last executing test programs:

26.852435768s ago: executing program 4 (id=1084):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x14, 0x34, 0xb, 0x0, 0x0, {0x3}}, 0x14}}, 0x0)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x4f)
accept$alg(r2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="560a00000000000079113000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES64=r3], 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c0003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x50}}, 0x0)

26.454469169s ago: executing program 4 (id=1090):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0x2, 0x0, 0xa, 0x2}, @generic={0x5, 0x0, 0x0, 0x2, 0x2}, @jmp={0x5, 0x0, 0x7}, @jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0x2, 0x0, 0xa, 0x2}, @generic={0x5, 0x0, 0x0, 0x2, 0x2}, @jmp={0x5, 0x0, 0x7}, @jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = socket$kcm(0xa, 0x1, 0x106)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) (async)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x10, 0x1403, 0xa21, 0x70bd29, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x48844}, 0x20000004)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r6) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r6)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6)
sendmsg$kcm(r5, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059)
close(r5)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) (async)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f00000004c0)={0x0, 0xd5, "4aa4bfc05d96cd170c7405c2fbe26049d73835bd7ca585556dd64e3f1ae3e5ecb51d1f517a80b82e0121bddfd886be698a51e470479ce02504a0e004923497d5d0989155f90fb729f769fce46dbe16c6c4472e8c213d4b63418bce89be4a12616c1adba488ae223a6f312c72177a082814e0cad2cf84aeb29652c8cd2b908fc4c1d742f4b2606888c72fb8bd54d72f214027bf3ba1c3c02601cb6e8e921089d17f0273b1c75c5bbfda002c79c51933e87c583bbd7a7bc4b6075183e91b9b5f6edb0deec19d72d6b4a96a1b8968249ad8943fd6c6a7"}, &(0x7f0000000280)=0xdd) (async)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f00000004c0)={<r8=>0x0, 0xd5, "4aa4bfc05d96cd170c7405c2fbe26049d73835bd7ca585556dd64e3f1ae3e5ecb51d1f517a80b82e0121bddfd886be698a51e470479ce02504a0e004923497d5d0989155f90fb729f769fce46dbe16c6c4472e8c213d4b63418bce89be4a12616c1adba488ae223a6f312c72177a082814e0cad2cf84aeb29652c8cd2b908fc4c1d742f4b2606888c72fb8bd54d72f214027bf3ba1c3c02601cb6e8e921089d17f0273b1c75c5bbfda002c79c51933e87c583bbd7a7bc4b6075183e91b9b5f6edb0deec19d72d6b4a96a1b8968249ad8943fd6c6a7"}, &(0x7f0000000280)=0xdd)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000340)={r8, 0x6, 0x5}, 0x8)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r9, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000, 0x0, 0x2, 0x0, &(0x7f0000004e00)="f86d", 0x0}, 0x50)
socket$inet6(0xa, 0x5, 0x0)
socket$inet6(0xa, 0x80000, 0x1)

25.582192677s ago: executing program 4 (id=1101):
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000060000000300000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100000000007bcaf17568e3c4e200"/28], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000004000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10)

24.059584608s ago: executing program 4 (id=1105):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004600), 0xffffffffffffffff)
r3 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f00000000c0)=0x80000, 0x4)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYRES32=r1], 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf94e600486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e20004db0"], 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000004c0)={r5, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x5, 0x0, 0x0, 0xa8, 0xfffffffc}, 0x9c)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={r7, 0x6}, &(0x7f0000000100)=0x8)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000200)={0xa0000004})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000004640)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000004700)={0x0, 0x0, &(0x7f00000046c0)={&(0x7f0000004680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf717f00000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x800)

15.594612798s ago: executing program 4 (id=1105):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004600), 0xffffffffffffffff)
r3 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f00000000c0)=0x80000, 0x4)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYRES32=r1], 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf94e600486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e20004db0"], 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000004c0)={r5, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x5, 0x0, 0x0, 0xa8, 0xfffffffc}, 0x9c)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={r7, 0x6}, &(0x7f0000000100)=0x8)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000200)={0xa0000004})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000004640)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000004700)={0x0, 0x0, &(0x7f00000046c0)={&(0x7f0000004680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf717f00000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x800)

4.101454315s ago: executing program 0 (id=1261):
r0 = socket$inet6(0xa, 0x3, 0x3c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000064000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000208000140000000000900010073797a300000000008000a40000000021c0008800c00024000000000000000000c0001"], 0xac}}, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000800)="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", 0x2f5}, {&(0x7f00000011c0)="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", 0x274}, {&(0x7f0000000fc0)="05437c9854459015365cecd5d5e3a2cc2a69b17ae5104eaea9c9d01a", 0x1c}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x40)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x2eb7}}}]}}]}]}]}}]}, 0x6c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073116f00000000008510000002000000850000000900000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

3.656577425s ago: executing program 0 (id=1264):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x24, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x24}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001b0000000600210080"], 0x24}}, 0x0)
r5 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x470fb74ebad216d2)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req={0x9, 0x1, 0x5, 0x800}, 0x10)

3.413961582s ago: executing program 0 (id=1266):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0008000035926e595403ce2d19441cc400000000000000000000000000e40e000100000000000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0}, 0x40) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a40)="9a6337", 0x3}, {&(0x7f0000000b00)="be5323e812e8f54059da95e78af3e040fd8578c4b4a352a56132134f71", 0x1d}, {&(0x7f0000000b80)="ff8174cec15d7b603fac06d785cbac54", 0x10}], 0x3}}], 0x1, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
epoll_create1(0x80000)

3.141168994s ago: executing program 3 (id=1268):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async, rerun: 32)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) (async, rerun: 32)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='thermal_power_allocator\x00', r1, 0x0, 0x8}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000000000006a0a00fe800000008500000028000000b700000059a700009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

2.684002434s ago: executing program 3 (id=1270):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f0000000340)={0xa, 0x0, 0xb6, @empty, 0x40, 0x2}, 0x20)
close(r1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r3, 0x10d, 0x8e, &(0x7f0000000200), &(0x7f0000000080)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xd985, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket(0x10, 0x803, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x2000})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
unshare(0x24020400)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2c001280280001800a00010071756f7461000000180002800c000140200000008000000108000240000000010800034000000110140000001000010000000000000000000784008a30591a2435f2b32b39dbcd2203322a6700344178780cda5f35"], 0xb8}}, 0x20050800)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3ff}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@deltfilter={0x19dc, 0x2d, 0x100, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xb, 0xa}, {0xffe0, 0xfff1}, {0xfff2, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xb, 0xe5}}, @filter_kind_options=@f_fw={{0x7}, {0x19a0, 0x2, [@TCA_FW_ACT={0x1994, 0x4, [@m_bpf={0x130, 0x6, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x86a, 0x8, 0x6, 0x119, 0x3}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x7ffe, 0x0, 0xf, 0x1f94fb78}, {0x8, 0xfa, 0x81, 0x2}, {0x2bb, 0x1, 0x0, 0x9dce}, {0xd, 0x8, 0x1, 0xb}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xb4, 0x6, "f1106914c5f17adcbb3543b5d7e17d36219e8c0704002cd8d3e099bc19563c38a6cb03cc7b1da160e20afe0a92a2d9ec587efda3c12a24c92912d96c2cbc715cb538a5851f43eb84ad8a0c5f76ee1f588b96f8ccfd878b68317320658adda577eb0bf168f01957ce60ca31233104b9c719b3270102f21e2ddc97e4b1234b4b9b4d2a90351306703d4a4cd3ff090091cc351b1d39343901ec029361dcce0912917172e6a8742148f897c79f2cb2c78dff"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x154, 0x1f, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x9, 0x8, 0x8, 0x8}}, @TCA_DEF_DATA={0xb, 0x3, 'vxcan1\x00'}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1, 0x7b3b35f52d88d4bd}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0xe0, 0x12, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x24, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x7}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_PRIO={0x8, 0x3, @val=0x5}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xf5}]}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x3}]}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_TYPE={0x6, 0x5, 0x8001}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x40, 0x6, "45d0f578e3e190878947866d504e816471646677e477790cd6b4ed7e585a00863f83027cfb05331bfc9108a0ab5b8664a57139b3f6e413c193e61d4b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x9c, 0x6, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x401, 0x6, 0x2, 0xfffffff7, 0x7}, @multicast1, @empty, 0x0, 0x1}}]}, {0x4c, 0x6, "cc0b1983bae88ab66f570f9c426881d9212b259e339f38147a99d19fba707c09e55683d2a57d0d5f440b01d8e0072c40e29d63858a364a4303fdfb122de9afd729aa9c83788151e4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_tunnel_key={0x60, 0x18, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}]}, {0x13, 0x6, "69f5fd242433a3a2677e760d7c0a15"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x120, 0x1a, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xc90, 0x401, 0x3, 0x5, 0xe}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x8, 0x6, 0x4}, 0x7}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x7, 0x1ff, 0x9}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x2, 0xffffffffffffffff, 0x5d33, 0x2}, 0x6a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffa, 0x0, 0x10000000, 0x3, 0x7}, 0x67}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x101, 0x4, 0xfffffff8, 0x1}, 0x79}}]}, {0x49, 0x6, "553ea49b73da0f5a508f435ed97cfaf87478c6d2b2e87ed560c16c303a1591ab30fbda30b8381547b50c0ae12443c0cfcce7c860fafbbf6a2d23b82d077a4fde2947125a04"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x28c, 0x1c, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x88, 0x5, 0x3, 0x7ff, 0x3ff}, @multicast2, @multicast2, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x5, 0x20000000, 0x8000, 0x200}, @private=0xa010102, @multicast2, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0x4, 0x8, 0xffff}, @multicast2, @local, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffe00, 0x7, 0x3, 0x6, 0x1}, @dev={0xac, 0x14, 0x14, 0x41}, @local, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x78, 0x7, 0x0, 0x4, 0x3}, @empty, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa00, 0x8, 0x7, 0xfffffff8, 0x800}, @multicast2, @private=0xa010100, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xab3, 0x0, 0x0, 0xd7ca, 0x4}, @remote, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3ff, 0xfffffffc, 0x6, 0x40, 0xb590}, @multicast2, @rand_addr=0x64010100, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x38, 0x416f, 0x8, 0x8, 0x6}, @remote, @remote, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x3, 0x0, 0x5000}, @private=0xa010101, @rand_addr=0x64010101, 0xffffffff}}]}, {0xd4, 0x6, "8bae6f93c75da5e733c7a56ca0d0239ecfb5f55f3cea109d448ef1cc77bab6edbaa051dc6de7fd7b500354a5c4e03a2fa47a7d15cedb3b2333d28079ea246d94399a57983aad7da365976414f825a874a6cefa4076a00e0965516020e1556f32559642f1b354bf0d0c0610f20f9573084901e2d293e71f1aca56cc37b1a4ffbe9e9a050239da54a9508938c3235e2ad08cd5aa3c3bc5c2e850e7d7397db84ca7c964fb37ecf7b0b8d3a820e554db6771d9341ec0f2544c6a8e999a03cc99e1abe6f71b273c531c51194e5befe652d004"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_mirred={0x134, 0x19, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x400, 0x2, 0x1, 0x134d, 0xff}, 0x3, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x6, 0x6, 0x7, 0x2}, 0x3, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x281, 0x8, 0x20000000, 0x101, 0x7}, 0x1, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xfffffffb, 0x10000000, 0xa, 0xa2}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x9, 0x0, 0x101, 0x10000}, 0x4, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3a20, 0x3, 0x2, 0x80000001}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x1000, 0x7, 0xfffffffe, 0x9}, 0x2, r8}}]}, {0x25, 0x6, "1f05d032574099052e767ee6b3c3d889c3c842b35d9b9e8b0f0878938d1041d3fe"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x1050, 0x13, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xf7}, @TCA_MPLS_PROTO={0x6, 0x4, 0x7}, @TCA_MPLS_LABEL={0x8, 0x5, 0x7a76f}, @TCA_MPLS_PROTO={0x6, 0x4, 0xf6}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x9, 0xfff2}}]}}, @TCA_RATE={0x6, 0x5, {0x1}}]}, 0x19dc}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000a030000000000000000000009"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0xd0, 0x300, 0x3d0, 0xd0, 0x0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @empty, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'bridge_slave_1\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x300}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @local, [], [], [], 0x0, 0x65a8ec21371a92a7}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'netdevsim0\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private2, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r11=>0x0})
bind$can_j1939(r10, &(0x7f0000000100)={0x1d, r11, 0x0, {0x0, 0x1}}, 0x18)
connect$can_j1939(r10, &(0x7f0000000140)={0x1d, r11, 0x0, {0x0, 0xf0, 0x3}, 0xfe}, 0x18)
sendmsg$can_j1939(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)

2.087454667s ago: executing program 2 (id=1274):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000006d0500000300000002000000", @ANYRES32, @ANYBLOB="0466b9d05600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000012000000080006000100000018000180140002007465616d5f736c6176655f3000000000080007"], 0x3c}}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38)

1.854631352s ago: executing program 1 (id=1276):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, &(0x7f00000002c0), 0x4)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r3=>0x0})
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001980)=ANY=[@ANYBLOB="28000000140009052bbd7000fbdbdf25021f0d00", @ANYRES32=r6, @ANYBLOB="08000200ac1414aa08003f7dcd0a9a13177a1fb19d7a778c7ee42636cfa81f216c00938a02fefe73aabe2926e27196577c33be545af53786188a606791580b3382ce04f2389118cc4d8951d4e06429ae41422bcf60f6373a87301a5a5ee251bfcd1c11377fdd9f2a0c0878e020c208772e300321296878f0512ea36b3e88b67c5f4b851d0ce0561810772f01e05e221544202bda120f3d8674bee1530984"], 0x28}, 0x1, 0x0, 0x0, 0x46008040}, 0x20008050)
connect$can_bcm(r2, &(0x7f0000000100)={0x1d, r3}, 0x10)
sendmsg$can_bcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000) (async)
sendmsg$can_bcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r8=>0x0})
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000140)={'pim6reg\x00', 0xfff})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001a40)='cpu.stat\x00', 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001a40)='cpu.stat\x00', 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r10, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000014000000240007800c0003"], 0x38}}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={<r12=>0x0}, &(0x7f0000000280)=0xc)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@private2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in=@multicast2}}, &(0x7f0000001c00)=0xe8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), 0xffffffffffffffff) (async)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001b00)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001b00)={'wlan0\x00', <r15=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x34, r14, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "bdd7"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x22044810)
sendmsg$nl_generic(r9, &(0x7f0000001940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001900)={&(0x7f0000000440)={0x14a4, 0x1e, 0x200, 0x70bd2c, 0x25dfdbfc, {0xf}, [@typed={0x8, 0x6a, 0x0, 0x0, @ipv4=@multicast1}, @generic="fe6eba079e7f11d580c5058e824e5920f213591acabeaa787d1bcf7c9f27e63fb8afae6063ebd22cd05271388400f4d99d84aa3947d7e68ac1dd872866ec723df440ad0347fc27382e8e43b2c675c33df2b6f08687259a7f1af014b2349ca8378203b9dbf2e4b928a02fa6547985c1c6bcf2a679abb0064573f16c8bb009df25d46227511b335036223359fa8cf3c59c49b8a5d1de8b4ad112227ddcddfd03ee60b7880cc8ef61dc4633a24b579e541f6017658355dcee0921637448", @typed={0x8, 0x77, 0x0, 0x0, @pid=r12}, @nested={0xec, 0xc7, 0x0, 0x1, [@nested={0x4, 0xdc}, @typed={0x8, 0x145, 0x0, 0x0, @uid=r13}, @generic="37316a1163d83e575d76f07b084ac7d47d5b409bcf448b458b1fba15f1b80a09df51bee11664136785def26897c6521befb1fc35edc80dc2e7524d40d142a9ef5e2176ece17fb05ec70cee4e99cd265a79455ada0e99665298a2ec5b9dbc601a744df02896673b3d43197ff54bc489ebef60cacd0be542e8a9b6a393f626fa4972c965c670e79bf43864577e45bfa423a77319a163f983de71696ae32c8ec0921c91842732ce3680e7d9700cba6e0cf95fba255e9e69a11b8f85a07be92c5d56fe9963b987e6cebb02fd208bc387eb613fa1dbe9cb7ccf374489508a"]}, @generic, @nested={0x12b4, 0x12a, 0x0, 0x1, [@generic="2dfffd95d3bc7281cd72a91d20dd40c9f28a1ffd99312aa5226fe19f2b7b7a1120f39f96d03402f93abe0c333bf314dfaf687a84af8cdcec9f6a698a8c84c81a1f32b39138f385dd8303d02d613908f1576e6755a9c67b7deff0cd52a6c36ef4eda4c4450271c4b7e2d6acf9124b422af5e582c14e521501f906d72eca8cb28badd1f01d6f05c0e77c6056dbd686667218c6b64048da8295acfda0ba2f54898c248fda8aadd952e5beec7d19c5d9943759a7b64a9a7c87974d5c4f9c552fef39710a0a", @generic="282661842013ffe1fd66ea6a2e3dc33e0342e0a1d4cc1f4e90b0f826567e23308761d4dbabd694990ede1b7ed9ecbadd86c050523fec477eb4ce07ebfbb05d8013f3cf456afda86a218a0c7ef7dbf6e98bb9ba261897747051183e2275b6915a90c9d8249bde3f05f3a00bd92e0af3759e804d88d4a303c1350811da95b2d6143a16b5f83fcc04c0d1c632", @generic="c4cd5274974c7e7b8a193aba9827053225668adbb5324b828783fba05efe079c845acf3aa75ddef7c0e7c89d6a91b4c64c94de34bc0ff78f38d36c03498fe75430d78b9fd9e5f81c2ef275176f4db47e4d0bc2d5e3edcfe3631eb3aa0211715a3a0ba15ed30d854b3f1f52da9234b650b0ed152983a9f90bfd6fa33c299aa1722435ce42a656d0e59dead05e30b876147face7bae67398fac768c15a15bf963d1a1869ecb952216b7bb74082f8bde1d270984ff02a347ecdadda9b46522f1dc9e6dd68ec63dcffd809a2cadcaf6a1d607d1178115a361045f4ca6feb7cf7aa5c854d5d8eea64e722c9a045957bf5a5aada2bba28d0d8f30d242f7dc9656d17b5ae64602aa4c397898a1a83ffc6300a2a69374f1fe7416a9f59cae32c44b7259e64500bad4a96d177fe01951c93fe95d8d0865309f9b3911aead5c67806e515645328807e9f2599831401ee8b36fd202047b6b50ea2aa135a5636e3cd86d6a35d45c988b1c5b03f75a7d212a04fc75673cbfec383357f079896824948bf14f505a2c5ef0e2f5ad8c398affa510d1ab71177e41d4ba2fc31a66c035de925e7f8bfef024293b8872ec74e50f4e6e9f04944166cfd28d8366be7450fef9a2aaf077c4ff7309c4c79d0d3fc9c130d505d1716550f04c97184effeb90708b446dea8e19e815459b22e022f94857b6811d276ce8c0dae326a963b7bbbd87f601354e25f8861eb0a7a0fc53b8cd9fd85b4601d7536c1572f700ec040f4aca4907dbd0b0114f4f10946ffd8de0faae3224fba6eb6f9f41ae3d1e575117df1a1a1f5c109894e6f06a191ce5794db20ded8529b98eb788e3f3676dff19e43e5c821008daae5ee9a2b4d5b20269d7390f17bf58b09c9c3d0a43ee31133c7f9a272719f5764dacd9a396ae01376c7805e20b4da73db419980faab1d26ea119704b344e0f56ee8e80283f7309a196098e11bcc37d96546cab1d72681876b92e602fbf7f75a4a844fb7cbd1365e82ab0798e981cfe000b86a6421b4454685cd42a0d93ca7f1cf3c4c2351aa1f416a8de98a65396cbcf2288e863b3acd4b28c99755df9127a81090e6f6f967848b01b633fc5a781ef52753f8d752163ef9dd7215271f50b4d12a04529eaeba0b6fe6cae3be8854fb9b1e88128c064b405645cca97e955f1af916f30357820448b8083fb2c2871d969b6ce3b40897d77a84dc7cc459e944466a50464fd8b8e3f90e687cb9c7e48e510bb8141d3db9128ec6bf7f6756bc36331a2a6d19cf7defd5b58831c88ebe066f342f356121a3331e722e619d47d72699efd82e6a1aff9ad1b7aafe128590ea420116b69e9e1125a243f470967caea2a3db36ab1053629dd7c1fd1264f8a24abf4ece1682133b00503df6182e51e0a896c4e5a37e5972510e1d0a1d7d3df1e7575f034620696ff3a751e8d69047738a20657be12ad119f4c2fb12771a8c3bc88271ed27fde41ed19ef07347c5239784282671764b29739f8f0fccda0f283470adcce87f1357681f3ffb6e9fd2ec72cf32a37dbd0967e5b87a4285d95224e6a73190c7a300b289ed9a8334c41732229a7278fbf445a01312e740c06855c1df9ea564df8708a60728f2ba4e5d295d57624c5c0ccc090f47ff1267a4cf2a4a790bf0a1d0236233b34ed44ac605236a2fb3c879bd7da467c3340176070a827b1f29c131db50bcaa507579c355ede4dba79178ede70450c9eb6d46c9e1680088f7a32eaca4fa7bb59146ae0a88f6b4d76a42a123299bb0bc7d1c14c70576774e05ba1c71067f2379059078f92fa1213182d2ddc647ec48a461a08ec1b180b8ac14ab6486ac469301f79b7b2d8ef87915843323cdf53cdfc9b6552f209c7adfafa4666528dedbdb6cddb9e614dd0f7ae965dc627c0834a365018760a98858293825df8b25cc0b4345a2b203a20c1c2e31b50e504221ae99fa1a0d799c3968c071ab41909accf3cc97b6520bc4b3d68f75129470cf683225b6611398d885311bb1b252fe6ae51f590f5b875557344e4ec0aa93050695d47be538fb07dd8979c7aa87c64e345c72863c3f3eb9ddf2cb646bbf659412782b28758e4983e23f0eb4c969f89c310105420adc7933064848bfbdbe2bbd5819bec9f9a466fc373c518572deda76d0588abd54ef9c8e4329a2bd4e749faaf49f71992313d64722f74227b21cc5d4f37ce68a5ac903e4833148fd664fb7869b31bc99f59fce5c783ff3f11b5f4381f1e3784f1ac907922639cacbc0583b2b4bcb5d354dbdecd7f0325b4d6cd0bd3b65c3299e1259a9d94880199f9dc245450707f6dd5d3964ae161926a96af9377f3d691f93b8cbb9feece4ff8b58f6d3670211171d40374662d89ec3ffc4e5c060584f7c898dd6a10e0777571d8e80e5f67b27ef863fc8d5cadb3086723468db23cca9968704d2d37e3ca1a0abea45fa3f4929a212994e267e7a46478d430a64c9739981d2309e8004d240686c0c2bb555a9fe0b158909eee1d7d5739338c9afcc8e7c7cf27c4879b0c33d5fbbb525a653344efdf28089f113954dab1edd7735d185455c1be9988d999c10db1dcf4394b2bbf8cdaf75c710ccc5ec32d1f40a7d632a95ad722b3c4dd9e46ff3ca5b5e0067ab8c9435cd36dece979db018d07b75ac32caefd63ade36e50692548cd03fad8383510ccdffb2e86a8bc938c5b34827cbf14e9af8d4f8b5923c0f933b2d9e1d04757a48e8490dfad99a66c3af30be5bfc45deec83faf91d5b3fe819ac64a1473d698cf3e18b15374a965fa18f436e0c0ac2876a3528f2cb78d6f85fb72843b81e457b4390a1124b70b8a46212562bd5940b3df53ac9eb5aeb3150d6bda0d77a3432a6bf383343375889035c1a1e5e2a203bc8571a70115f45152523333dcbceb56263f7612a784f563a3c050a437b74daafa7d43931be43cf0561b117dd430b4749b16ed2a9331c70d9abc5a487c7dfc6b4c13ad78beffa16150dacf0901fc8d57de85fa7169138841536f465a835d5d1c03549e9246ac421f83a5bfe8c6f256a4ca36312ea112558dd48ba06a89513a10069db669703966b9cd4c79f156acec2fdade89097a3542dd12f00af9a711f0ee8eeca63b250a02013643183076beaa6c8a3133a41e6d10d8d9b36867c22ddad00922a063b35ef80cbafff3e5288b31411b965c86e8da0e292fda1cab160c3f688640efb5b5a103754b82fba082a93d8a5225b36710f4e338af44f9aa26038d284ae304d0ed4513ed0e121ea9b0354a6482a4f96e246db3a769b98589b19ef9b5ff8eafb33fef78cf8dbe8ef503ebabe0452ba6d88573cbd154deff521420d7fe1cb839e702937eeb14218d1d03d1d89c4bfd6c4e17ad0d2ec88a1e4b93fec5652f9dadcef9042fbc175f2a98b4e88091fbd27ca72167d5a6fa3583876c240abafa8be4cab78aac269b965894a3d47cf99ce19512ea7d05c58cea5bba992cef958ab1f13cce57c399cc5fa5c0d9bd8ca9a7c239899901f37bdc37d02fe7d171c71b7794e1878ccd7a0e12806c52aa560fe0c602ab9239f7b4a0475b2877a53a462abb139c0241fddf12538ce68ce653970d04c57085634ab9e176760796426d9b692a6552f8e6a8e1ba3a1b43cea9da25e7790bb62451fe89e71716458a80e162eb35f7888aebeb232d552c19b54373416a2898b0e7e6eaf305aed3e1b26d2c5fcfa8c8359e2436e0eeb0a8fcc9b773f26a003b7e2a882c1f20d5d372ffb5d58511bd947d641bfe5f80fbcdfb088f54fb9495b05553fe77c37c7803524002938b1f3f65888b6e583bc20bb357c820a8a5c1d7b687fc7e9846d2e5dec512903fc90d4a5a44129bde66a04be35db71684ce1b85236a5046a9170912ba391e26c9800e46648035eb2177218c20a7224e764bfd4ca645f3dd0a9205ae8d19bd8cba5cada73f72e508f3b4f11a38a1d553c51524b3c49dd1551f00cf2d4d33f88dc4e273b33ffa8a8774710d09b6fcb630bee7ccacce73c009cf82952291dd619979d35897ecbf152c6eb989db0c4ed0cbd1fd0937bce05299050afd49f04215f4abf99249de5e61fb6c2675f15f669affe78e85730fe93a716cd635e86adef056dfbee56ed128c33e752a313f7f83b84a1a582a0b2bc8db27b3680916857f8a0235448a4458e034ccbdf581fb6d073dfbf2e8a6c607fb0c574fbd0ab16dc788902ec55e0bcec92b7b59ac686ff2e2a6eb3c7bb6799871f11fca96f0be97875c8c8ba46bc9442c6e7002c07623ab7f21aec8c5627aed85e81b821bbca5139cdb3d0970c7e2176dc0a003a6286e4320ee3a86473e32ca29efface70af5cd4d1dec4e94fc725e082f594feeb6074ee16f185377cb4bd3cd8fc8e0350b8dd29aece3807ca6f618e45f09d83dd95158ef477b7996aa95b437ef90cd10ef0e50373e40b020cb81cd3cf224068275e8a208d38798bb90e67ca63b1aca54dacfc08e5b8f88b40a8ead5f8dfe3531710412c2978ca7cc737f125058ab1c85c4157850a1499bcf58e2183b6a4c64ae0cd35204ab30d43af7d12f530d71fcfb3a465ed2f646a5bb2817f0ba62f33482e6db3ae377efc9288c59979e941478a8a723bd2f2987c704e395ae6fc8dff7f4b92bea99006a178203a1c2ea81ad6438f387975fb71c539d7f4d80378e440474427600cdbbd73e2db487e6a13dc58f6e68c073355c12df383919886dcb5ce516ecc82ba9be8538304c4ea8030d99ebbf80e1abdfc3dcb1535c3193d62b41df524ecd9845bfd4474050705a782230b3f997c222f4c7122143711e8ce3877ecc1d2192996e8c7b91036b07cbaa51441513744abce290b0d5bff6c4e5254fb361da24763e8bf2667e047ed676e96029f65f839a22e9db2f2adc56f14b03a21e97b52374d9655d5e696b63d4b01e64fb9c1483acd87463f6f06e5f95b71572c434645b4f3dc882f5be8d135815836278c198e06d882ae8e5eab87e7a6b23d27b661cbb9f1cf8b4cb2d4aa596513b21441578852283e33924bf60264830c5364d8dbd58aa570b3e774add09e0cc31fc033fd52058537857bec3940d70747858f35f55f468ef9da40fda9aa0d2a1a77fc7065522d540a071873f7fede1906feb0dc5f221ba989dfaaf68077b0b09f258e4639b1d9f0665f88f6b54be72e73683226a157f7cf431d76f7795279dc02ae23466d713eedfb65adb108e75c910fa04a133cb1ac22b2bfbe328a00bc99275ed2fe86c68f7112b6f73e224fa97bbd6f23967d0b0dc896a6555c5d5710b283a94702e86c373ab18a60d7e35ed3010a2426a7d12fd26b4abfcfbb18154db3bf2303d180f331bde98570aaac91bc0b8a28197aa329df32f20b790b25d3790cac3cfee012b3134efbe414f9a862cbed1bc8886f3214cd8262f140e5eb731569c3e373348c703b77d4e52e33272f5fa9b2e24318526b05b3bcb6821e650eda40e088dd19b0679b19818256b14bd304e42698676bcbf800d6e410b89094320afcb121d5046b97ab91a50b94d4de754fb4298365c59a5121d6dc23d37bc1fdca51324fc1290d3d6f3b15143b7a8b0aeaf0a8c87c84a52a03e979e3c930c5ddd1ecd1e94f060b3adc6a2ef07ac3684d19ea0bdb7cd82363a003dd0ffb6b33395540fdd07a533ff92d3d0517d869937f3feeeb0b8618e50195ce238933811e93db9db62e7587ef25cb908445bd1baa74639008ba692183d8571a7d1ffd60e28a092aa19cc78f72eccbfdc0b4fe26c094f82936de266a3259f0b9a4c1cabbbfe5adcdc35b7249b76cd244c8925057cbd4ce86c0f026b97a416407fff43117146cb0a7d", @nested={0x4, 0x6}, @nested={0x4, 0x8}, @generic="b5b954818a64ae9bef42e104f1a865cbe92f8c5174025fab0d9e63d1c558c7042b57c8212c3f9b753179fe6696c58101cbca90501d6b185b68853bc59056601e51488350568a538d1d6c27e1df09257c12f9", @typed={0xc, 0x123, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0x6b}, @typed={0x4, 0x2f}, @generic="1cc0d4b429d0e41f38a13ff9133c14a3c686b34db4e0031a2498b588e504278372c571d8aeeeba8efe8035969c1644e2fb09c05b689d533348a70a562a416115b7de1477bc28de10ec67994b23405a9be0a82e6b7f1fa03537999c81d04884d687d09988db9c4c1b7bcac0f5d8d609eeda8d0783adff9550186659c3583db463b110f6951c97cf851f1e8c9554eb9c7ed8e277253d12eaa1bd3b1a073305b6c4821b86298fac35a8721055e020173cfa772051634f5170219ce1d43a31fee66751b86f9e59aa3cb462e236d3deb5c174dc8197c5b9dd010f4c9e7a9622eb932fbf33a90a80ab0a71135d3c87961deaec5709add2"]}, @nested={0x10, 0x61, 0x0, 0x1, [@nested={0x4, 0x149}, @typed={0x8, 0x1f, 0x0, 0x0, @u32=0x9}]}, @nested={0x14, 0x16, 0x0, 0x1, [@nested={0x4, 0x11d}, @typed={0x8, 0xe7, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x4, 0xcd}]}]}, 0x14a4}, 0x1, 0x0, 0x0, 0x30000800}, 0x1)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x34, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {}, {}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x3d, 0xfc}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x34}, 0x1, 0xf0ffffffffffff}, 0x0)

1.792060916s ago: executing program 0 (id=1277):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
socket$netlink(0x10, 0x3, 0x14)
socket$kcm(0xa, 0x5, 0x0)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r2, 0x800000010d, 0x2, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000000)="38000300010003", 0x7)
r4 = socket$inet(0x2, 0x2000000080002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0xfffff9, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108)
getsockopt$inet_int(r4, 0x10d, 0x16, &(0x7f00000001c0), 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r5, 0x1)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000440), &(0x7f0000000480)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa7"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close(0xffffffffffffffff)
socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x2, 0x2e, &(0x7f0000000680)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

1.68878516s ago: executing program 4 (id=1105):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004600), 0xffffffffffffffff)
r3 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f00000000c0)=0x80000, 0x4)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYRES32=r1], 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf94e600486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e20004db0"], 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000004c0)={r5, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x5, 0x0, 0x0, 0xa8, 0xfffffffc}, 0x9c)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={r7, 0x6}, &(0x7f0000000100)=0x8)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000200)={0xa0000004})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000004640)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000004700)={0x0, 0x0, &(0x7f00000046c0)={&(0x7f0000004680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf717f00000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x800)

1.448203471s ago: executing program 0 (id=1278):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x10, 0x0, 0x0, 0xd28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000600000003000000000000859800000000303061300083374030797ec1e8e9e445d6d679d16e6b9fb84de2d11726cd6f933f0458254050646ff079ed25887176cf3e8632bd5806be3f4b196278c58ca785b45f3ffe4c5fdbd77d5677af292ffb37950811a213f31db776ec3faf1d3d1883f6320eff2326f51e35ede67f59cf7786efe4d8a58120ad67eff5b057088998c41edf0228e2411acb50b73241748d33bf1f3fdfaebe09"], 0x0, 0x2a, 0x0, 0xa, 0x5, 0x0, @void, @value}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32, @ANYBLOB="ff7fffdf00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000400"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4, <r8=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r6}, 0x20)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'sit0\x00', <r11=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={@local, 0x33, r11})
setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000004c40)={@private1, r11}, 0x14)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r3, <r12=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%-5lx  \x00'}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x13, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffa}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ldst={0x2, 0x2, 0x4, 0xa, 0x0, 0xfffffffffffffffe, 0x8}, @map_fd={0x18, 0x4, 0x1, 0x0, r8}, @generic={0x5, 0x5, 0x5, 0x7, 0x939c}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x3, 0x12, &(0x7f0000000680)=""/18, 0x41100, 0x9, '\x00', r11, 0x1b, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x3, 0x8, 0xd, 0xb}, 0x10, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000880)=[r4, r12, r5, r4], &(0x7f00000008c0)=[{0x3, 0x3}, {0x5, 0x2, 0xb, 0x7}, {0x1, 0x1, 0xc, 0xa}, {0x5, 0x2, 0xd, 0xb}, {0x5, 0x1, 0x6, 0x1}, {0x0, 0x3, 0x2, 0x6}, {0x4, 0x2, 0x1, 0xa}, {0x4, 0x1, 0x6, 0x3}], 0x10, 0x7, @void, @value}, 0x94)
r13 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r13, 0x84, 0x1f, 0x0, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x4)
socket$unix(0x1, 0x5, 0x0)
write(r14, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x2008095}, 0x0)

1.439479248s ago: executing program 1 (id=1279):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002a000b000000000000000000070000000800030004f000000c0001800600000088480000"], 0x28}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x103, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x6b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r6}, 0x10)
r7 = socket(0x1e, 0x4, 0x0)
setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
recvmmsg(r7, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x79e341a07b70ed45, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x40, r10, 0x400, 0xffffffff, 0x8, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xaf5, 0x46}}}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r12}}, 0x24}}, 0x0)

1.387148845s ago: executing program 2 (id=1280):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x9420f000)
shutdown(0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_netfilter(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={0x14, 0xf, 0x1, 0x801, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x48800)
sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x0, 0x29a2dc66b6ef219f, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x240400c1}, 0x4c000)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)

1.385587933s ago: executing program 3 (id=1281):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00')
ioctl$NS_GET_OWNER_UID(r0, 0x8004b707, 0x0)
r1 = socket(0x10, 0x4, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x7)
r2 = socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x8, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x3, 0x3, 0x3, 0x1, 0x0, 0x4b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0xffffffff, {0x60, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001"], 0xb0}}, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1)
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000ffe000c000200367da1650e000000280003800c00017f01800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r8], 0xb4}}, 0x8000)
sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022bbd7000fedbdf25010000000000623a69703665727370616e30000000000000325d940000000000000000a1fbc9fb9762f809a5d139d5af5c89523b85482d8d33fc3e53088ca461a33f8f542262633778d32d3843c45c42056bce6947852ec7379cdd9bb5f100ea652ce5bf0683e456387e3633617566243cc3770aff26126d3545cb37a0147671a1479b7ea736548dcca3787a69b7770ed420f88a30f1724c8b6262"], 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x40015)
write$cgroup_subtree(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2d7267e93f64245f646d61202b846f202d726c696d697420f1d288deaad1d8f66c696d697420000000000000"], 0x26)
r10 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x4400, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56245, 0x0, 0x1, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0)

1.128098284s ago: executing program 2 (id=1282):
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)='7', 0x1}], 0x1, 0x0) (async)
vmsplice(r0, &(0x7f0000001500)=[{&(0x7f0000000180)="db", 0x1}], 0x2d, 0x0) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100001f000100000000000000000006"], 0x114}], 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x1}, 0x8) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000200)={0x0, 0xd1ea3de3, 0x7}, 0x10) (async)
r4 = socket(0x1e, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4) (async)
ioctl$SIOCRSSL2CALL(r2, 0x89e2, 0x0)

1.12477813s ago: executing program 3 (id=1283):
r0 = socket$inet(0x2, 0x6, 0x84) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000004c0)={r2, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90)
bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
r3 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) (async)
bind$inet(r3, &(0x7f0000000180)={0x2, 0xce20, @multicast2}, 0x10)

882.06846ms ago: executing program 2 (id=1284):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="a647dd05f69a67d72a83f8ec7a3a7fbb276b34d8ff03e1ac82dda97a96fc77cccfa4540f618debc34351d5ec4c5621f2ff78dac1fcf9931310b9507b15c3ffd525fd2d1a35a1117618f5adf90bcee8c9cc45c332c3fb89f6581db90fdb8bf63f0649d9b2205844", @ANYRES16, @ANYBLOB="c88845e7e05ae52d000093"], 0x1c}}, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00', 0x3}, 0x1c)
sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newtaction={0x48, 0x1e, 0x109, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0xe, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400461c1d67f6f94007134cf6efb8000a007a290457f0189b31627287ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a15a8b16f14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f211ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941c6a0501148", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x24080000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012dbd7000fedbfbe4170000000ca31b00c49400007b00010005008a00010200f304008a000300060005798ec5ba711e7b27008a0002000000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x24000840)

798.909525ms ago: executing program 3 (id=1285):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@bridge_dellink={0x34, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x8}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0x5, 0x6, 0x0, 0x1, [{0x8, 0x2, 0x0, 0x0, 0xfffffffb}]}}]}]}, 0x34}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x10, 0x3, 0x6)
epoll_create1(0x0)
socket(0x1d, 0x2, 0x6)
socket(0x1000000010, 0x80002, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
bind$packet(r3, &(0x7f0000000440)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xd66}})
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

635.871365ms ago: executing program 1 (id=1286):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e25, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000001440)="95", 0x1}], 0x1}}, {{&(0x7f0000000240)={0xa, 0x4e24, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000340)="2e1bd28570", 0x5}], 0x1}}], 0x3, 0x20000004) (async)
shutdown(r0, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x82}, 0x1)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000000000000000000200000000010000000000000e0100000000000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, r2, 0x2, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={<r3=>0x0, @in6={{0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff0000}}, 0x7}, &(0x7f0000000200)=0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}}, 0x25b8}, 0x90)

512.441393ms ago: executing program 1 (id=1287):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0) (async)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100), 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r3 = socket(0x2b, 0x1, 0x5)
setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
socket$kcm(0x29, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="5e785b720000000000020800000000df5700000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/12], 0x34)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73, 0x2}, 0x70) (async)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73, 0x2}, 0x70)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x5, @mcast1}}, 0x0, 0x0, 0x3e, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb499419be4f9142da0bc21470e441225642855b5f2b4b67efbff2fdf98328de9434031348589b763d46d14810acc5f7000000e3ffffff00"}, 0xd8)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0) (async)
listen(r7, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0) (async)
listen(r8, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0)

390.767894ms ago: executing program 0 (id=1288):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xffffffffffffffff)
sendto$inet6(r1, &(0x7f0000000340)="a4", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4)
unshare(0x2c060000)
unshare(0x24020400)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x3}}}]}, 0x38}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="140000001b0000000f0000000400000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000000000000000000000000000000000000000000b54c6821d86ebc7ceaa9717d061f7062268d15ddea3d96d099d94bd93fb67d40bab3a3ab9b394635a1f2ce7a2a3d1461a1b0166149fc1c8f0d2626c6fd07a27ffd77ce2c5f7f75b7558758d850f4b2df69fda454cb8e87acab7d8c1a826d9a159562298d89be9d660e3fd36213260f2cfdb4a6676c5822d71a31c7dbdfc17da7e01114ec006a601f25ef28d29b4bb55284052d8518c3d76995039d2cd5e3a4521b9514e0948267a07aab43a067ce87ec19a7db2d0b967333098604e4a0e2016622b01ce2deccbcd0bbe2bd3a776b9cc118395d6aabf7ad"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x38)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newtfilter={0x1388, 0x2c, 0x300, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff2, 0xe}, {0xffff}, {0x6, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1358, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x7e1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xa2}, @TCA_FLOW_EMATCHES={0x7c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfe00}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x299c}}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x4c, 0x1, 0x0, 0x0, {{0x6, 0x0, 0x8}, "dc33a2f2aa0730c9a2f23ae68a96f7e948f3288e9cc082e686edac18d99dff9c58768ebe79da0e07fbce927f8e706c93321277a143e2a34348f5dd1311"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x67b}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x9}, @TCA_FLOW_ACT={0x12b8, 0x9, 0x0, 0x1, [@m_vlan={0x1078, 0x4, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7ff, 0x1ff, 0x7, 0x80000000, 0x16}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x4, 0x6, 0x9, 0x5}, 0x2}}]}, {0x1004, 0x6, "a6e503a613aae6fba8025bc3a69bd2a0ef03b6e06ee0d7a2fd564b75b87085d92738511c752c8958d5bde0eefdb3f3f5f516625d1becbe75dfc2a2cf537196cc7f33c6ce2fb1320e489dbd061545a8cef60918a4bea01f73f4b85e7c433887a3ab79446f2620bdbb5129bb22e6b618a4275ca57aadddf97a3fe66f6da9997909f1ffbea4ea8bc832518381b66ee853c3163708234eb8d55bf0ea4908085aa8755a84e0b2bf787fb8b4df28164cb66df6a196aa1114b655a423abc3ba7aee41e5cc76a42defe55427ffa58127698a353f102e69126f55b9aa76b5c02d360f3763d3919e2ae8e216b5e4633a79f37be56e4316c88e2936f3ff75dd2dcee9e1c79db699e9b9b7724405cc859c23960ac657b243b08824aaf5ca1df827889b8d8362ce753961984712ea84792a5589e890ffc85d3471a864237754baafb8f453cfd61f699099753230c6d931fe29f20e6de096df12cfc25cdf0a2cf7e2b7299fd46289b9e8ec5539d878b7c7f2d18a4e33617551371b70261d2ba88d47061737576278fdcce7bb96a338af74244ca14c8c231021c96096257252c9496cc9aa9677f083991e8f11fad1aef9ef87a17f97192150698bdc8051f70d2821725b29c358b0d944daf206f1c96731ec02419d6ffeac2109c1b54ade9670da2e2750d3517461b1c1491861c66204117e57f7259087de77c9805bc7e35c7e725dedd9ad8cb2d121a7db00fe0fc2cd29560d4270bae0d92d82096dd1dfa7270363807cf1567f2e039fadc398bfb956348e10fb2cfac312574e3b761140f5309f7123c1e997055e83704a7bfa562b8823cd8a4a0178af0a2aab0498e56a33b10df4007b6aca6d14c59a852579a858870c88bb8852fc3fc365409a57cc2ddcd5ce023cab4210285a9ac66dad48f97ff2e9897b45b90b2d4d78da5be8d37a0b83fa524377be38180b56d7eff911c833bbf0864f810f52656ef99c3edc2f306ec567586ccad9073ac49b94d8b2fd3e0d4937e443591241687f0d7fbf88d0ff6c094ea05aacdb1678f0acdfaeab411310e7f35be4963927158b99b9e597d0362253ef5a865f52ce06e262587c3fd4469b105d9b7439901a825468ccb9efb654b4e679ec118730b19fad50d2b0f8532506a6cc858aea072695905c6cb21d19526a2f0bf4bc470b645d97a3f579235828f5d993daea163ccf0549744bff73b1ee55a166519c732bc91566a41365bc0b2a700037a917968530211f577622aad06f73768033105616d55f0e399fa1329edf18614ff958c693d20ff1b8ce3816116c71d4ac9841709889e24cb70974d01a0341e4b4f97b36862b18aeeb68a6b156f1d35fb3d23d7920e3b4ef28e288941608a8258c5929f7190d68af15d2b049d91a69b5d77eea5b9069a4e17dd9667b1e73381b7d73ecfcf8673a8911754044d0b466d9305f258e2db1179824b749f692a2e41b4376fb06f66bef564bee34fd91cb54c432d0f69dfde8cb5b9942bfbfe080bce5d27b2eaff72f5ec0b71188fbd6ea96e1d4f4d65e3c7b874751a58513e47b567cae62ece1d79242d56023514006b5a6683780b397a2efa027f14f4cfd8374bb7ff773930c2e0ca343e8ad81369bb2517463b72609ed055e25bf0539ba6989c5a704912f3c50d9e8b75c7416b372930fb7d273ba425d993093610249336c3cf494a137e343e948940cf8bba1593b4eb54ed9b474e600f340de48708e1f5aae79e0e76e5a907660a71a2fc23955c1f2de7628c9046c0742680275837ff942590c533e53c4a466bdb71cbcd8c139f629f6336ec0ebab3411739060016f510d036f565f80e134e1921f11356294792600674c73af41d50d302f8beb24a1313b9e158ba9752908df6668d9da59ca8fbf4c890b862d270ac66f1f0aa065bcca0ee6d1893cb98a108551062100373d564a06ce45d634c23eb0dd75a52edd622587a2c50404acba43b2254409f4aa3e0352385a356c09fbc3becdb9f31698a6d55ca2581ef9eea22d2f8395bb927123520cd4b9d19bc1d83ba1ae708bacd6986fdb686da391bd89f61263e2a5de6076fb21c2dd5ae53eab0f0cfeae38205d78ad83ab4eecf8f14bfa16221297546a1a5f8fcd24f914f7c47066d66ee0bad0f4d735d9532d70818f983f173320d1ae9a9065b42db9eb80c35c2d480a6e2530a9db3d370eab2ceaf771d64dbf5ff907b2c543e06222299dfa0218968247f3bdf6aa81cf26f4a59da65ae276e0455d9b6d7a4ca554ec0a93d0ba728347e5b240d4e902f768067e7329207200f93180e0aa8d7e75c002e96148b7c19dea2bd84a2dcff82e2111bcd23bb9aa9f34c09462daf4f1db67f8d4fb49b72b7e81dd4bb36a1f830e1d2cb09ab8f2f31c8e70049e937cbff2832c13cf4cdfa9b7cae760178508ce6350673487a2afcee484d1affd169f2481d0a52345552ce6b38ad4f42b5ef96fdd41d5cd794bd91bb04296e5a293135fd41fb1a41efa38ff7547d29d8e2584e85474298a4434154a4e8dcb55d083666b459126a02ac4ed3170aa94231be106cd5949cff1cec3aca4c155032ac789e429f385e760a1d0f865162b08cf88270d74bcc14a90842d7163c0b0b1092d13b89d5f464ebeaa09ae9c4a7956c9dd95b0d359f89340ce37367829a003bd747acb12f92ad6c76a1e5d31e5915a32ef32b790edcb1f83ca96294ae0ae1f8e6dc354d05f7b94c1fda848ead92b1fe5359415920667106dfe04291d93575b3616422a6c0c1aa459d8a57e6212272ed6c169a263917bc0e69edfd131b0d8cb1e9e6dcf0e9da8279cf6c6528d438ab2ae12239d42ea85d451de8807512abc7e7f332eb132ca12aedec93d09a7d5a3582f8c77efb5b7f318a0474c2abb9430d943c1e13158a12510ea627fd5c4bada39a1ed3f5fced8e823e32a21d650141589f59a1603c9abb42f0d9cddd0ab52fa7660a2750c8f78df7ed9ab9ce71a78ae8073eae7b6da98b6d54155f49347d1a16a82fe044892f18db6d04d4348c5cf6b4a04636efa650112e413032b657f8398c6346750b70220a457c1bfdbf5abf1458b61e4b57598f310f5bd7dccafbfcd28a2dd85184423f654213168588abecb1f88bb52b0e1bbe7f372a43eb876ac6579099c0bff4521d413981783f9177f5b43a80e804ee717249364222e56a16f1cdbb1154c6d65fe2faf65fad7b070f2c2041e1589061479a9e25acf9b95b485d2080832ea53b1c050f7c24997bb30263546a8f7c30837e239e406e8ec26f6e1857c91f1c9c9af94a80959988d124dba488c8a37b88d63e09f7d0c6838560789dbe90ab4549486e00b8082a85876f980eee9e018f4b5d4e1af2a849cd3e49c5c624a4c0e986ed00a4fc24019756a3fe2d49df63b06646f8d23182de0943b74b970648f65e56a3b54aed004b2d7b0d027d486c28ebd4b7aab880804f991b7410bd6fa141388f12931593da079eaee306f707e32d0f03db6a36a4512cb3b16f5d53721e9655003843ab47a3341dc7430a04c69377e17d6123e4cabdb0236e12bfd10b576984137dfd5e344162fb957a0811e3b691ed8a03ec579c47062a2209b4a1ee1e954aa9f991ae0ba4f58d4c4b348dc2e3e1e7414bfbedaf4519bee161d434e641c6a60656cc85df9caa4c8be58a6b9519a2f5e99d74c3dd0a5505ee0a09144fb3b9c5a55cf4e6674cfeaf140a832465a683ee205c650f2b95f4be5621dce2446186c90e36b8bd4c8cacce9fda0308d3c8e0df0cac772305fada3984b2ef9bd0e3fe47b6533487647fc58016b8b89cefa5a297ce833e608dddea190a85c23214ae66403cadbf28b06e1b09578d2b9ba566efffb3eccc2e72e7ff66e7e350111db0030d539cfa7302016600e84dcc54182254cd34b68854d988e376c41f4b338129d9ececfd933e3a46c9bde2b8c1d429b165b4db6cfd2e5d80194fc68176daac019ee361cc4351a9af6d8ba2ddf6669a69d3c058b5a800e525e8d104a7018c1e6cb4a1eb93694d2720cd49405957887f6739cb8487d905cc21bf8fa692d74826a66e69dc49707fca2ca7d01ced362956310c4a36fce7830c0446a80a5c67a3a4e8c539294c61647b503f70616895314cd3edc75c7c6a470dbb1b6f3dfdf26ac1f2d57d7a05f707b8af83ab6e60577864746f771df45d3c682af35af09f46772d9aeafbe03c93e678b86371789294a0c0163da1ad7ac8a1c0fa3b59431d534030665076dcb491c842847f460ad600a9f0716079544c6f3c05e00aa9b833d4c2ad1e80bb70f9f1656514a66e83d69c839fba15be9487a623be79dfe521f36621756af9f4c76e729108652eb832cd887ecdc910a2cecc02e7a2c6631eeb0021787520ced3f89c50efb41933a0240ebbd82f864e22130f88240ae7542b5c002a62efd8eb4d4981d61d473f2d4509beb4bb0eb893e87db8a11cc6c056c9d9c18f1447fb8bb633c89af338018182e33eda2a9796d01675153a00a9951f10d2459d7b730379e42e190249e3a7f79754b869877474f8cf0aeed9d4021da561b57774a72c1e3a14d402dac47956da175573b3bc1db1791b58454bbf8c6d66c9a34574e91256df3be85638053e7dc8db334626270921455d1343e797c31cce0408fa71e18deec926cc98d3d3abcb70215270c0c4684fb65f4ebf5a8f435f2da0e44608a13205fa425c53a05691d98327624d9f1b98656aadd1938cf578f7cc06ab92ee963ed0d6643fc94f14f908d75b6ca754499ac9fe039a70f13a68a78007cf6f423d0209633b1fa63db27ad49546d41dd44414558dc6aa46a023ad507ee3d6709960cc9dabf5b4b10a5acc245c0997d028298e1bbbd46bdbd9702910e28629f4cae8974c38bbb9de62513176de6f7a39de0ce2bccf0e7bf72ede6ba3379e3a3bf0803dd2dec5188b6e9400a9edc24eeb90dad838687101cb95d6c8bffed463bd276894e2eaa267b9a9c71fbbedd8223886b1bcf01e2bb842ad35b049dcf6d925a0f829ee9ebf631a4b904746c82c745072d655ed65e71b29c53c0eaf2660c0a8e7fe5f534b968bd2a5d337b6d0963388f6c8c77fa7a7bd15057150dd32c644c59dcf71f8dc3762635bdf79f84dd6dcbc3cdf179f4a2ab0aef554f4f3b28f9f3179f1581b856efd8be6664f1f0603de5bf2e1e717b807b2c5d9fc3c4ab9c73a4a4f59bf1e4a55252cd7b888cc18b1a16eff5729dd307ac1b7a8bd213f434709c948ad4a4cffb470cccb9d995cc10694e5ccea6ee57e5bcb32026d4885922a6f949cbdd5de0a08804214760d98f8315cfee6ff48c1cb4c8db99825545773c783de0fd8d653ee9c399cbecdd84a32e2033de7ceff64f95fb791ba535c2edcc01dcfb409b526e43c44ca8c90edb7d131af32bd256d12ada9ae3cee5dadfca87d93e907aef49ff239f9e5ee4e92d8b67be48454f5afd87e93dbc7922240ae7073ebb862092f96bb800de52a33ef19a8761c6afc96f0b755ff8b4a0b1efc380c46c14e9dbacdd0c606c38472a110652515005005e2410e6ac42e581b29c57cbffa59e70d34e7e15a145b631c6bd5bf722c04c955e7bf19cc2be8b21250a054d2b44480052e37f041603410cc91c5f88aaffe5e02e37748508a2561f7243519648075d722cee3d2108e0208f47d31dddc664833e8b1135394a45f3075c1d68c7cceb1e65fb39ce4c7700d98046459b0510b97bbf78df482385a78131cd7eecad06cd6ce268f0b3820a33e29f2fbca2a8e46f9ebcca6b6843550336398f83415561b6dafc2faf84be7b6350cc0fef79bbee76934c3dfd75d00f4058fcca6fe91ad2a390becf9e88a7"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0x10c, 0x1f, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}]}, {0x94, 0x6, "885b6e19298c7d09b512e9f44818c58ee2baf60716f1ccd722af20f3965c195888819e1684f6b0efcb74e160bd846434b2d42ec78b919d69be9d353dc0520b7fb9516b0879da7df5da8c9d126e90e8def3e2e3db14d7990cd6f8937b6552593acf76ad4d05941dae446a91733a0a634afc1655293b895648983fbd530873b816c54fddb96a9a284b09cb5a247e996812"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x130, 0x8, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0xf7, 0x6, "c08925efdbfb458e2c029233914e5f834984efe31f869aee31973aa6db1c71ec7535a16b2ba7a12edfe3db42070ce38e66c015119feabe559df6b501f86fc5394c386e17ea221ee39998f268aec68aa538dc45524ecfdfe3c2cfd8388ee7681ea8636ca9d8879e74a806979c0d5a621359db2f3358729f9ada0fb30a035366047dae03a17a9e0067f5cc19b79917be377995350a372ae32df7579d22d9399f4582b2e2e4ce5b8e7b3d08a2b6e7c1b1e67e5cfa930474c75629c6785078604d9bdc9195dd2ad31c457bd061964ebf61809b0230dfb08995a082bf08433a60d84319bd5a776eafeace7022c6c10515dad9c3c6fc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x1388}}, 0x40004)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f00000002c0)="00000000000200000400", 0x10)
r8 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000280))
listen(r7, 0x0)
shutdown(r1, 0x0)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r10=>0x0})
connect$can_j1939(r9, &(0x7f0000000140)={0x1d, r10}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, &(0x7f0000000080), &(0x7f0000000180)='%pS    \x00'}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r5, @ANYRESHEX, @ANYRES32=r4, @ANYRES16=r9, @ANYRES8=r10], 0x50)

330.32409ms ago: executing program 1 (id=1289):
r0 = socket$kcm(0x2, 0x0, 0x106)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000080), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1d, 0x2, 0x6)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r2, {0xfff1, 0x3}, {}, {0xfff1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4)
close(0x3)
socket$kcm(0x2, 0x0, 0x106) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
connect$can_bcm(r1, &(0x7f0000000080), 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async)
sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x1d, 0x2, 0x6) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r2, {0xfff1, 0x3}, {}, {0xfff1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4) (async)
close(0x3) (async)

328.856038ms ago: executing program 3 (id=1290):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0xfff, @private2, 0xc0}, 0x1c) (async)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
r3 = socket$kcm(0x10, 0x5, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e1700800000876c1d0000007ea60864160af36514001ac0", 0x24}, {&(0x7f0000000100)="9b25af20af07241a63c3d9234521d167ed6b03ca231e3703d082cbfe1aaff26cbd0b5691fdd5b7308b9f84668f548d34c5f3aacebeae2bf1", 0x38}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000b04fcff", 0x58}], 0x1) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket(0x10, 0x803, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0) (async)
r7 = socket$unix(0x1, 0x5, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x3, 0x0, 0x2, 0x4, 0x8, 0xc, 0x5, 0x3, [{0xc569, 0x8, 0x2, 0xa000}, {0x9, 0x0, 0x2, 0x8}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async)
sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a0000000000000062dc624b1b1e74322efdeb1e55af2f00000000020010000000000200000000000000000302000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)

272.422181ms ago: executing program 2 (id=1291):
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) (async)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
getsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
socket$kcm(0x2, 0x3, 0x2) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f2f, 0xf, 0xca0, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x161, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='fscache_access_cache\x00', r1, 0x0, 0x22fcde86}, 0x18) (async)
r6 = socket(0x10, 0x3, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYRESOCT=r5], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01004524aeef000c0000f6ffffffffff1d98", @ANYRES32=r10, @ANYBLOB="08002600ad160000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0xffffffffffffffe5)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=@delchain={0x78, 0x5f, 0xf31, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_DIVISOR={0x8, 0x4, 0xad}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_DIVISOR={0x8, 0x4, 0x6e}, @TCA_U32_DIVISOR={0x8, 0x4, 0x13}, @TCA_U32_MARK={0x10, 0xa, {0x8, 0x9}}, @TCA_U32_HASH={0x8, 0x2, 0xc}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x78}}, 0x0)
r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
recvfrom(r11, 0x0, 0xfffffffffffffcd7, 0x103, 0x0, 0xfffffffffffffe81) (async)
r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r12, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
close(r13) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000061115c000000000016000000000000009500740000000000dda03ba2b7c6f8c116609c8973e4e3be4d53136342183455758cd7a3d130dbd4c2e8c74069c52b682014bca4b73f38e2ec04e3e9a17c6dd4e100a595581497327ffae0118f7e9110f373096878a3804bafc7ce482f5cfa4b0ccc403dca3f588d40cdce902db29a014f6283e0f803a039b44799d44e7a4c9ca2b44f1037"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

66.89775ms ago: executing program 2 (id=1292):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async)
sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
accept(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x0) (rerun: 32)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001880)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0x0, 0xa}, {}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'xcbc(sm4-ce)\x00'}, 0x0, 0xc0}}]}, 0x184}}, 0x20000000)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f0000000840)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r3}, 0x10) (async)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x8000) (async, rerun: 64)
socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async, rerun: 64)
write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8) (async, rerun: 64)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x100}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x21}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

0s ago: executing program 1 (id=1293):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x7, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x24008040)
sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0xf}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1c5}, @NL80211_ATTR_PMKID={0x14, 0x55, "0db387e1865925dde1ff254975b0f9e9"}, @NL80211_ATTR_SSID={0x24, 0x34, @random="4dcf0aca8a421a053c07c7a3768789811370c1150c9eb472aa8707bd267d1ef6"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x880)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r7, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x24}}, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
recvmmsg$unix(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)=""/114, 0x72}], 0x1}}], 0x1, 0x40, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0xe8}}, 0x44)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r9, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f00000002c0)=0x78)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.10.34' (ED25519) to the list of known hosts.
[   69.300736][ T5818] cgroup: Unknown subsys name 'net'
[   69.419671][ T5818] cgroup: Unknown subsys name 'cpuset'
[   69.428930][ T5818] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   71.015880][ T5818] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.630654][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[   71.642080][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[   75.209632][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   75.218887][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   75.226928][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   75.243818][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   75.252054][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   75.286467][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   75.295656][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   75.297794][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   75.303684][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   75.318843][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   75.327804][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   75.335943][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   75.343062][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   75.350711][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   75.358507][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   75.371779][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   75.375186][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   75.380980][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   75.403581][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   75.411431][ T5845] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   75.419492][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   75.429129][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   75.437441][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   75.446070][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   75.453379][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   75.453742][ T5845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   75.466866][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   75.468150][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   75.477040][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   75.489561][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   75.932131][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   75.980186][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   76.052856][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   76.121335][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   76.171856][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   76.220906][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.231588][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.239813][ T5837] bridge_slave_0: entered allmulticast mode
[   76.247830][ T5837] bridge_slave_0: entered promiscuous mode
[   76.307958][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.315480][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.322685][ T5837] bridge_slave_1: entered allmulticast mode
[   76.330521][ T5837] bridge_slave_1: entered promiscuous mode
[   76.341836][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.349280][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.356706][ T5838] bridge_slave_0: entered allmulticast mode
[   76.363624][ T5838] bridge_slave_0: entered promiscuous mode
[   76.425272][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.432490][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.440042][ T5838] bridge_slave_1: entered allmulticast mode
[   76.447153][ T5838] bridge_slave_1: entered promiscuous mode
[   76.481874][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.535552][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.542699][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.550233][ T5833] bridge_slave_0: entered allmulticast mode
[   76.557245][ T5833] bridge_slave_0: entered promiscuous mode
[   76.569657][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.588539][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.595910][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.603093][ T5828] bridge_slave_0: entered allmulticast mode
[   76.610277][ T5828] bridge_slave_0: entered promiscuous mode
[   76.644591][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.652060][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.659515][ T5833] bridge_slave_1: entered allmulticast mode
[   76.667851][ T5833] bridge_slave_1: entered promiscuous mode
[   76.683140][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.690566][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.702185][ T5828] bridge_slave_1: entered allmulticast mode
[   76.709406][ T5828] bridge_slave_1: entered promiscuous mode
[   76.727721][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.737447][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.744567][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.752499][ T5844] bridge_slave_0: entered allmulticast mode
[   76.759717][ T5844] bridge_slave_0: entered promiscuous mode
[   76.768048][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.775324][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.782536][ T5844] bridge_slave_1: entered allmulticast mode
[   76.790078][ T5844] bridge_slave_1: entered promiscuous mode
[   76.808068][ T5837] team0: Port device team_slave_0 added
[   76.839295][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.869651][ T5837] team0: Port device team_slave_1 added
[   76.881565][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.903476][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.945269][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.957164][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.969655][ T5838] team0: Port device team_slave_0 added
[   76.979826][ T5838] team0: Port device team_slave_1 added
[   76.988151][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.001324][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.085383][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.092374][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.118616][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.146607][ T5828] team0: Port device team_slave_0 added
[   77.153120][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.160693][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.186900][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.200052][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.207150][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.234165][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.255534][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.262540][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.288822][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.303561][ T5833] team0: Port device team_slave_0 added
[   77.314541][ T5828] team0: Port device team_slave_1 added
[   77.347863][ T5844] team0: Port device team_slave_0 added
[   77.361296][ T5833] team0: Port device team_slave_1 added
[   77.376541][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.383531][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.410885][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.416958][ T5840] Bluetooth: hci0: command tx timeout
[   77.436927][ T5844] team0: Port device team_slave_1 added
[   77.461801][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.469077][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.481861][ T5840] Bluetooth: hci3: command tx timeout
[   77.495748][ T5835] Bluetooth: hci1: command tx timeout
[   77.501455][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.521124][ T5838] hsr_slave_0: entered promiscuous mode
[   77.531389][ T5838] hsr_slave_1: entered promiscuous mode
[   77.545030][ T5835] Bluetooth: hci4: command tx timeout
[   77.554830][ T5835] Bluetooth: hci2: command tx timeout
[   77.567351][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.574448][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.601062][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.618420][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.625672][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.652430][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.676489][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.683567][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.713512][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.754866][ T5837] hsr_slave_0: entered promiscuous mode
[   77.762009][ T5837] hsr_slave_1: entered promiscuous mode
[   77.769204][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.777436][ T5837] Cannot create hsr debugfs directory
[   77.792643][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.800041][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.826311][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.872089][ T5828] hsr_slave_0: entered promiscuous mode
[   77.881319][ T5828] hsr_slave_1: entered promiscuous mode
[   77.888419][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.896688][ T5828] Cannot create hsr debugfs directory
[   77.924180][ T5833] hsr_slave_0: entered promiscuous mode
[   77.931297][ T5833] hsr_slave_1: entered promiscuous mode
[   77.941249][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.949340][ T5833] Cannot create hsr debugfs directory
[   78.024204][ T5844] hsr_slave_0: entered promiscuous mode
[   78.030970][ T5844] hsr_slave_1: entered promiscuous mode
[   78.037400][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.045075][ T5844] Cannot create hsr debugfs directory
[   78.426986][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   78.440129][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   78.452555][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   78.472995][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   78.520766][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   78.531679][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   78.549066][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   78.574095][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   78.637758][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   78.675961][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   78.700966][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   78.711691][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   78.769825][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.779683][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   78.807474][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   78.818398][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   78.829264][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   78.877490][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   78.941481][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.948873][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.969257][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   78.986277][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.993791][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.028360][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   79.041938][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   79.054021][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   79.151522][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.223461][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.262514][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   79.316810][ T4500] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.324012][ T4500] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.368500][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.383635][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.391813][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.451653][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   79.466631][ T5835] Bluetooth: hci0: command tx timeout
[   79.471044][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   79.501998][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.512136][ T4500] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.519297][ T4500] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.531545][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.545259][ T5835] Bluetooth: hci1: command tx timeout
[   79.545409][ T5840] Bluetooth: hci3: command tx timeout
[   79.568923][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.576177][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.587688][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.594914][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.625944][ T5840] Bluetooth: hci2: command tx timeout
[   79.629680][ T5835] Bluetooth: hci4: command tx timeout
[   79.641294][ T4500] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.648509][ T4500] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.670167][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   79.719287][ T4500] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.726511][ T4500] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.738603][ T4500] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.745826][ T4500] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.870446][ T5838] veth0_vlan: entered promiscuous mode
[   79.942261][ T5838] veth1_vlan: entered promiscuous mode
[   80.033600][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.081325][ T5838] veth0_macvtap: entered promiscuous mode
[   80.161955][ T5838] veth1_macvtap: entered promiscuous mode
[   80.268770][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.300284][ T5837] veth0_vlan: entered promiscuous mode
[   80.322567][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.342434][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.367597][ T5837] veth1_vlan: entered promiscuous mode
[   80.391466][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.400679][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.411142][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.420566][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.440147][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.451288][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.612844][ T5828] veth0_vlan: entered promiscuous mode
[   80.623657][ T5837] veth0_macvtap: entered promiscuous mode
[   80.664493][ T5837] veth1_macvtap: entered promiscuous mode
[   80.684535][ T5844] veth0_vlan: entered promiscuous mode
[   80.702310][ T5828] veth1_vlan: entered promiscuous mode
[   80.715290][ T4500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.723337][ T4500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.737134][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.750158][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.762873][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.771084][ T5844] veth1_vlan: entered promiscuous mode
[   80.807707][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   80.819807][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.833426][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.899942][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.913050][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.922630][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.932602][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.943102][ T5844] veth0_macvtap: entered promiscuous mode
[   80.951985][ T5828] veth0_macvtap: entered promiscuous mode
[   80.968247][ T5844] veth1_macvtap: entered promiscuous mode
[   80.976955][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.988219][ T5828] veth1_macvtap: entered promiscuous mode
[   81.005091][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.015594][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.028851][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.039777][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.050456][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.061222][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.089093][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.105535][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.116077][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.126610][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.140711][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.159049][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.168178][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.182989][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.184138][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   81.207190][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.243240][ T5833] veth0_vlan: entered promiscuous mode
[   81.297460][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.317252][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.328238][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.340741][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.352627][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.363413][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.383488][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.419366][ T5833] veth1_vlan: entered promiscuous mode
[   81.431352][   T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.447105][   T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.458598][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.470589][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.480527][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.491813][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.502060][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.512590][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.523746][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.545809][ T5835] Bluetooth: hci0: command tx timeout
[   81.557136][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.567900][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.576913][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.585869][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.607341][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.625272][ T5835] Bluetooth: hci3: command tx timeout
[   81.626429][ T5840] Bluetooth: hci1: command tx timeout
[   81.633396][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.702201][ T5833] veth0_macvtap: entered promiscuous mode
[   81.710228][ T5840] Bluetooth: hci4: command tx timeout
[   81.710239][ T5835] Bluetooth: hci2: command tx timeout
[   81.757374][ T5833] veth1_macvtap: entered promiscuous mode
[   81.802951][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.852995][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.899768][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.910983][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.921456][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.932543][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.942797][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.953828][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.963946][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.974496][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.985928][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.996361][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.006932][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.017256][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.028734][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.038673][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.050016][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.059960][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.070535][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.082135][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.110495][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.121121][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.133069][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.143156][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.203547][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.236577][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.257416][ T3563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.297343][ T3563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.400506][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.433589][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.443071][ T5927] syz.3.8 uses obsolete (PF_INET,SOCK_PACKET)
[   82.624279][ T3563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.651454][ T5927] ipt_rpfilter: unknown options
[   82.699700][ T3563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.437997][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'.
[   83.456756][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.513998][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.547592][ T5943] netlink: 'syz.0.10': attribute type 3 has an invalid length.
[   83.615601][ T5944] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   83.628522][ T5835] Bluetooth: hci0: command tx timeout
[   83.744411][ T5835] Bluetooth: hci1: command tx timeout
[   83.749983][ T5835] Bluetooth: hci3: command tx timeout
[   83.785107][ T5835] Bluetooth: hci2: command tx timeout
[   83.791352][ T5840] Bluetooth: hci4: command tx timeout
[   83.873751][ T5951] netlink: 'syz.2.13': attribute type 6 has an invalid length.
[   84.092863][ T5967] netlink: 'syz.3.17': attribute type 10 has an invalid length.
[   84.176804][ T5967] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   84.218338][ T5978] netlink: 604 bytes leftover after parsing attributes in process `syz.3.17'.
[   84.250617][ T5977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19'.
[   84.359087][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'.
[   84.412050][ T5985] veth1: entered allmulticast mode
[   84.766437][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24'.
[   84.795733][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'.
[   84.824290][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'.
[   85.043515][ T6007] netlink: 'syz.4.27': attribute type 8 has an invalid length.
[   85.058470][ T6007] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   85.404449][ T5992] lo speed is unknown, defaulting to 1000
[   85.417200][ T6020] netlink: 40 bytes leftover after parsing attributes in process `syz.0.30'.
[   85.430018][ T5992] lo speed is unknown, defaulting to 1000
[   85.472513][ T5992] lo speed is unknown, defaulting to 1000
[   85.510718][ T5992] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   85.610790][ T5992] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   85.723648][ T5992] lo speed is unknown, defaulting to 1000
[   85.882412][ T6042] netlink: 'syz.1.37': attribute type 10 has an invalid length.
[   85.916345][ T5992] lo speed is unknown, defaulting to 1000
[   85.923288][ T5992] lo speed is unknown, defaulting to 1000
[   85.970613][ T6042] 8021q: adding VLAN 0 to HW filter on device team0
[   85.987726][ T6042] bond0: (slave team0): Enslaving as an active interface with an up link
[   85.999079][ T5992] lo speed is unknown, defaulting to 1000
[   86.006169][ T5992] lo speed is unknown, defaulting to 1000
[   86.015983][ T5992] lo speed is unknown, defaulting to 1000
[   86.022939][ T5992] lo speed is unknown, defaulting to 1000
[   86.068770][ T6047] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:6cd8:e5ff:fe02:1439 error=-28
[   86.389754][ T6052] netlink: 16 bytes leftover after parsing attributes in process `syz.3.39'.
[   86.404887][ T6047] infiniband syz1: set active
[   86.412424][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39'.
[   86.417240][ T6047] infiniband syz1: added team_slave_0
[   86.446517][ T6052] Zero length message leads to an empty skb
[   86.497406][ T6056] netlink: 'syz.3.39': attribute type 1 has an invalid length.
[   86.611669][ T6047] RDS/IB: syz1: added
[   86.616726][ T6047] smc: adding ib device syz1 with port count 1
[   86.627284][ T6047] smc:    ib device syz1 port 1 has pnetid 
[   86.891657][ T6063] geneve2: entered promiscuous mode
[   86.901178][ T6063] geneve2: entered allmulticast mode
[   87.163565][   T58] cfg80211: failed to load regulatory.db
[   87.254856][ T6055] Bluetooth: hci0: Opcode 0x080f failed: -4
[   87.752111][ T6077] vlan2: entered promiscuous mode
[   87.793227][ T6077] ip6gretap0: entered promiscuous mode
[   87.882171][ T6077] ip6gretap0: left promiscuous mode
[   88.275365][ T6091] netlink: 'syz.4.53': attribute type 21 has an invalid length.
[   88.469152][ T6097] __nla_validate_parse: 1 callbacks suppressed
[   88.469183][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.52'.
[   88.505301][ T5840] Bluetooth: hci0: command 0x080f tx timeout
[   88.627710][ T6100] netlink: 52 bytes leftover after parsing attributes in process `syz.3.54'.
[   89.004286][ T6121] netlink: 28 bytes leftover after parsing attributes in process `syz.1.59'.
[   89.389444][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.62'.
[   89.442034][ T6134] veth1: entered allmulticast mode
[   89.456584][ T6136] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   89.739368][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'.
[   89.933203][ T6149] netlink: 16 bytes leftover after parsing attributes in process `syz.1.68'.
[   89.962659][ T6149] netlink: 172 bytes leftover after parsing attributes in process `syz.1.68'.
[   89.992995][ T6149] netlink: 132 bytes leftover after parsing attributes in process `syz.1.68'.
[   90.345628][ T6167] Driver unsupported XDP return value 0 on prog  (id 29) dev N/A, expect packet loss!
[   90.695026][ T6181] netlink: 'syz.0.74': attribute type 10 has an invalid length.
[   90.891473][ T6181] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   91.337656][ T6208] rose2: entered allmulticast mode
[   91.955528][ T6235] netlink: 24 bytes leftover after parsing attributes in process `syz.1.88'.
[   92.461174][ T6255] pim6reg1: entered promiscuous mode
[   92.466727][ T6255] pim6reg1: entered allmulticast mode
[   92.771606][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.97'.
[   92.839768][ T6271] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20001
[   93.009693][ T6282] tipc: Started in network mode
[   93.021548][ T6282] tipc: Node identity , cluster identity 4711
[   93.062484][ T6282] tipc: Failed to set node id, please configure manually
[   93.106322][ T6282] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   93.208597][ T6291] x_tables: duplicate underflow at hook 1
[   93.304220][ T6292] IPVS: Scheduler module ip_vs_sip not found
[   93.604984][ T6304] netlink: 'syz.1.108': attribute type 4 has an invalid length.
[   94.067973][ T6334] netlink: 'syz.4.117': attribute type 12 has an invalid length.
[   94.582976][ T6344] vlan2: entered promiscuous mode
[   94.620250][ T6344] vlan2: entered allmulticast mode
[   94.627199][ T6351] Bluetooth: MGMT ver 1.23
[   94.631713][ T6344] vlan0: entered allmulticast mode
[   94.652173][ T6344] veth0_vlan: entered allmulticast mode
[   94.659772][ T6344] vlan0: entered promiscuous mode
[   94.689453][ T6344] team0: Port device vlan2 added
[   95.298684][ T6372] warning: `syz.1.125' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   96.670404][ T6433] pim6reg: entered allmulticast mode
[   96.823619][ T6439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   96.883186][ T6449] __nla_validate_parse: 4 callbacks suppressed
[   96.883208][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'.
[   97.675896][ T6430] pim6reg: left allmulticast mode
[   97.928735][ T6475] IPv6: NLM_F_CREATE should be specified when creating new route
[   97.936694][ T6475] IPv6: Can't replace route, no match found
[   98.299766][ T6488] netlink: 248 bytes leftover after parsing attributes in process `syz.0.148'.
[   98.357331][ T6488] netlink: 'syz.0.148': attribute type 13 has an invalid length.
[   98.542192][ T6488] syz.0.148 (6488) used greatest stack depth: 18448 bytes left
[   98.611809][ T6497] netlink: 136 bytes leftover after parsing attributes in process `syz.4.153'.
[   98.621358][ T6503] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   98.642384][ T6497] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[   98.780719][ T6509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.156'.
[   98.807708][ T6509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.156'.
[   98.938453][ T6520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.158'.
[   99.006215][ T6522] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526
[   99.155294][ T6527] bridge0: port 3(ipvlan2) entered blocking state
[   99.177868][ T6527] bridge0: port 3(ipvlan2) entered disabled state
[   99.193922][ T6527] ipvlan2: entered allmulticast mode
[   99.210236][ T6527] bridge0: entered allmulticast mode
[   99.229536][ T6527] ipvlan2: left allmulticast mode
[   99.255238][ T6527] bridge0: left allmulticast mode
[   99.848378][ T6554] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  100.961570][ T6607] netlink: 52 bytes leftover after parsing attributes in process `syz.3.178'.
[  101.130674][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.180'.
[  101.254150][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.180'.
[  101.541536][ T6627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.181'.
[  102.139888][ T6655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.488050][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.196'.
[  102.540629][ T6675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.196'.
[  102.754520][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'.
[  103.205168][ T6703] tipc: Failed to remove unknown binding: 66,1,1/0:13109221/13109222
[  103.255051][ T6706] netlink: 'syz.3.207': attribute type 21 has an invalid length.
[  103.274800][ T6706] netlink: 152 bytes leftover after parsing attributes in process `syz.3.207'.
[  104.477295][ T6739] netlink: 604 bytes leftover after parsing attributes in process `syz.0.217'.
[  104.755374][ T6744] netlink: 32 bytes leftover after parsing attributes in process `syz.0.219'.
[  105.038861][ T6748] netlink: 36 bytes leftover after parsing attributes in process `syz.1.220'.
[  105.078910][ T6748] netlink: 48 bytes leftover after parsing attributes in process `syz.1.220'.
[  105.151711][ T6751] netlink: 44 bytes leftover after parsing attributes in process `syz.0.221'.
[  105.185643][ T6754] syz_tun: entered promiscuous mode
[  105.200642][ T6755] x_tables: ip_tables: ah match: only valid for protocol 51
[  105.211618][ T6754] syz_tun: left promiscuous mode
[  105.236215][ T6755] netlink: 40 bytes leftover after parsing attributes in process `syz.1.220'.
[  105.568598][ T6767] netlink: 'syz.2.226': attribute type 16 has an invalid length.
[  105.717612][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807dc0c800: rx timeout, send abort
[  105.727551][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807dc0c400: rx timeout, send abort
[  105.737256][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807dc0c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  105.752833][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807dc0c400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  105.761921][ T6778] netlink: 'syz.4.230': attribute type 1 has an invalid length.
[  106.069434][ T6774] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.078115][ T6774] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.241097][ T6819] Cannot find del_set index 0 as target
[  106.359041][ T6774] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.373792][ T6774] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.649045][ T6774] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.666965][ T6774] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.693765][ T6774] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.713443][ T6774] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.949107][ T6780] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.959659][ T6780] 8021q: adding VLAN 0 to HW filter on device team0
[  106.970165][ T6780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  106.995030][ T6808] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.024864][ T6808] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.061926][ T6808] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.071020][ T6808] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.535480][ T6850] syz.4.241[6850] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  107.535592][ T6850] syz.4.241[6850] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  107.578862][ T6850] syz.4.241[6850] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  107.628576][ T6851] __nla_validate_parse: 6 callbacks suppressed
[  107.628598][ T6851] netlink: 52 bytes leftover after parsing attributes in process `syz.4.241'.
[  107.681480][ T6853] netlink: 76 bytes leftover after parsing attributes in process `syz.3.243'.
[  107.728181][ T6858] netlink: 76 bytes leftover after parsing attributes in process `syz.3.243'.
[  108.336192][ T6887] netlink: 20 bytes leftover after parsing attributes in process `syz.3.252'.
[  111.050599][ T6889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.253'.
[  111.070398][ T6896] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  111.079860][ T6896] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  111.088850][ T6896] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  111.097881][ T6896] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  111.151279][ T6903] netlink: 'syz.3.256': attribute type 21 has an invalid length.
[  111.186862][ T6903] netlink: 132 bytes leftover after parsing attributes in process `syz.3.256'.
[  111.301254][ T6911] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  111.482435][ T5840] Bluetooth: hci0: command 0x080f tx timeout
[  111.638094][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'.
[  111.980044][ T6936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.263'.
[  112.199736][ T6945] netlink: 88 bytes leftover after parsing attributes in process `syz.1.265'.
[  112.209420][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'.
[  112.398605][   T58] IPVS: starting estimator thread 0...
[  112.525156][ T6954] IPVS: using max 21 ests per chain, 50400 per kthread
[  112.761603][ T6968] batman_adv: batadv0: Adding interface: dummy0
[  112.785214][ T6968] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.816650][ T6968] batman_adv: batadv0: Interface activated: dummy0
[  112.837175][ T6969] batadv0: mtu less than device minimum
[  112.846161][ T6969] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.859196][ T6969] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.871883][ T6969] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.884661][ T6969] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.897322][ T6969] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.909763][ T6969] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.922455][ T6969] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.935106][ T6969] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  112.947774][ T6969] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  113.603124][ T7014] raw_sendmsg: syz.3.281 forgot to set AF_INET. Fix it!
[  113.755755][ T7019] __nla_validate_parse: 1 callbacks suppressed
[  113.755776][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'.
[  114.070785][ T7033] syzkaller1: entered promiscuous mode
[  114.095242][ T7033] syzkaller1: entered allmulticast mode
[  114.168658][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.286'.
[  114.413150][ T7051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.289'.
[  114.551301][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.290'.
[  114.984744][ T5835] Bluetooth: hci4: command 0x0405 tx timeout
[  115.008179][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'.
[  115.077792][ T7082] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  115.299987][ T7087] netlink: 40 bytes leftover after parsing attributes in process `syz.0.294'.
[  115.562349][ T7099] geneve3: entered promiscuous mode
[  115.578223][ T7099] geneve3: entered allmulticast mode
[  115.594079][ T7101] netlink: 36 bytes leftover after parsing attributes in process `syz.2.300'.
[  116.012044][ T7119] netlink: 28 bytes leftover after parsing attributes in process `syz.4.303'.
[  116.577192][ T7140] bridge: RTM_NEWNEIGH with invalid state 0x10
[  116.634172][ T7140] netem: incorrect gi model size
[  116.664530][ T7140] netem: change failed
[  116.918114][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.312'.
[  117.873200][ T7184] netlink: 36 bytes leftover after parsing attributes in process `syz.2.318'.
[  117.886550][ T7189] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  117.893872][ T7189] IPv6: NLM_F_CREATE should be set when creating new route
[  117.901214][ T7189] IPv6: NLM_F_CREATE should be set when creating new route
[  118.919534][ T7234] netlink: 'syz.3.334': attribute type 10 has an invalid length.
[  118.973211][ T7234] team0: Device veth1_macvtap failed to register rx_handler
[  119.241198][ T7243] infiniband syz1: set active
[  119.288959][ T7250] netlink: 'syz.1.337': attribute type 10 has an invalid length.
[  119.330538][ T7254] ªªªªª»: renamed from ip_vti0 (while UP)
[  119.338277][ T7248] __nla_validate_parse: 2 callbacks suppressed
[  119.338305][ T7248] netlink: 60 bytes leftover after parsing attributes in process `syz.2.339'.
[  119.709240][ T7274] netlink: 76 bytes leftover after parsing attributes in process `syz.2.345'.
[  119.892974][ T7281] netlink: 'syz.3.346': attribute type 1 has an invalid length.
[  120.232794][ T7299] netlink: 16 bytes leftover after parsing attributes in process `syz.1.350'.
[  120.494344][ T7305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.755753][ T7316] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  120.935061][ T7318] xt_cgroup: invalid path, errno=-2
[  120.937726][ T7321] vlan2: entered promiscuous mode
[  121.107505][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.358'.
[  121.529267][ T7347] FAULT_INJECTION: forcing a failure.
[  121.529267][ T7347] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  121.573225][    C1] net_ratelimit: 11 callbacks suppressed
[  121.573247][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  121.599196][ T7347] CPU: 0 UID: 0 PID: 7347 Comm: syz.2.365 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0
[  121.609907][ T7347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  121.620016][ T7347] Call Trace:
[  121.623332][ T7347]  <TASK>
[  121.626293][ T7347]  dump_stack_lvl+0x241/0x360
[  121.631041][ T7347]  ? __pfx_dump_stack_lvl+0x10/0x10
[  121.636284][ T7347]  ? __pfx__printk+0x10/0x10
[  121.640919][ T7347]  ? __pfx_lock_release+0x10/0x10
[  121.645999][ T7347]  should_fail_ex+0x3b0/0x4e0
[  121.650727][ T7347]  _copy_from_user+0x2f/0xc0
[  121.655374][ T7347]  copy_msghdr_from_user+0xae/0x680
[  121.660642][ T7347]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  121.666501][ T7347]  ? __fget_files+0x2a/0x410
[  121.671166][ T7347]  ? __fget_files+0x2a/0x410
[  121.675825][ T7347]  __sys_sendmsg+0x209/0x350
[  121.680462][ T7347]  ? __pfx_lock_release+0x10/0x10
[  121.685621][ T7347]  ? __pfx___sys_sendmsg+0x10/0x10
[  121.690763][ T7347]  ? __pfx_vfs_write+0x10/0x10
[  121.695562][ T7347]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  121.701908][ T7347]  ? do_syscall_64+0x100/0x230
[  121.706707][ T7347]  ? do_syscall_64+0xb6/0x230
[  121.711408][ T7347]  do_syscall_64+0xf3/0x230
[  121.715930][ T7347]  ? clear_bhb_loop+0x35/0x90
[  121.720649][ T7347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.726576][ T7347] RIP: 0033:0x7f5e22d85d29
[  121.731013][ T7347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  121.750631][ T7347] RSP: 002b:00007f5e23b89038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  121.759064][ T7347] RAX: ffffffffffffffda RBX: 00007f5e22f75fa0 RCX: 00007f5e22d85d29
[  121.767047][ T7347] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003
[  121.775025][ T7347] RBP: 00007f5e23b89090 R08: 0000000000000000 R09: 0000000000000000
[  121.783005][ T7347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  121.790985][ T7347] R13: 0000000000000000 R14: 00007f5e22f75fa0 R15: 00007fff81ed9248
[  121.798978][ T7347]  </TASK>
[  122.009798][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.370'.
[  122.040782][ T7366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.366'.
[  122.073220][ T7361] team0: Device gtp0 is of different type
[  122.153360][ T7375] netlink: 36 bytes leftover after parsing attributes in process `syz.2.371'.
[  122.294059][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'.
[  122.819775][ T7405] netlink: 'syz.3.382': attribute type 1 has an invalid length.
[  122.828471][ T7405] netlink: 'syz.3.382': attribute type 2 has an invalid length.
[  122.831366][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'.
[  122.836801][ T7405] netlink: 'syz.3.382': attribute type 1 has an invalid length.
[  122.845440][ T7400] netlink: 165 bytes leftover after parsing attributes in process `syz.2.379'.
[  122.854027][ T7405] netlink: 'syz.3.382': attribute type 1 has an invalid length.
[  122.871651][ T7405] netlink: 'syz.3.382': attribute type 1 has an invalid length.
[  122.880556][ T7405] netlink: 'syz.3.382': attribute type 2 has an invalid length.
[  123.243643][ T7414] netlink: 'syz.2.384': attribute type 21 has an invalid length.
[  123.653151][ T7434] veth0_to_team: entered promiscuous mode
[  123.661360][ T7434] veth0_to_team: entered allmulticast mode
[  124.399427][ T7475] __nla_validate_parse: 5 callbacks suppressed
[  124.399449][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.400'.
[  124.471760][ T7479] lo speed is unknown, defaulting to 1000
[  124.479938][ T7479] lo speed is unknown, defaulting to 1000
[  124.487147][ T7479] lo speed is unknown, defaulting to 1000
[  124.711999][ T7479] infiniband syz0: set down
[  124.717543][ T6809] lo speed is unknown, defaulting to 1000
[  124.734901][ T7479] infiniband syz0: added lo
[  124.868495][ T7479] RDS/IB: syz0: added
[  124.872607][ T7479] smc: adding ib device syz0 with port count 1
[  124.941025][ T7479] smc:    ib device syz0 port 1 has pnetid 
[  124.961482][ T7479] lo speed is unknown, defaulting to 1000
[  124.982081][ T6809] lo speed is unknown, defaulting to 1000
[  124.998797][ T7497] netlink: 'syz.3.405': attribute type 14 has an invalid length.
[  125.198831][ T7502] netlink: 28 bytes leftover after parsing attributes in process `syz.0.407'.
[  125.252322][ T7479] lo speed is unknown, defaulting to 1000
[  125.521641][ T7479] lo speed is unknown, defaulting to 1000
[  125.528855][ T7516] netlink: 88 bytes leftover after parsing attributes in process `syz.2.411'.
[  125.821976][ T7528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.415'.
[  125.858600][ T7505] lo speed is unknown, defaulting to 1000
[  126.088213][ T7479] lo speed is unknown, defaulting to 1000
[  126.247850][ T7545] team_slave_0: entered promiscuous mode
[  126.254006][ T7545] team_slave_1: entered promiscuous mode
[  126.262777][ T7545] team0: Device macsec1 is already an upper device of the team interface
[  126.300371][ T7545] team_slave_0: left promiscuous mode
[  126.305978][ T7545] team_slave_1: left promiscuous mode
[  126.479027][ T7479] lo speed is unknown, defaulting to 1000
[  126.536043][ T7553] netlink: 'syz.2.421': attribute type 10 has an invalid length.
[  126.586910][ T7553] 8021q: adding VLAN 0 to HW filter on device batadv0
[  126.622164][ T7553] team0: Port device batadv0 added
[  127.153963][ T7567] vcan0: tx drop: invalid da for name 0x0000000000000004
[  127.467601][ T7586] IPv6: addrconf: prefix option has invalid lifetime
[  127.670632][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'.
[  127.837912][ T7604] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  127.940069][ T7610] netlink: 'syz.0.438': attribute type 10 has an invalid length.
[  127.951926][ T7610] siw: device registration error -23
[  128.188245][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.440'.
[  128.273969][ T7617] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  128.289992][ T7626] netlink: 5 bytes leftover after parsing attributes in process `syz.4.443'.
[  128.337351][ T7617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.440'.
[  128.387411][ T7626] 0ªX¹¦Dö»: renamed from gretap0 (while UP)
[  128.408618][ T7631] netlink: 64 bytes leftover after parsing attributes in process `syz.0.445'.
[  128.415572][ T7639] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[  128.430058][ T7626] 0ªX¹¦Dö»: entered allmulticast mode
[  128.452355][ T7631] netlink: 64 bytes leftover after parsing attributes in process `syz.0.445'.
[  128.628126][ T7646] netlink: 'syz.4.448': attribute type 1 has an invalid length.
[  128.689897][ T7648] veth0_vlan: entered allmulticast mode
[  129.474107][ T7667] lo speed is unknown, defaulting to 1000
[  129.519229][ T7683] __nla_validate_parse: 32 callbacks suppressed
[  129.519254][ T7683] netlink: 36 bytes leftover after parsing attributes in process `syz.3.460'.
[  129.562963][ T7683] netlink: 16 bytes leftover after parsing attributes in process `syz.3.460'.
[  129.602497][ T7683] netlink: 36 bytes leftover after parsing attributes in process `syz.3.460'.
[  129.627708][ T7692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'.
[  129.633622][ T7683] netlink: 36 bytes leftover after parsing attributes in process `syz.3.460'.
[  130.023380][ T7708] netlink: 'syz.0.468': attribute type 1 has an invalid length.
[  130.032399][ T7708] netlink: 'syz.0.468': attribute type 2 has an invalid length.
[  130.303072][ T7710] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  130.511294][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.472'.
[  130.564509][ T7717] (unnamed net_device) (uninitialized): option arp_validate: invalid value (1024)
[  130.767695][ T7725] netlink: 28 bytes leftover after parsing attributes in process `syz.3.474'.
[  130.999107][ T7719] lo speed is unknown, defaulting to 1000
[  131.030896][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.477'.
[  131.063246][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.477'.
[  131.098792][ T7739] netlink: 'syz.0.479': attribute type 28 has an invalid length.
[  131.281920][ T7748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.481'.
[  131.787433][ T7732] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  132.356558][ T7786] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  132.660902][ T7796] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  132.904694][ T7821] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  132.921851][ T7816] gtp0: entered promiscuous mode
[  133.068620][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  133.085200][ T5840] Bluetooth: hci0: command 0x080f tx timeout
[  133.097017][ T7817] netlink: 'syz.0.497': attribute type 2 has an invalid length.
[  133.116587][ T7817] netlink: 'syz.0.497': attribute type 9 has an invalid length.
[  133.718697][ T7850] xt_cluster: node mask cannot exceed total number of nodes
[  133.899584][ T7862] netlink: 'syz.0.514': attribute type 4 has an invalid length.
[  134.182307][ T7877] syz.0.519[7877] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  134.182411][ T7877] syz.0.519[7877] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  134.194078][ T7877] syz.0.519[7877] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  134.366595][ T7873] lo speed is unknown, defaulting to 1000
[  134.888974][ T7897] __nla_validate_parse: 9 callbacks suppressed
[  134.888997][ T7897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.524'.
[  134.975355][ T7897] sctp: [Deprecated]: syz.2.524 (pid 7897) Use of struct sctp_assoc_value in delayed_ack socket option.
[  134.975355][ T7897] Use struct sctp_sack_info instead
[  135.027996][ T7912] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  135.101971][ T7922] netlink: 'syz.1.530': attribute type 33 has an invalid length.
[  135.242445][ T7928] netlink: 60 bytes leftover after parsing attributes in process `syz.1.532'.
[  135.331625][ T7931] mac80211_hwsim hwsim9 
: renamed from wlan1 (while UP)
[  135.806772][ T7938] bond0: (slave team0): Releasing backup interface
[  135.843925][ T7938] infiniband syz1: set down
[  135.849785][ T7938] team0 (unregistering): Port device team_slave_0 removed
[  135.875904][ T7938] team0 (unregistering): Port device team_slave_1 removed
[  135.904011][ T7926] lo speed is unknown, defaulting to 1000
[  136.108571][ T7956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.539'.
[  136.127902][ T7956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.539'.
[  136.482346][ T7963] tipc: Started in network mode
[  136.492365][ T7963] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  136.517011][ T7963] tipc: Enabled bearer <eth:ipvlan0>, priority 0
[  136.650446][ T7954] lo speed is unknown, defaulting to 1000
[  136.658110][ T7964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.541'.
[  136.932773][ T7966] netlink: 148 bytes leftover after parsing attributes in process `syz.1.542'.
[  136.949723][ T7966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.542'.
[  137.276537][ T7973] lo: entered allmulticast mode
[  137.292088][ T7971] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  137.443227][ T7983] netlink: 'syz.1.548': attribute type 16 has an invalid length.
[  137.451175][ T7983] netlink: 'syz.1.548': attribute type 3 has an invalid length.
[  137.459066][ T7983] netlink: 132 bytes leftover after parsing attributes in process `syz.1.548'.
[  137.612851][ T7987] sit1: entered promiscuous mode
[  137.625024][ T7987] sit1: entered allmulticast mode
[  137.636174][ T6811] tipc: Node number set to 10136234
[  137.674261][ T7989] netlink: 'syz.1.549': attribute type 4 has an invalid length.
[  137.712309][ T7989] netlink: 48 bytes leftover after parsing attributes in process `syz.1.549'.
[  138.027095][ T7996] netlink: 20 bytes leftover after parsing attributes in process `syz.3.550'.
[  138.346177][ T8004] netlink: 'syz.4.554': attribute type 16 has an invalid length.
[  138.354166][ T8004] netlink: 'syz.4.554': attribute type 17 has an invalid length.
[  138.705692][ T8011] xt_TCPMSS: Only works on TCP SYN packets
[  139.047017][ T8026] netlink: 'syz.2.559': attribute type 1 has an invalid length.
[  139.824445][ T8048] syz.3.565 uses old SIOCAX25GETINFO
[  139.978331][ T8058] xt_TPROXY: Can be used only with -p tcp or -p udp
[  141.368399][ T7975] Set syz1 is full, maxelem 65536 reached
[  141.617501][ T8108] xt_SECMARK: invalid mode: 0
[  141.730242][ T8117] sch_tbf: burst 4398 is lower than device lo mtu (1075109906) !
[  141.798622][ T8111] __nla_validate_parse: 2 callbacks suppressed
[  141.798647][ T8111] netlink: 16 bytes leftover after parsing attributes in process `syz.3.582'.
[  141.880174][ T8117] netlink: 'syz.1.586': attribute type 10 has an invalid length.
[  142.140752][ T8142] x_tables: duplicate underflow at hook 3
[  142.484262][ T8164] netlink: 'syz.4.601': attribute type 18 has an invalid length.
[  142.531898][ T8164] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  142.540920][ T8164] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  142.549794][ T8164] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  142.558738][ T8164] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  142.870322][ T8180] netlink: 28 bytes leftover after parsing attributes in process `syz.4.602'.
[  142.948082][ T8182] ebt_among: src integrity fail: 100
[  143.200114][ T8195] Â: renamed from pim6reg1
[  143.212179][ T8195] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  143.219597][ T8195] IPv6: NLM_F_CREATE should be set when creating new route
[  143.226933][ T8195] IPv6: NLM_F_CREATE should be set when creating new route
[  143.422193][ T8202] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  143.522114][ T8207] netlink: 20 bytes leftover after parsing attributes in process `syz.1.613'.
[  143.641452][ T8212] netlink: 'syz.0.614': attribute type 11 has an invalid length.
[  143.806150][ T5840] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  143.821253][ T5840] Bluetooth: hci0: command 0x080f tx timeout
[  143.872142][   T81] tipc: Subscription rejected, illegal request
[  144.115387][ T8236] netlink: 'syz.2.621': attribute type 1 has an invalid length.
[  144.135931][ T8238] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  144.486077][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.626'.
[  144.566346][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.626'.
[  144.594263][ T8252] netlink: 32 bytes leftover after parsing attributes in process `syz.4.626'.
[  144.650362][ T8267] netlink: 'syz.0.629': attribute type 10 has an invalid length.
[  144.665497][ T5840] block nbd0: Receive control failed (result -107)
[  144.696657][ T8267] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  144.724953][ T8252] nbd0: detected capacity change from 0 to 256
[  144.732278][ T8251] lo speed is unknown, defaulting to 1000
[  144.733895][ T8260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  144.763685][ T8269] netlink: 16 bytes leftover after parsing attributes in process `syz.1.631'.
[  144.774555][ T8269] netlink: 64 bytes leftover after parsing attributes in process `syz.1.631'.
[  144.784758][ T8269] tipc: Invalid UDP bearer configuration
[  144.784803][ T8269] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  145.101362][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'.
[  145.374091][ T8288] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  145.822888][ T8307] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.871022][ T8310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.992622][ T8292] lo speed is unknown, defaulting to 1000
[  145.993679][ T8315] netlink: 'syz.4.646': attribute type 1 has an invalid length.
[  146.273040][ T8300] lo speed is unknown, defaulting to 1000
[  146.635434][ T8329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'.
[  147.216503][ T8347] netlink: 'syz.1.654': attribute type 1 has an invalid length.
[  147.238025][ T8346] netlink: 'syz.1.654': attribute type 1 has an invalid length.
[  147.261014][ T8346] __nla_validate_parse: 2 callbacks suppressed
[  147.261033][ T8346] netlink: 40 bytes leftover after parsing attributes in process `syz.1.654'.
[  147.295562][ T8347] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  147.310617][ T8348] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  147.551420][ T8356] dccp_v4_rcv: dropped packet with invalid checksum
[  147.863519][ T8363] netlink: 16 bytes leftover after parsing attributes in process `syz.4.660'.
[  147.921427][ T8370] netlink: 'syz.2.663': attribute type 1 has an invalid length.
[  148.000861][ T8370] 8021q: adding VLAN 0 to HW filter on device bond1
[  148.027250][ T8380] netlink: 'syz.4.665': attribute type 10 has an invalid length.
[  148.038887][ T8371] 8021q: adding VLAN 0 to HW filter on device batadv1
[  148.054701][ T8380] netlink: 148 bytes leftover after parsing attributes in process `syz.4.665'.
[  148.077292][ T8371] bond1: (slave batadv1): making interface the new active one
[  148.087269][ T8371] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  148.101930][ T8372] 8021q: adding VLAN 0 to HW filter on device batadv2
[  148.185297][ T8372] bond1: (slave batadv2): Enslaving as an active interface with an up link
[  148.345799][ T8392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.670'.
[  148.375640][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.669'.
[  148.577967][ T8366] lo speed is unknown, defaulting to 1000
[  149.193063][ T8384] lo speed is unknown, defaulting to 1000
[  149.720543][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.679'.
[  150.677015][ T8454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.684'.
[  150.859773][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.687'.
[  150.924352][ T8463] syzkaller0: entered promiscuous mode
[  150.924883][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'.
[  150.931851][ T8463] syzkaller0: entered allmulticast mode
[  150.962751][ T8459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.685'.
[  151.158321][ T8471] sock: sock_timestamping_bind_phc: sock not bind to device
[  152.995819][ T8476] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  153.453640][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.696'.
[  153.478451][ T8500] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  153.546352][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.696'.
[  153.638847][ T8506] xt_policy: too many policy elements
[  153.678988][ T8487] lo speed is unknown, defaulting to 1000
[  153.950089][ T8521] netlink: 200 bytes leftover after parsing attributes in process `syz.4.706'.
[  153.969965][ T8523] netlink: 112 bytes leftover after parsing attributes in process `syz.1.705'.
[  154.160990][ T8514] lo speed is unknown, defaulting to 1000
[  154.196497][ T8534] rdma_op ffff8880285569f0 conn xmit_rdma 0000000000000000
[  154.221772][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.708'.
[  155.497559][ T8579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.720'.
[  155.548820][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'.
[  155.622806][ T8588] netlink: 232 bytes leftover after parsing attributes in process `syz.3.723'.
[  155.754057][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.723'.
[  155.763635][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.723'.
[  155.905164][ T8601] netlink: 'syz.2.726': attribute type 11 has an invalid length.
[  156.083167][ T8594] lo speed is unknown, defaulting to 1000
[  156.365136][ T8616] syzkaller0: entered allmulticast mode
[  156.380141][ T8615] syzkaller0: left allmulticast mode
[  156.838890][ T8628] netlink: 'syz.4.736': attribute type 29 has an invalid length.
[  158.993622][ T5835] Bluetooth: hci4: command 0x0405 tx timeout
[  160.123944][   T81] wlan1: Trigger new scan to find an IBSS to join
[  160.702815][ T8682] netlink: 'syz.0.750': attribute type 3 has an invalid length.
[  160.723967][ T8682] __nla_validate_parse: 4 callbacks suppressed
[  160.723989][ T8682] netlink: 56 bytes leftover after parsing attributes in process `syz.0.750'.
[  160.768963][ T8682] netlink: 'syz.0.750': attribute type 3 has an invalid length.
[  160.784844][ T8682] netlink: 56 bytes leftover after parsing attributes in process `syz.0.750'.
[  161.074207][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'.
[  161.118604][ T8694] netlink: 28 bytes leftover after parsing attributes in process `syz.0.755'.
[  161.152081][ T8701] vlan0: entered allmulticast mode
[  161.312940][ T8706] trusted_key: syz.2.758 sent an empty control message without MSG_MORE.
[  161.351896][ T8710] tipc: Started in network mode
[  161.374742][ T8710] tipc: Node identity ac14140f, cluster identity 4711
[  161.393844][ T8710] tipc: New replicast peer: 255.255.255.255
[  161.418133][ T8710] tipc: Enabled bearer <udp:syz2>, priority 10
[  161.658007][ T8730] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  161.667894][ T8730] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.971134][ T8757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.772'.
[  162.512862][ T8769] xt_hashlimit: invalid rate
[  162.514965][ T6811] tipc: Node number set to 2886997007
[  162.642712][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.778'.
[  163.030138][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.780'.
[  163.066070][ T8803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.784'.
[  163.241239][ T8801] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.248919][ T8801] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.682301][ T8801] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.691576][ T8801] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.702136][ T8801] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.711988][ T8801] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.966777][ T8799] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.976584][ T8799] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.996193][ T8799] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  164.012528][ T8799] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.080736][ T8803] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  164.096107][ T8805] infiniband syz0: set active
[  164.111023][ T4500] wlan1: Trigger new scan to find an IBSS to join
[  164.146233][ T8805] infiniband syz0: set active
[  164.156004][ T8805] infiniband syz0: set active
[  164.244166][ T8805] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.282052][ T8805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  164.333046][ T8823] netlink: 184 bytes leftover after parsing attributes in process `syz.0.788'.
[  164.337925][ T5911] lo speed is unknown, defaulting to 1000
[  164.376356][ T6805] lo speed is unknown, defaulting to 1000
[  164.385438][ T6796] lo speed is unknown, defaulting to 1000
[  164.410863][ T8809] lo speed is unknown, defaulting to 1000
[  164.474792][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.791'.
[  164.566092][ T8834] vlan2: entered allmulticast mode
[  164.628735][ T8837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.653907][ T8837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.677947][ T8837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.694705][ T8837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.931771][ T8861] netlink: 'syz.3.801': attribute type 1 has an invalid length.
[  164.970464][ T8861] bond1: (slave geneve2): making interface the new active one
[  164.982572][ T8861] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  165.146827][ T8893] team0: entered promiscuous mode
[  165.194482][ T8893] team_slave_0: entered promiscuous mode
[  165.221080][ T8903] wlan1: Creating new IBSS network, BSSID be:df:18:ed:8f:1a
[  165.304386][ T8893] team_slave_1: entered promiscuous mode
[  165.388691][ T8890] team0: left promiscuous mode
[  165.393548][ T8890] team_slave_0: left promiscuous mode
[  165.432284][ T8890] team_slave_1: left promiscuous mode
[  165.731523][ T8925] __nla_validate_parse: 6 callbacks suppressed
[  165.731546][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.806'.
[  165.795463][ T8929] netlink: 28 bytes leftover after parsing attributes in process `syz.3.807'.
[  166.100981][ T8925] lo speed is unknown, defaulting to 1000
[  166.502287][ T8955] tipc: Invalid UDP bearer configuration
[  166.502332][ T8955] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  166.678923][ T8964] netlink: 120 bytes leftover after parsing attributes in process `syz.1.819'.
[  166.694986][ T8964] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  167.025966][ T8976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.821'.
[  167.068435][ T8979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.821'.
[  167.135912][ T8982] netlink: 'syz.0.824': attribute type 1 has an invalid length.
[  167.143792][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.824'.
[  167.250692][ T8986] netlink: 20 bytes leftover after parsing attributes in process `syz.1.825'.
[  167.266664][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.826'.
[  167.406282][ T8989] netlink: 'syz.3.828': attribute type 4 has an invalid length.
[  167.457649][ T8998] netlink: 'syz.3.828': attribute type 4 has an invalid length.
[  167.582160][ T9004] syz.2.831: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  167.610166][ T9004] CPU: 1 UID: 0 PID: 9004 Comm: syz.2.831 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0
[  167.620851][ T9004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  167.630968][ T9004] Call Trace:
[  167.634279][ T9004]  <TASK>
[  167.637247][ T9004]  dump_stack_lvl+0x241/0x360
[  167.642105][ T9004]  ? __pfx_dump_stack_lvl+0x10/0x10
[  167.647443][ T9004]  ? __pfx__printk+0x10/0x10
[  167.652083][ T9004]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  167.658548][ T9004]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  167.665105][ T9004]  warn_alloc+0x278/0x410
[  167.669473][ T9004]  ? __vmalloc_node_range_noprof+0x106/0x1380
[  167.675575][ T9004]  ? __pfx_warn_alloc+0x10/0x10
[  167.680473][ T9004]  ? kasan_save_track+0x3f/0x80
[  167.685355][ T9004]  ? __kasan_kmalloc+0x98/0xb0
[  167.690151][ T9004]  ? xsk_setsockopt+0x4ea/0x950
[  167.695049][ T9004]  ? do_sock_setsockopt+0x3af/0x720
[  167.700304][ T9004]  ? __x64_sys_setsockopt+0x1ee/0x280
[  167.705720][ T9004]  ? do_syscall_64+0xf3/0x230
[  167.710434][ T9004]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.716551][ T9004]  __vmalloc_node_range_noprof+0x126/0x1380
[  167.722538][ T9004]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  167.728921][ T9004]  ? __kasan_kmalloc+0x98/0xb0
[  167.733718][ T9004]  vmalloc_user_noprof+0x74/0x80
[  167.738668][ T9004]  ? xskq_create+0xb6/0x170
[  167.743180][ T9004]  xskq_create+0xb6/0x170
[  167.747537][ T9004]  xsk_init_queue+0xa1/0x100
[  167.752187][ T9004]  xsk_setsockopt+0x4ea/0x950
[  167.756908][ T9004]  ? __pfx_xsk_setsockopt+0x10/0x10
[  167.762151][ T9004]  ? __pfx_aa_sk_perm+0x10/0x10
[  167.767061][ T9004]  ? aa_sock_opt_perm+0x79/0x120
[  167.772038][ T9004]  ? __pfx_xsk_setsockopt+0x10/0x10
[  167.777294][ T9004]  do_sock_setsockopt+0x3af/0x720
[  167.782365][ T9004]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  167.787958][ T9004]  ? __fget_files+0x395/0x410
[  167.792674][ T9004]  ? __fget_files+0x2a/0x410
[  167.797312][ T9004]  __x64_sys_setsockopt+0x1ee/0x280
[  167.802551][ T9004]  do_syscall_64+0xf3/0x230
[  167.807089][ T9004]  ? clear_bhb_loop+0x35/0x90
[  167.811813][ T9004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.817747][ T9004] RIP: 0033:0x7f5e22d85d29
[  167.822202][ T9004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.834963][ T9016] netlink: 40 bytes leftover after parsing attributes in process `syz.4.838'.
[  167.841822][ T9004] RSP: 002b:00007f5e23b68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  167.859151][ T9004] RAX: ffffffffffffffda RBX: 00007f5e22f76080 RCX: 00007f5e22d85d29
[  167.867164][ T9004] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  167.875170][ T9004] RBP: 00007f5e22e01b08 R08: 0000000000000004 R09: 0000000000000000
[  167.883155][ T9004] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000
[  167.891137][ T9004] R13: 0000000000000000 R14: 00007f5e22f76080 R15: 00007fff81ed9248
[  167.899129][ T9004]  </TASK>
[  168.012379][ T9004] Mem-Info:
[  168.065199][ T9004] active_anon:4053 inactive_anon:0 isolated_anon:0
[  168.065199][ T9004]  active_file:1386 inactive_file:38284 isolated_file:0
[  168.065199][ T9004]  unevictable:768 dirty:104 writeback:18
[  168.065199][ T9004]  slab_reclaimable:10722 slab_unreclaimable:104485
[  168.065199][ T9004]  mapped:28340 shmem:1402 pagetables:629
[  168.065199][ T9004]  sec_pagetables:0 bounce:0
[  168.065199][ T9004]  kernel_misc_reclaimable:0
[  168.065199][ T9004]  free:1337003 free_pcp:637 free_cma:0
[  168.079330][ T9028] netlink: 152 bytes leftover after parsing attributes in process `syz.3.837'.
[  168.121869][ T9004] Node 0 active_anon:16048kB inactive_anon:0kB active_file:5544kB inactive_file:153060kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113376kB dirty:424kB writeback:72kB shmem:4080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11988kB pagetables:2556kB sec_pagetables:0kB all_unreclaimable? no
[  168.204776][ T9004] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  168.273713][ T9004] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  168.322653][ T9004] lowmem_reserve[]: 0 2465 2466 0 0
[  168.336279][ T9004] Node 0 DMA32 free:1424908kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:16016kB inactive_anon:0kB active_file:5544kB inactive_file:152240kB unevictable:1536kB writepending:428kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:3612kB local_pcp:1924kB free_cma:0kB
[  168.379644][ T9043] ip6gretap0: entered promiscuous mode
[  168.406433][ T9004] lowmem_reserve[]: 0 0 0 0 0
[  168.412726][ T9043] batadv_slave_0: entered promiscuous mode
[  168.419488][ T9004] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  168.463047][ T9004] lowmem_reserve[]: 0 0 0 0 0
[  168.468556][ T9004] Node 1 Normal free:3907008kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  168.510763][ T9004] lowmem_reserve[]: 0 0 0 0 0
[  168.520166][ T9004] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  168.550702][ T9004] Node 0 DMA32: 267*4kB (UM) 70*8kB (UME) 99*16kB (UM) 84*32kB (ME) 315*64kB (UME) 80*128kB (UME) 52*256kB (UM) 30*512kB (UME) 26*1024kB (UME) 13*2048kB (UM) 315*4096kB (UM) = 1408460kB
[  168.590512][ T9004] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  168.621737][ T9004] Node 1 Normal: 234*4kB (UME) 61*8kB (UME) 39*16kB (UME) 208*32kB (UME) 115*64kB (UME) 42*128kB (UME) 14*256kB (UME) 8*512kB (UME) 3*1024kB (UME) 2*2048kB (U) 945*4096kB (M) = 3907008kB
[  168.647497][ T9004] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  168.710918][ T9004] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  168.733155][ T9004] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  168.763232][ T9004] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  168.788169][ T9004] 41074 total pagecache pages
[  168.805085][ T9004] 0 pages in swap cache
[  168.809388][ T9004] Free swap  = 124996kB
[  168.814964][ T9004] Total swap = 124996kB
[  168.819165][ T9004] 2097051 pages RAM
[  168.842420][ T9004] 0 pages HighMem/MovableOnly
[  168.852517][ T9004] 427011 pages reserved
[  168.873305][ T9004] 0 pages cma reserved
[  169.042359][ T9078] tipc: Invalid UDP bearer configuration
[  169.042405][ T9078] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  169.266031][ T9085] pim6reg0: tun_chr_ioctl cmd 1074025694
[  169.272971][ T9087] netlink: 'syz.2.856': attribute type 7 has an invalid length.
[  169.281553][ T9087] netlink: 'syz.2.856': attribute type 8 has an invalid length.
[  169.341130][ T9087] erspan0: entered promiscuous mode
[  169.375459][ T9087] batadv_slave_1: entered promiscuous mode
[  169.387912][ T9087] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  169.415346][ T9087] Cannot create hsr debugfs directory
[  169.438147][ T9087] netlink: 'syz.2.856': attribute type 7 has an invalid length.
[  169.470560][ T9087] netlink: 'syz.2.856': attribute type 8 has an invalid length.
[  169.560010][ T9095] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  169.638781][ T9099] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  169.927624][ T9109] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  169.965051][ T9109] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  171.195513][ T9176] __nla_validate_parse: 21 callbacks suppressed
[  171.195535][ T9176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.882'.
[  171.229001][ T9176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.882'.
[  171.253575][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'.
[  171.316844][ T9184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.379916][ T9183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  171.482164][ T9183] netlink: 68 bytes leftover after parsing attributes in process `syz.4.881'.
[  171.518829][ T9183] netlink: 68 bytes leftover after parsing attributes in process `syz.4.881'.
[  171.549846][ T9171] lo speed is unknown, defaulting to 1000
[  172.099695][ T9194] netlink: 'syz.3.885': attribute type 1 has an invalid length.
[  172.122672][ T9192] netlink: 'syz.3.885': attribute type 1 has an invalid length.
[  172.156737][ T9201] ax25_connect(): syz.2.888 uses autobind, please contact jreuter@yaina.de
[  172.188272][ T9202] netlink: 'syz.1.886': attribute type 10 has an invalid length.
[  172.198380][ T9192] 8021q: adding VLAN 0 to HW filter on device bond2
[  172.223917][ T9191] 8021q: adding VLAN 0 to HW filter on device batadv1
[  172.237565][ T9191] bond2: (slave batadv1): making interface the new active one
[  172.246711][ T9191] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  172.256767][ T9202] hsr0: entered promiscuous mode
[  172.262037][ T9202] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  172.272744][ T9202] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  172.291201][ T9202] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  172.643394][ T9201] lo speed is unknown, defaulting to 1000
[  172.643410][ T9219] netlink: 'syz.0.892': attribute type 21 has an invalid length.
[  173.488636][ T9253] netlink: 'syz.3.899': attribute type 10 has an invalid length.
[  173.641930][ T9253] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  173.680193][ T9253] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  173.710016][ T9253] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  173.756889][ T9253] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.763923][ T9253] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  173.806307][ T9253] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  173.985045][ T8809] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  174.197615][ T9275] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  174.218131][ T9275] bridge1: entered promiscuous mode
[  174.233936][ T9275] bridge1: entered allmulticast mode
[  174.297228][ T9265] netlink: 32 bytes leftover after parsing attributes in process `syz.1.902'.
[  174.995122][ T9306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.914'.
[  175.253507][ T9316] veth4: entered allmulticast mode
[  175.294375][ T9324] openvswitch: netlink: Missing key (keys=40, expected=100)
[  175.420902][ T3563] tipc: Subscription rejected, illegal request
[  175.488820][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.925'.
[  175.497428][ T9333] 8021q: adding VLAN 0 to HW filter on device bond1
[  175.509772][ T9333] bond0: (slave bond1): Enslaving as an active interface with an up link
[  175.631710][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.925'.
[  175.678758][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.927'.
[  175.898923][ T9359] pim6reg: entered allmulticast mode
[  176.173804][ T9367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.192797][ T9367] netlink: 'syz.0.933': attribute type 10 has an invalid length.
[  176.257661][ T9367] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20000
[  176.307176][ T9367] IPVS: Error connecting to the multicast addr
[  176.795843][ T9397] __nla_validate_parse: 4 callbacks suppressed
[  176.795865][ T9397] netlink: 28 bytes leftover after parsing attributes in process `syz.4.943'.
[  176.813730][ T9397] netlink: 28 bytes leftover after parsing attributes in process `syz.4.943'.
[  176.989610][ T9406] openvswitch: netlink: VXLAN extension 15883 out of range max 1
[  177.002982][ T9406] netlink: 'syz.4.946': attribute type 5 has an invalid length.
[  177.092232][ T9412] netlink: 'syz.0.947': attribute type 10 has an invalid length.
[  177.120237][ T9412] team0: Device ipvlan1 failed to register rx_handler
[  178.440920][ T9448] netlink: 20 bytes leftover after parsing attributes in process `syz.4.957'.
[  178.534344][ T9452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.959'.
[  178.584877][ T5840] Bluetooth: hci4: command 0x0405 tx timeout
[  178.639986][ T9431] lo speed is unknown, defaulting to 1000
[  178.651992][ T9457] sch_tbf: burst 0 is lower than device lo mtu (81) !
[  178.721749][ T9462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.962'.
[  179.061359][ T9473] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  179.547711][ T9489] xt_TCPMSS: Only works on TCP SYN packets
[  179.984297][ T9500] netlink: 160 bytes leftover after parsing attributes in process `syz.4.969'.
[  180.025819][ T9504] netlink: 32 bytes leftover after parsing attributes in process `syz.0.972'.
[  180.173599][ T9511] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  180.184113][ T9511] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  180.196394][ T9512] batadv_slave_1: entered promiscuous mode
[  180.206207][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.973'.
[  180.226367][ T9511] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  180.288560][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.973'.
[  180.336396][ T9492] lo speed is unknown, defaulting to 1000
[  180.669839][ T9502] lo speed is unknown, defaulting to 1000
[  180.946745][ T9529] netlink: 20 bytes leftover after parsing attributes in process `syz.1.975'.
[  180.964670][ T9508] batadv_slave_1: left promiscuous mode
[  181.193237][ T9534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0
[  181.220419][ T9534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.225941][ T9538] netlink: 'syz.0.977': attribute type 10 has an invalid length.
[  181.241815][ T9534] dummy0: entered promiscuous mode
[  181.261757][ T9534] macsec1: entered promiscuous mode
[  181.292278][ T9534] macsec1: entered allmulticast mode
[  181.324833][ T9534] dummy0: entered allmulticast mode
[  181.338610][ T9534] dummy0: left allmulticast mode
[  181.345676][ T9534] dummy0: left promiscuous mode
[  181.469560][ T9539] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  181.496550][ T9539] macsec2: entered promiscuous mode
[  181.541440][ T9539] mac80211_hwsim hwsim10 wlan0: left promiscuous mode
[  182.038809][ T9557] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  182.106687][ T9557] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  182.249985][ T9563] pim6reg1: entered promiscuous mode
[  182.269065][ T9563] pim6reg1: entered allmulticast mode
[  182.370235][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.992'.
[  182.389498][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.992'.
[  182.391317][ T9576] netlink: 28 bytes leftover after parsing attributes in process `syz.1.991'.
[  182.408365][ T9569] 
@ÿ: renamed from veth0_vlan
[  182.416412][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'.
[  182.427732][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'.
[  182.468001][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'.
[  182.478285][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'.
[  182.488023][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'.
[  182.497893][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'.
[  182.509888][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'.
[  182.534387][ T9580] 8021q: VLANs not supported on lo
[  182.591520][ T9580] netlink: 'syz.3.994': attribute type 10 has an invalid length.
[  182.684169][ T9590] siw: device registration error -23
[  182.920185][ T9607] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  182.929229][ T9600] netlink: 'syz.3.1000': attribute type 1 has an invalid length.
[  183.768785][ T9638] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.779467][ T9638] 8021q: adding VLAN 0 to HW filter on device team0
[  183.802124][ T9638] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  184.280990][ T9658] netlink: 'syz.2.1017': attribute type 1 has an invalid length.
[  184.695293][ T9682] netlink: 'syz.1.1021': attribute type 4 has an invalid length.
[  184.737995][ T9682] infiniband syz0: set down
[  184.753070][ T5911] lo speed is unknown, defaulting to 1000
[  184.767043][ T5911] lo speed is unknown, defaulting to 1000
[  184.782010][ T9683] ip6t_srh: unknown srh invflags 4000
[  185.299754][ T9709] netlink: 'syz.4.1030': attribute type 5 has an invalid length.
[  186.960233][ T9705] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  186.965743][ T9709] ip6erspan0: entered promiscuous mode
[  187.393352][ T9751] __nla_validate_parse: 96 callbacks suppressed
[  187.393374][ T9751] netlink: 4260 bytes leftover after parsing attributes in process `syz.0.1040'.
[  187.429789][ T9751] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  187.558405][ T9752] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  187.584751][ T9752] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.658613][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1045'.
[  187.823509][ T9752] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  187.835758][ T9752] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.917499][ T9752] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  187.930651][ T9752] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.997855][ T9752] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  188.021111][ T9752] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.104151][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1049'.
[  188.221517][ T9752] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  188.244796][ T9752] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.272974][ T9752] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  188.291624][ T9752] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.323087][ T9752] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  188.352229][ T9752] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.400008][ T9752] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  188.420335][ T9752] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.440246][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1052'.
[  188.541113][ T9795] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1052'.
[  188.578072][ T9785] lo speed is unknown, defaulting to 1000
[  188.975679][ T9807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1056'.
[  189.165610][ T9807] 8021q: adding VLAN 0 to HW filter on device bond3
[  189.484958][ T9818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  189.642163][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1062'.
[  189.703925][ T9835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1064'.
[  189.722761][ T9822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1062'.
[  189.850613][ T9837] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1065'.
[  189.907755][ T9828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.919949][ T9828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  189.932493][ T9828] bond0 (unregistering): (slave netdevsim0): Releasing backup interface
[  189.951077][ T9828] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  189.965362][ T9828] bond0 (unregistering): Released all slaves
[  190.672286][ T9874] x_tables: duplicate underflow at hook 1
[  191.359933][ T9922] nbd: must specify a device to reconfigure
[  191.468321][ T9924] netlink: 'syz.2.1089': attribute type 16 has an invalid length.
[  191.590446][ T9935] netlink: 'syz.2.1092': attribute type 1 has an invalid length.
[  191.613084][ T9935] netlink: 'syz.2.1092': attribute type 1 has an invalid length.
[  191.874120][ T9937] syzkaller0: entered promiscuous mode
[  191.880677][ T9937] syzkaller0: entered allmulticast mode
[  194.290763][ T9999] netlink: 'syz.1.1109': attribute type 3 has an invalid length.
[  194.436577][T10004] xt_cgroup: invalid path, errno=-2
[  194.510061][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  194.819190][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  194.838534][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  194.848998][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  194.885419][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  194.894274][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  194.905385][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  195.001557][T10033] __nla_validate_parse: 6 callbacks suppressed
[  195.001577][T10033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1117'.
[  195.124868][T10040] netlink: 'syz.2.1120': attribute type 12 has an invalid length.
[  195.236154][T10026] lo speed is unknown, defaulting to 1000
[  195.276568][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'.
[  195.285943][T10048] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1123'.
[  195.294929][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'.
[  195.315133][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'.
[  195.338020][T10044] ax25_connect(): syz.1.1122 uses autobind, please contact jreuter@yaina.de
[  195.451961][T10052] ieee802154 phy1 wpan1: encryption failed: -22
[  195.539651][T10058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1124'.
[  195.593622][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1124'.
[  195.620860][T10066] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1124'.
[  195.632694][T10065] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.870295][T10026] chnl_net:caif_netlink_parms(): no params data found
[  195.936331][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'.
[  195.972789][T10078] ieee802154 phy1 wpan1: encryption failed: -22
[  195.975889][T10081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1126'.
[  196.157606][T10026] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.172279][T10026] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.180936][T10026] bridge_slave_0: entered allmulticast mode
[  196.198257][T10026] bridge_slave_0: entered promiscuous mode
[  196.221726][T10095] batadv_slave_0: entered promiscuous mode
[  196.260722][T10096] bridge0: port 3(bond3) entered blocking state
[  196.273406][T10096] bridge0: port 3(bond3) entered disabled state
[  196.282938][T10096] bond3: entered allmulticast mode
[  196.298356][T10096] bond3: entered promiscuous mode
[  196.304368][T10026] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.312607][T10026] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.320313][T10026] bridge_slave_1: entered allmulticast mode
[  196.328141][T10026] bridge_slave_1: entered promiscuous mode
[  196.351194][T10095] batadv_slave_1: entered promiscuous mode
[  196.478877][T10026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.530163][T10026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.582522][T10104] infiniband syz!: set down
[  196.587537][T10104] infiniband syz!: added team_slave_0
[  196.634290][T10104] RDS/IB: syz!: added
[  196.639137][T10026] team0: Port device team_slave_0 added
[  196.649903][T10026] team0: Port device team_slave_1 added
[  196.654872][T10104] smc: adding ib device syz! with port count 1
[  196.662489][T10104] smc:    ib device syz! port 1 has pnetid 
[  196.758058][T10026] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.775074][T10026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.801914][T10026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.854038][T10026] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.868825][T10026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.895459][T10026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  196.921135][T10116] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  196.985759][ T5835] Bluetooth: hci1: command tx timeout
[  197.021296][T10094] batadv_slave_1: left promiscuous mode
[  197.072691][T10094] batadv_slave_0: left promiscuous mode
[  197.225977][T10026] hsr_slave_0: entered promiscuous mode
[  197.255727][T10026] hsr_slave_1: entered promiscuous mode
[  197.285329][T10026] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  197.306750][T10026] Cannot create hsr debugfs directory
[  197.319785][T10133] x_tables: ip_tables: ah match: only valid for protocol 51
[  197.696877][T10026] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  197.708095][T10026] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.745430][T10130] lo speed is unknown, defaulting to 1000
[  197.874391][T10026] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  197.892830][T10026] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.010891][T10026] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  198.048084][T10026] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.089935][T10132] lo speed is unknown, defaulting to 1000
[  198.115685][ T5840] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  198.204344][T10026] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  198.221253][T10026] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.442178][T10026] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  198.470265][T10026] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  198.494747][T10026] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  198.554999][T10026] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  198.702759][T10026] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.722089][T10026] 8021q: adding VLAN 0 to HW filter on device team0
[  198.760208][T10026] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  198.776764][T10026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  198.800778][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.809062][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.829875][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.837044][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.065902][ T5840] Bluetooth: hci1: command tx timeout
[  199.072946][T10158] pim6reg1: entered promiscuous mode
[  199.079931][T10158] pim6reg1: entered allmulticast mode
[  199.211905][T10164] siw: device registration error -23
[  199.351970][T10164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  199.463338][T10026] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.492738][T10173] ax25_connect(): syz.3.1149 uses autobind, please contact jreuter@yaina.de
[  200.255488][T10200] __nla_validate_parse: 2 callbacks suppressed
[  200.255520][T10200] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1155'.
[  200.514787][T10026] veth0_vlan: entered promiscuous mode
[  200.549567][T10026] veth1_vlan: entered promiscuous mode
[  200.864319][T10173] lo speed is unknown, defaulting to 1000
[  200.892233][T10026] veth0_macvtap: entered promiscuous mode
[  200.935742][T10026] veth1_macvtap: entered promiscuous mode
[  200.951030][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.961820][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.971885][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.982472][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.993848][T10026] batman_adv: batadv0: Interface activated: batadv_slave_0
[  201.007506][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.018094][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.028152][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.038762][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.049860][T10026] batman_adv: batadv0: Interface activated: batadv_slave_1
[  201.059827][T10026] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.068924][T10026] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.077782][T10026] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.086604][T10026] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.156026][ T5836] Bluetooth: hci1: command tx timeout
[  201.242727][ T3563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.277719][ T3563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.336671][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.375627][T10228] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1162'.
[  201.376813][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.707093][ T5836] Bluetooth: hci3: command 0x0406 tx timeout
[  201.707105][ T5845] Bluetooth: hci2: command 0x0406 tx timeout
[  202.532316][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.668318][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.984060][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.005902][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  203.020437][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  203.035035][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  203.048271][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  203.069847][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  203.077299][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  203.183567][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.212531][T10280] wg1: entered promiscuous mode
[  203.464932][    C0] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  203.475202][ T8907] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  203.665999][T10305] team0: Device gtp0 is of different type
[  203.839838][T10271] lo speed is unknown, defaulting to 1000
[  203.854230][T10311] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.862813][T10311] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.923451][   T12] bridge_slave_1: left allmulticast mode
[  203.934922][   T12] bridge_slave_1: left promiscuous mode
[  203.942247][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.043155][   T12] bridge_slave_0: left allmulticast mode
[  204.062177][   T12] bridge_slave_0: left promiscuous mode
[  204.083327][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.644950][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  204.659318][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  204.671190][   T12] bond0 (unregistering): Released all slaves
[  204.745614][    C0] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  204.860544][T10335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1193'.
[  204.992566][T10346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.145095][ T5840] Bluetooth: hci1: command tx timeout
[  206.404851][   T12] hsr_slave_0: left promiscuous mode
[  206.416020][   T12] hsr_slave_1: left promiscuous mode
[  206.447108][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.462578][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.473828][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.512986][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.564443][   T12] veth1_macvtap: left promiscuous mode
[  206.585815][   T12] veth0_macvtap: left promiscuous mode
[  206.599305][   T12] veth1_vlan: left promiscuous mode
[  206.614495][   T12] veth0_vlan: left promiscuous mode
[  206.701564][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1208'.
[  207.063819][T10413] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17
[  207.225682][ T5840] Bluetooth: hci1: command tx timeout
[  207.480098][T10422] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  207.677939][   T12] team0 (unregistering): Port device team_slave_1 removed
[  207.731996][   T12] team0 (unregistering): Port device team_slave_0 removed
[  208.173344][T10408] macvtap1: entered allmulticast mode
[  208.179152][T10408] hsr0: entered allmulticast mode
[  208.185280][T10408] hsr_slave_0: entered allmulticast mode
[  208.191042][T10408] hsr_slave_1: entered allmulticast mode
[  208.250805][T10429] team0: Port device batadv0 removed
[  208.258537][T10429] bridge_slave_0: left allmulticast mode
[  208.264309][T10429] bridge_slave_0: left promiscuous mode
[  208.270992][T10429] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.289152][T10429] bridge_slave_1: left allmulticast mode
[  208.295180][T10429] bridge_slave_1: left promiscuous mode
[  208.300996][T10429] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.378647][T10429] bond0: (slave bond_slave_0): Releasing backup interface
[  208.393843][T10429] bond0: (slave bond_slave_1): Releasing backup interface
[  208.419459][T10429] team0: Port device team_slave_0 removed
[  208.440560][T10429] team0: Port device team_slave_1 removed
[  208.455762][T10429] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.463221][T10429] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.480170][T10429] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.492364][T10429] batman_adv: batadv0: Removing interface: batadv_slave_1
[  208.533595][T10429] bond1: (slave batadv1): Releasing active interface
[  208.540633][T10429] bond1: (slave batadv1): the permanent HWaddr of slave - 92:de:67:cf:49:d7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  208.571535][T10429] bond1: (slave batadv2): making interface the new active one
[  208.592706][T10429] bond1: (slave batadv2): Releasing active interface
[  208.612294][T10429] bond3: left allmulticast mode
[  208.617764][T10429] bond3: left promiscuous mode
[  208.622862][T10429] bridge0: port 3(bond3) entered disabled state
[  208.640758][T10271] chnl_net:caif_netlink_parms(): no params data found
[  208.760874][T10437] lo: left allmulticast mode
[  208.934346][T10410] lo speed is unknown, defaulting to 1000
[  208.953372][T10458] netlink: 'syz.2.1222': attribute type 1 has an invalid length.
[  208.962230][T10458] netlink: 'syz.2.1222': attribute type 1 has an invalid length.
[  208.980485][T10461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1223'.
[  209.045051][T10271] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.047857][T10458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1222'.
[  209.052364][T10271] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.086839][T10271] bridge_slave_0: entered allmulticast mode
[  209.094160][T10271] bridge_slave_0: entered promiscuous mode
[  209.127120][T10271] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.145178][T10271] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.171082][T10271] bridge_slave_1: entered allmulticast mode
[  209.191599][T10271] bridge_slave_1: entered promiscuous mode
[  209.199510][T10467] netlink: 'syz.1.1224': attribute type 18 has an invalid length.
[  209.264302][T10467] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  209.274910][T10467] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  209.283658][T10467] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  209.294135][T10467] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  209.306023][ T5840] Bluetooth: hci1: command tx timeout
[  209.457226][T10271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.516699][T10271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.658025][T10271] team0: Port device team_slave_0 added
[  209.674520][T10271] team0: Port device team_slave_1 added
[  209.719564][T10271] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.732433][T10271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.765024][T10271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.789178][T10271] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.819744][T10271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.911028][T10271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  210.408022][T10271] hsr_slave_0: entered promiscuous mode
[  210.473843][T10271] hsr_slave_1: entered promiscuous mode
[  210.508782][T10271] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  210.534668][T10271] Cannot create hsr debugfs directory
[  210.885541][T10525] netlink: 'syz.0.1238': attribute type 1 has an invalid length.
[  210.923388][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1237'.
[  211.307128][T10539] xt_hashlimit: size too large, truncated to 1048576
[  211.371446][T10548] 
: renamed from bond0 (while UP)
[  211.384756][ T5840] Bluetooth: hci1: command tx timeout
[  211.421362][T10546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1246'.
[  211.459067][T10546] bridge_slave_1: left allmulticast mode
[  211.471452][T10546] bridge_slave_1: left promiscuous mode
[  211.498262][T10546] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.539442][T10546] bridge_slave_0: left allmulticast mode
[  211.587758][T10546] bridge_slave_0: left promiscuous mode
[  211.602771][T10546] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.776993][T10271] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  211.797379][T10271] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  211.822225][T10271] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  211.832850][T10271] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  211.992506][T10271] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.025697][T10271] 8021q: adding VLAN 0 to HW filter on device team0
[  212.054120][ T8894] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.061297][ T8894] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.086488][ T8894] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.093717][ T8894] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.202405][T10563] netlink: 'syz.1.1250': attribute type 3 has an invalid length.
[  212.524862][T10574] netlink: 'syz.1.1252': attribute type 10 has an invalid length.
[  212.591981][T10271] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.784845][T10585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  213.121140][T10597] nbd: must specify a size in bytes for the device
[  213.177685][T10271] veth0_vlan: entered promiscuous mode
[  213.203224][T10271] veth1_vlan: entered promiscuous mode
[  213.347383][T10271] veth0_macvtap: entered promiscuous mode
[  213.410278][T10271] veth1_macvtap: entered promiscuous mode
[  213.498794][T10271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  213.546327][T10615] netlink: 'syz.3.1260': attribute type 1 has an invalid length.
[  213.574896][T10271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.585898][T10615] netlink: 'syz.3.1260': attribute type 1 has an invalid length.
[  213.603975][T10271] batman_adv: batadv0: Interface activated: batadv_slave_0
[  213.639144][T10271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.682306][T10271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.709258][T10271] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.748481][T10616] veth0_to_team: entered promiscuous mode
[  213.754274][T10616] veth0_to_team: entered allmulticast mode
[  213.770468][T10615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1260'.
[  213.786292][T10271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.805653][T10271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.817080][T10271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.835928][T10271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  214.092936][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1261'.
[  214.147003][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.202689][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.258471][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.277827][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1263'.
[  214.307480][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.321608][T10626] bond2: entered promiscuous mode
[  214.471944][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1264'.
[  215.470394][T10650] ip6t_srh: unknown srh invflags 92A7
[  215.773642][T10660] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1273'.
[  216.206783][T10676] Bluetooth: MGMT ver 1.23
[  216.449823][   T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.558562][T10683] netlink: 'syz.1.1279': attribute type 1 has an invalid length.
[  216.579156][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1279'.
[  216.662411][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1281'.
[  216.693370][T10689] vlan4: entered allmulticast mode
[  216.722961][T10689] xfrm0: entered allmulticast mode
[  216.854233][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1279'.
[  216.909849][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  216.922527][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  216.932683][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  216.943105][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  216.962842][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  216.970437][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  217.203306][T10709] netlink: 'syz.2.1284': attribute type 6 has an invalid length.
[  217.215311][   T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.281872][T10709] netlink: 'syz.2.1284': attribute type 21 has an invalid length.
[  217.302362][T10709] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1284'.
[  217.381302][T10709] netlink: 'syz.2.1284': attribute type 5 has an invalid length.
[  217.391460][T10709] netlink: 'syz.2.1284': attribute type 6 has an invalid length.
[  217.407495][T10709] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1284'.
[  217.421510][T10695] lo speed is unknown, defaulting to 1000
[  217.517145][   T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.549738][T10712] netlink: 'syz.2.1284': attribute type 6 has an invalid length.
[  217.699600][   T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.984309][T10744] 
[  217.986728][T10744] ======================================================
[  217.993746][T10744] WARNING: possible circular locking dependency detected
[  218.000771][T10744] 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 Not tainted
[  218.008069][T10744] ------------------------------------------------------
[  218.015108][T10744] syz.2.1292/10744 is trying to acquire lock:
[  218.021189][T10744] ffff88807de34078 (&hdev->lock){+.+.}-{4:4}, at: mgmt_remove_adv_monitor_complete+0xaf/0x550
[  218.031493][T10744] 
[  218.031493][T10744] but task is already holding lock:
[  218.038857][T10744] ffff88807de34690 (&hdev->cmd_sync_work_lock){+.+.}-{4:4}, at: hci_cmd_sync_dequeue+0x44/0x3d0
[  218.049322][T10744] 
[  218.049322][T10744] which lock already depends on the new lock.
[  218.049322][T10744] 
[  218.059724][T10744] 
[  218.059724][T10744] the existing dependency chain (in reverse order) is:
[  218.068736][T10744] 
[  218.068736][T10744] -> #1 (&hdev->cmd_sync_work_lock){+.+.}-{4:4}:
[  218.077348][T10744]        lock_acquire+0x1ed/0x550
[  218.082383][T10744]        __mutex_lock+0x1ac/0xee0
[  218.087410][T10744]        hci_cmd_sync_queue_once+0x43/0x240
[  218.093488][T10744]        le_conn_complete_evt+0xae1/0x12e0
[  218.099303][T10744]        hci_le_conn_complete_evt+0x18c/0x420
[  218.105388][T10744]        hci_event_packet+0xa55/0x1540
[  218.110865][T10744]        hci_rx_work+0x3f3/0xdb0
[  218.115811][T10744]        process_scheduled_works+0xa66/0x1840
[  218.121881][T10744]        worker_thread+0x870/0xd30
[  218.126993][T10744]        kthread+0x2f0/0x390
[  218.131616][T10744]        ret_from_fork+0x4b/0x80
[  218.136555][T10744]        ret_from_fork_asm+0x1a/0x30
[  218.141855][T10744] 
[  218.141855][T10744] -> #0 (&hdev->lock){+.+.}-{4:4}:
[  218.149171][T10744]        validate_chain+0x18ef/0x5920
[  218.154645][T10744]        __lock_acquire+0x1397/0x2100
[  218.160033][T10744]        lock_acquire+0x1ed/0x550
[  218.165083][T10744]        __mutex_lock+0x1ac/0xee0
[  218.170116][T10744]        mgmt_remove_adv_monitor_complete+0xaf/0x550
[  218.176803][T10744]        hci_cmd_sync_dequeue+0x22b/0x3d0
[  218.182536][T10744]        cmd_complete_rsp+0x4c/0x180
[  218.187830][T10744]        mgmt_pending_foreach+0xd1/0x130
[  218.193470][T10744]        mgmt_index_removed+0x133/0x390
[  218.199024][T10744]        hci_sock_bind+0xcce/0x1150
[  218.204231][T10744]        __sys_bind+0x1e4/0x290
[  218.209081][T10744]        __x64_sys_bind+0x7a/0x90
[  218.214107][T10744]        do_syscall_64+0xf3/0x230
[  218.219138][T10744]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.225661][T10744] 
[  218.225661][T10744] other info that might help us debug this:
[  218.225661][T10744] 
[  218.235885][T10744]  Possible unsafe locking scenario:
[  218.235885][T10744] 
[  218.243329][T10744]        CPU0                    CPU1
[  218.248694][T10744]        ----                    ----
[  218.254078][T10744]   lock(&hdev->cmd_sync_work_lock);
[  218.259372][T10744]                                lock(&hdev->lock);
[  218.265971][T10744]                                lock(&hdev->cmd_sync_work_lock);
[  218.273795][T10744]   lock(&hdev->lock);
[  218.277872][T10744] 
[  218.277872][T10744]  *** DEADLOCK ***
[  218.277872][T10744] 
[  218.286016][T10744] 2 locks held by syz.2.1292/10744:
[  218.291210][T10744]  #0: ffff8880530ad258 (sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_bind+0x149/0x1150
[  218.302278][T10744]  #1: ffff88807de34690 (&hdev->cmd_sync_work_lock){+.+.}-{4:4}, at: hci_cmd_sync_dequeue+0x44/0x3d0
[  218.313183][T10744] 
[  218.313183][T10744] stack backtrace:
[  218.319080][T10744] CPU: 1 UID: 0 PID: 10744 Comm: syz.2.1292 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0
[  218.329866][T10744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  218.339921][T10744] Call Trace:
[  218.343284][T10744]  <TASK>
[  218.346256][T10744]  dump_stack_lvl+0x241/0x360
[  218.350961][T10744]  ? __pfx_dump_stack_lvl+0x10/0x10
[  218.356184][T10744]  ? __pfx__printk+0x10/0x10
[  218.360796][T10744]  print_circular_bug+0x13a/0x1b0
[  218.365840][T10744]  check_noncircular+0x36a/0x4a0
[  218.370797][T10744]  ? __pfx_check_noncircular+0x10/0x10
[  218.376293][T10744]  ? lockdep_lock+0x123/0x2b0
[  218.380977][T10744]  ? __pfx_stack_trace_save+0x10/0x10
[  218.386364][T10744]  ? check_noncircular+0x259/0x4a0
[  218.391489][T10744]  validate_chain+0x18ef/0x5920
[  218.396359][T10744]  ? validate_chain+0x15c0/0x5920
[  218.401393][T10744]  ? __pfx_validate_chain+0x10/0x10
[  218.406611][T10744]  ? __pfx_validate_chain+0x10/0x10
[  218.411821][T10744]  ? __lock_acquire+0x1397/0x2100
[  218.416858][T10744]  ? mark_lock+0x9a/0x360
[  218.421199][T10744]  __lock_acquire+0x1397/0x2100
[  218.426065][T10744]  lock_acquire+0x1ed/0x550
[  218.430597][T10744]  ? mgmt_remove_adv_monitor_complete+0xaf/0x550
[  218.436940][T10744]  ? __pfx_lock_acquire+0x10/0x10
[  218.441977][T10744]  ? __pfx___might_resched+0x10/0x10
[  218.447305][T10744]  __mutex_lock+0x1ac/0xee0
[  218.451818][T10744]  ? mgmt_remove_adv_monitor_complete+0xaf/0x550
[  218.458212][T10744]  ? __pfx___might_resched+0x10/0x10
[  218.463520][T10744]  ? __pfx___mutex_trylock_common+0x10/0x10
[  218.469561][T10744]  ? mgmt_remove_adv_monitor_complete+0xaf/0x550
[  218.475918][T10744]  ? __pfx___mutex_lock+0x10/0x10
[  218.481061][T10744]  ? trace_contention_end+0x3c/0x120
[  218.486366][T10744]  ? __mutex_lock+0x37f/0xee0
[  218.491098][T10744]  ? __pfx_register_lock_class+0x10/0x10
[  218.496745][T10744]  ? __pfx_register_lock_class+0x10/0x10
[  218.502385][T10744]  ? hci_cmd_sync_dequeue+0x44/0x3d0
[  218.507690][T10744]  mgmt_remove_adv_monitor_complete+0xaf/0x550
[  218.513859][T10744]  ? __pfx_mgmt_remove_adv_monitor_complete+0x10/0x10
[  218.520646][T10744]  ? __pfx_mgmt_remove_adv_monitor_complete+0x10/0x10
[  218.527423][T10744]  hci_cmd_sync_dequeue+0x22b/0x3d0
[  218.532839][T10744]  cmd_complete_rsp+0x4c/0x180
[  218.537638][T10744]  mgmt_pending_foreach+0xd1/0x130
[  218.542776][T10744]  ? __pfx_cmd_complete_rsp+0x10/0x10
[  218.548174][T10744]  mgmt_index_removed+0x133/0x390
[  218.553304][T10744]  ? __pfx_mgmt_index_removed+0x10/0x10
[  218.558867][T10744]  ? apparmor_capable+0x13b/0x1b0
[  218.563923][T10744]  ? _raw_read_unlock+0x28/0x50
[  218.568780][T10744]  hci_sock_bind+0xcce/0x1150
[  218.573471][T10744]  ? __pfx_hci_sock_bind+0x10/0x10
[  218.578599][T10744]  __sys_bind+0x1e4/0x290
[  218.582933][T10744]  ? __pfx___sys_bind+0x10/0x10
[  218.587799][T10744]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  218.594139][T10744]  ? do_syscall_64+0x100/0x230
[  218.598932][T10744]  __x64_sys_bind+0x7a/0x90
[  218.603440][T10744]  do_syscall_64+0xf3/0x230
[  218.607952][T10744]  ? clear_bhb_loop+0x35/0x90
[  218.612641][T10744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.618649][T10744] RIP: 0033:0x7f5e22d85d29
[  218.623077][T10744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.642776][T10744] RSP: 002b:00007f5e23b89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  218.651207][T10744] RAX: ffffffffffffffda RBX: 00007f5e22f75fa0 RCX: 00007f5e22d85d29
[  218.659186][T10744] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000041
[  218.667166][T10744] RBP: 00007f5e22e01b08 R08: 0000000000000000 R09: 0000000000000000
[  218.675156][T10744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  218.683151][T10744] R13: 0000000000000000 R14: 00007f5e22f75fa0 R15: 00007fff81ed9248
[  218.691149][T10744]  </TASK>
[  218.710636][T10744] ==================================================================
[  218.718755][T10744] BUG: KASAN: slab-use-after-free in cmd_complete_rsp+0x67/0x180
[  218.726532][T10744] Read of size 8 at addr ffff8880295a5fc0 by task syz.2.1292/10744
[  218.734450][T10744] 
[  218.736793][T10744] CPU: 0 UID: 0 PID: 10744 Comm: syz.2.1292 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0
[  218.747579][T10744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  218.757665][T10744] Call Trace:
[  218.760976][T10744]  <TASK>
[  218.763931][T10744]  dump_stack_lvl+0x241/0x360
[  218.768651][T10744]  ? __pfx_dump_stack_lvl+0x10/0x10
[  218.773880][T10744]  ? __pfx__printk+0x10/0x10
[  218.778657][T10744]  ? _printk+0xd5/0x120
[  218.782833][T10744]  ? __virt_addr_valid+0x183/0x530
[  218.787975][T10744]  ? __virt_addr_valid+0x183/0x530
[  218.793098][T10744]  print_report+0x169/0x550
[  218.797622][T10744]  ? __virt_addr_valid+0x183/0x530
[  218.802742][T10744]  ? __virt_addr_valid+0x183/0x530
[  218.807859][T10744]  ? __virt_addr_valid+0x45f/0x530
[  218.812979][T10744]  ? __phys_addr+0xba/0x170
[  218.817493][T10744]  ? cmd_complete_rsp+0x67/0x180
[  218.822444][T10744]  kasan_report+0x143/0x180
[  218.826976][T10744]  ? cmd_complete_rsp+0x67/0x180
[  218.831948][T10744]  cmd_complete_rsp+0x67/0x180
[  218.836748][T10744]  mgmt_pending_foreach+0xd1/0x130
[  218.841868][T10744]  ? __pfx_cmd_complete_rsp+0x10/0x10
[  218.847252][T10744]  mgmt_index_removed+0x133/0x390
[  218.852289][T10744]  ? __pfx_mgmt_index_removed+0x10/0x10
[  218.857850][T10744]  ? apparmor_capable+0x13b/0x1b0
[  218.862889][T10744]  ? _raw_read_unlock+0x28/0x50
[  218.867771][T10744]  hci_sock_bind+0xcce/0x1150
[  218.872495][T10744]  ? __pfx_hci_sock_bind+0x10/0x10
[  218.877621][T10744]  __sys_bind+0x1e4/0x290
[  218.881960][T10744]  ? __pfx___sys_bind+0x10/0x10
[  218.886823][T10744]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  218.893163][T10744]  ? do_syscall_64+0x100/0x230
[  218.897945][T10744]  __x64_sys_bind+0x7a/0x90
[  218.902454][T10744]  do_syscall_64+0xf3/0x230
[  218.906968][T10744]  ? clear_bhb_loop+0x35/0x90
[  218.911671][T10744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.917572][T10744] RIP: 0033:0x7f5e22d85d29
[  218.922011][T10744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.941626][T10744] RSP: 002b:00007f5e23b89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  218.950046][T10744] RAX: ffffffffffffffda RBX: 00007f5e22f75fa0 RCX: 00007f5e22d85d29
[  218.958021][T10744] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000041
[  218.966000][T10744] RBP: 00007f5e22e01b08 R08: 0000000000000000 R09: 0000000000000000
[  218.973972][T10744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  218.981958][T10744] R13: 0000000000000000 R14: 00007f5e22f75fa0 R15: 00007fff81ed9248
[  218.989951][T10744]  </TASK>
[  218.992970][T10744] 
[  218.995294][T10744] Allocated by task 10746:
[  218.999721][T10744]  kasan_save_track+0x3f/0x80
[  219.004402][T10744]  __kasan_kmalloc+0x98/0xb0
[  219.008993][T10744]  __kmalloc_cache_noprof+0x243/0x390
[  219.014370][T10744]  mgmt_pending_new+0x65/0x250
[  219.019140][T10744]  mgmt_pending_add+0x36/0x120
[  219.023912][T10744]  remove_adv_monitor+0x102/0x1b0
[  219.028951][T10744]  hci_mgmt_cmd+0xc47/0x11d0
[  219.033552][T10744]  hci_sock_sendmsg+0x7b8/0x11c0
[  219.038498][T10744]  __sock_sendmsg+0x221/0x270
[  219.043186][T10744]  sock_write_iter+0x2d7/0x3f0
[  219.047961][T10744]  vfs_write+0xaeb/0xd30
[  219.052207][T10744]  ksys_write+0x18f/0x2b0
[  219.056539][T10744]  do_syscall_64+0xf3/0x230
[  219.061077][T10744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.067414][T10744] 
[  219.069739][T10744] Freed by task 10744:
[  219.074147][T10744]  kasan_save_track+0x3f/0x80
[  219.078829][T10744]  kasan_save_free_info+0x40/0x50
[  219.083866][T10744]  __kasan_slab_free+0x59/0x70
[  219.088635][T10744]  kfree+0x196/0x430
[  219.092539][T10744]  mgmt_remove_adv_monitor_complete+0x2bf/0x550
[  219.098787][T10744]  hci_cmd_sync_dequeue+0x22b/0x3d0
[  219.103996][T10744]  cmd_complete_rsp+0x4c/0x180
[  219.108769][T10744]  mgmt_pending_foreach+0xd1/0x130
[  219.113899][T10744]  mgmt_index_removed+0x133/0x390
[  219.118941][T10744]  hci_sock_bind+0xcce/0x1150
[  219.123628][T10744]  __sys_bind+0x1e4/0x290
[  219.127960][T10744]  __x64_sys_bind+0x7a/0x90
[  219.132467][T10744]  do_syscall_64+0xf3/0x230
[  219.136980][T10744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.142886][T10744] 
[  219.145214][T10744] The buggy address belongs to the object at ffff8880295a5f80
[  219.145214][T10744]  which belongs to the cache kmalloc-96 of size 96
[  219.159094][T10744] The buggy address is located 64 bytes inside of
[  219.159094][T10744]  freed 96-byte region [ffff8880295a5f80, ffff8880295a5fe0)
[  219.172730][T10744] 
[  219.175057][T10744] The buggy address belongs to the physical page:
[  219.181480][T10744] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x295a5
[  219.190355][T10744] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  219.197811][T10744] page_type: f5(slab)
[  219.201799][T10744] raw: 00fff00000000000 ffff88801ac41280 ffffea0000c0a340 dead000000000003
[  219.210393][T10744] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000
[  219.218969][T10744] page dumped because: kasan: bad access detected
[  219.225389][T10744] page_owner tracks the page as allocated
[  219.231103][T10744] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7975, tgid 7974 (syz.0.547), ts 140707542848, free_ts 140614901343
[  219.250302][T10744]  post_alloc_hook+0x1f3/0x230
[  219.255109][T10744]  get_page_from_freelist+0x365c/0x37a0
[  219.260663][T10744]  __alloc_pages_noprof+0x292/0x710
[  219.265864][T10744]  alloc_pages_mpol_noprof+0x3e8/0x680
[  219.271336][T10744]  alloc_slab_page+0x6a/0x110
[  219.276015][T10744]  allocate_slab+0x5a/0x2b0
[  219.280518][T10744]  ___slab_alloc+0xc27/0x14a0
[  219.285209][T10744]  __slab_alloc+0x58/0xa0
[  219.289551][T10744]  __kmalloc_noprof+0x2e6/0x4c0
[  219.294410][T10744]  hash_ipmark4_resize+0xb3b/0x1a60
[  219.299635][T10744]  call_ad+0x38b/0xa70
[  219.303732][T10744]  ip_set_ad+0x7e0/0x990
[  219.308011][T10744]  nfnetlink_rcv_msg+0xbec/0x1180
[  219.313070][T10744]  netlink_rcv_skb+0x1e3/0x430
[  219.317850][T10744]  nfnetlink_rcv+0x297/0x2ab0
[  219.322540][T10744]  netlink_unicast+0x7f6/0x990
[  219.327314][T10744] page last free pid 8043 tgid 8042 stack trace:
[  219.333643][T10744]  free_unref_page+0xd3f/0x1010
[  219.338519][T10744]  __put_partials+0x160/0x1c0
[  219.343296][T10744]  put_cpu_partial+0x17c/0x250
[  219.348062][T10744]  __slab_free+0x290/0x380
[  219.352485][T10744]  qlist_free_all+0x9a/0x140
[  219.357078][T10744]  kasan_quarantine_reduce+0x14f/0x170
[  219.362539][T10744]  __kasan_slab_alloc+0x23/0x80
[  219.367406][T10744]  __kmalloc_node_track_caller_noprof+0x237/0x4c0
[  219.373848][T10744]  krealloc_noprof+0x10f/0x2f0
[  219.378638][T10744]  copy_verifier_state+0x865/0xec0
[  219.383769][T10744]  push_stack+0x19b/0x3d0
[  219.388115][T10744]  check_cond_jmp_op+0x8ad/0x4020
[  219.393149][T10744]  do_check+0x96c0/0xfcd0
[  219.397483][T10744]  do_check_common+0x1564/0x2010
[  219.402424][T10744]  bpf_check+0x804e/0x1fc90
[  219.406936][T10744]  bpf_prog_load+0x1667/0x20f0
[  219.411702][T10744] 
[  219.414022][T10744] Memory state around the buggy address:
[  219.419659][T10744]  ffff8880295a5e80: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[  219.427818][T10744]  ffff8880295a5f00: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[  219.435976][T10744] >ffff8880295a5f80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  219.444035][T10744]                                            ^
[  219.450218][T10744]  ffff8880295a6000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  219.458282][T10744]  ffff8880295a6080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  219.466340][T10744] ==================================================================
[  219.478960][ T5840] Bluetooth: hci1: command tx timeout
[  219.484510][T10744] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  219.491735][T10744] CPU: 0 UID: 0 PID: 10744 Comm: syz.2.1292 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0
[  219.502540][T10744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  219.512627][T10744] Call Trace:
[  219.515911][T10744]  <TASK>
[  219.518846][T10744]  dump_stack_lvl+0x241/0x360
[  219.523545][T10744]  ? __pfx_dump_stack_lvl+0x10/0x10
[  219.528803][T10744]  ? __pfx__printk+0x10/0x10
[  219.533403][T10744]  ? rcu_is_watching+0x15/0xb0
[  219.538184][T10744]  ? vscnprintf+0x5d/0x90
[  219.542543][T10744]  panic+0x349/0x880
[  219.546451][T10744]  ? check_panic_on_warn+0x21/0xb0
[  219.551574][T10744]  ? __pfx_panic+0x10/0x10
[  219.556018][T10744]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[  219.562079][T10744]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  219.568432][T10744]  check_panic_on_warn+0x86/0xb0
[  219.573741][T10744]  ? cmd_complete_rsp+0x67/0x180
[  219.578697][T10744]  end_report+0x77/0x160
[  219.582966][T10744]  kasan_report+0x154/0x180
[  219.587483][T10744]  ? cmd_complete_rsp+0x67/0x180
[  219.592440][T10744]  cmd_complete_rsp+0x67/0x180
[  219.597220][T10744]  mgmt_pending_foreach+0xd1/0x130
[  219.602345][T10744]  ? __pfx_cmd_complete_rsp+0x10/0x10
[  219.607731][T10744]  mgmt_index_removed+0x133/0x390
[  219.612769][T10744]  ? __pfx_mgmt_index_removed+0x10/0x10
[  219.618358][T10744]  ? apparmor_capable+0x13b/0x1b0
[  219.623398][T10744]  ? _raw_read_unlock+0x28/0x50
[  219.628256][T10744]  hci_sock_bind+0xcce/0x1150
[  219.632951][T10744]  ? __pfx_hci_sock_bind+0x10/0x10
[  219.638081][T10744]  __sys_bind+0x1e4/0x290
[  219.642424][T10744]  ? __pfx___sys_bind+0x10/0x10
[  219.647290][T10744]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  219.653627][T10744]  ? do_syscall_64+0x100/0x230
[  219.658400][T10744]  __x64_sys_bind+0x7a/0x90
[  219.662911][T10744]  do_syscall_64+0xf3/0x230
[  219.667423][T10744]  ? clear_bhb_loop+0x35/0x90
[  219.672113][T10744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.678013][T10744] RIP: 0033:0x7f5e22d85d29
[  219.682432][T10744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  219.702052][T10744] RSP: 002b:00007f5e23b89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  219.710478][T10744] RAX: ffffffffffffffda RBX: 00007f5e22f75fa0 RCX: 00007f5e22d85d29
[  219.718454][T10744] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000041
[  219.726454][T10744] RBP: 00007f5e22e01b08 R08: 0000000000000000 R09: 0000000000000000
[  219.734426][T10744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  219.742400][T10744] R13: 0000000000000000 R14: 00007f5e22f75fa0 R15: 00007fff81ed9248
[  219.750385][T10744]  </TASK>
[  219.753737][T10744] Kernel Offset: disabled
[  219.758066][T10744] Rebooting in 86400 seconds..