last executing test programs:

14.318307255s ago: executing program 0 (id=1695):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0xc}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x3ff, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58, &(0x7f0000002600)}, 0x10)

14.086628141s ago: executing program 0 (id=1700):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xd, 0x1f}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x0)

13.611335617s ago: executing program 0 (id=1706):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)={@cgroup=r4, r3, 0x2, 0x2, 0x0, @link_id}, 0x20)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000f40)={&(0x7f0000000640)="5f51135f35fcad6eb7f1d9db6df443509dbaa2ba5e3a7092b83db4d9961cef6296dc44abf14474cbcee648dca1e48a93b23f8b2edc077a0e740a9b1c1f1c5fcc5f2efcee23fd760b7179aeb778656c52629d2e5d6b64912d9dd05f3633fae847e7988fc75cad2a9566f1c533adb390d1ba8616f02e8dfa0ab2a7", &(0x7f00000006c0)=""/235, &(0x7f00000007c0)="e09c92dd90812d816ad83897db3586decadf0c879ce72c27e6ada9e0ebd982e87422b7b154d83aa9d2764fbd59a8c6479d728fe1ca496efa71946ae2421fb4e4a5236f5826f418b3f7", &(0x7f0000000e40)="4720fa7b039a36f712eaf7d98a4b4014e75414a826dd86533c508845fc4a1fad09bc09e1d604ed380648fc69184cf15eefa9877faa64644a9b2ed6c7bf842fd5ae5c797e3f765d896edaecc1e6bac523f566ab53ff9c910b49bb87bef3fcc1757d9087b304cbfe90d8ef53df19b761ae89c01b4564ef872b84611eff5b0aaa6ef9819540e34608d3f0e533861e87f739bfb2652781b12a93516ba55e0d345480e381482eb873813cb55b07d0570d747ca1cb0bf33f8e7a0a2b7b2b59fce6ab4bc82e1ae2a88131a9e8d58a5c49678ae6535d21a519cd4f7ae48d29364a", 0xb, r6}, 0x38)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'pim6reg\x00', <r7=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000f80)={'gre0\x00', r7, 0x7, 0x720, 0x80000001, 0x80000001, {{0x24, 0x4, 0x1, 0x33, 0x90, 0x68, 0x0, 0xfd, 0x0, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0xbd, [@remote, @local]}, @ssrr={0x89, 0x13, 0x7c, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x13, 0x9, [@rand_addr=0x64010102, @loopback, @empty, @broadcast]}, @generic={0x0, 0x7, "963946e108"}, @timestamp_addr={0x44, 0x3c, 0xc3, 0x1, 0x0, [{@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback}, {@remote, 0x100}, {@rand_addr=0x64010101, 0x185e}, {@private=0xa010101, 0xb87}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @rr={0x7, 0x7, 0xd8, [@remote]}]}}}}})
r8 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'N'}]}, @NFTA_CMP_OP={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}], {0x14}}, 0x98}}, 0x0)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081034e81f782db44b904021d080201000000020000a1180002000000000000000e1208000f0100810401a800160020000d400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r10 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$SIOCAX25DELUID(r10, 0x891c, 0x0)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r11, &(0x7f0000000900)={&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000290000003b00000000000000000000000002020100000000000000000000000000000000000000001800000000000000290000003600"/72], 0x58}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000380)={'gretap0\x00', <r13=>0x0})
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x400, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MTU={0x8, 0x4, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040040}, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x1, <r14=>0x0}, 0x8)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@map, 0xd, 0x1, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000500)=[0x0], &(0x7f0000000540), &(0x7f0000000580), <r15=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@ifindex=r13, r3, 0x21, 0x0, 0x0, @link_id=r14, r15}, 0x20)

13.534395889s ago: executing program 0 (id=1709):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x734f13fc1965a4f5, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000340)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000044)

13.099612879s ago: executing program 0 (id=1713):
socket$pppoe(0x18, 0x1, 0x0) (async)
socket$pppoe(0x18, 0x1, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) (async)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000180)=0x5)
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r0, &(0x7f0000000700)=[{&(0x7f0000000540)="dc42cbfd764e0d77089eb900f67d6fe6d5c0e8692aa6e2b98ca5aab424a7ed349544201f56f4185a108474aa0f6698a26633f457e8966a57d91a74d8db9160191cb54cf82b8fc002c703c0769da7493274f967046c423635402f424e3ede516701cf309bc5c9c1e680350f464166619ba527e28e2baa120bf5cfe3e3b83375d4fddc989de9800d630f96cb9e3b9f6cccec8b68d267d0cfcd", 0x98}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000000980)="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", 0x276}, {&(0x7f0000000680)="d6cb133518cc09400b26d5f415f798c0416b52307b395c3be398f7ac79687d3dd34bbbaaef53f986b44880d5e3a034293fda4d4267ebd8424f7f425204b3aaf83e3822861889dfe0e135a7e7f06a9e681e80be60674f3e0a17a9b98cf382ffd964ed7ebd7818b67309ba79283695cee39c", 0x71}], 0x4, 0x5f4, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$qrtr(0x2a, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4}, 0x48) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000300)={r5, &(0x7f0000000240), 0x0}, 0x20)
epoll_create1(0x0) (async)
r6 = epoll_create1(0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl(r7, 0x8916, &(0x7f0000000380))
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000600)=ANY=[@ANYRESOCT=r6, @ANYRES64=r6, @ANYRES16=r3, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRES16=<r9=>r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x6}, 0x8, 0x10, &(0x7f0000000000)={0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060018000010"], 0x4c}}, 0x0) (async)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060018000010"], 0x4c}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r8, 0xfffffffffffffef8, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xfffffffffffffda8)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async)
r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80))
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYRES32=r9], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r13}, 0xffffffffffffff12)
sendmsg$kcm(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) (async)
sendmsg$kcm(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0)
socket$kcm(0x10, 0x3, 0x10) (async)
r14 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)

1.318465218s ago: executing program 1 (id=1867):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
r2 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@delsa={0x16c, 0x11, 0x300, 0x70bd27, 0x25dfdbff, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x2, 0xf}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d6, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3500, 0x1, 0x3, 0x3, 0x3, 0x9, 0x3}]}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e23, 0x4e21, @in=@empty}}, @sa={0xe4, 0x6, {{@in6=@mcast2, @in=@multicast1, 0x4e21, 0x0, 0x4e24, 0x5, 0xa, 0x80, 0x80, 0x87, r1, r3}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x47}, @in6=@private0, {0x0, 0x5, 0x4, 0x5, 0x101, 0x7, 0xfffffffffffff001, 0x8b}, {0x4, 0x5, 0xfffffffffffffff8, 0x4}, {0x3, 0x2, 0x6}, 0x70bd29, 0x3504, 0x2, 0x1, 0x6, 0x1b}}]}, 0x16c}}, 0x0)

1.198440531s ago: executing program 1 (id=1870):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="280100001800010028bd7000ffdbdf2580"], 0x128}}, 0x600000000000000)

1.156204297s ago: executing program 4 (id=1872):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0xfff3}, {0x10, 0xfff4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}]}}]}, 0x40}}, 0x4040080) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0xfff3}, {0x10, 0xfff4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}]}}]}, 0x40}}, 0x4040080)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2)
sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x1, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x44050}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=r3, @ANYBLOB="0000000000000000000005000000e00005800c00028008000100000000000c00028000000100000000004c00028008000100000000000800010000000000080003000000000008000200000000000000020000000000080004000000000000000400000000000800040000000000080001"], 0x23c}}, 0x40004)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) (async)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fddbdf25040000000d000a0000000030323135340000000008"], 0xc0}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(aegis256-aesni)\x00'}, 0x58)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r1) (async)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r1)
sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYRES16=r10, @ANYBLOB="010000000000fffbdf252100000000002000000000000c000500001b00000000a0f86238aff3ebd59f6aaaaaaaaa"], 0x34}}, 0x854)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20000014}, 0x0)
socket$kcm(0x2, 0xa, 0x2)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x44, r12, 0x5, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}}, 0x0) (async)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x44, r12, 0x5, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001340)={0x6, 0x8, &(0x7f0000001200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6c000}]}, &(0x7f0000001240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000012c0)={0x3, 0xd, 0x3, 0x11}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001300)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x29}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001340)={0x6, 0x8, &(0x7f0000001200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6c000}]}, &(0x7f0000001240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000012c0)={0x3, 0xd, 0x3, 0x11}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001300)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x29}, 0x90)
r13 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r13, &(0x7f0000002800)={0x2, 0x0, @empty}, 0x10) (async)
connect$inet(r13, &(0x7f0000002800)={0x2, 0x0, @empty}, 0x10)
sendto$inet(r13, 0x0, 0x0, 0xbb8, 0x0, 0x0) (async)
sendto$inet(r13, 0x0, 0x0, 0xbb8, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x0, 0x0, 0x0, 0x4d0}, 0x48)

1.033825034s ago: executing program 3 (id=1873):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
syz_emit_ethernet(0x7e, 0x0, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d", 0x43}], 0x1}, 0x40)

1.032811198s ago: executing program 2 (id=1874):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x168, 0x11, 0x148, 0xd0, 0x0, 0x168, 0x2a8, 0x2a8, 0x168, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @remote, 0x6c, 0x0, 'hsr0\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260)

1.032662064s ago: executing program 1 (id=1875):
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x4)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r1) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async)
sendto$inet6(r3, &(0x7f0000000500)="a4", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
close(0x3)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f00000000c0)=0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x14}, 0x14}}, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000003c0)={r4, &(0x7f0000000580), 0x0}, 0x20)
socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x80000006}, {0x5, 0x5, 0x1, 0x1}, {0x0, 0x8, 0x9, 0x5}]}, 0x10)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)

952.010298ms ago: executing program 4 (id=1876):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000f001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000005c010000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000218010980140102802400018008000140000000070800014000000001080001400000000a080001400000000724"], 0x1a4}}, 0x0)

926.239952ms ago: executing program 3 (id=1877):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}, 0x7000000}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0)

870.298098ms ago: executing program 1 (id=1878):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x58, &(0x7f0000000880)}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x7, 0x80008, 0xc, 0x82}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000001000000000000000000008500000027000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe80, 0x0, &(0x7f0000000380)="e02742e8680d85ff9782762f88a8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x0, 0x0)
getpid()
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r5, &(0x7f00000004c0), 0x0}, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$cgroup_pid(r4, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, &(0x7f0000000a40)=""/4096}, 0x20)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="00000600"})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)}, 0x10)
ioctl$SIOCSIFHWADDR(r7, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @multicast})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r9, &(0x7f00000005c0)={&(0x7f0000000080), 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x24, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x81}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x22004089}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYRES32=r1, @ANYRES32=r10, @ANYBLOB="0a0006"], 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f00000036c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES8=r9, @ANYBLOB="0000000000000000b703000020000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

869.866307ms ago: executing program 2 (id=1879):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a00010000000000000000000a00000500000000080001"], 0x20}}, 0x0)
write$binfmt_aout(r0, &(0x7f0000000280)={{0x108, 0xf, 0x1, 0x100, 0x197, 0x57, 0x49, 0xd}, "1049e3ef8857dabaf3e8b7701b2b3de73f84baf9db0993bf469425a62cba690b3793c9ce1c0423147428dc8d73e83195fd180670c6e29b0f6a5eb9f7a1fdfddcdcf130b3b1dda54e4cf2cf7e3866482e30921c95bc01244513afe5a13fdaa7c5b497e611b8f40cf158ea03be86d5b8143956c03136118a79e7785ca8c17f96bfa8687a390eaa4e27c045c5d253de71ab8f93251c80c7291b546aa4e5060a14aa1f1411b3eba1850d49420ea3474634cb72e04c8b595940a06387870ffd0cae6ec039c18e313cb870b6d3393b73cb6dd511c8d507011b0e27da08e0a36b1d828306c88bb3ac12ab481d918b00ed90a6fdd7b9153f874a65", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa17) (async)
pselect6(0x40, &(0x7f0000000000)={0x4945fa, 0x0, 0x4, 0x100, 0x620a83e5, 0xbb, 0x0, 0x95b}, &(0x7f0000000080)={0x210c, 0x7, 0x7, 0x7fff, 0x81, 0x364d, 0x7, 0xf9}, &(0x7f00000000c0)={0x7ff, 0x7ea5, 0x40, 0x2, 0x3, 0x1, 0xd639, 0xffffffff}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x9]}, 0x2})

833.736294ms ago: executing program 4 (id=1880):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000300)=@ethtool_link_settings={0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x10000000]}})

799.05125ms ago: executing program 3 (id=1881):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'veth0_vlan\x00', @random='\x00\x00\x00 \x00'})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYRES16=r4, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000ff03000000000000000000000000000100000000200002ee0900000000000000fc000000000000000000000000000000000000000d0001007564703a73", @ANYBLOB="01df75f2"], 0x6c}}, 0x0)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @remote, 0x9}, 0x1c)
listen(r2, 0x0)
syz_emit_ethernet(0x10ee, &(0x7f0000003400)=ANY=[@ANYBLOB="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"], 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000014000000020a010000000000000000000000000030000000160a0c01000b000000000000010000000900020073797a30000000000900010073797a30000000000400038014000000100001000000000000006894fbe04c6ba07baf0000000000"], 0x8c}}, 0x0)
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000540)={0x6, 0xffffffffffffff81, 0x0, 0x7, 0x3, [{0x5, 0x8, 0x3, '\x00', 0x800}, {0x3, 0x9, 0x2, '\x00', 0x80}, {0x2, 0x80000000, 0x2ab, '\x00', 0x3604}]})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000002400)={{}, 0x0, 0x0, @inherit={0x70, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000005000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000004"]}, @devid})
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000bff7f000000000000000024fc60", 0x14}], 0x59}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000200))
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000000c0))
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000027c00000400000014000180060006008847000004001c"], 0x2c}}, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
listen(r1, 0x2)

746.51134ms ago: executing program 2 (id=1882):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000000000000008001e0001000000d75f0f8f801b94cd1b866db41edcd7fd34383fbb1f8e33"], 0x24}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00a88800000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0)

624.461606ms ago: executing program 3 (id=1883):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
sendto$inet6(r0, &(0x7f0000000440)="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", 0xfff4, 0x0, 0x0, 0x0) (async)
sendto$inet6(r0, &(0x7f0000000440)="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", 0xfff4, 0x0, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000400), 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_buf(r2, 0x29, 0xd3, 0x0, 0x0) (async)
getsockopt$inet6_buf(r2, 0x29, 0xd3, 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x40086602, 0x20004002)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket(0x10, 0x3, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000400804001000128008000100707070000c00028008000100", @ANYRES32=r8, @ANYBLOB], 0x38}}, 0x0)
socket$l2tp(0x2, 0x2, 0x73) (async)
r9 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r9, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r9, &(0x7f0000000200), 0x10) (async)
connect$inet(r9, &(0x7f0000000200), 0x10)
sendmmsg$inet(r9, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
setsockopt$inet_mreq(r9, 0x0, 0x24, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="451b3e7b9d50000000", @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="3400330080000000ffffffffffff08021100000050505050505000000000000000000000640000000100060200003c0400000000"], 0x50}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

493.970083ms ago: executing program 2 (id=1884):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000006800e9780000000000000054ac1c07000a00040004000c"], 0x28}}, 0x0)

442.543358ms ago: executing program 3 (id=1885):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000009000000000000021800000000fd000000ed0008000100ac141400080008"], 0x2c}}, 0x0)

442.111779ms ago: executing program 4 (id=1886):
socket$packet(0x11, 0x3, 0x300) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0xffffffff, 0x4) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async)
write(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc), 0x4)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x1)
getsockopt$ax25_int(r2, 0x101, 0x4, 0x0, &(0x7f0000000180)) (async)
r3 = accept$ax25(r2, 0x0, 0x0)
connect$ax25(r3, &(0x7f00000000c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0x12}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x4}]}}]}, 0x44}}, 0x0) (async)
socket$packet(0x11, 0x0, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
ioctl$SIOCAX25GETINFO(r2, 0x89e0, &(0x7f0000000040))
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_opts(r7, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) (async)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r8, 0x0, 0x85, 0xce, &(0x7f0000000000)="fae68670fef1c45ff0634fe72a6253b4357c978887379648e34b8e43761f35000437ab851cde4821ce97abc68f6a1c3593e2a7a267f78fff0e9e1743899a7dc5c1d2ecae353bd4bcdb61c053b1d7b1223331d664596d93a54d408700062455bf71027a99387a4c190aa0098e4554990bc6fdfd4647aad6ed8951ff86c092399a8d11b76c5e", &(0x7f00000008c0)=""/206, 0x0, 0x0, 0x0, 0xf0, 0xfffffffffffffffe, &(0x7f00000002c0)="d5231f25b5f85be12036902ce1a29122e3a23c991a4fa064d13d000000000000000000e6cfd88b40cf159de34cdf7d895caa20b127b17bf514b9407eb4174efb961fa2218112a53fe36623ab223f6994ca3ec301b3dc5501f13f847a959221aa443181ff24e7aa6c6702b03fbc6e1d2bb2f086ed3939e4bcae1d169acc416e0a7a9b45a7ff89deb9e81ce9f897f99bb836f806f0b1da9dd70b4986f9d185ea254dc6d9bb26c0698d31e7a887058d7984913f04a3c2e0ee4aef43b7382df3374c290d168545baa80647fceea49b136a93a71f5a25adebc4008c29b0200e6de956422d9edfc42b17517c29b678ee031626", 0x0, 0x8000}, 0x50) (async)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendto$inet6(r9, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="74c2ebebcbfe848d999b8f180000000000000010a0a0ae4bcf1db2ba37ce3b328fbb2faf8847d3"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x90) (async)
recvmsg(r7, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/20, 0x13}, 0x105aa)

426.86964ms ago: executing program 1 (id=1887):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
syz_emit_ethernet(0x7e, 0x0, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d", 0x43}], 0x1}, 0x40)

393.239427ms ago: executing program 3 (id=1888):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000540)={0x16, 0x16, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0xd0, 0xfff, [0x3, 0x4]}}, @calipso={0x7, 0x38, {0x2, 0xc, 0x80, 0x0, [0x1, 0x8003, 0x0, 0xa79, 0x5, 0x0]}}, @jumbo={0xc2, 0x4, 0x400}, @calipso={0x7, 0x18, {0x1, 0x4, 0xff, 0x0, [0x0, 0x100000001]}}, @pad1, @calipso={0x7, 0x30, {0x3, 0xa, 0x5, 0x2c44, [0x3, 0x7, 0x7ffe, 0xffffffffffffffff, 0x7]}}, @ra={0x5, 0x2, 0xe140}, @ra={0x5, 0x2, 0x4}, @enc_lim]}, 0xc0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
getsockopt(r1, 0x2, 0x9, &(0x7f0000000900)=""/4096, &(0x7f00000000c0)=0x1000)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="8c78183c202348776bfe83067915010000009df30040fbbe66f1f315b7f25d90248368640ccd695a0c54dfd4dddd8b66dd86b8bd13d9c831f3c75e7fa8a1f5c7", @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)
syz_emit_ethernet(0x115, &(0x7f0000000240)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "02000b", 0xdf, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558, 0xa, 0x0, [], "97de0000d85aa20000fd"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "455b73431249ffe00c553891c270795511003e79d86b7c2b9ac829fea1d73bb2d3c94e4ca4bf3ce420e61800d95c619b0a1f473937c98550d3abd547e2e7d277a3ec7276bde44dc9ec6b332f8fd6c5f460cd80a99401b6632e2c3d393536cb514d3c9977629d6c8ed28163cda0a3ca391c1b700a00000000000000ea6d0385814e5ec27e576d7c496c1a38000000000000"}}}}}}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x4c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}], @NL80211_ATTR_FRAME={0x24, 0x33, @assoc_resp={{{}, {}, @device_a, @device_b}, 0x2, 0x0, @default, @val, @void}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x4c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)

338.532118ms ago: executing program 4 (id=1889):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0004000000000000000000040007800c0002000000001d"], 0x3c}}, 0x0)

338.385316ms ago: executing program 2 (id=1890):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, {0x100000000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0)

314.374744ms ago: executing program 1 (id=1891):
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000745f0020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x2c)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18)
connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="3663c0e6071d9c036bc88df33422f724859fb94c9901c27834ec5d99edded5", 0x1f}, {&(0x7f0000000080)}], 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x200000100000011, 0x803, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000000)={0x11, 0x17, r7}, 0x14)
write$binfmt_aout(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="90030ec29ad0d72204000e210806000108000604000180b572da3e9647000000ae513569487147"], 0x120)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x24000000, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0x58, &(0x7f0000000e80)}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet6_mreq(r8, 0x29, 0x15, 0x0, 0x0)

223.702297ms ago: executing program 2 (id=1892):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90224fc600d00020005000100ff3582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 64)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRESOCT, @ANYRES16=r0, @ANYRES8=r1, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES16=r1, @ANYRES64=r1], &(0x7f0000000140)='GPL\x00'}, 0x90) (async, rerun: 64)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, <r3=>0x0}, 0x8)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r3, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r4, r2, 0x4, r1}, 0x10) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1801000021"], 0x0}, 0x90) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) (async, rerun: 32)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32)
write$binfmt_script(r7, &(0x7f0000000100), 0xfecc) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) (async, rerun: 64)
bpf$BPF_PROG_DETACH(0x10, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x4, @prog_fd}, 0x20) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', <r8=>0x0})
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20008, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, [@exit, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x204, 0x94, &(0x7f0000000440)=""/148, 0x41000, 0x4, '\x00', r8, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xf, 0xfffffffa, 0x80000001}, 0x10, 0x11083, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=[{0x1, 0x3, 0xd, 0xc}], 0x10, 0x30000000}, 0x90)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000400)={0xffffffffffffffff, r2, 0x4, r9}, 0x10)

154.328956ms ago: executing program 4 (id=1893):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000006c0)=@gettaction={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeff7fef00102e80e423c7", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@bridge_newneigh={0x38, 0x1c, 0xd105d1610db53515, 0x0, 0x0, {0x2, 0x0, 0x0, r3}, [@NDA_DST_IPV6={0x14, 0x1, @local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r9 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r9, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000040))
ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000240)={'veth1_to_bond\x00', 0x400})
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
r11 = socket$nl_crypto(0x10, 0x3, 0x15)
sendfile(r6, r11, &(0x7f00000001c0)=0x5, 0x8)
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x400c000)
sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000000000000000000085000000ae0000009500000000522d4f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

0s ago: executing program 0 (id=1713):
socket$pppoe(0x18, 0x1, 0x0) (async)
socket$pppoe(0x18, 0x1, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) (async)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000180)=0x5)
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r0, &(0x7f0000000700)=[{&(0x7f0000000540)="dc42cbfd764e0d77089eb900f67d6fe6d5c0e8692aa6e2b98ca5aab424a7ed349544201f56f4185a108474aa0f6698a26633f457e8966a57d91a74d8db9160191cb54cf82b8fc002c703c0769da7493274f967046c423635402f424e3ede516701cf309bc5c9c1e680350f464166619ba527e28e2baa120bf5cfe3e3b83375d4fddc989de9800d630f96cb9e3b9f6cccec8b68d267d0cfcd", 0x98}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000000980)="25e1ef5bcf65bf66439db56461cf8528dd5e61caddc2b6ed67d3f9af6166db34380f9fa7913a558636316ee4aa2b4327034acb1cb31c80ea52065f773fb1df023042e2f6a9b5e78995e0eb0493ff2e4124c20c132e28a111a8de81bb24eb96ef63789416a5536b6e2e0500f172f1a07427b4cc39d6ce7f181e087e58ff6428bf7e6735650c039651c9a5b981e326bb4dd7ce06f897422d6a1049eda5bfbfdaa9bda2155b45cb33decd93e3abfea8fb8aecd3bb9d7a89f2220fdb5d1bed9bb6bcee3b2fe9e6767fc64d361542ebbfbe1d1673d9e458c7e828c9d1b2a979de711b4f2767ec9a677d7c41c4720926c46801df6bda5562393a2c23b9eae06d53cae21949cc8a47286c982b7c213f8625bd048fbe28587f0a7f937bef8eaeebed619c58340a6762a72a5e9edbd20bc6113343cbc777acc90893648ab1f2b2076eacb71472ff8a348ef88e0723200ed8bf8dfc4c795e1ff4a81bb06164f73630c29649769726e4bb0fce61a79ccfb142fd599577d2ed80aba166b222d2b0a0166e8e51b02375b2b8768b44bd42d4848359c155ef36ead13a3e7f4f8cf405aafe2325c0d3ee8626e574e44557c734790de06fe5024700c1784f8adfcfb72a76720dd1509b34bc4d77b663b78b53fb962d832ce4281dbc3e32492088fad82ac74b2cc0978a05000000887d18ac8a7ded22ccd661276d08990d709084b5fcebc4a76999b245961a877c6f06b1939555dd60c2054e5f8a756a915a5a905067273765e211794c4316fae30c10053402565c90932a267d59031b52136b14a808a582090fdefc9078d2489f8b5fa508a99f2fea2267a37ac491c9db26fed0997755fd614808234e73ed2ed0f9e239dad764ecd524c4d98e0000000000", 0x276}, {&(0x7f0000000680)="d6cb133518cc09400b26d5f415f798c0416b52307b395c3be398f7ac79687d3dd34bbbaaef53f986b44880d5e3a034293fda4d4267ebd8424f7f425204b3aaf83e3822861889dfe0e135a7e7f06a9e681e80be60674f3e0a17a9b98cf382ffd964ed7ebd7818b67309ba79283695cee39c", 0x71}], 0x4, 0x5f4, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$qrtr(0x2a, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4}, 0x48) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000300)={r5, &(0x7f0000000240), 0x0}, 0x20)
epoll_create1(0x0) (async)
r6 = epoll_create1(0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl(r7, 0x8916, &(0x7f0000000380))
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000600)=ANY=[@ANYRESOCT=r6, @ANYRES64=r6, @ANYRES16=r3, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRES16=<r9=>r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x6}, 0x8, 0x10, &(0x7f0000000000)={0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060018000010"], 0x4c}}, 0x0) (async)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060018000010"], 0x4c}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r8, 0xfffffffffffffef8, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xfffffffffffffda8)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async)
r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c80))
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYRES32=r9], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r13}, 0xffffffffffffff12)
sendmsg$kcm(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) (async)
sendmsg$kcm(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0)
socket$kcm(0x10, 0x3, 0x10) (async)
r14 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

 netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.940487][ T2892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.988444][ T2892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.026712][ T5827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'.
[   82.120635][ T2892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.194576][ T2892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.255804][   T45] cfg80211: failed to load regulatory.db
[   82.314880][ T5836] netlink: 'syz.1.182': attribute type 21 has an invalid length.
[   82.344300][ T5836] netlink: 'syz.1.182': attribute type 20 has an invalid length.
[   82.380579][ T5836] IPv6: NLM_F_CREATE should be specified when creating new route
[   83.282345][   T54] Bluetooth: hci0: command tx timeout
[   83.366231][ T5889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'.
[   83.949587][ T5906] netlink: 232 bytes leftover after parsing attributes in process `syz.1.199'.
[   84.728507][ T5941] netlink: 248 bytes leftover after parsing attributes in process `syz.2.208'.
[   84.831733][ T5940] netlink: 36 bytes leftover after parsing attributes in process `syz.2.208'.
[   85.362609][   T54] Bluetooth: hci0: command tx timeout
[   85.706842][ T5982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'.
[   85.761590][ T5982] sctp: [Deprecated]: syz.0.222 (pid 5982) Use of struct sctp_assoc_value in delayed_ack socket option.
[   85.761590][ T5982] Use struct sctp_sack_info instead
[   85.906243][ T5995] netlink: 'syz.3.226': attribute type 10 has an invalid length.
[   85.971563][ T5995] batman_adv: batadv0: Adding interface: team0
[   86.001672][ T5995] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.051513][ T5995] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   86.105183][ T6000] netlink: 'syz.3.226': attribute type 10 has an invalid length.
[   86.132279][ T6000] netlink: 2 bytes leftover after parsing attributes in process `syz.3.226'.
[   86.312850][ T6007] vlan2: entered allmulticast mode
[   86.335276][ T6007] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   86.348032][ T6007] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   86.745707][ T6032] syz.1.237 uses obsolete (PF_INET,SOCK_PACKET)
[   86.927633][ T6033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.236'.
[   87.442575][   T54] Bluetooth: hci0: command tx timeout
[   87.459700][ T6053] netlink: 32 bytes leftover after parsing attributes in process `syz.1.242'.
[   87.513576][ T6053] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   87.671780][ T6057] team0: entered promiscuous mode
[   87.691826][ T6057] team_slave_0: entered promiscuous mode
[   87.707870][ T6057] team_slave_1: entered promiscuous mode
[   87.718169][ T6057] team0: left promiscuous mode
[   87.723200][ T6057] team_slave_0: left promiscuous mode
[   87.732250][ T6057] team_slave_1: left promiscuous mode
[   87.751571][ T6059] netlink: 'syz.1.245': attribute type 10 has an invalid length.
[   87.899773][ T6063] vlan2: entered allmulticast mode
[   87.942043][ T6068] IPv6: addrconf: prefix option has invalid lifetime
[   87.961810][ T6063] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode
[   88.019159][ T6063] mac80211_hwsim hwsim15 wlan1: left allmulticast mode
[   88.108662][ T6065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.247'.
[   88.140203][ T6065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.247'.
[   88.227386][ T6077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.322075][   T54] Bluetooth: hci4: command tx timeout
[   88.584444][ T6089] netlink: 'syz.0.256': attribute type 1 has an invalid length.
[   88.612633][ T6089] netlink: 'syz.0.256': attribute type 4 has an invalid length.
[   88.624839][ T6089] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.256'.
[   88.752949][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'.
[   89.523252][   T54] Bluetooth: hci0: command tx timeout
[   89.666196][ T6095] netlink: 188 bytes leftover after parsing attributes in process `syz.0.258'.
[   89.980666][ T6137] netlink: 16 bytes leftover after parsing attributes in process `syz.2.273'.
[   90.187634][ T6131] netlink: 16 bytes leftover after parsing attributes in process `syz.3.270'.
[   90.329320][ T6152] netlink: 'syz.2.277': attribute type 1 has an invalid length.
[   90.797339][ T6168] netlink: 'syz.0.284': attribute type 12 has an invalid length.
[   90.902876][ T6172] vlan2: entered allmulticast mode
[   90.940194][ T6172] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   90.969981][ T6172] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   91.044737][ T6171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   91.052491][ T6171] IPv6: NLM_F_CREATE should be set when creating new route
[   91.376823][ T6197] netlink: 'syz.4.294': attribute type 11 has an invalid length.
[   91.400087][ T6197] __nla_validate_parse: 3 callbacks suppressed
[   91.400106][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.294'.
[   91.602123][   T54] Bluetooth: hci0: command tx timeout
[   92.305991][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'.
[   92.369569][ T6250] netlink: 44 bytes leftover after parsing attributes in process `syz.0.310'.
[   92.381851][ T6250] netlink: 16 bytes leftover after parsing attributes in process `syz.0.310'.
[   92.396285][ T6250] bridge0: port 2(bridge_slave_1) entered listening state
[   92.507994][ T6254] netlink: 24 bytes leftover after parsing attributes in process `syz.4.311'.
[   92.586013][ T6260] netlink: 188 bytes leftover after parsing attributes in process `syz.1.314'.
[   92.797387][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.318'.
[   93.124315][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[   93.682285][   T54] Bluetooth: hci0: command tx timeout
[   93.699760][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.332'.
[   93.775541][ T6316] vlan2: entered promiscuous mode
[   93.815497][ T6320] FAULT_INJECTION: forcing a failure.
[   93.815497][ T6320] name failslab, interval 1, probability 0, space 0, times 1
[   93.855804][ T6320] CPU: 1 PID: 6320 Comm: syz.1.335 Not tainted 6.10.0-rc5-syzkaller-01193-gac26327635d6 #0
[   93.865844][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[   93.875928][ T6320] Call Trace:
[   93.879220][ T6320]  <TASK>
[   93.882173][ T6320]  dump_stack_lvl+0x241/0x360
[   93.886890][ T6320]  ? __pfx_dump_stack_lvl+0x10/0x10
[   93.892118][ T6320]  ? __pfx__printk+0x10/0x10
[   93.896744][ T6320]  ? ref_tracker_alloc+0x332/0x490
[   93.901896][ T6320]  should_fail_ex+0x3b0/0x4e0
[   93.906609][ T6320]  ? skb_clone+0x20c/0x390
[   93.911060][ T6320]  should_failslab+0x9/0x20
[   93.915593][ T6320]  kmem_cache_alloc_noprof+0x6c/0x2a0
[   93.921002][ T6320]  skb_clone+0x20c/0x390
[   93.925282][ T6320]  __netlink_deliver_tap+0x3cc/0x7c0
[   93.930605][ T6320]  ? netlink_deliver_tap+0x2e/0x1b0
[   93.935824][ T6320]  netlink_deliver_tap+0x19d/0x1b0
[   93.940939][ T6320]  netlink_unicast+0x7be/0x990
[   93.945708][ T6320]  ? __pfx_netlink_unicast+0x10/0x10
[   93.950992][ T6320]  ? __virt_addr_valid+0x183/0x520
[   93.956113][ T6320]  ? __check_object_size+0x49c/0x900
[   93.961404][ T6320]  ? bpf_lsm_netlink_send+0x9/0x10
[   93.966524][ T6320]  netlink_sendmsg+0x8e4/0xcb0
[   93.971297][ T6320]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.976584][ T6320]  ? __import_iovec+0x536/0x820
[   93.981430][ T6320]  ? aa_sock_msg_perm+0x91/0x160
[   93.986376][ T6320]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[   93.992008][ T6320]  ? security_socket_sendmsg+0x87/0xb0
[   93.997485][ T6320]  ? __pfx_netlink_sendmsg+0x10/0x10
[   94.002766][ T6320]  __sock_sendmsg+0x221/0x270
[   94.007444][ T6320]  ____sys_sendmsg+0x525/0x7d0
[   94.012416][ T6320]  ? __pfx_____sys_sendmsg+0x10/0x10
[   94.017707][ T6320]  ? __might_fault+0xaa/0x120
[   94.022385][ T6320]  __sys_sendmmsg+0x3b2/0x740
[   94.027071][ T6320]  ? __pfx___sys_sendmmsg+0x10/0x10
[   94.032299][ T6320]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[   94.038192][ T6320]  ? ksys_write+0x23e/0x2c0
[   94.042708][ T6320]  ? __pfx_lock_release+0x10/0x10
[   94.047740][ T6320]  ? vfs_write+0x7c4/0xc90
[   94.052171][ T6320]  ? __mutex_unlock_slowpath+0x21d/0x750
[   94.057826][ T6320]  ? __pfx_vfs_write+0x10/0x10
[   94.062609][ T6320]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   94.068611][ T6320]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   94.074942][ T6320]  ? do_syscall_64+0x100/0x230
[   94.079711][ T6320]  __x64_sys_sendmmsg+0xa0/0xb0
[   94.084564][ T6320]  do_syscall_64+0xf3/0x230
[   94.089096][ T6320]  ? clear_bhb_loop+0x35/0x90
[   94.093772][ T6320]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.099662][ T6320] RIP: 0033:0x7f4f21b75b99
[   94.104075][ T6320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   94.123702][ T6320] RSP: 002b:00007f4f229a4048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   94.132118][ T6320] RAX: ffffffffffffffda RBX: 00007f4f21d03f60 RCX: 00007f4f21b75b99
[   94.140175][ T6320] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000007
[   94.148237][ T6320] RBP: 00007f4f229a40a0 R08: 0000000000000000 R09: 0000000000000000
[   94.156227][ T6320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   94.164207][ T6320] R13: 000000000000000b R14: 00007f4f21d03f60 R15: 00007ffd1e37f878
[   94.172192][ T6320]  </TASK>
[   94.922393][ T4495] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   94.931818][ T4495] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   94.940617][ T4495] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   94.952462][ T4495] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   94.961307][ T4495] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   94.970182][ T4495] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   95.267821][ T6359] can: request_module (can-proto-3) failed.
[   95.450995][ T6349] chnl_net:caif_netlink_parms(): no params data found
[   95.813228][   T79] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.039489][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.354'.
[   96.152467][   T79] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.213817][ T6349] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.240862][ T6349] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.262481][ T6349] bridge_slave_0: entered allmulticast mode
[   96.269353][ T6349] bridge_slave_0: entered promiscuous mode
[   96.294352][ T6384] tipc: Started in network mode
[   96.317443][ T6384] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   96.355814][ T6384] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   96.378794][ T6384] tipc: Enabled bearer <udp:syz1>, priority 10
[   96.411842][   T79] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.433935][ T6349] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.446822][ T6349] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.462266][ T6349] bridge_slave_1: entered allmulticast mode
[   96.473624][ T6349] bridge_slave_1: entered promiscuous mode
[   96.499968][ T6408] netlink: 'syz.4.361': attribute type 1 has an invalid length.
[   96.521573][ T6408] netlink: 'syz.4.361': attribute type 1 has an invalid length.
[   96.523197][   T79] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.547932][ T6408] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.361'.
[   96.647491][ T6349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.698391][ T6349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.905122][ T6349] team0: Port device team_slave_0 added
[   96.994598][ T6349] team0: Port device team_slave_1 added
[   97.052186][ T4495] Bluetooth: hci5: command tx timeout
[   97.233055][ T6349] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.240721][ T6349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.283995][ T6442] netlink: 'syz.1.373': attribute type 13 has an invalid length.
[   97.333711][ T6349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.403521][ T6349] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.424059][ T6349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.503714][   T25] tipc: Node number set to 1
[   97.553896][ T6349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.641774][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.375'.
[   97.722508][ T6462] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[   97.741875][   T79] bridge_slave_1: left allmulticast mode
[   97.757260][   T79] bridge_slave_1: left promiscuous mode
[   97.772384][   T79] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.807198][   T79] bridge_slave_0: left allmulticast mode
[   97.832768][   T79] bridge_slave_0: left promiscuous mode
[   97.861279][   T79] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.640659][   T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   98.668548][   T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   98.680171][   T79] bond0 (unregistering): Released all slaves
[   98.991339][ T6349] hsr_slave_0: entered promiscuous mode
[   99.063191][ T6349] hsr_slave_1: entered promiscuous mode
[   99.082914][ T6349] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   99.104202][ T6349] Cannot create hsr debugfs directory
[   99.122164][ T4495] Bluetooth: hci5: command tx timeout
[   99.523715][ T6529] vlan3: entered promiscuous mode
[   99.535189][ T6529] syz_tun: entered promiscuous mode
[   99.547485][ T6529] syz_tun: left promiscuous mode
[   99.728746][ T6538] netlink: 40 bytes leftover after parsing attributes in process `syz.1.397'.
[   99.784066][   T79] hsr_slave_0: left promiscuous mode
[   99.809287][   T79] hsr_slave_1: left promiscuous mode
[   99.856778][   T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.881129][   T79] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.908338][   T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.933047][   T79] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.004254][   T79] veth0_macvtap: left promiscuous mode
[  100.016938][   T79] veth1_vlan: left promiscuous mode
[  100.025786][   T79] veth0_vlan: left promiscuous mode
[  100.369871][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.402'.
[  100.818299][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  100.827767][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  100.845569][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  100.856254][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  100.868723][   T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  100.877107][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  101.146748][   T79] team0 (unregistering): Port device team_slave_1 removed
[  101.179756][   T79] team0 (unregistering): Port device team_slave_0 removed
[  101.211363][   T54] Bluetooth: hci5: command tx timeout
[  101.590407][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.399'.
[  101.966047][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'.
[  102.158161][ T6599] tipc: Started in network mode
[  102.164452][ T6599] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  102.213000][ T6599] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  102.250242][ T6599] tipc: Enabled bearer <udp:syz1>, priority 10
[  102.696541][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.417'.
[  102.860143][ T6573] chnl_net:caif_netlink_parms(): no params data found
[  102.963266][   T54] Bluetooth: hci0: command tx timeout
[  103.035499][ T6639] bridge0: port 3(vlan2) entered blocking state
[  103.042326][ T6639] bridge0: port 3(vlan2) entered disabled state
[  103.048864][ T6639] vlan2: entered allmulticast mode
[  103.057884][ T6639] vlan2: left allmulticast mode
[  103.098626][   T79] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.131146][ T6349] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  103.219932][ T6651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.422'.
[  103.232080][ T5092] tipc: Node number set to 1
[  103.279316][ T6349] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  103.286072][   T54] Bluetooth: hci5: command tx timeout
[  103.405935][ T6656] netlink: 112 bytes leftover after parsing attributes in process `syz.0.423'.
[  103.408786][   T79] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.448202][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.424'.
[  103.495857][ T6349] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  103.551265][ T6349] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  103.624981][   T79] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.657320][ T6573] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.676758][ T6573] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.691812][ T6573] bridge_slave_0: entered allmulticast mode
[  103.706459][ T6573] bridge_slave_0: entered promiscuous mode
[  103.744170][ T6669] netlink: 'syz.4.427': attribute type 10 has an invalid length.
[  103.760574][ T6669] netem: change failed
[  103.816435][   T79] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.830915][ T6573] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.838518][ T6573] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.846383][ T6573] bridge_slave_1: entered allmulticast mode
[  103.854284][ T6573] bridge_slave_1: entered promiscuous mode
[  103.870804][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.429'.
[  103.972833][ T6573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.996648][ T6573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.044307][ T5092] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.201650][ T6573] team0: Port device team_slave_0 added
[  104.253574][ T6573] team0: Port device team_slave_1 added
[  104.337664][ T6688] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1
[  104.435716][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.464095][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.522997][ T6573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.574532][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.612058][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.673675][ T6573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.715987][   T79] bridge_slave_1: left allmulticast mode
[  104.744504][   T79] bridge_slave_1: left promiscuous mode
[  104.750331][   T79] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.773302][   T79] bridge_slave_0: left allmulticast mode
[  104.786953][   T79] bridge_slave_0: left promiscuous mode
[  104.797963][   T79] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.848403][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'.
[  105.043907][   T54] Bluetooth: hci0: command tx timeout
[  105.185888][   T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  105.201383][   T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.216973][   T79] bond0 (unregistering): Released all slaves
[  105.244185][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.439'.
[  105.320867][   T79] tipc: Disabling bearer <udp:syz1>
[  105.338997][   T79] tipc: Left network mode
[  105.388120][ T6573] hsr_slave_0: entered promiscuous mode
[  105.389391][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'.
[  105.403689][ T6573] hsr_slave_1: entered promiscuous mode
[  105.624407][ T6349] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.703120][   T79] hsr_slave_0: left promiscuous mode
[  105.729834][   T79] hsr_slave_1: left promiscuous mode
[  105.761136][   T79] batman_adv: batadv0: Removing interface: team0
[  105.773439][   T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.781011][   T79] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.801527][   T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.822624][   T79] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.847994][   T79] veth1_macvtap: left promiscuous mode
[  105.853844][   T79] veth0_macvtap: left promiscuous mode
[  105.872285][   T79] veth1_vlan: left promiscuous mode
[  105.878310][   T79] veth0_vlan: left promiscuous mode
[  106.319081][   T79] team0 (unregistering): Port device team_slave_1 removed
[  106.360485][   T79] team0 (unregistering): Port device team_slave_0 removed
[  106.794464][ T6722] bridge0: entered promiscuous mode
[  106.800162][ T6722] macsec1: entered promiscuous mode
[  106.806049][ T6722] macsec1: entered allmulticast mode
[  106.811478][ T6722] bridge0: entered allmulticast mode
[  106.818800][ T6722] bridge0: left allmulticast mode
[  106.824489][ T6722] bridge0: left promiscuous mode
[  106.889661][ T6349] 8021q: adding VLAN 0 to HW filter on device team0
[  106.935284][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.942539][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.077245][ T6730] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.449'.
[  107.122825][   T54] Bluetooth: hci0: command tx timeout
[  107.155131][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.162351][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.222483][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'.
[  107.260812][ T6730] netlink: 56 bytes leftover after parsing attributes in process `syz.4.449'.
[  107.378130][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.452'.
[  107.388913][ T6742] netlink: 'syz.4.453': attribute type 3 has an invalid length.
[  107.397741][ T6742] netlink: 768 bytes leftover after parsing attributes in process `syz.4.453'.
[  107.457587][ T6743] team0: entered promiscuous mode
[  107.478929][ T6743] team_slave_0: entered promiscuous mode
[  107.503446][ T6743] team_slave_1: entered promiscuous mode
[  107.585307][ T6743] team_slave_0: entered allmulticast mode
[  107.642533][ T6743] team0: Port device team_slave_0 removed
[  107.674085][ T6740] team0: left promiscuous mode
[  107.679707][ T6740] team_slave_1: left promiscuous mode
[  107.925357][ T6573] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  108.021359][ T6573] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  108.049186][ T6573] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  108.124699][ T6573] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  108.136538][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.462'.
[  108.238570][ T6775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.464'.
[  108.256737][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.465'.
[  108.275925][ T6349] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.483069][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.501821][ T6349] veth0_vlan: entered promiscuous mode
[  108.526995][ T6349] veth1_vlan: entered promiscuous mode
[  108.540968][ T6787] FAULT_INJECTION: forcing a failure.
[  108.540968][ T6787] name failslab, interval 1, probability 0, space 0, times 0
[  108.555643][ T6787] CPU: 1 PID: 6787 Comm: syz.1.470 Not tainted 6.10.0-rc5-syzkaller-01193-gac26327635d6 #0
[  108.565668][ T6787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  108.575748][ T6787] Call Trace:
[  108.579053][ T6787]  <TASK>
[  108.582003][ T6787]  dump_stack_lvl+0x241/0x360
[  108.586714][ T6787]  ? __pfx_dump_stack_lvl+0x10/0x10
[  108.591936][ T6787]  ? __pfx__printk+0x10/0x10
[  108.596563][ T6787]  ? ref_tracker_alloc+0x332/0x490
[  108.601808][ T6787]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  108.607390][ T6787]  should_fail_ex+0x3b0/0x4e0
[  108.612115][ T6787]  ? skb_clone+0x20c/0x390
[  108.616559][ T6787]  should_failslab+0x9/0x20
[  108.621089][ T6787]  kmem_cache_alloc_noprof+0x6c/0x2a0
[  108.626490][ T6787]  skb_clone+0x20c/0x390
[  108.630739][ T6787]  __netlink_deliver_tap+0x3cc/0x7c0
[  108.636030][ T6787]  ? netlink_deliver_tap+0x2e/0x1b0
[  108.641273][ T6787]  netlink_deliver_tap+0x19d/0x1b0
[  108.646419][ T6787]  netlink_sendskb+0x68/0x140
[  108.651101][ T6787]  netlink_unicast+0x39d/0x990
[  108.655856][ T6787]  ? __asan_memcpy+0x40/0x70
[  108.661238][ T6787]  ? __pfx_netlink_unicast+0x10/0x10
[  108.666536][ T6787]  netlink_rcv_skb+0x262/0x430
[  108.671298][ T6787]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  108.676764][ T6787]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  108.682157][ T6787]  xfrm_netlink_rcv+0x79/0x90
[  108.686946][ T6787]  netlink_unicast+0x7f0/0x990
[  108.691802][ T6787]  ? __pfx_netlink_unicast+0x10/0x10
[  108.697173][ T6787]  ? __virt_addr_valid+0x183/0x520
[  108.702307][ T6787]  ? __check_object_size+0x49c/0x900
[  108.707692][ T6787]  ? bpf_lsm_netlink_send+0x9/0x10
[  108.712806][ T6787]  netlink_sendmsg+0x8e4/0xcb0
[  108.717590][ T6787]  ? __pfx_netlink_sendmsg+0x10/0x10
[  108.722871][ T6787]  ? __import_iovec+0x536/0x820
[  108.727729][ T6787]  ? aa_sock_msg_perm+0x91/0x160
[  108.732677][ T6787]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  108.737959][ T6787]  ? security_socket_sendmsg+0x87/0xb0
[  108.743709][ T6787]  ? __pfx_netlink_sendmsg+0x10/0x10
[  108.748993][ T6787]  __sock_sendmsg+0x221/0x270
[  108.753758][ T6787]  ____sys_sendmsg+0x525/0x7d0
[  108.758536][ T6787]  ? __pfx_____sys_sendmsg+0x10/0x10
[  108.764106][ T6787]  __sys_sendmsg+0x2b0/0x3a0
[  108.768699][ T6787]  ? __pfx___sys_sendmsg+0x10/0x10
[  108.774084][ T6787]  ? vfs_write+0x7c4/0xc90
[  108.778534][ T6787]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  108.785031][ T6787]  ? do_syscall_64+0x100/0x230
[  108.789819][ T6787]  ? do_syscall_64+0xb6/0x230
[  108.794515][ T6787]  do_syscall_64+0xf3/0x230
[  108.799020][ T6787]  ? clear_bhb_loop+0x35/0x90
[  108.803709][ T6787]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.809605][ T6787] RIP: 0033:0x7f4f21b75b99
[  108.814016][ T6787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  108.834403][ T6787] RSP: 002b:00007f4f229a4048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  108.842992][ T6787] RAX: ffffffffffffffda RBX: 00007f4f21d03f60 RCX: 00007f4f21b75b99
[  108.851049][ T6787] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003
[  108.859034][ T6787] RBP: 00007f4f229a40a0 R08: 0000000000000000 R09: 0000000000000000
[  108.867352][ T6787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  108.875344][ T6787] R13: 000000000000004d R14: 00007f4f21d03f60 R15: 00007ffd1e37f878
[  108.883327][ T6787]  </TASK>
[  108.909949][ T6573] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.955471][ T6573] 8021q: adding VLAN 0 to HW filter on device team0
[  109.032294][ T5185] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.039526][ T5185] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.084864][ T6349] veth0_macvtap: entered promiscuous mode
[  109.158108][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.165362][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.199733][ T6349] veth1_macvtap: entered promiscuous mode
[  109.212449][   T54] Bluetooth: hci0: command tx timeout
[  109.381784][ T6809] IPVS: length: 96 != 8
[  109.415737][ T6809] netlink: 32 bytes leftover after parsing attributes in process `syz.0.477'.
[  109.427923][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.467939][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.469765][ T6813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.478'.
[  109.482733][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.497995][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.508496][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.521744][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.537653][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.550982][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.567780][ T6349] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.608132][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.637001][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.655417][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.675279][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.686456][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.710031][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.722543][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.738091][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.750930][ T6349] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.823629][ T6349] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.874308][ T6349] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.897504][ T6349] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.910787][ T6349] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.009947][ T6832] netlink: 'syz.0.481': attribute type 1 has an invalid length.
[  110.094147][ T6837] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  110.163947][ T6837] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  110.207891][ T6837] bond1: (slave vcan1): making interface the new active one
[  110.250268][ T6837] bond1: (slave vcan1): Enslaving as an active interface with an up link
[  110.347247][ T2886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.367737][ T2886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.383613][ T6573] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.459656][   T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.482717][   T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.600510][ T6573] veth0_vlan: entered promiscuous mode
[  110.819789][ T6573] veth1_vlan: entered promiscuous mode
[  111.086100][ T6573] veth0_macvtap: entered promiscuous mode
[  111.117611][ T6573] veth1_macvtap: entered promiscuous mode
[  111.185232][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.197060][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.218048][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.238147][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.248471][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.269992][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.280087][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.311259][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.327052][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.343635][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.359377][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.534453][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.546932][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.565577][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.576242][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.587878][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.598517][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.609077][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.619723][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.639433][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.673026][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.708672][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.827957][ T6573] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.868797][ T6573] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.909558][ T6573] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.935303][ T6573] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.079427][ T6908] netlink: 'syz.2.504': attribute type 1 has an invalid length.
[  112.111233][ T6908] __nla_validate_parse: 6 callbacks suppressed
[  112.111252][ T6908] netlink: 224 bytes leftover after parsing attributes in process `syz.2.504'.
[  112.190746][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.506'.
[  112.306855][ T2892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.330089][ T2892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.445910][   T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.458018][   T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.470595][ T6923] netlink: 132 bytes leftover after parsing attributes in process `syz.1.508'.
[  112.501862][ T6922] netlink: 132 bytes leftover after parsing attributes in process `syz.1.508'.
[  112.709433][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'.
[  113.433657][ T6969] netlink: 156 bytes leftover after parsing attributes in process `syz.0.525'.
[  113.472134][ T6969] netlink: 200 bytes leftover after parsing attributes in process `syz.0.525'.
[  113.605325][ T6976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.528'.
[  113.961412][ T6987] syzkaller0: entered promiscuous mode
[  113.971776][ T6987] syzkaller0: entered allmulticast mode
[  114.047091][ T6994] Cannot find del_set index 0 as target
[  114.533282][ T7018] netlink: 40 bytes leftover after parsing attributes in process `syz.3.546'.
[  114.680215][ T7025] tun0: tun_chr_ioctl cmd 1074025677
[  114.690948][ T7025] tun0: linktype set to 6
[  114.701147][ T7025] tun0: tun_chr_ioctl cmd 2147767520
[  114.884458][ T7034] netlink: 'syz.4.552': attribute type 3 has an invalid length.
[  114.908242][ T7037] netlink: 'syz.1.554': attribute type 10 has an invalid length.
[  114.996441][ T7037] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  115.024391][ T7037] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  115.228796][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.558'.
[  115.314319][ T7053] geneve2: entered promiscuous mode
[  115.338520][ T7053] geneve2: entered allmulticast mode
[  115.645722][ T7070] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551614)
[  115.674466][ T7070] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  116.322747][ T7106] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  116.340994][ T7106] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  116.358167][ T7106] dccp_xmit_packet: Payload too large (65475) for featneg.
[  116.380741][ T7106] dccp_close: ABORT with 65475 bytes unread
[  116.765751][ T7125] netlink: 'syz.3.591': attribute type 1 has an invalid length.
[  116.842883][ T7125] 0·: renamed from hsr_slave_1 (while UP)
[  116.865594][ T7125] 0·: entered allmulticast mode
[  116.870859][ T7125] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  117.361309][ T7144] netlink: 'syz.2.596': attribute type 3 has an invalid length.
[  117.362790][ T7145] netlink: 'syz.2.596': attribute type 3 has an invalid length.
[  117.536667][ T7149] netlink: 'syz.0.598': attribute type 3 has an invalid length.
[  117.553691][ T7149] __nla_validate_parse: 2 callbacks suppressed
[  117.553710][ T7149] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.598'.
[  118.073742][ T7177] netlink: 'syz.1.612': attribute type 2 has an invalid length.
[  118.100148][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.612'.
[  118.129974][ T7179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.611'.
[  118.151602][ T7176] netlink: 'syz.4.610': attribute type 5 has an invalid length.
[  118.176377][ T7179] netlink: 'syz.0.611': attribute type 14 has an invalid length.
[  118.697626][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'.
[  119.036403][ T7225] sctp: [Deprecated]: syz.4.629 (pid 7225) Use of struct sctp_assoc_value in delayed_ack socket option.
[  119.036403][ T7225] Use struct sctp_sack_info instead
[  119.102736][ T7236] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  119.154289][ T7236] Unsupported ieee802154 address type: 0
[  119.231768][ T7244] netlink: 'syz.3.638': attribute type 1 has an invalid length.
[  119.325693][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.639'.
[  119.574648][ T7257] vlan2: entered promiscuous mode
[  119.595480][ T7257] syz_tun: entered promiscuous mode
[  119.627074][ T7257] syz_tun: left promiscuous mode
[  119.936332][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'.
[  120.767999][ T7306] netlink: 48 bytes leftover after parsing attributes in process `syz.2.660'.
[  120.793563][ T7306] netlink: 24 bytes leftover after parsing attributes in process `syz.2.660'.
[  121.218876][ T7316] sctp: [Deprecated]: syz.3.661 (pid 7316) Use of struct sctp_assoc_value in delayed_ack socket option.
[  121.218876][ T7316] Use struct sctp_sack_info instead
[  122.148155][ T7307] dummy0: entered promiscuous mode
[  122.156017][ T7307] batman_adv: batadv0: Adding interface: macsec1
[  122.180426][ T7307] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.207120][ T7307] batman_adv: batadv0: Interface activated: macsec1
[  122.250794][ T7318] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  122.307325][ T7319] Unsupported ieee802154 address type: 0
[  122.347161][ T7318] openvswitch: netlink: Duplicate key (type 0).
[  122.412673][ T7327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.667'.
[  122.681693][ T7342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.672'.
[  122.913940][ T7356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.678'.
[  122.936906][ T7348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: macsec1
[  122.968787][ T7348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.987589][ T7348] dummy0: entered promiscuous mode
[  122.995272][ T7348] batman_adv: batadv0: Adding interface: macsec1
[  123.003393][ T7348] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.047543][ T7348] batman_adv: batadv0: Interface activated: macsec1
[  123.064981][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'.
[  123.407874][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.687'.
[  123.532038][ T7384] netlink: 'syz.4.690': attribute type 2 has an invalid length.
[  123.676986][ T7386] can: request_module (can-proto-0) failed.
[  123.696351][ T7392] netlink: 24 bytes leftover after parsing attributes in process `syz.3.693'.
[  123.940618][ T7405] Bluetooth: MGMT ver 1.22
[  124.187010][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.702'.
[  124.951897][ T7451] netlink: 184 bytes leftover after parsing attributes in process `syz.3.712'.
[  124.971267][ T7451] netlink: 'syz.3.712': attribute type 1 has an invalid length.
[  124.987114][ T7451] netlink: 'syz.3.712': attribute type 21 has an invalid length.
[  125.000781][ T7451] netlink: 128 bytes leftover after parsing attributes in process `syz.3.712'.
[  125.017765][ T7451] netlink: 'syz.3.712': attribute type 4 has an invalid length.
[  125.029115][ T7451] netlink: 'syz.3.712': attribute type 5 has an invalid length.
[  125.037903][ T7455] netlink: 16 bytes leftover after parsing attributes in process `syz.2.718'.
[  125.073123][ T7451] netlink: 3 bytes leftover after parsing attributes in process `syz.3.712'.
[  125.995668][ T7491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: macsec1
[  126.045611][ T7491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.072161][ T7491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: macsec1
[  126.090697][ T7491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.133326][ T7491] dummy0: entered promiscuous mode
[  126.154153][ T7491] batman_adv: batadv0: Adding interface: macsec1
[  126.177825][ T7491] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.211154][ T7491] batman_adv: batadv0: Interface activated: macsec1
[  126.256486][ T7507] netlink: 'syz.0.734': attribute type 1 has an invalid length.
[  126.603546][ T7534] netlink: 'syz.3.739': attribute type 1 has an invalid length.
[  126.666155][ T7534] netlink: 'syz.3.739': attribute type 21 has an invalid length.
[  126.703031][ T7534] netlink: 'syz.3.739': attribute type 4 has an invalid length.
[  126.732294][ T7534] netlink: 'syz.3.739': attribute type 5 has an invalid length.
[  126.877471][ T7545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  127.261077][ T7567] xt_ecn: cannot match TCP bits for non-tcp packets
[  127.302662][ T7567] ieee802154 phy0 wpan0: encryption failed: -22
[  128.172871][ T7619] __nla_validate_parse: 9 callbacks suppressed
[  128.172890][ T7619] netlink: 32 bytes leftover after parsing attributes in process `syz.4.771'.
[  128.174750][ T7618] netlink: 184 bytes leftover after parsing attributes in process `syz.1.768'.
[  128.232316][ T7619] netlink: 224 bytes leftover after parsing attributes in process `syz.4.771'.
[  128.253136][ T7618] netlink: 128 bytes leftover after parsing attributes in process `syz.1.768'.
[  128.271132][ T7618] netlink: 3 bytes leftover after parsing attributes in process `syz.1.768'.
[  128.464987][ T7631] xt_bpf: check failed: parse error
[  128.647685][ T7642] netlink: 268 bytes leftover after parsing attributes in process `syz.0.780'.
[  128.707044][ T7647] validate_nla: 6 callbacks suppressed
[  128.707063][ T7647] netlink: 'syz.2.779': attribute type 1 has an invalid length.
[  128.726358][ T7642] xt_TCPMSS: Only works on TCP SYN packets
[  129.150230][ T7666] netlink: 'syz.0.786': attribute type 10 has an invalid length.
[  129.276675][ T7670] netlink: 'syz.1.789': attribute type 4 has an invalid length.
[  129.315172][ T7670] netlink: 152 bytes leftover after parsing attributes in process `syz.1.789'.
[  129.425259][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.792'.
[  129.647381][ T7687] netlink: 'syz.1.797': attribute type 10 has an invalid length.
[  129.694320][ T7690] netlink: 47 bytes leftover after parsing attributes in process `syz.0.798'.
[  129.723992][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'.
[  129.863025][ T7702] FAULT_INJECTION: forcing a failure.
[  129.863025][ T7702] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  129.929597][ T7702] CPU: 1 PID: 7702 Comm: syz.2.803 Not tainted 6.10.0-rc5-syzkaller-01193-gac26327635d6 #0
[  129.939645][ T7702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  129.949723][ T7702] Call Trace:
[  129.953027][ T7702]  <TASK>
[  129.955978][ T7702]  dump_stack_lvl+0x241/0x360
[  129.960687][ T7702]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.965916][ T7702]  ? __pfx__printk+0x10/0x10
[  129.970542][ T7702]  ? __pfx_lock_release+0x10/0x10
[  129.975603][ T7702]  should_fail_ex+0x3b0/0x4e0
[  129.980403][ T7702]  _copy_from_user+0x2f/0xe0
[  129.985020][ T7702]  packet_setsockopt+0x87b/0x1970
[  129.990081][ T7702]  ? __pfx___might_resched+0x10/0x10
[  129.995407][ T7702]  ? __pfx_packet_setsockopt+0x10/0x10
[  130.000949][ T7702]  ? aa_sk_perm+0x967/0xab0
[  130.005495][ T7702]  ? __pfx_aa_sk_perm+0x10/0x10
[  130.010377][ T7702]  ? __pfx_lock_acquire+0x10/0x10
[  130.015424][ T7702]  ? aa_sock_opt_perm+0x79/0x120
[  130.020423][ T7702]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  130.026005][ T7702]  ? security_socket_setsockopt+0x87/0xb0
[  130.031769][ T7702]  ? __pfx_packet_setsockopt+0x10/0x10
[  130.037347][ T7702]  do_sock_setsockopt+0x3af/0x720
[  130.042406][ T7702]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  130.047981][ T7702]  ? __fget_files+0x29/0x470
[  130.052608][ T7702]  ? __fget_files+0x3f6/0x470
[  130.057331][ T7702]  __sys_setsockopt+0x1ae/0x250
[  130.062221][ T7702]  __x64_sys_setsockopt+0xb5/0xd0
[  130.067281][ T7702]  do_syscall_64+0xf3/0x230
[  130.071822][ T7702]  ? clear_bhb_loop+0x35/0x90
[  130.076531][ T7702]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.082482][ T7702] RIP: 0033:0x7f1c94975b99
[  130.086911][ T7702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.106976][ T7702] RSP: 002b:00007f1c95824048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  130.115436][ T7702] RAX: ffffffffffffffda RBX: 00007f1c94b03f60 RCX: 00007f1c94975b99
[  130.126318][ T7702] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000003
[  130.134752][ T7702] RBP: 00007f1c958240a0 R08: 0000000000000010 R09: 0000000000000000
[  130.143075][ T7702] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001
[  130.151164][ T7702] R13: 000000000000004d R14: 00007f1c94b03f60 R15: 00007fff320850f8
[  130.159181][ T7702]  </TASK>
[  130.843809][ T7741] netlink: 'syz.3.818': attribute type 7 has an invalid length.
[  131.054712][ T7753] netlink: 'syz.3.821': attribute type 1 has an invalid length.
[  131.681720][ T7773] netlink: 'syz.2.830': attribute type 1 has an invalid length.
[  131.690926][ T7773] netlink: 'syz.2.830': attribute type 1 has an invalid length.
[  131.710630][ T7773] netlink: 'syz.2.830': attribute type 2 has an invalid length.
[  131.820737][ T7782] netlink: 'syz.1.833': attribute type 8 has an invalid length.
[  132.129638][ T7800] macvlan2: entered allmulticast mode
[  132.153016][ T7800] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[  132.182265][ T7800] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[  132.210400][ T7800] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  133.243448][ T7853] __nla_validate_parse: 10 callbacks suppressed
[  133.243467][ T7853] netlink: 40 bytes leftover after parsing attributes in process `syz.1.859'.
[  133.294205][ T7862] netlink: 24 bytes leftover after parsing attributes in process `syz.4.861'.
[  133.430107][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.861'.
[  133.456344][ T1243] ieee802154 phy0 wpan0: encryption failed: -22
[  133.463674][ T1243] ieee802154 phy1 wpan1: encryption failed: -22
[  133.466472][ T7862] netlink: 2 bytes leftover after parsing attributes in process `syz.4.861'.
[  133.545200][ T7862] netlink: 224 bytes leftover after parsing attributes in process `syz.4.861'.
[  133.557495][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.861'.
[  133.845218][ T7893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.871'.
[  134.019559][ T7898] netlink: 40 bytes leftover after parsing attributes in process `syz.1.875'.
[  134.089861][ T7902] raw_sendmsg: syz.0.874 forgot to set AF_INET. Fix it!
[  134.399373][ T7922] netlink: 'syz.0.883': attribute type 11 has an invalid length.
[  134.463753][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'.
[  134.496468][ T7929] validate_nla: 2 callbacks suppressed
[  134.496487][ T7929] netlink: 'syz.3.884': attribute type 1 has an invalid length.
[  134.536147][ T7929] netlink: 9352 bytes leftover after parsing attributes in process `syz.3.884'.
[  134.556927][ T7929] netlink: 'syz.3.884': attribute type 1 has an invalid length.
[  134.602470][ T7929] netlink: 'syz.3.884': attribute type 2 has an invalid length.
[  134.709070][ T7937] netlink: 'syz.1.887': attribute type 3 has an invalid length.
[  134.987232][ T7957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  135.231800][ T7965] syzkaller0: entered promiscuous mode
[  135.237599][ T7965] syzkaller0: entered allmulticast mode
[  135.758248][ T7994] FAULT_INJECTION: forcing a failure.
[  135.758248][ T7994] name failslab, interval 1, probability 0, space 0, times 0
[  135.772140][ T7994] CPU: 1 PID: 7994 Comm: syz.2.903 Not tainted 6.10.0-rc5-syzkaller-01193-gac26327635d6 #0
[  135.782167][ T7994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  135.792258][ T7994] Call Trace:
[  135.795547][ T7994]  <TASK>
[  135.798492][ T7994]  dump_stack_lvl+0x241/0x360
[  135.803182][ T7994]  ? __pfx_dump_stack_lvl+0x10/0x10
[  135.808647][ T7994]  ? __pfx__printk+0x10/0x10
[  135.813252][ T7994]  ? __pfx___might_resched+0x10/0x10
[  135.818663][ T7994]  should_fail_ex+0x3b0/0x4e0
[  135.823565][ T7994]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  135.829321][ T7994]  should_failslab+0x9/0x20
[  135.833933][ T7994]  __kmalloc_noprof+0xd8/0x400
[  135.838700][ T7994]  ? kfree+0x4e/0x360
[  135.842720][ T7994]  tomoyo_realpath_from_path+0xcf/0x5e0
[  135.848314][ T7994]  tomoyo_path_number_perm+0x23a/0x880
[  135.853818][ T7994]  ? tomoyo_path_number_perm+0x208/0x880
[  135.859516][ T7994]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  135.865547][ T7994]  ? __fget_files+0x29/0x470
[  135.870145][ T7994]  ? __fget_files+0x3f6/0x470
[  135.874816][ T7994]  ? __fget_files+0x29/0x470
[  135.879412][ T7994]  security_file_ioctl+0x75/0xb0
[  135.884356][ T7994]  __se_sys_ioctl+0x47/0x170
[  135.888972][ T7994]  do_syscall_64+0xf3/0x230
[  135.893504][ T7994]  ? clear_bhb_loop+0x35/0x90
[  135.898199][ T7994]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.904094][ T7994] RIP: 0033:0x7f1c94975b99
[  135.908507][ T7994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.928113][ T7994] RSP: 002b:00007f1c95803048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  135.936800][ T7994] RAX: ffffffffffffffda RBX: 00007f1c94b04038 RCX: 00007f1c94975b99
[  135.944769][ T7994] RDX: 0000000020000240 RSI: 00000000400448dd RDI: 0000000000000004
[  135.952824][ T7994] RBP: 00007f1c958030a0 R08: 0000000000000000 R09: 0000000000000000
[  135.960796][ T7994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.969805][ T7994] R13: 000000000000006e R14: 00007f1c94b04038 R15: 00007fff320850f8
[  135.977818][ T7994]  </TASK>
[  135.988807][ T7994] ERROR: Out of memory at tomoyo_realpath_from_path.
[  136.573258][ T8009] block nbd0: not configured, cannot reconfigure
[  137.704961][ T8035] netlink: 'syz.1.918': attribute type 29 has an invalid length.
[  137.754036][ T8035] netlink: 'syz.1.918': attribute type 29 has an invalid length.
[  138.082308][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[  139.243327][ T8085] __nla_validate_parse: 12 callbacks suppressed
[  139.243347][ T8085] netlink: 40 bytes leftover after parsing attributes in process `syz.2.935'.
[  139.301396][ T8093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.938'.
[  139.325626][ T8095] tipc: Started in network mode
[  139.337814][ T8095] tipc: Node identity aaaaaaaaaa34, cluster identity 4711
[  139.353441][ T8095] tipc: Enabled bearer <eth:macvlan0>, priority 0
[  139.687855][ T8110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.944'.
[  139.715899][ T8115] tun0: tun_chr_ioctl cmd 2147767520
[  139.785383][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.944'.
[  139.814619][ T8110] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551614)
[  139.832367][ T8110] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  139.866024][ T8120] nftables ruleset with unbound chain
[  140.175366][ T8141] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  140.472374][   T25] tipc: Node number set to 10398378
[  140.540925][ T8155] netlink: 'syz.4.957': attribute type 10 has an invalid length.
[  140.759537][ T4495] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  140.785056][ T4495] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  140.796047][ T4495] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  140.825652][ T4495] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  140.848472][ T4495] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  140.863083][ T4495] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  141.389297][ T8189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.967'.
[  141.470546][ T8194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.585223][   T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.863440][   T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.006170][   T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.057361][ T8212] netlink: 'syz.2.974': attribute type 10 has an invalid length.
[  142.071418][ T8212] netlink: 40 bytes leftover after parsing attributes in process `syz.2.974'.
[  142.102572][ T8212] bond0: entered promiscuous mode
[  142.112910][ T8212] bond_slave_0: entered promiscuous mode
[  142.121783][ T8212] bond_slave_1: entered promiscuous mode
[  142.130508][ T8212] bond0: entered allmulticast mode
[  142.135768][ T8212] bond_slave_0: entered allmulticast mode
[  142.142475][ T8212] bond_slave_1: entered allmulticast mode
[  142.149923][ T8212] bridge0: port 3(bond0) entered blocking state
[  142.156634][ T8212] bridge0: port 3(bond0) entered disabled state
[  142.166584][ T8212] bridge0: port 3(bond0) entered blocking state
[  142.173171][ T8212] bridge0: port 3(bond0) entered forwarding state
[  142.233357][   T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.318077][ T8162] chnl_net:caif_netlink_parms(): no params data found
[  142.343136][ T8220] netlink: 112 bytes leftover after parsing attributes in process `syz.1.975'.
[  142.564687][ T8238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.981'.
[  142.609493][ T8162] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.632913][ T8162] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.640145][ T8162] bridge_slave_0: entered allmulticast mode
[  142.649878][ T8162] bridge_slave_0: entered promiscuous mode
[  142.677037][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  142.749038][ T8162] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.773428][ T8162] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.812361][ T8162] bridge_slave_1: entered allmulticast mode
[  142.828297][ T8162] bridge_slave_1: entered promiscuous mode
[  142.871840][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.984'.
[  142.887453][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.984'.
[  142.903987][ T8249] nbd: socks must be embedded in a SOCK_ITEM attr
[  142.955355][   T51] bridge_slave_1: left allmulticast mode
[  142.962436][   T54] Bluetooth: hci1: command tx timeout
[  142.989775][   T51] bridge_slave_1: left promiscuous mode
[  143.006720][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.057848][   T51] bridge_slave_0: left allmulticast mode
[  143.064655][   T51] bridge_slave_0: left promiscuous mode
[  143.070775][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.830541][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.845338][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.858220][   T51] bond0 (unregistering): (slave macvlan2): Releasing backup interface
[  143.868159][   T51] mac80211_hwsim hwsim12 wlan0: left allmulticast mode
[  143.877589][   T51] mac80211_hwsim hwsim12 wlan0: left promiscuous mode
[  143.886470][   T51] bond0 (unregistering): Released all slaves
[  143.899292][   T51] bond1 (unregistering): (slave vcan1): Releasing backup interface
[  143.911445][   T51] bond1 (unregistering): Released all slaves
[  143.928934][ T8162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  143.938641][ T8254] netlink: 'syz.1.986': attribute type 12 has an invalid length.
[  144.001332][ T8270] netlink: 'syz.4.991': attribute type 10 has an invalid length.
[  144.096945][ T8270] team0: Failed to send options change via netlink (err -105)
[  144.105132][ T8270] team0: Port device netdevsim0 added
[  144.111275][ T8271] netlink: 'syz.4.991': attribute type 10 has an invalid length.
[  144.121152][ T8277] FAULT_INJECTION: forcing a failure.
[  144.121152][ T8277] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  144.137628][ T8277] CPU: 1 PID: 8277 Comm: syz.2.994 Not tainted 6.10.0-rc5-syzkaller-01193-gac26327635d6 #0
[  144.138040][ T8271] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  144.147632][ T8277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  144.147652][ T8277] Call Trace:
[  144.147662][ T8277]  <TASK>
[  144.147671][ T8277]  dump_stack_lvl+0x241/0x360
[  144.147698][ T8277]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.147715][ T8277]  ? __pfx__printk+0x10/0x10
[  144.147741][ T8277]  ? __pfx_lock_release+0x10/0x10
[  144.147768][ T8277]  should_fail_ex+0x3b0/0x4e0
[  144.147796][ T8277]  _copy_from_iter+0x1f6/0x1960
[  144.147817][ T8277]  ? __virt_addr_valid+0x183/0x520
[  144.171253][ T8162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.173106][ T8277]  ? skb_set_owner_w+0x238/0x3e0
[  144.173143][ T8277]  ? __pfx__copy_from_iter+0x10/0x10
[  144.173162][ T8277]  ? __pfx__copy_from_iter+0x10/0x10
[  144.173186][ T8277]  ? page_copy_sane+0x154/0x260
[  144.173205][ T8277]  copy_page_from_iter+0x7a/0x100
[  144.173226][ T8277]  skb_copy_datagram_from_iter+0x2d8/0x6c0
[  144.173261][ T8277]  packet_sendmsg+0x4231/0x6710
[  144.173310][ T8277]  ? __pfx___might_resched+0x10/0x10
[  144.173349][ T8277]  ? aa_sk_perm+0x967/0xab0
[  144.173378][ T8277]  ? __pfx_packet_sendmsg+0x10/0x10
[  144.173406][ T8277]  ? __pfx_lock_release+0x10/0x10
[  144.173424][ T8277]  ? __import_iovec+0x536/0x820
[  144.193419][   T51] tipc: Disabling bearer <udp:syz1>
[  144.197705][ T8277]  ? aa_sock_msg_perm+0x91/0x160
[  144.197741][ T8277]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  144.214553][   T51] tipc: Left network mode
[  144.216715][ T8277]  ? security_socket_sendmsg+0x87/0xb0
[  144.216750][ T8277]  ? __pfx_packet_sendmsg+0x10/0x10
[  144.307907][ T8277]  __sock_sendmsg+0x221/0x270
[  144.312623][ T8277]  ____sys_sendmsg+0x525/0x7d0
[  144.317398][ T8277]  ? __pfx_____sys_sendmsg+0x10/0x10
[  144.322721][ T8277]  __sys_sendmsg+0x2b0/0x3a0
[  144.327324][ T8277]  ? __pfx___sys_sendmsg+0x10/0x10
[  144.332448][ T8277]  ? vfs_write+0x7c4/0xc90
[  144.336900][ T8277]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  144.343242][ T8277]  ? do_syscall_64+0x100/0x230
[  144.348009][ T8277]  ? do_syscall_64+0xb6/0x230
[  144.352682][ T8277]  do_syscall_64+0xf3/0x230
[  144.357188][ T8277]  ? clear_bhb_loop+0x35/0x90
[  144.361866][ T8277]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.367756][ T8277] RIP: 0033:0x7f1c94975b99
[  144.372167][ T8277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.391780][ T8277] RSP: 002b:00007f1c95824048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  144.400237][ T8277] RAX: ffffffffffffffda RBX: 00007f1c94b03f60 RCX: 00007f1c94975b99
[  144.408218][ T8277] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003
[  144.416345][ T8277] RBP: 00007f1c958240a0 R08: 0000000000000000 R09: 0000000000000000
[  144.424324][ T8277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  144.432300][ T8277] R13: 000000000000004d R14: 00007f1c94b03f60 R15: 00007fff320850f8
[  144.440289][ T8277]  </TASK>
[  144.575283][ T8162] team0: Port device team_slave_0 added
[  144.637613][ T8283] xt_CT: You must specify a L4 protocol and not use inversions on it
[  144.828508][ T8162] team0: Port device team_slave_1 added
[  144.902539][ T8299] Unsupported ieee802154 address type: 0
[  144.913976][ T8293] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  145.042961][   T54] Bluetooth: hci1: command tx timeout
[  145.300903][ T8162] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.324911][ T8162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.358296][ T8162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.426298][   T51] hsr_slave_0: left promiscuous mode
[  145.471626][   T51] hsr_slave_1: left promiscuous mode
[  145.506270][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.532915][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.551590][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.584305][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.636892][   T51] batman_adv: batadv0: Interface deactivated: macsec1
[  145.676509][   T51] batman_adv: batadv0: Removing interface: macsec1
[  145.780300][   T51] dummy0: left promiscuous mode
[  145.797818][   T51] veth1_macvtap: left promiscuous mode
[  145.809088][   T51] veth0_macvtap: left promiscuous mode
[  145.822164][   T51] veth1_vlan: left promiscuous mode
[  145.831889][   T51] veth0_vlan: left promiscuous mode
[  146.576023][   T51] team0 (unregistering): Port device team_slave_1 removed
[  146.663472][   T51] team0 (unregistering): Port device team_slave_0 removed
[  147.104932][ T8162] batman_adv: batadv0: Adding interface: batadv_slave_1
[  147.116226][ T8162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.150148][ T8162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  147.152303][   T54] Bluetooth: hci1: command tx timeout
[  147.505442][ T8162] hsr_slave_0: entered promiscuous mode
[  147.568876][ T8162] hsr_slave_1: entered promiscuous mode
[  147.603462][ T8162] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  147.622311][ T8162] Cannot create hsr debugfs directory
[  147.962369][ T8391] netlink: 'syz.3.1032': attribute type 33 has an invalid length.
[  148.066023][ T8409] netlink: 'syz.1.1037': attribute type 10 has an invalid length.
[  148.082097][ T8409] __nla_validate_parse: 2 callbacks suppressed
[  148.082117][ T8409] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1037'.
[  148.118346][ T8409] bond0: entered allmulticast mode
[  148.138883][ T8409] bond_slave_0: entered allmulticast mode
[  148.179657][ T8409] bond_slave_1: entered allmulticast mode
[  148.207207][ T8409] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  148.217699][ T8409] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.228887][ T8409] bridge0: port 3(bond0) entered blocking state
[  148.236450][ T8409] bridge0: port 3(bond0) entered disabled state
[  148.267133][ T8409] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  148.375585][ T8414] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1037'.
[  148.388950][ T8417] netlink: 'syz.2.1041': attribute type 10 has an invalid length.
[  148.419939][ T8417] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.436268][ T8417] batadv0: entered promiscuous mode
[  148.469735][ T8417] batadv0: entered allmulticast mode
[  148.493777][ T8417] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  148.532206][ T8422] netem: change failed
[  148.541196][ T8433] netlink: 'syz.1.1045': attribute type 5 has an invalid length.
[  148.574038][ T8429] netlink: 'syz.4.1043': attribute type 2 has an invalid length.
[  148.693747][ T8435] netlink: 'syz.3.1046': attribute type 1 has an invalid length.
[  148.720845][ T8435] netlink: 113592 bytes leftover after parsing attributes in process `syz.3.1046'.
[  148.782846][ T8435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1046'.
[  148.877260][ T2886] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  148.887157][ T2886] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  148.994581][ T8454] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1052'.
[  149.202111][   T54] Bluetooth: hci1: command tx timeout
[  149.219074][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1055'.
[  149.635751][ T8162] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  149.659839][ T8495] netlink: 'syz.3.1068': attribute type 29 has an invalid length.
[  149.693212][ T8162] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  149.722775][ T8497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1067'.
[  149.774481][ T8505] netlink: 'syz.4.1069': attribute type 1 has an invalid length.
[  149.795035][ T8495] netlink: 'syz.3.1068': attribute type 29 has an invalid length.
[  149.828959][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1067'.
[  149.848352][ T8497] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.870952][ T8497] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.882242][ T8497] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.889955][ T8497] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.906467][ T8497] batman_adv: batadv0: Interface deactivated: macsec1
[  149.917030][ T8497] batman_adv: batadv0: Removing interface: macsec1
[  149.977083][ T8162] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  149.994408][ T8499] netlink: 'syz.3.1068': attribute type 29 has an invalid length.
[  150.050596][ T8162] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  150.478343][ T8162] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.571865][ T8162] 8021q: adding VLAN 0 to HW filter on device team0
[  150.599310][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.606541][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.653449][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.660634][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.308856][ T8162] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.368657][ T8570] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1087'.
[  151.449528][ T8573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1088'.
[  151.535649][ T8577] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  151.559202][ T8162] veth0_vlan: entered promiscuous mode
[  151.559351][ T8573] openvswitch: netlink: Key type 29 is not supported
[  151.621727][ T8162] veth1_vlan: entered promiscuous mode
[  151.729667][ T8162] veth0_macvtap: entered promiscuous mode
[  151.788914][ T8162] veth1_macvtap: entered promiscuous mode
[  151.886283][ T8162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.917015][ T8162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.942086][ T8162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.964233][ T8162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.986731][ T8162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.015031][ T8162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.062502][ T8162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.078894][ T8162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.101086][ T8162] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.145346][ T8162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.160638][ T8162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.190425][ T8162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.221428][ T8162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.241526][ T8162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.255820][ T8162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.267385][ T8162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.278531][ T8162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.327971][ T8162] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.358797][ T8162] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.385769][ T8162] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.429088][ T8162] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.443927][ T8162] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.735244][   T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.781993][   T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.866544][ T8629] veth0_vlan: entered allmulticast mode
[  153.076849][ T8643] validate_nla: 3 callbacks suppressed
[  153.076870][ T8643] netlink: 'syz.3.1115': attribute type 1 has an invalid length.
[  153.125589][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.163185][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.245719][ T8653] vlan0: entered promiscuous mode
[  153.386695][ T8653] vlan0 (unregistering): left promiscuous mode
[  153.486072][ T8662] __nla_validate_parse: 2 callbacks suppressed
[  153.486091][ T8662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.954'.
[  153.661663][ T8679] netlink: 'syz.1.1123': attribute type 8 has an invalid length.
[  153.752082][ T8687] netlink: 'syz.0.1127': attribute type 10 has an invalid length.
[  153.760727][ T8687] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1127'.
[  153.780086][ T8687] bond0: entered promiscuous mode
[  153.785780][ T8687] bond_slave_0: entered promiscuous mode
[  153.791762][ T8687] bond_slave_1: entered promiscuous mode
[  153.804365][ T8687] bond0: entered allmulticast mode
[  153.810209][ T8687] bond_slave_0: entered allmulticast mode
[  153.817180][ T8687] bond_slave_1: entered allmulticast mode
[  153.826564][ T8687] bridge0: port 3(bond0) entered blocking state
[  153.835895][ T8687] bridge0: port 3(bond0) entered disabled state
[  153.848157][ T8687] bridge0: port 3(bond0) entered blocking state
[  153.854624][ T8687] bridge0: port 3(bond0) entered forwarding state
[  153.868035][ T8685] netlink: 'syz.4.1126': attribute type 10 has an invalid length.
[  153.919644][ T8685] batman_adv: batadv0: Adding interface: team0
[  153.928296][ T8685] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.957889][ T8685] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  153.993647][ T8688] bridge0: entered promiscuous mode
[  154.005051][ T8688] macsec2: entered promiscuous mode
[  154.017954][ T8688] macsec2: entered allmulticast mode
[  154.025420][ T8688] bridge0: entered allmulticast mode
[  154.036735][ T8688] bridge0: left allmulticast mode
[  154.043676][ T8688] bridge0: left promiscuous mode
[  154.125969][ T8693] netlink: 'syz.4.1126': attribute type 10 has an invalid length.
[  154.139260][ T8693] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1126'.
[  154.142490][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1132'.
[  154.161191][ T8694] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1127'.
[  154.186644][ T8708] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1131'.
[  154.631198][ T8736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1137'.
[  154.690846][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1140'.
[  154.710264][ T8741] netlink: 'syz.1.1142': attribute type 29 has an invalid length.
[  154.735866][ T8741] netlink: 'syz.1.1142': attribute type 29 has an invalid length.
[  154.912283][ T8742] netlink: 'syz.1.1142': attribute type 29 has an invalid length.
[  154.920420][ T8749] netlink: 'syz.2.1145': attribute type 10 has an invalid length.
[  154.930138][ T8749] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1145'.
[  154.940728][ T8741] netlink: 'syz.1.1142': attribute type 29 has an invalid length.
[  154.960868][ T8752] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1144'.
[  155.002168][ T8752] bond0: entered promiscuous mode
[  155.007264][ T8752] bond_slave_0: entered promiscuous mode
[  155.022875][ T8752] bond_slave_1: entered promiscuous mode
[  155.063408][ T8752] bond0: entered allmulticast mode
[  155.068596][ T8752] bond_slave_0: entered allmulticast mode
[  155.148084][ T8752] bond_slave_1: entered allmulticast mode
[  155.166370][ T8752] bridge0: port 3(bond0) entered blocking state
[  155.173412][ T8752] bridge0: port 3(bond0) entered disabled state
[  155.187997][ T8752] bridge0: port 3(bond0) entered blocking state
[  155.195432][ T8752] bridge0: port 3(bond0) entered forwarding state
[  155.342848][ T8763] bridge0: port 3(bond0) entered disabled state
[  155.363039][ T8763] bond0: left allmulticast mode
[  155.368134][ T8763] bond_slave_0: left allmulticast mode
[  155.382859][ T8763] bond_slave_1: left allmulticast mode
[  155.406994][ T8763] bond0: left promiscuous mode
[  155.414958][ T8763] bond_slave_0: left promiscuous mode
[  155.420762][ T8763] bond_slave_1: left promiscuous mode
[  155.427244][ T8763] bridge0: port 3(bond0) entered disabled state
[  155.493498][ T8763] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.518769][ T8763] team0: Port device bond0 added
[  155.628714][ T8774] team0: Port device team_slave_0 removed
[  155.645166][ T8774] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  155.689885][ T8769] vlan3: entered promiscuous mode
[  155.702747][ T8769] vlan3: entered allmulticast mode
[  155.841673][ T8784] netdevsim netdevsim4 : renamed from netdevsim0 (while UP)
[  156.488540][ T8827] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  156.846265][ T8844] bond0: entered promiscuous mode
[  156.855737][ T8844] bond_slave_0: entered promiscuous mode
[  156.885492][ T8844] bond_slave_1: entered promiscuous mode
[  156.891389][ T8844] bond0: entered allmulticast mode
[  156.935031][ T8844] bond_slave_0: entered allmulticast mode
[  156.972121][ T8844] bond_slave_1: entered allmulticast mode
[  157.089077][ T8844] team0: Port device bond0 removed
[  157.110952][ T8844] bridge0: port 3(bond0) entered blocking state
[  157.138382][ T8844] bridge0: port 3(bond0) entered disabled state
[  157.803875][ T8897] bond0: entered promiscuous mode
[  157.808972][ T8897] bond_slave_0: entered promiscuous mode
[  157.839961][ T8897] bond_slave_1: entered promiscuous mode
[  157.877913][ T8897] bond0: entered allmulticast mode
[  157.899058][ T8897] bond_slave_0: entered allmulticast mode
[  157.934519][ T8897] bond_slave_1: entered allmulticast mode
[  157.941549][ T8897] bridge0: port 3(bond0) entered blocking state
[  157.978441][ T8897] bridge0: port 3(bond0) entered disabled state
[  158.004721][ T8897] bridge0: port 3(bond0) entered blocking state
[  158.011130][ T8897] bridge0: port 3(bond0) entered forwarding state
[  158.289796][ T8934] ebt_among: src integrity fail: 30a
[  158.525141][ T8947] __nla_validate_parse: 18 callbacks suppressed
[  158.525161][ T8947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1210'.
[  158.583037][ T8953] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1213'.
[  158.787499][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1217'.
[  159.177873][ T8982] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:0000:0000 with DS=0x2
[  159.508567][ T8998] validate_nla: 6 callbacks suppressed
[  159.508585][ T8998] netlink: 'syz.0.1232': attribute type 29 has an invalid length.
[  159.527217][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1232'.
[  159.553040][ T8998] netlink: 'syz.0.1232': attribute type 29 has an invalid length.
[  159.561736][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1232'.
[  159.577116][ T8996] netlink: 'syz.1.1231': attribute type 10 has an invalid length.
[  159.599573][ T8996] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1231'.
[  159.646795][ T8996] bridge0: port 3(bond0) entered blocking state
[  159.672187][ T8996] bridge0: port 3(bond0) entered disabled state
[  159.689626][ T8996] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  159.724333][ T9005] netlink: 'syz.3.1235': attribute type 12 has an invalid length.
[  159.808088][ T9009] netlink: 'syz.2.1236': attribute type 68 has an invalid length.
[  159.909871][ T9016] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1239'.
[  159.943774][ T9015] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1239'.
[  160.033325][ T9020] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1240'.
[  160.246633][ T9037] netlink: 'syz.3.1244': attribute type 29 has an invalid length.
[  160.267752][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1244'.
[  160.309780][ T9037] netlink: 'syz.3.1244': attribute type 29 has an invalid length.
[  160.378532][ T9046] netlink: 'syz.1.1249': attribute type 10 has an invalid length.
[  160.411388][ T9046] bridge0: port 3(bond0) entered blocking state
[  160.418582][ T9046] bridge0: port 3(bond0) entered disabled state
[  160.444725][ T9046] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  160.588924][ T9050] netlink: 'syz.3.1251': attribute type 10 has an invalid length.
[  160.876949][ T9073] netlink: 'syz.3.1255': attribute type 10 has an invalid length.
[  160.899944][ T9073] bridge0: port 3(bond0) entered disabled state
[  160.906541][ T9073] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.913976][ T9073] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.998213][ T9073] bridge0: port 3(bond0) entered blocking state
[  161.005040][ T9073] bridge0: port 3(bond0) entered forwarding state
[  161.011830][ T9073] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.019062][ T9073] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.026616][ T9073] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.033854][ T9073] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.067465][ T9073] bridge0: port 3(bond0) entered disabled state
[  161.073997][ T9073] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.081182][ T9073] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.638728][ T9160] Cannot find add_set index 0 as target
[  162.871525][ T9165] veth0_vlan: left promiscuous mode
[  162.918123][ T9171] block nbd0: not configured, cannot reconfigure
[  163.007645][ T9159] delete_channel: no stack
[  163.424023][ T9201] team0: entered promiscuous mode
[  163.440133][ T9201] team_slave_1: entered promiscuous mode
[  163.475784][ T9201] bridge0: port 3(team0) entered blocking state
[  163.490891][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies.
[  163.512353][ T9201] bridge0: port 3(team0) entered disabled state
[  163.529166][ T9201] team0: entered allmulticast mode
[  163.542141][ T9201] team_slave_1: entered allmulticast mode
[  163.563892][ T9201] bridge0: port 3(team0) entered blocking state
[  163.570270][ T9201] bridge0: port 3(team0) entered forwarding state
[  163.603351][ T9208] __nla_validate_parse: 22 callbacks suppressed
[  163.603373][ T9208] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1300'.
[  163.623247][ T9209] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1299'.
[  163.643792][ T9209] bridge0: port 3(bond0) entered blocking state
[  163.650216][ T9209] bridge0: port 3(bond0) entered forwarding state
[  163.676433][ T9209] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.784886][ T9211] xt_hashlimit: size too large, truncated to 1048576
[  163.831692][ T9211] xt_hashlimit: overflow, try lower: 0/0
[  163.927930][ T9219] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1307'.
[  164.043358][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1311'.
[  164.064008][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1311'.
[  164.319551][ T9243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1317'.
[  164.668600][ T9260] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1324'.
[  164.707501][ T9262] validate_nla: 19 callbacks suppressed
[  164.707520][ T9262] netlink: 'syz.0.1325': attribute type 29 has an invalid length.
[  164.749789][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'.
[  164.758870][ T9265] vlan0: entered promiscuous mode
[  164.893110][ T9272] bridge0: port 3(bond0) entered disabled state
[  164.911851][ T9262] netlink: 'syz.0.1325': attribute type 29 has an invalid length.
[  164.925990][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'.
[  164.936524][ T9271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1323'.
[  165.120557][ T9285] xt_CT: You must specify a L4 protocol and not use inversions on it
[  165.285980][ T9294] FAULT_INJECTION: forcing a failure.
[  165.285980][ T9294] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  165.305819][ T9294] CPU: 1 PID: 9294 Comm: syz.0.1336 Not tainted 6.10.0-rc5-syzkaller-01193-gac26327635d6 #0
[  165.315959][ T9294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  165.326023][ T9294] Call Trace:
[  165.329305][ T9294]  <TASK>
[  165.332233][ T9294]  dump_stack_lvl+0x241/0x360
[  165.336911][ T9294]  ? __pfx_dump_stack_lvl+0x10/0x10
[  165.342109][ T9294]  ? __pfx__printk+0x10/0x10
[  165.346733][ T9294]  ? snprintf+0xda/0x120
[  165.350977][ T9294]  should_fail_ex+0x3b0/0x4e0
[  165.355675][ T9294]  _copy_to_user+0x2f/0xb0
[  165.360091][ T9294]  simple_read_from_buffer+0xca/0x150
[  165.365467][ T9294]  proc_fail_nth_read+0x1e9/0x250
[  165.370517][ T9294]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  165.376091][ T9294]  ? rw_verify_area+0x514/0x6b0
[  165.380953][ T9294]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  165.386504][ T9294]  vfs_read+0x204/0xbd0
[  165.390666][ T9294]  ? __pfx_lock_release+0x10/0x10
[  165.395695][ T9294]  ? __pfx_vfs_read+0x10/0x10
[  165.400370][ T9294]  ? bpf_prog_test_run+0x352/0x3b0
[  165.405502][ T9294]  ? __fget_files+0x29/0x470
[  165.410197][ T9294]  ? __fget_files+0x3f6/0x470
[  165.414892][ T9294]  ksys_read+0x1a0/0x2c0
[  165.419155][ T9294]  ? __pfx_ksys_read+0x10/0x10
[  165.423924][ T9294]  ? do_syscall_64+0x100/0x230
[  165.428688][ T9294]  ? do_syscall_64+0xb6/0x230
[  165.433365][ T9294]  do_syscall_64+0xf3/0x230
[  165.437866][ T9294]  ? clear_bhb_loop+0x35/0x90
[  165.442558][ T9294]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.448470][ T9294] RIP: 0033:0x7f51ae57467c
[  165.452904][ T9294] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48
[  165.472612][ T9294] RSP: 002b:00007f51af26e040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  165.481029][ T9294] RAX: ffffffffffffffda RBX: 00007f51ae703f60 RCX: 00007f51ae57467c
[  165.489087][ T9294] RDX: 000000000000000f RSI: 00007f51af26e0b0 RDI: 0000000000000004
[  165.497069][ T9294] RBP: 00007f51af26e0a0 R08: 0000000000000000 R09: 0000000000000000
[  165.505124][ T9294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  165.513111][ T9294] R13: 000000000000000b R14: 00007f51ae703f60 R15: 00007ffd8909ca08
[  165.521121][ T9294]  </TASK>
[  166.516887][ T9340] netlink: 'syz.1.1354': attribute type 10 has an invalid length.
[  166.550019][ T9340] bridge0: port 4(bond0) entered blocking state
[  166.570399][ T9340] bridge0: port 4(bond0) entered disabled state
[  166.581783][ T9340] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  167.409165][ T9399] netlink: 'syz.2.1371': attribute type 10 has an invalid length.
[  167.555482][ T9403] trusted_key: syz.3.1372 sent an empty control message without MSG_MORE.
[  167.897990][ T9429] tipc: Enabled bearer <eth:vlan0>, priority 10
[  167.902307][    C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  168.034896][    C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  168.306643][    C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  168.439680][ T9461] tipc: Started in network mode
[  168.461239][ T9461] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  168.478204][ T9461] tipc: Enabled bearer <eth:vlan0>, priority 10
[  168.688860][ T9476] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  168.833355][    C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  168.930752][ T9492] team0: Device macvtap1 is already an upper device of the team interface
[  168.949699][ T9489] __nla_validate_parse: 14 callbacks suppressed
[  168.949716][ T9489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1405'.
[  168.951418][ T9490] netlink: 'syz.0.1404': attribute type 10 has an invalid length.
[  168.974711][ T9490] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1404'.
[  169.159669][ T9499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1407'.
[  169.583794][ T5139] tipc: Node number set to 10005162
[  169.657500][ T9524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1416'.
[  169.665610][ T9522] netlink: 'syz.4.1415': attribute type 10 has an invalid length.
[  169.679162][ T9522] netlink: 'syz.4.1415': attribute type 10 has an invalid length.
[  169.697649][ T9522] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1415'.
[  169.717529][ T9522] team0: entered promiscuous mode
[  169.724718][ T9522] team_slave_0: entered promiscuous mode
[  169.751181][ T9522] team_slave_1: entered promiscuous mode
[  169.768209][ T9522] netdevsim netdevsim4 : entered promiscuous mode
[  169.788090][ T9522] 8021q: adding VLAN 0 to HW filter on device team0
[  169.837357][ T9522] batman_adv: batadv0: Interface activated: team0
[  169.848285][ T9522] batman_adv: batadv0: Interface deactivated: team0
[  169.855705][    C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  169.871140][ T9522] batman_adv: batadv0: Removing interface: team0
[  169.890191][ T9522] bridge0: port 4(team0) entered blocking state
[  169.917193][ T9522] bridge0: port 4(team0) entered disabled state
[  169.935649][ T9522] team0: entered allmulticast mode
[  169.942837][ T9522] team_slave_0: entered allmulticast mode
[  169.974893][ T9522] team_slave_1: entered allmulticast mode
[  170.022183][ T9522] netdevsim netdevsim4 : entered allmulticast mode
[  170.039413][ T9522] bridge0: port 4(team0) entered blocking state
[  170.046003][ T9522] bridge0: port 4(team0) entered forwarding state
[  170.057653][ T9530] netlink: 'syz.0.1417': attribute type 10 has an invalid length.
[  170.088385][ T9530] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1417'.
[  170.339494][ T9541] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  170.359103][ T9547] netlink: 'syz.1.1424': attribute type 10 has an invalid length.
[  170.376485][ T9547] ipvlan1: entered promiscuous mode
[  170.436215][ T9547] team0: Device ipvlan1 failed to register rx_handler
[  170.850239][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1437'.
[  170.882604][    C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  170.982946][ T9590] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  171.098268][ T9599] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1442'.
[  171.330970][ T9613] netlink: 'syz.2.1444': attribute type 12 has an invalid length.
[  171.760505][ T9635] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  171.807153][ T9635] macvlan2: entered promiscuous mode
[  171.837711][ T9635] macvlan2: entered allmulticast mode
[  171.872119][ T9635] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  171.898622][ T9635] team0: Port device macvlan2 added
[  171.910612][ T9639] netlink: 34 bytes leftover after parsing attributes in process `syz.3.1456'.
[  171.925980][    C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  171.959427][ T9650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1457'.
[  172.144095][ T9659] netlink: 'syz.1.1461': attribute type 10 has an invalid length.
[  172.188470][ T9659] bridge0: port 4(bond0) entered blocking state
[  172.208587][ T9659] bridge0: port 4(bond0) entered disabled state
[  172.230838][ T9659] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  172.485397][ T9676] netlink: 'syz.1.1466': attribute type 13 has an invalid length.
[  172.701568][ T9685] gretap0: refused to change device tx_queue_len
[  172.719836][ T9685] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  172.776316][ T9685] erspan0: entered promiscuous mode
[  172.788408][ T9685] erspan0: entered allmulticast mode
[  172.962443][    C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  173.362888][ T9719] tipc: Can't bind to reserved service type 0
[  173.551358][ T9719] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8
[  173.608099][ T9734] xt_CT: You must specify a L4 protocol and not use inversions on it
[  173.635271][ T9732] netlink: 'syz.3.1491': attribute type 10 has an invalid length.
[  174.002931][    C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  174.040942][ T9758] __nla_validate_parse: 5 callbacks suppressed
[  174.040961][ T9758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1501'.
[  174.120163][ T9764] netlink: 'syz.1.1504': attribute type 15 has an invalid length.
[  174.604919][ T9781] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1511'.
[  174.617717][ T9781] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1511'.
[  174.635256][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1511'.
[  174.746032][ T9786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1513'.
[  174.770940][ T9786] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1513'.
[  174.935197][ T9794] FAULT_INJECTION: forcing a failure.
[  174.935197][ T9794] name failslab, interval 1, probability 0, space 0, times 0
[  174.990805][ T9794] CPU: 1 PID: 9794 Comm: syz.0.1517 Not tainted 6.10.0-rc5-syzkaller-01193-gac26327635d6 #0
[  175.000923][ T9794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  175.010989][ T9794] Call Trace:
[  175.014284][ T9794]  <TASK>
[  175.017229][ T9794]  dump_stack_lvl+0x241/0x360
[  175.021910][ T9794]  ? __pfx_dump_stack_lvl+0x10/0x10
[  175.027221][ T9794]  ? __pfx__printk+0x10/0x10
[  175.031855][ T9794]  ? netlink_insert+0x10b7/0x14b0
[  175.036908][ T9794]  should_fail_ex+0x3b0/0x4e0
[  175.041614][ T9794]  ? __alloc_skb+0x1c3/0x440
[  175.046323][ T9794]  should_failslab+0x9/0x20
[  175.050856][ T9794]  kmem_cache_alloc_node_noprof+0x71/0x320
[  175.056705][ T9794]  __alloc_skb+0x1c3/0x440
[  175.061167][ T9794]  ? __pfx___alloc_skb+0x10/0x10
[  175.066141][ T9794]  ? netlink_autobind+0xd6/0x2f0
[  175.071110][ T9794]  ? netlink_autobind+0x2b0/0x2f0
[  175.076173][ T9794]  netlink_sendmsg+0x638/0xcb0
[  175.080981][ T9794]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.086300][ T9794]  ? __import_iovec+0x536/0x820
[  175.091166][ T9794]  ? aa_sock_msg_perm+0x91/0x160
[  175.096126][ T9794]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  175.101437][ T9794]  ? security_socket_sendmsg+0x87/0xb0
[  175.106928][ T9794]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.112246][ T9794]  __sock_sendmsg+0x221/0x270
[  175.119918][ T9794]  ____sys_sendmsg+0x525/0x7d0
[  175.124801][ T9794]  ? __pfx_____sys_sendmsg+0x10/0x10
[  175.130217][ T9794]  __sys_sendmsg+0x2b0/0x3a0
[  175.134816][ T9794]  ? __pfx___sys_sendmsg+0x10/0x10
[  175.139957][ T9794]  ? vfs_write+0x7c4/0xc90
[  175.144412][ T9794]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  175.150742][ T9794]  ? do_syscall_64+0x100/0x230
[  175.155513][ T9794]  ? do_syscall_64+0xb6/0x230
[  175.160199][ T9794]  do_syscall_64+0xf3/0x230
[  175.164703][ T9794]  ? clear_bhb_loop+0x35/0x90
[  175.169389][ T9794]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.175283][ T9794] RIP: 0033:0x7f51ae575b99
[  175.179716][ T9794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  175.199325][ T9794] RSP: 002b:00007f51af26e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  175.207743][ T9794] RAX: ffffffffffffffda RBX: 00007f51ae703f60 RCX: 00007f51ae575b99
[  175.215715][ T9794] RDX: 0000000000000000 RSI: 0000000020001b80 RDI: 0000000000000004
[  175.223724][ T9794] RBP: 00007f51af26e0a0 R08: 0000000000000000 R09: 0000000000000000
[  175.231699][ T9794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  175.239759][ T9794] R13: 000000000000000b R14: 00007f51ae703f60 R15: 00007ffd8909ca08
[  175.247750][ T9794]  </TASK>
[  175.267345][    C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  175.351249][ T9806] netlink: 'syz.4.1522': attribute type 10 has an invalid length.
[  175.393025][ T9806] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1522'.
[  175.442643][ T9806] bridge0: port 3(bond0) entered blocking state
[  175.449106][ T9806] bridge0: port 3(bond0) entered forwarding state
[  175.487555][ T9806] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.616532][ T9823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1530'.
[  175.681138][ T9828] netlink: 'syz.1.1531': attribute type 27 has an invalid length.
[  175.710356][ T9828] netlink: 'syz.1.1531': attribute type 3 has an invalid length.
[  175.748085][ T9828] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1531'.
[  175.824167][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1535'.
[  176.113554][ T9860] x_tables: duplicate underflow at hook 2
[  176.120806][ T9856] netlink: 'syz.3.1542': attribute type 6 has an invalid length.
[  176.326472][    C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  177.372991][    C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  178.432216][    C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  178.658323][ T9924] Bluetooth: MGMT ver 1.22
[  178.688662][ T9924] Bluetooth: hci3: invalid length 0, exp 2 for type 6
[  179.047010][ T9951] __nla_validate_parse: 6 callbacks suppressed
[  179.047032][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1572'.
[  179.117565][ T9951] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1572'.
[  179.433500][ T9973] cannot load conntrack support for proto=3
[  179.437501][ T9975] netlink: 'syz.1.1580': attribute type 10 has an invalid length.
[  179.458356][    C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  179.508903][ T9978] netlink: 'syz.4.1581': attribute type 29 has an invalid length.
[  179.542578][ T9978] netlink: 'syz.4.1581': attribute type 29 has an invalid length.
[  179.585746][ T9983] netlink: 'syz.4.1581': attribute type 29 has an invalid length.
[  179.625988][ T9978] netlink: 'syz.4.1581': attribute type 29 has an invalid length.
[  179.638018][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1580'.
[  179.935046][ T9989] xt_nfacct: accounting object `syz1' does not exists
[  180.062243][T10005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1585'.
[  180.203858][T10015] netlink: 'syz.2.1589': attribute type 10 has an invalid length.
[  180.211730][T10015] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1589'.
[  180.273040][T10015] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1589'.
[  180.488091][    C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  180.795074][T10049] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  180.919131][T10057] netlink: 'syz.2.1601': attribute type 14 has an invalid length.
[  181.109545][T10063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1602'.
[  181.367146][T10084] Bluetooth: MGMT ver 1.22
[  181.534775][    C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  181.602973][ T5100] Bluetooth: hci2: command 0x0406 tx timeout
[  181.610255][ T5100] Bluetooth: hci3: command 0x0406 tx timeout
[  181.997210][T10108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1620'.
[  182.228639][T10133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  182.402725][T10140] No such timeout policy "syz0"
[  182.498372][T10144] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  182.541037][T10144] gretap1: entered promiscuous mode
[  182.546582][T10144] gretap1: entered allmulticast mode
[  182.583002][    C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  182.635799][T10149] xt_NFQUEUE: number of total queues is 0
[  182.939208][T10163] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1641'.
[  183.067686][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1645'.
[  183.395490][T10193] bridge0: entered promiscuous mode
[  183.401298][T10193] macsec3: entered promiscuous mode
[  183.437591][T10193] macsec3: entered allmulticast mode
[  183.462092][T10193] bridge0: entered allmulticast mode
[  183.485068][T10193] bridge0: left allmulticast mode
[  183.497392][T10193] bridge0: left promiscuous mode
[  183.522735][   T54] Bluetooth: hci0: command tx timeout
[  183.612553][    C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  184.015673][T10233] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  184.057577][T10233] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  184.294557][T10247] netlink: 'syz.1.1670': attribute type 29 has an invalid length.
[  184.339563][T10247] netlink: 'syz.1.1670': attribute type 29 has an invalid length.
[  184.375506][T10252] netlink: 'syz.1.1670': attribute type 29 has an invalid length.
[  184.398030][T10257] __nla_validate_parse: 3 callbacks suppressed
[  184.398050][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1674'.
[  184.423664][T10247] netlink: 'syz.1.1670': attribute type 29 has an invalid length.
[  184.454973][T10247] netlink: 'syz.1.1670': attribute type 29 has an invalid length.
[  184.524563][T10263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1671'.
[  184.656764][    C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  184.678057][T10274] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  184.712089][T10274] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  184.732035][T10274] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  184.752268][T10274] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  184.792877][T10274] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  184.817101][T10274] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  184.832119][T10274] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  184.841124][T10274] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  184.902522][T10274] geneve2: entered promiscuous mode
[  184.910742][T10274] geneve2: entered allmulticast mode
[  185.020325][T10298] netlink: 'syz.3.1680': attribute type 10 has an invalid length.
[  185.055648][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1681'.
[  185.373340][T10312] No such timeout policy "syz1"
[  185.651840][T10329] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  185.672087][T10329] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  185.680937][T10329] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  185.702126][    C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  185.711221][T10329] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  185.747330][T10329] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  185.760357][T10329] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  185.789910][T10329] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  185.809201][T10329] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  185.827660][T10329] geneve3: entered promiscuous mode
[  185.855921][T10329] geneve3: entered allmulticast mode
[  185.898374][T10325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1693'.
[  185.958568][T10339] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1699'.
[  186.160147][T10350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1702'.
[  186.297997][T10356] netlink: 'syz.0.1706': attribute type 13 has an invalid length.
[  186.312838][T10358] FAULT_INJECTION: forcing a failure.
[  186.312838][T10358] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  186.357272][T10358] CPU: 0 PID: 10358 Comm: syz.3.1705 Not tainted 6.10.0-rc5-syzkaller-01193-gac26327635d6 #0
[  186.367607][T10358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  186.377692][T10358] Call Trace:
[  186.380986][T10358]  <TASK>
[  186.383938][T10358]  dump_stack_lvl+0x241/0x360
[  186.388965][T10358]  ? __pfx_dump_stack_lvl+0x10/0x10
[  186.394222][T10358]  ? __pfx__printk+0x10/0x10
[  186.398832][T10358]  ? __pfx_lock_release+0x10/0x10
[  186.403900][T10358]  should_fail_ex+0x3b0/0x4e0
[  186.408597][T10358]  _copy_from_user+0x2f/0xe0
[  186.413288][T10358]  copy_msghdr_from_user+0xae/0x680
[  186.418529][T10358]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  186.424384][T10358]  __sys_sendmsg+0x23d/0x3a0
[  186.429012][T10358]  ? __pfx___sys_sendmsg+0x10/0x10
[  186.434148][T10358]  ? vfs_write+0x7c4/0xc90
[  186.438653][T10358]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  186.445032][T10358]  ? do_syscall_64+0x100/0x230
[  186.449852][T10358]  ? do_syscall_64+0xb6/0x230
[  186.454578][T10358]  do_syscall_64+0xf3/0x230
[  186.459131][T10358]  ? clear_bhb_loop+0x35/0x90
[  186.463850][T10358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.469776][T10358] RIP: 0033:0x7eff86375b99
[  186.474354][T10358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  186.494080][T10358] RSP: 002b:00007eff85dff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  186.502504][T10358] RAX: ffffffffffffffda RBX: 00007eff86503f60 RCX: 00007eff86375b99
[  186.510472][T10358] RDX: 0000000000000000 RSI: 0000000020001b80 RDI: 0000000000000004
[  186.518449][T10358] RBP: 00007eff85dff0a0 R08: 0000000000000000 R09: 0000000000000000
[  186.526543][T10358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  186.534519][T10358] R13: 000000000000000b R14: 00007eff86503f60 R15: 00007ffcac5bae18
[  186.542634][T10358]  </TASK>
[  186.723032][    C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  186.788312][T10371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1712'.
[  186.961835][   T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.004554][T10374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1711'.
[  187.047372][T10382] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  187.102061][T10382] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  187.111172][T10382] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  187.148290][T10382] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  187.164161][T10382] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  187.176783][T10382] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  187.189862][T10382] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  187.205854][T10382] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  187.236841][T10382] geneve2: entered promiscuous mode
[  187.251204][T10382] geneve2: entered allmulticast mode
[  187.332904][   T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.494390][   T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.585926][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  187.596202][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  187.606063][T10406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1719'.
[  187.619757][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  187.622045][T10406] netlink: 'syz.2.1719': attribute type 7 has an invalid length.
[  187.660055][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  187.674279][   T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  187.687125][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  187.782384][    C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  187.791518][T10406] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  187.801029][T10406] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  187.810460][T10406] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  187.819646][T10406] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  187.911294][T10406] vxlan0: entered promiscuous mode
[  188.007498][   T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.045226][T10423] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1727'.
[  188.407625][   T35] bridge0: port 3(bond0) entered disabled state
[  188.455025][   T35] bridge_slave_1: left allmulticast mode
[  188.460733][   T35] bridge_slave_1: left promiscuous mode
[  188.505244][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.542818][   T35] bridge_slave_0: left allmulticast mode
[  188.596917][   T35] bridge_slave_0: left promiscuous mode
[  188.615645][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.804950][    C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  189.415784][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.424887][   T35] bond_slave_0: left promiscuous mode
[  189.430392][   T35] bond_slave_0: left allmulticast mode
[  189.439928][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  189.449956][   T35] bond_slave_1: left promiscuous mode
[  189.456408][   T35] bond_slave_1: left allmulticast mode
[  189.464468][   T35] bond0 (unregistering): Released all slaves
[  189.487158][T10440] macsec1: entered promiscuous mode
[  189.492866][T10440] macvlan0: entered promiscuous mode
[  189.508981][T10440] macvlan0: left promiscuous mode
[  189.581485][T10453] __nla_validate_parse: 2 callbacks suppressed
[  189.581508][T10453] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.1738'.
[  189.615777][T10463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1739'.
[  189.768521][   T54] Bluetooth: hci1: command tx timeout
[  189.861835][    C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  190.211622][T10487] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1746'.
[  190.228173][T10400] chnl_net:caif_netlink_parms(): no params data found
[  190.349610][   T35] hsr_slave_0: left promiscuous mode
[  190.382897][   T35] hsr_slave_1: left promiscuous mode
[  190.422249][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  190.429905][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  190.461828][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  190.477274][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  190.531512][   T35] veth1_macvtap: left promiscuous mode
[  190.546004][T10507] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1753'.
[  190.549764][   T35] veth0_macvtap: left promiscuous mode
[  190.575753][   T35] veth1_vlan: left promiscuous mode
[  190.888258][    C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  191.275422][   T35] team0 (unregistering): Port device team_slave_1 removed
[  191.702647][T10511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1754'.
[  191.842116][   T54] Bluetooth: hci1: command tx timeout
[  191.922693][    C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  192.267093][T10400] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.275403][T10400] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.283315][T10400] bridge_slave_0: entered allmulticast mode
[  192.296858][T10400] bridge_slave_0: entered promiscuous mode
[  192.364952][T10400] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.377596][T10400] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.412301][T10400] bridge_slave_1: entered allmulticast mode
[  192.436715][T10400] bridge_slave_1: entered promiscuous mode
[  192.550858][T10400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.635436][T10563] dccp_xmit_packet: Payload too large (65475) for featneg.
[  192.643939][T10400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.846530][T10400] team0: Port device team_slave_0 added
[  192.866127][T10400] team0: Port device team_slave_1 added
[  192.947809][T10584] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  192.964082][    C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  193.085928][T10400] batman_adv: batadv0: Adding interface: batadv_slave_0
[  193.102016][T10400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.150902][T10595] netlink: 'syz.4.1780': attribute type 11 has an invalid length.
[  193.168997][T10595] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1780'.
[  193.189366][T10400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  193.235696][T10400] batman_adv: batadv0: Adding interface: batadv_slave_1
[  193.268784][T10400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.307782][T10400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  193.545199][T10400] hsr_slave_0: entered promiscuous mode
[  193.577053][T10400] hsr_slave_1: entered promiscuous mode
[  193.599798][T10400] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  193.620683][T10400] Cannot create hsr debugfs directory
[  193.922424][   T54] Bluetooth: hci1: command tx timeout
[  194.013252][    C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  194.464594][T10658] netlink: 'syz.1.1799': attribute type 21 has an invalid length.
[  194.673542][T10666] netlink: 'syz.1.1802': attribute type 2 has an invalid length.
[  194.693030][T10666] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1802'.
[  194.742728][T10400] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  194.775789][T10400] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  194.840327][T10400] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  194.865049][T10400] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  194.889553][ T1243] ieee802154 phy0 wpan0: encryption failed: -22
[  194.897123][ T1243] ieee802154 phy1 wpan1: encryption failed: -22
[  195.043538][    C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  195.148841][T10400] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.259015][T10400] 8021q: adding VLAN 0 to HW filter on device team0
[  195.302117][   T25] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.309380][   T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.359567][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.366890][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.741823][T10727] netlink: 'syz.3.1821': attribute type 1 has an invalid length.
[  195.762915][T10727] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1821'.
[  196.002289][   T54] Bluetooth: hci1: command tx timeout
[  196.087829][    C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  196.189718][T10400] 8021q: adding VLAN 0 to HW filter on device batadv0
[  196.339261][T10400] veth0_vlan: entered promiscuous mode
[  196.399378][T10400] veth1_vlan: entered promiscuous mode
[  196.526746][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'.
[  196.547357][T10782] vlan2: entered promiscuous mode
[  196.685336][T10400] veth0_macvtap: entered promiscuous mode
[  196.711227][T10400] veth1_macvtap: entered promiscuous mode
[  196.781549][T10400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.833549][T10400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.857750][T10400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.881417][T10400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.931388][T10400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.968117][T10400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.009601][T10400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.027706][T10400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.046614][T10400] batman_adv: batadv0: Interface activated: batadv_slave_0
[  197.068177][T10799] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1840'.
[  197.095481][T10800] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1841'.
[  197.123838][    C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  197.137255][T10400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.148950][T10799] block nbd0: not configured, cannot reconfigure
[  197.160740][T10400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.175137][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1842'.
[  197.192155][T10400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.246634][T10400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.286302][T10400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.323214][T10400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.352926][T10400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.382114][T10400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.417831][T10400] batman_adv: batadv0: Interface activated: batadv_slave_1
[  197.470029][T10400] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.483755][T10400] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.493283][T10400] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.502405][T10400] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.630265][T10823] netlink: 'syz.2.1848': attribute type 10 has an invalid length.
[  197.704225][T10823] netlink: 'syz.2.1848': attribute type 10 has an invalid length.
[  197.725583][T10823] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1848'.
[  197.736992][T10823] team0: entered promiscuous mode
[  197.750618][T10823] team_slave_0: entered promiscuous mode
[  197.763084][T10823] team_slave_1: entered promiscuous mode
[  197.770350][T10823] bridge0: port 4(team0) entered blocking state
[  197.792526][T10823] bridge0: port 4(team0) entered disabled state
[  197.799930][T10823] team0: entered allmulticast mode
[  197.813231][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies.
[  197.830033][T10823] team_slave_0: entered allmulticast mode
[  197.838183][T10823] team_slave_1: entered allmulticast mode
[  197.849807][T10823] bridge0: port 4(team0) entered blocking state
[  197.856347][T10823] bridge0: port 4(team0) entered forwarding state
[  197.865005][ T2912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.873671][ T2912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.940296][T10829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1852'.
[  197.982038][ T2912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.992270][ T2912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.060837][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1855'.
[  198.163245][    C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  198.817245][T10890] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1870'.
[  198.979991][T10906] Cannot find del_set index 0 as target
[  199.122667][T10916] bridge0: port 3(team0) entered disabled state
[  199.129811][T10916] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.139283][T10916] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.202874][T10920] team0: left allmulticast mode
[  199.208461][T10920] team_slave_1: left allmulticast mode
[  199.219727][    C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  199.222655][T10920] macvlan2: left allmulticast mode
[  199.235030][T10920] mac80211_hwsim hwsim10 wlan0: left allmulticast mode
[  199.254189][T10921] openvswitch: netlink: Unknown key attributes 1
[  199.263269][T10920] bridge0: port 3(team0) entered disabled state
[  199.290342][T10920] bridge_slave_1: left allmulticast mode
[  199.301718][T10920] bridge_slave_1: left promiscuous mode
[  199.310706][T10920] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.330669][T10920] bridge_slave_0: left allmulticast mode
[  199.336753][T10920] bridge_slave_0: left promiscuous mode
[  199.344142][T10920] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.769088][T10957] team_slave_0: left promiscuous mode
[  199.795127][T10957] team_slave_0: left allmulticast mode
[  199.810026][T10956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1888'.
[  199.826809][T10959] netlink: 'syz.2.1892': attribute type 1 has an invalid length.
[  199.877339][T10959] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1892'.
[  199.922301][T10964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1893'.
[  199.933558][T10959] netlink: 'syz.2.1892': attribute type 1 has an invalid length.
[  199.952760][ T1108] ------------[ cut here ]------------
[  199.959085][ T1108] WARNING: CPU: 1 PID: 1108 at net/wireless/sme.c:846 __cfg80211_connect_result+0x19ea/0x21d0
[  199.969955][ T1108] Modules linked in:
[  199.974196][ T1108] CPU: 1 PID: 1108 Comm: kworker/u8:6 Not tainted 6.10.0-rc5-syzkaller-01193-gac26327635d6 #0
[  199.984766][ T1108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  199.995739][ T1108] Workqueue: cfg80211 cfg80211_event_work
[  200.001523][ T1108] RIP: 0010:__cfg80211_connect_result+0x19ea/0x21d0
[  200.012392][ T1108] Code: a4 00 89 c3 31 ff 89 c6 e8 73 24 b1 f6 85 db 74 29 e8 3a 50 97 f6 84 c0 74 27 e8 21 20 b1 f6 e9 84 00 00 00 e8 17 20 b1 f6 90 <0f> 0b 90 4c 89 ff 4c 89 f6 e8 68 23 00 00 eb 91 e8 01 20 b1 f6 eb
[  200.033137][ T1108] RSP: 0018:ffffc900043ff9e0 EFLAGS: 00010293
[  200.039253][ T1108] RAX: ffffffff8ae50709 RBX: 0000000000000000 RCX: ffff888022468000
[  200.048206][ T1108] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  200.056831][ T1108] RBP: ffffc900043ffb00 R08: ffffffff8ae502d9 R09: 1ffffffff25f78bd
[  200.064967][ T1108] R10: dffffc0000000000 R11: fffffbfff25f78be R12: ffff88802e3fa098
[  200.073058][ T1108] R13: dffffc0000000000 R14: ffff88802e3fa018 R15: ffff888074534000
[  200.081058][ T1108] FS:  0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  200.090169][ T1108] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  200.096857][ T1108] CR2: 00007f33c6780d58 CR3: 0000000011772000 CR4: 00000000003506f0
[  200.104948][ T1108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  200.113167][ T1108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  200.121170][ T1108] Call Trace:
[  200.124522][ T1108]  <TASK>
[  200.127469][ T1108]  ? __warn+0x163/0x4e0
[  200.131733][ T1108]  ? __cfg80211_connect_result+0x19ea/0x21d0
[  200.138570][ T1108]  ? report_bug+0x2b3/0x500
[  200.144341][ T1108]  ? __cfg80211_connect_result+0x19ea/0x21d0
[  200.150380][ T1108]  ? handle_bug+0x3e/0x70
[  200.154834][ T1108]  ? exc_invalid_op+0x1a/0x50
[  200.159528][ T1108]  ? asm_exc_invalid_op+0x1a/0x20
[  200.164911][ T1108]  ? __cfg80211_connect_result+0x15b9/0x21d0
[  200.170909][ T1108]  ? __cfg80211_connect_result+0x19e9/0x21d0
[  200.177062][ T1108]  ? __cfg80211_connect_result+0x19ea/0x21d0
[  200.183151][ T1108]  ? __pfx___cfg80211_connect_result+0x10/0x10
[  200.189351][ T1108]  ? lockdep_hardirqs_on+0x99/0x150
[  200.194713][ T1108]  cfg80211_process_wdev_events+0x356/0x510
[  200.200650][ T1108]  cfg80211_process_rdev_events+0xac/0x110
[  200.206575][ T1108]  ? process_scheduled_works+0x945/0x1830
[  200.212357][ T1108]  cfg80211_event_work+0x2f/0x40
[  200.217333][ T1108]  process_scheduled_works+0xa2c/0x1830
[  200.223010][ T1108]  ? __pfx_process_scheduled_works+0x10/0x10
[  200.229106][ T1108]  ? assign_work+0x364/0x3d0
[  200.233788][ T1108]  worker_thread+0x86d/0xd50
[  200.239148][ T1108]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  200.245755][ T1108]  ? __kthread_parkme+0x169/0x1d0
[  200.251052][ T1108]  ? __pfx_worker_thread+0x10/0x10
[  200.256339][ T1108]  kthread+0x2f0/0x390
[  200.256422][    C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on <eth:macvlan0>
[  200.260412][ T1108]  ? __pfx_worker_thread+0x10/0x10
[  200.260480][ T1108]  ? __pfx_kthread+0x10/0x10
[  200.279074][ T1108]  ret_from_fork+0x4b/0x80
[  200.283589][ T1108]  ? __pfx_kthread+0x10/0x10
[  200.288220][ T1108]  ret_from_fork_asm+0x1a/0x30
[  200.293137][ T1108]  </TASK>
[  200.296270][ T1108] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  200.303655][ T1108] CPU: 1 PID: 1108 Comm: kworker/u8:6 Not tainted 6.10.0-rc5-syzkaller-01193-gac26327635d6 #0
[  200.313984][ T1108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  200.324216][ T1108] Workqueue: cfg80211 cfg80211_event_work
[  200.329942][ T1108] Call Trace:
[  200.333221][ T1108]  <TASK>
[  200.336177][ T1108]  dump_stack_lvl+0x241/0x360
[  200.340860][ T1108]  ? __pfx_dump_stack_lvl+0x10/0x10
[  200.346066][ T1108]  ? __pfx__printk+0x10/0x10
[  200.350665][ T1108]  ? vscnprintf+0x5d/0x90
[  200.355088][ T1108]  panic+0x349/0x860
[  200.358988][ T1108]  ? __warn+0x172/0x4e0
[  200.363146][ T1108]  ? __pfx_panic+0x10/0x10
[  200.367572][ T1108]  ? ret_from_fork_asm+0x1a/0x30
[  200.372543][ T1108]  __warn+0x346/0x4e0
[  200.376526][ T1108]  ? __cfg80211_connect_result+0x19ea/0x21d0
[  200.382507][ T1108]  report_bug+0x2b3/0x500
[  200.386841][ T1108]  ? __cfg80211_connect_result+0x19ea/0x21d0
[  200.392822][ T1108]  handle_bug+0x3e/0x70
[  200.397000][ T1108]  exc_invalid_op+0x1a/0x50
[  200.401544][ T1108]  asm_exc_invalid_op+0x1a/0x20
[  200.406393][ T1108] RIP: 0010:__cfg80211_connect_result+0x19ea/0x21d0
[  200.412980][ T1108] Code: a4 00 89 c3 31 ff 89 c6 e8 73 24 b1 f6 85 db 74 29 e8 3a 50 97 f6 84 c0 74 27 e8 21 20 b1 f6 e9 84 00 00 00 e8 17 20 b1 f6 90 <0f> 0b 90 4c 89 ff 4c 89 f6 e8 68 23 00 00 eb 91 e8 01 20 b1 f6 eb
[  200.432584][ T1108] RSP: 0018:ffffc900043ff9e0 EFLAGS: 00010293
[  200.438652][ T1108] RAX: ffffffff8ae50709 RBX: 0000000000000000 RCX: ffff888022468000
[  200.446649][ T1108] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  200.454653][ T1108] RBP: ffffc900043ffb00 R08: ffffffff8ae502d9 R09: 1ffffffff25f78bd
[  200.463082][ T1108] R10: dffffc0000000000 R11: fffffbfff25f78be R12: ffff88802e3fa098
[  200.471442][ T1108] R13: dffffc0000000000 R14: ffff88802e3fa018 R15: ffff888074534000
[  200.483379][ T1108]  ? __cfg80211_connect_result+0x15b9/0x21d0
[  200.489500][ T1108]  ? __cfg80211_connect_result+0x19e9/0x21d0
[  200.495862][ T1108]  ? __pfx___cfg80211_connect_result+0x10/0x10
[  200.502037][ T1108]  ? lockdep_hardirqs_on+0x99/0x150
[  200.507245][ T1108]  cfg80211_process_wdev_events+0x356/0x510
[  200.513147][ T1108]  cfg80211_process_rdev_events+0xac/0x110
[  200.518949][ T1108]  ? process_scheduled_works+0x945/0x1830
[  200.524774][ T1108]  cfg80211_event_work+0x2f/0x40
[  200.529735][ T1108]  process_scheduled_works+0xa2c/0x1830
[  200.535341][ T1108]  ? __pfx_process_scheduled_works+0x10/0x10
[  200.541465][ T1108]  ? assign_work+0x364/0x3d0
[  200.546085][ T1108]  worker_thread+0x86d/0xd50
[  200.550684][ T1108]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  200.556582][ T1108]  ? __kthread_parkme+0x169/0x1d0
[  200.561615][ T1108]  ? __pfx_worker_thread+0x10/0x10
[  200.566741][ T1108]  kthread+0x2f0/0x390
[  200.570819][ T1108]  ? __pfx_worker_thread+0x10/0x10
[  200.575935][ T1108]  ? __pfx_kthread+0x10/0x10
[  200.580526][ T1108]  ret_from_fork+0x4b/0x80
[  200.584943][ T1108]  ? __pfx_kthread+0x10/0x10
[  200.589533][ T1108]  ret_from_fork_asm+0x1a/0x30
[  200.594339][ T1108]  </TASK>
[  200.597623][ T1108] Kernel Offset: disabled
[  200.602237][ T1108] Rebooting in 86400 seconds..