last executing test programs:

1m22.030521943s ago: executing program 2 (id=136):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x3, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x1f00, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

1m3.356584041s ago: executing program 2 (id=136):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x3, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x1f00, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

48.652045896s ago: executing program 2 (id=136):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x3, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x1f00, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

34.902128674s ago: executing program 2 (id=136):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x3, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x1f00, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

23.375291921s ago: executing program 2 (id=136):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x3, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x1f00, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

10.461662759s ago: executing program 2 (id=136):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x3, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x1f00, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

2.900269898s ago: executing program 1 (id=613):
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000240)=@xdp, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)="99c0c8a64944a05e9c346de4d3d3a9bb39a0f78b255ad412db84b364a11507d57ebe76f665aa34319949d11ac4742b1e21768d7255e6fadbe63c5361ffa11811d2b17ec2289c7a18786e0a226f6fe59ee2ffdbf142cf0477b841c9457ee2ea08ae81d4a3", 0x64}, {&(0x7f0000000340)="e85adb6a4d1a8746eac7dfbfc4425e242d0b83bf6a5d7eddee7f42ebd47e3e45498f220f7a0a57909dcf6199cbcad1a4310a9164af92b63381eb4ec1585cf5ce4b7b56ac8e2bb8c522148434f8794629edc06d69", 0x54}, {&(0x7f00000003c0)="58eb2c5f4861f02f200c15a24904c3bee774847f569bed51040025a08a0191a5eb14d91b8c8c510d600553f4ed0ee0a928e2ccbd303cff39", 0xffffffd8}, {&(0x7f0000000400)="51380ec09bd99ead10314c60dd84ede5853a989a50373ac712415d8507e6932ddee21ea42c5a23ae95e79250499276fccb9664194c8cd6c2fae81193d8b3b9be16f971daedea10580316cb74311dc5554dda3033aef6740c3e40681e462f186b9ea4f4492a52a98681e1b274cf9426a421b972aa87496a4dcde29945", 0x7c}, {&(0x7f0000000480)="4cd39417fd88dab33f389d56159dd2ba0c3121fc76d126adb79cb5d48ac2b8ba46342a9cb6c73090f4198a6e47bcb95da97e980783892369896001917cd145f40642879a25a833fdf010de49638e89077f67f3e8daa41587b11f7dad846e3df25f85f8b7b441abf566cf3573223448c7e338f747494818815250f682330701dab144969e7f01f37b6c76040b7293abf700cd4273f5a67194394245d8855d48b104a8e79e7591c7510af76a59182c39a7c8ededce3ee8121afe4a110e6725f0acec8de26e557effc6d7e853d1d6dc115c9cc38be97879e7e0b046466ce56d6d7a4d980b0413ff128f35d5e489adbfa4cb4cd88377c7f2e68b4a7e0c", 0xfb}], 0x5, &(0x7f0000000600)=[{0x1010, 0x0, 0x0, "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"}, {0x28, 0x0, 0x0, "8192fbea2c061381413fc28cb06b4e988dc486c74cfc"}, {0x18, 0x0, 0x0, "4fdf1ab71595"}, {0x18, 0x0, 0x0, "f47d"}, {0xe0, 0x0, 0x0, "06435d82744e2bd9e2a1fe8560ac7d60b467b377f0399e14a4b82078fbecc311bfb75da80df4176c4561790eae2e1f95dd46a7d7add48146b7b5c82746d8d36469209f1157ef17dbcd007409c3146b57a228d6100cf363fe754e480ace4546319526df51a444b225ac6df534283e28711f46fc77e9fda0596f402ec4c67aa5d0c5e535ca6edfe639e562cb3f41c27b110d3f65ecadd12a490fd27c6eea3f254c1a651207d6a239d3289641254ed028de2cedd5f658793983cea494d38b136b5f72a624ea0975c31041f46ca0"}], 0x1148}, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0), 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000003800010310bd7000ffdbdf250d"], 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="062c651f644f7631590f00000200000000000000ad23ee6435e8d58559fe7b5842d99787a6e7b0a6411f0c40f62cebead268850cc6a8fb35675c9f55c4", @ANYRES32, @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r2], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000600)=@ethtool_wolinfo={0x5, 0x2, 0x0, "5414921b17a2"}})

2.839595034s ago: executing program 3 (id=614):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4   \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x18) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kfree\x00', r4}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300) (async)
socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x2, 0x0, 0x0, 0x4, 0x0, 0x3}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x1, 0x5, 0x0, @void, @value}, 0x28)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/time\x00')
r8 = socket$alg(0x26, 0x5, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0)
r9 = socket(0x10, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x7, &(0x7f00000001c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @cb_func={0x18, 0x4}], &(0x7f0000000200)='GPL\x00', 0x1, 0x1000, &(0x7f0000001800)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x5, 0x4af5d4ca, 0xc}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[r0, r5, r0, r3, r0, r1], &(0x7f0000000400)=[{0x1, 0x2, 0x4, 0x4}], 0x10, 0xff7, @void, @value}, 0x94) (async)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x7, &(0x7f00000001c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @cb_func={0x18, 0x4}], &(0x7f0000000200)='GPL\x00', 0x1, 0x1000, &(0x7f0000001800)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x5, 0x4af5d4ca, 0xc}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[r0, r5, r0, r3, r0, r1], &(0x7f0000000400)=[{0x1, 0x2, 0x4, 0x4}], 0x10, 0xff7, @void, @value}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000740)={r8, r10})
write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82) (async)
write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82)
sendmmsg$alg(r9, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r11], 0x24}}, 0x0) (async)
sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r11], 0x24}}, 0x0)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000004000000000000ffffffff0000dc2d9c9113abf383fc0c56e03c272713e0b7fe1704c3c2006149e42ca0e063a1febeeae61fb76c4f0fa6ed0a78e45b304d62d3c584f4fb7393ce9421c083b5a365845ecf218e4ec8b3ebd70d0ec7de44ccb6605c3cf91604f23d6f8b03e99ee6b2b76615eda4f016590aa104b5e50dc3ab5e02f5682984566e0cebd5f88a6ff5b73c7a68a82485d1e2e6706189c63eb548ae4edeb1fa796717a54860b4e3be46d00a749b0020f21092a7a9d0995e8c31cc29c5d219ca28a6904541d112bb1f8255be81df5c53715cc702b28532e61d967fa697d6ad8067c42c0cd2f58d5ced3cb658df6fdc02c2414d694344d8009c94d02d3556a9cdeb3d79791d14c8770cdae60b0f", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

2.839130688s ago: executing program 0 (id=615):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shutdown(r0, 0x1)
recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) (fail_nth: 2)

2.578326234s ago: executing program 3 (id=617):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{0x42, 0x3}, 0x1}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10)
shutdown(r0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
sendmsg$tipc(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x804)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88)

2.224201339s ago: executing program 3 (id=618):
r0 = socket(0x200000000000011, 0x2, 0x1)
recvmsg$unix(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)=""/194, 0xc2}], 0x1}, 0x0)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="e90c630faca20180c20000000800450000240000e0000011"], 0x0)

2.211182263s ago: executing program 0 (id=619):
unshare(0x2020600)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000001900000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c"], 0x124}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

2.050223353s ago: executing program 1 (id=620):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtaction={0xfc, 0x1c, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x1300}, [{0xe8, 0x1, [@m_tunnel_key={0xb8, 0x17, 0x0, 0x0, {{0xf}, {0x4}, {0x85, 0x6, "13889a8ef1bbf4e21f7b29f6ef8bac17d25d42f34ea328b11eada3c821966b74e375a22ee99dc91cedf5c958e7c3d235436a677fb5572a445173b8a158f081d5872398504181a8df0f6e86b8da4ae8b6d2afd6f7fa9386871593574741b83dd6f5621ef02f791cff4964f420ec0892da18ce3527bac961028f721aaf0afc895c94"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x2c, 0x10, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1.987812086s ago: executing program 0 (id=621):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="050000000822ea9ebf16b3782d000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0300000001000000010000800203000077134816befd9f1e"], 0x48}, 0x1, 0x0, 0x0, 0x20004854}, 0x800)
sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000540)={'vxcan0\x00', <r5=>0x0})
sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newqdisc={0x338, 0x24, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xd, 0xc}, {0x7, 0xfff2}, {0x6, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x8, 0xfa}}, @TCA_STAB={0x1c8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xbd, 0x0, 0x0, 0x0, 0x1, 0x673, 0x2, 0x3}}, {0xa, 0x2, [0xa6, 0x5, 0xb]}}, {{0x1c, 0x1, {0xf9, 0x8, 0x3, 0x9e, 0x2, 0x85, 0xb82, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x8, 0x0, 0x1, 0x6, 0x1, 0xe, 0x3, 0x1}}, {0x6, 0x2, [0xfffb]}}, {{0x1c, 0x1, {0x0, 0xe, 0xfeff, 0x8, 0x0, 0x2, 0x1, 0x7}}, {0x12, 0x2, [0x0, 0x6, 0x7, 0x3, 0x1, 0x7, 0xb]}}, {{0x1c, 0x1, {0xf9, 0xa, 0x0, 0x6, 0x2, 0x0, 0x4, 0x3}}, {0xa, 0x2, [0x5, 0x5, 0x7]}}, {{0x1c, 0x1, {0xff, 0x6, 0x677, 0x20000000, 0x2, 0xe1, 0x1c5, 0x5}}, {0xe, 0x2, [0x7fff, 0x3, 0x3, 0x1e0f, 0x6bc]}}, {{0x1c, 0x1, {0x8, 0x1, 0x924, 0x25e, 0x0, 0x5, 0x7f, 0x3}}, {0xa, 0x2, [0x7, 0xc73, 0x3]}}, {{0x1c, 0x1, {0x85, 0x3, 0xfa7, 0x0, 0x0, 0x3, 0x3, 0x6}}, {0x10, 0x2, [0x40, 0x29, 0x8, 0x9, 0x800, 0x1]}}, {{0x1c, 0x1, {0x6, 0x1, 0xf965, 0x6, 0x2, 0x1000, 0x9, 0x3}}, {0xa, 0x2, [0x81, 0xfff, 0x401]}}, {{0x1c, 0x1, {0x1, 0x9, 0x8, 0x80, 0x1, 0x5, 0xf, 0x5}}, {0xe, 0x2, [0x8, 0x8, 0x6, 0x2, 0x7]}}, {{0x1c, 0x1, {0x7, 0x10, 0x0, 0x40, 0x2, 0x1, 0x3, 0x4}}, {0xc, 0x2, [0xa, 0x636d, 0x60, 0x1]}}]}, @TCA_RATE={0x6, 0x5, {0x6, 0x40}}, @TCA_STAB={0x134, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x8, 0x3, 0x8, 0x0, 0x1, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0xef1]}}, {{0x1c, 0x1, {0x9, 0xff, 0x7, 0x5, 0x1, 0xfffffffc, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x7, 0x81]}}, {{0x1c, 0x1, {0x99, 0x3, 0x1e, 0xf, 0x0, 0x9, 0x9, 0x7}}, {0x12, 0x2, [0xfff7, 0x7f, 0xff06, 0x8, 0x8, 0xb, 0xfc]}}, {{0x1c, 0x1, {0x4, 0x6, 0x3, 0xd1, 0x1, 0x8, 0xffff96c2}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x10, 0xb, 0x8, 0x1, 0x2, 0x7, 0x3}}, {0xa, 0x2, [0xb, 0x400, 0x8]}}, {{0x1c, 0x1, {0x7, 0x23, 0x0, 0x0, 0x1, 0x102, 0xa, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0xf, 0xf, 0xfff8, 0x83, 0x1, 0x2, 0x8, 0x2}}, {0x8, 0x2, [0x4, 0xd8]}}, {{0x1c, 0x1, {0x10, 0x2, 0x0, 0xfffffbf6, 0x1, 0x2, 0xffffffff, 0x2}}, {0x8, 0x2, [0xbeaa, 0x8]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffa}]}, 0x338}}, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}, {0x4, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x54, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x1451}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x3}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x6}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x80}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x3}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x400}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x3c8}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x80}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)
r8 = socket(0x10, 0x803, 0x0)
r9 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r9, 0x29, 0x24, &(0x7f0000000000), 0x4)
sendmsg$kcm(r9, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b3325fe80070000000000000000000009ffffffe000"/40, 0x28}], 0x1}, 0x200480fe)
r10 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r10, &(0x7f0000000040)={0x1d, r11, 0x8000000000000003}, 0x18)
close(0x3)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
r14 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r14, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r13, {0xfff3, 0x6}, {}, {0x7, 0xa}}}, 0x24}}, 0x0)

1.793906254s ago: executing program 1 (id=623):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000076000d0b00000008000000000360000000000000080001000100000008000a0000000000080005"], 0x30}}, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x3, {0x0, 0xff, 0x3}, 0x1}, 0x18)
syz_emit_ethernet(0x4e, &(0x7f0000001a00)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "c00100", 0x18, 0x0, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x2e}, {[@routing={0x3a, 0x2, 0x1, 0x0, 0x0, [@private2]}]}}}}}, 0x0)

1.668149s ago: executing program 4 (id=624):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvfrom(r0, 0x0, 0x0, 0x40012020, 0x0, 0xfffffffffffffe08)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000280)=0x2, 0x4)
setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000100)=0x6, 0x4)
connect$tipc(r1, &(0x7f0000000140)=@id, 0x10)

1.645481972s ago: executing program 1 (id=625):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001100", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)={0x1c8, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}, @generic="5dd7a330dc7b7690c8d9ecb51d93a6ce9bf7e22ff148b337253c2bbf8531d6d29d648ccceaefeb37ddaef1902679db03c88d99e59b98835d1331d8c64647bafcbafd0e167fa910ae08be3a53f5e9f0dc215d708c645f19318835567c9539f3b5954833e18e3fa9e36fbd26f762a31025e65c222315b1d189eedbdd76a2a46ca20f38e64f4d1456d62e671b2a9a26c5dcb693c1a5b9b26f53bcf3d95067e11609228df5f0c67fd5ddc3cd3bf5514ac370f0a1"]}, 0x1c8}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b3300"/27, 0x1b}], 0x1}, 0x20000000)
recvmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
r5 = socket$kcm(0xa, 0x5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=r6], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r5})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000021140000001100"], 0xd8}}, 0x8090)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r5})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='btrfs_transaction_commit\x00', r6, 0x0, 0x510}, 0x18)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='westwood\x00', 0x9)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f00000007c0)={0xfffc, 0x5, 0xffc0, 0x0, 0x7f, 0x4, 0xffff}, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x0, 0x6ee, 0x10, @local, @mcast2, 0x7, 0x7800, 0x9, 0x3}})

1.522044288s ago: executing program 4 (id=626):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0x14, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xc0}], 0x30}, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070000000000000000000200000008002500000000000c00990001"], 0x28}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendto$inet6(r6, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0040480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x80, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000003740), &(0x7f0000003780)=0x4)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}], 0x2}}], 0x1, 0x60, 0x0)

1.407894972s ago: executing program 0 (id=627):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000540)="1d9de0ccf3678f43db0934b548ab5787a140c9341efcd419de9bacc88d7433bc3cad0b0c184f9a70ada3b45a8c36c16893f95ab1570059742250d120a846e28301", 0x41}], 0x1}}], 0x1, 0x4001c20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1a"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
sendmmsg$sock(r4, &(0x7f0000006740)=[{{&(0x7f0000000180)=@phonet={0x23, 0x9, 0x5, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0xfa1}}], 0x9}}], 0x4000000000000fd, 0x20060001)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r6, 0x400448ca, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r8, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1}, 0x4}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1}, 0x3}], 0x2, 0x2, 0x0)
r10 = socket$inet6(0xa, 0x80003, 0x6)
sendmmsg(r10, &(0x7f0000000480), 0x2e9, 0xfc00)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x7, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x8000, 0x0, @empty, 0x8}, 0x1c)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

1.354768735s ago: executing program 1 (id=628):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x10, 0x4, 0x3c8, 0x110, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private, @rand_addr, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth1_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x4, {@empty, @mac=@dev, @dev, @broadcast}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@arp={@empty, @empty, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'tunl0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
r3 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0xc4, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0xfff, 0x11d4, 0x2, 0x20401, 0xffffffffffffffff, 0xc, '\x00', 0x0, r3, 0x3, 0x5, 0x0, 0xf, @void, @value, @void, @value}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0], 0x0, 0xa5, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x75, 0x8, 0x8, &(0x7f0000000980)}}, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b40)={0x0, <r9=>0x0}, 0x8)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x4)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@call={0x85, 0x0, 0x0, 0x7d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c40)={{0xffffffffffffffff, <r12=>0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)='%+9llu \x00'}, 0x20)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1f, 0x1c, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0xb}, @map_val={0x18, 0x5, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='GPL\x00', 0x0, 0x6a, &(0x7f0000000780)=""/106, 0x40f00, 0x40, '\x00', r8, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x9, &(0x7f0000000d00)=[r10, r11, r12, 0x1, 0x1, r13, r14], &(0x7f0000000d40)=[{0x5, 0x1, 0x3, 0xb}, {0x5, 0x2, 0x9}, {0x1, 0x4, 0x4, 0x4}, {0x2, 0x4, 0x9, 0x3}, {0x8, 0x3, 0x9, 0xa}, {0x0, 0x4, 0x1, 0x9}, {0x4, 0x4, 0x8, 0xa}, {0x4, 0x2, 0x7, 0x2}, {0x4, 0x4, 0xf}], 0x10, 0x7, @void, @value}, 0x94)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x0)

1.334222941s ago: executing program 4 (id=629):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
shutdown(r0, 0x1)
recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) (fail_nth: 3)

1.176085227s ago: executing program 0 (id=630):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000094000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64)
syz_init_net_socket$ax25(0x3, 0x2, 0xc9) (rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async)
sendmsg$nl_route(r1, 0x0, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={0xffffffffffffffff, 0x342, 0x8, 0x8000000f5eb})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64)
writev(r3, &(0x7f00000002c0), 0x2) (rerun: 64)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x2f, 0x0, @loopback, @local}}}}}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r4, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r4], 0x40c}}, 0x0) (async)
sendmmsg$inet6(r0, 0x0, 0x0, 0x20000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c"], 0x1c}], 0x1}, 0x0)

1.174479105s ago: executing program 3 (id=631):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
write$bt_hci(r5, &(0x7f00000002c0)=ANY=[], 0x138)
bind$bt_hci(r5, &(0x7f0000000080), 0x6)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea", 0xd)
accept4(r4, 0x0, 0x0, 0x800)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180))
r11 = socket(0x2, 0x80805, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x7d, 0x7fffffff, 0x10, @remote, @loopback={0x21, 0xffff888101827518}, 0x10, 0x40, 0x2, 0xfffffffd}})
ioctl$SIOCGIFMTU(r11, 0x8921, &(0x7f00000001c0)={'ip6gretap0\x00'})
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYRES16=r6, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f000057b000/0x4000)=nil, 0x4000, 0x0, 0xc3072, 0xffffffffffffffff, 0xf028e000)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r12)

1.033949688s ago: executing program 4 (id=632):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x180, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in=@private, 0x0, 0x32}, @in6=@loopback, {}, {0x0, 0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0xc4}, 0x0)

824.188329ms ago: executing program 1 (id=633):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$alg(0x26, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40201, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
close(0x3)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socket$inet6(0xa, 0x3, 0xff)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r4])
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r6, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r7=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x23, 0x0, 0xf000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r8=>0x0})
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000500040000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000000a00000014001a80100004800c0004"], 0x34}}, 0x0)

624.11789ms ago: executing program 0 (id=634):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
unshare(0x6a040000)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@sndrcv={0x30, 0x84, 0x1, {0x402, 0x4, 0x4, 0x5, 0x400, 0x2, 0x6, 0x1}}, @authinfo={0x12, 0x84, 0x6, {0xfffa}}], 0x48, 0x2400c852}], 0x1, 0x40000)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x58, r4, 0x400, 0x0, 0xffffffff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000}, 0x880)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)='\x00'/10, 0xa}], 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000711242000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0))

514.864906ms ago: executing program 3 (id=635):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
preadv(r2, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000680)=""/180, 0xb4}], 0x2, 0x3, 0x7)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
close(r2)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0xa, 0x4, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}, @extra_flags={0x8, 0x18, 0x80000000}]}, 0x144}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000880)="b9ff030768441a8cb89e14f008008632e7429800", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000003c0), 0x4)
connect$inet6(r3, &(0x7f00000005c0)={0xa, 0xffff, 0xa000, @loopback, 0xf}, 0x1c)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c74657200000000180000000000000000000000000000000000000000000400"/104], 0x68)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r7)
sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x28, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20048000)
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r8, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000200), 0x3)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000380)=@gcm_128={{0x303, 0x37}, "faffffff0000003c", "82d7773879241628cb2d7129d5a01853", '\x00', "614db5b3ffffffff"}, 0x28)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010f00000000000000000100000004000180100002800c00018007"], 0x28}}, 0x4004000)
ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f00000001c0)=<r10=>0x0)
syz_open_procfs$namespace(r10, &(0x7f0000000340)='ns/cgroup\x00')

472.827477ms ago: executing program 4 (id=636):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x6bd14d2bc29e41b6}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x8044)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001295359a7db3b25a9610601d0000007b8af8000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38)
socketpair(0x2a, 0x9, 0xff, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
bind$unix(r3, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e)

20.144949ms ago: executing program 4 (id=637):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x0, 0xf0, 0x1}, 0xff}, 0x18)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="8a20bb7f25698086fff451dd167db69f", 0x10)
close(0x3)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@dellinkprop={0x70, 0x6d, 0x600, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x1000, 0x2502a}, [@IFLA_WEIGHT={0x8, 0xf, 0x43}, @IFLA_IFALIAS={0x14, 0x14, 'ip6erspan0\x00'}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_MAP={0x24, 0xe, {0xb, 0x93af, 0x5, 0x9, 0x81, 0x6}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x70}}, 0x0)

0s ago: executing program 3 (id=638):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0xffffffff000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r1, 0x0, 0x0}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x45ba, @local, 0x60}}, 0x7fff, 0x0, 0x3f8, 0x3ed, 0x32}, 0x9c)
socket$l2tp(0x2, 0x2, 0x73)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000001800ff0f0000000000004000850000006d00000085000200940800000095", @ANYRES32=r3, @ANYRESDEC=0x0], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000002140)={'wg2\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000006800010000000000fcdbdf250a00030000000000060007000400000008000500", @ANYRES32=r6, @ANYBLOB="14000880100008800c000380050001"], 0x3c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r7 = socket(0x11, 0x800000002, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000200)={'ipvlan0\x00', {0x2, 0x0, @loopback=0xac141437}})
r8 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r8, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, 0x0, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000800))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c0002800500010000000000060003400003000024000280140001800800b3cc01000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008000140000000000800"], 0x88}}, 0x8040)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts.
[   82.702752][ T5818] cgroup: Unknown subsys name 'net'
[   82.861509][ T5818] cgroup: Unknown subsys name 'cpuset'
[   82.871347][ T5818] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   84.578277][ T5818] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   88.594602][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   88.599446][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   88.609335][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   88.609718][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   88.620068][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   88.631374][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   88.631473][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   88.640355][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   88.646782][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   88.654498][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   88.661591][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   88.669900][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   88.676507][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   88.683127][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   88.688459][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   88.695577][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   88.702616][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   88.717534][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   88.726099][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   88.729240][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   88.733571][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   88.754666][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   88.763423][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   88.771920][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.779752][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   89.393983][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   89.539646][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   89.656901][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   89.682807][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   89.795391][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.802974][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.810966][ T5828] bridge_slave_0: entered allmulticast mode
[   89.819132][ T5828] bridge_slave_0: entered promiscuous mode
[   89.829047][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.836185][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.843569][ T5837] bridge_slave_0: entered allmulticast mode
[   89.851718][ T5837] bridge_slave_0: entered promiscuous mode
[   89.913697][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.921763][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.929746][ T5828] bridge_slave_1: entered allmulticast mode
[   89.939285][ T5828] bridge_slave_1: entered promiscuous mode
[   89.946758][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.958804][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.966066][ T5837] bridge_slave_1: entered allmulticast mode
[   89.974265][ T5837] bridge_slave_1: entered promiscuous mode
[   90.057948][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   90.128697][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.140910][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.159664][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.172803][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.196410][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.203745][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.211349][ T5831] bridge_slave_0: entered allmulticast mode
[   90.218961][ T5831] bridge_slave_0: entered promiscuous mode
[   90.278635][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.285812][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.293523][ T5838] bridge_slave_0: entered allmulticast mode
[   90.301996][ T5838] bridge_slave_0: entered promiscuous mode
[   90.310073][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.317580][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.324782][ T5831] bridge_slave_1: entered allmulticast mode
[   90.332501][ T5831] bridge_slave_1: entered promiscuous mode
[   90.383096][ T5837] team0: Port device team_slave_0 added
[   90.390022][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.397704][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.404975][ T5838] bridge_slave_1: entered allmulticast mode
[   90.413580][ T5838] bridge_slave_1: entered promiscuous mode
[   90.441772][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.453813][ T5828] team0: Port device team_slave_0 added
[   90.463164][ T5828] team0: Port device team_slave_1 added
[   90.476606][ T5837] team0: Port device team_slave_1 added
[   90.514593][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.562138][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.575344][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.667504][ T5831] team0: Port device team_slave_0 added
[   90.674655][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.681935][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.708081][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.734082][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.741401][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.767973][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.781586][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.788750][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.808650][ T5151] Bluetooth: hci1: command tx timeout
[   90.820028][ T5840] Bluetooth: hci4: command tx timeout
[   90.820499][ T5836] Bluetooth: hci0: command tx timeout
[   90.826133][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.858144][ T5831] team0: Port device team_slave_1 added
[   90.864807][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.872158][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.899245][ T5151] Bluetooth: hci3: command tx timeout
[   90.905042][ T5151] Bluetooth: hci2: command tx timeout
[   90.910951][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.953560][ T5838] team0: Port device team_slave_0 added
[   90.992699][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.999829][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.026473][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.038472][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.045736][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.053506][ T5839] bridge_slave_0: entered allmulticast mode
[   91.061074][ T5839] bridge_slave_0: entered promiscuous mode
[   91.070445][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.077754][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.084951][ T5839] bridge_slave_1: entered allmulticast mode
[   91.092548][ T5839] bridge_slave_1: entered promiscuous mode
[   91.105391][ T5838] team0: Port device team_slave_1 added
[   91.154411][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.161918][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.188038][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.259428][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.266429][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.292914][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.306383][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.313537][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.339604][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.371726][ T5828] hsr_slave_0: entered promiscuous mode
[   91.378598][ T5828] hsr_slave_1: entered promiscuous mode
[   91.404622][ T5837] hsr_slave_0: entered promiscuous mode
[   91.411649][ T5837] hsr_slave_1: entered promiscuous mode
[   91.418108][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.425880][ T5837] Cannot create hsr debugfs directory
[   91.478457][ T5838] hsr_slave_0: entered promiscuous mode
[   91.485990][ T5838] hsr_slave_1: entered promiscuous mode
[   91.492717][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.500881][ T5838] Cannot create hsr debugfs directory
[   91.510948][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.523346][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.631058][ T5831] hsr_slave_0: entered promiscuous mode
[   91.638713][ T5831] hsr_slave_1: entered promiscuous mode
[   91.644862][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.653353][ T5831] Cannot create hsr debugfs directory
[   91.700983][ T5839] team0: Port device team_slave_0 added
[   91.774949][ T5839] team0: Port device team_slave_1 added
[   91.892557][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.899665][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.926229][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.972414][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.998207][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.033650][   T43] cfg80211: failed to load regulatory.db
[   92.042844][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.225255][ T5839] hsr_slave_0: entered promiscuous mode
[   92.233512][ T5839] hsr_slave_1: entered promiscuous mode
[   92.240504][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.248241][ T5839] Cannot create hsr debugfs directory
[   92.491991][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   92.505943][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   92.533054][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   92.569855][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   92.662650][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   92.676989][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   92.706236][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   92.732714][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   92.786545][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   92.800743][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   92.813999][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   92.839488][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   92.887920][ T5151] Bluetooth: hci1: command tx timeout
[   92.888033][ T5840] Bluetooth: hci0: command tx timeout
[   92.893445][ T5836] Bluetooth: hci4: command tx timeout
[   92.959638][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   92.968659][ T5836] Bluetooth: hci2: command tx timeout
[   92.969520][ T5840] Bluetooth: hci3: command tx timeout
[   93.007417][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   93.052802][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   93.092427][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   93.175432][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   93.201022][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   93.220919][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.245302][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.252881][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   93.265539][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   93.309985][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.381259][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   93.395180][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   93.415245][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   93.426806][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.434120][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.465200][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.472411][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.482048][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.489275][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.524392][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.531641][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.541543][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.548732][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.596602][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.603798][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.648413][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.740860][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   93.772120][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.779899][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.819329][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.826551][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.970522][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.016494][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   94.075362][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.082615][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.163454][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.171274][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.353491][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.612964][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.662019][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.676502][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.726875][ T5838] veth0_vlan: entered promiscuous mode
[   94.869212][ T5828] veth0_vlan: entered promiscuous mode
[   94.891203][ T5838] veth1_vlan: entered promiscuous mode
[   94.909729][ T5828] veth1_vlan: entered promiscuous mode
[   94.930610][ T5837] veth0_vlan: entered promiscuous mode
[   94.968026][ T5840] Bluetooth: hci0: command tx timeout
[   94.971257][ T5836] Bluetooth: hci4: command tx timeout
[   94.973502][ T5840] Bluetooth: hci1: command tx timeout
[   95.023075][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.044557][ T5838] veth0_macvtap: entered promiscuous mode
[   95.048796][ T5840] Bluetooth: hci3: command tx timeout
[   95.054613][ T5836] Bluetooth: hci2: command tx timeout
[   95.072928][ T5838] veth1_macvtap: entered promiscuous mode
[   95.084995][ T5837] veth1_vlan: entered promiscuous mode
[   95.125260][ T5828] veth0_macvtap: entered promiscuous mode
[   95.163966][ T5828] veth1_macvtap: entered promiscuous mode
[   95.198800][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.236872][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.264369][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.274239][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.283267][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.292590][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.315550][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.343561][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.364700][ T5837] veth0_macvtap: entered promiscuous mode
[   95.374150][ T5839] veth0_vlan: entered promiscuous mode
[   95.389321][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.399148][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.408534][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.417346][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.438494][ T5839] veth1_vlan: entered promiscuous mode
[   95.445591][ T5837] veth1_macvtap: entered promiscuous mode
[   95.578585][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.615982][ T5831] veth0_vlan: entered promiscuous mode
[   95.622887][ T5839] veth0_macvtap: entered promiscuous mode
[   95.635171][ T5839] veth1_macvtap: entered promiscuous mode
[   95.645805][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.676536][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.686002][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.695670][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.704779][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.735651][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.749682][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.763930][ T5831] veth1_vlan: entered promiscuous mode
[   95.781973][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.796076][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.844361][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.895804][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.936908][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.945732][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.962661][ T3467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.971830][ T3467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.986158][ T5831] veth0_macvtap: entered promiscuous mode
[   96.015440][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.025086][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.035834][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.044997][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.058419][ T5831] veth1_macvtap: entered promiscuous mode
[   96.085711][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   96.136069][ T3467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.155549][ T3467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.262475][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.316629][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.339929][ T3467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.353904][ T5831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.363193][ T3467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.383036][ T5831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.392027][ T5831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.400883][ T5831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.542979][ T3467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.588090][ T3467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.762250][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.787791][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.846116][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.881080][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.049168][ T5836] Bluetooth: hci4: command tx timeout
[   97.049446][ T5840] Bluetooth: hci0: command tx timeout
[   97.054650][ T5151] Bluetooth: hci1: command tx timeout
[   97.076753][ T5928] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3'.
[   97.127292][ T5151] Bluetooth: hci2: command tx timeout
[   97.132785][ T5151] Bluetooth: hci3: command tx timeout
[   97.140479][ T5928] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[   97.204720][ T5933] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[   97.264504][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.311545][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.340099][ T5927] netlink: 'syz.2.3': attribute type 1 has an invalid length.
[   97.377759][ T5930] pimreg3: entered allmulticast mode
[   97.413146][ T5927] netlink: 600 bytes leftover after parsing attributes in process `syz.2.3'.
[   97.414730][ T5932] xt_CT: No such helper "snmp"
[   97.489201][ T5929] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3'.
[   97.539560][ T5932] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6'.
[   97.884390][ T5942] can: request_module (can-proto-5) failed.
[   98.106176][ T5951] Zero length message leads to an empty skb
[   98.806839][ T5966] vxcan1 speed is unknown, defaulting to 1000
[   98.865911][ T5966] vxcan1 speed is unknown, defaulting to 1000
[   99.028092][ T5966] vxcan1 speed is unknown, defaulting to 1000
[   99.099556][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13'.
[   99.498003][ T5973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.554345][ T5973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.029072][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'.
[  100.064480][ T5977] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  100.131460][ T5977] netlink: 'syz.0.16': attribute type 1 has an invalid length.
[  100.244181][ T5966] infiniband syz2: set down
[  100.250806][ T1218] vxcan1 speed is unknown, defaulting to 1000
[  100.257095][ T1218] syz2: Port: 1 Link DOWN
[  100.272469][ T5966] infiniband syz2: added vxcan1
[  100.289331][ T5966] syz2: rxe_create_cq: returned err = -12
[  100.295622][ T5966] infiniband syz2: Couldn't create ib_mad CQ
[  100.316330][ T5966] infiniband syz2: Couldn't open port 1
[  100.464713][ T5966] RDS/IB: syz2: added
[  100.505397][ T5966] smc: adding ib device syz2 with port count 1
[  100.525802][ T5966] smc:    ib device syz2 port 1 has pnetid 
[  100.549067][ T5904] vxcan1 speed is unknown, defaulting to 1000
[  100.658393][ T5983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.678248][ T5966] vxcan1 speed is unknown, defaulting to 1000
[  100.698257][ T5984] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  100.778795][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.787392][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.994949][ T5987] syzkaller1: entered promiscuous mode
[  101.009727][ T5987] syzkaller1: entered allmulticast mode
[  101.143512][ T5992] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.456128][ T5966] vxcan1 speed is unknown, defaulting to 1000
[  101.476610][ T5996] netlink: 'syz.0.21': attribute type 1 has an invalid length.
[  102.066438][ T5966] vxcan1 speed is unknown, defaulting to 1000
[  102.539835][ T5966] vxcan1 speed is unknown, defaulting to 1000
[  103.193821][ T5966] vxcan1 speed is unknown, defaulting to 1000
[  103.606700][ T6016] netlink: 'syz.0.29': attribute type 1 has an invalid length.
[  103.620225][ T6016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.29'.
[  103.752335][   T13] smc: removing ib device syz2
[  104.039652][ T5992] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.260466][ T5992] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.403515][ T5992] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.659615][ T5992] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.730963][ T5992] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.776972][ T5992] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.883355][ T5992] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.878283][ T6067] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  106.205288][ T6075] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.743756][ T6075] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.816117][ T6093] netlink: 60 bytes leftover after parsing attributes in process `syz.1.52'.
[  107.914734][ T6075] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.268713][ T5836] Bluetooth: hci4: command 0x0405 tx timeout
[  108.587755][ T6104] netlink: 332 bytes leftover after parsing attributes in process `syz.1.54'.
[  108.607589][ T6104] netlink: 104 bytes leftover after parsing attributes in process `syz.1.54'.
[  108.631441][ T6104] netlink: 40 bytes leftover after parsing attributes in process `syz.1.54'.
[  108.661852][ T6075] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.665210][ T6104] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  108.947712][ T6110] Bluetooth: MGMT ver 1.23
[  109.005519][ T6075] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.058558][ T6112] netlink: 'syz.1.57': attribute type 12 has an invalid length.
[  109.066292][ T6112] netlink: 248 bytes leftover after parsing attributes in process `syz.1.57'.
[  109.132471][ T6118] netlink: 'syz.1.57': attribute type 1 has an invalid length.
[  109.163663][ T6075] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.169227][ T6118] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  109.179422][ T6118] IPv6: NLM_F_CREATE should be set when creating new route
[  109.236657][ T6075] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.310027][ T6075] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.654414][ T6140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.64'.
[  109.671622][ T6140] vlan2: entered promiscuous mode
[  109.692453][ T6140] dummy0: entered promiscuous mode
[  109.997879][ T6148] block nbd0: server does not support multiple connections per device.
[  110.035771][ T6148] block nbd0: shutting down sockets
[  110.971771][ T6180] syz.2.73 uses obsolete (PF_INET,SOCK_PACKET)
[  110.983266][ T6175] xt_CT: No such helper "snmp"
[  111.033408][ T6182] netlink: 270 bytes leftover after parsing attributes in process `syz.4.75'.
[  111.320241][ T6193] team0: No ports can be present during mode change
[  111.463113][ T6197] netlink: 96 bytes leftover after parsing attributes in process `syz.4.77'.
[  111.790607][ T6206] netlink: 72 bytes leftover after parsing attributes in process `syz.2.80'.
[  111.925462][ T6204] bridge: RTM_NEWNEIGH with invalid ether address
[  112.208165][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.82'.
[  112.378237][ T6237] netlink: 16 bytes leftover after parsing attributes in process `syz.3.82'.
[  112.411828][ T6237] netlink: 60 bytes leftover after parsing attributes in process `syz.3.82'.
[  112.527402][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.82'.
[  114.057765][ T6295] __nla_validate_parse: 2 callbacks suppressed
[  114.057784][ T6295] netlink: 32 bytes leftover after parsing attributes in process `syz.3.93'.
[  114.307237][ T6300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.96'.
[  114.388367][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.98'.
[  114.419337][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.96'.
[  114.428649][ T6305] netlink: 'syz.4.96': attribute type 21 has an invalid length.
[  114.826282][ T6313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.101'.
[  114.838404][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.100'.
[  115.323702][ T6327] xt_l2tp: v2 doesn't support IP mode
[  115.545628][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.106'.
[  115.605917][ T6332] netlink: 32 bytes leftover after parsing attributes in process `syz.4.106'.
[  115.823591][ T6336] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  115.828417][ T6332] warning: `syz.4.106' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  115.846187][ T6334] xt_hashlimit: size too large, truncated to 1048576
[  116.850233][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'.
[  116.874235][ T6348] netlink: 28 bytes leftover after parsing attributes in process `syz.0.109'.
[  117.015575][ T6352] netlink: 'syz.3.110': attribute type 21 has an invalid length.
[  117.049873][ T6352] netlink: 'syz.3.110': attribute type 5 has an invalid length.
[  117.064895][ T6352] netlink: 'syz.3.110': attribute type 6 has an invalid length.
[  117.375773][ T6359] netlink: 'syz.3.111': attribute type 3 has an invalid length.
[  117.528102][ T6369] lo: entered promiscuous mode
[  117.575600][ T6369] lo: entered allmulticast mode
[  117.631020][ T6369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  118.503091][ T6376] syzkaller1: entered promiscuous mode
[  118.522697][ T6376] syzkaller1: entered allmulticast mode
[  119.238305][ T6393] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.278975][ T6391] syz.4.119 (6391) used greatest stack depth: 17528 bytes left
[  119.297779][ T6395] __nla_validate_parse: 4 callbacks suppressed
[  119.297797][ T6395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.121'.
[  119.336355][ T6390] netlink: 11 bytes leftover after parsing attributes in process `syz.1.120'.
[  119.355307][ T6395] netlink: 'syz.3.121': attribute type 1 has an invalid length.
[  120.198346][ T6403] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.206865][ T6403] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.247412][ T6415] netlink: 'syz.3.127': attribute type 1 has an invalid length.
[  120.260290][ T6415] netlink: 'syz.3.127': attribute type 1 has an invalid length.
[  120.288889][ T6415] netlink: 'syz.3.127': attribute type 2 has an invalid length.
[  120.297635][ T6415] netlink: 'syz.3.127': attribute type 1 has an invalid length.
[  120.306411][ T6415] netlink: 'syz.3.127': attribute type 2 has an invalid length.
[  120.319567][ T6415] netlink: 'syz.3.127': attribute type 2 has an invalid length.
[  120.386520][ T6403] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.412162][ T6403] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.551261][ T6403] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.566660][ T6403] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.576962][ T6403] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.592864][ T6403] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.934216][ T6426] netlink: 68 bytes leftover after parsing attributes in process `syz.3.130'.
[  121.092857][ T6429] netlink: 256 bytes leftover after parsing attributes in process `syz.4.131'.
[  121.583886][ T1148] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.666284][ T6440] tipc: Started in network mode
[  121.671937][ T6440] tipc: Node identity e0000001, cluster identity 4711
[  121.697352][ T6440] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  121.728412][ T6442] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  121.753845][ T1148] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.908654][ T1148] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.966609][ T1148] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.264418][ T6449] IPVS: length: 248 != 8
[  122.298256][ T1148] bridge_slave_1: left allmulticast mode
[  122.324776][ T1148] bridge_slave_1: left promiscuous mode
[  122.376657][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.513164][ T1148] bridge_slave_0: left allmulticast mode
[  122.527263][ T1148] bridge_slave_0: left promiscuous mode
[  122.542388][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.938613][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'.
[  122.947722][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.144'.
[  122.977293][ T6474] netlink: 'syz.1.144': attribute type 7 has an invalid length.
[  123.574855][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  123.588121][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  123.605285][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  123.614206][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  123.627421][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  124.306042][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  124.332221][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  124.349692][ T1148] bond0 (unregistering): Released all slaves
[  124.725054][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.145'.
[  124.907801][ T6494] bridge_slave_1: left allmulticast mode
[  124.913536][ T6494] bridge_slave_1: left promiscuous mode
[  124.941543][ T6494] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.976888][ T6494] bridge_slave_0: left allmulticast mode
[  124.997182][ T6494] bridge_slave_0: left promiscuous mode
[  125.004219][ T6494] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.062857][ T6502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.146'.
[  125.156660][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'.
[  125.687272][ T5151] Bluetooth: hci4: command tx timeout
[  125.843142][ T1148] hsr_slave_0: left promiscuous mode
[  125.874643][ T1148] hsr_slave_1: left promiscuous mode
[  125.896339][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.914780][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.964188][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.980665][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.066188][ T1148] veth1_macvtap: left promiscuous mode
[  126.082804][ T1148] veth0_macvtap: left promiscuous mode
[  126.094397][ T1148] veth1_vlan: left promiscuous mode
[  126.110098][ T1148] veth0_vlan: left promiscuous mode
[  126.304524][ T1148] pimreg3 (unregistering): left allmulticast mode
[  126.797595][ T1148] team0 (unregistering): Port device team_slave_1 removed
[  126.844679][ T1148] team0 (unregistering): Port device team_slave_0 removed
[  127.767319][ T5151] Bluetooth: hci4: command tx timeout
[  127.905087][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'.
[  128.026654][ T6548] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  128.107052][ T6485] chnl_net:caif_netlink_parms(): no params data found
[  128.781428][ T6485] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.804953][ T6485] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.834616][ T6485] bridge_slave_0: entered allmulticast mode
[  128.853262][ T6485] bridge_slave_0: entered promiscuous mode
[  128.880978][ T6485] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.892293][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.158'.
[  128.933040][ T6485] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.959886][ T6485] bridge_slave_1: entered allmulticast mode
[  128.986501][ T6485] bridge_slave_1: entered promiscuous mode
[  129.194315][ T6485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  129.253256][ T6485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  129.418876][ T6485] team0: Port device team_slave_0 added
[  129.460605][ T6485] team0: Port device team_slave_1 added
[  129.496831][ T6583] netlink: 120 bytes leftover after parsing attributes in process `syz.3.162'.
[  129.533361][ T6583] netlink: 'syz.3.162': attribute type 1 has an invalid length.
[  129.626522][ T6485] batman_adv: batadv0: Adding interface: batadv_slave_0
[  129.636090][ T6485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.639719][ T6584] netlink: 'syz.0.160': attribute type 10 has an invalid length.
[  129.672059][ T6485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  129.776660][ T6586] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  129.787027][ T6485] batman_adv: batadv0: Adding interface: batadv_slave_1
[  129.797946][ T6485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.829041][ T6485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  129.847582][ T5151] Bluetooth: hci4: command tx timeout
[  129.874004][ T6584] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  129.914950][ T6591] pim6reg: entered allmulticast mode
[  129.945534][ T6598] netlink: 'syz.4.165': attribute type 4 has an invalid length.
[  129.968894][ T6583] veth5: entered promiscuous mode
[  130.123883][ T6603] netlink: 'syz.1.167': attribute type 4 has an invalid length.
[  130.365637][ T6485] hsr_slave_0: entered promiscuous mode
[  130.428622][ T6485] hsr_slave_1: entered promiscuous mode
[  130.446092][ T6485] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  130.476867][ T6485] Cannot create hsr debugfs directory
[  130.680037][ T6630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.175'.
[  130.714292][ T6624] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.784751][ T6633] bridge: RTM_NEWNEIGH with invalid ether address
[  130.862599][ T6640] openvswitch: netlink: Flow key attr not present in new flow.
[  130.881089][ T6642] xt_TCPMSS: Only works on TCP SYN packets
[  131.197319][   T30] audit: type=1800 audit(1749129385.712:2): pid=6655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.178" name="xffffffffffffffff00000000000000000000003" dev="tmpfs" ino=170 res=0 errno=0
[  131.504523][ T6668] netlink: 'syz.1.182': attribute type 21 has an invalid length.
[  131.927412][ T5151] Bluetooth: hci4: command tx timeout
[  132.067013][ T6687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.187'.
[  132.598345][ T6699] x_tables: duplicate underflow at hook 2
[  132.765890][ T6485] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  132.839387][ T6705] pimreg: entered allmulticast mode
[  132.844798][ T6708] pimreg: left allmulticast mode
[  132.958982][ T6485] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  132.985918][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  133.000784][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  133.011146][ T6713] netlink: 20 bytes leftover after parsing attributes in process `syz.4.189'.
[  133.032831][ T6485] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  133.118762][ T6716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.194'.
[  133.236324][ T6485] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  133.245116][   T43] IPVS: starting estimator thread 0...
[  133.265646][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'.
[  133.305803][ T6241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.351638][ T6241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.360036][ T6723] IPVS: using max 32 ests per chain, 76800 per kthread
[  133.391909][ T6726] netlink: 'syz.1.196': attribute type 39 has an invalid length.
[  133.512798][ T6726] veth0_macvtap: left promiscuous mode
[  133.680492][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.197'.
[  133.718877][ T6736] netlink: 'syz.3.198': attribute type 4 has an invalid length.
[  133.740277][ T6732] netlink: 'syz.3.198': attribute type 4 has an invalid length.
[  133.773151][ T6735] bridge_slave_1: left allmulticast mode
[  133.779069][ T6735] bridge_slave_1: left promiscuous mode
[  133.785001][ T6735] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.796232][ T6735] bridge_slave_0: left allmulticast mode
[  133.802698][ T6735] bridge_slave_0: left promiscuous mode
[  133.827639][ T6735] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.974519][ T6740] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  134.547791][ T6736] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.593671][ T6736] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.852921][ T6736] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.862851][ T6736] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.872635][ T6736] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.882237][ T6736] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.113380][ T6752] netlink: 32 bytes leftover after parsing attributes in process `syz.1.203'.
[  135.412229][ T6485] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.469630][ T6764] syzkaller1: entered promiscuous mode
[  135.475205][ T6764] syzkaller1: entered allmulticast mode
[  135.519811][ T6485] 8021q: adding VLAN 0 to HW filter on device team0
[  135.622893][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.208'.
[  135.674015][ T6236] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.681992][ T6236] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.735226][ T6770] vlan2: entered promiscuous mode
[  135.748079][ T6770] bond0: entered promiscuous mode
[  135.772446][ T6770] bond_slave_0: entered promiscuous mode
[  135.817511][ T6770] bond_slave_1: entered promiscuous mode
[  135.930373][ T5151] Bluetooth: hci1: command 0x0401 tx timeout
[  135.994711][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.210'.
[  136.042741][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.205'.
[  136.066762][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.074088][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.258631][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'.
[  137.307418][ T6824] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  137.364811][ T6826] netlink: 20 bytes leftover after parsing attributes in process `syz.0.217'.
[  137.407314][ T6824] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.458179][ T6832] netlink: 16 bytes leftover after parsing attributes in process `syz.1.218'.
[  137.683674][ T6485] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.837238][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'.
[  137.920610][ T6485] veth0_vlan: entered promiscuous mode
[  137.979286][ T6485] veth1_vlan: entered promiscuous mode
[  138.099693][ T5880] udevd[5880]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  138.312889][ T6485] veth0_macvtap: entered promiscuous mode
[  138.359837][ T6485] veth1_macvtap: entered promiscuous mode
[  138.464734][ T6485] batman_adv: batadv0: Interface activated: batadv_slave_0
[  138.606810][ T6485] batman_adv: batadv0: Interface activated: batadv_slave_1
[  138.662101][ T6485] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.691608][ T6485] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.717306][ T6485] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.727071][ T6485] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.894217][ T6879] ¾x9ÿ: renamed from bridge_slave_0
[  138.968181][ T5836] Bluetooth: hci4: command 0x0405 tx timeout
[  139.141544][ T6236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.176579][ T6236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.207605][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.231'.
[  139.309154][ T6890] netlink: 830 bytes leftover after parsing attributes in process `syz.4.231'.
[  139.393764][ T6241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.440135][ T6241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.734078][ T6901] Bluetooth: MGMT ver 1.23
[  139.838807][ T6901] geneve2: entered promiscuous mode
[  139.933039][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.233'.
[  140.365818][ T6243] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.580811][ T6243] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.760865][ T6243] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.868621][ T6922] !
: renamed from dummy0
[  140.932777][ T6925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.239'.
[  141.019558][ T6243] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.138346][ T6925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.239'.
[  141.167153][ T6925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.239'.
[  141.176421][ T6925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.239'.
[  141.228533][ T6925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.239'.
[  141.347753][ T6925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.239'.
[  141.380777][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'.
[  141.404939][ T6925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.239'.
[  141.529324][ T6925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.239'.
[  141.554809][ T6243] bridge_slave_1: left allmulticast mode
[  141.598406][ T6243] bridge_slave_1: left promiscuous mode
[  141.611653][ T6243] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.643749][ T6243] bridge_slave_0: left allmulticast mode
[  141.659193][ T6243] bridge_slave_0: left promiscuous mode
[  141.681909][ T6243] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.891085][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  141.901026][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  141.910916][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  141.932702][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  141.941847][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  142.569941][ T6243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.615665][ T6243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.646663][ T6243] bond0 (unregistering): Released all slaves
[  142.834976][ T6969] netlink: 120 bytes leftover after parsing attributes in process `syz.3.246'.
[  142.845512][ T6969] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  142.961189][ T6971] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  143.051808][ T6975] !
: renamed from dummy0
[  143.871295][ T6243] hsr_slave_0: left promiscuous mode
[  143.916580][ T6243] hsr_slave_1: left promiscuous mode
[  143.958101][ T6243] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.965606][ T6243] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.017426][ T5151] Bluetooth: hci4: command tx timeout
[  144.049039][ T6243] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.097449][ T6243] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.188038][ T6243] veth1_macvtap: left promiscuous mode
[  144.217323][ T6243] veth0_macvtap: left promiscuous mode
[  144.223106][ T6243] veth1_vlan: left promiscuous mode
[  144.254848][ T6243] veth0_vlan: left promiscuous mode
[  145.251421][ T6243] team0 (unregistering): Port device team_slave_1 removed
[  145.303549][ T6243] team0 (unregistering): Port device team_slave_0 removed
[  145.529423][ T5908] IPVS: starting estimator thread 0...
[  145.613106][ T7044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.624218][ T7045] IPVS: using max 27 ests per chain, 64800 per kthread
[  145.820064][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'.
[  146.087292][ T5151] Bluetooth: hci4: command tx timeout
[  146.112027][ T7059] netlink: 'syz.0.264': attribute type 1 has an invalid length.
[  146.175636][ T7064] trusted_key: syz.0.266 sent an empty control message without MSG_MORE.
[  146.193658][ T7065] __nla_validate_parse: 2 callbacks suppressed
[  146.193677][ T7065] netlink: 24 bytes leftover after parsing attributes in process `syz.4.263'.
[  146.236600][ T7054] IPv6: syztnl1: Disabled Multicast RS
[  146.261232][ T6952] chnl_net:caif_netlink_parms(): no params data found
[  146.569570][ T6952] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.586750][ T6952] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.601701][ T6952] bridge_slave_0: entered allmulticast mode
[  146.613785][ T6952] bridge_slave_0: entered promiscuous mode
[  146.631317][ T6952] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.643196][ T6952] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.651536][ T6952] bridge_slave_1: entered allmulticast mode
[  146.686081][ T6952] bridge_slave_1: entered promiscuous mode
[  146.775589][ T6952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  146.813722][ T6952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  146.944918][ T7081] tipc: Started in network mode
[  146.959852][ T7081] tipc: Node identity 7f000001, cluster identity 4711
[  146.974053][ T7081] tipc: Enabled bearer <udp:syz2>, priority 10
[  147.105511][ T6952] team0: Port device team_slave_0 added
[  147.168289][ T6952] team0: Port device team_slave_1 added
[  147.466670][ T7108] netlink: 24 bytes leftover after parsing attributes in process `syz.4.274'.
[  147.467709][ T6952] batman_adv: batadv0: Adding interface: batadv_slave_0
[  147.487059][ T6952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.521349][ T6952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  147.603218][ T7116] No such timeout policy "syz0"
[  147.611881][ T6952] batman_adv: batadv0: Adding interface: batadv_slave_1
[  147.629121][ T6952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.658426][ T6952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  147.856835][ T7123] SET target dimension over the limit!
[  147.922908][ T7127] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  148.028265][ T6952] hsr_slave_0: entered promiscuous mode
[  148.039841][ T6952] hsr_slave_1: entered promiscuous mode
[  148.056783][ T6952] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  148.065972][ T6952] Cannot create hsr debugfs directory
[  148.090409][ T5885] tipc: Node number set to 2130706433
[  148.144944][ T7140] netlink: 24 bytes leftover after parsing attributes in process `syz.4.281'.
[  148.168979][ T5151] Bluetooth: hci4: command tx timeout
[  148.539398][ T7152] netlink: 'syz.4.283': attribute type 1 has an invalid length.
[  148.618751][ T7152] 8021q: adding VLAN 0 to HW filter on device bond1
[  148.738920][ T7156] netlink: 'syz.4.283': attribute type 1 has an invalid length.
[  148.787677][ T7156] netlink: 224 bytes leftover after parsing attributes in process `syz.4.283'.
[  148.810648][ T7156] netlink: 'syz.4.283': attribute type 1 has an invalid length.
[  148.811001][ T7152] bond1: (slave gretap1): making interface the new active one
[  148.834475][ T7152] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  149.352869][ T7179] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  149.652681][ T7191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.291'.
[  149.732218][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'.
[  150.221285][ T6952] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  150.236214][ T6952] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  150.248877][ T5151] Bluetooth: hci4: command tx timeout
[  150.296994][ T6952] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  150.344570][ T6952] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  150.389469][ T7210] netlink: 'syz.4.296': attribute type 4 has an invalid length.
[  150.427403][ T7210] netlink: 'syz.4.296': attribute type 4 has an invalid length.
[  150.557854][    C0] TC_ACT_REPEAT abuse ?
[  150.728110][ T6952] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.797474][    C0] TC_ACT_REPEAT abuse ?
[  150.815274][ T6952] 8021q: adding VLAN 0 to HW filter on device team0
[  150.864971][ T6241] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.872264][ T6241] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.053751][ T7233] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.301'.
[  151.103243][ T6245] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.110517][ T6245] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.344645][ T6952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  151.395409][ T7246] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  151.662867][ T7256] netlink: 20 bytes leftover after parsing attributes in process `syz.0.305'.
[  151.909919][ T6952] 8021q: adding VLAN 0 to HW filter on device batadv0
[  152.180056][ T6952] veth0_vlan: entered promiscuous mode
[  152.201063][ T7272] netlink: 'syz.0.308': attribute type 33 has an invalid length.
[  152.275774][ T7275] netlink: 36 bytes leftover after parsing attributes in process `syz.3.307'.
[  152.306436][ T6952] veth1_vlan: entered promiscuous mode
[  152.318492][ T7272] netlink: 'syz.0.308': attribute type 4 has an invalid length.
[  152.368863][ T5880] udevd[5880]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  152.464559][ T7280] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.545146][ T6952] veth0_macvtap: entered promiscuous mode
[  152.600125][ T6952] veth1_macvtap: entered promiscuous mode
[  152.663619][ T7280] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.761237][ T7297] netlink: 28 bytes leftover after parsing attributes in process `syz.0.314'.
[  152.786786][ T6952] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.795346][ T7298] netlink: 44 bytes leftover after parsing attributes in process `syz.4.315'.
[  152.812580][ T7297] netlink: 28 bytes leftover after parsing attributes in process `syz.0.314'.
[  152.845147][ T7280] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.914268][ T6952] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.936990][ T7298] IPVS: Error connecting to the multicast addr
[  152.982665][ T7280] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.027672][ T6952] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.036507][ T6952] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.052270][ T6952] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.065335][ T6952] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.264594][ T7280] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.306725][ T7280] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.371257][ T6241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.402557][ T6241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.592324][ T7280] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.763366][ T7280] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.080048][ T6245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.108426][ T6245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.654429][ T7330] netlink: 32 bytes leftover after parsing attributes in process `syz.1.323'.
[  155.002214][ T6243] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.141732][ T6243] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.256578][ T6243] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.529698][ T6243] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.879835][ T6243] bridge_slave_1: left allmulticast mode
[  155.889494][ T6243] bridge_slave_1: left promiscuous mode
[  155.907538][ T6243] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.941885][ T6243] bridge_slave_0: left allmulticast mode
[  155.955432][ T6243] bridge_slave_0: left promiscuous mode
[  155.971782][ T6243] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.109800][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  156.129781][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  156.141344][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  156.159243][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  156.167606][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  156.649758][ T6243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  156.661670][ T6243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  156.673392][ T6243] bond0 (unregistering): Released all slaves
[  157.028719][ T7373] bond0: (slave bond_slave_0): Releasing backup interface
[  157.059756][ T7373] bond0: (slave bond_slave_1): Releasing backup interface
[  157.088594][ T7373] team0: Port device team_slave_0 removed
[  157.101625][ T7373] team0: Port device team_slave_1 removed
[  157.111397][ T7373] batman_adv: batadv0: Removing interface: batadv_slave_0
[  157.136140][ T7373] batman_adv: batadv0: Removing interface: batadv_slave_1
[  157.150167][ T7373] bond1: (slave ip6gretap1): Releasing backup interface
[  157.342218][ T7382] netlink: 24 bytes leftover after parsing attributes in process `syz.3.335'.
[  157.520911][ T6243] hsr_slave_0: left promiscuous mode
[  157.557498][ T6243] hsr_slave_1: left promiscuous mode
[  157.564296][ T6243] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.593283][ T6243] batman_adv: batadv0: Removing interface: batadv_slave_0
[  157.619584][ T6243] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.629521][ T6243] batman_adv: batadv0: Removing interface: batadv_slave_1
[  157.729240][ T6243] veth1_macvtap: left promiscuous mode
[  157.741300][ T6243] veth0_macvtap: left promiscuous mode
[  157.747733][ T6243] veth1_vlan: left promiscuous mode
[  157.753272][ T6243] veth0_vlan: left promiscuous mode
[  157.802759][ T7398] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  157.922996][ T7402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.338'.
[  157.999355][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.338'.
[  158.257397][ T5151] Bluetooth: hci4: command tx timeout
[  158.460197][ T6243] team0 (unregistering): Port device team_slave_1 removed
[  158.505969][ T6243] team0 (unregistering): Port device team_slave_0 removed
[  159.258619][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.342'.
[  159.347653][ T7423] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.444798][ T7423] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.560334][ T7364] chnl_net:caif_netlink_parms(): no params data found
[  160.038076][ T7443] netlink: 27 bytes leftover after parsing attributes in process `syz.4.347'.
[  160.077436][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.350'.
[  160.331271][ T5151] Bluetooth: hci4: command tx timeout
[  160.440563][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.353'.
[  160.459664][ T7364] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.487817][ T7466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.353'.
[  160.490609][ T7364] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.538663][ T7364] bridge_slave_0: entered allmulticast mode
[  160.561109][ T7364] bridge_slave_0: entered promiscuous mode
[  160.609974][ T7364] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.643960][ T7364] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.670759][ T7364] bridge_slave_1: entered allmulticast mode
[  160.695832][ T7364] bridge_slave_1: entered promiscuous mode
[  160.872736][ T7479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.355'.
[  160.933869][ T7364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  160.988198][ T7364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.175294][ T7494] netlink: 76 bytes leftover after parsing attributes in process `syz.4.359'.
[  161.282865][ T7364] team0: Port device team_slave_0 added
[  161.359127][ T7364] team0: Port device team_slave_1 added
[  161.581977][ T7364] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.610545][ T7364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.672627][ T7364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.728114][ T7364] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.745424][ T7364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.781370][ T7364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.875169][ T7364] hsr_slave_0: entered promiscuous mode
[  161.893536][ T7364] hsr_slave_1: entered promiscuous mode
[  161.904245][ T7364] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  161.913900][ T7364] Cannot create hsr debugfs directory
[  162.219312][ T7520] ip6gre1: entered allmulticast mode
[  162.407737][ T5151] Bluetooth: hci4: command tx timeout
[  162.806148][ T7543] __nla_validate_parse: 3 callbacks suppressed
[  162.806167][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.373'.
[  162.871464][ T7543] bridge0: port 3(batadv0) entered blocking state
[  162.886987][ T7543] bridge0: port 3(batadv0) entered disabled state
[  162.908479][ T7543] batadv0: entered allmulticast mode
[  162.925096][   T30] audit: type=1804 audit(1749129417.452:3): pid=7540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.372" name="memory.events" dev="tmpfs" ino=447 res=1 errno=0
[  162.926170][ T7543] batadv0: entered promiscuous mode
[  163.002961][   T30] audit: type=1800 audit(1749129417.472:4): pid=7540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.372" name="memory.events" dev="tmpfs" ino=447 res=0 errno=0
[  163.388910][ T6243] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  163.398915][ T6243] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  163.920457][ T7582] netlink: 'syz.4.380': attribute type 83 has an invalid length.
[  164.023662][ T7588] vcan0: tx drop: invalid da for name 0x0000000000000002
[  164.051701][ T7364] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  164.116177][ T7364] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  164.429844][ T7364] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  164.490690][ T5151] Bluetooth: hci4: command tx timeout
[  164.570460][ T7364] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  164.752955][ T7611] syz_tun: entered allmulticast mode
[  164.788926][ T7611] netlink: 'syz.4.386': attribute type 1 has an invalid length.
[  164.812389][ T7611] netlink: 232 bytes leftover after parsing attributes in process `syz.4.386'.
[  164.921231][ T7610] syz_tun: left allmulticast mode
[  165.118118][ T7618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.387'.
[  165.136024][ T7364] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.278069][ T7364] 8021q: adding VLAN 0 to HW filter on device team0
[  165.328998][ T6239] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.336251][ T6239] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.438127][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.445376][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.999358][ T7648] netlink: 28 bytes leftover after parsing attributes in process `syz.3.391'.
[  166.221403][ T7654] Driver unsupported XDP return value 0 on prog  (id 148) dev N/A, expect packet loss!
[  166.271834][ T7658] netlink: 32 bytes leftover after parsing attributes in process `syz.4.393'.
[  166.564311][ T7364] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.845799][ T7364] veth0_vlan: entered promiscuous mode
[  166.911360][ T7364] veth1_vlan: entered promiscuous mode
[  167.015304][ T7690] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.045258][ T7364] veth0_macvtap: entered promiscuous mode
[  167.114352][ T7691] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9
[  167.133962][ T7364] veth1_macvtap: entered promiscuous mode
[  167.333623][ T7364] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.364785][ T7364] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.380771][ T7364] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.397636][ T7364] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.406420][ T7364] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.416056][ T7364] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.523012][ T7699] netlink: 'syz.1.400': attribute type 1 has an invalid length.
[  167.597845][ T7703] netlink: 'syz.4.402': attribute type 1 has an invalid length.
[  167.673561][ T7707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.402'.
[  167.703383][ T7703] 8021q: adding VLAN 0 to HW filter on device bond2
[  167.750051][ T6243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.759358][ T7710] netlink: 'syz.1.404': attribute type 1 has an invalid length.
[  167.777776][ T6243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.812757][ T7707] veth7: entered promiscuous mode
[  167.897634][ T7712] netlink: 28 bytes leftover after parsing attributes in process `syz.4.402'.
[  167.930312][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.949065][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.182062][ T7718] netlink: 'syz.4.407': attribute type 1 has an invalid length.
[  168.204846][ T7718] netlink: 244 bytes leftover after parsing attributes in process `syz.4.407'.
[  168.227008][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.407'.
[  168.236233][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.407'.
[  168.281421][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.408'.
[  168.292137][ T7725] netlink: 'syz.3.408': attribute type 5 has an invalid length.
[  168.317382][ T7725] netlink: 20 bytes leftover after parsing attributes in process `syz.3.408'.
[  168.402437][ T7725] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[  168.423453][ T7725] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[  168.423574][ T7734] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  168.436732][ T7725] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[  168.454972][ T7734] netlink: 'syz.4.411': attribute type 1 has an invalid length.
[  168.457247][ T7725] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[  168.472587][ T7725] geneve2: entered promiscuous mode
[  168.483299][ T7725] geneve2: entered allmulticast mode
[  168.710989][ T7740] bond3: (slave gretap2): making interface the new active one
[  168.725408][ T7740] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  168.804633][ T6243] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.843458][ T7742] vlan2: entered allmulticast mode
[  168.848858][ T7742] bond3: entered allmulticast mode
[  168.854104][ T7742] gretap2: entered allmulticast mode
[  168.864296][ T7742] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  168.913394][ T6243] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.990937][ T6243] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.275615][ T7752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'.
[  169.290976][ T7752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'.
[  169.302782][ T7754] 
@ÿ: renamed from veth0_vlan
[  169.364020][ T7759] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10
[  169.415912][ T6243] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.670002][ T7770] netlink: 112 bytes leftover after parsing attributes in process `syz.0.418'.
[  169.682883][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.420'.
[  169.775028][ T6243] bridge_slave_1: left allmulticast mode
[  169.790619][ T6243] bridge_slave_1: left promiscuous mode
[  169.807682][ T6243] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.830077][ T6243] bridge_slave_0: left allmulticast mode
[  169.842644][ T6243] bridge_slave_0: left promiscuous mode
[  169.858184][ T6243] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.901562][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  169.916128][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  170.143289][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  170.161958][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  170.180680][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  170.444759][ T7790] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  170.457531][ T7790] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  170.695449][ T6243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  170.723135][ T6243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  170.753302][ T6243] bond0 (unregistering): Released all slaves
[  171.361783][ T7798] netlink: 'syz.0.424': attribute type 21 has an invalid length.
[  171.382104][ T6243] hsr_slave_0: left promiscuous mode
[  171.390661][ T6243] hsr_slave_1: left promiscuous mode
[  171.396982][ T6243] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.404933][ T6243] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.417016][ T6243] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.424692][ T6243] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.460148][ T6243] veth1_macvtap: left promiscuous mode
[  171.465999][ T6243] veth0_macvtap: left promiscuous mode
[  171.471875][ T6243] veth1_vlan: left promiscuous mode
[  171.478138][ T6243] veth0_vlan: left promiscuous mode
[  172.165491][ T6243] team0 (unregistering): Port device team_slave_1 removed
[  172.220848][ T6243] team0 (unregistering): Port device team_slave_0 removed
[  172.249125][ T5836] Bluetooth: hci4: command tx timeout
[  172.909779][ T7803] netlink: 'syz.0.425': attribute type 32 has an invalid length.
[  172.918099][ T7801] netlink: 'syz.0.425': attribute type 32 has an invalid length.
[  173.179910][ T7781] chnl_net:caif_netlink_parms(): no params data found
[  173.652886][ T7781] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.679823][ T7781] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.688183][ T7781] bridge_slave_0: entered allmulticast mode
[  173.696746][ T7781] bridge_slave_0: entered promiscuous mode
[  173.707840][ T7781] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.715256][ T7781] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.777452][ T7781] bridge_slave_1: entered allmulticast mode
[  173.785608][ T7781] bridge_slave_1: entered promiscuous mode
[  173.890334][ T7845] __nla_validate_parse: 3 callbacks suppressed
[  173.890353][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'.
[  173.911671][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.435'.
[  174.039673][ T7781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.080284][ T7781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.103370][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.434'.
[  174.118658][ T7853] x_tables: duplicate underflow at hook 1
[  174.137990][ T7853] netlink: 20 bytes leftover after parsing attributes in process `syz.4.434'.
[  174.336803][ T5836] Bluetooth: hci4: command 0x041b tx timeout
[  174.366571][ T7781] team0: Port device team_slave_0 added
[  174.393787][ T7781] team0: Port device team_slave_1 added
[  174.562295][ T7781] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.585062][ T7863] netlink: 36 bytes leftover after parsing attributes in process `syz.0.439'.
[  174.596306][ T7781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.679729][ T7781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.762704][ T7781] batman_adv: batadv0: Adding interface: batadv_slave_1
[  174.784710][ T7781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.822536][ T7781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.001110][ T7871] netlink: 40 bytes leftover after parsing attributes in process `syz.0.442'.
[  175.050685][ T7871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.442'.
[  175.091348][ T7781] hsr_slave_0: entered promiscuous mode
[  175.100913][ T7781] hsr_slave_1: entered promiscuous mode
[  175.108201][ T7781] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  175.115834][ T7781] Cannot create hsr debugfs directory
[  175.125010][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.442'.
[  175.204911][ T7881] syz_tun: entered allmulticast mode
[  175.310298][ T7876] syz_tun: left allmulticast mode
[  175.903293][ T7898] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  176.212458][ T7904] TC_ACT_REPEAT abuse ?
[  176.242124][ T7904] TC_ACT_REPEAT abuse ?
[  176.252267][ T7904] TC_ACT_REPEAT abuse ?
[  176.284224][ T7907] netlink: 'syz.1.452': attribute type 2 has an invalid length.
[  176.309525][ T7907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.452'.
[  176.391470][ T7781] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  176.417330][ T5151] Bluetooth: hci4: command 0x041b tx timeout
[  176.432779][ T7781] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  176.445886][ T7781] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  176.457934][ T7781] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  176.566987][ T7781] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.601322][ T7913] netlink: 'syz.0.455': attribute type 11 has an invalid length.
[  176.611412][ T7781] 8021q: adding VLAN 0 to HW filter on device team0
[  176.624587][ T6236] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.632919][ T6236] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.683665][ T6236] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.690940][ T6236] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.017914][ T7920] ieee802154 phy0 wpan0: encryption failed: -22
[  177.449442][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.460'.
[  177.492322][ T7929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  177.559194][ T7781] 8021q: adding VLAN 0 to HW filter on device batadv0
[  177.613444][ T7781] veth0_vlan: entered promiscuous mode
[  177.646766][ T7781] veth1_vlan: entered promiscuous mode
[  177.849126][ T7781] veth0_macvtap: entered promiscuous mode
[  177.875150][ T7781] veth1_macvtap: entered promiscuous mode
[  178.091411][ T7781] batman_adv: batadv0: Interface activated: batadv_slave_0
[  178.132788][ T7781] batman_adv: batadv0: Interface activated: batadv_slave_1
[  178.166346][ T7781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.176282][ T7781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.221465][ T7781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.230502][ T7781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.489062][ T5151] Bluetooth: hci4: command 0x041b tx timeout
[  178.503159][ T7958] veth1_macvtap: left promiscuous mode
[  178.523806][ T7958] macsec0: entered promiscuous mode
[  178.555840][ T7960] netlink: 'syz.1.468': attribute type 2 has an invalid length.
[  178.580285][ T7960] netlink: 'syz.1.468': attribute type 1 has an invalid length.
[  178.598014][ T6241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.605900][ T6241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.643984][ T7958] veth1_macvtap: entered promiscuous mode
[  178.657528][ T7958] macsec0: left promiscuous mode
[  178.748641][ T6243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.782134][ T6243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.829790][ T7968] !
: renamed from dummy0 (while UP)
[  180.584954][ T1148] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.698038][ T1148] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.746394][ T1148] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.821891][ T1148] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.922373][ T1148] bridge_slave_1: left allmulticast mode
[  180.928381][ T1148] bridge_slave_1: left promiscuous mode
[  180.934149][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.943547][ T1148] bridge_slave_0: left allmulticast mode
[  180.949661][ T1148] bridge_slave_0: left promiscuous mode
[  180.955400][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.118959][ T8009] __nla_validate_parse: 4 callbacks suppressed
[  181.118978][ T8009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.476'.
[  181.161291][ T8014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.474'.
[  181.213907][ T8020] netlink: 136784 bytes leftover after parsing attributes in process `syz.4.477'.
[  181.250858][ T8020] netlink: zone id is out of range
[  181.264490][ T8020] netlink: zone id is out of range
[  181.274647][ T8020] netlink: zone id is out of range
[  181.289239][ T8020] netlink: zone id is out of range
[  181.307186][ T8020] netlink: zone id is out of range
[  181.324684][ T8020] netlink: zone id is out of range
[  181.340284][ T8020] netlink: zone id is out of range
[  181.355766][ T8020] netlink: zone id is out of range
[  181.371301][ T8020] netlink: zone id is out of range
[  181.381434][ T8020] netlink: zone id is out of range
[  181.402454][ T8026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.478'.
[  181.496994][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'.
[  181.514163][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'.
[  181.814078][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  181.832466][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  181.842854][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  181.853445][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  181.867619][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  182.121775][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  182.135900][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  182.155895][ T1148] bond0 (unregistering): Released all slaves
[  182.333783][ T8018] netlink: 28 bytes leftover after parsing attributes in process `syz.4.477'.
[  182.357430][ T8018] netlink: 28 bytes leftover after parsing attributes in process `syz.4.477'.
[  182.601556][ T8058] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.484'.
[  183.007054][ T1148] hsr_slave_0: left promiscuous mode
[  183.027155][ T1148] hsr_slave_1: left promiscuous mode
[  183.033646][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  183.050168][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0
[  183.080336][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  183.097313][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1
[  183.138470][ T1148] veth1_macvtap: left promiscuous mode
[  183.145207][ T1148] veth0_macvtap: left promiscuous mode
[  183.151100][ T1148] veth1_vlan: left promiscuous mode
[  183.156511][ T1148] veth0_vlan: left promiscuous mode
[  183.927260][ T5151] Bluetooth: hci4: command tx timeout
[  184.273819][ T1148] team0 (unregistering): Port device team_slave_1 removed
[  184.341128][ T1148] team0 (unregistering): Port device team_slave_0 removed
[  185.337676][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'.
[  185.688321][ T8127] netlink: 'syz.3.496': attribute type 303 has an invalid length.
[  185.794106][ T8044] chnl_net:caif_netlink_parms(): no params data found
[  186.007368][ T5151] Bluetooth: hci4: command tx timeout
[  186.143109][ T8044] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.154285][ T8146] xt_TCPMSS: Only works on TCP SYN packets
[  186.160600][ T8044] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.168048][ T8044] bridge_slave_0: entered allmulticast mode
[  186.175866][ T8044] bridge_slave_0: entered promiscuous mode
[  186.185100][ T8044] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.193722][ T8044] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.201207][ T8044] bridge_slave_1: entered allmulticast mode
[  186.209457][ T8044] bridge_slave_1: entered promiscuous mode
[  186.237524][   T49] tipc: Subscription rejected, illegal request
[  186.422468][ T8044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.455612][ T8044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.556374][ T8044] team0: Port device team_slave_0 added
[  186.581927][ T8044] team0: Port device team_slave_1 added
[  186.846791][ T8044] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.868217][ T8044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.935332][ T8044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.954093][ T8163] bridge0: entered allmulticast mode
[  186.961948][ T8044] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.963740][ T8166] __nla_validate_parse: 3 callbacks suppressed
[  186.963760][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'.
[  186.974602][ T8044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.017231][ T8044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.080693][ T8166] bridge_slave_1: left allmulticast mode
[  187.086417][ T8166] bridge_slave_1: left promiscuous mode
[  187.098949][ T8166] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.116119][ T8166] bridge_slave_0: left allmulticast mode
[  187.122131][ T8166] bridge_slave_0: left promiscuous mode
[  187.129391][ T8166] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.152227][ T8166] bridge0 (unregistering): left allmulticast mode
[  187.494920][ T8044] hsr_slave_0: entered promiscuous mode
[  187.515991][ T8044] hsr_slave_1: entered promiscuous mode
[  187.533371][ T8044] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  187.550349][ T8044] Cannot create hsr debugfs directory
[  187.582583][ T8178] netlink: 20 bytes leftover after parsing attributes in process `syz.3.506'.
[  187.592303][ T8178] netlink: 24 bytes leftover after parsing attributes in process `syz.3.506'.
[  187.783492][ T8182] syzkaller1: entered allmulticast mode
[  188.087395][ T5151] Bluetooth: hci4: command tx timeout
[  188.543029][ T8223] No such timeout policy "syz1"
[  188.845436][ T8044] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  188.902067][ T8044] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  188.931804][ T8044] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  189.066776][ T8044] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  189.371149][ T8044] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.386170][ T8248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.526'.
[  189.454159][ T8044] 8021q: adding VLAN 0 to HW filter on device team0
[  189.497779][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.505042][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.580664][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.587909][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.592316][ T8261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.530'.
[  189.953694][ T8275] netlink: 32 bytes leftover after parsing attributes in process `syz.4.532'.
[  190.136096][ T8044] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.167390][ T5151] Bluetooth: hci4: command tx timeout
[  190.231974][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.534'.
[  190.283089][ T8044] veth0_vlan: entered promiscuous mode
[  190.344328][ T8044] veth1_vlan: entered promiscuous mode
[  190.422411][ T8044] veth0_macvtap: entered promiscuous mode
[  190.443966][ T8044] veth1_macvtap: entered promiscuous mode
[  190.504534][ T8044] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.554733][ T8044] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.589238][ T8044] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.607243][ T8044] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.617614][ T8044] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.626374][ T8044] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.208442][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.246939][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.261755][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.269525][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.338366][ T8311] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:19999
[  191.355805][ T8311] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:19999
[  191.366120][ T8312] wireguard0: entered promiscuous mode
[  191.405888][ T8311] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:19999
[  191.434154][ T8311] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:19999
[  191.441885][ T8312] wireguard0: entered allmulticast mode
[  191.713436][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.546'.
[  191.923881][ T8335] netlink: 312 bytes leftover after parsing attributes in process `syz.0.549'.
[  191.947578][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.547'.
[  192.113409][ T8341] netlink: 16 bytes leftover after parsing attributes in process `syz.0.550'.
[  192.129734][ T8341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.550'.
[  192.192896][ T8341] geneve2: entered allmulticast mode
[  192.244351][ T8346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.551'.
[  192.269665][ T8345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.551'.
[  192.282295][ T8346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.551'.
[  192.309527][ T8345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.551'.
[  192.343286][ T8345] bond0: entered promiscuous mode
[  192.365956][ T8345] batadv_slave_1: entered promiscuous mode
[  192.380419][ T8345] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  192.393849][ T8345] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  192.745284][ T8356] vlan2: entered promiscuous mode
[  192.750893][ T8356] gretap0: entered promiscuous mode
[  193.004562][ T8372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.559'.
[  193.040990][ T8372] netlink: 24 bytes leftover after parsing attributes in process `syz.3.559'.
[  193.107843][ T8379] netlink: 'syz.0.561': attribute type 30 has an invalid length.
[  193.160571][   T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.421119][   T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.475878][   T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.531657][   T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.623249][   T36] bridge_slave_1: left allmulticast mode
[  193.629110][   T36] bridge_slave_1: left promiscuous mode
[  193.634828][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.644366][   T36] bridge_slave_0: left allmulticast mode
[  193.650855][   T36] bridge_slave_0: left promiscuous mode
[  193.657435][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.996224][ T8384] netlink: 28 bytes leftover after parsing attributes in process `syz.4.566'.
[  194.019576][ T8384] net_ratelimit: 4060 callbacks suppressed
[  194.019597][ T8384] openvswitch: netlink: Flow key attr not present in new flow.
[  194.070008][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.566'.
[  194.089087][ T5836] Bluetooth: hci3: command 0x0405 tx timeout
[  194.394773][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  194.416058][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  194.416201][ T5151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  194.434877][ T5151] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  194.443250][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  194.453626][ T5151] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  194.455004][   T36] bond0 (unregistering): Released all slaves
[  194.469115][ T5151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  194.478722][ T5151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  194.925922][   T36] hsr_slave_0: left promiscuous mode
[  194.944397][   T36] hsr_slave_1: left promiscuous mode
[  194.962682][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.997204][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.022603][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  195.037760][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.120376][   T36] veth1_macvtap: left promiscuous mode
[  195.137611][   T36] veth0_macvtap: left promiscuous mode
[  195.154998][   T36] veth1_vlan: left promiscuous mode
[  195.163971][   T36] veth0_vlan: left promiscuous mode
[  195.753608][   T36] team0 (unregistering): Port device team_slave_1 removed
[  195.800363][   T36] team0 (unregistering): Port device team_slave_0 removed
[  196.269793][ T8435] IPVS: Error connecting to the multicast addr
[  196.570181][ T5151] Bluetooth: hci4: command tx timeout
[  196.806928][ T8403] chnl_net:caif_netlink_parms(): no params data found
[  197.135480][ T8403] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.157604][ T8403] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.202015][ T8403] bridge_slave_0: entered allmulticast mode
[  197.219685][ T8403] bridge_slave_0: entered promiscuous mode
[  197.271839][ T8474] __nla_validate_parse: 73 callbacks suppressed
[  197.271861][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.583'.
[  197.417340][ T8403] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.424692][ T8403] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.436790][ T8479] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:0
[  197.448875][ T8403] bridge_slave_1: entered allmulticast mode
[  197.469361][ T8403] bridge_slave_1: entered promiscuous mode
[  197.475349][ T8480] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:0
[  197.483760][ T8474] batadv0: left allmulticast mode
[  197.498037][ T8474] batadv0: left promiscuous mode
[  197.509174][ T8482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.586'.
[  197.512218][ T8474] bridge0: port 3(batadv0) entered disabled state
[  197.574920][ T8474] bridge_slave_1: left allmulticast mode
[  197.581728][ T8474] bridge_slave_1: left promiscuous mode
[  197.590925][ T8474] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.605807][ T8474] bridge_slave_0: left allmulticast mode
[  197.613182][ T8474] bridge_slave_0: left promiscuous mode
[  197.619695][ T8474] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.912713][ T8403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.994446][ T8403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.195344][ T8496] x_tables: duplicate underflow at hook 1
[  198.202133][ T8403] team0: Port device team_slave_0 added
[  198.258359][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'.
[  198.332715][ T8403] team0: Port device team_slave_1 added
[  198.518631][ T8403] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.536939][ T8403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.576295][ T8403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.613555][ T8517] netlink: 'syz.4.595': attribute type 46 has an invalid length.
[  198.632532][ T8403] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.642631][ T8403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.647854][ T5151] Bluetooth: hci4: command tx timeout
[  198.691127][ T8403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.795471][ T8403] hsr_slave_0: entered promiscuous mode
[  198.802879][ T8403] hsr_slave_1: entered promiscuous mode
[  198.815431][ T8403] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.827577][ T8403] Cannot create hsr debugfs directory
[  199.286379][ T8524] netlink: 24 bytes leftover after parsing attributes in process `syz.1.597'.
[  199.307860][ T8524] netlink: 'syz.1.597': attribute type 1 has an invalid length.
[  199.315579][ T8524] netlink: 'syz.1.597': attribute type 2 has an invalid length.
[  199.358361][ T8524] netlink: 'syz.1.597': attribute type 3 has an invalid length.
[  199.368761][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.597'.
[  199.673741][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.601'.
[  199.862882][ T8403] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  199.879341][ T8403] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  199.893778][ T8403] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  199.942628][ T8403] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  199.993338][ T8558] x_tables: duplicate underflow at hook 2
[  200.172941][ T8403] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.247016][ T8403] 8021q: adding VLAN 0 to HW filter on device team0
[  200.284562][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.291847][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.376700][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.384026][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.491649][ T8573] IPVS: Scheduler module ip_vs_sip not found
[  200.521600][ T8575] IPVS: length: 24 != 16106127384
[  200.562279][ T8403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  200.727315][ T5151] Bluetooth: hci4: command tx timeout
[  200.739496][ T8586] netlink: 176 bytes leftover after parsing attributes in process `syz.3.614'.
[  200.749501][ T8586] netlink: 176 bytes leftover after parsing attributes in process `syz.3.614'.
[  200.867497][ T8587] FAULT_INJECTION: forcing a failure.
[  200.867497][ T8587] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  200.916281][ T8587] CPU: 0 UID: 0 PID: 8587 Comm: syz.0.615 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) 
[  200.916313][ T8587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  200.916333][ T8587] Call Trace:
[  200.916341][ T8587]  <TASK>
[  200.916351][ T8587]  dump_stack_lvl+0x189/0x250
[  200.916398][ T8587]  ? __pfx____ratelimit+0x10/0x10
[  200.916426][ T8587]  ? __pfx_dump_stack_lvl+0x10/0x10
[  200.916458][ T8587]  ? __pfx__printk+0x10/0x10
[  200.916480][ T8587]  ? __might_fault+0xb0/0x130
[  200.916523][ T8587]  should_fail_ex+0x414/0x560
[  200.916556][ T8587]  _copy_from_user+0x2d/0xb0
[  200.916579][ T8587]  ___sys_recvmsg+0x12e/0x510
[  200.916608][ T8587]  ? __pfx____sys_recvmsg+0x10/0x10
[  200.916666][ T8587]  ? __might_fault+0xb0/0x130
[  200.916701][ T8587]  do_recvmmsg+0x307/0x770
[  200.916733][ T8587]  ? __pfx_do_recvmmsg+0x10/0x10
[  200.916776][ T8587]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  200.916824][ T8587]  __x64_sys_recvmmsg+0x190/0x240
[  200.916849][ T8587]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  200.916869][ T8587]  ? rcu_is_watching+0x15/0xb0
[  200.916911][ T8587]  ? do_syscall_64+0xbe/0x3b0
[  200.916942][ T8587]  do_syscall_64+0xfa/0x3b0
[  200.916976][ T8587]  ? lockdep_hardirqs_on+0x9c/0x150
[  200.916999][ T8587]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.917018][ T8587]  ? clear_bhb_loop+0x60/0xb0
[  200.917059][ T8587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.917079][ T8587] RIP: 0033:0x7ffbccf8e929
[  200.917111][ T8587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.917127][ T8587] RSP: 002b:00007ffbcadf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  200.917152][ T8587] RAX: ffffffffffffffda RBX: 00007ffbcd1b5fa0 RCX: 00007ffbccf8e929
[  200.917167][ T8587] RDX: 0000000004000169 RSI: 0000200000005000 RDI: 0000000000000003
[  200.917179][ T8587] RBP: 00007ffbcadf6090 R08: 0000000000000000 R09: 0000000000000000
[  200.917191][ T8587] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000001
[  200.917203][ T8587] R13: 0000000000000000 R14: 00007ffbcd1b5fa0 R15: 00007ffdc432c098
[  200.917235][ T8587]  </TASK>
[  201.575363][ T8403] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.626304][ T8615] netlink: 'syz.1.620': attribute type 6 has an invalid length.
[  201.635945][ T8615] netlink: 'syz.1.620': attribute type 7 has an invalid length.
[  201.644087][ T8615] netlink: 'syz.1.620': attribute type 8 has an invalid length.
[  201.722757][ T8611] sch_fq: defrate 968 ignored.
[  201.933350][ T8625] netlink: 404 bytes leftover after parsing attributes in process `syz.1.625'.
[  201.955616][ T8403] veth0_vlan: entered promiscuous mode
[  202.039408][ T8403] veth1_vlan: entered promiscuous mode
[  202.053017][ T8630] netlink: 'syz.4.626': attribute type 11 has an invalid length.
[  202.113564][ T8403] veth0_macvtap: entered promiscuous mode
[  202.136949][ T8403] veth1_macvtap: entered promiscuous mode
[  202.177005][ T8403] batman_adv: batadv0: Interface activated: batadv_slave_0
[  202.201616][ T8403] batman_adv: batadv0: Interface activated: batadv_slave_1
[  202.233139][ T8403] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  202.257449][ T8403] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  202.266349][ T8403] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  202.281494][ T8403] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.318703][ T8638] FAULT_INJECTION: forcing a failure.
[  202.318703][ T8638] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  202.357599][ T8638] CPU: 1 UID: 0 PID: 8638 Comm: syz.4.629 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) 
[  202.357628][ T8638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  202.357640][ T8638] Call Trace:
[  202.357647][ T8638]  <TASK>
[  202.357656][ T8638]  dump_stack_lvl+0x189/0x250
[  202.357694][ T8638]  ? __pfx____ratelimit+0x10/0x10
[  202.357719][ T8638]  ? __pfx_dump_stack_lvl+0x10/0x10
[  202.357752][ T8638]  ? __pfx__printk+0x10/0x10
[  202.357774][ T8638]  ? __might_fault+0xb0/0x130
[  202.357816][ T8638]  should_fail_ex+0x414/0x560
[  202.357850][ T8638]  _copy_from_user+0x2d/0xb0
[  202.357873][ T8638]  ___sys_recvmsg+0x12e/0x510
[  202.357902][ T8638]  ? __pfx____sys_recvmsg+0x10/0x10
[  202.357959][ T8638]  ? __might_fault+0xb0/0x130
[  202.357993][ T8638]  do_recvmmsg+0x307/0x770
[  202.358025][ T8638]  ? __pfx_do_recvmmsg+0x10/0x10
[  202.358061][ T8638]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  202.358110][ T8638]  __x64_sys_recvmmsg+0x190/0x240
[  202.358136][ T8638]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  202.358156][ T8638]  ? rcu_is_watching+0x15/0xb0
[  202.358191][ T8638]  ? do_syscall_64+0xbe/0x3b0
[  202.358223][ T8638]  do_syscall_64+0xfa/0x3b0
[  202.358248][ T8638]  ? lockdep_hardirqs_on+0x9c/0x150
[  202.358271][ T8638]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.358291][ T8638]  ? clear_bhb_loop+0x60/0xb0
[  202.358316][ T8638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.358336][ T8638] RIP: 0033:0x7efc7398e929
[  202.358354][ T8638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  202.358371][ T8638] RSP: 002b:00007efc74821038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  202.358393][ T8638] RAX: ffffffffffffffda RBX: 00007efc73bb6080 RCX: 00007efc7398e929
[  202.358408][ T8638] RDX: 0000000004000169 RSI: 0000200000005000 RDI: 0000000000000003
[  202.358421][ T8638] RBP: 00007efc74821090 R08: 0000000000000000 R09: 0000000000000000
[  202.358444][ T8638] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000001
[  202.358456][ T8638] R13: 0000000000000000 R14: 00007efc73bb6080 R15: 00007fff48d86968
[  202.358489][ T8638]  </TASK>
[  202.365726][ T8640] netlink: 'syz.1.628': attribute type 11 has an invalid length.
[  202.807484][ T5151] Bluetooth: hci4: command tx timeout
[  203.158060][ T6243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.166070][ T6243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.514611][ T6243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.537055][ T6243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.576535][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.637'.
[  203.623831][ T8654] netlink: 'syz.1.633': attribute type 4 has an invalid length.
[  203.851084][ T8684] netlink: 36 bytes leftover after parsing attributes in process `syz.3.638'.
[  203.862095][ T8678] ==================================================================
[  203.870222][ T8678] BUG: KASAN: slab-use-after-free in cfusbl_device_notify+0x150/0x6a0
[  203.878445][ T8678] Read of size 8 at addr ffff888027384c50 by task syz.1.633/8678
[  203.886206][ T8678] 
[  203.888560][ T8678] CPU: 1 UID: 0 PID: 8678 Comm: syz.1.633 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) 
[  203.888585][ T8678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  203.888598][ T8678] Call Trace:
[  203.888608][ T8678]  <TASK>
[  203.888617][ T8678]  dump_stack_lvl+0x189/0x250
[  203.888651][ T8678]  ? __virt_addr_valid+0x1c8/0x5c0
[  203.888668][ T8678]  ? rcu_is_watching+0x15/0xb0
[  203.888692][ T8678]  ? __kasan_check_byte+0x12/0x40
[  203.888718][ T8678]  ? __pfx_dump_stack_lvl+0x10/0x10
[  203.888744][ T8678]  ? rcu_is_watching+0x15/0xb0
[  203.888769][ T8678]  ? lock_release+0x4b/0x3e0
[  203.888793][ T8678]  ? __virt_addr_valid+0x1c8/0x5c0
[  203.888809][ T8678]  ? __virt_addr_valid+0x4a5/0x5c0
[  203.888827][ T8678]  print_report+0xd2/0x2b0
[  203.888850][ T8678]  ? cfusbl_device_notify+0x150/0x6a0
[  203.888876][ T8678]  kasan_report+0x118/0x150
[  203.888903][ T8678]  ? cfusbl_device_notify+0x150/0x6a0
[  203.888933][ T8678]  cfusbl_device_notify+0x150/0x6a0
[  203.888959][ T8678]  ? net_generic+0x1e/0x240
[  203.888984][ T8678]  ? __pfx_cfusbl_device_notify+0x10/0x10
[  203.889011][ T8678]  ? caif_device_notify+0x250/0xfc0
[  203.889038][ T8678]  ? smc_pnet_netdev_event+0x3b5/0x6c0
[  203.889068][ T8678]  notifier_call_chain+0x1b3/0x3e0
[  203.889099][ T8678]  register_netdevice+0x121c/0x1ae0
[  203.889117][ T8678]  ? __mutex_lock+0x51b/0xe80
[  203.889148][ T8678]  ? __pfx_register_netdevice+0x10/0x10
[  203.889170][ T8678]  ? __asan_memset+0x22/0x50
[  203.889190][ T8678]  ? dev_addr_mod+0x2ce/0x3d0
[  203.889208][ T8678]  register_netdev+0x40/0x60
[  203.889226][ T8678]  bnep_add_connection+0x6bf/0xbf0
[  203.889255][ T8678]  ? __pfx_bnep_add_connection+0x10/0x10
[  203.889275][ T8678]  ? __fget_files+0x3a0/0x420
[  203.889307][ T8678]  do_bnep_sock_ioctl+0x40e/0x640
[  203.889330][ T8678]  ? __pfx_do_bnep_sock_ioctl+0x10/0x10
[  203.889355][ T8678]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  203.889375][ T8678]  ? tomoyo_path_number_perm+0x4e2/0x5a0
[  203.889395][ T8678]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  203.889413][ T8678]  ? call_rcu+0x6dd/0x990
[  203.889445][ T8678]  sock_do_ioctl+0xd9/0x300
[  203.889468][ T8678]  ? __pfx_sock_do_ioctl+0x10/0x10
[  203.889494][ T8678]  ? __lock_acquire+0xab9/0xd20
[  203.889524][ T8678]  sock_ioctl+0x576/0x790
[  203.889545][ T8678]  ? __pfx_sock_ioctl+0x10/0x10
[  203.889565][ T8678]  ? __fget_files+0x2a/0x420
[  203.889590][ T8678]  ? __fget_files+0x3a0/0x420
[  203.889615][ T8678]  ? __fget_files+0x2a/0x420
[  203.889644][ T8678]  ? bpf_lsm_file_ioctl+0x9/0x20
[  203.889668][ T8678]  ? __pfx_sock_ioctl+0x10/0x10
[  203.889687][ T8678]  __se_sys_ioctl+0xf9/0x170
[  203.889709][ T8678]  do_syscall_64+0xfa/0x3b0
[  203.889731][ T8678]  ? lockdep_hardirqs_on+0x9c/0x150
[  203.889751][ T8678]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.889780][ T8678]  ? clear_bhb_loop+0x60/0xb0
[  203.889798][ T8678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.889815][ T8678] RIP: 0033:0x7f3ac798e929
[  203.889831][ T8678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  203.889845][ T8678] RSP: 002b:00007f3ac8861038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  203.889864][ T8678] RAX: ffffffffffffffda RBX: 00007f3ac7bb6160 RCX: 00007f3ac798e929
[  203.889877][ T8678] RDX: 00002000000000c0 RSI: 00000000400442c8 RDI: 000000000000000b
[  203.889888][ T8678] RBP: 00007f3ac7a10b39 R08: 0000000000000000 R09: 0000000000000000
[  203.889899][ T8678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  203.889909][ T8678] R13: 0000000000000000 R14: 00007f3ac7bb6160 R15: 00007ffdb5059688
[  203.889930][ T8678]  </TASK>
[  203.889935][ T8678] 
[  204.246034][ T8678] Allocated by task 5151:
[  204.250373][ T8678]  kasan_save_track+0x3e/0x80
[  204.255073][ T8678]  __kasan_kmalloc+0x93/0xb0
[  204.259694][ T8678]  __kmalloc_cache_noprof+0x230/0x3d0
[  204.265267][ T8678]  __hci_conn_add+0x233/0x1b30
[  204.270100][ T8678]  hci_conn_request_evt+0x53e/0xb60
[  204.275337][ T8678]  hci_event_packet+0x7e3/0x1200
[  204.280292][ T8678]  hci_rx_work+0x46a/0xe80
[  204.284719][ T8678]  process_scheduled_works+0xae1/0x17b0
[  204.290283][ T8678]  worker_thread+0x8a0/0xda0
[  204.294889][ T8678]  kthread+0x70e/0x8a0
[  204.298968][ T8678]  ret_from_fork+0x3fc/0x770
[  204.303576][ T8678]  ret_from_fork_asm+0x1a/0x30
[  204.308354][ T8678] 
[  204.310686][ T8678] Freed by task 8403:
[  204.314672][ T8678]  kasan_save_track+0x3e/0x80
[  204.319385][ T8678]  kasan_save_free_info+0x46/0x50
[  204.324425][ T8678]  __kasan_slab_free+0x62/0x70
[  204.329206][ T8678]  kfree+0x18e/0x440
[  204.333128][ T8678]  device_release+0x9c/0x1c0
[  204.337737][ T8678]  kobject_put+0x22b/0x480
[  204.342168][ T8678]  hci_conn_del+0x8ff/0xcb0
[  204.346865][ T8678]  hci_conn_hash_flush+0x191/0x230
[  204.351987][ T8678]  hci_dev_close_sync+0xaef/0x1330
[  204.357121][ T8678]  hci_unregister_dev+0x206/0x500
[  204.362165][ T8678]  vhci_release+0x80/0xd0
[  204.366619][ T8678]  __fput+0x44c/0xa70
[  204.370631][ T8678]  task_work_run+0x1d1/0x260
[  204.375237][ T8678]  do_exit+0x8d1/0x2550
[  204.379407][ T8678]  do_group_exit+0x21c/0x2d0
[  204.384013][ T8678]  __x64_sys_exit_group+0x3f/0x40
[  204.389052][ T8678]  x64_sys_call+0x21ba/0x21c0
[  204.393760][ T8678]  do_syscall_64+0xfa/0x3b0
[  204.398278][ T8678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.404182][ T8678] 
[  204.406514][ T8678] Last potentially related work creation:
[  204.412231][ T8678]  kasan_save_stack+0x3e/0x60
[  204.416924][ T8678]  kasan_record_aux_stack+0xbd/0xd0
[  204.422133][ T8678]  insert_work+0x3d/0x330
[  204.426477][ T8678]  __queue_work+0xcfc/0xfe0
[  204.431084][ T8678]  queue_delayed_work_on+0x18b/0x280
[  204.436395][ T8678]  l2cap_chan_del+0x285/0x5e0
[  204.441103][ T8678]  l2cap_conn_del+0x388/0x680
[  204.445796][ T8678]  hci_conn_hash_flush+0x10a/0x230
[  204.450912][ T8678]  hci_dev_close_sync+0xaef/0x1330
[  204.456037][ T8678]  hci_unregister_dev+0x206/0x500
[  204.461079][ T8678]  vhci_release+0x80/0xd0
[  204.465422][ T8678]  __fput+0x44c/0xa70
[  204.469435][ T8678]  task_work_run+0x1d1/0x260
[  204.474046][ T8678]  do_exit+0x8d1/0x2550
[  204.478214][ T8678]  do_group_exit+0x21c/0x2d0
[  204.482811][ T8678]  __x64_sys_exit_group+0x3f/0x40
[  204.487850][ T8678]  x64_sys_call+0x21ba/0x21c0
[  204.492539][ T8678]  do_syscall_64+0xfa/0x3b0
[  204.497062][ T8678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.502967][ T8678] 
[  204.505295][ T8678] The buggy address belongs to the object at ffff888027384000
[  204.505295][ T8678]  which belongs to the cache kmalloc-8k of size 8192
[  204.519369][ T8678] The buggy address is located 3152 bytes inside of
[  204.519369][ T8678]  freed 8192-byte region [ffff888027384000, ffff888027386000)
[  204.533390][ T8678] 
[  204.535736][ T8678] The buggy address belongs to the physical page:
[  204.542155][ T8678] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27380
[  204.550927][ T8678] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  204.559437][ T8678] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  204.567015][ T8678] page_type: f5(slab)
[  204.571016][ T8678] raw: 00fff00000000040 ffff88801a442280 dead000000000122 0000000000000000
[  204.579615][ T8678] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  204.588221][ T8678] head: 00fff00000000040 ffff88801a442280 dead000000000122 0000000000000000
[  204.596899][ T8678] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  204.605576][ T8678] head: 00fff00000000003 ffffea00009ce001 00000000ffffffff 00000000ffffffff
[  204.614345][ T8678] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  204.623019][ T8678] page dumped because: kasan: bad access detected
[  204.629452][ T8678] page_owner tracks the page as allocated
[  204.635173][ T8678] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8378, tgid 8375 (syz.0.561), ts 193266735378, free_ts 193260915184
[  204.656482][ T8678]  post_alloc_hook+0x240/0x2a0
[  204.661287][ T8678]  get_page_from_freelist+0x21e0/0x22c0
[  204.666843][ T8678]  __alloc_frozen_pages_noprof+0x181/0x370
[  204.672666][ T8678]  alloc_pages_mpol+0x232/0x4a0
[  204.677542][ T8678]  allocate_slab+0x8a/0x3b0
[  204.682068][ T8678]  ___slab_alloc+0xbfc/0x1480
[  204.686748][ T8678]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[  204.693187][ T8678]  krealloc_noprof+0x124/0x340
[  204.697971][ T8678]  copy_array+0x63/0xf0
[  204.702145][ T8678]  copy_verifier_state+0x848/0xed0
[  204.707275][ T8678]  do_check+0x4c44/0xd450
[  204.711628][ T8678]  do_check_common+0x168d/0x20b0
[  204.716575][ T8678]  bpf_check+0x13664/0x19c60
[  204.721190][ T8678]  bpf_prog_load+0x1318/0x1930
[  204.725976][ T8678]  __sys_bpf+0x5f1/0x860
[  204.730320][ T8678]  __x64_sys_bpf+0x7c/0x90
[  204.734767][ T8678] page last free pid 8379 tgid 8375 stack trace:
[  204.741104][ T8678]  __free_frozen_pages+0xc6e/0xe50
[  204.746224][ T8678]  __put_partials+0x161/0x1c0
[  204.750911][ T8678]  put_cpu_partial+0x17c/0x250
[  204.755686][ T8678]  __slab_free+0x2f7/0x400
[  204.760112][ T8678]  qlist_free_all+0x97/0x140
[  204.764711][ T8678]  kasan_quarantine_reduce+0x148/0x160
[  204.770203][ T8678]  __kasan_slab_alloc+0x22/0x80
[  204.775074][ T8678]  __kmalloc_cache_noprof+0x1be/0x3d0
[  204.780469][ T8678]  ref_tracker_alloc+0x133/0x460
[  204.785432][ T8678]  netdev_queue_update_kobjects+0x1d1/0x6c0
[  204.791371][ T8678]  netdev_register_kobject+0x236/0x2f0
[  204.796843][ T8678]  register_netdevice+0x126c/0x1ae0
[  204.802052][ T8678]  bond_newlink+0x60/0xb0
[  204.806409][ T8678]  rtnl_newlink_create+0x310/0xb00
[  204.811556][ T8678]  rtnl_newlink+0x16d6/0x1c70
[  204.816257][ T8678]  rtnetlink_rcv_msg+0x7cf/0xb70
[  204.821222][ T8678] 
[  204.823564][ T8678] Memory state around the buggy address:
[  204.829201][ T8678]  ffff888027384b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  204.837282][ T8678]  ffff888027384b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  204.845355][ T8678] >ffff888027384c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  204.853429][ T8678]                                                  ^
[  204.860108][ T8678]  ffff888027384c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  204.868260][ T8678]  ffff888027384d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  204.876349][ T8678] ==================================================================
[  204.894027][ T8678] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  204.901391][ T8678] CPU: 1 UID: 0 PID: 8678 Comm: syz.1.633 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) 
[  204.913083][ T8678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  204.923186][ T8678] Call Trace:
[  204.926510][ T8678]  <TASK>
[  204.929478][ T8678]  dump_stack_lvl+0x99/0x250
[  204.934114][ T8678]  ? __asan_memcpy+0x40/0x70
[  204.938732][ T8678]  ? __pfx_dump_stack_lvl+0x10/0x10
[  204.943957][ T8678]  ? __pfx__printk+0x10/0x10
[  204.948570][ T8678]  panic+0x2db/0x790
[  204.952510][ T8678]  ? __pfx_panic+0x10/0x10
[  204.956965][ T8678]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  204.964011][ T8678]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  204.970354][ T8678]  ? print_memory_metadata+0x314/0x400
[  204.975851][ T8678]  ? cfusbl_device_notify+0x150/0x6a0
[  204.981252][ T8678]  check_panic_on_warn+0x89/0xb0
[  204.986210][ T8678]  ? cfusbl_device_notify+0x150/0x6a0
[  204.991605][ T8678]  end_report+0x78/0x160
[  204.995885][ T8678]  kasan_report+0x129/0x150
[  205.000413][ T8678]  ? cfusbl_device_notify+0x150/0x6a0
[  205.005831][ T8678]  cfusbl_device_notify+0x150/0x6a0
[  205.011054][ T8678]  ? net_generic+0x1e/0x240
[  205.015586][ T8678]  ? __pfx_cfusbl_device_notify+0x10/0x10
[  205.021335][ T8678]  ? caif_device_notify+0x250/0xfc0
[  205.026559][ T8678]  ? smc_pnet_netdev_event+0x3b5/0x6c0
[  205.032049][ T8678]  notifier_call_chain+0x1b3/0x3e0
[  205.037192][ T8678]  register_netdevice+0x121c/0x1ae0
[  205.042421][ T8678]  ? __mutex_lock+0x51b/0xe80
[  205.047150][ T8678]  ? __pfx_register_netdevice+0x10/0x10
[  205.052751][ T8678]  ? __asan_memset+0x22/0x50
[  205.057485][ T8678]  ? dev_addr_mod+0x2ce/0x3d0
[  205.062286][ T8678]  register_netdev+0x40/0x60
[  205.066902][ T8678]  bnep_add_connection+0x6bf/0xbf0
[  205.072032][ T8678]  ? __pfx_bnep_add_connection+0x10/0x10
[  205.077705][ T8678]  ? __fget_files+0x3a0/0x420
[  205.082435][ T8678]  do_bnep_sock_ioctl+0x40e/0x640
[  205.087511][ T8678]  ? __pfx_do_bnep_sock_ioctl+0x10/0x10
[  205.093102][ T8678]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  205.098778][ T8678]  ? tomoyo_path_number_perm+0x4e2/0x5a0
[  205.104455][ T8678]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  205.110458][ T8678]  ? call_rcu+0x6dd/0x990
[  205.114824][ T8678]  sock_do_ioctl+0xd9/0x300
[  205.119353][ T8678]  ? __pfx_sock_do_ioctl+0x10/0x10
[  205.124480][ T8678]  ? __lock_acquire+0xab9/0xd20
[  205.129358][ T8678]  sock_ioctl+0x576/0x790
[  205.133713][ T8678]  ? __pfx_sock_ioctl+0x10/0x10
[  205.138600][ T8678]  ? __fget_files+0x2a/0x420
[  205.143218][ T8678]  ? __fget_files+0x3a0/0x420
[  205.147921][ T8678]  ? __fget_files+0x2a/0x420
[  205.152531][ T8678]  ? bpf_lsm_file_ioctl+0x9/0x20
[  205.157485][ T8678]  ? __pfx_sock_ioctl+0x10/0x10
[  205.162363][ T8678]  __se_sys_ioctl+0xf9/0x170
[  205.166972][ T8678]  do_syscall_64+0xfa/0x3b0
[  205.171491][ T8678]  ? lockdep_hardirqs_on+0x9c/0x150
[  205.176800][ T8678]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.182896][ T8678]  ? clear_bhb_loop+0x60/0xb0
[  205.187605][ T8678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.193524][ T8678] RIP: 0033:0x7f3ac798e929
[  205.197957][ T8678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.217575][ T8678] RSP: 002b:00007f3ac8861038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  205.226007][ T8678] RAX: ffffffffffffffda RBX: 00007f3ac7bb6160 RCX: 00007f3ac798e929
[  205.234077][ T8678] RDX: 00002000000000c0 RSI: 00000000400442c8 RDI: 000000000000000b
[  205.242061][ T8678] RBP: 00007f3ac7a10b39 R08: 0000000000000000 R09: 0000000000000000
[  205.250044][ T8678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  205.258022][ T8678] R13: 0000000000000000 R14: 00007f3ac7bb6160 R15: 00007ffdb5059688
[  205.266015][ T8678]  </TASK>
[  205.269302][ T8678] Kernel Offset: disabled
[  205.273638][ T8678] Rebooting in 86400 seconds..