x84, 0x16, &(0x7f0000000900)={0x6, [0xa940, 0x4, 0x8, 0x8, 0x6, 0x2]}, &(0x7f0000000940)=0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000007d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r10}, 0xc)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x24000000)
syz_emit_ethernet(0x2e, 0x0, 0x0)

1.784180129s ago: executing program 4 (id=3154):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={<r7=>0xffffffffffffffff}) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f00000002c0), 0x12) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r8, 0x0)
write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000300)={'pimreg1', 0x32, 0x30}, 0xa) (async)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x100, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000080)={'batadv_slave_1\x00'})

1.754143046s ago: executing program 3 (id=3155):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
unshare(0x400) (async)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r2, 0x0, 0x12, 0x0, 0x0) (async)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r3, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r3], 0x38}}, 0x0) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x54, r5, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1fe}]}, 0x54}, 0x1, 0x0, 0x0, 0x8085}, 0x4)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r3, 0x0, 0x20000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast2}, @IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x4412c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000a40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r7, 0xa00, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000844)

1.557722498s ago: executing program 0 (id=3158):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="020025bd7000fcdbdf25040000000800db320000000006fd0d224797b9baa94488b34b4a118dad6cfc86cc72d6e28cc6e5e6eb688b2e1e57f7d6692c040e7438d132a19d8b057576f60347daa07b593ba537ba978757207be1bbc6e8c2aaeffc309681215e9d1eb66f53b6f14bb19433a6997d134204a3ddb4e36f52c4437ed3c5a0186fcc642452dfc6b81a71ebe05d078aaf0bd035694161121320b51966aef3607ff2d96d7f825a300d0f76d87ba4f2aafd94df9c6b133b216768dfa3517e339d3a28837df9ff383d18d6dd46fc304a49ab52ce70427935daf87afddae2664cc21a21547e0a443ccb85"], 0x1c}, 0x1, 0x0, 0x0, 0x24}, 0x4040)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x1c, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000040000701fcffffff00000100017c0000040042800c00018006000600800a00002400028020001480080018"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x5d, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=@deltaction={0x140, 0x31, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x91b}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xffffffffffffffe1, 0x48, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'simple\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'simple\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x140}}, 0x40000)
connect(r4, &(0x7f00000004c0)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x24, r9, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x69}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wlan1\x00', <r11=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b80)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x3c, r9, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x1}, @val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4011)

502.13709ms ago: executing program 1 (id=3165):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x14, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x14, &(0x7f0000000ec0)=ANY=[], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x6, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f40)={{r0}, &(0x7f0000000f80), &(0x7f0000000fc0)='%-010d \x00'}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000001000)={r2}, 0xc)
unshare(0x24020400)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000b00), 0x0, 0x10, &(0x7f0000000b40), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r3, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000001000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa120000000000004010000f8fffeffb702000008000000b50af8ff00000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x7, 0xde, &(0x7f0000000600)=""/222, 0x0, 0x8}, 0x94)

304.321091ms ago: executing program 1 (id=3166):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
getsockname$packet(r2, 0x0, &(0x7f0000000280))
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@dellink={0x28, 0x11, 0x90d, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20c01}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x24048094)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, &(0x7f00000000c0)="6ad55c696f5ba646227e75f7eed99b91d37469b8fc1184763666fe51950771704c899d7646b25ac5f406e62828f535bf022162f03d7b0858c176574465f2fe17f020e25c34df423095d032a8645a700fdf5dd334569dd4198c20f898cf9f1e1035d6cda5eb2e3e28efddc0c2f0f02c5864b7a04b35895c2b5edc18897566447d1eb60560ff7d4623418818de8899c6f050c6dab3cdac20a867496c8350082817b02d6528fc0d547471f2e06fc0b9bfb6", 0xb0, 0x40000, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, &(0x7f0000000780)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91)

283.400704ms ago: executing program 1 (id=3167):
syz_emit_ethernet(0xed, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbb1bbbbbbffffffffffff86dd60122d9200b73afffe8000000000000000000000000000bbff0200000000000000000000000000019600907800ff0bdb0100000000000000180aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af03021f0afe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)
syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x71, 0x1, 0x1, 0x43}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f0000000240)=""/78, &(0x7f00000002c0)=0x4e)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newlink={0x5c, 0x10, 0x2, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x5c}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080)

200.437365ms ago: executing program 1 (id=3168):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a0085000000a0000000bc0900000000000045080100002000009500000000200000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)

63.391589ms ago: executing program 1 (id=3169):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f00000001c0), 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000), 0x0) (async)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)

0s ago: executing program 1 (id=3170):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="c0eb01001800001a000000000c002b5a390e00000500000002000000000000138d0000000000000000"], 0x0, 0x29, 0x0, 0x0, 0x400}, 0x28)
close(r0)
socket$kcm(0xa, 0x922000000003, 0x11)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xc)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000540)={0x2, <r3=>0xffffffffffffffff}, &(0x7f0000000580)=0xc)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000640)={'gre0\x00', &(0x7f0000000980)={'sit0\x00', <r4=>0x0, 0x40, 0x7, 0x101, 0x3, {{0x2e, 0x4, 0x1, 0x9, 0xb8, 0x65, 0x0, 0xd, 0x29, 0x0, @broadcast, @private=0xa010101, {[@lsrr={0x83, 0xb, 0x5b, [@multicast1, @private=0xa010101]}, @end, @timestamp={0x44, 0x14, 0xd2, 0x0, 0x7, [0x1, 0x8, 0x7ff, 0x0]}, @generic={0x82, 0x12, "9e0f8254c65693250259a61c56fb191a"}, @rr={0x7, 0x7, 0x70, [@rand_addr=0x64010102]}, @generic={0x7, 0x2}, @cipso={0x86, 0x64, 0x2, [{0x7, 0xe, "e998b162b03e07e565d459d0"}, {0x6, 0x2}, {0x0, 0xb, "91c1c97ecd39268db1"}, {0x0, 0x11, "5eb39d3d9cc04eef55de611dbc2ae0"}, {0x7, 0x10, "0ae38fb28d5e0f696b61c6d5e6fd"}, {0x6, 0x7, "d59408ff5a"}, {0x2, 0x11, "a159def445c20a1b0660b112730237"}, {0x6, 0x4, "5df8"}, {0x2, 0x6, "ed6df52d"}]}, @ra={0x94, 0x4, 0x1}]}}}}})
setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000680)={@broadcast, @loopback, r4}, 0xc)
r5 = socket(0xa, 0x5, 0x0)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000005c0)=[{0x6, 0x8, 0x1, 0x85}]}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000b40)=[@in={0x2, 0x4e20, @loopback}], 0x10)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000007c0)=@int=0x1, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
sendto$inet6(r5, &(0x7f0000000800)='\x00', 0x1, 0x44004, &(0x7f0000000a80)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c)
bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x6, 0x4)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0069a488da9dbf0e63ddfbd3e512ada407dbc0151cdb965e054053840d7aa69bfbf426000005000000eeffffff00210200e8246caea54e944e94cbe7935daa12683ae25c243cbe0b4829069e2149b993d603007da35f9e43cd3915a26f36d910438946eaa8c700fdeee9b0e90919fc588523e962880029d07f295b27d922f11b2def94b96d073b9888b40b9cb922ddcade67f0b6c12548c7354864b4dfab9661a27fa0300e0000af6e7184020e9c1765cf2ef85abfc10b1e7b00381c41054022b88b4eefd57380fc4e7349fc8aa60600000000000000bacab88e337ec8edfbf04de62c5e9d0b68625c9abf7cbfaf266d07", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0400000002000000060000000c00"/28], 0x50)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000002c0)={0x0, 0xfffffe98, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000000201050000200000000000020000080059a6c280d968e9792ad19c4aa99d5dd028ea913e1dfda880f3bd4b4a625b3f9b1231499637171e0996e2c775a7cb82eeab444ce553486cf93488b5915cb7c79c29c0849cb425abffe55e42ee7351a1098b78895fcbe99a30f914458322df49c944ad6c6a731804a4d680a690ad8f8f8dc8252ef7f8a1c5e13778bb7ce7d9f5610ff6e0c2e5d40a03332f9b7738cd163c4e0d8665567003f4373d4523ba8d30202fbf1545c7266123db191c6ccb3d58da07bc46aa8853003e1b8af28b"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b0001006272696467650000200002800800080088a8ffff05000700070000000a0014000180c200f7610000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r9, 0x6, 0x2, &(0x7f0000000100)=0x8, 0x4)
ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000440)={'syz_tun\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}})

kernel console output (not intermixed with test programs):

k: 8 bytes leftover after parsing attributes in process `syz.4.2311'.
[  354.642290][T15840] bond8: option coupled_control: invalid value (10)
[  354.644026][T15840] bond8 (unregistering): Released all slaves
[  354.968873][T15865] netlink: 'syz.1.2319': attribute type 3 has an invalid length.
[  354.995310][T15869] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2318'.
[  355.162701][T15873] 8021q: adding VLAN 0 to HW filter on device bond3
[  355.207155][T15873] 8021q: adding VLAN 0 to HW filter on device bond10
[  355.217219][T15873] 8021q: adding VLAN 0 to HW filter on device bond11
[  355.234072][T15873] 8021q: adding VLAN 0 to HW filter on device bond12
[  355.237284][T15873] 8021q: adding VLAN 0 to HW filter on device bond13
[  355.245527][T15873] 8021q: adding VLAN 0 to HW filter on device bond14
[  355.251309][T15873] 8021q: adding VLAN 0 to HW filter on device bond15
[  355.255902][T15873] 8021q: adding VLAN 0 to HW filter on device bond16
[  355.266417][T15873] 8021q: adding VLAN 0 to HW filter on device bond17
[  355.275512][T15873] 8021q: adding VLAN 0 to HW filter on device bond18
[  355.277878][T15873] veth0_to_team: entered promiscuous mode
[  355.315686][T15873] 8021q: adding VLAN 0 to HW filter on device bond19
[  355.335378][T15873] 8021q: adding VLAN 0 to HW filter on device bond22
[  355.341779][T15873] 8021q: adding VLAN 0 to HW filter on device bond23
[  355.368360][ T5640] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  355.449458][ T1046] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0
[  355.449514][ T1046] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0
[  355.449546][ T1046] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0
[  355.449567][ T1046] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0
[  356.123522][T15915] syz.1.2330: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  356.125112][T15915] CPU: 1 UID: 0 PID: 15915 Comm: syz.1.2330 Not tainted syzkaller #0 PREEMPT(full) 
[  356.125134][T15915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  356.125145][T15915] Call Trace:
[  356.125152][T15915]  <TASK>
[  356.125162][T15915]  dump_stack_lvl+0xe8/0x150
[  356.125198][T15915]  warn_alloc+0x24d/0x270
[  356.125219][T15915]  ? stack_depot_save_flags+0x33/0x810
[  356.125248][T15915]  ? __pfx_warn_alloc+0x10/0x10
[  356.125267][T15915]  ? kasan_save_track+0x4f/0x80
[  356.125288][T15915]  ? __kasan_kmalloc+0x93/0xb0
[  356.125309][T15915]  ? xsk_init_queue+0x8a/0xe0
[  356.125337][T15915]  ? xsk_setsockopt+0x52a/0x960
[  356.125357][T15915]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.125387][T15915]  __vmalloc_node_range_noprof+0x12c/0x16f0
[  356.125434][T15915]  ? rcu_is_watching+0x16/0xb0
[  356.125463][T15915]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  356.125485][T15915]  ? __kmalloc_cache_noprof+0x31c/0x600
[  356.125510][T15915]  ? __kmalloc_cache_noprof+0x148/0x600
[  356.125533][T15915]  ? xskq_create+0x56/0x220
[  356.125558][T15915]  xskq_create+0x148/0x220
[  356.125579][T15915]  ? xsk_init_queue+0x8a/0xe0
[  356.125603][T15915]  xsk_init_queue+0x8a/0xe0
[  356.125626][T15915]  xsk_setsockopt+0x52a/0x960
[  356.125649][T15915]  ? __pfx_xsk_setsockopt+0x10/0x10
[  356.125668][T15915]  ? __pfx_aa_sk_perm+0x10/0x10
[  356.125705][T15915]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  356.125728][T15915]  ? __pfx_xsk_setsockopt+0x10/0x10
[  356.125749][T15915]  do_sock_setsockopt+0x17c/0x1b0
[  356.125773][T15915]  __x64_sys_setsockopt+0x13d/0x1b0
[  356.125801][T15915]  do_syscall_64+0x166/0x520
[  356.125822][T15915]  ? trace_irq_disable+0x3b/0x140
[  356.125849][T15915]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.125867][T15915]  ? clear_bhb_loop+0x70/0xc0
[  356.125893][T15915]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.125910][T15915] RIP: 0033:0x7ff24e1a8f19
[  356.125928][T15915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  356.125943][T15915] RSP: 002b:00007ff24f019028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  356.125962][T15915] RAX: ffffffffffffffda RBX: 00007ff24e425fa0 RCX: 00007ff24e1a8f19
[  356.125975][T15915] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  356.125986][T15915] RBP: 00007ff24e237f6d R08: 0000000000000004 R09: 0000000000000000
[  356.125997][T15915] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000
[  356.126009][T15915] R13: 00007ff24e426038 R14: 00007ff24e425fa0 R15: 00007ffd54e25738
[  356.126041][T15915]  </TASK>
[  356.321161][T15915] Mem-Info:
[  356.321196][T15915] active_anon:7425 inactive_anon:0 isolated_anon:0
[  356.321196][T15915]  active_file:1 inactive_file:43358 isolated_file:0
[  356.321196][T15915]  unevictable:0 dirty:211 writeback:0
[  356.321196][T15915]  slab_reclaimable:12007 slab_unreclaimable:109636
[  356.321196][T15915]  mapped:29498 shmem:661 pagetables:3518
[  356.321196][T15915]  sec_pagetables:0 bounce:0
[  356.321196][T15915]  kernel_misc_reclaimable:0
[  356.321196][T15915]  free:1250086 free_pcp:18729 free_cma:0
[  356.321249][T15915] Node 0 active_anon:29700kB inactive_anon:0kB active_file:4kB inactive_file:173232kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117992kB dirty:844kB writeback:0kB shmem:2644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15956kB pagetables:13900kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  356.321299][T15915] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  356.321344][T15915] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  356.321397][T15915] lowmem_reserve[]: 0 2463 2465 2465 2465
[  356.321437][T15915] Node 0 DMA32 free:1041612kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:29700kB inactive_anon:0kB active_file:4kB inactive_file:173232kB unevictable:0kB writepending:844kB zspages:0kB present:3129332kB managed:2522824kB mlocked:0kB bounce:0kB free_pcp:74912kB local_pcp:39272kB free_cma:0kB
[  356.321492][T15915] lowmem_reserve[]: 0 0 1 1 1
[  356.321522][T15915] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  356.321573][T15915] lowmem_reserve[]: 0 0 0 0 0
[  356.321603][T15915] Node 1 Normal free:3943372kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  356.321653][T15915] lowmem_reserve[]: 0 0 0 0 0
[  356.321683][T15915] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  356.321788][T15915] Node 0 DMA32: 1637*4kB (UME) 1131*8kB (UME) 1066*16kB (UME) 388*32kB (UME) 933*64kB (UME) 835*128kB (UME) 542*256kB (UM) 180*512kB (U) 63*1024kB (UE) 9*2048kB (UME) 126*4096kB (UM) = 1041612kB
[  356.321926][T15915] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  356.323347][T15915] Node 1 Normal: 3*4kB (UM) 4*8kB (UM) 8*16kB (UM) 11*32kB (UM) 9*64kB (UM) 7*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (UM) = 3943372kB
[  356.323494][T15915] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  356.323510][T15915] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  356.323525][T15915] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  356.323539][T15915] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  356.323554][T15915] 44016 total pagecache pages
[  356.323571][T15915] 0 pages in swap cache
[  356.323578][T15915] Free swap  = 124996kB
[  356.323586][T15915] Total swap = 124996kB
[  356.323593][T15915] 2097051 pages RAM
[  356.323600][T15915] 0 pages HighMem/MovableOnly
[  356.323606][T15915] 434381 pages reserved
[  356.323613][T15915] 0 pages cma reserved
[  356.484066][T15915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2330'.
[  357.011397][T15936] x_tables: duplicate underflow at hook 1
[  357.152535][T15943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2335'.
[  357.191901][T15945] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2339'.
[  357.191926][T15945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2339'.
[  357.191938][T15945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2339'.
[  357.365642][T15951] 0: reclassify loop, rule prio 0, protocol 03
[  357.402908][T15960] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2345'.
[  357.532755][T15960] bond8 (unregistering): Released all slaves
[  357.566017][   T30] audit: type=1800 audit(1794385219.767:11): pid=15964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2346" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2247 res=0 errno=-22
[  357.630935][T15968] batman_adv: batadv0: Adding interface: syzkaller0
[  357.630951][T15968] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  357.630973][T15968] batman_adv: batadv0: Interface activated: syzkaller0
[  357.673215][T15967] batman_adv: batadv0: Interface deactivated: syzkaller0
[  357.724893][T15967] batman_adv: batadv0: Removing interface: syzkaller0
[  357.775431][T15970] veth11: entered allmulticast mode
[  357.863431][T15982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2351'.
[  357.917165][T15976] bond8: entered allmulticast mode
[  357.952529][T15986] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address
[  357.953081][T15986] bond8: (slave wireguard0): Error -95 calling set_mac_address
[  358.153479][T15995] syzkaller0: entered promiscuous mode
[  358.153506][T15995] syzkaller0: entered allmulticast mode
[  358.185068][T15995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2352'.
[  358.228857][T16002] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  358.408548][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.409036][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.055733][T16021] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  360.055809][T16022] syzkaller0: entered promiscuous mode
[  360.055826][T16022] syzkaller0: entered allmulticast mode
[  360.056198][T16023] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  360.321455][T16040] netlink: 'syz.2.2361': attribute type 4 has an invalid length.
[  360.368546][T16040] netlink: 'syz.2.2361': attribute type 4 has an invalid length.
[  360.413560][T16040] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  360.526591][T16053] __nla_validate_parse: 1 callbacks suppressed
[  360.526613][T16053] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2367'.
[  360.535174][T16051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2366'.
[  360.613196][T16051] bond8: Invalid ad_actor_system MAC address.
[  360.613217][T16051] bond8: option ad_actor_system: invalid value (7)
[  360.824713][T16051] bond8 (unregistering): Released all slaves
[  360.909275][T16062] bridge0: port 2(ip6gretap0) entered disabled state
[  360.909571][T16062] bridge0: port 1(syz_tun) entered disabled state
[  360.911879][T16062] bridge0: left allmulticast mode
[  361.232327][T16082] tipc: Started in network mode
[  361.232379][T16082] tipc: Node identity 162fbcb337fb, cluster identity 4711
[  361.232572][T16082] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  361.235124][T16082] syzkaller0: entered promiscuous mode
[  361.235143][T16082] syzkaller0: entered allmulticast mode
[  361.283787][T16082] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  361.371899][T16082] tipc: Resetting bearer <eth:syzkaller0>
[  361.376367][T16086] wg2: Caught tx_queue_len zero misconfig
[  361.377653][T16086] netlink: 'syz.4.2377': attribute type 3 has an invalid length.
[  361.377672][T16086] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2377'.
[  361.384466][T16078] tipc: Resetting bearer <eth:syzkaller0>
[  361.467012][T16078] tipc: Disabling bearer <eth:syzkaller0>
[  361.483925][T16091] netlink: 'syz.4.2379': attribute type 1 has an invalid length.
[  361.483944][T16091] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2379'.
[  361.483961][T16091] nbd: couldn't find device at index 767
[  361.602723][T16096] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  361.710985][T16089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2378'.
[  361.773187][ T7882] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  361.773269][ T7882] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  361.773323][ T7882] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  361.773353][ T7882] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  361.991726][T16110] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  361.992260][T16110] IPVS: fo: TCP 127.0.0.1:5376 - no destination available
[  362.147429][T16122] xt_HMARK: proto mask must be zero with L3 mode
[  362.186180][T16122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2388'.
[  362.229539][T16128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2389'.
[  362.283971][T16128] bond24: option lacp_active: invalid value (5)
[  362.286552][T16128] bond24 (unregistering): Released all slaves
[  362.343083][T16137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2388'.
[  362.343114][T16137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2388'.
[  362.377059][T16128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2389'.
[  362.470063][T16137] bond11: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms
[  362.525269][T16137] bond11 (unregistering): Released all slaves
[  362.668842][T16128] bond24: option lacp_active: invalid value (5)
[  362.674708][T16128] bond24 (unregistering): Released all slaves
[  362.817251][T16134] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  362.851433][T16140] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  362.938250][T16128] bond24: option lacp_active: invalid value (5)
[  362.969162][T16128] bond24 (unregistering): Released all slaves
[  363.067246][T16134] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  363.146771][T16164] netlink: 'syz.4.2392': attribute type 21 has an invalid length.
[  363.191727][T16158] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  363.291930][T16128] bond24: option lacp_active: invalid value (5)
[  363.364408][T16128] bond24 (unregistering): Released all slaves
[  363.528371][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.533008][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.672910][T16134] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  363.683312][T16148] syzkaller0: entered promiscuous mode
[  363.683335][T16148] syzkaller0: entered allmulticast mode
[  363.688100][T16154] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  363.898592][T16169] tipc: Resetting bearer <eth:syzkaller0>
[  363.987600][T16128] bond24: option lacp_active: invalid value (5)
[  364.010355][T16128] bond24 (unregistering): Released all slaves
[  364.076808][T16134] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  364.097622][T16147] tipc: Resetting bearer <eth:syzkaller0>
[  364.140968][T16147] tipc: Disabling bearer <eth:syzkaller0>
[  364.166620][T16189] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  364.167087][T16191] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  364.460039][T16206] Bluetooth: MGMT ver 1.23
[  364.732081][T16223] netlink: 'syz.1.2405': attribute type 5 has an invalid length.
[  364.947545][T16230] netlink: 'syz.1.2405': attribute type 5 has an invalid length.
[  365.028541][T16236] xt_hashlimit: size too large, truncated to 1048576
[  365.340010][T16242] netlink: 'syz.0.2407': attribute type 1 has an invalid length.
[  365.342408][T16243] netlink: 'syz.0.2407': attribute type 1 has an invalid length.
[  365.416315][T16242] 8021q: adding VLAN 0 to HW filter on device bond11
[  365.514728][T16245] bond11: (slave veth1): Enslaving as an active interface with a down link
[  365.643554][T16246] bond11: (slave veth7): Enslaving as an active interface with a down link
[  365.767586][T16258] xt_CT: You must specify a L4 protocol and not use inversions on it
[  366.315811][T16250] netlink: 'syz.4.2408': attribute type 1 has an invalid length.
[  366.487198][T16277] netlink: 'syz.0.2415': attribute type 10 has an invalid length.
[  366.498249][T16278] netlink: 'syz.0.2415': attribute type 10 has an invalid length.
[  366.594455][ T1046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.594479][ T1046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.666063][T16286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  366.728423][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.728797][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.039245][T16308] __nla_validate_parse: 7 callbacks suppressed
[  367.039267][T16308] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2421'.
[  367.303611][T16317] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2422'.
[  367.303644][T16317] netlink: 'syz.0.2422': attribute type 3 has an invalid length.
[  367.549071][T16330] openvswitch: netlink: IP tunnel dst address not specified
[  367.549502][T16330] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2424'.
[  367.556258][T16330] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2424'.
[  368.350877][T16369] netlink: 'syz.3.2428': attribute type 13 has an invalid length.
[  368.710303][T16381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2434'.
[  368.955844][T16390] netlink: 'syz.4.2436': attribute type 1 has an invalid length.
[  369.442368][T16397] bridge0: port 1(ip6gretap0) entered blocking state
[  369.442498][T16397] bridge0: port 1(ip6gretap0) entered forwarding state
[  369.470964][T16397] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.475481][T16397] 8021q: adding VLAN 0 to HW filter on device team0
[  369.505652][T16397] 8021q: adding VLAN 0 to HW filter on device batadv0
[  369.580768][T16397] batman_adv: batadv0: Interface activated: batadv_slave_0
[  369.598931][T16397] veth1_vlan: left promiscuous mode
[  369.604753][T16397] veth1_vlan: entered promiscuous mode
[  369.623165][T16397] veth1_macvtap: left promiscuous mode
[  369.624408][T16397] veth0_macvtap: left promiscuous mode
[  369.625540][T16397] veth0_macvtap: entered promiscuous mode
[  369.626738][T16397] veth1_macvtap: entered promiscuous mode
[  369.652939][T16397] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  369.705677][T16426] netlink: 'syz.1.2442': attribute type 1 has an invalid length.
[  369.814918][T16426] 8021q: adding VLAN 0 to HW filter on device bond24
[  369.835156][T16425] netlink: 'syz.1.2442': attribute type 4 has an invalid length.
[  369.835175][T16425] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2442'.
[  369.935335][T16439] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  369.973653][T16423] bond8: (slave veth0_to_bond): Releasing backup interface
[  369.973674][T16423] bond8: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  370.025892][T16423] bond24: (slave veth0_to_bond): making interface the new active one
[  370.042076][T16423] bond24: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  370.275880][T16444] batman_adv: batadv0: Removing interface: syz_tun
[  370.278704][T16441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2443'.
[  370.297185][T16444] veth0: left allmulticast mode
[  370.297416][T16444] bridge0: port 1(veth0) entered disabled state
[  370.322180][T16444] bridge_slave_1: left allmulticast mode
[  370.322430][T16444] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.349520][T16444] bond0: (slave bond_slave_0): Releasing backup interface
[  370.352943][T16444] bond0: (slave bond_slave_1): Releasing backup interface
[  370.355723][T16444] team0: Port device team_slave_0 removed
[  370.357269][T16444] team0: Port device team_slave_1 removed
[  370.357500][T16444] batman_adv: batadv0: Removing interface: batadv_slave_0
[  370.388564][T16444] bond0: (slave netdevsim0): Releasing backup interface
[  370.410714][T16444] bond7: (slave macvlan2): Releasing backup interface
[  370.424868][T16441] hsr_slave_0: left promiscuous mode
[  370.425883][T16441] hsr_slave_1: left promiscuous mode
[  370.461484][T16452] team0: Mode changed to "activebackup"
[  370.769812][T16471] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2447'.
[  370.781219][T16474] ip6erspan1: entered allmulticast mode
[  370.783873][T16474] netlink: 'syz.1.2449': attribute type 5 has an invalid length.
[  370.813974][T16478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  370.828160][T16473] netlink: 'syz.3.2451': attribute type 1 has an invalid length.
[  370.881830][T16474] netlink: 'syz.1.2449': attribute type 39 has an invalid length.
[  371.841149][T16506] netlink: 'syz.0.2455': attribute type 8 has an invalid length.
[  371.895939][T16506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2455'.
[  371.986244][T16506] veth9: entered allmulticast mode
[  372.488310][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.488758][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.489129][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.489505][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.489869][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.490355][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.884329][T16534] bond5: left promiscuous mode
[  372.902649][T16534] bond7: left promiscuous mode
[  372.907526][T16534] bridge3: left promiscuous mode
[  372.913667][T16534] bond9: left promiscuous mode
[  372.913689][T16534] bridge4: left promiscuous mode
[  372.950420][T16534] vti0: left promiscuous mode
[  372.972470][T16534] bond20: left promiscuous mode
[  372.972493][T16534] bridge6: left promiscuous mode
[  372.976794][T16548] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2463'.
[  372.979025][T16534] bond21: left promiscuous mode
[  373.099659][ T9618] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[  373.155912][T16553] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2464'.
[  373.473876][T16562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2467'.
[  373.528829][T16561] netlink: 'syz.4.2466': attribute type 1 has an invalid length.
[  373.620193][T16567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2467'.
[  373.635251][T16558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2466'.
[  373.645877][T16562] 8021q: adding VLAN 0 to HW filter on device bond25
[  373.650504][ T7884] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[  373.742150][T16569] netlink: 'syz.1.2467': attribute type 10 has an invalid length.
[  373.742173][T16569] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2467'.
[  373.806324][T16561] 8021q: adding VLAN 0 to HW filter on device bond8
[  373.905673][T16566] bond8: (slave geneve0): making interface the new active one
[  373.922455][T16566] bond8: (slave geneve0): Enslaving as an active interface with an up link
[  373.925512][T16567] bond25: entered promiscuous mode
[  373.925536][T16567] bond25: entered allmulticast mode
[  373.932197][ T9625] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[  373.979995][   T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.980048][   T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.980079][   T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  374.089712][T16577] netlink: 'syz.3.2470': attribute type 16 has an invalid length.
[  374.089743][T16577] netlink: 'syz.3.2470': attribute type 17 has an invalid length.
[  374.175657][T16577] 0ªX¹¦Dö»: left allmulticast mode
[  374.281547][T16577] bridge_slave_1: left allmulticast mode
[  374.304858][T16577] xfrm0: left promiscuous mode
[  374.304879][T16577] xfrm0: left allmulticast mode
[  374.327566][T16577] vlan0: left promiscuous mode
[  374.418367][T16577] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  374.548770][T16596] netlink: 'syz.1.2473': attribute type 1 has an invalid length.
[  374.710901][T16596] bond26: entered promiscuous mode
[  374.711536][T16596] 8021q: adding VLAN 0 to HW filter on device bond26
[  374.719009][ T7868] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[  374.719278][ T7868] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[  374.731087][T16604] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2474'.
[  374.888206][T16606] netlink: 'syz.1.2473': attribute type 10 has an invalid length.
[  375.175595][ T9618] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[  375.301474][T16596] macvtap1: entered allmulticast mode
[  375.318947][T16605] bond26: (slave bridge8): making interface the new active one
[  375.318970][T16605] bridge8: entered promiscuous mode
[  375.324707][T16605] bond26: (slave bridge8): Enslaving as an active interface with an up link
[  375.514652][T16617] tc_dump_action: action bad kind
[  375.701160][T16626] bridge0: Device is already in use.
[  375.776074][T16633] bridge0: Device is already in use.
[  375.826406][T16637] gre0: left promiscuous mode
[  376.141208][T16637] dummy0: left promiscuous mode
[  376.606058][T16662] rdma_rxe: rxe_newlink: failed to add bridge_slave_1
[  376.609427][T16663] ebt_among: wrong size: 2136 against expected 1092, rounded to 1096
[  376.609933][T16662] ebt_among: wrong size: 2136 against expected 1092, rounded to 1096
[  376.666487][T16637] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check.
[  376.684973][T16649] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  376.933294][T16681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2489'.
[  377.010577][T16683] syzkaller1: entered promiscuous mode
[  377.010600][T16683] syzkaller1: entered allmulticast mode
[  377.327688][T16706] syzkaller0: entered promiscuous mode
[  377.327708][T16706] syzkaller0: entered allmulticast mode
[  377.454222][T16711] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2496'.
[  377.539440][T16714] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2497'.
[  377.680502][T16723] validate_nla: 4 callbacks suppressed
[  377.680522][T16723] netlink: 'syz.3.2500': attribute type 1 has an invalid length.
[  377.680533][T16723] netlink: 'syz.3.2500': attribute type 2 has an invalid length.
[  377.760745][T16725] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .äxò¼}¶’¦‚
qù©µïóŸû5T\cNaë¯$Ã
[  377.972612][T16735] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  378.191921][T16754] __nla_validate_parse: 3 callbacks suppressed
[  378.191940][T16754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2508'.
[  378.192244][T16758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2508'.
[  378.230637][T16754] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2508'.
[  378.231456][T16758] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2508'.
[  378.466649][T16775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2512'.
[  378.527343][T16780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2514'.
[  378.527369][T16780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2514'.
[  378.532275][T16779] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2513'.
[  378.571759][T16780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2514'.
[  378.571787][T16780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2514'.
[  378.648017][    C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[  378.846023][T16799] bond12: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  378.869840][T16799] bond12 (unregistering): Released all slaves
[  378.977132][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  379.012683][T16808] wg2 speed is unknown, defaulting to 1000
[  379.012781][T16808] wg2 speed is unknown, defaulting to 1000
[  379.022444][T16808] wg2 speed is unknown, defaulting to 1000
[  379.023912][T16808] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  379.023942][T16808] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  379.023976][T16808] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  379.126593][T16808] wg2 speed is unknown, defaulting to 1000
[  379.145572][T16808] wg2 speed is unknown, defaulting to 1000
[  379.161959][T16808] wg2 speed is unknown, defaulting to 1000
[  379.165474][T16808] wg2 speed is unknown, defaulting to 1000
[  379.184090][T16808] wg2 speed is unknown, defaulting to 1000
[  379.484468][T16836] NFSD: Failed to start, no listeners configured.
[  379.560978][T16837] sit0: entered promiscuous mode
[  379.584976][T16837] netlink: 'syz.0.2523': attribute type 1 has an invalid length.
[  379.663126][T16803] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  379.723600][T16842] netlink: 'syz.3.2524': attribute type 10 has an invalid length.
[  380.457006][T16851] syzkaller1: entered promiscuous mode
[  380.457028][T16851] syzkaller1: entered allmulticast mode
[  380.483972][T16853] netlink: 'syz.4.2528': attribute type 219 has an invalid length.
[  382.100035][T16813] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  382.304784][T16870] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  382.307385][T16870] syzkaller0: entered promiscuous mode
[  382.307406][T16870] syzkaller0: entered allmulticast mode
[  382.331110][T16870] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  382.331744][T16873] xt_hashlimit: max too large, truncated to 1048576
[  382.352816][T16878] sctp: [Deprecated]: syz.0.2534 (pid 16878) Use of struct sctp_assoc_value in delayed_ack socket option.
[  382.352816][T16878] Use struct sctp_sack_info instead
[  382.445952][T16870] tipc: Resetting bearer <eth:syzkaller0>
[  382.480664][T16869] tipc: Resetting bearer <eth:syzkaller0>
[  382.506999][T16886] ip_tables: iptables: counters copy to user failed while replacing table
[  382.537240][T16869] tipc: Disabling bearer <eth:syzkaller0>
[  382.568842][T16879] tap0: tun_chr_ioctl cmd 1074025681
[  382.774102][T16909] netlink: 'syz.2.2544': attribute type 1 has an invalid length.
[  382.791099][T16907] ip_tables: iptables: counters copy to user failed while replacing table
[  382.846456][T16913] netlink: 'syz.0.2545': attribute type 1 has an invalid length.
[  382.865030][T16909] bond10: entered promiscuous mode
[  382.865524][T16909] 8021q: adding VLAN 0 to HW filter on device bond10
[  382.867353][T16915] sctp: [Deprecated]: syz.1.2542 (pid 16915) Use of int in max_burst socket option.
[  382.867353][T16915] Use struct sctp_assoc_value instead
[  382.903703][T16909] 8021q: adding VLAN 0 to HW filter on device bond10
[  382.904041][T16909] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address
[  382.904059][T16909] bond10: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  382.969344][T16909] bond10: (slave wireguard0): making interface the new active one
[  382.969367][T16909] wireguard0: entered promiscuous mode
[  382.996398][T16923] netlink: 'syz.2.2544': attribute type 1 has an invalid length.
[  382.997606][T16909] bond10: (slave wireguard0): Enslaving as an active interface with an up link
[  383.033961][T16925] bond10: (slave wireguard1): The slave device specified does not support setting the MAC address
[  383.055619][T16925] bond10: (slave wireguard1): Enslaving as a backup interface with an up link
[  383.159104][T16932] A link change request failed with some changes committed already. Interface 
2
6±ÿ may have been left with an inconsistent configuration, please check.
[  383.171286][T16932] A link change request failed with some changes committed already. Interface 
2
6±ÿ may have been left with an inconsistent configuration, please check.
[  383.366901][T16951] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  383.366964][T16948] __nla_validate_parse: 16 callbacks suppressed
[  383.366977][T16948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2552'.
[  383.367055][T16948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2552'.
[  383.390801][T16951] syzkaller0: entered promiscuous mode
[  383.390823][T16951] syzkaller0: entered allmulticast mode
[  383.439805][T16951] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  383.472060][T16951] tipc: Resetting bearer <eth:syzkaller0>
[  383.475648][T16950] tipc: Resetting bearer <eth:syzkaller0>
[  383.504099][T16950] tipc: Disabling bearer <eth:syzkaller0>
[  383.935467][T16969] 8021q: adding VLAN 0 to HW filter on device bond0
[  383.940737][T16969] 8021q: adding VLAN 0 to HW filter on device team0
[  383.945173][T16971] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2558'.
[  383.956823][T16969] 8021q: adding VLAN 0 to HW filter on device batadv0
[  384.056370][T16969] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  384.057118][T16969] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  384.072596][T16969] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  384.077330][T16969] 8021q: adding VLAN 0 to HW filter on device bond1
[  384.088030][T16981] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  384.117735][T16969] 8021q: adding VLAN 0 to HW filter on device bond2
[  384.131737][T16969] 8021q: adding VLAN 0 to HW filter on device bond3
[  384.155859][T16969] 8021q: adding VLAN 0 to HW filter on device bond4
[  384.166845][T16969] 8021q: adding VLAN 0 to HW filter on device bond5
[  384.176528][T16969] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  384.176574][ T6835] lo speed is unknown, defaulting to 1000
[  384.176615][ T6835] syz0: Port: 1 Link ACTIVE
[  384.176786][ T6835] lo speed is unknown, defaulting to 1000
[  384.251171][ T7882] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  384.253768][ T7882] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  384.269137][ T7868] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  384.269326][T16988] syz_tun: left allmulticast mode
[  384.269345][T16988] syz_tun: left promiscuous mode
[  384.269585][T16988] bridge0: port 1(syz_tun) entered disabled state
[  384.291823][T16988] batman_adv: batadv0: Adding interface: syz_tun
[  384.291845][T16988] batman_adv: batadv0: Interface activated: syz_tun
[  384.370040][T16991] bond9: option ad_select: invalid value (34)
[  384.374288][T16991] bond9 (unregistering): Released all slaves
[  384.477746][T16994] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  384.486163][T16994] syzkaller0: entered promiscuous mode
[  384.486184][T16994] syzkaller0: entered allmulticast mode
[  384.500174][T16994] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  384.526002][T16994] tipc: Resetting bearer <eth:syzkaller0>
[  384.539466][T16993] tipc: Resetting bearer <eth:syzkaller0>
[  384.562006][T16993] tipc: Disabling bearer <eth:syzkaller0>
[  384.593811][T16998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2566'.
[  384.922466][T17011] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  384.940735][T17011] syzkaller1: entered promiscuous mode
[  384.940756][T17011] syzkaller1: entered allmulticast mode
[  384.944383][T17011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2570'.
[  385.027166][T17016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2571'.
[  385.039149][T17011] 8021q: adding VLAN 0 to HW filter on device bond9
[  385.374332][   T43] syz_tun: tun_net_xmit 38
[  385.419669][T17036] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  385.422616][T17036] syzkaller0: entered promiscuous mode
[  385.422638][T17036] syzkaller0: entered allmulticast mode
[  385.432230][T17036] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  385.483139][T17036] tipc: Resetting bearer <eth:syzkaller0>
[  385.486386][T17035] tipc: Resetting bearer <eth:syzkaller0>
[  385.510081][T17035] tipc: Disabling bearer <eth:syzkaller0>
[  385.853800][ T7874] syz_tun: tun_net_xmit 62
[  386.231407][T17082] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  386.409979][ T1046] syz_tun: tun_net_xmit 38
[  386.522404][T17087] veth1_to_bond: Caught tx_queue_len zero misconfig
[  386.525121][T17084] smc: net device lo applied user defined pnetid SYZ0
[  386.648253][    C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[  386.888958][ T7882] syz_tun: tun_net_xmit 62
[  386.932386][T17107] SET target dimension over the limit!
[  386.945400][T17111] netlink: 'syz.4.2597': attribute type 1 has an invalid length.
[  386.945422][T17111] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2597'.
[  386.953628][T17111] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2597'.
[  386.958463][T17110] netlink: 'syz.2.2599': attribute type 1 has an invalid length.
[  387.252149][T17125] udevd[17125]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  387.279175][T17139] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2600'.
[  387.279199][T17139] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2600'.
[  387.308830][T17119] 8021q: adding VLAN 0 to HW filter on device bond12
[  387.311476][T17119] bond11: (slave bond12): making interface the new active one
[  387.311986][T17119] bond11: (slave bond12): Enslaving as an active interface with an up link
[  387.448671][ T7884] syz_tun: tun_net_xmit 38
[  387.519591][T17145] can: request_module (can-proto-0) failed.
[  387.933296][ T7874] syz_tun: tun_net_xmit 62
[  387.994796][T17156] lo speed is unknown, defaulting to 1000
[  388.490516][ T7882] syz_tun: tun_net_xmit 38
[  388.617190][T17208] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2610'.
[  388.617354][T17208] netlink: 'syz.0.2610': attribute type 9 has an invalid length.
[  388.617369][T17208] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2610'.
[  388.975477][ T7874] syz_tun: tun_net_xmit 62
[  389.017411][T17217] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2611'.
[  389.088933][ T1046] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0
[  389.088967][ T1046] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0
[  389.088988][ T1046] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.519530][T17156] wg2 speed is unknown, defaulting to 1000
[  389.521644][T17215] smc: removing ib device syz1
[  389.529966][   T43] syz_tun: tun_net_xmit 38
[  389.663812][T17215] smbdirect: ib_dev[syz1] removed
[  389.688490][ T5640] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  389.875828][   T30] audit: type=1800 audit(1794385252.077:12): pid=17222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2612" name="memory.events" dev="tmpfs" ino=2893 res=0 errno=-22
[  390.009223][   T43] syz_tun: tun_net_xmit 62
[  390.579606][   T43] syz_tun: tun_net_xmit 38
[  390.659047][T17249] gtp3: entered promiscuous mode
[  390.967307][T17256] lo speed is unknown, defaulting to 1000
[  391.049239][ T1046] syz_tun: tun_net_xmit 62
[  391.393303][T17266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2622'.
[  391.393331][T17266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2622'.
[  391.463365][T17269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2622'.
[  391.610768][ T7868] syz_tun: tun_net_xmit 38
[  391.889816][T17275] Unsupported ieee802154 address type: 0
[  392.091973][   T43] syz_tun: tun_net_xmit 62
[  392.647292][T17256] wg2 speed is unknown, defaulting to 1000
[  392.650744][ T7868] syz_tun: tun_net_xmit 38
[  393.012179][T17303] netlink: 'syz.3.2633': attribute type 1 has an invalid length.
[  393.130159][ T7884] syz_tun: tun_net_xmit 62
[  393.411700][T17324] ip_tables: iptables: counters copy to user failed while replacing table
[  393.534773][T17332] netlink: 'syz.2.2639': attribute type 11 has an invalid length.
[  393.691293][   T43] syz_tun: tun_net_xmit 38
[  393.892921][T17332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2639'.
[  394.142656][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2641'.
[  394.142739][T17339] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2641'.
[  394.147399][T17359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2641'.
[  394.147437][T17359] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2641'.
[  394.180169][   T43] syz_tun: tun_net_xmit 62
[  394.730709][ T7884] syz_tun: tun_net_xmit 38
[  394.811294][T17389] netlink: 'syz.1.2654': attribute type 1 has an invalid length.
[  394.831458][T17388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2655'.
[  394.872020][T17393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2654'.
[  394.872056][T17393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2654'.
[  394.873039][T17389] bond27: entered promiscuous mode
[  394.873403][T17389] 8021q: adding VLAN 0 to HW filter on device bond27
[  394.951938][T17389] bond27: (slave bridge9): making interface the new active one
[  394.951963][T17389] bridge9: entered promiscuous mode
[  394.957765][T17389] bond27: (slave bridge9): Enslaving as an active interface with an up link
[  395.116773][T17399] netlink: 65 bytes leftover after parsing attributes in process `syz.3.2657'.
[  395.170653][T17401] can: request_module (can-proto-0) failed.
[  395.208803][ T7884] syz_tun: tun_net_xmit 62
[  395.263919][T17408] tc_dump_action: action bad kind
[  395.690758][T17438] ip_tables: iptables: counters copy to user failed while replacing table
[  395.768587][   T43] syz_tun: tun_net_xmit 38
[  395.934517][T17447] netlink: 'syz.2.2670': attribute type 4 has an invalid length.
[  395.934528][T17448] netlink: 'syz.2.2670': attribute type 4 has an invalid length.
[  396.259799][ T7889] syz_tun: tun_net_xmit 62
[  396.311957][T17446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2671'.
[  396.817957][ T7874] syz_tun: tun_net_xmit 38
[  397.025823][   T30] audit: type=1800 audit(1794385259.227:13): pid=17460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2673" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2992 res=0 errno=-22
[  397.083351][   T30] audit: type=1800 audit(1794385259.287:14): pid=17466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2673" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2992 res=0 errno=-22
[  397.288311][ T7874] syz_tun: tun_net_xmit 62
[  397.325127][T17470] netlink: 'syz.4.2674': attribute type 1 has an invalid length.
[  397.379464][T17459] netlink: 'syz.0.2673': attribute type 4 has an invalid length.
[  397.534993][T17464] netlink: 'syz.0.2673': attribute type 4 has an invalid length.
[  397.555077][T17473] bridge11: entered promiscuous mode
[  397.630979][T17473] bridge11: entered promiscuous mode
[  397.747497][T17473] bridge11: entered promiscuous mode
[  397.850726][   T43] syz_tun: tun_net_xmit 38
[  397.866491][T17473] bridge11: entered promiscuous mode
[  397.992174][T17473] bridge11: entered promiscuous mode
[  398.032186][T17502] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  398.093219][T17511] ip_tables: iptables: counters copy to user failed while replacing table
[  398.227279][T17520] batadv_slave_0: Caught tx_queue_len zero misconfig
[  398.235429][T17521] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 3, id = 0
[  398.329233][ T1046] syz_tun: tun_net_xmit 62
[  398.423797][T17537] ip_tables: iptables: counters copy to user failed while replacing table
[  398.888658][ T7874] syz_tun: tun_net_xmit 38
[  399.086815][T17550] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  399.368031][ T7868] syz_tun: tun_net_xmit 62
[  399.928470][ T7868] syz_tun: tun_net_xmit 38
[  400.408888][ T7874] syz_tun: tun_net_xmit 62
[  400.647741][T17480] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  400.648496][T17481] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  400.916518][T17581] __nla_validate_parse: 11 callbacks suppressed
[  400.916542][T17581] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2693'.
[  400.968455][ T7874] syz_tun: tun_net_xmit 38
[  401.269473][T17599] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2702'.
[  401.271294][T17595] syzkaller1: entered promiscuous mode
[  401.271313][T17595] syzkaller1: entered allmulticast mode
[  401.368047][    C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[  401.451333][ T7874] syz_tun: tun_net_xmit 62
[  401.498208][T17615] netlink: 'syz.1.2704': attribute type 4 has an invalid length.
[  401.498231][T17615] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2704'.
[  401.938309][T17623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2706'.
[  402.010377][   T43] syz_tun: tun_net_xmit 38
[  402.233063][T17641] ip6erspan0: entered allmulticast mode
[  402.257615][T17658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2713'.
[  402.257651][T17658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2713'.
[  402.277169][   T30] audit: type=1804 audit(1794385264.477:15): pid=17660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2713" name="/newroot/587/cgroup.controllers" dev="tmpfs" ino=3030 res=1 errno=0
[  402.278277][   T30] audit: type=1800 audit(1794385264.487:16): pid=17660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2713" name="cgroup.controllers" dev="tmpfs" ino=3030 res=0 errno=-22
[  402.492233][ T7884] syz_tun: tun_net_xmit 62
[  402.499661][T17671] bond9: option fail_over_mac: invalid value (127)
[  402.516488][T17671] bond9 (unregistering): Released all slaves
[  402.869921][T17701] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  403.051095][ T7884] syz_tun: tun_net_xmit 38
[  403.152189][T17716] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  403.152214][T17716] batman_adv: batadv0: Removing interface: batadv_slave_0
[  403.157604][T17716] batman_adv: batadv0: Interface deactivated: syz_tun
[  403.157624][T17716] batman_adv: batadv0: Removing interface: syz_tun
[  403.176855][T17716] bond5: (slave batadv0): Releasing active interface
[  403.256580][T17724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2732'.
[  403.552123][T17737] xt_TPROXY: Can be used only with -p tcp or -p udp
[  403.552623][T17739] xt_TPROXY: Can be used only with -p tcp or -p udp
[  403.681232][T17747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2739'.
[  403.746014][T17752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2739'.
[  403.800496][T17747] bond12: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms
[  403.802487][T17747] bond12 (unregistering): Released all slaves
[  403.961142][T17752] bond12: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms
[  403.971013][T17752] bond12 (unregistering): Released all slaves
[  404.016166][T17765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2744'.
[  404.048634][T17763] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  404.055633][T17763] syzkaller0: entered promiscuous mode
[  404.055660][T17763] syzkaller0: entered allmulticast mode
[  404.109879][T17763] tipc: Resetting bearer <eth:syzkaller0>
[  404.140384][T17762] tipc: Resetting bearer <eth:syzkaller0>
[  404.212043][T17762] tipc: Disabling bearer <eth:syzkaller0>
[  404.648317][T17808] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  407.212159][T17777] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  407.400552][T17871] netlink: 'syz.4.2769': attribute type 12 has an invalid length.
[  407.409257][T17871] __nla_validate_parse: 4 callbacks suppressed
[  407.409275][T17871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2769'.
[  407.585334][T17884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2775'.
[  407.681524][T17890] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  407.731831][T17894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2775'.
[  408.023466][T17908] openvswitch: netlink: IP tunnel dst address not specified
[  408.192227][T17922] netlink: 'syz.3.2783': attribute type 23 has an invalid length.
[  408.326373][T17930] netlink: 'syz.3.2787': attribute type 1 has an invalid length.
[  408.380892][T17935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2789'.
[  409.333024][T17987] xt_cgroup: invalid path, errno=-2
[  409.388194][T17155] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  409.391832][T17155] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  409.393665][T17155] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  409.425537][T17155] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  409.436366][T17155] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  410.103970][T17999] lo speed is unknown, defaulting to 1000
[  410.238476][T17999] wg2 speed is unknown, defaulting to 1000
[  410.439986][T17999] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.440104][T17999] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.440209][T17999] bridge_slave_0: entered allmulticast mode
[  410.441350][T17999] bridge_slave_0: entered promiscuous mode
[  410.443848][T17999] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.444075][T17999] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.444192][T17999] bridge_slave_1: entered allmulticast mode
[  410.445729][T17999] bridge_slave_1: entered promiscuous mode
[  410.479697][T17999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  410.485153][T17999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  410.518431][T17999] team0: Port device team_slave_0 added
[  410.520478][T17999] team0: Port device team_slave_1 added
[  410.543138][T17999] batman_adv: batadv0: Adding interface: batadv_slave_0
[  410.543154][T17999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  410.543176][T17999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  410.544450][T17999] batman_adv: batadv0: Adding interface: batadv_slave_1
[  410.544463][T17999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  410.544485][T17999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  410.597135][T17999] hsr_slave_0: entered promiscuous mode
[  410.599794][T17999] hsr_slave_1: entered promiscuous mode
[  410.601333][T17999] debugfs: 'hsr0' already exists in 'hsr'
[  410.601349][T17999] Cannot create hsr debugfs directory
[  410.754805][T17999] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  410.754829][T17999] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  410.754849][T17999] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  410.857010][T17999] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  410.857033][T17999] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  410.857047][T17999] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  410.930535][T17999] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  410.930559][T17999] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  410.930572][T17999] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  411.002726][T17999] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  411.002749][T17999] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  411.002762][T17999] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  411.528227][ T5640] Bluetooth: hci5: command tx timeout
[  411.697471][T17955] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  411.801282][T18032] gre0: left allmulticast mode
[  411.835157][T18032] netlink: 988 bytes leftover after parsing attributes in process `syz.2.2803'.
[  411.838159][T18033] netlink: 988 bytes leftover after parsing attributes in process `syz.2.2803'.
[  411.838378][T17999] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  411.921138][T17999] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  411.924096][T17999] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  411.959791][T17999] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  411.960736][T17999] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  411.985205][T17999] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  411.987524][T17999] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  412.014268][T17999] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  412.208190][T17999] 8021q: adding VLAN 0 to HW filter on device bond0
[  412.264833][T17999] 8021q: adding VLAN 0 to HW filter on device team0
[  412.285735][ T7889] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.285843][ T7889] bridge0: port 1(bridge_slave_0) entered forwarding state
[  412.318566][ T7889] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.318673][ T7889] bridge0: port 2(bridge_slave_1) entered forwarding state
[  412.776811][T18067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2810'.
[  412.921729][T18071] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2808'.
[  412.942848][T18074] ip6gre2: entered promiscuous mode
[  412.942870][T18074] ip6gre2: entered allmulticast mode
[  412.945939][ T7889] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  412.946158][ T7889] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  412.970111][  T915] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  413.085141][T18081] can: request_module (can-proto-0) failed.
[  413.121589][T17999] 8021q: adding VLAN 0 to HW filter on device batadv0
[  413.185414][T17999] veth0_vlan: entered promiscuous mode
[  413.203971][T17999] veth1_vlan: entered promiscuous mode
[  413.286899][T17999] veth0_macvtap: entered promiscuous mode
[  413.304130][T17999] veth1_macvtap: entered promiscuous mode
[  413.335896][T17999] batman_adv: batadv0: Interface activated: batadv_slave_0
[  413.361587][T17999] batman_adv: batadv0: Interface activated: batadv_slave_1
[  413.419363][ T7874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  413.422278][ T7889] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  413.422505][ T7889] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  413.422537][ T7889] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  413.490347][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880682ff000: rx timeout, send abort
[  413.494610][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880682ff000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  413.608221][ T5640] Bluetooth: hci5: command tx timeout
[  413.849981][ T5764] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  413.928388][ T5764] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  415.050485][T18049] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  415.175899][ T7884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.175922][ T7884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.258417][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2816'.
[  415.324170][ T1046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.324192][ T1046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.413741][T18107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2818'.
[  415.413777][T18107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2818'.
[  415.636896][T18113] netlink: 'syz.4.2820': attribute type 10 has an invalid length.
[  415.650398][T18104] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2817'.
[  415.688595][ T5640] Bluetooth: hci5: command tx timeout
[  415.818173][T18128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2821'.
[  415.819399][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2821'.
[  415.820174][T18123] xt_CT: No such helper "snmp_trap"
[  416.432760][T18139] syzkaller1: entered promiscuous mode
[  416.432783][T18139] syzkaller1: entered allmulticast mode
[  416.525430][T18141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2826'.
[  417.195145][T18175] tipc: Started in network mode
[  417.195177][T18175] tipc: Node identity 6a3703e4f958, cluster identity 4711
[  417.216047][T18175] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  417.217673][T18175] syzkaller0: entered promiscuous mode
[  417.217692][T18175] syzkaller0: entered allmulticast mode
[  417.245387][T18175] tipc: Resetting bearer <eth:syzkaller0>
[  417.248542][T18174] tipc: Resetting bearer <eth:syzkaller0>
[  417.288252][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  417.310410][T18174] tipc: Disabling bearer <eth:syzkaller0>
[  417.359361][T18186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2843'.
[  417.430153][T18186] ip6gre2: entered promiscuous mode
[  417.562621][T18196] netlink: 'syz.4.2846': attribute type 1 has an invalid length.
[  417.603142][T18196] bond10: entered promiscuous mode
[  417.603542][T18196] 8021q: adding VLAN 0 to HW filter on device bond10
[  417.768430][ T5640] Bluetooth: hci5: command tx timeout
[  417.875943][T18217] __nla_validate_parse: 5 callbacks suppressed
[  417.875965][T18217] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2852'.
[  418.040881][T18230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2856'.
[  418.086683][T18229] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  418.092098][T18229] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  418.114600][T18229] tipc: Resetting bearer <eth:syzkaller0>
[  418.151169][T18222] tipc: Disabling bearer <eth:syzkaller0>
[  418.189919][T18234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2858'.
[  418.292834][T18236] bond13: option resend_igmp: invalid value (2878)
[  418.292857][T18236] bond13: option resend_igmp: allowed values 0 - 255
[  418.324036][T18236] bond13 (unregistering): Released all slaves
[  418.601677][T18260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2864'.
[  418.604736][T18261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2864'.
[  418.629000][T18260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2864'.
[  418.630124][T18265] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2866'.
[  418.630143][T18265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2866'.
[  418.630159][T18265] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2866'.
[  418.630171][T18265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2866'.
[  419.106778][T18289] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  419.118339][T18289] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  419.771121][T18303] syz.0.2878: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  419.771215][T18303] CPU: 1 UID: 0 PID: 18303 Comm: syz.0.2878 Not tainted syzkaller #0 PREEMPT(full) 
[  419.771236][T18303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  419.771251][T18303] Call Trace:
[  419.771258][T18303]  <TASK>
[  419.771267][T18303]  dump_stack_lvl+0xe8/0x150
[  419.771303][T18303]  warn_alloc+0x24d/0x270
[  419.771326][T18303]  ? stack_depot_save_flags+0x33/0x810
[  419.771357][T18303]  ? __pfx_warn_alloc+0x10/0x10
[  419.771377][T18303]  ? kasan_save_track+0x4f/0x80
[  419.771399][T18303]  ? __kasan_kmalloc+0x93/0xb0
[  419.771424][T18303]  ? xsk_init_queue+0x8a/0xe0
[  419.771443][T18303]  ? xsk_setsockopt+0x52a/0x960
[  419.771464][T18303]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.771496][T18303]  __vmalloc_node_range_noprof+0x12c/0x16f0
[  419.771551][T18303]  ? rcu_is_watching+0x16/0xb0
[  419.771583][T18303]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  419.771604][T18303]  ? __kmalloc_cache_noprof+0x31c/0x600
[  419.771628][T18303]  ? __kmalloc_cache_noprof+0x148/0x600
[  419.771659][T18303]  ? xskq_create+0x56/0x220
[  419.771687][T18303]  xskq_create+0x148/0x220
[  419.771709][T18303]  ? xsk_init_queue+0x8a/0xe0
[  419.771733][T18303]  xsk_init_queue+0x8a/0xe0
[  419.771757][T18303]  xsk_setsockopt+0x52a/0x960
[  419.771781][T18303]  ? __pfx_xsk_setsockopt+0x10/0x10
[  419.771802][T18303]  ? __pfx_aa_sk_perm+0x10/0x10
[  419.771837][T18303]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  419.771861][T18303]  ? __pfx_xsk_setsockopt+0x10/0x10
[  419.771883][T18303]  do_sock_setsockopt+0x17c/0x1b0
[  419.771909][T18303]  __x64_sys_setsockopt+0x13d/0x1b0
[  419.771934][T18303]  do_syscall_64+0x166/0x520
[  419.771957][T18303]  ? trace_irq_disable+0x3b/0x140
[  419.771982][T18303]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.772000][T18303]  ? clear_bhb_loop+0x70/0xc0
[  419.772023][T18303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.772049][T18303] RIP: 0033:0x7fbcb5da8f19
[  419.772068][T18303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  419.772085][T18303] RSP: 002b:00007fbcb6b91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  419.772104][T18303] RAX: ffffffffffffffda RBX: 00007fbcb6025fa0 RCX: 00007fbcb5da8f19
[  419.772118][T18303] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  419.772130][T18303] RBP: 00007fbcb5e37f6d R08: 0000000000000004 R09: 0000000000000000
[  419.772141][T18303] R10: 0000200000001540 R11: 0000000000000246 R12: 0000000000000000
[  419.772157][T18303] R13: 00007fbcb6026038 R14: 00007fbcb6025fa0 R15: 00007ffdcda95ba8
[  419.772190][T18303]  </TASK>
[  419.773898][T18303] Mem-Info:
[  419.773911][T18303] active_anon:8589 inactive_anon:6 isolated_anon:0
[  419.773911][T18303]  active_file:27 inactive_file:43320 isolated_file:0
[  419.773911][T18303]  unevictable:0 dirty:167 writeback:0
[  419.773911][T18303]  slab_reclaimable:12493 slab_unreclaimable:112738
[  419.773911][T18303]  mapped:32444 shmem:3514 pagetables:3434
[  419.773911][T18303]  sec_pagetables:0 bounce:0
[  419.773911][T18303]  kernel_misc_reclaimable:0
[  419.773911][T18303]  free:1260287 free_pcp:9193 free_cma:0
[  419.773962][T18303] Node 0 active_anon:34356kB inactive_anon:24kB active_file:108kB inactive_file:173080kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129776kB dirty:664kB writeback:0kB shmem:14056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16316kB pagetables:13564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  419.774012][T18303] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  419.774059][T18303] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  419.774112][T18303] lowmem_reserve[]: 0 2463 2465 2465 2465
[  419.774143][T18303] Node 0 DMA32 free:1082960kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:34356kB inactive_anon:24kB active_file:108kB inactive_file:173080kB unevictable:0kB writepending:664kB zspages:0kB present:3129332kB managed:2522824kB mlocked:0kB bounce:0kB free_pcp:36268kB local_pcp:15476kB free_cma:0kB
[  419.775727][T18303] lowmem_reserve[]: 0 0 1 1 1
[  419.775767][T18303] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  419.775833][T18303] lowmem_reserve[]: 0 0 0 0 0
[  419.775865][T18303] Node 1 Normal free:3942828kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:500kB free_cma:0kB
[  419.775916][T18303] lowmem_reserve[]: 0 0 0 0 0
[  419.775944][T18303] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  419.776059][T18303] Node 0 DMA32: 2684*4kB (UM) 2478*8kB (UME) 1635*16kB (UM) 408*32kB (UME) 934*64kB (UM) 807*128kB (UM) 553*256kB (UME) 176*512kB (U) 64*1024kB (UM) 6*2048kB (UME) 132*4096kB (UM) = 1083024kB
[  419.776203][T18303] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  419.776291][T18303] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 7*64kB (UM) 7*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (UM) = 3942828kB
[  419.776440][T18303] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  419.776455][T18303] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  419.776469][T18303] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  419.776483][T18303] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  419.776494][T18303] 46907 total pagecache pages
[  419.776506][T18303] 0 pages in swap cache
[  419.776512][T18303] Free swap  = 124996kB
[  419.776519][T18303] Total swap = 124996kB
[  419.776526][T18303] 2097051 pages RAM
[  419.776532][T18303] 0 pages HighMem/MovableOnly
[  419.776539][T18303] 434381 pages reserved
[  419.776554][T18303] 0 pages cma reserved
[  419.813744][T18327] ieee802154 phy0 wpan0: encryption failed: -22
[  420.042751][T18331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  420.043706][T18303] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  420.054429][T18331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  420.086951][T18335] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  420.095336][T18335] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  420.222460][T18335] tipc: Resetting bearer <eth:syzkaller0>
[  420.335251][T18332] tipc: Disabling bearer <eth:syzkaller0>
[  420.819313][ T5831] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  420.951908][T18376] netlink: 'syz.2.2898': attribute type 1 has an invalid length.
[  420.999098][ T5831] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  421.156043][T18388] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  421.158418][T18388] syzkaller0: entered promiscuous mode
[  421.158438][T18388] syzkaller0: entered allmulticast mode
[  421.164091][T18388] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  421.216165][T18388] tipc: Resetting bearer <eth:syzkaller0>
[  421.231112][T18386] tipc: Resetting bearer <eth:syzkaller0>
[  421.263595][T18386] tipc: Disabling bearer <eth:syzkaller0>
[  421.795653][T18411] 8021q: adding VLAN 0 to HW filter on device bond0
[  421.819930][T18411] veth1_vlan: left promiscuous mode
[  421.822717][T18411] veth0_vlan: left promiscuous mode
[  421.824849][T18411] veth0_vlan: entered promiscuous mode
[  421.846373][T18411] veth1_vlan: entered promiscuous mode
[  421.897633][T18411] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  421.924231][ T7875] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  421.924560][ T7875] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  421.924795][ T7875] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  421.924829][ T7875] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  422.019961][T18411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  422.331646][T18440] x_tables: duplicate underflow at hook 2
[  422.331805][T18441] x_tables: duplicate underflow at hook 2
[  422.564636][T18451] 8021q: VLANs not supported on ip6_vti0
[  422.636867][T18445] xt_TCPMSS: Only works on TCP SYN packets
[  423.086549][T18473] __nla_validate_parse: 112 callbacks suppressed
[  423.086567][T18473] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2921'.
[  423.135634][T17155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  423.152248][T17155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  423.161004][T17155] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  423.171430][T17155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  423.172035][T17155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  424.099150][T18472] lo speed is unknown, defaulting to 1000
[  424.178492][T18536] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  424.412520][T18472] wg2 speed is unknown, defaulting to 1000
[  424.447747][T18547] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2938'.
[  424.451656][T18547] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2938'.
[  424.493942][T18554] netlink: 'syz.4.2937': attribute type 11 has an invalid length.
[  424.933365][T18575] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2942'.
[  425.072629][T18584] x_tables: duplicate underflow at hook 2
[  425.072706][T18584] x_tables: duplicate underflow at hook 2
[  425.072767][T18584] x_tables: duplicate underflow at hook 2
[  425.072829][T18584] x_tables: duplicate underflow at hook 2
[  425.072895][T18584] x_tables: duplicate underflow at hook 2
[  425.072958][T18584] x_tables: duplicate underflow at hook 2
[  425.073021][T18584] x_tables: duplicate underflow at hook 2
[  425.073974][T18584] x_tables: duplicate underflow at hook 2
[  425.098224][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  425.126591][T18578] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  425.302994][ T5640] Bluetooth: hci0: command tx timeout
[  425.461495][T18472] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.461700][T18472] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.461894][T18472] bridge_slave_0: entered allmulticast mode
[  425.465807][T18472] bridge_slave_0: entered promiscuous mode
[  425.473482][T18472] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.473959][T18472] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.475056][T18472] bridge_slave_1: entered allmulticast mode
[  425.479112][T18472] bridge_slave_1: entered promiscuous mode
[  425.560825][T18599] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2948'.
[  425.565139][T18600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2949'.
[  425.610205][T18472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  425.613529][T18472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  425.649824][ T6835] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  425.679493][T18472] team0: Port device team_slave_0 added
[  425.682446][T18472] team0: Port device team_slave_1 added
[  425.727577][T18472] batman_adv: batadv0: Adding interface: batadv_slave_0
[  425.727595][T18472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  425.727615][T18472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  425.782507][T18472] batman_adv: batadv0: Adding interface: batadv_slave_1
[  425.782524][T18472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  425.782548][T18472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  425.847640][T18472] hsr_slave_0: entered promiscuous mode
[  425.854650][T18472] hsr_slave_1: entered promiscuous mode
[  425.855684][T18472] debugfs: 'hsr0' already exists in 'hsr'
[  425.855700][T18472] Cannot create hsr debugfs directory
[  426.031980][T18609] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2953'.
[  426.047067][T18611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2954'.
[  426.148205][T18472] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0
[  426.148239][T18472] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  426.148260][T18472] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.294163][T18617] veth11: entered allmulticast mode
[  426.302651][T18617] bond11: (slave veth11): Enslaving as an active interface with an up link
[  426.315605][T18621] bridge_slave_0: left allmulticast mode
[  426.315625][T18621] bridge_slave_0: left promiscuous mode
[  426.315772][T18621] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.321035][T18621] bridge_slave_1: left allmulticast mode
[  426.321061][T18621] bridge_slave_1: left promiscuous mode
[  426.321273][T18621] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.329995][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  426.330954][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  426.336180][T18626] netlink: 'syz.2.2958': attribute type 2 has an invalid length.
[  426.336200][T18626] netlink: 'syz.2.2958': attribute type 8 has an invalid length.
[  426.336210][T18626] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2958'.
[  426.340363][ T5764] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  426.360023][T18621] bond0: (slave bond_slave_0): Releasing backup interface
[  426.406883][T18621] bond0: (slave bond_slave_1): Releasing backup interface
[  426.432070][T18621] team0: Port device team_slave_0 removed
[  426.435197][T18621] team0: Port device team_slave_1 removed
[  426.435752][T18621] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  426.435764][T18621] batman_adv: batadv0: Removing interface: batadv_slave_0
[  426.436834][T18621] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  426.436846][T18621] batman_adv: batadv0: Removing interface: batadv_slave_1
[  426.441302][T18621] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  426.584147][T18472] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0
[  426.584180][T18472] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  426.584203][T18472] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.633012][T18630] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2959'.
[  426.788686][T18472] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0
[  426.788720][T18472] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  426.788744][T18472] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.920135][ T5764] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  426.986945][T18657] netlink: 'syz.4.2965': attribute type 1 has an invalid length.
[  427.045934][T18657] bond12: entered promiscuous mode
[  427.046495][T18657] 8021q: adding VLAN 0 to HW filter on device bond12
[  427.368660][ T5640] Bluetooth: hci0: command tx timeout
[  427.413547][T18472] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  427.618879][T18472] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  427.622210][T18472] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  427.627575][T18472] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  427.632704][T18472] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  427.644437][T18472] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  427.650336][T18472] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  427.661808][T18472] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  427.712331][T18687] netlink: 'syz.2.2970': attribute type 1 has an invalid length.
[  427.748792][T18687] gretap1: entered allmulticast mode
[  427.752191][T18687] bond14: (slave gretap1): making interface the new active one
[  427.752789][T18687] bond14: (slave gretap1): Enslaving as an active interface with an up link
[  427.843311][T18472] 8021q: adding VLAN 0 to HW filter on device bond0
[  427.890931][T18472] 8021q: adding VLAN 0 to HW filter on device team0
[  427.895386][T18693] syzkaller0: entered promiscuous mode
[  427.895406][T18693] syzkaller0: entered allmulticast mode
[  427.903951][ T1046] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.904054][ T1046] bridge0: port 1(bridge_slave_0) entered forwarding state
[  427.906612][T18693] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  427.961998][ T7868] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.962100][ T7868] bridge0: port 2(bridge_slave_1) entered forwarding state
[  428.171080][T18705] __nla_validate_parse: 6 callbacks suppressed
[  428.171114][T18705] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2974'.
[  428.200530][T18705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2974'.
[  428.200615][T18705] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2974'.
[  428.402604][T18714] Bluetooth: MGMT ver 1.23
[  428.545910][T18725] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2979'.
[  428.968226][T18735] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2981'.
[  428.985325][T18735] smc: net device lo erased user defined pnetid SYZ0
[  429.027537][T18472] 8021q: adding VLAN 0 to HW filter on device batadv0
[  429.132129][T18472] veth0_vlan: entered promiscuous mode
[  429.160094][T18472] veth1_vlan: entered promiscuous mode
[  429.293751][T18472] veth0_macvtap: entered promiscuous mode
[  429.310196][T18472] veth1_macvtap: entered promiscuous mode
[  429.350791][T18740] syzkaller0: entered promiscuous mode
[  429.350815][T18740] syzkaller0: entered allmulticast mode
[  429.376372][T18472] batman_adv: batadv0: Interface activated: batadv_slave_0
[  429.387582][T18740] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  429.434871][T18472] batman_adv: batadv0: Interface activated: batadv_slave_1
[  429.436812][T18744] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  429.454118][T18746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2986'.
[  429.459309][ T5640] Bluetooth: hci0: command tx timeout
[  429.488560][T18746] 8021q: adding VLAN 0 to HW filter on device bond15
[  429.530442][ T1046] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  429.530512][ T1046] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  429.530545][ T1046] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  429.618757][ T1046] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  429.826697][ T7867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  429.826719][ T7867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  429.827006][T18766] netlink: 'syz.2.2990': attribute type 1 has an invalid length.
[  429.878275][T18766] bond16: entered promiscuous mode
[  429.878830][T18766] 8021q: adding VLAN 0 to HW filter on device bond16
[  429.940343][T18766] 8021q: adding VLAN 0 to HW filter on device bond17
[  429.943315][T18766] bond16: (slave bond17): making interface the new active one
[  429.943338][T18766] bond17: entered promiscuous mode
[  429.945299][T18766] bond16: (slave bond17): Enslaving as an active interface with an up link
[  430.011923][ T1046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.011945][ T1046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.374873][T18780] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  430.932728][T17155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  430.947582][T17155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  430.959497][T17155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  430.962990][T17155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  430.963689][T17155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  431.030236][T18823] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  431.095416][T18828] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  431.268860][T18833] 8021q: adding VLAN 0 to HW filter on device bond18
[  431.351058][T18842] syzkaller1: entered allmulticast mode
[  431.448315][    C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured!
[  431.487164][T18848] ip6gretap2: entered allmulticast mode
[  431.489758][T18848] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2
[  431.496994][T18848] batman_adv: batadv0: Adding interface: ip6gretap2
[  431.497010][T18848] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  431.497128][T18848] batman_adv: batadv0: Interface activated: ip6gretap2
[  431.539613][ T5640] Bluetooth: hci0: command tx timeout
[  431.592684][T18854] FAULT_INJECTION: forcing a failure.
[  431.592684][T18854] name failslab, interval 1, probability 0, space 0, times 0
[  431.592713][T18854] CPU: 1 UID: 0 PID: 18854 Comm: syz.1.3011 Not tainted syzkaller #0 PREEMPT(full) 
[  431.592742][T18854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  431.592754][T18854] Call Trace:
[  431.592768][T18854]  <TASK>
[  431.592776][T18854]  dump_stack_lvl+0xe8/0x150
[  431.592830][T18854]  should_fail_ex+0x3eb/0x540
[  431.592867][T18854]  should_failslab+0xa8/0x100
[  431.592886][T18854]  __kmalloc_node_noprof+0xfb/0x720
[  431.592907][T18854]  ? __get_vm_area_node+0x200/0x2f0
[  431.592925][T18854]  ? __get_vm_area_node+0x283/0x2f0
[  431.592947][T18854]  ? __vmalloc_node_range_noprof+0x5d1/0x16f0
[  431.592970][T18854]  ? __vmalloc_node_range_noprof+0x5d1/0x16f0
[  431.593017][T18854]  __vmalloc_node_range_noprof+0x5d1/0x16f0
[  431.593077][T18854]  ? __lock_acquire+0x747/0x2de0
[  431.593120][T18854]  ? hook_capable+0x1c3/0x5e0
[  431.593165][T18854]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  431.593203][T18854]  ? bpf_prog_alloc_no_stats+0x47/0x550
[  431.593234][T18854]  __vmalloc_noprof+0xd2/0x120
[  431.593256][T18854]  ? bpf_prog_alloc_no_stats+0x47/0x550
[  431.593282][T18854]  bpf_prog_alloc_no_stats+0x47/0x550
[  431.593301][T18854]  ? bpf_prog_alloc+0x2a/0x1a0
[  431.593320][T18854]  bpf_prog_alloc+0x3c/0x1a0
[  431.593345][T18854]  bpf_prog_load+0x7f8/0x1c60
[  431.593377][T18854]  ? __pfx_bpf_prog_load+0x10/0x10
[  431.593411][T18854]  ? __might_fault+0xaf/0x130
[  431.593438][T18854]  __sys_bpf+0xd86/0xe00
[  431.593465][T18854]  ? __pfx___sys_bpf+0x10/0x10
[  431.593495][T18854]  ? __fget_files+0x2a/0x420
[  431.593543][T18854]  ? ksys_write+0x242/0x270
[  431.593579][T18854]  ? __pfx_ksys_write+0x10/0x10
[  431.593638][T18854]  __x64_sys_bpf+0xba/0xd0
[  431.593682][T18854]  do_syscall_64+0x166/0x520
[  431.593705][T18854]  ? trace_irq_disable+0x3b/0x140
[  431.593728][T18854]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.593762][T18854]  ? clear_bhb_loop+0x70/0xc0
[  431.593790][T18854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.593807][T18854] RIP: 0033:0x7f7913da8f19
[  431.593830][T18854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  431.593844][T18854] RSP: 002b:00007f7914c9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  431.593864][T18854] RAX: ffffffffffffffda RBX: 00007f7914025fa0 RCX: 00007f7913da8f19
[  431.593877][T18854] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  431.593888][T18854] RBP: 00007f7914c9a090 R08: 0000000000000000 R09: 0000000000000000
[  431.593899][T18854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  431.593910][T18854] R13: 00007f7914026038 R14: 00007f7914025fa0 R15: 00007fff1f20ced8
[  431.593948][T18854]  </TASK>
[  431.593987][T18854] syz.1.3011: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  431.594044][T18854] CPU: 1 UID: 0 PID: 18854 Comm: syz.1.3011 Not tainted syzkaller #0 PREEMPT(full) 
[  431.594070][T18854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  431.594080][T18854] Call Trace:
[  431.594088][T18854]  <TASK>
[  431.594095][T18854]  dump_stack_lvl+0xe8/0x150
[  431.594124][T18854]  warn_alloc+0x24d/0x270
[  431.594153][T18854]  ? __pfx_warn_alloc+0x10/0x10
[  431.594181][T18854]  ? __kmalloc_node_noprof+0x4d2/0x720
[  431.594215][T18854]  ? __get_vm_area_node+0x200/0x2f0
[  431.594238][T18854]  ? __get_vm_area_node+0x283/0x2f0
[  431.594255][T18854]  ? __vmalloc_node_range_noprof+0x5d1/0x16f0
[  431.594280][T18854]  ? __vmalloc_node_range_noprof+0x5d1/0x16f0
[  431.594312][T18854]  __vmalloc_node_range_noprof+0xa10/0x16f0
[  431.594343][T18854]  ? __lock_acquire+0x747/0x2de0
[  431.594413][T18854]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  431.594462][T18854]  ? bpf_prog_alloc_no_stats+0x47/0x550
[  431.594478][T18854]  __vmalloc_noprof+0xd2/0x120
[  431.594503][T18854]  ? bpf_prog_alloc_no_stats+0x47/0x550
[  431.594523][T18854]  bpf_prog_alloc_no_stats+0x47/0x550
[  431.594539][T18854]  ? bpf_prog_alloc+0x2a/0x1a0
[  431.594561][T18854]  bpf_prog_alloc+0x3c/0x1a0
[  431.594586][T18854]  bpf_prog_load+0x7f8/0x1c60
[  431.594617][T18854]  ? __pfx_bpf_prog_load+0x10/0x10
[  431.594652][T18854]  ? __might_fault+0xaf/0x130
[  431.594678][T18854]  __sys_bpf+0xd86/0xe00
[  431.594705][T18854]  ? __pfx___sys_bpf+0x10/0x10
[  431.594734][T18854]  ? __fget_files+0x2a/0x420
[  431.594770][T18854]  ? ksys_write+0x242/0x270
[  431.594792][T18854]  ? __pfx_ksys_write+0x10/0x10
[  431.594818][T18854]  __x64_sys_bpf+0xba/0xd0
[  431.594844][T18854]  do_syscall_64+0x166/0x520
[  431.594864][T18854]  ? trace_irq_disable+0x3b/0x140
[  431.594886][T18854]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.594902][T18854]  ? clear_bhb_loop+0x70/0xc0
[  431.594922][T18854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.594938][T18854] RIP: 0033:0x7f7913da8f19
[  431.594953][T18854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  431.594967][T18854] RSP: 002b:00007f7914c9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  431.594992][T18854] RAX: ffffffffffffffda RBX: 00007f7914025fa0 RCX: 00007f7913da8f19
[  431.595004][T18854] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  431.595015][T18854] RBP: 00007f7914c9a090 R08: 0000000000000000 R09: 0000000000000000
[  431.595026][T18854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  431.595036][T18854] R13: 00007f7914026038 R14: 00007f7914025fa0 R15: 00007fff1f20ced8
[  431.595073][T18854]  </TASK>
[  431.595081][T18854] Mem-Info:
[  431.595089][T18854] active_anon:5816 inactive_anon:0 isolated_anon:0
[  431.595089][T18854]  active_file:43 inactive_file:43352 isolated_file:0
[  431.595089][T18854]  unevictable:0 dirty:264 writeback:0
[  431.595089][T18854]  slab_reclaimable:12697 slab_unreclaimable:117239
[  431.595089][T18854]  mapped:29546 shmem:667 pagetables:3461
[  431.595089][T18854]  sec_pagetables:0 bounce:0
[  431.595089][T18854]  kernel_misc_reclaimable:0
[  431.595089][T18854]  free:1256150 free_pcp:10275 free_cma:0
[  431.595134][T18854] Node 0 active_anon:23264kB inactive_anon:0kB active_file:172kB inactive_file:173208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118184kB dirty:1052kB writeback:0kB shmem:2668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16808kB pagetables:13672kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  431.595182][T18854] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  431.595229][T18854] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  431.595279][T18854] lowmem_reserve[]: 0 2463 2465 2465 2465
[  431.595311][T18854] Node 0 DMA32 free:1067476kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23264kB inactive_anon:0kB active_file:172kB inactive_file:173208kB unevictable:0kB writepending:1052kB zspages:0kB present:3129332kB managed:2522824kB mlocked:0kB bounce:0kB free_pcp:39584kB local_pcp:22196kB free_cma:0kB
[  431.595362][T18854] lowmem_reserve[]: 0 0 1 1 1
[  431.595392][T18854] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  431.595439][T18854] lowmem_reserve[]: 0 0 0 0 0
[  431.595484][T18854] Node 1 Normal free:3941764kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:1508kB local_pcp:1508kB free_cma:0kB
[  431.595543][T18854] lowmem_reserve[]: 0 0 0 0 0
[  431.595572][T18854] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  431.595671][T18854] Node 0 DMA32: 1297*4kB (UM) 1302*8kB (UM) 1628*16kB (UME) 161*32kB (UME) 990*64kB (UM) 821*128kB (UM) 555*256kB (UME) 171*512kB (U) 64*1024kB (UME) 8*2048kB (UM) 132*4096kB (UM) = 1067476kB
[  431.595808][T18854] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  431.595890][T18854] Node 1 Normal: 2*4kB (M) 2*8kB (UM) 2*16kB (UM) 2*32kB (UM) 1*64kB (M) 2*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (UM) = 3941816kB
[  431.596014][T18854] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  431.596028][T18854] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  431.596040][T18854] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  431.596062][T18854] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  431.596076][T18854] 44058 total pagecache pages
[  431.596083][T18854] 0 pages in swap cache
[  431.596089][T18854] Free swap  = 124996kB
[  431.596096][T18854] Total swap = 124996kB
[  431.596102][T18854] 2097051 pages RAM
[  431.596108][T18854] 0 pages HighMem/MovableOnly
[  431.596114][T18854] 434381 pages reserved
[  431.596119][T18854] 0 pages cma reserved
[  431.724678][T18859] FAULT_INJECTION: forcing a failure.
[  431.724678][T18859] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  431.724705][T18859] CPU: 0 UID: 0 PID: 18859 Comm: syz.4.3012 Not tainted syzkaller #0 PREEMPT(full) 
[  431.724725][T18859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  431.724735][T18859] Call Trace:
[  431.724742][T18859]  <TASK>
[  431.724749][T18859]  dump_stack_lvl+0xe8/0x150
[  431.724781][T18859]  should_fail_ex+0x3eb/0x540
[  431.724808][T18859]  _copy_from_user+0x2d/0xb0
[  431.724833][T18859]  ___sys_sendmsg+0x1c6/0x360
[  431.724852][T18859]  ? __lock_acquire+0x747/0x2de0
[  431.724879][T18859]  ? __pfx____sys_sendmsg+0x10/0x10
[  431.724934][T18859]  ? __fget_files+0x3a2/0x420
[  431.724955][T18859]  ? __fget_files+0x2a/0x420
[  431.724985][T18859]  __x64_sys_sendmsg+0x1b1/0x290
[  431.725016][T18859]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  431.725056][T18859]  do_syscall_64+0x166/0x520
[  431.725077][T18859]  ? trace_irq_disable+0x3b/0x140
[  431.725099][T18859]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.725117][T18859]  ? clear_bhb_loop+0x70/0xc0
[  431.725138][T18859]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.725154][T18859] RIP: 0033:0x7f39d3ba8f19
[  431.725171][T18859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  431.725185][T18859] RSP: 002b:00007f39d4996028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  431.725203][T18859] RAX: ffffffffffffffda RBX: 00007f39d3e26090 RCX: 00007f39d3ba8f19
[  431.725216][T18859] RDX: 0000000004040010 RSI: 0000200000000340 RDI: 0000000000000004
[  431.725227][T18859] RBP: 00007f39d4996090 R08: 0000000000000000 R09: 0000000000000000
[  431.725237][T18859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  431.725247][T18859] R13: 00007f39d3e26128 R14: 00007f39d3e26090 R15: 00007ffdeaf45d98
[  431.725277][T18859]  </TASK>
[  432.063732][T18865] netlink: 'syz.2.3014': attribute type 11 has an invalid length.
[  432.475510][T18874] netlink: 'syz.4.3016': attribute type 1 has an invalid length.
[  432.475539][T18874] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3016'.
[  432.936307][T18901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3020'.
[  432.936352][T18901] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3020'.
[  432.988937][T18818] lo speed is unknown, defaulting to 1000
[  432.989059][T18894] xt_IDLETIMER: timeout value is zero
[  433.067943][ T5640] Bluetooth: hci3: command tx timeout
[  433.206307][T18903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3021'.
[  433.206333][T18903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3021'.
[  433.409683][T18916] ip_tables: iptables: counters copy to user failed while replacing table
[  433.475003][   T51] IPVS: starting estimator thread 0...
[  433.557905][T18922] IPVS: using max 35 ests per chain, 84000 per kthread
[  433.604330][T18818] wg2 speed is unknown, defaulting to 1000
[  433.649380][T18929] sctp: [Deprecated]: syz.0.3029 (pid 18929) Use of int in max_burst socket option.
[  433.649380][T18929] Use struct sctp_assoc_value instead
[  433.796120][T18934] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3030'.
[  433.825580][T18936] netlink: 'syz.2.3033': attribute type 1 has an invalid length.
[  433.825602][T18936] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3033'.
[  434.040850][T18950] batadv_slave_1: entered promiscuous mode
[  434.077002][T18937] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3030'.
[  434.332807][T18818] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.333058][T18818] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.333195][T18818] bridge_slave_0: entered allmulticast mode
[  434.361290][T18818] bridge_slave_0: entered promiscuous mode
[  434.375379][T18818] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.376251][T18818] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.376421][T18818] bridge_slave_1: entered allmulticast mode
[  434.404848][T18818] bridge_slave_1: entered promiscuous mode
[  434.491684][T18818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  434.494641][T18818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  434.559172][T18818] team0: Port device team_slave_0 added
[  434.562213][T18818] team0: Port device team_slave_1 added
[  434.608296][T18818] batman_adv: batadv0: Adding interface: batadv_slave_0
[  434.608317][T18818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  434.608339][T18818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  434.611638][T18818] batman_adv: batadv0: Adding interface: batadv_slave_1
[  434.611652][T18818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  434.611674][T18818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  434.751071][T18818] hsr_slave_0: entered promiscuous mode
[  434.752248][T18818] hsr_slave_1: entered promiscuous mode
[  434.753110][T18818] debugfs: 'hsr0' already exists in 'hsr'
[  434.753124][T18818] Cannot create hsr debugfs directory
[  435.131481][ T5640] Bluetooth: hci3: command tx timeout
[  435.411427][T18982] bridge12: entered promiscuous mode
[  435.411495][T18982] bridge12: entered allmulticast mode
[  435.745193][ T7879] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.757233][T19004] veth1_macvtap: left promiscuous mode
[  436.076217][T18818] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  436.092942][T18818] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  436.093849][T18818] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  436.124226][T18818] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  436.127707][T18818] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  436.148369][T18818] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  436.149269][T18818] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  436.155824][T18818] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  436.311641][T19035] smc: smcd device lo applied user defined pnetid SYZ0
[  436.371135][T18818] 8021q: adding VLAN 0 to HW filter on device bond0
[  436.400501][T18818] 8021q: adding VLAN 0 to HW filter on device team0
[  436.406241][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.406354][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[  436.419113][T19044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3057'.
[  436.447017][ T7868] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.447123][ T7868] bridge0: port 2(bridge_slave_1) entered forwarding state
[  436.455922][T19046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3058'.
[  436.480013][T19048] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  436.483719][T19046] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3058'.
[  436.483742][T19046] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3058'.
[  436.565281][T19052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3059'.
[  436.652604][T18818] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  436.652628][T18818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  436.680460][T19054] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  436.784478][T19052] 8021q: adding VLAN 0 to HW filter on device bond1
[  436.994827][T19082] IPv6: NLM_F_CREATE should be specified when creating new route
[  437.034229][T19079] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  437.067066][T19079] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  437.195140][T19075] tipc: Disabling bearer <eth:syzkaller0>
[  437.208316][ T5640] Bluetooth: hci3: command tx timeout
[  437.251431][T19092] ip_tables: iptables: counters copy to user failed while replacing table
[  437.541373][T18818] 8021q: adding VLAN 0 to HW filter on device batadv0
[  437.724641][T18818] veth0_vlan: entered promiscuous mode
[  437.724882][T19114] netlink: 'syz.2.3071': attribute type 1 has an invalid length.
[  437.747724][T18818] veth1_vlan: entered promiscuous mode
[  437.909764][T19124] netlink: 'syz.1.3072': attribute type 3 has an invalid length.
[  437.914707][T19124] netlink: 'syz.1.3072': attribute type 3 has an invalid length.
[  437.921604][T19124] netlink: 'syz.1.3072': attribute type 3 has an invalid length.
[  437.926065][T19124] netlink: 'syz.1.3072': attribute type 3 has an invalid length.
[  437.935717][T19124] netlink: 'syz.1.3072': attribute type 3 has an invalid length.
[  437.946464][T19124] netlink: 'syz.1.3072': attribute type 3 has an invalid length.
[  437.951678][T19124] netlink: 'syz.1.3072': attribute type 3 has an invalid length.
[  437.960260][T19124] netlink: 'syz.1.3072': attribute type 3 has an invalid length.
[  437.971939][T19124] netlink: 'syz.1.3072': attribute type 3 has an invalid length.
[  437.997613][T18818] veth0_macvtap: entered promiscuous mode
[  438.063725][T18818] veth1_macvtap: entered promiscuous mode
[  438.148813][T18818] batman_adv: batadv0: Interface activated: batadv_slave_0
[  438.202092][T18818] batman_adv: batadv0: Interface activated: batadv_slave_1
[  438.301172][ T7868] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  438.301734][ T7868] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  438.301768][ T7868] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  438.301797][ T7868] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  438.577472][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.577492][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.746221][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.746242][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.853510][T19129] __nla_validate_parse: 34 callbacks suppressed
[  438.853529][T19129] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3073'.
[  439.050823][T19154] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  439.086638][T19153] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  439.225991][T19151] tipc: Disabling bearer <eth:syzkaller0>
[  439.266687][T19161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3080'.
[  439.289213][ T5640] Bluetooth: hci3: command tx timeout
[  439.373896][T19165] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3080'.
[  439.630843][T19171] block nbd2: Unsupported socket: should be TCP or UNIX.
[  439.731039][T19174] ip_tables: iptables: counters copy to user failed while replacing table
[  439.743856][T19174] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3084'.
[  442.185206][T19183] bridge0: left allmulticast mode
[  442.391072][T19183] mac80211_hwsim hwsim10 wlan1: left promiscuous mode
[  442.415128][T19183] bond1: left allmulticast mode
[  442.415505][T19183] bond2: left promiscuous mode
[  442.422501][T19183] vxlan1: left promiscuous mode
[  442.422524][T19183] vxlan1: left allmulticast mode
[  442.424282][T19183] vxlan2: left promiscuous mode
[  442.424301][T19183] vxlan2: left allmulticast mode
[  442.433464][T19183] bond4: left promiscuous mode
[  442.433487][T19183] bond4: left allmulticast mode
[  442.453842][T19183] erspan1: left promiscuous mode
[  442.463687][T19183] bond6: left promiscuous mode
[  442.506389][T19183] bond10: left promiscuous mode
[  442.506405][T19183] wireguard0: left promiscuous mode
[  442.544220][T19183] ip6gre2: left promiscuous mode
[  442.546798][T19183] gretap1: left allmulticast mode
[  442.561221][T19183] bond16: left promiscuous mode
[  442.561244][T19183] bond17: left promiscuous mode
[  442.575458][T19183] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  442.575959][T19183] ip6gretap2: left allmulticast mode
[  442.598173][   T43] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  442.598201][   T43] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.598229][   T43] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  442.598245][   T43] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.598267][   T43] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  442.598282][   T43] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.598304][   T43] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  442.598319][   T43] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.602755][T19184] netlink: 964 bytes leftover after parsing attributes in process `syz.3.3086'.
[  442.737393][T19206] FAULT_INJECTION: forcing a failure.
[  442.737393][T19206] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  442.737424][T19206] CPU: 1 UID: 0 PID: 19206 Comm: syz.3.3090 Not tainted syzkaller #0 PREEMPT(full) 
[  442.737443][T19206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  442.737453][T19206] Call Trace:
[  442.737460][T19206]  <TASK>
[  442.737469][T19206]  dump_stack_lvl+0xe8/0x150
[  442.737501][T19206]  should_fail_ex+0x3eb/0x540
[  442.737528][T19206]  _copy_from_user+0x2d/0xb0
[  442.737568][T19206]  copy_from_bpfptr+0x5c/0x90
[  442.737588][T19206]  bpf_prog_load+0xd26/0x1c60
[  442.737619][T19206]  ? __pfx_bpf_prog_load+0x10/0x10
[  442.737651][T19206]  ? __might_fault+0xaf/0x130
[  442.737678][T19206]  __sys_bpf+0xd86/0xe00
[  442.737705][T19206]  ? __pfx___sys_bpf+0x10/0x10
[  442.737734][T19206]  ? __fget_files+0x2a/0x420
[  442.737776][T19206]  ? ksys_write+0x242/0x270
[  442.737799][T19206]  ? __pfx_ksys_write+0x10/0x10
[  442.737827][T19206]  __x64_sys_bpf+0xba/0xd0
[  442.737855][T19206]  do_syscall_64+0x166/0x520
[  442.737878][T19206]  ? trace_irq_disable+0x3b/0x140
[  442.737901][T19206]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.737919][T19206]  ? clear_bhb_loop+0x70/0xc0
[  442.737941][T19206]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.737958][T19206] RIP: 0033:0x7f8bde1a8f19
[  442.737974][T19206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  442.737989][T19206] RSP: 002b:00007f8bdf073028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  442.738009][T19206] RAX: ffffffffffffffda RBX: 00007f8bde425fa0 RCX: 00007f8bde1a8f19
[  442.738028][T19206] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  442.738039][T19206] RBP: 00007f8bdf073090 R08: 0000000000000000 R09: 0000000000000000
[  442.738050][T19206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  442.738060][T19206] R13: 00007f8bde426038 R14: 00007f8bde425fa0 R15: 00007ffcc7e5fbf8
[  442.738091][T19206]  </TASK>
[  442.982191][T19208] validate_nla: 25 callbacks suppressed
[  442.982216][T19208] netlink: 'syz.2.3089': attribute type 1 has an invalid length.
[  443.060359][T19208] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3089'.
[  443.103612][T19211] tipc: Started in network mode
[  443.103641][T19211] tipc: Node identity 927fd2313606, cluster identity 4711
[  443.103823][T19211] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  443.118348][T19211] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  443.242857][T19210] tipc: Disabling bearer <eth:syzkaller0>
[  443.538677][T19220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3094'.
[  443.609317][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  443.615280][T17155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  443.640947][T17155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  443.642464][T17155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  443.643781][T17155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  443.644406][T17155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  443.775542][T19234] netlink: 'syz.4.3099': attribute type 9 has an invalid length.
[  443.867145][T19230] team0: Mode "load"alance" not found
[  444.095595][T19257] netlink: 'syz.3.3103': attribute type 1 has an invalid length.
[  444.119750][T19263] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3103'.
[  444.285184][T19262] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3104'.
[  444.474317][T19289] tipc: Started in network mode
[  444.474346][T19289] tipc: Node identity c2a7cce502bb, cluster identity 4711
[  444.474504][T19289] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  444.475631][T19289] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  444.533736][T19287] tipc: Disabling bearer <eth:syzkaller0>
[  444.674612][T19232] lo speed is unknown, defaulting to 1000
[  445.062728][T19232] wg2 speed is unknown, defaulting to 1000
[  445.580095][T19342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3120'.
[  445.688117][ T5640] Bluetooth: hci4: command tx timeout
[  445.731571][T19354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3122'.
[  445.764344][T19354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3122'.
[  445.764846][T19232] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.765440][T19232] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.765581][T19232] bridge_slave_0: entered allmulticast mode
[  445.767452][T19232] bridge_slave_0: entered promiscuous mode
[  445.770538][T19232] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.770695][T19232] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.771101][T19232] bridge_slave_1: entered allmulticast mode
[  445.772676][T19232] bridge_slave_1: entered promiscuous mode
[  445.821257][T19232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  445.831447][ T7868] IPVS: starting estimator thread 0...
[  445.842353][T19232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  445.853158][T19356] netlink: 'syz.1.3124': attribute type 1 has an invalid length.
[  445.918369][T19357] IPVS: using max 28 ests per chain, 67200 per kthread
[  445.920080][T19232] team0: Port device team_slave_0 added
[  445.982320][T19232] team0: Port device team_slave_1 added
[  445.996189][T19356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3124'.
[  446.010008][T19232] batman_adv: batadv0: Adding interface: batadv_slave_0
[  446.010024][T19232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  446.010044][T19232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  446.085665][T19232] batman_adv: batadv0: Adding interface: batadv_slave_1
[  446.085682][T19232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  446.085705][T19232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  446.190809][T19232] hsr_slave_0: entered promiscuous mode
[  446.191789][T19232] hsr_slave_1: entered promiscuous mode
[  446.194258][T19232] debugfs: 'hsr0' already exists in 'hsr'
[  446.194274][T19232] Cannot create hsr debugfs directory
[  446.464866][T19377] vcan0: tx drop: invalid da for name 0x0000000000000002
[  446.573648][T19381] netlink: 'syz.4.3133': attribute type 1 has an invalid length.
[  446.613071][T19381] 8021q: adding VLAN 0 to HW filter on device bond13
[  446.618498][T19381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3133'.
[  446.627995][T19381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3133'.
[  446.676266][T19381] bond13: (slave bridge13): making interface the new active one
[  446.685857][T19381] bond13: (slave bridge13): Enslaving as an active interface with an up link
[  446.820132][T19393] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  447.098365][T19402] openvswitch: netlink: Actions may not be safe on all matching packets
[  447.141257][T19232] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  447.159813][T19232] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  447.160746][T19232] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  447.175956][T19409] FAULT_INJECTION: forcing a failure.
[  447.175956][T19409] name failslab, interval 1, probability 0, space 0, times 0
[  447.175985][T19409] CPU: 0 UID: 0 PID: 19409 Comm: syz.1.3140 Not tainted syzkaller #0 PREEMPT(full) 
[  447.176005][T19409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  447.176015][T19409] Call Trace:
[  447.176022][T19409]  <TASK>
[  447.176029][T19409]  dump_stack_lvl+0xe8/0x150
[  447.176062][T19409]  should_fail_ex+0x3eb/0x540
[  447.176088][T19409]  should_failslab+0xa8/0x100
[  447.176108][T19409]  __kmalloc_cache_noprof+0x9e/0x600
[  447.176131][T19409]  ? bpf_prog_stream_init+0x9f/0x4a0
[  447.176153][T19409]  ? bpf_prog_stream_init+0x9f/0x4a0
[  447.176181][T19409]  bpf_prog_stream_init+0x9f/0x4a0
[  447.176206][T19409]  bpf_prog_load+0xcb8/0x1c60
[  447.176245][T19409]  ? __pfx_bpf_prog_load+0x10/0x10
[  447.176278][T19409]  ? __might_fault+0xaf/0x130
[  447.176303][T19409]  __sys_bpf+0xd86/0xe00
[  447.176329][T19409]  ? __pfx___sys_bpf+0x10/0x10
[  447.176356][T19409]  ? __fget_files+0x2a/0x420
[  447.176396][T19409]  ? ksys_write+0x242/0x270
[  447.176421][T19409]  ? __pfx_ksys_write+0x10/0x10
[  447.176449][T19409]  __x64_sys_bpf+0xba/0xd0
[  447.176477][T19409]  do_syscall_64+0x166/0x520
[  447.176502][T19409]  ? trace_irq_disable+0x3b/0x140
[  447.176524][T19409]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.176541][T19409]  ? clear_bhb_loop+0x70/0xc0
[  447.176562][T19409]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.176579][T19409] RIP: 0033:0x7f7913da8f19
[  447.176596][T19409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  447.176611][T19409] RSP: 002b:00007f7914c9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  447.176630][T19409] RAX: ffffffffffffffda RBX: 00007f7914025fa0 RCX: 00007f7913da8f19
[  447.176642][T19409] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  447.176652][T19409] RBP: 00007f7914c9a090 R08: 0000000000000000 R09: 0000000000000000
[  447.176663][T19409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  447.176673][T19409] R13: 00007f7914026038 R14: 00007f7914025fa0 R15: 00007fff1f20ced8
[  447.176703][T19409]  </TASK>
[  447.183046][T19232] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  447.184861][T19232] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  447.216409][T19232] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  447.224504][T19232] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  447.261422][T19232] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  447.604204][T19232] 8021q: adding VLAN 0 to HW filter on device bond0
[  447.657008][T19232] 8021q: adding VLAN 0 to HW filter on device team0
[  447.700389][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.700541][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  447.704262][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  447.704371][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  447.768784][ T5640] Bluetooth: hci4: command tx timeout
[  447.816770][T19448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3147'.
[  447.862387][T19448] bond14: Invalid ad_actor_system MAC address.
[  447.862408][T19448] bond14: option ad_actor_system: invalid value (7)
[  447.897149][T19448] bond14 (unregistering): Released all slaves
[  447.967998][T19448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3147'.
[  448.016464][   T30] audit: type=1804 audit(1794385310.217:17): pid=19460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3150" name="/newroot/74/cgroup.controllers" dev="tmpfs" ino=399 res=1 errno=0
[  448.016513][   T30] audit: type=1800 audit(1794385310.217:18): pid=19460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3150" name="cgroup.controllers" dev="tmpfs" ino=399 res=0 errno=-22
[  448.069248][T19448] bond14: Invalid ad_actor_system MAC address.
[  448.069266][T19448] bond14: option ad_actor_system: invalid value (7)
[  448.074900][T19448] bond14 (unregistering): Released all slaves
[  448.164027][T19457] syz_tun: entered allmulticast mode
[  448.226276][T19457] syzkaller1: entered promiscuous mode
[  448.226299][T19457] syzkaller1: entered allmulticast mode
[  448.237441][T19455] syz_tun: left allmulticast mode
[  448.519393][T19477] block nbd0: reconnected socket
[  448.568838][T19485] netlink: 'syz.3.3155': attribute type 9 has an invalid length.
[  448.653940][ T7894] gretap0: left allmulticast mode
[  448.653965][ T7894] gretap0: left promiscuous mode
[  448.655847][ T7894] bridge0: port 3(gretap0) entered disabled state
[  448.694078][ T7894] bridge_slave_1: left allmulticast mode
[  448.694139][ T7894] bridge_slave_1: left promiscuous mode
[  448.694342][ T7894] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.721753][ T7894] bridge_slave_0: left allmulticast mode
[  448.721784][ T7894] bridge_slave_0: left promiscuous mode
[  448.722012][ T7894] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.791747][T19493] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  448.901236][ T7894] pim6reg: left allmulticast mode
[  449.307997][ T5640] block nbd0: Receive control failed (result -32)
[  449.343635][T19513] netlink: 'syz.1.3163': attribute type 1 has an invalid length.
[  449.560208][ T7894] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  449.594678][ T7894] bond8 (unregistering): (slave bridge3): Releasing backup interface
[  449.616010][ T7894] bond9 (unregistering): (slave bridge4): Releasing backup interface
[  449.694898][ T7894] bond20 (unregistering): (slave bridge6): Releasing backup interface
[  449.720069][ T7894] bond26 (unregistering): (slave bridge8): Releasing backup interface
[  449.720094][ T7894] bridge8 (unregistering): left promiscuous mode
[  449.752974][ T7894] bond27 (unregistering): (slave bridge9): Releasing backup interface
[  449.753000][ T7894] bridge9 (unregistering): left promiscuous mode
[  449.786168][ T7894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  449.799775][ T7894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  449.801629][ T7894] bond0 (unregistering): Released all slaves
[  449.812225][ T7894] bond1 (unregistering): Released all slaves
[  449.826446][ T7894] bond2 (unregistering): Released all slaves
[  449.845047][ T7894] bond3 (unregistering): Released all slaves
[  449.848230][ T5640] Bluetooth: hci4: command tx timeout
[  449.867257][ T7894] bond4 (unregistering): Released all slaves
[  449.902806][ T7894] bond5 (unregistering): Released all slaves
[  449.921403][ T7894] bond6 (unregistering): Released all slaves
[  449.944912][ T7894] bond7 (unregistering): Released all slaves
[  449.962900][ T7894] bond8 (unregistering): Released all slaves
[  449.987479][ T7894] bond9 (unregistering): Released all slaves
[  450.015078][ T7894] bond10 (unregistering): Released all slaves
[  450.030840][ T7894] bond11 (unregistering): Released all slaves
[  450.053603][ T7894] bond12 (unregistering): Released all slaves
[  450.076006][ T7894] bond13 (unregistering): Released all slaves
[  450.097468][ T7894] bond14 (unregistering): Released all slaves
[  450.130256][ T7894] bond15 (unregistering): Released all slaves
[  450.150275][ T7894] bond16 (unregistering): Released all slaves
[  450.182087][ T7894] bond17 (unregistering): Released all slaves
[  450.201893][ T7894] bond18 (unregistering): Released all slaves
[  450.215861][ T7894] bond19 (unregistering): Released all slaves
[  450.232722][ T7894] bond20 (unregistering): Released all slaves
[  450.243067][ T7894] bond21 (unregistering): Released all slaves
[  450.253771][T19534] sctp: [Deprecated]: syz.1.3170 (pid 19534) Use of int in max_burst socket option deprecated.
[  450.253771][T19534] Use struct sctp_assoc_value instead
[  450.260232][ T7894] bond22 (unregistering): Released all slaves
[  450.277552][ T7894] bond23 (unregistering): Released all slaves
[  450.296804][ T7894] bond24 (unregistering): (slave veth0_to_bond): Releasing active interface
[  450.302444][ T7894] bond24 (unregistering): Released all slaves
[  450.318094][ T7894] bond25 (unregistering): Released all slaves
[  450.345954][ T7894] 
[  450.346512][T19535] netlink: 'syz.1.3170': attribute type 8 has an invalid length.
[  450.356045][ T7894] ======================================================
[  450.363051][ T7894] WARNING: possible circular locking dependency detected
[  450.370072][ T7894] syzkaller #0 Not tainted
[  450.374488][ T7894] ------------------------------------------------------
[  450.381489][ T7894] kworker/u8:35/7894 is trying to acquire lock:
[  450.387709][ T7894] ffff88801d28d2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80
[  450.397545][ T7894] 
[  450.397545][ T7894] but task is already holding lock:
[  450.404910][ T7894] ffffffff90c20c20 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  450.413626][ T7894] 
[  450.413626][ T7894] which lock already depends on the new lock.
[  450.413626][ T7894] 
[  450.424046][ T7894] 
[  450.424046][ T7894] the existing dependency chain (in reverse order) is:
[  450.433099][ T7894] 
[  450.433099][ T7894] -> #10 (gdp_mutex){+.+.}-{4:4}:
[  450.440313][ T7894]        __mutex_lock+0x197/0x15a0
[  450.445422][ T7894]        get_device_parent+0x16f/0x3a0
[  450.450871][ T7894]        device_add+0x2d4/0xb80
[  450.455722][ T7894]        device_create+0x269/0x300
[  450.460840][ T7894]        msr_device_create+0x33/0x50
[  450.466126][ T7894]        cpuhp_invoke_callback+0x434/0x810
[  450.471931][ T7894]        cpuhp_thread_fun+0x362/0x780
[  450.477296][ T7894]        smpboot_thread_fn+0x5f8/0xb30
[  450.482749][ T7894]        kthread+0x38b/0x480
[  450.487512][ T7894]        ret_from_fork+0x514/0xb70
[  450.492614][ T7894]        ret_from_fork_asm+0x1a/0x30
[  450.497895][ T7894] 
[  450.497895][ T7894] -> #9 (cpuhp_state-up){+.+.}-{0:0}:
[  450.505488][ T7894]        cpuhp_thread_fun+0x127/0x780
[  450.510867][ T7894]        smpboot_thread_fn+0x5f8/0xb30
[  450.516313][ T7894]        kthread+0x38b/0x480
[  450.520984][ T7894]        ret_from_fork+0x514/0xb70
[  450.526122][ T7894]        ret_from_fork_asm+0x1a/0x30
[  450.531663][ T7894] 
[  450.531663][ T7894] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  450.539385][ T7894]        cpus_read_lock+0x3d/0x160
[  450.544525][ T7894]        static_key_slow_inc+0x12/0x30
[  450.549985][ T7894]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  450.556318][ T7894]        nbd_genl_foreach_sock+0x265/0x450
[  450.562141][ T7894]        nbd_genl_reconfigure+0xbbb/0x1040
[  450.567961][ T7894]        genl_family_rcv_msg_doit+0x233/0x340
[  450.574020][ T7894]        genl_rcv_msg+0x614/0x7a0
[  450.579039][ T7894]        netlink_rcv_skb+0x226/0x4a0
[  450.584312][ T7894]        genl_rcv+0x28/0x40
[  450.588803][ T7894]        netlink_unicast+0x8ef/0xa80
[  450.594083][ T7894]        netlink_sendmsg+0x7f0/0xb20
[  450.599450][ T7894]        sock_sendmsg_nosec+0x14e/0x190
[  450.605009][ T7894]        ____sys_sendmsg+0x54e/0x850
[  450.610320][ T7894]        ___sys_sendmsg+0x2a5/0x360
[  450.615544][ T7894]        __x64_sys_sendmsg+0x1b1/0x290
[  450.620994][ T7894]        do_syscall_64+0x166/0x520
[  450.626096][ T7894]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.632497][ T7894] 
[  450.632497][ T7894] -> #7 (&nsock->tx_lock){+.+.}-{4:4}:
[  450.640132][ T7894]        __mutex_lock+0x197/0x15a0
[  450.645238][ T7894]        nbd_queue_rq+0x373/0xff0
[  450.650259][ T7894]        blk_mq_dispatch_rq_list+0x499/0x1990
[  450.656330][ T7894]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  450.663167][ T7894]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  450.670010][ T7894]        blk_mq_run_work_fn+0x167/0x2f0
[  450.675554][ T7894]        process_scheduled_works+0xc3d/0x1630
[  450.681659][ T7894]        worker_thread+0xa47/0xfb0
[  450.686768][ T7894]        kthread+0x38b/0x480
[  450.691362][ T7894]        ret_from_fork+0x514/0xb70
[  450.696483][ T7894]        ret_from_fork_asm+0x1a/0x30
[  450.701759][ T7894] 
[  450.701759][ T7894] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  450.708997][ T7894]        __mutex_lock+0x197/0x15a0
[  450.714193][ T7894]        nbd_queue_rq+0xc1/0xff0
[  450.719129][ T7894]        blk_mq_dispatch_rq_list+0x499/0x1990
[  450.725195][ T7894]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  450.732407][ T7894]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  450.738907][ T7894]        blk_mq_run_work_fn+0x167/0x2f0
[  450.744451][ T7894]        process_scheduled_works+0xc3d/0x1630
[  450.750518][ T7894]        worker_thread+0xa47/0xfb0
[  450.755632][ T7894]        kthread+0x38b/0x480
[  450.760215][ T7894]        ret_from_fork+0x514/0xb70
[  450.765317][ T7894]        ret_from_fork_asm+0x1a/0x30
[  450.770604][ T7894] 
[  450.770604][ T7894] -> #5 (set->srcu){.+.+}-{0:0}:
[  450.777743][ T7894]        __synchronize_srcu+0xca/0x2f0
[  450.783200][ T7894]        elevator_switch+0x1e8/0x7b0
[  450.788480][ T7894]        elevator_change+0x2fa/0x480
[  450.793876][ T7894]        elevator_set_default+0x375/0x440
[  450.799592][ T7894]        blk_register_queue+0x404/0x4f0
[  450.805131][ T7894]        __add_disk+0x6b8/0xdb0
[  450.809979][ T7894]        add_disk_fwnode+0x100/0x3a0
[  450.815352][ T7894]        nbd_dev_add+0x733/0xb60
[  450.820291][ T7894]        nbd_init+0x168/0x1f0
[  450.824967][ T7894]        do_one_initcall+0x250/0x870
[  450.830243][ T7894]        do_initcall_level+0x10a/0x1a0
[  450.835694][ T7894]        do_initcalls+0x59/0xa0
[  450.840537][ T7894]        kernel_init_freeable+0x29d/0x3e0
[  450.846373][ T7894]        kernel_init+0x22/0x1d0
[  450.851222][ T7894]        ret_from_fork+0x514/0xb70
[  450.856349][ T7894]        ret_from_fork_asm+0x1a/0x30
[  450.861720][ T7894] 
[  450.861720][ T7894] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  450.869551][ T7894]        __mutex_lock+0x197/0x15a0
[  450.874685][ T7894]        elevator_change+0x1af/0x480
[  450.879966][ T7894]        elevator_set_none+0xb5/0x140
[  450.885341][ T7894]        blk_mq_update_nr_hw_queues+0x60b/0x1b70
[  450.891666][ T7894]        nbd_start_device+0x189/0xb30
[  450.897030][ T7894]        nbd_genl_connect+0x167d/0x1cd0
[  450.902567][ T7894]        genl_family_rcv_msg_doit+0x233/0x340
[  450.908651][ T7894]        genl_rcv_msg+0x614/0x7a0
[  450.913761][ T7894]        netlink_rcv_skb+0x226/0x4a0
[  450.919039][ T7894]        genl_rcv+0x28/0x40
[  450.923544][ T7894]        netlink_unicast+0x8ef/0xa80
[  450.928825][ T7894]        netlink_sendmsg+0x7f0/0xb20
[  450.934122][ T7894]        sock_sendmsg_nosec+0x14e/0x190
[  450.939672][ T7894]        ____sys_sendmsg+0x54e/0x850
[  450.945054][ T7894]        ___sys_sendmsg+0x2a5/0x360
[  450.950255][ T7894]        __x64_sys_sendmsg+0x1b1/0x290
[  450.955799][ T7894]        do_syscall_64+0x166/0x520
[  450.960908][ T7894]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.967319][ T7894] 
[  450.967319][ T7894] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  450.976007][ T7894]        blk_alloc_queue+0x544/0x690
[  450.981293][ T7894]        __blk_mq_alloc_disk+0x194/0x390
[  450.986918][ T7894]        nbd_dev_add+0x494/0xb60
[  450.991847][ T7894]        nbd_init+0x168/0x1f0
[  450.996871][ T7894]        do_one_initcall+0x250/0x870
[  451.002191][ T7894]        do_initcall_level+0x10a/0x1a0
[  451.007664][ T7894]        do_initcalls+0x59/0xa0
[  451.012517][ T7894]        kernel_init_freeable+0x29d/0x3e0
[  451.018252][ T7894]        kernel_init+0x22/0x1d0
[  451.023161][ T7894]        ret_from_fork+0x514/0xb70
[  451.028282][ T7894]        ret_from_fork_asm+0x1a/0x30
[  451.033576][ T7894] 
[  451.033576][ T7894] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  451.040779][ T7894]        fs_reclaim_acquire+0x71/0x100
[  451.046239][ T7894]        kmem_cache_alloc_lru_noprof+0x65/0x5f0
[  451.052479][ T7894]        alloc_inode+0xb8/0x1b0
[  451.057341][ T7894]        iget_locked+0x12c/0x690
[  451.062288][ T7894]        kernfs_get_inode+0x4f/0x770
[  451.067579][ T7894]        kernfs_get_tree+0x5dc/0x9a0
[  451.072877][ T7894]        vfs_get_tree+0x92/0x2a0
[  451.077817][ T7894]        do_new_mount+0x325/0xb00
[  451.082836][ T7894]        __se_sys_mount+0x31d/0x420
[  451.088056][ T7894]        do_syscall_64+0x166/0x520
[  451.093165][ T7894]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.099573][ T7894] 
[  451.099573][ T7894] -> #1 (&root->kernfs_rwsem){++++}-{4:4}:
[  451.107556][ T7894]        down_write+0x91/0x200
[  451.112319][ T7894]        kernfs_remove_by_name_ns+0x4e/0x140
[  451.118303][ T7894]        device_links_driver_bound+0x4ab/0x1440
[  451.124554][ T7894]        driver_bound+0xd8/0x2e0
[  451.129498][ T7894]        really_probe+0x774/0xae0
[  451.134528][ T7894]        __driver_probe_device+0x1e8/0x360
[  451.140343][ T7894]        driver_probe_device+0x4f/0x240
[  451.145886][ T7894]        __device_attach_driver+0x270/0x410
[  451.151775][ T7894]        bus_for_each_drv+0x258/0x2f0
[  451.157154][ T7894]        __device_attach+0x2bd/0x430
[  451.162446][ T7894]        device_initial_probe+0x9c/0x100
[  451.168079][ T7894]        __bus_probe_device+0x126/0x220
[  451.173629][ T7894]        device_add+0x7d7/0xb80
[  451.178482][ T7894]        faux_device_create_with_groups+0x1a5/0x2b0
[  451.185070][ T7894]        regulator_dummy_init+0x19/0x40
[  451.190624][ T7894]        regulator_init+0xca/0x110
[  451.195759][ T7894]        do_one_initcall+0x250/0x870
[  451.201049][ T7894]        do_initcall_level+0x10a/0x1a0
[  451.206515][ T7894]        do_initcalls+0x59/0xa0
[  451.211355][ T7894]        kernel_init_freeable+0x29d/0x3e0
[  451.217069][ T7894]        kernel_init+0x22/0x1d0
[  451.221912][ T7894]        ret_from_fork+0x514/0xb70
[  451.227029][ T7894]        ret_from_fork_asm+0x1a/0x30
[  451.232316][ T7894] 
[  451.232316][ T7894] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}:
[  451.240927][ T7894]        __lock_acquire+0x164c/0x2de0
[  451.246340][ T7894]        lock_acquire+0x115/0x350
[  451.251372][ T7894]        down_read+0x45/0x320
[  451.256051][ T7894]        kernfs_remove+0x35/0x80
[  451.260984][ T7894]        __kobject_del+0xe0/0x310
[  451.266000][ T7894]        kobject_del+0x45/0x60
[  451.270755][ T7894]        cleanup_glue_dir+0x1a3/0x220
[  451.276121][ T7894]        device_del+0x77d/0x8f0
[  451.280987][ T7894]        device_destroy+0xb2/0x1a0
[  451.286175][ T7894]        macvtap_device_event+0x226/0x400
[  451.291897][ T7894]        notifier_call_chain+0x1a5/0x3d0
[  451.297537][ T7894]        unregister_netdevice_many_notify+0x1432/0x1d80
[  451.304476][ T7894]        macvlan_device_event+0x93a/0x9e0
[  451.310217][ T7894]        notifier_call_chain+0x1a5/0x3d0
[  451.315846][ T7894]        unregister_netdevice_many_notify+0x1432/0x1d80
[  451.322777][ T7894]        ops_undo_list+0x391/0x8f0
[  451.327890][ T7894]        cleanup_net+0x572/0x810
[  451.332820][ T7894]        process_scheduled_works+0xc3d/0x1630
[  451.338882][ T7894]        worker_thread+0xa47/0xfb0
[  451.343989][ T7894]        kthread+0x38b/0x480
[  451.348569][ T7894]        ret_from_fork+0x514/0xb70
[  451.353679][ T7894]        ret_from_fork_asm+0x1a/0x30
[  451.358956][ T7894] 
[  451.358956][ T7894] other info that might help us debug this:
[  451.358956][ T7894] 
[  451.369187][ T7894] Chain exists of:
[  451.369187][ T7894]   &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex
[  451.369187][ T7894] 
[  451.382598][ T7894]  Possible unsafe locking scenario:
[  451.382598][ T7894] 
[  451.390050][ T7894]        CPU0                    CPU1
[  451.395410][ T7894]        ----                    ----
[  451.400770][ T7894]   lock(gdp_mutex);
[  451.404662][ T7894]                                lock(cpuhp_state-up);
[  451.411500][ T7894]                                lock(gdp_mutex);
[  451.417908][ T7894]   rlock(&root->kernfs_supers_rwsem);
[  451.423363][ T7894] 
[  451.423363][ T7894]  *** DEADLOCK ***
[  451.423363][ T7894] 
[  451.431500][ T7894] locks held by kworker/u8:35/7894: 5, last CPU#1:
[  451.437992][ T7894]  #0: ffff88801d28e148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  451.448866][ T7894]  #1: ffffc900054dfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  451.459421][ T7894]  #2: ffffffff91684ac8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810
[  451.468802][ T7894]  #3: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8f0
[  451.477877][ T7894]  #4: ffffffff90c20c20 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  451.487010][ T7894] 
[  451.487010][ T7894] stack backtrace:
[  451.492890][ T7894] CPU: 1 UID: 0 PID: 7894 Comm: kworker/u8:35 Not tainted syzkaller #0 PREEMPT(full) 
[  451.502428][ T7894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  451.512484][ T7894] Workqueue: netns cleanup_net
[  451.517248][ T7894] Call Trace:
[  451.520546][ T7894]  <TASK>
[  451.523478][ T7894]  dump_stack_lvl+0xe8/0x150
[  451.528066][ T7894]  print_circular_bug+0x2e2/0x300
[  451.533098][ T7894]  check_noncircular+0x12f/0x150
[  451.538048][ T7894]  __lock_acquire+0x164c/0x2de0
[  451.542912][ T7894]  lock_acquire+0x115/0x350
[  451.547424][ T7894]  ? kernfs_remove+0x35/0x80
[  451.552020][ T7894]  down_read+0x45/0x320
[  451.556178][ T7894]  ? kernfs_remove+0x35/0x80
[  451.560769][ T7894]  kernfs_remove+0x35/0x80
[  451.565192][ T7894]  __kobject_del+0xe0/0x310
[  451.569688][ T7894]  kobject_del+0x45/0x60
[  451.573927][ T7894]  cleanup_glue_dir+0x1a3/0x220
[  451.578770][ T7894]  device_del+0x77d/0x8f0
[  451.583095][ T7894]  ? __pfx_device_del+0x10/0x10
[  451.588003][ T7894]  ? kobject_put+0x50f/0x550
[  451.592585][ T7894]  device_destroy+0xb2/0x1a0
[  451.597176][ T7894]  ? __pfx_device_destroy+0x10/0x10
[  451.602376][ T7894]  ? kernfs_remove_by_name_ns+0x101/0x140
[  451.608112][ T7894]  macvtap_device_event+0x226/0x400
[  451.613316][ T7894]  ? __pfx_ipvlan_device_event+0x10/0x10
[  451.618959][ T7894]  ? __pfx_macvtap_device_event+0x10/0x10
[  451.624692][ T7894]  ? lockdep_rtnl_is_held+0x26/0x40
[  451.629902][ T7894]  notifier_call_chain+0x1a5/0x3d0
[  451.635014][ T7894]  unregister_netdevice_many_notify+0x1432/0x1d80
[  451.641483][ T7894]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  451.648252][ T7894]  ? netdev_upper_dev_unlink+0x99/0xe0
[  451.653725][ T7894]  ? __pfx_netdev_upper_dev_unlink+0x10/0x10
[  451.659705][ T7894]  ? macvlan_dellink+0x3e4/0x470
[  451.664653][ T7894]  macvlan_device_event+0x93a/0x9e0
[  451.669880][ T7894]  ? __pfx_ipvlan_device_event+0x10/0x10
[  451.675511][ T7894]  ? __pfx_macvlan_device_event+0x10/0x10
[  451.681223][ T7894]  ? lockdep_rtnl_is_held+0x26/0x40
[  451.686504][ T7894]  notifier_call_chain+0x1a5/0x3d0
[  451.691612][ T7894]  unregister_netdevice_many_notify+0x1432/0x1d80
[  451.698032][ T7894]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  451.704805][ T7894]  ? __pfx_ipmr_free_table+0x10/0x10
[  451.710094][ T7894]  ? rtnl_is_locked+0x15/0x20
[  451.714769][ T7894]  ? nexthop_net_exit_rtnl+0x253/0x290
[  451.720229][ T7894]  ops_undo_list+0x391/0x8f0
[  451.724904][ T7894]  ? __pfx_ops_undo_list+0x10/0x10
[  451.730011][ T7894]  ? idr_destroy+0x227/0x290
[  451.734599][ T7894]  cleanup_net+0x572/0x810
[  451.739019][ T7894]  ? __pfx_cleanup_net+0x10/0x10
[  451.743953][ T7894]  ? rcu_is_watching+0x16/0xb0
[  451.748724][ T7894]  ? process_scheduled_works+0x97a/0x1630
[  451.754452][ T7894]  process_scheduled_works+0xc3d/0x1630
[  451.760007][ T7894]  ? __pfx_process_scheduled_works+0x10/0x10
[  451.765986][ T7894]  ? assign_work+0x3cf/0x5d0
[  451.770612][ T7894]  worker_thread+0xa47/0xfb0
[  451.775207][ T7894]  ? __kthread_parkme+0x71/0x1f0
[  451.780146][ T7894]  kthread+0x38b/0x480
[  451.784208][ T7894]  ? __pfx_worker_thread+0x10/0x10
[  451.789313][ T7894]  ? __pfx_kthread+0x10/0x10
[  451.793896][ T7894]  ret_from_fork+0x514/0xb70
[  451.798481][ T7894]  ? __pfx_ret_from_fork+0x10/0x10
[  451.803598][ T7894]  ? __switch_to+0xc78/0x1410
[  451.808293][ T7894]  ? __pfx_kthread+0x10/0x10
[  451.812884][ T7894]  ret_from_fork_asm+0x1a/0x30
[  451.817647][ T7894]  </TASK>
[  451.893966][ T7894] bond26 (unregistering): Released all slaves
[  451.904200][ T7894] bond27 (unregistering): Released all slaves
[  451.928411][ T5640] Bluetooth: hci4: command tx timeout
[  452.023754][ T7894] tipc: Left network mode
[  452.191180][T19232] 8021q: adding VLAN 0 to HW filter on device batadv0
[  452.224586][T19232] veth0_vlan: entered promiscuous mode
[  452.252745][T19232] veth1_vlan: entered promiscuous mode
[  452.297317][T19232] veth0_macvtap: entered promiscuous mode
[  452.301719][T19232] veth1_macvtap: entered promiscuous mode
[  452.321754][T19232] batman_adv: batadv0: Interface activated: batadv_slave_0
[  452.334769][T19232] batman_adv: batadv0: Interface activated: batadv_slave_1
[  452.393607][ T7894] hsr_slave_1: left promiscuous mode
[  452.396016][ T7894] veth0_to_team: left promiscuous mode
[  452.396130][ T7894] veth0_macvtap: left promiscuous mode
[  452.728881][T19232] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht'
[  452.745308][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  452.745328][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  452.752430][T19232] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht'
[  452.771165][ T7874] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  452.771376][ T7889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  452.771391][ T7889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  452.772433][ T7874] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  452.772464][ T7874] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  452.772489][ T7874] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  452.912794][ T7894] IPVS: stop unused estimator thread 0...