last executing test programs:

1m24.733606127s ago: executing program 0 (id=176):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4)
recvmsg$unix(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
select(0x300, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x0, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710})

1m9.656698521s ago: executing program 0 (id=176):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4)
recvmsg$unix(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
select(0x300, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x0, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710})

56.248298873s ago: executing program 0 (id=176):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4)
recvmsg$unix(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
select(0x300, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x0, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710})

40.400848008s ago: executing program 0 (id=176):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4)
recvmsg$unix(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
select(0x300, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x0, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710})

24.858868544s ago: executing program 0 (id=176):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4)
recvmsg$unix(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
select(0x300, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x0, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710})

10.977137928s ago: executing program 0 (id=176):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4)
recvmsg$unix(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
select(0x300, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x0, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710})

9.922373961s ago: executing program 1 (id=847):
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x120, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@hashlimit1={{0x58}, {'wlan0\x00', {0x68, 0x7c7e8ce3, 0x7fff, 0x7fffffff, 0xffff, 0x7, 0x5, 0xf8, 0x8}, {0xe73}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x6, 0xf8, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x9)
setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000380)=0x1, 0x4)
r2 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x1, @remote}}, 0x40)
r3 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r3, &(0x7f0000000280)={0x18, 0x2, {0xfffe, @local}}, 0x1e)
connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0x4000, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x3a)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
close(r1)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt(r4, 0xff, 0x0, &(0x7f0000000900)="0100c7e9", 0x4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_devices(r6, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="62202a3a2a20726d1f"], 0x9)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000080)={0x23d0, &(0x7f00000000c0)=[{0x6, 0x5, 0xaf, 0x1}, {0x4, 0x4, 0x7, 0x7f}, {0x0, 0x4, 0x9, 0x6}, {0x4, 0x7f, 0x8, 0xcfc1}, {0x5, 0x10, 0x8, 0xcb}]})
socket$nl_netfilter(0x10, 0x3, 0xc)

8.470065605s ago: executing program 1 (id=858):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000003fc0)=ANY=[@ANYBLOB="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"], 0x3888}, 0x1, 0x0, 0x0, 0x20000000}, 0x2040001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000380))
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000000000038005080080003000cac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r6, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f00000007c0)={0x0, 0x6, &(0x7f0000000480)={&(0x7f0000000600)={0x14, r5, 0x65283e1aaa2ddbb1, 0x70bd29}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4003f00)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd0, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_OURS={0xb0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa9, 0x4, "a35facc717130fa36a2dc8bd9e82a43810496063995057d78e44f4b28842aae374450ad74fc5d01ab5f35d4d8bb0a2b10060353e7f362894fce513f7e6bd3c0351ec37058e5e9ec17a0c273b540820f8355d3f305d31682eafa2f945a9644a153f8e9f4ba6510d1f2abbc3eea202d7a780868f178efec8f4f0b1afc8d33603c5eb71a79f863ecd29f02d8093760ad658ce18d1dadc6236f638a4660dab0035facae98af7df"}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040000)

7.730884318s ago: executing program 1 (id=863):
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
socket$inet6(0xa, 0x3, 0x6) (async)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x3, 0xfffc, 0x0, 0xa}, {0x0, 0xfffffffffffffffe, 0x0, 0x8001, 0x0, 0x4, 0x65a, 0x8002}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x6e6bb1, 0x1, 0x0, 0x6}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1ffffffc, 0x32}, 0x0, @in=@local, 0x3500, 0x0, 0x0, 0x1, 0x0, 0xe40b}}, 0xe8)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x1c)
socket$netlink(0x10, 0x3, 0x10) (async)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100)={<r5=>0x0, <r6=>0x0, <r7=>0x0}, &(0x7f0000000140)=0xc)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) (async)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={<r8=>0x0}, &(0x7f00000001c0)=0xc)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x50}}, 0x0) (async)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x50}}, 0x0)
sendmmsg$unix(r4, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f00000018c0)=[@cred={{0x1c, 0x1, 0x2, {r8, r6}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0x40, 0x20008880}}], 0x2, 0x4c054)
unshare(0x2000400)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) (async)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000006a0b000097d425d7381500d0e7a189000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000006a0b000097d425d7381500d0e7a189000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r15, r12}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r16=>0x0})
getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f00000005c0)={'filter\x00', 0x0, 0x0, 0x0, [0x3, 0x6, 0x3, 0x3, 0x4, 0x7]}, &(0x7f0000000340)=0x78)
sendmsg$nl_xfrm(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x410200}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="d40100001900000328bd7000fedbdf25fc010000000000000000000000000001ac1414210000000000000000000000004e23000c4e2000010300002000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r16, @ANYBLOB="03ebff00"], 0x1d4}, 0x1, 0x0, 0x0, 0x4880}, 0x400c010)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

6.187396052s ago: executing program 2 (id=868):
unshare(0x42000000)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x1, 0x2, 0x0, {0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}}, 0x24)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffe4e}}, {{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/39}, {&(0x7f0000000480)=""/182}, {&(0x7f0000000540)=""/75}, {&(0x7f0000000340)=""/28}, {&(0x7f0000000e00)=""/121}, {&(0x7f00000018c0)=""/4096}], 0x0, &(0x7f00000006c0)=""/213}}, {{&(0x7f00000007c0)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)=""/8}, {&(0x7f0000000880)=""/78}], 0x0, &(0x7f0000000a40)=""/186}}, {{&(0x7f0000000940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/39}, {&(0x7f0000000b40)=""/158}], 0x0, &(0x7f0000000c40)=""/156}}], 0xf000, 0x10002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x128}, 0x4010)
recvmsg$unix(r5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r10=>0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000000c0)={r10}, &(0x7f0000000100)=0x8)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000000000000000800090007000000"], 0x34}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, r3, 0x10000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket(0x2a, 0x2, 0x0)
r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x20001400)
ioctl$TUNSETOFFLOAD(r11, 0x8008743f, 0x20000000)

5.954756183s ago: executing program 1 (id=869):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x1000, @private1, 0x3}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)="54795d7085b31f68134c29abb73da74bc1ee85ffa58b9936f78dd9c14e626118eb4dbe08324d4b6a4591fc16a7a294f574368eae8fc2437cb7d98fa6ccc425c1a6ee2b76da685a08e4a0e93a9de67f10733ceaa03f5e7768dce082ffeca7cfcf1a6f30ac675ed54391eb921a1b0069864e18c904ccfe3a24370d173e6fe99a3564df1a93b68a9d10035b123ada81adc7c7", 0x91}, {&(0x7f0000000240)="e40d90506cd3630edd97b903ff14206fbfa64c260fd7181b488e6a2ca4c7a9f5144e59addc50c4e49dac1939e67d02cd6a8f414fdd66cc98486f959796c4c60ca7994c96f8aa98a579c65544c346bbbb0335adacc0b494fc", 0x58}, {&(0x7f00000002c0)="7b2f67e11b7ea1abc95d99820118ea70a509b390e7712cf4efe01328e5a769319cc2172743ec42fb90a17babf9c3acd4e495c14e1db5e0c5672c6f9e260aba16728f937ed5a5bffcb821423088e9422d6a2a358143c75b801e60189805fdc2befaa1670804e8849a80728e970d58d0e4eea7f07e0b718cd2a442cf1db81b84551b432ea26e2bbdab15ac59ff", 0x8c}, {&(0x7f0000000380)="a999ed95f7ce41a58bfddb81f1aca20877fea543d6e252a046cc51a6fd5b74e98b4f8ab0eb4a3d7238ecef35e03a24f1e3f3595cddd45174b4390167c2ce7f7ce71019ce7a60f727a9933b15f4f6f38dffa5ab506eaa0dd42307f44a3e8e99893f88f0f140b6dc6f785a8c9cfec2f91473e76d43d2c1d621bd6ce3a1645d197dfe3f0b85296d151751", 0x89}], 0x4, &(0x7f0000000440)=[@hoplimit={{0x14, 0x29, 0x34, 0xc36f}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x1d, 0x4, 0x1, 0x35, 0x0, [@private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}], 0x68}}], 0x1, 0x2004c004) (async)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc)

5.673021363s ago: executing program 1 (id=872):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000010000000005000000000f0000ff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000433fac88850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

5.53101341s ago: executing program 1 (id=873):
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x38, &(0x7f00000000c0), &(0x7f0000000100)=0x10)
r1 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x11, &(0x7f0000000000), 0x8)
pipe(&(0x7f0000000600)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
writev(r3, &(0x7f0000000500)=[{&(0x7f0000000480)="dc04f7c0e92b95334ce53ffff008fa4d7d5001d4808a4486e226fd831543e5b96b150d47b46650e5189720ef046eec9882b7b20093c2082169a0ecb23d2b3f681513e31f5ccc7a4806339869fbccd36b339386a6fa32fc27caa02ca30b3be0a8162cd17c8e3f3ccd15533c0520c1026d380de3076663c79b5ecd8f9a2ba1", 0x7e}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r2)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r5, @ANYBLOB="00141fe96f97b8a2d60225bd70e6fcdbdf254a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000f00a8007365636f6e646e616d6500000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e30000000000e00a80066697273740200000000000000000300030000000e00a80066697273746e616d65000000"], 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x1)
write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000014}, 0x8000)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfffffdff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$unix(0x1, 0x5, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$kcm(0x2, 0x3, 0x2)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r10 = accept4(r9, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
read$alg(r10, &(0x7f0000000080)=""/16, 0x10)
recvmmsg(r10, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x4)
ioctl$sock_TIOCOUTQ(r8, 0x5411, &(0x7f0000000040))
sendmsg$kcm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r7)
syz_emit_ethernet(0xd6, &(0x7f0000000000)=ANY=[@ANYRESDEC=r7], 0x0)

3.071750098s ago: executing program 3 (id=877):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000380), &(0x7f00000003c0)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x90, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}}, 0x48040)
r4 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xbaaf97d477054b70}, 0x40)
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r5 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r5, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000003c0)="b792", 0x2}], 0x1}}, {{&(0x7f0000000740)={0x2, 0x0, @loopback}, 0x10, 0x0}}], 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e00cd0214fffffffffffff80765", 0x12)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070000000000060004404e2200000c000280080001407f00000160b3"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
recvmsg$can_j1939(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000540)=""/193, 0xc1}, {0x0}], 0x2}, 0x21)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000000c0)={0x34, r8, 0xf1aad47e89fb43b5, 0x0, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, r8, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000090}, 0x4004)

2.820588763s ago: executing program 2 (id=879):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
unshare(0x2040400)
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
ppoll(&(0x7f0000000480)=[{r1}, {r0}, {r3}], 0x3, &(0x7f0000000100)={0x77359400}, 0x0, 0x2000)
socket$key(0xf, 0x3, 0x2)
r4 = socket$netlink(0x10, 0x3, 0x4)
write(r4, &(0x7f0000000100), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close(0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
accept$inet6(r7, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000004c0)=0x1c)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x2, 0x6, 0x810, 0x420, 0x188, 0x350, 0x350, 0x420, 0x740, 0x740, 0x740, 0x740, 0x740, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'veth1_vlan\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x160, 0x188, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @empty, [], [], [], 0x1404}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [0x0, 0x0, 0x0, 0xffffffff], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0x190, 0x1c8, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x7}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@local, [0xff, 0xff, 0xffffffff, 0xffffff7f], @ipv4=@private=0xa010102, [0x0, 0x0, 0xff], @ipv4=@local, [0xffffff00, 0xffffffff, 0xffffffff, 0xff000000], @ipv4=@loopback, [0x0, 0xff, 0xffffff00, 0xff], 0x52, 0x7f, 0x1d, 0x4e21, 0x4e22, 0x4e21, 0x4e21, 0x88, 0x80}, 0x82, 0x2444}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x8000}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x32}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@loopback, 0x0, 0x32}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private1, @rand_addr=' \x01\x00', @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x870)

2.546568105s ago: executing program 3 (id=880):
r0 = epoll_create1(0x0) (async)
r1 = epoll_create1(0x0) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) (async)
epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0)
close(r5)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10012, r6, 0x0)
socket$inet(0x2, 0x800, 0x81) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000001000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000100085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)

2.119950729s ago: executing program 4 (id=881):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1102}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x4000000)

2.117881607s ago: executing program 3 (id=882):
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
tee(r0, r1, 0x3, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x20010084)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_crypto(0x10, 0x3, 0x15)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r5], 0x50}, 0x1, 0xba01}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x48001)
write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x20, 0x3, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008801)
r8 = accept4$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f0000000200)=0x10, 0x800)
getsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000240), 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xa0}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.858049054s ago: executing program 4 (id=883):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f00000002c0)="851d8a90d516f218f839a7c48edfe734b2490c90a2fbf5be3383f1c9f5be8e55148723ac0258ef4f8af1f5e0b0a86885f018523d60072c7d9c1568700b3abe208fbd5dad2daf18b5150a530d816bf4cc6e43da4f2793611b38009e8c0970268cf5836926fd1223f4f8bec6a4a68b2aaff7af151a661793a04cd9b936da8f53eae22356781c580df817f3168269eaeeae014fa9b1878bd89e2acb4853ffd7b9a06d7f5ff090c605f5d343e6d93c80d747365d21acea325c44fbb87f6271a2d9333e9b9dd1d36dfea61641d34fd54cd2970ac14acdadd04357bdd44bc926d0adef887b2e25c2f435ce79bac1d1f473c3a49a12aa5c5c", 0xf5}], 0x1}}], 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a40800", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23)
sendmsg$IPSET_CMD_TEST(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000000b06010800000000000000000600000205000100070000002c000780180001801400024000000000000000000000000000000000060004404e210000050003004b0000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x200080d1}, 0x8190)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1004e22}, 0x6e)
socket$l2tp6(0xa, 0x2, 0x73)
socket(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6(0xa, 0x4, 0x6)
accept4$inet6(r7, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f0000000280)=0x1c, 0xc0000)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_proto_private(r8, 0x8922, &(0x7f0000000200)="943a")
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r9, 0x0, 0x0}, 0x10)
r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200)=r10, 0x4)
socket$inet_tcp(0x2, 0x1, 0x0)

1.679237894s ago: executing program 2 (id=884):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

1.403627427s ago: executing program 2 (id=885):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8)
write$cgroup_int(r5, &(0x7f00000001c0), 0xfffffdef)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40004)
sendmsg$NL80211_CMD_SET_COALESCE(r1, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000140)="1c9d", 0x2}, {&(0x7f0000000280)}], 0x2}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791000000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23)

1.364780629s ago: executing program 3 (id=886):
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000001200)=[{&(0x7f0000002100)="44671519", 0x4}], 0x1, 0x6)
close(r1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r2, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)="0e43", 0x2}], 0x1}}], 0x1, 0x4008440)
splice(r0, 0x0, r1, 0x0, 0xfdef, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0090000000611164000000000018000000000000000000000000000000950000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x58)

1.317633013s ago: executing program 4 (id=887):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', <r2=>0x0, 0x8000, 0x7800, 0x3, 0x40, {{0x17, 0x4, 0x1, 0x5, 0x5c, 0x64, 0x0, 0x89, 0x4, 0x0, @empty, @rand_addr=0x64010100, {[@noop, @generic={0x94, 0x3, "d0"}, @rr={0x7, 0x27, 0xeb, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x28}, @private=0xa010102, @multicast1, @broadcast, @local]}, @timestamp={0x44, 0x14, 0x1c, 0x0, 0x7, [0x0, 0x0, 0x3, 0x7]}, @lsrr={0x83, 0x7, 0x1f, [@private=0xa010101]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', <r3=>0x0})
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@gettfilter={0x24, 0x2e, 0x1, 0x2, 0x25dddbfd, {0x0, 0x0, 0x0, r5, {0xd, 0xe}, {}, {0xa, 0x8}}}, 0x24}}, 0x4c800)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', <r6=>0x0, 0x2f, 0xfc, 0x2, 0x7ff, 0xa, @private1, @mcast2, 0x20, 0x8, 0xe, 0x3}})
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'xfrm0\x00', <r9=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, 0x0, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@RTM_NEWMDB={0xb8, 0x54, 0x400, 0x70bd25, 0x25dfdbfe, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x2, 0x0, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x42, 0x0}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x1, 0x2, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x1, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x0, 0x1, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x2, 0x4, {@ip4=@remote, 0x8edd}}}]}, 0xb8}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x8000, 0x7800, 0x3, 0x40, {{0x17, 0x4, 0x1, 0x5, 0x5c, 0x64, 0x0, 0x89, 0x4, 0x0, @empty, @rand_addr=0x64010100, {[@noop, @generic={0x94, 0x3, "d0"}, @rr={0x7, 0x27, 0xeb, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x28}, @private=0xa010102, @multicast1, @broadcast, @local]}, @timestamp={0x44, 0x14, 0x1c, 0x0, 0x7, [0x0, 0x0, 0x3, 0x7]}, @lsrr={0x83, 0x7, 0x1f, [@private=0xa010101]}]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) (async)
socket(0x2a, 0x2, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@gettfilter={0x24, 0x2e, 0x1, 0x2, 0x25dddbfd, {0x0, 0x0, 0x0, r5, {0xd, 0xe}, {}, {0xa, 0x8}}}, 0x24}}, 0x4c800) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x2f, 0xfc, 0x2, 0x7ff, 0xa, @private1, @mcast2, 0x20, 0x8, 0xe, 0x3}}) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, 0x0, 0x0) (async)
setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async)
bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@RTM_NEWMDB={0xb8, 0x54, 0x400, 0x70bd25, 0x25dfdbfe, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x2, 0x0, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x42, 0x0}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x1, 0x2, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x1, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x0, 0x1, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x2, 0x4, {@ip4=@remote, 0x8edd}}}]}, 0xb8}}, 0x0) (async)

987.86658ms ago: executing program 3 (id=888):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x6000, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000240)="96", 0x1}], 0x1, 0x1c000000, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58)

796.459671ms ago: executing program 4 (id=889):
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001900)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000008000000140004"], 0x28}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, r2)
socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r3, 0x0, 0x81)
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x430}, 0x1, 0x0, 0x0, 0x4004800}, 0x40080)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0169040018000000000000000c0000000c00000002000000000000000000000b00000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000007000000040000000000000e0400000000000000000000000100000d000000000400000004000000000000000000000404000000000000000000000a030000000000000061"], 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DEL_INTERFACE(r6, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000280)=ANY=[@ANYBLOB="010000003de48f77621f1fdf1de3fad1560873bbf8017a9ca4e813746c55745e93d35b2fef2ef205964feed839a5180eaeb31c758806841fdd8283d50d257f6faad01b279d591b708c2a60d0c076c45c2c903f639117fab1bab16637170c6b5fb99e56e83ca6250cbbdf309caa8bd4af0a4baf485f906f10a1963d55a0cda97b96aec502537a57e31ecb51ae2efc2dfe40eaa301b40849bc9d95148ecdf3d4e3bddc2f08ff4525ab8a4e8387af24cf363146e444913d73825248", @ANYRES16=r7, @ANYBLOB="01002cbd7000fcdbdf250800000008000300", @ANYRES32=r8, @ANYBLOB="0c0099000e0008007e000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40)

539.14688ms ago: executing program 3 (id=890):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@security={'security\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x200, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x3f8, 0x3f8, 0x3f8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x5f5ffdf029cef288, 0xffffff00, 0xffffff00], [0xffffffff, 0xff, 0xffffffff], 'batadv_slave_0\x00', 'dvmrp0\x00', {}, {}, 0x73, 0x2, 0xf, 0x1}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x2, 'system_u:object_r:hald_acl_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xf}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x3, 0x1}, {0x0, 0x5, 0x4}, 0x3a, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'wlan1\x00', 0x400})
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000500)=0x6)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x110, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0xb, 0x2}}, @common=@icmp={{0x28}, {0xf, "c97a"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast1, @multicast1, 0xff000000, 0xffffffff, 'ip_vti0\x00', 'vlan0\x00', {}, {0xff}, 0x5e, 0x0, 0x18}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @local, 0xff, 0x0, 'vcan0\x00', 'hsr0\x00', {}, {0xff}, 0x6, 0x1, 0x30}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x810, 0x10, 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x4, 0x6, 0x1, 0x5, 0x7, 0x4], 0x6, 0x1}, {0x4, [0x3, 0x0, 0x5, 0xc, 0x2, 0x6], 0x4, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
socket(0x40000000015, 0x6, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001200)=@nat={'nat\x00', 0x1b, 0x5, 0x5a8, 0x298, 0x298, 0xffffffff, 0x298, 0x388, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, &(0x7f0000000400), {[{{@ipv6={@private0, @empty, [0xffffff00, 0xffffffff, 0xff000000, 0xffffff00], [0xff00007f, 0xffffff00], 'syzkaller0\x00', 'erspan0\x00', {0xff}, {0xff}, 0x0, 0x2, 0x4, 0x1}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x2, 0x0, 0x6}, {{0x4}, 0x8}, {{0x100000000}}, 0x401}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv4=@multicast1, @ipv4=@empty, @port=0x4e20, @gre_key=0x3}}}, {{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv4=@multicast2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@rand_addr=0x64010102, @ipv4=@empty, 0x17}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x14, @ipv6=@loopback, @ipv6=@private1, @icmp_id=0x68, @gre_key=0x8}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xff000000, 0xff, 0xffffffff], 'ip_vti0\x00', 'nr0\x00', {}, {}, 0xff, 0x0, 0x4, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x14, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x66, @icmp_id=0x67}}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@srh={{0x30}, {0x88, 0xfb, 0x2, 0x3, 0xe49, 0x2000}}, @common=@frag={{0x30}, {[0x711f6130, 0x9], 0x1, 0xc, 0x2}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x10, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}, @ipv6=@mcast2, @icmp_id=0x68, @port=0x4e23}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611228000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r5, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x4]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7, 0x6}}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x7bd}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
recvmsg$unix(r7, &(0x7f0000000b00)={&(0x7f0000000480), 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000940)=""/226, 0xe2}, {&(0x7f0000000a40)=""/56, 0x38}], 0x2, &(0x7f0000000ac0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}, 0x40012142)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
r8 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r8)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES16=r3, @ANYBLOB="0c009900ff070000700000001400040273797a6b616c6c6572300000000000000800050007000000"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)

315.940734ms ago: executing program 2 (id=891):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r1, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000040)="a905000000000000002f00338bb335529f560e5a49a87efd00000100a3692bc7e6d3b3e5", 0x24}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}], 0x2, 0x0)
getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000040), &(0x7f00000001c0)=0x4)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040220080211000000040000a118000200e000000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

301.709886ms ago: executing program 4 (id=892):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x14, 0x400, 0x70bd28, 0x25dfdbff, {0x22, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "5aac7f00dd511aa6087027c34231257d4bd95ac88a1c6b7808d0cf1e12de91b7703b87530d598cf100d887"}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
r1 = socket(0x15, 0xa, 0x7ff)
setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000140)={0x2, {{0xa, 0x4e22, 0x400, @loopback, 0x8}}}, 0x88)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl2\x00', <r4=>0x0, 0x4, 0xf, 0xc, 0x8, 0x14, @private0, @local, 0x0, 0x7800, 0x9, 0x40}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6tnl0\x00', <r5=>0x0, 0x29, 0x2, 0xa4, 0x79ca, 0x22, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7, 0x50, 0xd, 0x9}})
getpeername$packet(r1, &(0x7f0000000400)={0x11, 0x0, <r6=>0x0}, &(0x7f0000000440)=0x14)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x128, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004010)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x460, 0xffffffff, 0x238, 0x0, 0x120, 0xffffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, &(0x7f0000000640), {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, [0xff, 0x5d01a79294e49569, 0xffffff00, 0xff000000], [0xffffffff, 0xffffffff, 0xff000000, 0xffffff00], 'veth0_to_team\x00', 'bond_slave_0\x00', {0xff}, {}, 0x84, 0x8, 0x1, 0x28}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0x9d], 0x81, 0x4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'wg1\x00', {0x2}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3b}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff, 0xffffffff], 'veth0_to_bond\x00', 'dummy0\x00', {0xff}, {}, 0x3c, 0x2, 0x3, 0x24}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x28e4, 0x7f, 0x767, 0x1, 0x0, "52109ab0e69976477540667c20a4379625b5a0885057e07ceaf6aa55e4388fc21a87d1777336cb7d29903385cea159d92bd324987248e5119280648b8183dedc"}}}, {{@ipv6={@private2, @mcast2, [0xff, 0xff, 0xffffffff, 0xff], [0xffffff00, 0xff000000, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'wg0\x00', {0xff}, {0xff}, 0x5e, 0x5, 0x4, 0x10}, 0x0, 0x118, 0x158, 0x0, {}, [@common=@hbh={{0x48}, {0x7, 0x1, 0x0, [0x4, 0x78, 0x3, 0xb, 0x7, 0x3bc, 0x2, 0x40, 0x81, 0x1, 0x9, 0x400, 0x1, 0x400, 0x6, 0x8], 0xf}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x2, 0x5, 0x7, 0x9, 0x7]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b40)={'team0\x00', <r8=>0x0})
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000b80))
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000cc0)={'tunl0\x00', &(0x7f0000000bc0)={'syztnl1\x00', r5, 0x80, 0x700, 0x2, 0x8, {{0x2b, 0x4, 0x2, 0x9, 0xac, 0x64, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x3c, 0xa3, 0x1, 0x1, [{@private=0xa010102, 0x5}, {@remote, 0x1}, {@local, 0x3}, {@local, 0x8}, {@empty, 0x437d25a3}, {@multicast2, 0x2}, {@multicast2, 0x4}]}, @ssrr={0x89, 0x17, 0x7a, [@dev={0xac, 0x14, 0x14, 0x29}, @private=0xa010100, @multicast1, @empty, @broadcast]}, @lsrr={0x83, 0x13, 0x52, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @multicast2]}, @timestamp_prespec={0x44, 0x14, 0x8b, 0x3, 0x8, [{@private=0xa010100, 0x8}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x5}]}, @timestamp_addr={0x44, 0xc, 0x65, 0x1, 0x6, [{@local, 0x4}]}, @rr={0x7, 0xf, 0xdc, [@loopback, @rand_addr=0x64010101, @rand_addr=0x64010102]}]}}}}})
r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000d00)='syz1\x00', 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000d40)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000d80)={<r11=>0x0, 0x6}, &(0x7f0000000dc0)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000e00)={r11, 0x1}, 0x8)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000e80)={<r12=>0x0}, &(0x7f0000000ec0)=0xc)
sendmsg$nl_route(r10, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)=@newlinkprop={0x28, 0x6c, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, 0x20, 0x3c100}, [@IFLA_NET_NS_PID={0x8, 0x13, r12}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004004}, 0x8080)
sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000010c0)={&(0x7f0000000fc0), 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x44, 0x1, 0x6, 0x201, 0x0, 0x0, {0x41873fc5ff26f53, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x40)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x20, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000001200)={<r13=>r9, 0x1ff, 0x280, 0xf4de})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r13, 0x89f3, &(0x7f00000012c0)={'ip6tnl0\x00', &(0x7f0000001240)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x0, 0x0, 0xf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x7800, 0x40, 0x6, 0x3}})
r14 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
close(r14)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r15=>0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001580)={{r7}, r15, 0x0, @inherit={0x78, &(0x7f0000001500)={0x0, 0x6, 0x1, 0xffffffffffffffc0, {0x15, 0x8000, 0x101, 0xffffffffffffffff, 0x34}, [0x8, 0xffffffffffffffff, 0xc, 0x8000, 0x3ff, 0x4]}}, @devid})
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000002580)=[@in6={0xa, 0x4e24, 0x7f, @loopback, 0x3}, @in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e23, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa41}, @in6={0xa, 0x4e23, 0xffffff47, @dev={0xfe, 0x80, '\x00', 0x16}, 0x5a78}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e20, 0x800, @loopback, 0x4}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc0}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e21, 0x1ff, @mcast1, 0x4}, @in={0x2, 0x4e22, @broadcast}], 0xe8)

79.041749ms ago: executing program 2 (id=893):
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) (async)
r0 = socket$kcm(0x2, 0x1, 0x106)
socket$kcm(0x29, 0x7, 0x0) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x51}, 0x3400d0d1) (async)
r1 = socket$netlink(0x10, 0x3, 0x8000000004) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) (async)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(0xfffffffffffffffd, r3) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="1800000017c674cea327f3f10d4dbf1c48c16ce0f78077cc88f37d84d72899b7c4716b265c49f79daee81006002dd903ddc44d0e01ab30b1151e02f011b83d7c97f31c6eeb71d79ee067b68565e7", @ANYRES16=r4, @ANYBLOB="01002dbd7000000000001c00000004000180"], 0x18}, 0x1, 0xa60d000000000000}, 0x0) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="090000000d0000006d0500d6231b488f3b17ad00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r6}, 0x38)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000594ac4ad9f91e3971f4e5daf7dda4838000000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r7) (async)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000380)=0xa, 0x4) (async)
socket$inet6_dccp(0xa, 0x6, 0x0) (async)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_emit_ethernet(0xe2, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000d40000000000019078ac1e0001ac1414bb0c009078000000004e0000000000000000110000e0000002ac1414aa071bdd64010102ac1e0101e00000027f000001640101017f000001000dee0dd9de36ed4bcc5b4e23440c00030000000000000000890f0000000000ffffffffffffffff444c0001ac1e0001000000007f000001000001000000000000000000ac1e0101000000007f000001000000000000000000000000ac1e000100000000ffffffff00000000ffffffff00000000441400000000000000000400"/226], 0x0)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1cf200002c00010000000000000000000400008008001880f4ab0f00d1c4c70e2150945d28fce544a7dc3683c655734d9210b41007f500e61ea57d4eaa30c5403ac5b0777b"], 0x1c}], 0x1}, 0x0) (async)
bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x1}, 0x10)
shutdown(0xffffffffffffffff, 0x1)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x636, 0x0, 0x0) (async)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYBLOB="fb72a67327eb3d27cf99656cf107fb625eaf72856e96a25354e6be3e1d86f6d9e66f8981adaf6771249fe835f36728e90a763b27ec57bb3af35a89ab89482030a40326a2838b5084b624b737a62d5f0e5889012b9a9bf1d99b76e852ecb27114abc813c6e0da006b3e4e7fec4e83976f270c1b20bdec13e49e94c9c404a4abc766a6df8cf32a1df580defbd5c2fdf4ed", @ANYRES8=r0], 0x28}], 0x1, 0x0, 0x0, 0x4008041}, 0x840) (async)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a067fbc4580000540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

0s ago: executing program 4 (id=894):
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x0)
close(r0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = socket$caif_stream(0x25, 0x1, 0x0)
connect$caif(r1, &(0x7f0000001780)=@rfm={0x25, 0x0, "97043cb11933228220120700318b377a"}, 0x13)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={<r4=>0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x5, 0x6d8d, 0x5, 0x0, 0x8, 0xbc, 0xe5}, &(0x7f0000000180)=0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e24, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}, 0x4, 0x7}, 0x90)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=ANY=[@ANYBLOB="000000000000040000eefffffff9de6007a658", @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e00000000200002800c000200190000000f00000006000100fe0f00000600050088a8000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x60}}, 0x8000)

kernel console output (not intermixed with test programs):

de
[   94.395739][ T5831] veth1_macvtap: entered promiscuous mode
[   94.439547][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   94.486946][ T5830] veth0_macvtap: entered promiscuous mode
[   94.536954][ T5830] veth1_macvtap: entered promiscuous mode
[   94.573115][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.583713][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.593743][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.604372][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.614383][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.624978][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.635981][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.647619][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.658321][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.668257][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.678796][ T5850] Bluetooth: hci1: command tx timeout
[   94.682325][ T5850] Bluetooth: hci4: command tx timeout
[   94.684661][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.699612][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.710177][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.721457][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.756804][ T5850] Bluetooth: hci2: command tx timeout
[   94.759025][ T5830] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.766256][ T5834] Bluetooth: hci0: command tx timeout
[   94.771650][ T5849] Bluetooth: hci3: command tx timeout
[   94.783037][ T5830] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.791805][ T5830] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.817512][ T5830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.847775][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.860026][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.870198][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.880867][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.890864][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.901373][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.911630][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.922662][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.934369][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.973458][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.981484][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.014958][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.025817][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.035754][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.050813][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.061559][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.073462][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.084335][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.095768][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.113670][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.165509][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.176538][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.187387][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.197155][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.240195][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.259554][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.351932][   T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.382982][   T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.437734][ T5100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.460104][ T5100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.478354][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.500374][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.617262][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.627352][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.725087][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.746975][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.845109][   T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.853441][   T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.899919][ T5942] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   95.928880][ T5947] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1'.
[   95.946253][ T5942] xt_TCPMSS: Only works on TCP SYN packets
[   95.967753][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'.
[   96.004933][ T5946] tipc: Failed to remove unknown binding: 66,1,1/0:833759367/833759368
[   96.016324][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'.
[   96.071383][ T5949] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   96.088719][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'.
[   96.103727][ T5950] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6'.
[   96.405181][ T5959] dvmrp0: entered allmulticast mode
[   96.763317][ T5834] Bluetooth: hci4: command tx timeout
[   96.764670][ T5850] Bluetooth: hci1: command tx timeout
[   96.832567][ T5850] Bluetooth: hci3: command tx timeout
[   96.844624][ T5850] Bluetooth: hci0: command tx timeout
[   96.844640][ T5834] Bluetooth: hci2: command tx timeout
[   97.615225][ T5999] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[   97.820542][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'.
[   97.876090][ T6009] vxcan1 speed is unknown, defaulting to 1000
[   97.893231][   T35] bond0: (slave bond_slave_0): interface is now down
[   97.914379][   T35] bond0: (slave bond_slave_1): interface is now down
[   97.932982][   T11] bond0: (slave bond_slave_0): interface is now down
[   97.939773][   T11] bond0: (slave bond_slave_1): interface is now down
[   97.954647][   T11] bond0: now running without any active interface!
[   98.044306][ T6014] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   98.104843][ T6015] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18'.
[   98.128040][ T6009] vxcan1 speed is unknown, defaulting to 1000
[   98.211364][ T6009] vxcan1 speed is unknown, defaulting to 1000
[   98.387338][ T6021] Bluetooth: MGMT ver 1.23
[   98.612320][ T3493] cfg80211: failed to load regulatory.db
[   98.833803][ T5834] Bluetooth: hci4: command 0x0405 tx timeout
[   98.894347][ T6009] infiniband syz0: set active
[   98.900349][ T6009] infiniband syz0: added vxcan1
[   99.035638][ T6009] RDS/IB: syz0: added
[   99.040358][ T6009] smc: adding ib device syz0 with port count 1
[   99.047431][ T6009] smc:    ib device syz0 port 1 has pnetid 
[   99.079133][   T25] vxcan1 speed is unknown, defaulting to 1000
[   99.093515][ T6009] vxcan1 speed is unknown, defaulting to 1000
[   99.096688][ T6039] trusted_key: syz.3.29 sent an empty control message without MSG_MORE.
[   99.100963][ T3493] vxcan1 speed is unknown, defaulting to 1000
[   99.460990][ T6044] netlink: 'syz.4.28': attribute type 4 has an invalid length.
[   99.478045][ T6046] netlink: 28 bytes leftover after parsing attributes in process `syz.3.30'.
[   99.483865][ T6043] netlink: 'syz.4.28': attribute type 30 has an invalid length.
[   99.506011][ T6046] netlink: 28 bytes leftover after parsing attributes in process `syz.3.30'.
[   99.542272][ T6009] vxcan1 speed is unknown, defaulting to 1000
[   99.850722][ T6009] vxcan1 speed is unknown, defaulting to 1000
[  100.004888][ T6053] netlink: 10 bytes leftover after parsing attributes in process `syz.3.31'.
[  100.032765][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout
[  100.321505][ T6009] vxcan1 speed is unknown, defaulting to 1000
[  100.549499][ T6009] vxcan1 speed is unknown, defaulting to 1000
[  100.730774][ T6009] vxcan1 speed is unknown, defaulting to 1000
[  100.901196][ T6009] vxcan1 speed is unknown, defaulting to 1000
[  101.403018][ T6098] netlink: 'syz.0.43': attribute type 8 has an invalid length.
[  101.421489][ T6098] __nla_validate_parse: 2 callbacks suppressed
[  101.421511][ T6098] netlink: 244 bytes leftover after parsing attributes in process `syz.0.43'.
[  101.455718][ T6099] veth3: entered promiscuous mode
[  101.956931][ T6127] xt_CT: You must specify a L4 protocol and not use inversions on it
[  101.958988][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'.
[  101.993300][ T6124] dvmrp8: entered allmulticast mode
[  102.659597][ T6149] syz.4.60 uses obsolete (PF_INET,SOCK_PACKET)
[  103.731852][ T6157] vxcan1 speed is unknown, defaulting to 1000
[  104.659620][ T6170] vxcan1 speed is unknown, defaulting to 1000
[  104.683398][ T5834] Bluetooth: hci4: command 0x0405 tx timeout
[  104.855929][ T6179] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  105.174322][ T6179] netlink: 'syz.2.65': attribute type 10 has an invalid length.
[  105.300115][ T6179] team0: Device veth0_macvtap failed to register rx_handler
[  106.341983][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'.
[  106.587901][ T6206] bridge0: port 3(vlan2) entered blocking state
[  106.642994][ T6202] netlink: 'syz.2.67': attribute type 30 has an invalid length.
[  106.650715][ T6202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.67'.
[  106.767979][ T6206] bridge0: port 3(vlan2) entered disabled state
[  106.824194][ T6206] vlan2: entered allmulticast mode
[  106.871026][ T6206] vlan2: left allmulticast mode
[  108.139785][ T6230] warning: `syz.2.74' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  108.441917][ T6245] veth0_to_bridge: entered promiscuous mode
[  108.582974][ T6244] veth0_to_bridge: left promiscuous mode
[  108.703350][ T6247] xt_CT: No such helper "snmp"
[  108.730675][ T6265] hsr0: entered promiscuous mode
[  108.746299][ T6265] hsr0: entered allmulticast mode
[  108.765838][ T6265] hsr_slave_0: entered allmulticast mode
[  108.772594][ T6247] Zero length message leads to an empty skb
[  108.796705][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'.
[  108.816124][ T6265] hsr_slave_1: entered allmulticast mode
[  108.895519][ T6247] hsr0: entered promiscuous mode
[  108.924908][ T6275] hsr0: entered promiscuous mode
[  108.930219][ T6275] hsr0: entered allmulticast mode
[  108.950538][ T6275] hsr_slave_0: entered allmulticast mode
[  109.047931][ T6275] hsr_slave_1: entered allmulticast mode
[  109.119802][ T6283] netlink: 'syz.2.84': attribute type 8 has an invalid length.
[  109.624053][ T6303] netlink: 100 bytes leftover after parsing attributes in process `syz.1.87'.
[  109.796008][ T6303] vxcan1 speed is unknown, defaulting to 1000
[  110.180525][ T6316] batadv0: entered promiscuous mode
[  110.258765][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.93'.
[  110.329143][ T6316] batadv0: left promiscuous mode
[  110.361524][ T6325] netlink: 830 bytes leftover after parsing attributes in process `syz.4.94'.
[  110.554416][ T6330] pim6reg: entered allmulticast mode
[  110.563582][ T6336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.96'.
[  110.608278][ T6336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.96'.
[  110.618875][ T6336] netlink: 'syz.3.96': attribute type 1 has an invalid length.
[  110.927020][ T6352] lo: entered allmulticast mode
[  110.955670][ T6352] lo: left allmulticast mode
[  111.074163][ T6354] lo: entered allmulticast mode
[  111.080629][ T6354] lo: left allmulticast mode
[  111.500227][ T6363] xt_CT: You must specify a L4 protocol and not use inversions on it
[  111.642310][ T6371] netlink: 'syz.1.106': attribute type 7 has an invalid length.
[  111.650133][ T6371] netlink: 'syz.1.106': attribute type 8 has an invalid length.
[  111.658301][ T6371] netlink: 'syz.1.106': attribute type 13 has an invalid length.
[  111.775419][ T6366] vxcan1 speed is unknown, defaulting to 1000
[  111.936433][ T6386] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  111.950326][ T6386] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.570092][ T6366] netlink: 68 bytes leftover after parsing attributes in process `syz.2.104'.
[  112.755581][ T6369] vxcan1 speed is unknown, defaulting to 1000
[  113.288987][ T6452] netlink: 52 bytes leftover after parsing attributes in process `syz.3.119'.
[  113.403522][ T6457] netlink: 'syz.0.120': attribute type 1 has an invalid length.
[  113.460539][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'.
[  113.725955][ T6464] netlink: 80 bytes leftover after parsing attributes in process `syz.0.122'.
[  113.912433][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.127'.
[  114.671336][ T6508] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.135'.
[  114.716628][ T6508] netlink: 76 bytes leftover after parsing attributes in process `syz.3.135'.
[  114.810905][ T6513] netlink: 20 bytes leftover after parsing attributes in process `syz.3.135'.
[  115.053527][ T6513] nbd: socks must be embedded in a SOCK_ITEM attr
[  115.066118][ T6521] netlink: 'syz.4.137': attribute type 15 has an invalid length.
[  115.492367][ T6534] netlink: 80 bytes leftover after parsing attributes in process `syz.3.142'.
[  115.532346][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'.
[  116.038089][ T6562] x_tables: unsorted entry at hook 1
[  116.079684][ T6564] vxcan1 speed is unknown, defaulting to 1000
[  116.281709][ T6571] openvswitch: netlink: Actions may not be safe on all matching packets
[  117.190769][ T6594] tipc: Started in network mode
[  117.247130][ T6594] tipc: Node identity , cluster identity 4711
[  117.273233][ T6594] tipc: Failed to set node id, please configure manually
[  117.313953][ T6594] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  117.333406][ T6596] openvswitch: netlink: Missing key (keys=40, expected=80)
[  117.838069][ T6601] __nla_validate_parse: 7 callbacks suppressed
[  117.838095][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.155'.
[  117.933342][ T6600] netlink: 'syz.3.159': attribute type 3 has an invalid length.
[  118.032979][ T6589] vxcan1 speed is unknown, defaulting to 1000
[  118.195519][ T6611] vlan2: entered promiscuous mode
[  118.583262][ T6622] sctp: [Deprecated]: syz.4.166 (pid 6622) Use of int in maxseg socket option.
[  118.583262][ T6622] Use struct sctp_assoc_value instead
[  118.631185][ T6622] netlink: 24 bytes leftover after parsing attributes in process `syz.4.166'.
[  118.859267][ T6633] netlink: 'syz.0.168': attribute type 1 has an invalid length.
[  118.871418][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168'.
[  119.279440][ T6639] netlink: 'syz.4.170': attribute type 8 has an invalid length.
[  119.306257][ T6639] netlink: 'syz.4.170': attribute type 4 has an invalid length.
[  119.355829][ T6639] netlink: 224 bytes leftover after parsing attributes in process `syz.4.170'.
[  119.406145][ T6640] netlink: 108 bytes leftover after parsing attributes in process `syz.4.170'.
[  119.480533][ T6640] netlink: 108 bytes leftover after parsing attributes in process `syz.4.170'.
[  119.990942][ T6641] netlink: 108 bytes leftover after parsing attributes in process `syz.4.170'.
[  120.003820][ T6641] netlink: 108 bytes leftover after parsing attributes in process `syz.4.170'.
[  120.473519][ T6652] syzkaller1: entered promiscuous mode
[  120.479158][ T6652] syzkaller1: entered allmulticast mode
[  120.530224][ T6659] ip6gretap0: entered promiscuous mode
[  121.411689][ T6102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.610950][ T6677] tipc: Started in network mode
[  121.621038][ T6677] tipc: Node identity 6, cluster identity 4711
[  121.629101][ T6677] tipc: Node number set to 6
[  121.652435][ T6679] netlink: 40 bytes leftover after parsing attributes in process `syz.2.178'.
[  121.681254][ T6685] netlink: 'syz.1.177': attribute type 1 has an invalid length.
[  121.728880][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  121.739426][ T6684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.177'.
[  121.750226][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  121.761927][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  121.772279][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  121.802732][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  121.819508][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  121.845585][ T6102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.036937][ T6102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.099679][ T6686] vxcan1 speed is unknown, defaulting to 1000
[  122.231884][ T6102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.837869][ T6102] bridge_slave_1: left allmulticast mode
[  122.855558][ T6102] bridge_slave_1: left promiscuous mode
[  122.863316][ T6102] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.898104][ T6102] bridge_slave_0: left allmulticast mode
[  122.920787][ T6102] bridge_slave_0: left promiscuous mode
[  122.928625][ T6102] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.106627][ T6734] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  123.568965][ T6102] dvmrp0 (unregistering): left allmulticast mode
[  123.658781][ T6102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.677262][ T6102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.691340][ T6102] bond0 (unregistering): Released all slaves
[  123.911585][ T6762] __nla_validate_parse: 1 callbacks suppressed
[  123.911607][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.194'.
[  123.955724][ T5834] Bluetooth: hci2: command tx timeout
[  124.068546][ T6762] mac80211_hwsim hwsim9 
: renamed from wlan1 (while UP)
[  124.426623][ T6686] chnl_net:caif_netlink_parms(): no params data found
[  125.104500][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout
[  125.312342][ T6102] hsr_slave_0: left promiscuous mode
[  125.331789][ T6102] hsr_slave_1: left promiscuous mode
[  125.342273][ T6102] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.366286][ T6102] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.397221][ T6102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.411229][ T6102] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.441099][ T6102] veth1_macvtap: left promiscuous mode
[  125.447667][ T6102] veth0_macvtap: left promiscuous mode
[  125.455358][ T6102] veth1_vlan: left promiscuous mode
[  125.461218][ T6102] veth0_vlan: left promiscuous mode
[  125.594921][ T6102] infiniband syz0: set down
[  125.638698][ T6102] pim6reg (unregistering): left allmulticast mode
[  126.042980][ T5834] Bluetooth: hci2: command tx timeout
[  126.290204][ T6102] team0 (unregistering): Port device team_slave_1 removed
[  126.336507][ T6102] team0 (unregistering): Port device team_slave_0 removed
[  126.550753][   T82] smc: removing ib device syz0
[  126.853321][ T6686] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.860602][ T6686] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.883639][ T6686] bridge_slave_0: entered allmulticast mode
[  126.936647][ T6686] bridge_slave_0: entered promiscuous mode
[  126.953152][ T6686] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.960321][ T6686] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.975522][ T6686] bridge_slave_1: entered allmulticast mode
[  126.988824][ T6686] bridge_slave_1: entered promiscuous mode
[  127.178343][ T6814] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  127.210280][ T6815] netlink: 'syz.4.206': attribute type 1 has an invalid length.
[  127.306217][  T837] vxcan1 speed is unknown, defaulting to 1000
[  127.702837][ T6686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  127.747939][ T6843] netlink: 'syz.2.209': attribute type 21 has an invalid length.
[  127.779404][ T6843] netlink: 132 bytes leftover after parsing attributes in process `syz.2.209'.
[  127.925351][ T6686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.112994][ T5834] Bluetooth: hci2: command tx timeout
[  128.266870][ T6686] team0: Port device team_slave_0 added
[  128.334643][ T6686] team0: Port device team_slave_1 added
[  128.448884][ T6871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.216'.
[  128.559993][ T6879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.218'.
[  128.638756][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_0
[  128.650829][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.720789][ T6686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  128.768226][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'.
[  128.793438][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.800524][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.827028][ T6686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.904019][ T6895] netlink: 36 bytes leftover after parsing attributes in process `syz.3.220'.
[  128.941168][ T6879] 8021q: adding VLAN 0 to HW filter on device bond1
[  129.087141][ T6900] tipc: Started in network mode
[  129.092441][ T6900] tipc: Node identity 528ba80b734e, cluster identity 4711
[  129.108774][ T6900] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.126396][ T6902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.221'.
[  129.139810][ T6902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.221'.
[  129.175702][ T6686] hsr_slave_0: entered promiscuous mode
[  129.185819][ T6686] hsr_slave_1: entered promiscuous mode
[  129.199228][ T6686] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  129.218842][ T6686] Cannot create hsr debugfs directory
[  129.235730][ T6905] tipc: Disabling bearer <eth:syzkaller0>
[  129.552783][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout
[  129.892654][ T6929] netlink: 100 bytes leftover after parsing attributes in process `syz.1.228'.
[  130.207442][ T5834] Bluetooth: hci2: command tx timeout
[  130.232984][ T6937] netlink: 'syz.4.230': attribute type 12 has an invalid length.
[  130.253662][ T6937] netlink: 'syz.4.230': attribute type 29 has an invalid length.
[  130.261469][ T6937] netlink: 148 bytes leftover after parsing attributes in process `syz.4.230'.
[  130.281268][ T6937] netlink: 'syz.4.230': attribute type 1 has an invalid length.
[  130.290812][ T6937] netlink: 'syz.4.230': attribute type 2 has an invalid length.
[  130.301089][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.233'.
[  130.323699][ T6937] netlink: 19 bytes leftover after parsing attributes in process `syz.4.230'.
[  130.811986][ T6686] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  130.842777][ T6968] netlink: 48 bytes leftover after parsing attributes in process `syz.4.239'.
[  130.866884][ T6686] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  130.886991][ T6973] netlink: 64 bytes leftover after parsing attributes in process `syz.2.238'.
[  130.946578][ T6979] netlink: 232 bytes leftover after parsing attributes in process `syz.1.240'.
[  130.977221][ T6686] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  131.027190][ T6686] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  131.175786][ T6986] netlink: 'syz.1.243': attribute type 2 has an invalid length.
[  131.205661][ T6986] netlink: 128 bytes leftover after parsing attributes in process `syz.1.243'.
[  131.269108][ T6993] netlink: 'syz.3.242': attribute type 10 has an invalid length.
[  131.362852][ T6993] team0: Port device wlan1 added
[  131.421765][ T6986] Tq€: entered promiscuous mode
[  131.625027][ T6686] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.021165][ T6686] 8021q: adding VLAN 0 to HW filter on device team0
[  132.143033][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.150969][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.213261][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.220451][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.368037][ T6686] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  132.406433][ T6686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  132.892999][ T7075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.921838][ T7075] netlink: 'syz.2.259': attribute type 10 has an invalid length.
[  132.926084][ T6686] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.102780][ T6686] veth0_vlan: entered promiscuous mode
[  133.321330][ T7080] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.430598][ T6686] veth1_vlan: entered promiscuous mode
[  133.578247][ T7080] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.829911][ T7080] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.924661][ T6686] veth0_macvtap: entered promiscuous mode
[  134.055519][ T7080] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.126851][ T6686] veth1_macvtap: entered promiscuous mode
[  134.221996][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.263460][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.274489][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.292412][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.302450][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.312994][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.322930][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.333501][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.345995][ T6686] batman_adv: batadv0: Interface activated: batadv_slave_0
[  134.357393][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.367929][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.377857][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.388756][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.398948][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.409531][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.419488][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.430361][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.445213][ T6686] batman_adv: batadv0: Interface activated: batadv_slave_1
[  134.478236][ T6686] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.488192][ T6686] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.522308][ T6686] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.531112][ T6686] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.606280][ T7080] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.718757][ T7140] __nla_validate_parse: 2 callbacks suppressed
[  134.718779][ T7140] netlink: 132 bytes leftover after parsing attributes in process `syz.4.271'.
[  134.754350][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'.
[  134.799546][ T7080] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.961132][ T7080] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.002782][ T7149] netlink: 'syz.4.272': attribute type 1 has an invalid length.
[  135.010504][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.272'.
[  135.064474][ T7080] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.404434][ T5100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.445188][ T5100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.564668][ T7170] vlan1: entered promiscuous mode
[  135.660638][   T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.683667][   T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.576145][ T7210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.288'.
[  137.102610][ T6102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.145436][ T7220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.291'.
[  137.158633][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.291'.
[  137.238368][ T6102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.524702][ T6102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.562537][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  137.579856][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  137.580292][ T7244] netlink: 260 bytes leftover after parsing attributes in process `syz.1.295'.
[  137.597312][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  137.608554][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  137.622436][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  137.629979][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  137.986691][ T7253] syz.1.298[7253] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  137.986803][ T7253] syz.1.298[7253] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  138.053820][ T7253] syz.1.298[7253] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  138.102918][ T7253] syz.1.298[7253] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  138.144189][ T7253] syz.1.298[7253] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  138.198537][ T7253] syz.1.298[7253] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  138.239762][ T7253] syz.1.298[7253] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  138.275871][ T7253] syz.1.298[7253] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  138.323244][ T7253] syz.1.298[7253] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  138.371340][ T7253] syz.1.298[7253] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  138.388676][ T6102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.567935][ T7250] pimreg3: entered allmulticast mode
[  139.203602][ T6102] bridge_slave_1: left allmulticast mode
[  139.209380][ T6102] bridge_slave_1: left promiscuous mode
[  139.248636][ T6102] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.324165][ T6102] bridge_slave_0: left allmulticast mode
[  139.368836][ T6102] bridge_slave_0: left promiscuous mode
[  139.392871][ T6102] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.572882][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  139.579686][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  139.713144][ T5849] Bluetooth: hci2: command tx timeout
[  141.376799][ T6102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.425404][ T6102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  141.467026][ T6102] bond0 (unregistering): Released all slaves
[  141.806186][ T5849] Bluetooth: hci2: command tx timeout
[  141.916848][ T7301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'.
[  142.633299][ T7235] chnl_net:caif_netlink_parms(): no params data found
[  142.973942][ T6102] hsr_slave_0: left promiscuous mode
[  142.993603][ T6102] hsr_slave_1: left promiscuous mode
[  143.002736][ T6102] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.030646][ T6102] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.081531][ T7321] xt_policy: neither incoming nor outgoing policy selected
[  143.113326][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'.
[  143.123885][ T6102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.131373][ T6102] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.162782][ T7323] netlink: 'syz.1.312': attribute type 10 has an invalid length.
[  143.238696][ T6102] veth1_macvtap: left promiscuous mode
[  143.269550][ T6102] veth0_macvtap: left promiscuous mode
[  143.311810][ T6102] veth1_vlan: left promiscuous mode
[  143.332365][ T6102] veth0_vlan: left promiscuous mode
[  143.399925][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'.
[  143.461678][ T7347] netlink: 'syz.2.316': attribute type 10 has an invalid length.
[  143.872511][ T5849] Bluetooth: hci2: command tx timeout
[  144.362236][ T6102] team0 (unregistering): Port device team_slave_1 removed
[  144.403572][ T6102] team0 (unregistering): Port device team_slave_0 removed
[  144.858299][ T7323] batman_adv: batadv0: Adding interface: team0
[  144.868869][ T7323] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.894748][ T7323] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  144.923437][ T7347] 8021q: adding VLAN 0 to HW filter on device team0
[  144.950122][ T7347] bond0: (slave team0): Enslaving as an active interface with an up link
[  144.960205][   T35] bond0: (slave team0): interface is now down
[  144.999871][   T35] bond0: now running without any active interface!
[  145.431746][ T7378] netlink: 'syz.1.325': attribute type 1 has an invalid length.
[  145.440299][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.323'.
[  145.478818][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.325'.
[  145.668954][ T7235] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.678116][ T7235] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.725206][ T7235] bridge_slave_0: entered allmulticast mode
[  145.765103][ T7235] bridge_slave_0: entered promiscuous mode
[  145.833723][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.330'.
[  145.846015][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.330'.
[  145.882392][ T7235] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.889879][ T7235] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.924241][ T7235] bridge_slave_1: entered allmulticast mode
[  145.953286][ T5849] Bluetooth: hci2: command tx timeout
[  145.977876][ T7235] bridge_slave_1: entered promiscuous mode
[  146.171557][ T7235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  146.256754][ T7235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  146.477386][ T7235] team0: Port device team_slave_0 added
[  146.495628][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'.
[  146.551403][ T7235] team0: Port device team_slave_1 added
[  146.644930][ T7440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.337'.
[  146.660305][ T7235] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.690280][ T7235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.749662][ T7235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.815369][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'.
[  146.820271][ T7235] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.847605][ T7235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.875334][ T7235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  147.114642][ T7447] bridge2: entered promiscuous mode
[  147.119971][ T7447] bridge2: entered allmulticast mode
[  147.176439][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.342'.
[  147.186232][ T7463] netlink: 'syz.4.342': attribute type 1 has an invalid length.
[  147.439462][ T7467] syzkaller1: entered promiscuous mode
[  147.455481][ T7467] syzkaller1: entered allmulticast mode
[  147.519362][ T7479] tun0: tun_chr_ioctl cmd 1074025675
[  147.532419][ T7479] tun0: persist enabled
[  147.600036][ T7481] tun0: tun_chr_ioctl cmd 1074025675
[  147.608793][ T7481] tun0: persist enabled
[  147.668377][ T7235] hsr_slave_0: entered promiscuous mode
[  147.683102][ T7235] hsr_slave_1: entered promiscuous mode
[  147.694327][ T7235] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  147.702810][ T7235] Cannot create hsr debugfs directory
[  147.879694][ T7497] netlink: 32 bytes leftover after parsing attributes in process `syz.1.347'.
[  147.962281][ T7497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.347'.
[  148.474458][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.353'.
[  148.492366][ T7528] netlink: 48 bytes leftover after parsing attributes in process `syz.2.353'.
[  148.516532][ T7528] netlink: 36 bytes leftover after parsing attributes in process `syz.2.353'.
[  148.548524][ T7529] netlink: 64 bytes leftover after parsing attributes in process `syz.2.353'.
[  148.697704][ T7528] vlan3: entered allmulticast mode
[  148.721666][ T7528] gretap0: entered allmulticast mode
[  148.909403][ T7544] netlink: 16 bytes leftover after parsing attributes in process `syz.4.355'.
[  149.050437][ T7554] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  149.137434][ T7550] batman_adv: batadv0: Adding interface: ip6gretap1
[  149.186621][ T7550] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.230368][ T7550] batman_adv: batadv0: Interface activated: ip6gretap1
[  149.239669][ T7565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.356'.
[  149.461748][ T7565] 8021q: adding VLAN 0 to HW filter on device bond2
[  149.489757][ T7570] netlink: 'syz.3.359': attribute type 1 has an invalid length.
[  149.529593][ T7570] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  149.778938][ T7235] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  149.826397][ T7235] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  149.848234][ T7235] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  149.923520][ T7235] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  150.386324][ T7604] dccp_invalid_packet: P.Data Offset(0) too small
[  150.427417][ T7601] 8021q: adding VLAN 0 to HW filter on device bond3
[  150.528368][ T7611] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.367'.
[  150.578356][ T7235] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.644431][ T7611] openvswitch: netlink: Flow actions attr not present in new flow.
[  150.684829][ T7235] 8021q: adding VLAN 0 to HW filter on device team0
[  150.729356][ T7624] x_tables: duplicate underflow at hook 1
[  150.783858][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.791143][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.903939][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.911207][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.940163][ T7235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  151.196963][ T7638] openvswitch: netlink: Tunnel attr 223 out of range max 16
[  151.246467][ T7235] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.310161][ T7647] netlink: 'syz.1.374': attribute type 3 has an invalid length.
[  151.342005][ T7647] netlink: 'syz.1.374': attribute type 1 has an invalid length.
[  151.445036][ T7647] IPv4: Oversized IP packet from 127.202.26.0
[  151.459950][ T7235] veth0_vlan: entered promiscuous mode
[  151.539555][ T7235] veth1_vlan: entered promiscuous mode
[  151.580294][ T7235] veth0_macvtap: entered promiscuous mode
[  151.597035][ T7235] veth1_macvtap: entered promiscuous mode
[  151.614457][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.625053][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.635106][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.645620][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.655901][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.667068][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.677654][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.688366][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.702476][ T7235] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.784770][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.795884][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.806389][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.817206][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.827456][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.838231][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.848361][ T7235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.858982][ T7235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.870208][ T7235] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.881135][ T7235] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.889980][ T7235] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.899265][ T7235] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.908426][ T7235] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.031749][ T7665] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  152.043938][ T7665] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  152.058361][ T7665] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  152.202313][ T5100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.234580][ T5100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.298228][ T7678] __nla_validate_parse: 2 callbacks suppressed
[  152.298251][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'.
[  152.318335][ T7678] netlink: 52 bytes leftover after parsing attributes in process `syz.3.382'.
[  152.327446][ T7678] netlink: 'syz.3.382': attribute type 3 has an invalid length.
[  152.345288][    T9] IPVS: starting estimator thread 0...
[  152.410178][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.423678][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.432412][ T7680] IPVS: using max 21 ests per chain, 50400 per kthread
[  152.830049][ T7703] netlink: 104 bytes leftover after parsing attributes in process `syz.3.386'.
[  153.054174][ T7713] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  153.262742][ T7702] team0 (unregistering): Port device team_slave_0 removed
[  153.286918][ T7702] team0 (unregistering): Port device team_slave_1 removed
[  153.335322][ T7694] netlink: 36 bytes leftover after parsing attributes in process `syz.2.384'.
[  153.352451][ T7694] netlink: 36 bytes leftover after parsing attributes in process `syz.2.384'.
[  153.652540][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'.
[  153.703434][ T7730] netlink: 'syz.2.391': attribute type 142 has an invalid length.
[  153.741989][ T7235] syz-executor (7235) used greatest stack depth: 18608 bytes left
[  153.746038][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'.
[  153.785353][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'.
[  153.898698][ T3529] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.375545][ T7760] smc: net device bond0 applied user defined pnetid SYZ0
[  154.668906][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  154.701677][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  154.712518][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  154.722435][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  154.758608][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  154.767449][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  154.985022][ T7787] xt_hashlimit: size too large, truncated to 1048576
[  155.134376][ T7770] chnl_net:caif_netlink_parms(): no params data found
[  155.203765][ T7785] netlink: 48 bytes leftover after parsing attributes in process `syz.1.400'.
[  155.636023][ T7785] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.796972][ T7770] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.833784][ T7770] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.841088][ T7770] bridge_slave_0: entered allmulticast mode
[  155.877755][ T7770] bridge_slave_0: entered promiscuous mode
[  156.064614][ T7828] netlink: 16 bytes leftover after parsing attributes in process `syz.3.405'.
[  156.151201][ T3529] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.283475][ T7770] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.329670][ T7770] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.375168][ T7770] bridge_slave_1: entered allmulticast mode
[  156.406783][ T7770] bridge_slave_1: entered promiscuous mode
[  156.484667][ T3529] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.808207][ T3529] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.914616][ T5834] Bluetooth: hci2: command tx timeout
[  156.980552][ T7770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.045580][ T7770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.276470][ T7770] team0: Port device team_slave_0 added
[  157.346684][ T7770] team0: Port device team_slave_1 added
[  157.536022][ T7770] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.582974][ T7770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.722149][ T7770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.832909][ T7770] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.840789][ T7770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.873527][ T7770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.224410][ T3529] bridge_slave_1: left allmulticast mode
[  158.230150][ T3529] bridge_slave_1: left promiscuous mode
[  158.246297][ T3529] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.293136][ T3529] bridge_slave_0: left allmulticast mode
[  158.298890][ T3529] bridge_slave_0: left promiscuous mode
[  158.305889][ T3529] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.993106][ T5834] Bluetooth: hci2: command tx timeout
[  159.176064][ T3529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  159.189399][ T3529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.202162][ T3529] bond0 (unregistering): Released all slaves
[  159.208908][ T7882] netlink: 'syz.2.414': attribute type 32 has an invalid length.
[  159.219261][ T7882] __nla_validate_parse: 34 callbacks suppressed
[  159.219281][ T7882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.414'.
[  159.256244][ T7770] hsr_slave_0: entered promiscuous mode
[  159.262972][ T7770] hsr_slave_1: entered promiscuous mode
[  159.269590][ T7770] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  159.283070][ T7770] Cannot create hsr debugfs directory
[  159.326747][ T7874] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  159.347619][ T7876] netlink: 48 bytes leftover after parsing attributes in process `syz.2.414'.
[  159.671897][ T7886] netlink: 32 bytes leftover after parsing attributes in process `syz.3.415'.
[  159.826583][ T7888] netlink: 104 bytes leftover after parsing attributes in process `syz.4.417'.
[  160.206064][ T3529] hsr_slave_0: left promiscuous mode
[  160.213879][ T3529] hsr_slave_1: left promiscuous mode
[  160.220000][ T3529] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.229022][ T3529] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.237737][ T3529] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.256763][ T3529] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.360267][ T3529] veth1_macvtap: left promiscuous mode
[  160.384379][ T3529] veth0_macvtap: left promiscuous mode
[  160.398354][ T3529] veth1_vlan: left promiscuous mode
[  160.409729][ T3529] veth0_vlan: left promiscuous mode
[  160.629951][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.424'.
[  161.078708][ T5834] Bluetooth: hci2: command tx timeout
[  161.227502][ T3529] team0 (unregistering): Port device team_slave_1 removed
[  161.282491][ T3529] team0 (unregistering): Port device team_slave_0 removed
[  161.771970][ T7912] netlink: 96 bytes leftover after parsing attributes in process `syz.3.425'.
[  162.449414][ T7946] netlink: 16 bytes leftover after parsing attributes in process `syz.4.432'.
[  162.480706][ T7948] netlink: 'syz.2.433': attribute type 1 has an invalid length.
[  162.547255][ T7948] netlink: 224 bytes leftover after parsing attributes in process `syz.2.433'.
[  163.152658][ T5834] Bluetooth: hci2: command tx timeout
[  163.226208][ T7983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.439'.
[  163.239127][ T7985] netlink: 28 bytes leftover after parsing attributes in process `syz.3.438'.
[  163.544811][ T7993] netlink: 'syz.2.439': attribute type 1 has an invalid length.
[  163.569591][ T7993] netlink: 'syz.2.439': attribute type 2 has an invalid length.
[  163.691742][ T7770] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  163.811186][ T7770] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  163.988806][ T7770] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  164.245278][ T8016] netlink: 'syz.2.445': attribute type 10 has an invalid length.
[  164.277885][ T8017] __nla_validate_parse: 1 callbacks suppressed
[  164.277908][ T8017] netlink: 92 bytes leftover after parsing attributes in process `syz.3.444'.
[  164.697704][ T7770] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  164.728480][ T8021] syzkaller0: tun_chr_ioctl cmd 1074025677
[  164.735987][ T8021] syzkaller0: linktype set to 6
[  164.843893][ T8020] syzkaller0: tun_chr_ioctl cmd 2147767520
[  165.260019][ T7770] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.326233][ T7770] 8021q: adding VLAN 0 to HW filter on device team0
[  165.363749][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.371113][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.450287][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.453576][ T8041] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.457610][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.177562][ T7770] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.216069][ T7770] veth0_vlan: entered promiscuous mode
[  166.276002][ T7770] veth1_vlan: entered promiscuous mode
[  166.329413][ T7770] veth0_macvtap: entered promiscuous mode
[  166.350275][ T7770] veth1_macvtap: entered promiscuous mode
[  166.412281][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.454911][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.472773][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.494799][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.517364][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.547757][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.568900][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.615908][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.630707][ T7770] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.701934][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.726442][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.752287][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.799544][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.820035][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.852090][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.889973][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.932115][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.973327][ T7770] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.032930][ T7770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.041731][ T7770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.092295][ T7770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.101093][ T7770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.263376][ T8109] netlink: 'syz.3.460': attribute type 11 has an invalid length.
[  167.276324][ T8106] netlink: 24 bytes leftover after parsing attributes in process `syz.4.461'.
[  167.590580][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.652549][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.709206][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.724271][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.113041][ T8138] netlink: 32 bytes leftover after parsing attributes in process `syz.1.468'.
[  168.169891][ T8142] netlink: 16 bytes leftover after parsing attributes in process `syz.3.471'.
[  169.020777][ T8156] pim6reg1: entered promiscuous mode
[  169.036335][ T8156] pim6reg1: entered allmulticast mode
[  169.255121][   T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.378355][   T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.457865][   T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.534564][   T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.757755][ T8195] IPVS: set_ctl: invalid protocol: 0 172.30.0.4:20000
[  169.982726][   T53] bridge_slave_1: left allmulticast mode
[  169.988487][   T53] bridge_slave_1: left promiscuous mode
[  170.031011][ T8204] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma?
[  170.041305][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.087319][   T53] bridge_slave_0: left allmulticast mode
[  170.126218][   T53] bridge_slave_0: left promiscuous mode
[  170.132158][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.509879][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  170.526376][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  170.538945][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  170.564562][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  170.577095][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  170.585059][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  170.650363][ T8228] bpf_get_probe_write_proto: 184 callbacks suppressed
[  170.650385][ T8228] syz.3.489[8228] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  170.664373][ T8228] syz.3.489[8228] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  170.677017][ T8228] syz.3.489[8228] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  170.857619][ T8234] sctp: [Deprecated]: syz.3.490 (pid 8234) Use of int in max_burst socket option.
[  170.857619][ T8234] Use struct sctp_assoc_value instead
[  170.991491][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.003096][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.013536][   T53] bond0 (unregistering): Released all slaves
[  171.445158][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.492'.
[  171.658653][ T8254] netlink: 'syz.2.494': attribute type 3 has an invalid length.
[  171.682905][ T8257] netlink: 'syz.3.496': attribute type 5 has an invalid length.
[  171.769103][   T53] hsr_slave_0: left promiscuous mode
[  171.791227][   T53] hsr_slave_1: left promiscuous mode
[  171.821715][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.852392][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.876969][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.884853][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.943162][   T53] veth1_macvtap: left promiscuous mode
[  171.949229][   T53] veth0_macvtap: left promiscuous mode
[  171.955737][   T53] veth1_vlan: left promiscuous mode
[  171.961303][   T53] veth0_vlan: left promiscuous mode
[  172.558926][   T53] team0 (unregistering): Port device team_slave_1 removed
[  172.601369][   T53] team0 (unregistering): Port device team_slave_0 removed
[  172.675994][ T5849] Bluetooth: hci2: command tx timeout
[  173.084556][ T8267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  173.252838][ T8298] netlink: 36 bytes leftover after parsing attributes in process `syz.3.502'.
[  173.509941][ T8293] pim6reg1: entered promiscuous mode
[  173.522931][ T8293] pim6reg1: entered allmulticast mode
[  173.657262][ T8223] chnl_net:caif_netlink_parms(): no params data found
[  173.810184][ T8223] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.844182][ T8223] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.882439][ T8223] bridge_slave_0: entered allmulticast mode
[  173.912698][ T8223] bridge_slave_0: entered promiscuous mode
[  173.944379][ T8223] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.951600][ T8223] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.979387][ T8223] bridge_slave_1: entered allmulticast mode
[  173.990913][ T8223] bridge_slave_1: entered promiscuous mode
[  174.568835][ T8223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.622444][ T8223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.762257][ T5849] Bluetooth: hci2: command tx timeout
[  174.775889][ T8223] team0: Port device team_slave_0 added
[  174.785123][ T8223] team0: Port device team_slave_1 added
[  174.891463][ T8356] tc_dump_action: action bad kind
[  174.963346][ T8223] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.987412][ T8223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.054227][ T8223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  175.105102][ T8223] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.122890][ T8223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.153914][ T8223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.301365][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.519'.
[  175.310875][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.519'.
[  175.347897][ T8223] hsr_slave_0: entered promiscuous mode
[  175.373454][ T8223] hsr_slave_1: entered promiscuous mode
[  175.388288][ T8223] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  175.401318][ T8223] Cannot create hsr debugfs directory
[  175.629000][ T8387] x_tables: duplicate underflow at hook 2
[  175.641633][ T8385] xt_bpf: check failed: parse error
[  175.652303][ T8391] x_tables: duplicate underflow at hook 2
[  175.659393][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.521'.
[  175.748791][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.523'.
[  175.781374][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.523'.
[  175.844817][ T8385] gtp1: entered promiscuous mode
[  175.863502][ T8385] gtp1: entered allmulticast mode
[  176.028452][ T8398] netlink: 'syz.2.524': attribute type 12 has an invalid length.
[  176.267866][ T8411] netlink: 28 bytes leftover after parsing attributes in process `syz.1.527'.
[  176.613874][ T8423] vlan0: entered promiscuous mode
[  176.620493][ T8423] macvtap0: entered promiscuous mode
[  176.843969][ T5849] Bluetooth: hci2: command tx timeout
[  176.945184][ T8440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.536'.
[  176.989018][ T8440] bridge0: entered promiscuous mode
[  177.006569][ T8440] batman_adv: batadv0: Adding interface: macvlan3
[  177.052198][ T8440] batman_adv: batadv0: Interface activated: macvlan3
[  177.256806][ T8223] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  177.318256][ T8223] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  177.328781][ T8462] netlink: 16 bytes leftover after parsing attributes in process `syz.4.540'.
[  177.347496][ T8462] nbd: must specify at least one socket
[  177.365058][ T8223] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  177.448282][ T8223] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  177.767238][ T8223] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.849601][ T8223] 8021q: adding VLAN 0 to HW filter on device team0
[  177.909211][ T8012] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.916451][ T8012] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.982270][ T8012] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.989507][ T8012] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.997725][ T8493] netlink: 36 bytes leftover after parsing attributes in process `syz.1.546'.
[  178.133490][ T8485] sch_fq: defrate 511 ignored.
[  178.922143][ T5849] Bluetooth: hci2: command tx timeout
[  179.080036][ T8539] IPVS: set_ctl: invalid protocol: 22 172.20.20.61:20004
[  179.159641][ T8543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.555'.
[  179.232676][ T8223] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.342589][ T8547] netlink: 36 bytes leftover after parsing attributes in process `syz.2.557'.
[  179.709077][ T8561] netlink: 13 bytes leftover after parsing attributes in process `syz.1.560'.
[  179.787346][ T8223] veth0_vlan: entered promiscuous mode
[  179.821707][ T8223] veth1_vlan: entered promiscuous mode
[  180.099947][ T8223] veth0_macvtap: entered promiscuous mode
[  180.230729][ T8223] veth1_macvtap: entered promiscuous mode
[  180.449393][ T8223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.510873][ T8223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.589158][ T8223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.604723][ T8223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.615029][ T8223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.631248][ T8223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.642101][ T8223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.662562][ T8223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.683548][ T8223] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.715658][ T8223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.767563][ T8223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.803631][ T8223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.842480][ T8223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.871275][ T8223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.908606][ T8223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.943083][ T8223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.983706][ T8223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.008255][ T8223] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.247557][ T8223] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.284937][ T8223] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.332194][ T8223] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.340966][ T8223] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.697956][ T8630] Driver unsupported XDP return value 0 on prog  (id 338) dev N/A, expect packet loss!
[  181.740572][ T8012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.766834][ T8012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.798214][ T8630] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  181.809561][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.821382][ T8630] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  181.821786][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.847822][ T8635] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.573'.
[  182.110470][ T8641] netlink: 36 bytes leftover after parsing attributes in process `syz.1.575'.
[  182.157907][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.576'.
[  182.190741][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'.
[  182.285931][ T8644] tap0: tun_chr_ioctl cmd 1074025677
[  182.291513][ T8644] tap0: linktype set to 778
[  182.410605][   T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.544037][ T8654] netlink: 96 bytes leftover after parsing attributes in process `syz.2.577'.
[  182.657763][   T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.813852][   T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.883353][   T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.997582][   T53] bridge_slave_1: left allmulticast mode
[  183.005188][   T53] bridge_slave_1: left promiscuous mode
[  183.011024][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.020223][   T53] bridge_slave_0: left allmulticast mode
[  183.027549][   T53] bridge_slave_0: left promiscuous mode
[  183.033472][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.421894][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.582'.
[  183.557216][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.582'.
[  183.571692][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  183.581646][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  183.592384][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  183.603024][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  183.613009][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  183.623345][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  183.809090][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  183.824414][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  183.839947][   T53] bond0 (unregistering): Released all slaves
[  183.879065][ T8690] Bluetooth: MGMT ver 1.23
[  184.109168][ T8701] raw_sendmsg: syz.1.587 forgot to set AF_INET. Fix it!
[  184.278722][ T8704] netlink: 24 bytes leftover after parsing attributes in process `syz.4.588'.
[  184.424443][ T8712] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.520711][ T8725] netlink: 148 bytes leftover after parsing attributes in process `syz.3.592'.
[  184.591839][ T8729] netlink: 24 bytes leftover after parsing attributes in process `syz.4.593'.
[  184.658449][ T8712] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.756937][   T53] hsr_slave_0: left promiscuous mode
[  184.774134][   T53] hsr_slave_1: left promiscuous mode
[  184.780281][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.807876][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.826574][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.849602][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.904943][   T53] veth1_macvtap: left promiscuous mode
[  184.918652][ T8735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.595'.
[  184.930103][   T53] veth0_macvtap: left promiscuous mode
[  184.942403][   T53] veth1_vlan: left promiscuous mode
[  184.953356][   T53] veth0_vlan: left promiscuous mode
[  185.714184][ T5834] Bluetooth: hci2: command tx timeout
[  186.108275][   T53] team0 (unregistering): Port device team_slave_1 removed
[  186.181064][   T53] team0 (unregistering): Port device team_slave_0 removed
[  186.835886][ T8678] chnl_net:caif_netlink_parms(): no params data found
[  186.850281][ T8760] netlink: 'syz.3.598': attribute type 2 has an invalid length.
[  186.863419][ T8712] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.874356][ T8760] netlink: 'syz.3.598': attribute type 8 has an invalid length.
[  186.991191][ T8712] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.066966][ T8764] netlink: 'syz.1.599': attribute type 10 has an invalid length.
[  187.098506][ T8764] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  187.191405][ T8763] bridge2: entered promiscuous mode
[  187.203000][ T8763] bridge2: entered allmulticast mode
[  187.242414][ T8763] team0: Port device bridge2 added
[  187.250560][ T8775] __nla_validate_parse: 2 callbacks suppressed
[  187.250582][ T8775] netlink: 44 bytes leftover after parsing attributes in process `syz.4.602'.
[  187.353378][ T8712] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.363678][ T8772] bridge0: port 3(ip6gretap0) entered blocking state
[  187.375770][ T8772] bridge0: port 3(ip6gretap0) entered disabled state
[  187.386057][ T8772] ip6gretap0: entered allmulticast mode
[  187.400155][ T8772] ip6gretap0: entered promiscuous mode
[  187.411998][ T8772] bridge0: port 3(ip6gretap0) entered blocking state
[  187.419230][ T8772] bridge0: port 3(ip6gretap0) entered forwarding state
[  187.505853][ T8712] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.793739][ T5834] Bluetooth: hci2: command tx timeout
[  187.933104][ T8780] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.940536][ T8780] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.374206][ T8780] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  188.420671][ T8780] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  188.699503][ T8780] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.712429][ T8780] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.721666][ T8780] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.730979][ T8780] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.888472][ T8780] macvtap0: left promiscuous mode
[  188.922723][ T8678] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.930761][ T8678] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.962682][ T8678] bridge_slave_0: entered allmulticast mode
[  188.970394][ T8678] bridge_slave_0: entered promiscuous mode
[  189.004381][ T8678] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.040894][ T8678] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.080795][ T8678] bridge_slave_1: entered allmulticast mode
[  189.112465][ T8678] bridge_slave_1: entered promiscuous mode
[  189.138632][ T8712] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.142568][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.605'.
[  189.183777][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.605'.
[  189.221077][ T8797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.605'.
[  189.265618][ T8712] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.331078][ T8678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  189.359709][ T8678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  189.587419][ T8678] team0: Port device team_slave_0 added
[  189.611288][ T8816] Dead loop on virtual device ip6_vti0, fix it urgently!
[  189.646838][ T8678] team0: Port device team_slave_1 added
[  189.674104][ T8823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.609'.
[  189.729956][ T8678] batman_adv: batadv0: Adding interface: batadv_slave_0
[  189.758456][ T8678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.870130][ T8678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  189.882324][ T5834] Bluetooth: hci2: command tx timeout
[  189.939478][ T8678] batman_adv: batadv0: Adding interface: batadv_slave_1
[  189.946885][ T8678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.973561][ T8678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.071339][ T8834] openvswitch: netlink: Actions may not be safe on all matching packets
[  190.224601][ T8678] hsr_slave_0: entered promiscuous mode
[  190.243066][ T8839] tls_set_device_offload_rx: netdev not found
[  190.261590][ T8678] hsr_slave_1: entered promiscuous mode
[  190.283810][ T8678] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  190.299908][ T8678] Cannot create hsr debugfs directory
[  190.763620][ T8867] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  190.772492][ T8867] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  190.786371][ T8871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.615'.
[  190.802425][ T8867] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  191.579819][ T8905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'.
[  192.063433][ T5834] Bluetooth: hci2: command tx timeout
[  192.528945][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.624'.
[  192.931489][ T8939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.629'.
[  192.961116][ T8678] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  192.980604][ T8678] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  193.003065][ T8939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.629'.
[  193.057158][ T8678] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  193.130951][ T8678] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  193.198357][ T8946] bridge2: entered promiscuous mode
[  193.222550][ T8946] bridge2: entered allmulticast mode
[  193.236392][ T8939] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  193.309722][ T8939] batman_adv: batadv0: Removing interface: batadv_slave_0
[  193.422344][ T8955] netlink: 44 bytes leftover after parsing attributes in process `syz.1.631'.
[  193.458851][ T8939] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  193.478106][ T8939] batman_adv: batadv0: Removing interface: batadv_slave_1
[  193.554256][ T8939] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  193.562336][ T8939] batman_adv: batadv0: Removing interface: ip6gretap1
[  193.923378][ T8962] bridge0: port 3(ip6gretap0) entered disabled state
[  193.940032][ T8962] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.189635][ T8962] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.237118][ T8962] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.547679][ T8962] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.562309][ T8962] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.582540][ T8962] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.622646][ T8962] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  194.893620][ T9002] geneve1: entered promiscuous mode
[  194.898916][ T9002] geneve1: entered allmulticast mode
[  195.270354][ T9027] netlink: 80 bytes leftover after parsing attributes in process `syz.1.640'.
[  195.515525][ T8678] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.580462][ T8678] 8021q: adding VLAN 0 to HW filter on device team0
[  195.635742][ T9042] syzkaller0: entered allmulticast mode
[  195.646168][ T3529] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.653430][ T3529] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.708573][ T9047] team0: Device gtp0 is of different type
[  195.716983][ T5849] Bluetooth: hci2: command 0x0405 tx timeout
[  195.731386][ T9044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.643'.
[  195.754674][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.761918][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.050087][ T9061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.646'.
[  196.118580][ T9061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:0c) already exists on: macvlan3
[  196.193068][ T9061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.574157][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.652'.
[  196.587014][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.652'.
[  196.609674][ T8678] 8021q: adding VLAN 0 to HW filter on device batadv0
[  196.764212][ T8678] veth0_vlan: entered promiscuous mode
[  196.807473][ T8678] veth1_vlan: entered promiscuous mode
[  196.894852][ T8678] veth0_macvtap: entered promiscuous mode
[  196.929351][ T8678] veth1_macvtap: entered promiscuous mode
[  196.994012][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.012891][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.037666][ T8678] batman_adv: batadv0: Interface activated: batadv_slave_0
[  197.055410][ T8678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.082110][ T8678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.108588][ T8678] batman_adv: batadv0: Interface activated: batadv_slave_1
[  197.134781][ T8678] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.149207][ T8678] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.162727][ T8678] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.171845][ T8678] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.356241][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.379216][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.428929][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.437658][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.228406][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.481340][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.771391][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.981770][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.101127][ T9158] netlink: 20 bytes leftover after parsing attributes in process `syz.3.665'.
[  199.143489][ T9158] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  199.151205][ T9158] IPv6: NLM_F_CREATE should be set when creating new route
[  199.158590][ T9158] IPv6: NLM_F_CREATE should be set when creating new route
[  199.352720][ T9171] netlink: 'syz.1.667': attribute type 10 has an invalid length.
[  199.362322][ T9171] netlink: 2 bytes leftover after parsing attributes in process `syz.1.667'.
[  199.395959][ T9171] team0: entered promiscuous mode
[  199.412193][ T9171] team_slave_0: entered promiscuous mode
[  199.432464][ T9171] team_slave_1: entered promiscuous mode
[  199.457765][ T9171] 8021q: adding VLAN 0 to HW filter on device team0
[  199.472746][ T9171] batman_adv: batadv0: Interface activated: team0
[  199.488233][ T9171] batman_adv: batadv0: Interface deactivated: team0
[  199.525376][ T9171] batman_adv: batadv0: Removing interface: team0
[  199.570036][ T9171] bridge0: port 4(team0) entered blocking state
[  199.591943][ T9171] bridge0: port 4(team0) entered disabled state
[  199.617616][ T9171] team0: entered allmulticast mode
[  199.623283][ T9171] team_slave_0: entered allmulticast mode
[  199.648798][ T9171] team_slave_1: entered allmulticast mode
[  199.733341][   T12] bridge_slave_1: left allmulticast mode
[  199.736621][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  199.739037][   T12] bridge_slave_1: left promiscuous mode
[  199.752428][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.765509][   T12] bridge_slave_0: left allmulticast mode
[  199.766089][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  199.771383][   T12] bridge_slave_0: left promiscuous mode
[  199.792116][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  199.800242][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  199.809997][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.859413][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  199.903849][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  200.398380][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.409653][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.420713][   T12] bond0 (unregistering): Released all slaves
[  200.659518][ T9210] netlink: 16 bytes leftover after parsing attributes in process `syz.4.672'.
[  200.757592][ T9218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.673'.
[  200.789678][ T9218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.673'.
[  200.851656][ T9219] netlink: 3 bytes leftover after parsing attributes in process `syz.1.674'.
[  200.867069][ T9218] team0: entered promiscuous mode
[  200.882861][ T9218] team_slave_0: entered promiscuous mode
[  200.888914][ T9218] team_slave_1: entered promiscuous mode
[  200.908122][ T9218] team0: left promiscuous mode
[  200.913394][ T9218] team_slave_0: left promiscuous mode
[  200.928171][ T9218] team_slave_1: left promiscuous mode
[  200.966515][ T9219] 0ªX¹¦À: renamed from caif0
[  200.988011][ T9219] 0ªX¹¦À: entered allmulticast mode
[  200.997198][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  200.997533][ T9219] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  201.019853][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  201.053326][ T9228] IPVS: set_ctl: invalid protocol: 60 172.30.1.4:20004
[  201.198833][   T12] hsr_slave_0: left promiscuous mode
[  201.211198][   T12] hsr_slave_1: left promiscuous mode
[  201.229964][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.255363][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  201.279596][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.292872][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  201.349328][ T9238] netlink: 1216 bytes leftover after parsing attributes in process `syz.3.677'.
[  201.351412][   T12] veth1_macvtap: left promiscuous mode
[  201.368020][ T9238] openvswitch: netlink: Message has 7 unknown bytes.
[  201.369884][   T12] veth0_macvtap: left promiscuous mode
[  201.381706][   T12] veth1_vlan: left promiscuous mode
[  201.387662][   T12] veth0_vlan: left promiscuous mode
[  201.394996][ T9238] netlink: 48 bytes leftover after parsing attributes in process `syz.3.677'.
[  201.879905][ T9255] netlink: 20 bytes leftover after parsing attributes in process `syz.3.681'.
[  201.960963][ T5834] Bluetooth: hci2: command tx timeout
[  202.206050][   T12] team0 (unregistering): Port device team_slave_1 removed
[  202.250481][   T12] team0 (unregistering): Port device team_slave_0 removed
[  202.906061][ T9265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  202.968987][ T9183] chnl_net:caif_netlink_parms(): no params data found
[  203.051481][ T9276] x_tables: duplicate underflow at hook 2
[  203.525545][ T9183] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.542069][ T9183] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.569802][ T9183] bridge_slave_0: entered allmulticast mode
[  203.593050][ T9183] bridge_slave_0: entered promiscuous mode
[  203.630236][ T9183] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.643722][ T9183] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.662499][ T9183] bridge_slave_1: entered allmulticast mode
[  203.723598][ T9183] bridge_slave_1: entered promiscuous mode
[  203.762765][ T9303] netlink: 16 bytes leftover after parsing attributes in process `syz.4.690'.
[  203.875259][ T9316] Cannot find del_set index 65534 as target
[  203.988349][ T9183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  204.040297][ T5834] Bluetooth: hci2: command tx timeout
[  204.056126][ T9183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  204.107452][ T9319] netlink: 'syz.1.693': attribute type 11 has an invalid length.
[  204.198923][ T9183] team0: Port device team_slave_0 added
[  204.228681][ T9183] team0: Port device team_slave_1 added
[  204.351945][ T9183] batman_adv: batadv0: Adding interface: batadv_slave_0
[  204.380552][ T9183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.448767][ T9183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  204.475621][ T9183] batman_adv: batadv0: Adding interface: batadv_slave_1
[  204.488989][ T9183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.542391][ T9183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  204.643710][ T9338] 8021q: adding VLAN 0 to HW filter on device bond4
[  204.653307][ T9338] bond0: (slave bond4): Enslaving as an active interface with an up link
[  204.787968][ T9351] netlink: 'syz.2.699': attribute type 10 has an invalid length.
[  204.853416][ T9351] netlink: 40 bytes leftover after parsing attributes in process `syz.2.699'.
[  204.886331][ T9346] ip6tnl1: entered allmulticast mode
[  204.923587][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.701'.
[  204.976754][ T9351] veth0_vlan: entered allmulticast mode
[  204.984897][ T9351] bridge0: port 3(veth0_vlan) entered blocking state
[  204.999208][ T9351] bridge0: port 3(veth0_vlan) entered disabled state
[  205.014497][ T9351] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  205.158870][ T9183] hsr_slave_0: entered promiscuous mode
[  205.166027][ T9183] hsr_slave_1: entered promiscuous mode
[  205.172779][ T9183] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  205.180534][ T9183] Cannot create hsr debugfs directory
[  205.231365][ T9371] netlink: 32 bytes leftover after parsing attributes in process `syz.3.704'.
[  205.409830][ T9373] netlink: 'syz.1.705': attribute type 1 has an invalid length.
[  205.444319][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.703'.
[  205.619834][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.707'.
[  205.700184][ T9389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.707'.
[  206.037826][ T9396] netlink: 24 bytes leftover after parsing attributes in process `syz.1.710'.
[  206.122139][ T5834] Bluetooth: hci2: command tx timeout
[  208.093958][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'.
[  208.189982][ T9410] netlink: 'syz.4.714': attribute type 12 has an invalid length.
[  208.198605][ T9410] netlink: 132 bytes leftover after parsing attributes in process `syz.4.714'.
[  208.230135][ T5834] Bluetooth: hci2: command tx timeout
[  208.515669][ T9433] netlink: 'syz.4.717': attribute type 2 has an invalid length.
[  208.533547][ T9432] netlink: 'syz.4.717': attribute type 2 has an invalid length.
[  208.565015][ T9432] Tq€: entered promiscuous mode
[  208.909781][ T9448] bridge_slave_0: left allmulticast mode
[  208.933712][ T9448] bridge_slave_0: left promiscuous mode
[  208.942938][ T9448] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.969957][ T9448] bridge_slave_1: left allmulticast mode
[  208.978121][ T9448] bridge_slave_1: left promiscuous mode
[  209.002448][ T9448] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.037859][ T9448] bond0: (slave bond_slave_0): Releasing backup interface
[  209.075193][ T9448] bond0: (slave bond_slave_1): Releasing backup interface
[  209.144059][ T9448] team0: Port device team_slave_0 removed
[  209.179141][ T9448] team0: Port device team_slave_1 removed
[  209.195441][ T9448] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.208590][ T9448] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.221976][ T9448] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.231420][ T9448] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.278742][ T9448] team0: Port device wlan1 removed
[  209.288592][ T9448] batman_adv: batadv0: Interface deactivated: macvlan3
[  209.297504][ T9448] batman_adv: batadv0: Removing interface: macvlan3
[  209.357502][ T9450] bridge1: entered promiscuous mode
[  209.363222][ T9450] bridge1: entered allmulticast mode
[  209.378859][ T9450] team0: Port device bridge1 added
[  209.731216][ T9478] netlink: 312 bytes leftover after parsing attributes in process `syz.1.725'.
[  209.816398][ T9183] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  209.859962][ T9481] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  209.990976][ T9183] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  210.164771][ T9183] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  210.289396][ T9183] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  210.347515][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.732'.
[  210.435931][ T9504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  210.700024][ T9183] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.813389][ T9517] netlink: 88 bytes leftover after parsing attributes in process `syz.2.736'.
[  210.835140][ T9183] 8021q: adding VLAN 0 to HW filter on device team0
[  210.889699][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.896989][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.941869][ T9517] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.736'.
[  210.975574][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.982810][ T5100] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.140906][ T9183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  211.207736][ T9183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  211.337705][ T9534] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  211.370834][ T9534] macsec1: entered allmulticast mode
[  211.402670][ T9534] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  211.631926][ T9559] netlink: 16 bytes leftover after parsing attributes in process `syz.3.745'.
[  211.781471][ T9564] netlink: 'syz.1.746': attribute type 1 has an invalid length.
[  211.809405][ T9183] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.862574][ T9564] bond5: entered allmulticast mode
[  211.868133][ T9564] 8021q: adding VLAN 0 to HW filter on device bond5
[  211.887504][ T9568] bond5: (slave ip6gretap1): making interface the new active one
[  211.897716][ T9568] ip6gretap1: entered allmulticast mode
[  211.906689][ T9568] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link
[  211.935257][ T9574] hsr0: entered promiscuous mode
[  211.957151][ T9574] macvtap1: entered allmulticast mode
[  211.973917][ T9574] hsr0: entered allmulticast mode
[  211.979131][ T9574] hsr_slave_0: entered allmulticast mode
[  212.016786][ T9574] hsr_slave_1: entered allmulticast mode
[  212.055966][ T9574] hsr0: left allmulticast mode
[  212.069867][ T9574] hsr_slave_0: left allmulticast mode
[  212.076937][ T9574] hsr_slave_1: left allmulticast mode
[  212.181885][ T9567] netlink: 'syz.3.748': attribute type 21 has an invalid length.
[  212.197428][ T9567] netlink: 152 bytes leftover after parsing attributes in process `syz.3.748'.
[  212.217486][ T9183] veth0_vlan: entered promiscuous mode
[  212.242624][ T9183] veth1_vlan: entered promiscuous mode
[  212.321395][ T9183] veth0_macvtap: entered promiscuous mode
[  212.367720][ T9183] veth1_macvtap: entered promiscuous mode
[  212.425894][ T9183] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.470621][ T9183] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.515556][ T9183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.572725][ T9183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.581647][ T9183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.612907][ T9183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.727365][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'.
[  212.836576][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.878976][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.974787][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'.
[  212.982221][ T8012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.007710][ T8012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.313920][ T5850] Bluetooth: hci3: command 0x0406 tx timeout
[  213.320045][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout
[  213.327821][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  213.879829][   T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.158591][   T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.311318][   T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.641169][   T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.801829][   T53] bridge_slave_1: left allmulticast mode
[  214.807863][   T53] bridge_slave_1: left promiscuous mode
[  214.814003][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.824320][   T53] bridge_slave_0: left allmulticast mode
[  214.830138][   T53] bridge_slave_0: left promiscuous mode
[  214.837777][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.065628][ T9683] x_tables: ip6_tables: SNPT target: used from hooks PREROUTING, but only usable from INPUT/POSTROUTING
[  215.638382][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  215.658315][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  215.679208][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  215.690390][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  215.700148][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  215.707839][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  215.841749][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.769'.
[  215.938602][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  215.957531][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  215.976953][   T53] bond0 (unregistering): Released all slaves
[  216.226991][ T9732] netlink: 'syz.4.771': attribute type 1 has an invalid length.
[  216.248218][ T9734] netlink: 16 bytes leftover after parsing attributes in process `syz.1.770'.
[  216.427326][ T9690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  216.494295][ T9690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.574133][ T9690] bond0 (unregistering): (slave team0): Releasing backup interface
[  216.635865][ T9690] bond0 (unregistering): Released all slaves
[  216.699585][ T9718] bridge0: entered allmulticast mode
[  216.735787][ T9726] netlink: 'syz.1.770': attribute type 3 has an invalid length.
[  216.922319][ T9728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.770'.
[  216.941483][ T9728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.770'.
[  216.968404][ T9728] netlink: 32 bytes leftover after parsing attributes in process `syz.1.770'.
[  216.982779][   T35] tipc: Subscription rejected, illegal request
[  217.005378][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'.
[  217.397600][ T9757] netlink: 96 bytes leftover after parsing attributes in process `syz.4.775'.
[  217.613562][   T53] hsr_slave_0: left promiscuous mode
[  217.621357][   T53] hsr_slave_1: left promiscuous mode
[  217.627990][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.647412][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  217.658427][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.668641][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  217.716319][   T53] veth1_macvtap: left promiscuous mode
[  217.724893][   T53] veth0_macvtap: left promiscuous mode
[  217.730576][   T53] veth1_vlan: left promiscuous mode
[  217.740277][   T53] veth0_vlan: left promiscuous mode
[  217.758455][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.778'.
[  217.793526][ T5841] Bluetooth: hci2: command tx timeout
[  218.617551][   T53] team0 (unregistering): Port device team_slave_1 removed
[  218.725668][   T53] team0 (unregistering): Port device team_slave_0 removed
[  219.267614][ T9764] netlink: 32 bytes leftover after parsing attributes in process `syz.3.778'.
[  219.279763][ T9764] tipc: Invalid UDP bearer configuration
[  219.281044][ T9764] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  219.306380][ T9786] netlink: 'syz.4.781': attribute type 1 has an invalid length.
[  219.327149][ T9786] netlink: 224 bytes leftover after parsing attributes in process `syz.4.781'.
[  219.756613][ T9706] chnl_net:caif_netlink_parms(): no params data found
[  219.872634][ T5841] Bluetooth: hci2: command tx timeout
[  220.321683][ T9706] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.342630][ T9706] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.372367][ T9706] bridge_slave_0: entered allmulticast mode
[  220.398509][ T9706] bridge_slave_0: entered promiscuous mode
[  220.450916][ T9706] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.480733][ T9706] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.499558][ T9706] bridge_slave_1: entered allmulticast mode
[  220.521576][ T9706] bridge_slave_1: entered promiscuous mode
[  220.585594][ T9845] syzkaller1: entered promiscuous mode
[  220.603135][ T9845] syzkaller1: entered allmulticast mode
[  220.686452][ T9706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  220.716629][ T9706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  220.956325][ T9865] smc: net device bond0 erased user defined pnetid SYZ0
[  221.004144][ T9706] team0: Port device team_slave_0 added
[  221.014264][ T9706] team0: Port device team_slave_1 added
[  221.156594][ T9706] batman_adv: batadv0: Adding interface: batadv_slave_0
[  221.185397][ T9706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.252692][ T9880] __nla_validate_parse: 2 callbacks suppressed
[  221.252715][ T9880] netlink: 244 bytes leftover after parsing attributes in process `syz.3.799'.
[  221.259844][ T9706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  221.297709][ T9880] GUP no longer grows the stack in syz.3.799 (9880): 20006000-2000a000 (20005000)
[  221.326886][ T9706] batman_adv: batadv0: Adding interface: batadv_slave_1
[  221.336144][ T9706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.347947][ T9880] CPU: 1 UID: 0 PID: 9880 Comm: syz.3.799 Not tainted 6.13.0-rc6-syzkaller-00970-g7d0da8f86234 #0
[  221.362444][ T9706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  221.372764][ T9880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  221.372798][ T9880] Call Trace:
[  221.372810][ T9880]  <TASK>
[  221.372822][ T9880]  dump_stack_lvl+0x241/0x360
[  221.372876][ T9880]  ? __pfx_dump_stack_lvl+0x10/0x10
[  221.409640][ T9880]  ? __pfx__printk+0x10/0x10
[  221.414355][ T9880]  ? find_vma+0xf9/0x170
[  221.418662][ T9880]  __get_user_pages+0x4385/0x49e0
[  221.423747][ T9880]  ? __pfx_lock_acquire+0x10/0x10
[  221.428895][ T9880]  ? mark_lock+0x9a/0x360
[  221.433265][ T9880]  ? __lock_acquire+0x1397/0x2100
[  221.438346][ T9880]  ? __pfx___get_user_pages+0x10/0x10
[  221.443868][ T9880]  ? __gup_longterm_locked+0xd2f/0x17f0
[  221.449444][ T9880]  ? __pfx_down_read_killable+0x10/0x10
[  221.455046][ T9880]  ? __pfx_lock_acquire+0x10/0x10
[  221.460109][ T9880]  ? try_get_folio+0xf1/0x6f0
[  221.464819][ T9880]  ? __pfx_lock_release+0x10/0x10
[  221.469880][ T9880]  __gup_longterm_locked+0xe64/0x17f0
[  221.475314][ T9880]  ? mark_lock+0x9a/0x360
[  221.479744][ T9880]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  221.485767][ T9880]  ? __pfx___gup_longterm_locked+0x10/0x10
[  221.491608][ T9880]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  221.497971][ T9880]  ? gup_fast_fallback+0x207e/0x29c0
[  221.503289][ T9880]  gup_fast_fallback+0x2266/0x29c0
[  221.508456][ T9880]  ? __pfx_gup_fast_fallback+0x10/0x10
[  221.513977][ T9880]  ? __mutex_trylock_common+0x183/0x2e0
[  221.519582][ T9880]  ? __pfx___might_resched+0x10/0x10
[  221.524932][ T9880]  ? is_valid_gup_args+0x124/0x200
[  221.530078][ T9880]  get_user_pages_fast+0xcc/0x160
[  221.535139][ T9880]  ? __pfx_get_user_pages_fast+0x10/0x10
[  221.540794][ T9880]  ? rcu_is_watching+0x15/0xb0
[  221.545600][ T9880]  ? trace_contention_end+0x3c/0x120
[  221.550922][ T9880]  ? __mutex_lock+0x37f/0xee0
[  221.555639][ T9880]  __iov_iter_get_pages_alloc+0x3b4/0x8e0
[  221.561405][ T9880]  iov_iter_get_pages2+0xcf/0x130
[  221.566464][ T9880]  ? __pfx_iov_iter_get_pages2+0x10/0x10
[  221.572138][ T9880]  __se_sys_vmsplice+0x740/0x1490
[  221.577195][ T9880]  ? plist_del+0x3f1/0x410
[  221.581681][ T9880]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  221.587176][ T9880]  ? __pfx_futex_wake+0x10/0x10
[  221.592107][ T9880]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  221.598127][ T9880]  ? do_syscall_64+0x100/0x230
[  221.602926][ T9880]  ? do_syscall_64+0xb6/0x230
[  221.607641][ T9880]  do_syscall_64+0xf3/0x230
[  221.612173][ T9880]  ? clear_bhb_loop+0x35/0x90
[  221.616888][ T9880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.622912][ T9880] RIP: 0033:0x7f445eb85d29
[  221.627364][ T9880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  221.647024][ T9880] RSP: 002b:00007f445fa1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  221.655484][ T9880] RAX: ffffffffffffffda RBX: 00007f445ed76080 RCX: 00007f445eb85d29
[  221.663484][ T9880] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000005
[  221.671482][ T9880] RBP: 00007f445ec01b08 R08: 0000000000000000 R09: 0000000000000000
[  221.679493][ T9880] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  221.687655][ T9880] R13: 0000000000000000 R14: 00007f445ed76080 R15: 00007ffe5f70ac68
[  221.695670][ T9880]  </TASK>
[  221.805717][ T9884] dvmrp1: entered allmulticast mode
[  221.960248][ T5841] Bluetooth: hci2: command tx timeout
[  222.086243][ T9706] hsr_slave_0: entered promiscuous mode
[  222.103409][ T9706] hsr_slave_1: entered promiscuous mode
[  222.118024][ T9706] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  222.139714][ T9706] Cannot create hsr debugfs directory
[  222.828782][ T9932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.811'.
[  222.839287][ T9932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.811'.
[  222.883590][ T9936] netlink: 48 bytes leftover after parsing attributes in process `syz.1.809'.
[  223.020379][ T9939] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.084138][ T9941] ieee802154 phy0 wpan0: encryption failed: -22
[  223.170503][ T9941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.812'.
[  223.732759][ T9961] netlink: 24 bytes leftover after parsing attributes in process `syz.2.818'.
[  223.780584][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.817'.
[  223.946439][ T9706] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  223.975358][ T9706] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  224.016478][ T9706] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  224.041249][ T5841] Bluetooth: hci2: command tx timeout
[  224.086278][ T9706] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  224.296002][ T9993] macsec2: entered allmulticast mode
[  224.301402][ T9993] macvlan0: entered allmulticast mode
[  224.340710][ T9993] macvlan0: left allmulticast mode
[  224.413193][ T9999] team0: Device macvtap1 failed to register rx_handler
[  224.717662][ T9706] 8021q: adding VLAN 0 to HW filter on device bond0
[  224.755539][T10011] netlink: 24 bytes leftover after parsing attributes in process `syz.2.826'.
[  224.761873][ T9706] 8021q: adding VLAN 0 to HW filter on device team0
[  224.784961][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.792190][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.851723][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.858986][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.863737][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.826'.
[  224.917799][T10011] mac80211_hwsim hwsim10 wlan0: Device is already in use.
[  225.731421][ T9706] 8021q: adding VLAN 0 to HW filter on device batadv0
[  225.874879][ T9706] veth0_vlan: entered promiscuous mode
[  226.111395][ T9706] veth1_vlan: entered promiscuous mode
[  226.140688][T10052] netlink: 44 bytes leftover after parsing attributes in process `syz.1.834'.
[  226.161822][ T9706] veth0_macvtap: entered promiscuous mode
[  226.174590][ T9706] veth1_macvtap: entered promiscuous mode
[  226.210498][T10053] netlink: 'syz.2.833': attribute type 1 has an invalid length.
[  226.269824][ T9706] batman_adv: batadv0: Interface activated: batadv_slave_0
[  226.282926][ T9706] batman_adv: batadv0: Interface activated: batadv_slave_1
[  226.314917][ T9706] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.332254][ T9706] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.341024][ T9706] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.369264][ T9706] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.399243][T10056] __nla_validate_parse: 1 callbacks suppressed
[  226.399269][T10056] netlink: 64 bytes leftover after parsing attributes in process `syz.2.835'.
[  226.508606][T10056] netlink: 'syz.2.835': attribute type 6 has an invalid length.
[  226.523399][T10056] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.835'.
[  226.539086][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.554534][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.627295][T10060] netlink: 'syz.3.837': attribute type 39 has an invalid length.
[  226.651240][T10058] netlink: 'syz.3.837': attribute type 39 has an invalid length.
[  226.675196][ T8013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.702328][ T8013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.141778][T10080] xt_CT: You must specify a L4 protocol and not use inversions on it
[  227.172819][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'.
[  227.217013][T10081] netlink: 24 bytes leftover after parsing attributes in process `syz.1.841'.
[  227.245619][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'.
[  227.458941][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.844'.
[  227.544370][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'.
[  227.573368][   T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.602449][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.846'.
[  227.631745][T10101] netlink: 32 bytes leftover after parsing attributes in process `syz.3.846'.
[  227.714358][ T5841] block nbd0: Receive control failed (result -107)
[  227.784201][T10101] nbd0: detected capacity change from 0 to 256
[  227.816855][ T5843] block nbd0: Dead connection, failed to find a fallback
[  227.827742][ T5843] block nbd0: shutting down sockets
[  227.834810][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  227.847171][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read
[  227.855462][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  227.857058][   T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.865804][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read
[  227.884768][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  227.894414][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read
[  227.925176][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  227.934593][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read
[  227.942746][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  227.972213][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read
[  227.982726][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  227.991940][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read
[  228.005143][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  228.025248][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read
[  228.033501][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  228.062989][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read
[  228.070972][ T5843] ldm_validate_partition_table(): Disk read failed.
[  228.086034][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  228.087573][   T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.096067][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read
[  228.114803][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  228.124291][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read
[  228.136218][ T5843] Dev nbd0: unable to read RDB block 0
[  228.145018][ T5843]  nbd0: unable to read partition table
[  228.156385][ T5843] ldm_validate_partition_table(): Disk read failed.
[  228.163699][ T5843] Dev nbd0: unable to read RDB block 0
[  228.169767][ T5843]  nbd0: unable to read partition table
[  228.197878][   T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.626709][T10107] xt_hashlimit: size too large, truncated to 1048576
[  228.635716][   T53] bridge_slave_1: left allmulticast mode
[  228.652578][   T53] bridge_slave_1: left promiscuous mode
[  228.658423][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.708716][T10113] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  228.722843][   T53] bridge_slave_0: left allmulticast mode
[  228.729185][   T53] bridge_slave_0: left promiscuous mode
[  228.762749][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.274719][T10137] netlink: 'syz.4.853': attribute type 1 has an invalid length.
[  229.282876][T10137] netlink: 224 bytes leftover after parsing attributes in process `syz.4.853'.
[  229.332585][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  229.342907][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  229.353662][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  229.370768][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  229.382929][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  229.396312][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  229.738669][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  229.752648][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  229.763390][   T53] bond0 (unregistering): Released all slaves
[  229.948547][T10153] xt_l2tp: v2 doesn't support IP mode
[  230.424172][T10174] syz.3.859 uses old SIOCAX25GETINFO
[  230.559214][T10187] --map-set only usable from mangle table
[  230.918972][   T53] hsr_slave_0: left promiscuous mode
[  230.943356][   T53] hsr_slave_1: left promiscuous mode
[  230.969247][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.992377][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  231.013512][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  231.029665][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  231.100692][   T53] veth1_macvtap: left promiscuous mode
[  231.117422][   T53] veth0_macvtap: left promiscuous mode
[  231.139012][   T53] veth1_vlan: left promiscuous mode
[  231.147160][   T53] veth0_vlan: left promiscuous mode
[  231.443101][T10222] __nla_validate_parse: 5 callbacks suppressed
[  231.443125][T10222] netlink: 24 bytes leftover after parsing attributes in process `syz.2.866'.
[  231.472562][ T5834] Bluetooth: hci2: command tx timeout
[  231.869302][   T53] team0 (unregistering): Port device team_slave_1 removed
[  231.919179][   T53] team0 (unregistering): Port device team_slave_0 removed
[  232.505396][T10141] chnl_net:caif_netlink_parms(): no params data found
[  232.583836][T10214] team_slave_1: entered allmulticast mode
[  232.590598][T10214] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[  232.652368][T10232] netlink: 'syz.1.869': attribute type 4 has an invalid length.
[  233.552149][ T5834] Bluetooth: hci2: command tx timeout
[  233.759279][T10141] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.783461][T10141] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.811460][T10141] bridge_slave_0: entered allmulticast mode
[  233.830432][T10141] bridge_slave_0: entered promiscuous mode
[  233.832804][T10270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.875'.
[  233.906784][T10141] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.929274][T10141] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.948052][T10141] bridge_slave_1: entered allmulticast mode
[  233.958421][T10141] bridge_slave_1: entered promiscuous mode
[  235.166589][T10141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.228182][T10141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.292984][T10141] team0: Port device team_slave_0 added
[  235.306069][T10141] team0: Port device team_slave_1 added
[  235.554320][T10141] batman_adv: batadv0: Adding interface: batadv_slave_0
[  235.561450][T10141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.652326][ T5834] Bluetooth: hci2: command tx timeout
[  235.674497][T10141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  235.722521][T10291] Bluetooth: MGMT ver 1.23
[  235.908039][T10141] batman_adv: batadv0: Adding interface: batadv_slave_1
[  235.917470][T10141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.997157][T10141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.206980][T10297] Cannot find add_set index 32768 as target
[  236.349059][T10141] hsr_slave_0: entered promiscuous mode
[  236.407222][T10141] hsr_slave_1: entered promiscuous mode
[  236.414846][T10141] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  236.422698][T10141] Cannot create hsr debugfs directory
[  236.518619][T10313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  236.525436][T10314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'.
[  236.656186][T10314] bridge0 (unregistering): left promiscuous mode
[  237.614632][T10344] netlink: 'syz.3.888': attribute type 1 has an invalid length.
[  237.661135][T10344] netlink: 224 bytes leftover after parsing attributes in process `syz.3.888'.
[  237.712738][ T5834] Bluetooth: hci2: command tx timeout
[  237.923587][T10349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.889'.
[  238.198997][T10363] netlink: 'syz.2.891': attribute type 2 has an invalid length.
[  238.209681][T10363] netlink: 'syz.2.891': attribute type 8 has an invalid length.
[  238.248263][T10364] x_tables: duplicate underflow at hook 2
[  238.258616][T10363] netlink: 132 bytes leftover after parsing attributes in process `syz.2.891'.
[  238.288005][T10354] x_tables: duplicate underflow at hook 1
[  238.300804][T10366] x_tables: duplicate underflow at hook 2
[  238.367218][T10357] netlink: 40 bytes leftover after parsing attributes in process `syz.3.890'.
[  238.613554][T10374] ==================================================================
[  238.621692][T10374] BUG: KASAN: slab-use-after-free in hci_sock_get_cookie+0x49/0x50
[  238.629646][T10374] Read of size 4 at addr ffff88807ce575b8 by task syz.2.893/10374
[  238.637493][T10374] 
[  238.639856][T10374] CPU: 0 UID: 0 PID: 10374 Comm: syz.2.893 Not tainted 6.13.0-rc6-syzkaller-00970-g7d0da8f86234 #0
[  238.650572][T10374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  238.660673][T10374] Call Trace:
[  238.663992][T10374]  <TASK>
[  238.667144][T10374]  dump_stack_lvl+0x241/0x360
[  238.671878][T10374]  ? __pfx_dump_stack_lvl+0x10/0x10
[  238.677141][T10374]  ? __pfx__printk+0x10/0x10
[  238.681787][T10374]  ? _printk+0xd5/0x120
[  238.685994][T10374]  ? __virt_addr_valid+0x183/0x530
[  238.691156][T10374]  ? __virt_addr_valid+0x183/0x530
[  238.696323][T10374]  print_report+0x169/0x550
[  238.700878][T10374]  ? __virt_addr_valid+0x183/0x530
[  238.706046][T10374]  ? __virt_addr_valid+0x183/0x530
[  238.711214][T10374]  ? __virt_addr_valid+0x45f/0x530
[  238.716379][T10374]  ? __phys_addr+0xba/0x170
[  238.720947][T10374]  ? hci_sock_get_cookie+0x49/0x50
[  238.726183][T10374]  kasan_report+0x143/0x180
[  238.730733][T10374]  ? hci_sock_get_cookie+0x49/0x50
[  238.735892][T10374]  hci_sock_get_cookie+0x49/0x50
[  238.740880][T10374]  mgmt_cmd_status+0x1be/0x4d0
[  238.745700][T10374]  cmd_complete_rsp+0x114/0x180
[  238.750608][T10374]  mgmt_pending_foreach+0xd1/0x130
[  238.755774][T10374]  ? __pfx_cmd_complete_rsp+0x10/0x10
[  238.761205][T10374]  __mgmt_power_off+0x183/0x430
[  238.766131][T10374]  ? __pfx___mgmt_power_off+0x10/0x10
[  238.771577][T10374]  ? __mutex_trylock_common+0x183/0x2e0
[  238.777183][T10374]  ? __pfx___might_resched+0x10/0x10
[  238.782521][T10374]  ? __pfx___mutex_trylock_common+0x10/0x10
[  238.786380][T10141] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  238.788457][T10374]  ? rcu_is_watching+0x15/0xb0
[  238.788500][T10374]  ? trace_contention_end+0x3c/0x120
[  238.805331][T10374]  ? __mutex_lock+0x37f/0xee0
[  238.810064][T10374]  ? mark_lock+0x9a/0x360
[  238.814452][T10374]  ? hci_dev_close_sync+0x5c8/0x11c0
[  238.819793][T10374]  ? __pfx___mutex_lock+0x10/0x10
[  238.824871][T10374]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  238.830919][T10374]  ? lockdep_hardirqs_on+0x99/0x150
[  238.836204][T10374]  ? _raw_spin_unlock_irq+0x2e/0x50
[  238.841445][T10374]  ? drain_workqueue+0x2d3/0x3a0
[  238.846427][T10374]  ? hci_discovery_set_state+0x57/0x180
[  238.852027][T10374]  hci_dev_close_sync+0x6c4/0x11c0
[  238.857199][T10374]  hci_dev_close+0x112/0x210
[  238.861840][T10374]  sock_do_ioctl+0x158/0x460
[  238.866480][T10374]  ? __pfx_sock_do_ioctl+0x10/0x10
[  238.871666][T10374]  sock_ioctl+0x626/0x8e0
[  238.876053][T10374]  ? __pfx_sock_ioctl+0x10/0x10
[  238.880968][T10374]  ? __fget_files+0x2a/0x410
[  238.885613][T10374]  ? __fget_files+0x2a/0x410
[  238.890270][T10374]  ? __pfx_sock_ioctl+0x10/0x10
[  238.895188][T10374]  __se_sys_ioctl+0xf5/0x170
[  238.899824][T10374]  do_syscall_64+0xf3/0x230
[  238.904400][T10374]  ? clear_bhb_loop+0x35/0x90
[  238.909136][T10374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.915081][T10374] RIP: 0033:0x7fe461d85d29
[  238.919544][T10374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  238.939194][T10374] RSP: 002b:00007fe462ca0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  238.947653][T10374] RAX: ffffffffffffffda RBX: 00007fe461f75fa0 RCX: 00007fe461d85d29
[  238.955663][T10374] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000008
[  238.963673][T10374] RBP: 00007fe461e01b08 R08: 0000000000000000 R09: 0000000000000000
[  238.971709][T10374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  238.979727][T10374] R13: 0000000000000000 R14: 00007fe461f75fa0 R15: 00007ffe25a1f6b8
[  238.987848][T10374]  </TASK>
[  238.990910][T10374] 
[  238.993272][T10374] Allocated by task 6843:
[  238.997636][T10374]  kasan_save_track+0x3f/0x80
[  239.002364][T10374]  __kasan_kmalloc+0x98/0xb0
[  239.007057][T10374]  __kmalloc_noprof+0x285/0x4c0
[  239.011961][T10374]  sk_prot_alloc+0xe0/0x210
[  239.016619][T10374]  sk_alloc+0x38/0x370
[  239.020746][T10374]  bt_sock_alloc+0x3c/0x340
[  239.025571][T10374]  hci_sock_create+0xa1/0x190
[  239.030319][T10374]  bt_sock_create+0x161/0x230
[  239.035063][T10374]  __sock_create+0x4c0/0xa30
[  239.039701][T10374]  __sys_socket+0x150/0x3c0
[  239.044259][T10374]  __x64_sys_socket+0x7a/0x90
[  239.049035][T10374]  do_syscall_64+0xf3/0x230
[  239.053587][T10374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.059548][T10374] 
[  239.061902][T10374] Freed by task 10375:
[  239.066036][T10374]  kasan_save_track+0x3f/0x80
[  239.070756][T10374]  kasan_save_free_info+0x40/0x50
[  239.075832][T10374]  __kasan_slab_free+0x59/0x70
[  239.080654][T10374]  kfree+0x196/0x430
[  239.084593][T10374]  __sk_destruct+0x479/0x5f0
[  239.089227][T10374]  mgmt_pending_remove+0x13e/0x1a0
[  239.094391][T10374]  mgmt_pending_foreach+0xd1/0x130
[  239.099553][T10374]  mgmt_index_removed+0x133/0x390
[  239.104628][T10374]  hci_sock_bind+0xcce/0x1150
[  239.109373][T10374]  __sys_bind+0x1e4/0x290
[  239.113740][T10374]  __x64_sys_bind+0x7a/0x90
[  239.118277][T10374]  do_syscall_64+0xf3/0x230
[  239.122840][T10374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.128784][T10374] 
[  239.131137][T10374] The buggy address belongs to the object at ffff88807ce57000
[  239.131137][T10374]  which belongs to the cache kmalloc-2k of size 2048
[  239.145259][T10374] The buggy address is located 1464 bytes inside of
[  239.145259][T10374]  freed 2048-byte region [ffff88807ce57000, ffff88807ce57800)
[  239.159390][T10374] 
[  239.161740][T10374] The buggy address belongs to the physical page:
[  239.168192][T10374] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ce50
[  239.176997][T10374] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  239.185542][T10374] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  239.193562][T10374] page_type: f5(slab)
[  239.197603][T10374] raw: 00fff00000000040 ffff88801ac42000 0000000000000000 dead000000000001
[  239.206239][T10374] raw: 0000000000000000 0000000000080008 00000001f5000000 0000000000000000
[  239.214870][T10374] head: 00fff00000000040 ffff88801ac42000 0000000000000000 dead000000000001
[  239.223769][T10374] head: 0000000000000000 0000000000080008 00000001f5000000 0000000000000000
[  239.232486][T10374] head: 00fff00000000003 ffffea0001f39401 ffffffffffffffff 0000000000000000
[  239.241241][T10374] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  239.249951][T10374] page dumped because: kasan: bad access detected
[  239.256422][T10374] page_owner tracks the page as allocated
[  239.262171][T10374] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5836, tgid 5836 (syz-executor), ts 91974563920, free_ts 91945523144
[  239.283523][T10374]  post_alloc_hook+0x1f3/0x230
[  239.288541][T10374]  get_page_from_freelist+0x365c/0x37a0
[  239.294152][T10374]  __alloc_pages_noprof+0x292/0x710
[  239.299403][T10374]  alloc_pages_mpol_noprof+0x3e8/0x680
[  239.304915][T10374]  alloc_slab_page+0x6a/0x110
[  239.309639][T10374]  allocate_slab+0x5a/0x2b0
[  239.314181][T10374]  ___slab_alloc+0xc27/0x14a0
[  239.318906][T10374]  __slab_alloc+0x58/0xa0
[  239.323289][T10374]  __kmalloc_node_track_caller_noprof+0x2e9/0x4c0
[  239.329763][T10374]  kmalloc_reserve+0x111/0x2a0
[  239.334622][T10374]  pskb_expand_head+0x1f0/0x1380
[  239.339614][T10374]  netlink_trim+0x1d6/0x2e0
[  239.344162][T10374]  netlink_broadcast_filtered+0x76/0x12a0
[  239.349930][T10374]  nlmsg_notify+0xfb/0x1c0
[  239.354399][T10374]  rtnetlink_event+0x21d/0x260
[  239.359300][T10374]  notifier_call_chain+0x1a5/0x3f0
[  239.364460][T10374] page last free pid 8 tgid 8 stack trace:
[  239.370293][T10374]  free_unref_page+0xd3f/0x1010
[  239.375280][T10374]  __slab_free+0x2c2/0x380
[  239.379752][T10374]  qlist_free_all+0x9a/0x140
[  239.384396][T10374]  kasan_quarantine_reduce+0x14f/0x170
[  239.389998][T10374]  __kasan_slab_alloc+0x23/0x80
[  239.394901][T10374]  kmem_cache_alloc_node_noprof+0x1d9/0x380
[  239.400855][T10374]  __alloc_skb+0x1c3/0x440
[  239.405344][T10374]  alloc_skb_with_frags+0xc3/0x820
[  239.410517][T10374]  sock_alloc_send_pskb+0x91a/0xa60
[  239.415775][T10374]  mld_newpack+0x1c3/0xaf0
[  239.420332][T10374]  add_grec+0x1492/0x19a0
[  239.424719][T10374]  mld_ifc_work+0x691/0xd90
[  239.429282][T10374]  process_scheduled_works+0xa66/0x1840
[  239.434877][T10374]  worker_thread+0x870/0xd30
[  239.439510][T10374]  kthread+0x2f0/0x390
[  239.443625][T10374]  ret_from_fork+0x4b/0x80
[  239.448087][T10374] 
[  239.450451][T10374] Memory state around the buggy address:
[  239.456120][T10374]  ffff88807ce57480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  239.464243][T10374]  ffff88807ce57500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  239.472481][T10374] >ffff88807ce57580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  239.480689][T10374]                                         ^
[  239.486623][T10374]  ffff88807ce57600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  239.494817][T10374]  ffff88807ce57680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  239.502945][T10374] ==================================================================
[  239.520505][T10374] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  239.527774][T10374] CPU: 0 UID: 0 PID: 10374 Comm: syz.2.893 Not tainted 6.13.0-rc6-syzkaller-00970-g7d0da8f86234 #0
[  239.538501][T10374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  239.548599][T10374] Call Trace:
[  239.551919][T10374]  <TASK>
[  239.554884][T10374]  dump_stack_lvl+0x241/0x360
[  239.559634][T10374]  ? __pfx_dump_stack_lvl+0x10/0x10
[  239.564901][T10374]  ? __pfx__printk+0x10/0x10
[  239.569558][T10374]  ? preempt_schedule+0xe1/0xf0
[  239.574461][T10374]  ? vscnprintf+0x5d/0x90
[  239.578834][T10374]  panic+0x349/0x880
[  239.582885][T10374]  ? check_panic_on_warn+0x21/0xb0
[  239.588068][T10374]  ? __pfx_panic+0x10/0x10
[  239.592544][T10374]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[  239.598672][T10374]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  239.605059][T10374]  ? print_report+0x502/0x550
[  239.609812][T10374]  check_panic_on_warn+0x86/0xb0
[  239.614813][T10374]  ? hci_sock_get_cookie+0x49/0x50
[  239.619995][T10374]  end_report+0x77/0x160
[  239.624401][T10374]  kasan_report+0x154/0x180
[  239.628997][T10374]  ? hci_sock_get_cookie+0x49/0x50
[  239.634191][T10374]  hci_sock_get_cookie+0x49/0x50
[  239.639212][T10374]  mgmt_cmd_status+0x1be/0x4d0
[  239.644044][T10374]  cmd_complete_rsp+0x114/0x180
[  239.648960][T10374]  mgmt_pending_foreach+0xd1/0x130
[  239.654222][T10374]  ? __pfx_cmd_complete_rsp+0x10/0x10
[  239.659774][T10374]  __mgmt_power_off+0x183/0x430
[  239.664698][T10374]  ? __pfx___mgmt_power_off+0x10/0x10
[  239.670134][T10374]  ? __mutex_trylock_common+0x183/0x2e0
[  239.675738][T10374]  ? __pfx___might_resched+0x10/0x10
[  239.681094][T10374]  ? __pfx___mutex_trylock_common+0x10/0x10
[  239.687092][T10374]  ? rcu_is_watching+0x15/0xb0
[  239.691915][T10374]  ? trace_contention_end+0x3c/0x120
[  239.697357][T10374]  ? __mutex_lock+0x37f/0xee0
[  239.702089][T10374]  ? mark_lock+0x9a/0x360
[  239.706475][T10374]  ? hci_dev_close_sync+0x5c8/0x11c0
[  239.711813][T10374]  ? __pfx___mutex_lock+0x10/0x10
[  239.717042][T10374]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  239.723087][T10374]  ? lockdep_hardirqs_on+0x99/0x150
[  239.728361][T10374]  ? _raw_spin_unlock_irq+0x2e/0x50
[  239.733622][T10374]  ? drain_workqueue+0x2d3/0x3a0
[  239.738626][T10374]  ? hci_discovery_set_state+0x57/0x180
[  239.744237][T10374]  hci_dev_close_sync+0x6c4/0x11c0
[  239.749424][T10374]  hci_dev_close+0x112/0x210
[  239.754078][T10374]  sock_do_ioctl+0x158/0x460
[  239.758736][T10374]  ? __pfx_sock_do_ioctl+0x10/0x10
[  239.763915][T10374]  sock_ioctl+0x626/0x8e0
[  239.768297][T10374]  ? __pfx_sock_ioctl+0x10/0x10
[  239.773214][T10374]  ? __fget_files+0x2a/0x410
[  239.777860][T10374]  ? __fget_files+0x2a/0x410
[  239.782505][T10374]  ? __pfx_sock_ioctl+0x10/0x10
[  239.787413][T10374]  __se_sys_ioctl+0xf5/0x170
[  239.792042][T10374]  do_syscall_64+0xf3/0x230
[  239.796591][T10374]  ? clear_bhb_loop+0x35/0x90
[  239.801323][T10374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.807270][T10374] RIP: 0033:0x7fe461d85d29
[  239.811739][T10374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  239.831389][T10374] RSP: 002b:00007fe462ca0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  239.839856][T10374] RAX: ffffffffffffffda RBX: 00007fe461f75fa0 RCX: 00007fe461d85d29
[  239.847873][T10374] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000008
[  239.855889][T10374] RBP: 00007fe461e01b08 R08: 0000000000000000 R09: 0000000000000000
[  239.863905][T10374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  239.871918][T10374] R13: 0000000000000000 R14: 00007fe461f75fa0 R15: 00007ffe25a1f6b8
[  239.879942][T10374]  </TASK>
[  239.883280][T10374] Kernel Offset: disabled
[  239.887613][T10374] Rebooting in 86400 seconds..