last executing test programs:

1m41.155009853s ago: executing program 1 (id=261):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x1, 0x5}, 0x8)
read(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='8', 0x1}], 0x1}}], 0x1, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0], 0xfc}}, 0x800)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffd8)

52.471303003s ago: executing program 1 (id=261):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x1, 0x5}, 0x8)
read(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='8', 0x1}], 0x1}}], 0x1, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0], 0xfc}}, 0x800)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffd8)

40.874141418s ago: executing program 1 (id=261):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x1, 0x5}, 0x8)
read(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='8', 0x1}], 0x1}}], 0x1, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0], 0xfc}}, 0x800)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffd8)

31.287517822s ago: executing program 1 (id=261):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x1, 0x5}, 0x8)
read(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='8', 0x1}], 0x1}}], 0x1, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0], 0xfc}}, 0x800)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffd8)

18.849953398s ago: executing program 1 (id=261):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x1, 0x5}, 0x8)
read(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='8', 0x1}], 0x1}}], 0x1, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0], 0xfc}}, 0x800)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffd8)

9.487152551s ago: executing program 1 (id=261):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x1, 0x5}, 0x8)
read(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='8', 0x1}], 0x1}}], 0x1, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0], 0xfc}}, 0x800)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffd8)

6.048210131s ago: executing program 2 (id=1645):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x4000010, 0xffffffffffffffff, 0xa45e1000) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'freezer'}, {0x2d, 'rlimit'}, {0x2d, 'blkio'}, {0x2b, 'rlimit'}]}, 0x20) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) (async)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={<r3=>0x0, 0x7, 0xa, 0x400, 0x0, 0x80000000}, &(0x7f00000001c0)=0x14) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0}) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001280), r8)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r9, @ANYBLOB="010025bd7000fbdbdf250100000000e4f3000c410000fff4001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x40404c7}, 0x24004010) (async)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000200)={r3, 0x2, 0x20}, 0xc)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000300), 0x4)

5.843478225s ago: executing program 2 (id=1647):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f42fc3199f000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af735ed41793bdf9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbc68223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f00001000000000eeff7c5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729eec082830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d424c14283a94395b64645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d620100000000000000494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd779a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9b0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000002684c2d8eb8cac98930fa6a893ca44c0f64c07a87eb7b05f56ca6c70cb3a0eb328a15fe96a88235155e6d64bd434f641ddf9db2245e47e5904453577895dd81d"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r0, 0x0, 0x1000000000000}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet6_sctp(0xa, 0x1, 0x84)
pipe(0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000004781000000000000000000001d0109000800108004000000"], 0x1c}}, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000400), 0x9)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x4c}}, 0x0)
r4 = socket(0x2a, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000091181b000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'})
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x24}}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x814}, 0x4880)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r8 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}})

5.291705588s ago: executing program 2 (id=1650):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)}, 0x4004010)

5.183549193s ago: executing program 2 (id=1652):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)
listen(r0, 0x8)
ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0200"], 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r3, 0x2, 0x1, 0x400000, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="30005d2fb2ab3ecb173f18d9b10ced783b00001000010800000000fbdbdf2500400000", @ANYRES32=0x0, @ANYBLOB="0080000000000000080025000100000008001e0006000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50)

5.089122346s ago: executing program 2 (id=1653):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4810}, 0x44020)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000640)={@broadcast, @local, @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@llc_tr={0x11, {@llc={0xf4, 0x4, 'c\f', "f2803c09038f244e762d31711f3b47f10425d5e0e2b82327c686b1aeb3df67639f3eb4b72e2e92c896095b8b3caa687d58a62c5f8e53ed5b0984e40e1bc7d2a7fa108c1d50a3403981f441e3c8a00d946bff80421fcdc3c9f08399b6f026157f2d0c12738b0cd7cb73dcc9ae57ac123838f7199a687da91563add1509b4fafd0dc51ed58398917aee72712a73f2ecc66efe2efde24189563"}}}}}, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10)
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411})
ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0x9)
ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x18)
r5 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r5, &(0x7f0000000400)={0xa, 0x4e23, 0x37fffd, @loopback, 0x8}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$packet(0x11, 0x2, 0x300) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4810}, 0x44020) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) (async)
socket$packet(0x11, 0x2, 0x300) (async)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000640)={@broadcast, @local, @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@llc_tr={0x11, {@llc={0xf4, 0x4, 'c\f', "f2803c09038f244e762d31711f3b47f10425d5e0e2b82327c686b1aeb3df67639f3eb4b72e2e92c896095b8b3caa687d58a62c5f8e53ed5b0984e40e1bc7d2a7fa108c1d50a3403981f441e3c8a00d946bff80421fcdc3c9f08399b6f026157f2d0c12738b0cd7cb73dcc9ae57ac123838f7199a687da91563add1509b4fafd0dc51ed58398917aee72712a73f2ecc66efe2efde24189563"}}}}}, 0x0) (async)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) (async)
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) (async)
ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0x9) (async)
ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x18) (async)
socket$inet6(0xa, 0x6, 0x0) (async)
connect$inet6(r5, &(0x7f0000000400)={0xa, 0x4e23, 0x37fffd, @loopback, 0x8}, 0x1c) (async)

4.044507295s ago: executing program 2 (id=1654):
r0 = socket$nl_route(0x10, 0x3, 0x0)
pread64(r0, &(0x7f0000000580)=""/103, 0x67, 0xfffffffffffffffb) (async)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="18000000000000001c001280090b001900000000000004000c00028008000300ffffffea"], 0x3c}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='sched_switch\x00', r1}, 0x10) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r2}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r2}, 0x38) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46e8953ab1abda45cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d35c32aac1c7d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f0000000000000000b2728a04816cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad30000000000000003626165866c154e2514890000b515a1000000000000000eb2e9c15b6c8f6198282d0086fa0000c2ccf3f6d69cfcf1e15ea7a9e57aee78e12ace55736fa42811654e19a7e9b531636794a718b4766d744263b6681da2b2204d848619a3eb62e77460c048df8e72bfe31438163ec4270439b350274e5aa941bfc32ce08e3790dfb0c59bbe45cd27264669c187eed6d67b3be191137814bcb226b2078a1bc45502705d538d8723113445b08b0ac8dc2dfa17fd79ed5fd33b14b0adabf72df024dcde1ef330b927ce1a80474ce4f99a292c71456ec1abbfbb61dc9f0f71395a1751d35fa1"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0xffff0000, 0x10, 0x0, &(0x7f00000000c0)="2b206d074843b39773764e72e6167ea4", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0xffffffff, 0x3}, 0x10) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async)
r5 = socket$inet(0x2, 0x4000000805, 0x0)
sendmmsg(r5, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}}], 0x2, 0x0) (async, rerun: 32)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x48) (rerun: 32)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r10) (async)
r12 = openat$cgroup_procs(r8, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r12, 0x40049421, 0x3)
sendmsg$NL80211_CMD_ADD_TX_TS(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="210b0000000000000000670000000c002a800000090000003301"], 0x20}}, 0x800) (async, rerun: 64)
r13 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64)
ioctl$sock_inet_SIOCADDRT(r13, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @local}, {0x4, 0x4e22, @rand_addr=0x64010101}, {0x2, 0x4e23, @remote}, 0x184, 0x0, 0x2000000, 0x0, 0x0, &(0x7f0000000180)='lo\x00', 0xffffffff}) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r9}, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

2.11140199s ago: executing program 4 (id=1676):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000100005ff000000001d0000000000004a905c8c2f691b6033fcf03e60f47e7f5655ed077caf117947d8a5160938eec67219cd5a53960879de3f20ceec", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="080002000900000008001f0001000000"], 0x50}}, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x0)
ioctl$int_in(r6, 0x5452, &(0x7f00000010c0)=0xffff)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6)
getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="ef8a", 0x2}], 0x1, 0x0, 0x0, 0x20040000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8040}}], 0x2, 0x24004000)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x48)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000012000000000000020000000900010073797af70000000014003fcce42f483c0c00"/46], 0x34}}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
r10 = openat$cgroup_ro(r7, &(0x7f0000000400)='pids.current\x00', 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3e, 0x3e, 0x6, [@datasec={0x4, 0x3, 0x0, 0xf, 0x2, [{0x5, 0xfbe6, 0x200}, {0x1, 0x53e2, 0x7494}, {0x2, 0x1, 0x400}], '\n='}, @const={0x6, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x2e, 0x2e, 0x30, 0x0]}}, &(0x7f0000000240)=""/28, 0x5e, 0x1c, 0x0, 0x8, 0x10000, @value=r10}, 0x28)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r12, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c)
sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e65766500006000028005000400010000001400070000000000000000000000000000000001060005004e20"], 0x90}}, 0x4048084)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x0, &(0x7f0000000600)={0x10000, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e21, @loopback}}}, 0x108)

2.012190706s ago: executing program 0 (id=1678):
r0 = socket$inet6(0xa, 0x803, 0x20)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty=0x18}}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7800000000010904000000000000000002000000240001801400018008000100ac1414bb08000200ac1414aa0c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c0002800500010000000000080007400000dfff130016"], 0x78}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7800000000010904000000000000000002000000240001801400018008000100ac1414bb08000200ac1414aa0c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c0002800500010000000000080007400000dfff130016"], 0x78}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x9d}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

1.810144253s ago: executing program 0 (id=1681):
r0 = socket(0x200000100000011, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
unshare(0x4000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r2=>0x0})
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x100010, r0, 0x6ce2f000)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4)
sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)={0x2c, 0x14, 0x0, 0x0, 0x0, "", [@generic="d96e6c8d5e85080045f00d80724e11d569116e3a1ce41e2a56"]}, 0x2c}], 0x1}, 0x10)
socket(0x200000100000011, 0x3, 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async)
unshare(0x4000000) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x100010, r0, 0x6ce2f000) (async)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) (async)
sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)={0x2c, 0x14, 0x0, 0x0, 0x0, "", [@generic="d96e6c8d5e85080045f00d80724e11d569116e3a1ce41e2a56"]}, 0x2c}], 0x1}, 0x10) (async)

1.699502133s ago: executing program 4 (id=1682):
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000180)={<r3=>0x0, 0xb8, "5b70c00c05417580542ed7fac84e9559c620c9cbcf9bf05891d518eb5a3f55df27036140075afb919a263fdf45f18d9371d9ee6a100655b5fe69c571f4155dc0d4ea227be93985fb4b17ad44569bb5e2cae53d072ed7a5b53253aa8ad7969586966ab8dfde1b91746d8aaf70d8b72f5a304c22dc0a582106c9a24e0fbe9ce00ed780d93840ae29714fea5f1efe14cc588ab06bf422a2100d7e737ee6d7953c12de63ba9d37f6d4a01523034a96bebe4050a8c5ee54153e8f"}, &(0x7f0000000080)=0xc0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280)={r3, 0xc, "89343bff692238f5215a77de"}, &(0x7f00000002c0)=0x14)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r4}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={0xffffffffffffffff, &(0x7f0000000380), 0x0}, 0x20)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000080a3b3a0000000000000200020000000900020073797a32000000000900010073797a30000000000c0003"], 0x80}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000400)={0x1c}, 0x1c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000140)={0x4}, 0x10)
write(r8, &(0x7f0000000000)="240000001a00df0214f9f407000904001f000000ff020002000200000800040001090000", 0x24)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0x1acc02, 0x148, 0x0, 0x10, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0x2f8, 0x320, 0x0, {0x0, 0x5803}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x10, './file0\x00'}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0)

1.557845632s ago: executing program 0 (id=1683):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x301)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x7d, 0x2}, {}, {0x4}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x4}}, 0xe8)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
close(r3)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000003, 0x8010, r1, 0xac606000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
close(r5)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'})

1.4115905s ago: executing program 4 (id=1685):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', <r2=>0x0})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r3, 0x4, 0x0, 0x8c6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@empty, 0x0, r2})

1.322234144s ago: executing program 4 (id=1687):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0x4, &(0x7f0000001000)=ANY=[@ANYBLOB="85000000a00000003500000000000000850000002a0000009500000000000000e135dee43f5d62cdaf5bb32c301264de232ce03ca47ce33647282102c7b4dba77c8ea9b6ee1398ae73749be1537086ae214b64880106f00574709ddccbce9ffab95dbc042fc0c3cd37b7baa14007c92d4cf2d339db6dc7229cdac23d9c280569e2db7a6231813205b5b8cbd97b7563dc4535c5eb2672b4fa56387ee22e9cf11ad8101ffb0f5530ca8f33b4d3ce79e89a48ced973c500000054299ffd9762b770e5ca8cda5cf566f06b6683eae1b41e5183e3f40e30f79e8c4afb7203e71a4dcefc7a45eab7e2b8296e3ab3009286337eed9787ec75fb6bfcf00d85df7b59419690f9c00796e2dd75a527a6b93fbee41c998f6096b369350f7140712335de4f5492bbe16949cc1a066d6805548760d200000000000000000000000000000000000000000000c04b1d32fa1c1da2d02b7df4bda7c0882cf97e1aa666e66e62fac83a52acf29d8ebdba51b0ea43f0e227ffcb167ca855d243980a61d9c6e2afa7d8b3231d7f2224296af9f1725df12807016b26eb8613b6d6d8bfbf1928e9172fd5691699"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x84b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a006d000007000000ff0f00001700000000e0ff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xf, 0x200000005c832, 0xffffffffffffffff, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000003c0)=@security={'security\x00', 0xe, 0x4, 0x3a8, 0xffffffff, 0xf8, 0xf8, 0x0, 0xffffffff, 0xffffffff, 0x438, 0x438, 0x438, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x8, "00d0"}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0xffffffff, 0xffffff00, 0x0, 0xffffff00], [0xffffffff, 0xffff00, 0xff000000, 0xff], 'erspan0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x2b, 0x3, 0xb, 0x42}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0xffff12dd, {0x9}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x507, 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) (async)
listen(0xffffffffffffffff, 0x6) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000104000000000000000000480000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001bfd0006d616373656300001400028005000d0008000000050009000100"], 0x44}}, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x10) (async)
close(0xffffffffffffffff)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) (async)
bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0x1a)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x4)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000", 0x3}], 0x1}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
socket$kcm(0x2, 0xa, 0x2)
write$tun(r8, &(0x7f0000000180)=ANY=[@ANYBLOB="00009300fffffffffffffffffffffff208004500001c00000000002f90780a010100e0000001a000655800089078"], 0x2e)
recvmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000011c0)=""/4085, 0xff5}, {0x0}], 0x2}, 0x0) (async)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, {0x306, @broadcast}, 0x4, {0x2, 0x0, @broadcast}}) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x21, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000005000000100000000018110000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000001b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000430000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x60, &(0x7f0000000040)=""/96, 0x41100, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000400)=[0xffffffffffffffff, 0x1], &(0x7f0000000440)=[{0x2, 0x1, 0x9, 0xc}, {0x1, 0x1, 0xf, 0x1}, {0x0, 0x3, 0x9, 0x5}, {0x3, 0x3, 0xc, 0xa}], 0x10, 0x5, @void, @value}, 0x94)

1.21452797s ago: executing program 4 (id=1688):
r0 = socket$netlink(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0xf)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x6645, 0x60004}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0xd}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x48}}, 0x4008040)

987.571492ms ago: executing program 4 (id=1689):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xa, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80ffffff, 0x0, 0x0, 0x0, 0x40000000}, [@alu={0x7, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
unshare(0x6a040000)
socket(0x40000000015, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x1000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001880)=ANY=[@ANYBLOB="38000001bcc4408cb41373bf0794f4f5150217cb67ff6c2c034061f57d9ebffef3ea8fe95c9d93ea9e670aba09640d0f562f64abc1ee530eb0231bec53eb934707ab7116b7b3a6cf479d65518cf79baf752e801c9c70d2f385fe0e08141970ee72caffdd4ac4a50e6f080b770726edcdad4d2d93a8cd61df7682d5e8bf96ece5a968edd7989a6624be85880fc4af966483e0375ebb537c83c8", @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000000c0002800400010004000380"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
recvmmsg(r1, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r8 = openat$cgroup_procs(r6, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f00000000c0), 0x12)
sendfile(r8, r7, 0x0, 0x5)
r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r9, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001980)={<r10=>0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000001a40)=0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000001a80)={r10, 0xb4d9}, &(0x7f0000001ac0)=0x8)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r11, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0)

843.244936ms ago: executing program 3 (id=1691):
unshare(0x400)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x1, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x2e, 0xe]}}, 0x0, 0x28, 0x0, 0x0, 0x7, 0x0, @void, @value}, 0x28)
socketpair(0x6, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
unshare(0x22020400)
getpeername$packet(r1, 0x0, &(0x7f0000000040)=0xfffffeec)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000fcffffff80120400000000009500000700040000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000910000000000000095"], &(0x7f0000000940)='syzkaller\x00', 0x8, 0xfe9, &(0x7f0000002e00)=""/4073, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000013000800000000000000000007000000", @ANYRES32, @ANYBLOB="00ca8e8a5984b2380a000500", @ANYRES32, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="190000ab74761e000400aa000500001900000000", @ANYRES32=r3, @ANYRESHEX=r0, @ANYRESDEC, @ANYRESOCT, @ANYRESHEX], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2, 0x0, 0x1}, 0x18)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffd96)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
r6 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r6, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback, 0x4002}, 0x1c)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='\r\x00', 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r8}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

787.569641ms ago: executing program 0 (id=1692):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x3, [@float={0x4, 0x0, 0x0, 0x10, 0x10}, @const={0xe, 0x0, 0x0, 0xa, 0x4}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0xe, 0x2}, {0xe, 0x3}, {0x0, 0x3}, {0x2, 0x3}, {0x1}, {0xe, 0x4}, {}, {0x1, 0x4}, {0x3, 0x1}]}, @const={0xa}]}, {0x0, [0x2e]}}, &(0x7f0000000300)=""/135, 0x93, 0x87, 0x0, 0x9, 0x0, @void, @value}, 0x28)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
write$cgroup_devices(r2, 0x0, 0xffdd)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r4}, 0x8) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r4}, 0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x71]}}, &(0x7f0000000c00)=""/122, 0x1b, 0x7a, 0x1, 0x0, 0x10000, @value}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d40)={0x2, <r6=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x4, 0x0, 0x0, &(0x7f0000000a80)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r4, 0x3, &(0x7f0000000e40)=[r3], &(0x7f0000000e80)=[{0x4, 0x3, 0x9, 0x3}, {0x0, 0x3, 0x0, 0x6}, {0x0, 0x2, 0x9, 0x8}], 0x10, 0x1, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x4, 0x0, 0x0, &(0x7f0000000a80)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r4, 0x3, &(0x7f0000000e40)=[r3], &(0x7f0000000e80)=[{0x4, 0x3, 0x9, 0x3}, {0x0, 0x3, 0x0, 0x6}, {0x0, 0x2, 0x9, 0x8}], 0x10, 0x1, @void, @value}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x4}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000000400)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xd, 0x7, 0xd}, 0x10, r6, 0x0, 0x2, 0x0, &(0x7f0000000480)=[{0x0, 0x3, 0xe, 0x1}, {0x5, 0x3, 0x1}], 0x10, 0x40, @void, @value}, 0x94)

711.741271ms ago: executing program 3 (id=1693):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@cgroup=r2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000040)="49000000010001", 0x7)
r4 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f00000016c0), 0x80000)
r5 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r7, &(0x7f0000000740)={&(0x7f0000000180)={0xa, 0x4e24, 0x2, @remote, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x4, 0x0, 0x2, 0x1f}}}], 0x18}, 0x80)
r8 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r8, 0x3)
r9 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r9, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
r10 = accept4(r8, 0x0, 0x0, 0x0)
mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
socket$rds(0x15, 0x5, 0x0)
sendmsg$key(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x40000)
sendmmsg(r9, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000000140)="e0", 0x1}], 0x1}}], 0x1, 0x4)
close(r10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r11=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e80)=@newlink={0x3c, 0x10, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0)
sendmsg$inet(r4, &(0x7f0000001c00)={&(0x7f0000001700)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000001a00)=[{&(0x7f0000001740)="12e1709ca2094803193a54ea6478e78734ac244875c1a4f48befb3b55ba95f8560ffdc49858fc4bf7b7ab237c285d5c90b3570e0856f408b87f4aae3e0bd439dbe217213256f083cc39f0002a79f1fba3231f2da81deef03a7ed65d00eeb1c2387a0054cd3c6272706a500bd925a0264e5b7ffffb9f4fd7c3d71a16342bd00e62c4cb1f262aae33af34f79fbffc80eca03a7f8c6a1615466644ab84dbd8896ed930b22fadab1663a6e22e245e3e1dcec56fb05d8788b9c84647e42a6ad869732d90de222fa4c2642009d2102811ebcbca69b1831f3caf45ffc6d5995755d210cdd", 0xe1}, {&(0x7f0000001840)="99ea4e01c34021480112acf90a1bc3eb2f461b2afe3b2957df3a7c1bf5a438515cb73b0719268382855cbb6ad210f2b213ac7c56ad0c393e6b89dd456579c274479e53b624176714af61fe02577c9baa9f12e59fb03f3d76c308b0205d06d88902812138a7963bffe0d33e8b307cd7447fabfb05d4ed5d5b4e5983847a4424f40594e08133ffc21f094014ee86b8bb6d090c152d4c6a03ff683e", 0x9a}, {&(0x7f0000001900)="8ec392e593630bcc084341531d15a6cfb15f9e195738091332169ba14542fb293a0de7f77314f7fb35ca4196337f5d2f9751daab30a0c5a651427afd86068f87eca8bf13aa637204c7206c2a5f07954a67e134b06ee4b8ddf00f8d7771b70e519e924bfa284ae234beb26549033ce1a5ba5806339190eca4a256688b9a8aa5f0b63683d52a00122f2bb527c0bd6144fca4c9080915c1d47361a44be361e3816af6d71fe17ed59da59e88986d21f3086aaba78c003ef12fe45b4bffa1d592d1d30168f878ff1fea8bad986541551b78a5847e2be2bd9c3c930a90afededb4506ca018794ec7ae144029d8c2", 0xeb}], 0x3, &(0x7f0000001a40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@cipso={0x86, 0x33, 0xfffffffffffffffc, [{0x1, 0x11, "76eb24fe96bad3c841c5840e2193fc"}, {0x0, 0xd, "752d1b148fc5e677bce560"}, {0x7, 0x7, "35e325a1d2"}, {0x7, 0x8, "eb62b31127a1"}]}, @generic={0x44, 0x5, "e2fc5a"}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0x80, 0x1, 0x4, [{@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x39d33f4}, {@remote}, {@private=0xa010102, 0x579ebee5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@private=0xa010101, 0x5}]}, @timestamp={0x44, 0x14, 0x3d, 0x0, 0x1, [0xa568, 0xffffffd0, 0x3, 0xfffff800]}, @timestamp={0x44, 0x10, 0x90, 0x0, 0xf, [0x800, 0x2, 0x9]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x14, 0x33, 0x1, 0x9, [{@multicast2, 0x800}, {@broadcast, 0x800}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @local, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x50, 0x0, 0x7, {[@generic={0x83, 0x3, '\b'}, @cipso={0x86, 0x25, 0x3, [{0x6, 0xe, "4001afd9f56e15bab69887ad"}, {0x6, 0x5, "ac5f63"}, {0x1, 0xc, "832af13ae1678091520e"}]}, @timestamp_prespec={0x44, 0x14, 0x8, 0x3, 0xa, [{@remote, 0xa3b}, {@remote, 0x1}]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x1b0}, 0x40)

596.24033ms ago: executing program 0 (id=1694):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0xcc054)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0xff, 0x1}, 0x1}, 0x18)
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r3=>0x0})
sendmsg$can_j1939(r1, &(0x7f0000000340)={&(0x7f00000002c0)={0x1d, r3, 0x2, {0x0, 0x1, 0x1}}, 0x18, &(0x7f0000000300)={&(0x7f0000000840)}, 0x1, 0x0, 0x0, 0x40800}, 0x40)

419.835173ms ago: executing program 3 (id=1695):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x32, &(0x7f0000001500)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0xa, 0x0, 0x8}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@ipv4_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x3, 0xfe, 0x3}, [@RTA_NH_ID={0x8, 0x1e, 0xfff}, @RTA_METRICS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4d4}, 0x4000050)

299.283669ms ago: executing program 3 (id=1696):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0)

172.981688ms ago: executing program 3 (id=1697):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x2000)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000002780)=""/4096, 0xc26bfe8e8f6baca8}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='cma_release\x00', r0, 0x0, 0xfffffffffffffffe}, 0xfffffe43)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58}, 0x10)
mmap(&(0x7f00005ff000/0x1000)=nil, 0x1000, 0x1000001, 0x11, r0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000})

107.498227ms ago: executing program 0 (id=1698):
r0 = socket$packet(0x11, 0x2, 0x300)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={r3, 0xb}, &(0x7f00000001c0)=0x8) (async)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={r3, 0xb}, &(0x7f00000001c0)=0x8)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r6, 0x21eae}}, 0x20}}, 0x8004)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x401, 0x0, 0x0, {0xa, 0x1f, 0x0, 0x0, r9}, [@IFA_CACHEINFO={0x14, 0x6, {0x4, 0x22, 0x3, 0x80000000}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001400010400000000000000000a000000", @ANYRES32=r6, @ANYBLOB="1400ac2afe880000000000000000000000000101"], 0x2c}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001400010400000000000000000a000000", @ANYRES32=r6, @ANYBLOB="1400ac2afe880000000000000000000000000101"], 0x2c}}, 0x0)
accept4(r5, &(0x7f0000000300)=@ax25={{0x3, @default}, [@remote, @netrom, @netrom, @null, @bcast, @netrom, @null, @default]}, &(0x7f00000003c0)=0x80, 0x80000)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0) (async)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0)
epoll_create1(0x80000) (async)
r10 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, 0xffffffffffffffff, 0x0)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r11, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
socket$inet6(0xa, 0x3, 0x5) (async)
r12 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
connect$inet6(r12, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000004480)={{{@in6=@empty, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {0x75f3, 0x0, 0x2000000009, 0x0, 0x2000000000000, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x3c}, 0x2, @in=@rand_addr=0x64010100, 0x0, 0x1}}, 0xe8)
getsockopt$inet_dccp_int(r1, 0x21, 0x6, &(0x7f0000000200), &(0x7f0000000240)=0x4)
sendmmsg(r12, &(0x7f0000000480), 0x21, 0x0) (async)
sendmmsg(r12, &(0x7f0000000480), 0x21, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x2, 0xfffff004}, {0x80000006}]}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x2, 0xfffff004}, {0x80000006}]}, 0x10)

0s ago: executing program 3 (id=1699):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000840)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x20, 0x1, 0x5fb, 0x8000, 0x10110, r0, 0xe8a, '\x00', r2, r0, 0x1, 0x5, 0x3, 0x0, @void, @value, @value=r3}, 0x50)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000180)=0x8, 0x4)
setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4)
getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000000b40), &(0x7f0000000b80)=0x30)
sendto$inet(r4, 0x0, 0xc3012aa9b37dbc88, 0x200007fd, &(0x7f0000000580)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r6, &(0x7f0000000c00)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x10, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @broadcast}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x38}}], 0x2, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x7, &(0x7f0000000680)={0x20ffffff}, 0x8)

kernel console output (not intermixed with test programs):

26.648172][ T8177] Node 0 active_anon:26808kB inactive_anon:0kB active_file:5656kB inactive_file:152804kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114708kB dirty:284kB writeback:0kB shmem:4076kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11156kB pagetables:2928kB sec_pagetables:0kB all_unreclaimable? no
[  126.682849][ T8177] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  126.714651][ T8177] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  126.747860][ T8177] lowmem_reserve[]: 0 2465 2466 0 0
[  126.778411][ T8177] Node 0 DMA32 free:1415764kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:26868kB inactive_anon:0kB active_file:5656kB inactive_file:151968kB unevictable:1536kB writepending:280kB present:3129332kB managed:2552844kB mlocked:0kB bounce:0kB free_pcp:1312kB local_pcp:472kB free_cma:0kB
[  126.809014][ T8177] lowmem_reserve[]: 0 0 0 0 0
[  126.814162][ T8177] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  126.820656][ T7364] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.841323][ T8177] lowmem_reserve[]: 0 0 0 0 0
[  126.856954][ T8177] Node 1 Normal free:3909396kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  126.886971][ T8177] lowmem_reserve[]: 0 0 0 0 0
[  126.891902][ T8177] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  126.904815][ T8177] Node 0 DMA32: 171*4kB (UM) 53*8kB (UME) 68*16kB (UME) 28*32kB (UME) 30*64kB (UME) 96*128kB (UME) 95*256kB (UME) 29*512kB (UM) 20*1024kB (UME) 12*2048kB (UME) 321*4096kB (M) = 1416340kB
[  126.924281][ T8177] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  126.936676][ T5838] Bluetooth: hci1: command tx timeout
[  126.943122][ T8177] Node 1 Normal: 209*4kB (UE) 63*8kB (UME) 39*16kB (UME) 198*32kB (UME) 101*64kB (UME) 35*128kB (UME) 22*256kB (UME) 5*512kB (UM) 5*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3909420kB
[  126.961629][ T8177] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  126.971279][ T8177] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  126.980591][ T8177] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  126.990406][ T8177] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  127.000024][ T8177] 41437 total pagecache pages
[  127.005052][ T8177] 0 pages in swap cache
[  127.009234][ T8177] Free swap  = 124996kB
[  127.013451][ T8177] Total swap = 124996kB
[  127.017626][ T8177] 2097051 pages RAM
[  127.021566][ T8177] 0 pages HighMem/MovableOnly
[  127.026266][ T8177] 426990 pages reserved
[  127.030441][ T8177] 0 pages cma reserved
[  127.030516][ T8144] chnl_net:caif_netlink_parms(): no params data found
[  127.324107][ T8202] netlink: 'syz.3.563': attribute type 2 has an invalid length.
[  127.338666][ T7364] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.410139][ T8196] macvtap1: entered promiscuous mode
[  127.419356][ T8196] erspan0: entered promiscuous mode
[  127.425345][ T8196] macvtap1: entered allmulticast mode
[  127.511011][ T8200] erspan0: left promiscuous mode
[  127.544161][ T8209] netlink: 'syz.2.566': attribute type 1 has an invalid length.
[  127.575223][ T7364] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.641415][ T8144] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.680989][ T8218] netlink: 'syz.4.568': attribute type 4 has an invalid length.
[  127.684700][ T8144] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.696918][ T8144] bridge_slave_0: entered allmulticast mode
[  127.726445][ T8144] bridge_slave_0: entered promiscuous mode
[  127.748618][ T8221] netlink: 'syz.4.568': attribute type 4 has an invalid length.
[  127.760145][ T8144] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.770129][ T8144] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.777674][ T8144] bridge_slave_1: entered allmulticast mode
[  127.785743][ T8144] bridge_slave_1: entered promiscuous mode
[  127.921027][ T8144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  127.939090][ T8144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.034713][ T8144] team0: Port device team_slave_0 added
[  128.099637][ T8144] team0: Port device team_slave_1 added
[  128.274348][ T7364] bridge_slave_1: left allmulticast mode
[  128.290883][ T7364] bridge_slave_1: left promiscuous mode
[  128.296858][ T7364] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.306409][ T7364] bridge_slave_0: left allmulticast mode
[  128.317353][ T7364] bridge_slave_0: left promiscuous mode
[  128.333763][ T7364] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.364528][ T8251] __nla_validate_parse: 13 callbacks suppressed
[  128.364548][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'.
[  128.436315][ T8253] netlink: 'syz.2.576': attribute type 17 has an invalid length.
[  128.447550][ T8253] netlink: 152 bytes leftover after parsing attributes in process `syz.2.576'.
[  128.573680][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'.
[  128.783252][ T7364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  128.794179][ T7364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  128.804423][ T7364] bond0 (unregistering): Released all slaves
[  128.816928][ T8144] batman_adv: batadv0: Adding interface: batadv_slave_0
[  128.824952][ T8144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.865149][ T8144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  128.879747][ T8144] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.888196][ T8144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.915227][ T8144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.946129][ T8253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  128.980316][ T8255] netlink: 64 bytes leftover after parsing attributes in process `syz.2.576'.
[  128.992031][ T5838] Bluetooth: hci1: command tx timeout
[  129.200198][ T8269] netlink: 188 bytes leftover after parsing attributes in process `syz.4.580'.
[  129.227309][ T8270] netlink: 188 bytes leftover after parsing attributes in process `syz.4.580'.
[  129.252082][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'.
[  129.260959][ T8272] veth0_to_bond: entered promiscuous mode
[  129.267457][ T8272] veth0_to_bond: entered allmulticast mode
[  129.293178][ T8279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.582'.
[  129.471691][ T8294] netlink: 'syz.2.585': attribute type 4 has an invalid length.
[  129.523260][ T8291] netlink: 'syz.2.585': attribute type 4 has an invalid length.
[  129.531549][ T8144] hsr_slave_0: entered promiscuous mode
[  129.549718][ T8144] hsr_slave_1: entered promiscuous mode
[  129.558029][ T8144] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  129.560402][ T8297] netlink: 160 bytes leftover after parsing attributes in process `syz.4.586'.
[  129.571848][ T8144] Cannot create hsr debugfs directory
[  129.581792][ T8296] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  130.025707][ T8311] netlink: 'syz.3.589': attribute type 5 has an invalid length.
[  130.138734][ T7364] hsr_slave_0: left promiscuous mode
[  130.160434][ T7364] hsr_slave_1: left promiscuous mode
[  130.175815][ T7364] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.176768][ T8330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.594'.
[  130.191199][ T7364] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.200872][ T7364] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.222967][ T8332] netlink: 'syz.2.595': attribute type 6 has an invalid length.
[  130.232545][ T8332] netlink: 'syz.2.595': attribute type 5 has an invalid length.
[  130.240405][ T7364] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.275943][ T7364] veth1_macvtap: left promiscuous mode
[  130.287375][ T7364] veth0_macvtap: left promiscuous mode
[  130.293275][ T7364] veth1_vlan: left promiscuous mode
[  130.298725][ T7364] veth0_vlan: left promiscuous mode
[  130.789429][ T7364] team0 (unregistering): Port device team_slave_1 removed
[  130.836594][ T7364] team0 (unregistering): Port device team_slave_0 removed
[  131.082530][ T5838] Bluetooth: hci1: command tx timeout
[  131.270426][ T8326] bond0: option mode: unable to set because the bond device has slaves
[  131.365297][ T8344] team0: Port device netdevsim0 added
[  131.385903][ T8346] x_tables: duplicate underflow at hook 1
[  131.451987][ T8348] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (5)
[  131.473560][ T8348] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (5)
[  131.803590][ T8360] infiniband syz0: set down
[  131.808416][ T5881] lo speed is unknown, defaulting to 1000
[  131.817564][ T5881] lo speed is unknown, defaulting to 1000
[  132.077378][ T8383] IPVS: sh: TCP 172.20.20.170:0 - no destination available
[  132.284974][ T8144] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  132.286425][ T8389] sctp: [Deprecated]: syz.0.610 (pid 8389) Use of int in maxseg socket option.
[  132.286425][ T8389] Use struct sctp_assoc_value instead
[  132.308608][ T8144] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  132.324548][ T8144] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  132.336932][ T8144] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  132.469236][ T8144] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.524955][ T8144] 8021q: adding VLAN 0 to HW filter on device team0
[  132.546783][ T4847] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.554015][ T4847] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.588177][ T1784] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.595459][ T1784] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.677094][ T8402] x_tables: duplicate underflow at hook 1
[  132.840617][ T8409] tc_dump_action: action bad kind
[  133.046695][ T8144] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.156562][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  133.165010][ T5838] Bluetooth: hci1: command tx timeout
[  133.235091][ T8144] veth0_vlan: entered promiscuous mode
[  133.248076][ T8144] veth1_vlan: entered promiscuous mode
[  133.278993][ T8144] veth0_macvtap: entered promiscuous mode
[  133.297599][ T8144] veth1_macvtap: entered promiscuous mode
[  133.344800][ T8144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.378945][ T8440] validate_nla: 2 callbacks suppressed
[  133.378962][ T8440] netlink: 'syz.4.623': attribute type 4 has an invalid length.
[  133.405135][ T8144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.431332][ T8144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.450450][ T8144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.468652][ T8444] raw_sendmsg: syz.0.626 forgot to set AF_INET. Fix it!
[  133.477432][ T8144] batman_adv: batadv0: Interface activated: batadv_slave_0
[  133.553702][ T8144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.595945][ T8144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.627095][ T8144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.640322][ T8144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.661716][ T8144] batman_adv: batadv0: Interface activated: batadv_slave_1
[  133.669443][ T8456] netlink: 'syz.4.629': attribute type 5 has an invalid length.
[  133.707538][ T8144] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  133.725660][ T8144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  133.735309][ T8144] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  133.782373][ T8144] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.863748][ T8463] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[  133.995844][ T8474] __nla_validate_parse: 8 callbacks suppressed
[  133.995863][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.630'.
[  134.027275][ T7364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.048242][ T7364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.105903][ T8474] netlink: 80 bytes leftover after parsing attributes in process `syz.2.630'.
[  134.119822][ T8474] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  134.146832][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.200477][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.270657][ T8480] ax25_connect(): syz.3.634 uses autobind, please contact jreuter@yaina.de
[  134.429170][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'.
[  134.472284][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.637'.
[  134.490621][ T8489] netlink: 16 bytes leftover after parsing attributes in process `syz.0.635'.
[  134.505000][ T8491] xt_policy: output policy not valid in PREROUTING and INPUT
[  134.544987][ T8495] netlink: 'syz.4.639': attribute type 4 has an invalid length.
[  134.596274][ T8498] netlink: 'syz.4.639': attribute type 4 has an invalid length.
[  134.626237][ T8499] netlink: 'syz.3.638': attribute type 7 has an invalid length.
[  134.725312][ T8502] netlink: 20 bytes leftover after parsing attributes in process `syz.2.640'.
[  134.848908][ T8504] netlink: 'syz.0.641': attribute type 3 has an invalid length.
[  134.892867][ T8511] netlink: 36 bytes leftover after parsing attributes in process `syz.3.643'.
[  134.920761][ T8519] netlink: 'syz.2.645': attribute type 3 has an invalid length.
[  135.013779][ T8521] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  135.022782][ T8521] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  135.031687][ T8521] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  135.040566][ T8521] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  135.109158][ T8523] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  135.142330][ T8525] netlink: 52 bytes leftover after parsing attributes in process `syz.2.648'.
[  135.416838][ T8531] netlink: 32 bytes leftover after parsing attributes in process `syz.0.650'.
[  135.422374][ T8548] netlink: 32 bytes leftover after parsing attributes in process `syz.2.653'.
[  135.716967][ T8559] netlink: 'syz.0.657': attribute type 8 has an invalid length.
[  136.093009][   T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.350556][   T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.417174][   T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.493212][   T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.579373][   T52] bridge_slave_1: left allmulticast mode
[  136.585634][   T52] bridge_slave_1: left promiscuous mode
[  136.593699][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.604793][   T52] bridge_slave_0: left allmulticast mode
[  136.610485][   T52] bridge_slave_0: left promiscuous mode
[  136.616581][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.169027][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  137.191734][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  137.210264][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  137.233795][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  137.252931][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  137.273638][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  137.377131][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.388724][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.399135][   T52] bond0 (unregistering): Released all slaves
[  137.433327][ T8581] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.444056][ T8581] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.545207][ T8582] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.552476][ T8582] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.573485][ T8582] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.581831][ T8582] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.638498][ T8575] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  137.683637][ T8575] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  137.791971][ T8585] lo speed is unknown, defaulting to 1000
[  137.964247][ T8598] netlink: 'syz.3.667': attribute type 3 has an invalid length.
[  138.040585][ T8598] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  138.049684][ T8598] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  138.058564][ T8598] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  138.067526][ T8598] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  138.082177][ T8585] ip6gre0 speed is unknown, defaulting to 1000
[  138.090352][ T8599] netlink: 'syz.0.666': attribute type 4 has an invalid length.
[  138.438775][ T8620] validate_nla: 1 callbacks suppressed
[  138.438795][ T8620] netlink: 'syz.4.673': attribute type 18 has an invalid length.
[  138.539162][ T8620] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  138.548314][ T8620] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  138.557320][ T8620] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  138.566205][ T8620] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  138.630857][ T8614] "syz.4.673" (8614) uses obsolete ecb(arc4) skcipher
[  138.952884][   T52] hsr_slave_0: left promiscuous mode
[  138.972441][   T52] hsr_slave_1: left promiscuous mode
[  138.987030][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.011468][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.034808][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.053338][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.099783][   T52] veth1_macvtap: left promiscuous mode
[  139.117148][   T52] veth0_macvtap: left promiscuous mode
[  139.131090][   T52] veth1_vlan: left promiscuous mode
[  139.141374][   T52] veth0_vlan: left promiscuous mode
[  139.392275][ T5842] Bluetooth: hci1: command tx timeout
[  139.423536][ T8655] netlink: 'syz.4.681': attribute type 4 has an invalid length.
[  139.506822][ T8656] netlink: 'syz.4.681': attribute type 1 has an invalid length.
[  139.518253][ T8656] __nla_validate_parse: 7 callbacks suppressed
[  139.518274][ T8656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.681'.
[  139.849309][   T52] team0 (unregistering): Port device team_slave_1 removed
[  139.900272][   T52] team0 (unregistering): Port device team_slave_0 removed
[  140.366911][ T8640] tap0: tun_chr_ioctl cmd 1074025677
[  140.373829][ T8640] tap0: linktype set to 805
[  140.414367][ T8648] ip6gretap0: entered promiscuous mode
[  140.514392][ T8658] netlink: 'syz.0.682': attribute type 29 has an invalid length.
[  140.652328][ T8585] chnl_net:caif_netlink_parms(): no params data found
[  140.675549][ T8675] netlink: 20 bytes leftover after parsing attributes in process `syz.3.684'.
[  140.698015][ T8676] sctp: [Deprecated]: syz.4.686 (pid 8676) Use of struct sctp_assoc_value in delayed_ack socket option.
[  140.698015][ T8676] Use struct sctp_sack_info instead
[  141.035445][ T8585] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.063187][ T8585] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.100828][ T8585] bridge_slave_0: entered allmulticast mode
[  141.137772][ T8585] bridge_slave_0: entered promiscuous mode
[  141.162208][ T8585] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.184265][ T8585] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.200169][ T8585] bridge_slave_1: entered allmulticast mode
[  141.214787][ T8585] bridge_slave_1: entered promiscuous mode
[  141.335129][ T8717] x_tables: duplicate underflow at hook 1
[  141.347973][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.355783][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.471479][ T5842] Bluetooth: hci1: command tx timeout
[  141.552144][ T8711] macvlan1: left promiscuous mode
[  141.579955][ T8711] ip6gre2: left allmulticast mode
[  141.596516][ T8711] bond1: left promiscuous mode
[  141.602022][ T8711] gretap1: left promiscuous mode
[  141.620803][ T8711] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.630480][ T8711] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.641493][ T8711] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.650160][ T8711] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.662409][ T8711] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.671136][ T8711] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.679556][ T8711] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.687959][ T8711] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.743319][ T8722] vlan1: entered promiscuous mode
[  141.748560][ T8722] vlan1: entered allmulticast mode
[  141.756736][ T8722] ip6gretap0: entered allmulticast mode
[  141.785251][ T8585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.809525][ T8585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.901155][ T8585] team0: Port device team_slave_0 added
[  141.914946][ T8585] team0: Port device team_slave_1 added
[  141.929278][ T8731] netlink: 'syz.2.697': attribute type 4 has an invalid length.
[  141.982999][ T8727] netlink: 'syz.2.697': attribute type 4 has an invalid length.
[  142.018689][ T8585] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.036956][ T8585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.090117][ T8585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.123940][ T8585] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.130946][ T8585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.157291][ T8585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.273080][ T8585] hsr_slave_0: entered promiscuous mode
[  142.295284][ T8585] hsr_slave_1: entered promiscuous mode
[  142.314622][ T8585] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  142.327139][ T8585] Cannot create hsr debugfs directory
[  142.338057][ T8750] lo speed is unknown, defaulting to 1000
[  142.619688][ T8750] ip6gre0 speed is unknown, defaulting to 1000
[  142.645157][ T8761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.706'.
[  142.710345][ T8762] lo speed is unknown, defaulting to 1000
[  142.948682][ T8782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.710'.
[  143.003941][ T8778] bridge_slave_1: left promiscuous mode
[  143.010555][ T8778] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.022660][ T8778] bridge3: port 1(bridge_slave_1) entered blocking state
[  143.029999][ T8778] bridge3: port 1(bridge_slave_1) entered disabled state
[  143.038582][ T8778] bridge_slave_1: entered promiscuous mode
[  143.046682][ T8762] ip6gre0 speed is unknown, defaulting to 1000
[  143.090407][ T8585] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  143.113602][ T8585] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  143.152625][ T8585] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  143.186459][ T8585] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  143.530066][ T8585] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.553953][ T5842] Bluetooth: hci1: command tx timeout
[  143.594716][ T8585] 8021q: adding VLAN 0 to HW filter on device team0
[  143.644753][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.651992][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.731879][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.739167][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.842833][ T8799] netlink: 'syz.0.714': attribute type 4 has an invalid length.
[  143.877159][ T8799] netlink: 'syz.0.714': attribute type 4 has an invalid length.
[  144.310244][ T8585] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.348495][ T8820] netlink: 243 bytes leftover after parsing attributes in process `syz.3.719'.
[  144.390139][ T8585] veth0_vlan: entered promiscuous mode
[  144.400494][ T8823] netlink: 'syz.3.719': attribute type 2 has an invalid length.
[  144.401857][ T8820] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.415205][ T8823] netlink: 'syz.3.719': attribute type 1 has an invalid length.
[  144.456303][ T8585] veth1_vlan: entered promiscuous mode
[  144.533533][ T8585] veth0_macvtap: entered promiscuous mode
[  144.565762][ T8585] veth1_macvtap: entered promiscuous mode
[  144.576850][ T8827] lo speed is unknown, defaulting to 1000
[  144.642511][ T8585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  144.669496][ T8585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.680922][ T8585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  144.692172][ T8585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.703844][ T8585] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.730940][ T8585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  144.742061][ T8585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.753263][ T8585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  144.771362][ T8585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.792435][ T8585] batman_adv: batadv0: Interface activated: batadv_slave_1
[  144.808668][ T8827] ip6gre0 speed is unknown, defaulting to 1000
[  144.809806][ T8838] lo speed is unknown, defaulting to 1000
[  144.828778][ T8585] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.841291][ T8585] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.864572][ T8585] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.887065][ T8585] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.176229][ T8844] xt_limit: Overflow, try lower: 65536/2147483648
[  145.190929][ T4847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.239629][ T4847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.266673][ T8849] netlink: 'syz.3.727': attribute type 4 has an invalid length.
[  145.267825][ T7364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.289185][ T7364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.346869][ T8838] ip6gre0 speed is unknown, defaulting to 1000
[  145.583074][ T8863] netlink: 68 bytes leftover after parsing attributes in process `syz.3.730'.
[  145.637513][ T8863] netlink: 60 bytes leftover after parsing attributes in process `syz.3.730'.
[  145.641436][ T5838] Bluetooth: hci1: command tx timeout
[  146.328810][ T8889] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢
…D£øUDŒw˜}�z
[  146.506188][ T8902] netlink: 'syz.4.739': attribute type 4 has an invalid length.
[  146.536834][ T8902] netlink: 'syz.4.739': attribute type 4 has an invalid length.
[  146.742153][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.746'.
[  146.870862][ T8918] pim6reg: entered allmulticast mode
[  146.955068][ T8934] netlink: 36 bytes leftover after parsing attributes in process `syz.2.750'.
[  147.340693][ T8908] pim6reg: left allmulticast mode
[  147.473118][ T8951] netlink: 'syz.0.755': attribute type 4 has an invalid length.
[  147.504740][ T8951] netlink: 'syz.0.755': attribute type 4 has an invalid length.
[  147.587906][ T8952] netlink: 'syz.4.754': attribute type 30 has an invalid length.
[  147.599676][ T8958] netlink: 60 bytes leftover after parsing attributes in process `syz.2.756'.
[  147.671506][ T8962] lo speed is unknown, defaulting to 1000
[  147.742617][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.759'.
[  147.871030][ T8969] delete_channel: no stack
[  147.979942][ T8962] ip6gre0 speed is unknown, defaulting to 1000
[  148.002644][ T8981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.765'.
[  148.025360][ T8981] netlink: 48 bytes leftover after parsing attributes in process `syz.4.765'.
[  148.195212][ T8984] netlink: 32 bytes leftover after parsing attributes in process `syz.0.766'.
[  148.229966][ T8962] netlink: 24 bytes leftover after parsing attributes in process `syz.3.757'.
[  148.408401][ T8994] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode
[  148.420196][ T8994] mac80211_hwsim hwsim7 wlan0: left promiscuous mode
[  148.444944][ T8995] batadv_slave_1: entered promiscuous mode
[  148.453817][ T8995] tap0: tun_chr_ioctl cmd 1074025677
[  148.460756][ T8995] tap0: linktype set to 804
[  148.468088][ T8996] tap0: tun_chr_ioctl cmd 1074025677
[  148.474139][ T8996] tap0: linktype set to 804
[  148.503023][ T8993] batadv_slave_1: left promiscuous mode
[  149.182223][ T9019] siw: device registration error -23
[  149.244880][ T9025] can: request_module (can-proto-3) failed.
[  149.261934][ T9025] batadv_slave_1: entered promiscuous mode
[  149.299711][ T9024] batadv_slave_1: left promiscuous mode
[  149.922253][ T9062] xt_cgroup: invalid path, errno=-2
[  150.016515][ T9065] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.930348][ T9103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  152.423338][ T9109] netlink: 'syz.4.801': attribute type 10 has an invalid length.
[  152.471896][ T9112] bridge: RTM_NEWNEIGH with invalid state 0x4
[  152.551667][ T9117] vlan3: entered promiscuous mode
[  152.557317][ T9117] vlan3: entered allmulticast mode
[  152.709443][ T9129] __nla_validate_parse: 4 callbacks suppressed
[  152.709468][ T9129] netlink: 32 bytes leftover after parsing attributes in process `syz.4.808'.
[  152.769021][ T9133] netlink: 140 bytes leftover after parsing attributes in process `syz.2.809'.
[  152.779218][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.809'.
[  152.789721][ T9133] netlink: 1272 bytes leftover after parsing attributes in process `syz.2.809'.
[  152.962584][ T9141] syzkaller0: entered promiscuous mode
[  152.968149][ T9141] syzkaller0: entered allmulticast mode
[  153.032934][ T9150] netlink: 16 bytes leftover after parsing attributes in process `syz.3.814'.
[  153.223351][ T9159] ebt_among: src integrity fail: 30a
[  155.380021][ T9162] netlink: 24 bytes leftover after parsing attributes in process `syz.3.817'.
[  155.421638][ T9169] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  155.455232][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.821'.
[  155.506303][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.821'.
[  155.511828][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  155.538515][ T9184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.821'.
[  155.559963][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.821'.
[  155.602947][ T9169] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  155.689057][ T9169] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  155.788926][ T9169] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  155.896576][ T9169] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  155.925551][ T9169] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  155.940487][ T9169] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  155.957080][ T9169] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  155.969796][ T9212] bridge0: entered promiscuous mode
[  155.979491][ T9212] bridge_slave_1: left allmulticast mode
[  155.994433][ T9212] bridge_slave_1: left promiscuous mode
[  156.006021][ T9212] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.022795][ T9212] bridge_slave_0: left allmulticast mode
[  156.030977][ T9212] bridge_slave_0: left promiscuous mode
[  156.038115][ T9212] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.095344][ T9212] bridge0 (unregistering): left promiscuous mode
[  156.386567][ T9234] Cannot find del_set index 286 as target
[  156.599657][ T9245] netlink: 'syz.0.837': attribute type 2 has an invalid length.
[  156.930086][ T9273] netlink: 'syz.4.843': attribute type 21 has an invalid length.
[  156.951468][ T9274] netlink: 'syz.4.843': attribute type 21 has an invalid length.
[  157.008447][ T9283] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  157.014393][ T9278] xt_recent: hitcount (134217728) is larger than allowed maximum (65535)
[  157.071523][ T9287] lo speed is unknown, defaulting to 1000
[  157.328067][ T9287] ip6gre0 speed is unknown, defaulting to 1000
[  157.602064][ T9303] netlink: 'syz.3.852': attribute type 5 has an invalid length.
[  157.798573][ T9308] netlink: 'syz.2.853': attribute type 39 has an invalid length.
[  157.886939][ T9311] __nla_validate_parse: 28 callbacks suppressed
[  157.886963][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.854'.
[  158.039021][ T9318] netlink: 84 bytes leftover after parsing attributes in process `syz.2.855'.
[  158.189043][ T9327] sit0: entered promiscuous mode
[  158.207007][ T9327] netlink: 'syz.4.856': attribute type 1 has an invalid length.
[  158.215267][ T9327] netlink: 1 bytes leftover after parsing attributes in process `syz.4.856'.
[  158.889941][ T9362] netlink: 156 bytes leftover after parsing attributes in process `syz.0.865'.
[  158.940937][ T9366] x_tables: duplicate underflow at hook 3
[  158.949654][ T9365] x_tables: duplicate underflow at hook 3
[  159.190140][ T9380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.869'.
[  159.218583][ T9381] Cannot find del_set index 2416 as target
[  159.335087][ T9385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.871'.
[  159.387609][ T9389] netlink: 'syz.3.872': attribute type 3 has an invalid length.
[  159.419097][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'.
[  159.869026][ T9412] netlink: 20 bytes leftover after parsing attributes in process `syz.3.879'.
[  159.978482][ T9419] sit0: entered promiscuous mode
[  159.990403][ T9419] netlink: 'syz.3.882': attribute type 1 has an invalid length.
[  159.998636][ T9419] netlink: 1 bytes leftover after parsing attributes in process `syz.3.882'.
[  160.014251][ T9419] netlink: 'syz.3.882': attribute type 1 has an invalid length.
[  160.022479][ T9419] netlink: 'syz.3.882': attribute type 2 has an invalid length.
[  160.457319][ T9459] netlink: 'syz.0.890': attribute type 15 has an invalid length.
[  160.498422][ T9458] syzkaller1: entered promiscuous mode
[  160.505783][ T9463] netlink: 108 bytes leftover after parsing attributes in process `syz.2.891'.
[  160.514308][ T9458] syzkaller1: entered allmulticast mode
[  160.871741][ T9483] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  160.984521][ T5883] IPVS: starting estimator thread 0...
[  160.994067][ T9493] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  161.101529][ T9497] IPVS: using max 27 ests per chain, 64800 per kthread
[  161.706115][ T5883] hid-generic 0005:07C0:0058.0001: item fetching failed at offset 0/1
[  161.716723][ T5883] hid-generic 0005:07C0:0058.0001: probe with driver hid-generic failed with error -22
[  161.846797][ T9527] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  162.305365][ T9551] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  162.330753][ T9555] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  162.719975][ T9571] sctp: [Deprecated]: syz.0.928 (pid 9571) Use of struct sctp_assoc_value in delayed_ack socket option.
[  162.719975][ T9571] Use struct sctp_sack_info instead
[  162.923499][ T9580] __nla_validate_parse: 8 callbacks suppressed
[  162.923520][ T9580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.930'.
[  163.082414][ T9592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.935'.
[  163.096030][ T9591] bridge_slave_1: left promiscuous mode
[  163.104858][ T9587] netlink: 200 bytes leftover after parsing attributes in process `syz.0.933'.
[  163.105152][ T9591] bridge3: port 1(bridge_slave_1) entered disabled state
[  163.114077][ T9595] netlink: 200 bytes leftover after parsing attributes in process `syz.0.933'.
[  163.130353][ T9587] netlink: 'syz.0.933': attribute type 8 has an invalid length.
[  163.155388][ T9591] netlink: 'syz.4.935': attribute type 39 has an invalid length.
[  163.164937][ T9595] netlink: 'syz.0.933': attribute type 8 has an invalid length.
[  163.569992][ T9620] netlink: 'syz.4.944': attribute type 7 has an invalid length.
[  163.670881][ T9628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.945'.
[  163.686494][ T9628] netlink: 'syz.3.945': attribute type 7 has an invalid length.
[  163.698281][ T9623] netlink: 60 bytes leftover after parsing attributes in process `syz.0.943'.
[  163.711569][ T9628] netlink: 'syz.3.945': attribute type 8 has an invalid length.
[  163.721285][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.945'.
[  163.881653][ T9636] bond3: entered promiscuous mode
[  163.891779][ T9636] bond3: entered allmulticast mode
[  163.897237][ T9636] 8021q: adding VLAN 0 to HW filter on device bond3
[  164.028542][ T9651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.954'.
[  164.062656][ T9649] netlink: 'syz.2.951': attribute type 13 has an invalid length.
[  164.076328][ T9649] netlink: 152 bytes leftover after parsing attributes in process `syz.2.951'.
[  164.094607][ T9649] syz_tun: refused to change device tx_queue_len
[  164.111547][ T9649] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  164.405872][ T9673] netlink: 'syz.0.961': attribute type 4 has an invalid length.
[  164.422086][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.960'.
[  164.549878][ T6510] IPVS: starting estimator thread 0...
[  164.643472][ T9686] IPVS: using max 23 ests per chain, 55200 per kthread
[  165.559565][ T9749] netlink: 'syz.2.982': attribute type 1 has an invalid length.
[  165.573878][ T9749] netlink: 'syz.2.982': attribute type 2 has an invalid length.
[  165.745311][ T9757] pim6reg1: entered promiscuous mode
[  165.750673][ T9757] pim6reg1: entered allmulticast mode
[  165.994654][ T9773] lo: left allmulticast mode
[  166.013438][ T9773] tunl0: left allmulticast mode
[  166.029092][ T9773] gretap0: left allmulticast mode
[  166.035662][ T9773] erspan0: left allmulticast mode
[  166.043818][ T9773] ip_vti0: left allmulticast mode
[  166.049034][ T9773] ip6_vti0: left allmulticast mode
[  166.061647][ T9773] sit0: left promiscuous mode
[  166.078390][ T9773] ip6tnl0: left allmulticast mode
[  166.091577][ T9773] ip6gre0: left allmulticast mode
[  166.101437][ T9773] syz_tun: left allmulticast mode
[  166.119353][ T9773] ip6gretap0: left allmulticast mode
[  166.138026][ T9773] bridge0: left allmulticast mode
[  166.144701][ T9773] bond0: left allmulticast mode
[  166.149973][ T9773] dummy0: left allmulticast mode
[  166.157616][ T9773] nlmon0: left allmulticast mode
[  166.162984][ T9773] caif0: left allmulticast mode
[  166.168213][ T9773] batadv0: left allmulticast mode
[  166.173643][ T9773] vxcan0: left allmulticast mode
[  166.178847][ T9773] vxcan1: left allmulticast mode
[  166.184177][ T9773] veth0: left allmulticast mode
[  166.189370][ T9773] veth1: left allmulticast mode
[  166.194879][ T9773] wg1: left allmulticast mode
[  166.199854][ T9773] wg2: left allmulticast mode
[  166.204909][ T9773] veth0_to_bridge: left allmulticast mode
[  166.211007][ T9773] veth1_to_bridge: left allmulticast mode
[  166.217146][ T9773] bridge_slave_1: left allmulticast mode
[  166.223154][ T9773] veth0_to_bond: left allmulticast mode
[  166.229008][ T9773] bond_slave_0: left allmulticast mode
[  166.235717][ T9773] veth1_to_bond: left allmulticast mode
[  166.242880][ T9773] bond_slave_1: left allmulticast mode
[  166.248654][ T9773] veth0_to_team: left allmulticast mode
[  166.254788][ T9773] veth1_to_team: left allmulticast mode
[  166.261110][ T9773] veth0_to_batadv: left allmulticast mode
[  166.268331][ T9773] batadv_slave_0: left allmulticast mode
[  166.278807][ T9773] veth1_to_batadv: left allmulticast mode
[  166.296354][ T9773] batadv_slave_1: left allmulticast mode
[  166.304976][ T9773] xfrm0: left allmulticast mode
[  166.310114][ T9773] veth0_to_hsr: left allmulticast mode
[  166.316101][ T9773] veth1_to_hsr: left allmulticast mode
[  166.325763][ T9773] hsr0: left allmulticast mode
[  166.333516][ T9773] hsr_slave_0: left allmulticast mode
[  166.339068][ T9773] hsr_slave_1: left allmulticast mode
[  166.344888][ T9773] veth1_virt_wifi: left allmulticast mode
[  166.351121][ T9773] veth0_virt_wifi: left allmulticast mode
[  166.357764][ T9773] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  166.365347][ T9773] veth1_vlan: left allmulticast mode
[  166.377902][ T9773] vlan0: left allmulticast mode
[  166.383486][ T9773] vlan1: left allmulticast mode
[  166.388798][ T9773] macvlan0: left allmulticast mode
[  166.399065][ T9773] macvlan1: left allmulticast mode
[  166.405003][ T9773] ipvlan0: left allmulticast mode
[  166.410421][ T9773] ipvlan1: left allmulticast mode
[  166.420018][ T9773] veth0_vlan: left allmulticast mode
[  166.425736][ T9773] veth1_macvtap: left allmulticast mode
[  166.437100][ T9773] veth0_macvtap: left allmulticast mode
[  166.443117][ T9773] macvtap0: left allmulticast mode
[  166.448729][ T9773] macsec0: left allmulticast mode
[  166.458695][ T9773] geneve0: left allmulticast mode
[  166.464449][ T9773] geneve1: left allmulticast mode
[  166.469860][ T9773] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  166.477203][ T9773] macvlan2: left allmulticast mode
[  166.482769][ T9773] macvtap1: left promiscuous mode
[  166.487986][ T9773] macvtap1: left allmulticast mode
[  166.515637][ T9773] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.524286][ T9773] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.532718][ T9773] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.541104][ T9773] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.570983][ T9785] veth0_vlan: mtu less than device minimum
[  166.605769][ T9787] GUP no longer grows the stack in syz.3.993 (9787): 20006000-2000a000 (20005000)
[  166.641551][ T9787] CPU: 0 UID: 0 PID: 9787 Comm: syz.3.993 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0
[  166.652300][ T9787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  166.662480][ T9787] Call Trace:
[  166.665794][ T9787]  <TASK>
[  166.668748][ T9787]  dump_stack_lvl+0x241/0x360
[  166.673457][ T9787]  ? __pfx_dump_stack_lvl+0x10/0x10
[  166.678699][ T9787]  ? __pfx__printk+0x10/0x10
[  166.683338][ T9787]  ? find_vma+0xf9/0x170
[  166.687626][ T9787]  ? vma_is_secretmem+0xd/0x50
[  166.692875][ T9787]  ? check_vma_flags+0x52b/0x5a0
[  166.697855][ T9787]  __get_user_pages+0x4385/0x49e0
[  166.703006][ T9787]  ? 0xffffffffa0000950
[  166.707235][ T9787]  ? __pfx___get_user_pages+0x10/0x10
[  166.712771][ T9787]  __gup_longterm_locked+0x49a/0x17f0
[  166.718194][ T9787]  ? __pfx___might_resched+0x10/0x10
[  166.723544][ T9787]  ? __pfx___gup_longterm_locked+0x10/0x10
[  166.729396][ T9787]  ? down_read+0x82b/0xa40
[  166.733858][ T9787]  ? is_valid_gup_args+0x124/0x200
[  166.739023][ T9787]  pin_user_pages+0x137/0x1f0
[  166.743742][ T9787]  ? __pfx_pin_user_pages+0x10/0x10
[  166.748950][ T9787]  ? trace_kmalloc+0x1f/0xd0
[  166.753565][ T9787]  xdp_umem_create+0x978/0xf30
[  166.758347][ T9787]  xsk_setsockopt+0x732/0x950
[  166.763029][ T9787]  ? __pfx_xsk_setsockopt+0x10/0x10
[  166.768238][ T9787]  ? __pfx_lock_acquire+0x10/0x10
[  166.773271][ T9787]  ? aa_sock_opt_perm+0x79/0x120
[  166.778220][ T9787]  ? __pfx_xsk_setsockopt+0x10/0x10
[  166.783426][ T9787]  do_sock_setsockopt+0x3af/0x720
[  166.788464][ T9787]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  166.794032][ T9787]  ? __fget_files+0x395/0x410
[  166.798708][ T9787]  ? __fget_files+0x2a/0x410
[  166.803306][ T9787]  __x64_sys_setsockopt+0x1ee/0x280
[  166.808515][ T9787]  do_syscall_64+0xf3/0x230
[  166.813052][ T9787]  ? clear_bhb_loop+0x35/0x90
[  166.817734][ T9787]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.823635][ T9787] RIP: 0033:0x7fd146d7fed9
[  166.828052][ T9787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  166.847669][ T9787] RSP: 002b:00007fd147b65058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  166.856094][ T9787] RAX: ffffffffffffffda RBX: 00007fd146f45fa0 RCX: 00007fd146d7fed9
[  166.864092][ T9787] RDX: 0000000000000004 RSI: 000000000000011b RDI: 000000000000000a
[  166.872077][ T9787] RBP: 00007fd146df3cc8 R08: 0000000000000020 R09: 0000000000000000
[  166.880082][ T9787] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000
[  166.888057][ T9787] R13: 0000000000000000 R14: 00007fd146f45fa0 R15: 00007ffe2ca52628
[  166.896132][ T9787]  </TASK>
[  167.065874][ T9799] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.097629][ T9799] team0: Port device batadv0 added
[  167.321571][ T9810] sctp: [Deprecated]: syz.2.1002 (pid 9810) Use of int in maxseg socket option.
[  167.321571][ T9810] Use struct sctp_assoc_value instead
[  167.476021][ T9830] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.573979][ T9833] sctp: [Deprecated]: syz.4.1007 (pid 9833) Use of struct sctp_assoc_value in delayed_ack socket option.
[  167.573979][ T9833] Use struct sctp_sack_info instead
[  167.748867][ T9844] syz_tun: entered promiscuous mode
[  167.755421][ T9844] macsec1: entered promiscuous mode
[  167.770559][ T9844] syz_tun: left promiscuous mode
[  168.017980][ T9858] __nla_validate_parse: 18 callbacks suppressed
[  168.018000][ T9858] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1016'.
[  168.045037][ T9858] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1016'.
[  168.055298][ T9858] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1016'.
[  168.081403][ T9861] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  168.103923][ T9861] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  168.114269][ T9864] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1017'.
[  168.394223][ T9883] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1022'.
[  168.497993][ T9887] gre2: entered promiscuous mode
[  168.523192][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1023'.
[  168.541420][ T9887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1023'.
[  169.235041][ T9926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1035'.
[  169.267862][ T9927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1035'.
[  169.307691][ T9935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1035'.
[  169.378993][ T9938] validate_nla: 2 callbacks suppressed
[  169.379015][ T9938] netlink: 'syz.2.1040': attribute type 1 has an invalid length.
[  169.403837][ T9938] netlink: 'syz.2.1040': attribute type 3 has an invalid length.
[  169.448116][ T9946] netlink: 'syz.3.1038': attribute type 11 has an invalid length.
[  169.856467][ T9980] bond_slave_0: entered promiscuous mode
[  169.862732][ T9980] bond_slave_1: entered promiscuous mode
[  169.870930][ T9980] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  169.879857][ T9980] bond_slave_0: left promiscuous mode
[  169.885386][ T9980] bond_slave_1: left promiscuous mode
[  169.958486][ T9980] bond_slave_0: entered promiscuous mode
[  169.964305][ T9980] bond_slave_1: entered promiscuous mode
[  169.971585][ T9980] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  169.981807][ T9980] bond_slave_0: left promiscuous mode
[  169.987321][ T9980] bond_slave_1: left promiscuous mode
[  170.057091][ T9980] bond_slave_0: entered promiscuous mode
[  170.062877][ T9980] bond_slave_1: entered promiscuous mode
[  170.069551][ T9980] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  170.077993][ T9980] bond_slave_0: left promiscuous mode
[  170.083473][ T9980] bond_slave_1: left promiscuous mode
[  170.155037][ T9980] bond_slave_0: entered promiscuous mode
[  170.160801][ T9980] bond_slave_1: entered promiscuous mode
[  170.167594][ T9980] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  170.176125][ T9980] bond_slave_0: left promiscuous mode
[  170.181652][ T9980] bond_slave_1: left promiscuous mode
[  170.246146][ T9980] bond_slave_0: entered promiscuous mode
[  170.251936][ T9980] bond_slave_1: entered promiscuous mode
[  170.258821][ T9980] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  170.268364][ T9980] bond_slave_0: left promiscuous mode
[  170.273845][ T9980] bond_slave_1: left promiscuous mode
[  170.345107][ T9980] bond_slave_0: entered promiscuous mode
[  170.350856][ T9980] bond_slave_1: entered promiscuous mode
[  170.360763][ T9980] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  170.368916][ T9980] bond_slave_0: left promiscuous mode
[  170.374469][ T9980] bond_slave_1: left promiscuous mode
[  170.445333][ T9980] bond_slave_0: entered promiscuous mode
[  170.451124][ T9980] bond_slave_1: entered promiscuous mode
[  170.458248][ T9980] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  170.466447][ T9980] bond_slave_0: left promiscuous mode
[  170.471956][ T9980] bond_slave_1: left promiscuous mode
[  170.547281][ T9980] bond_slave_0: entered promiscuous mode
[  170.553113][ T9980] bond_slave_1: entered promiscuous mode
[  170.560708][ T9980] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  170.581778][ T9980] bond_slave_0: left promiscuous mode
[  170.587268][ T9980] bond_slave_1: left promiscuous mode
[  170.597043][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802920ec00: rx timeout, send abort
[  170.605733][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802920ec00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session.
[  170.823729][ T9991] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.896699][ T9999] veth0_to_batadv: entered promiscuous mode
[  170.903898][ T9999] veth0_to_batadv: entered allmulticast mode
[  171.014604][T10002] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  171.853585][T10054] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  171.884120][T10054] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  171.898263][T10054] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  171.924667][T10054] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  171.953030][T10054] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  171.977892][T10054] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  172.014437][T10054] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  172.044262][T10054] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  172.074722][T10054] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  172.089507][T10054] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  172.103588][T10054] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  172.117340][T10054] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  172.135232][T10054] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  172.149072][T10054] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  172.171829][T10054] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  172.192643][T10054] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  172.222734][T10054] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  172.236912][T10054] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  172.261626][T10077] team0: left allmulticast mode
[  172.271389][T10077] team_slave_0: left allmulticast mode
[  172.281712][T10077] team_slave_1: left allmulticast mode
[  172.289711][T10077] team0: left promiscuous mode
[  172.299858][T10077] team_slave_0: left promiscuous mode
[  172.308180][T10077] team_slave_1: left promiscuous mode
[  172.317855][T10077] bridge0: port 3(team0) entered disabled state
[  172.329398][T10077] bridge_slave_0: left allmulticast mode
[  172.339658][T10077] bridge_slave_0: left promiscuous mode
[  172.347245][T10077] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.374517][T10077] bond0: (slave bond_slave_0): Releasing backup interface
[  172.394565][T10077] bond0: (slave bond_slave_1): Releasing backup interface
[  172.412005][T10077] team0: Port device team_slave_0 removed
[  172.419771][T10077] team0: Port device team_slave_1 removed
[  172.426159][T10077] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.435852][T10054] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  172.464436][T10076] team0: Port device wg2 added
[  172.469845][T10080] netlink: 'syz.0.1068': attribute type 12 has an invalid length.
[  172.483554][T10054] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  172.508148][T10054] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  172.530935][T10054] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  172.550258][T10054] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  172.591174][T10054] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  172.621811][T10054] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  172.660431][T10054] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  172.662637][T10099] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.718003][T10099] ipvlan2: entered promiscuous mode
[  172.881857][T10112] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  172.891396][T10112] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  173.214538][T10139] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  173.535317][T10162] lo speed is unknown, defaulting to 1000
[  173.597381][T10163] __nla_validate_parse: 43 callbacks suppressed
[  173.597403][T10163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1089'.
[  173.709952][T10162] ip6gre0 speed is unknown, defaulting to 1000
[  173.714833][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1091'.
[  173.731525][T10168] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1090'.
[  173.970607][T10175] netlink: 'syz.4.1094': attribute type 3 has an invalid length.
[  173.983313][T10175] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1094'.
[  174.480988][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1099'.
[  174.515606][T10200] netlink: 'syz.3.1099': attribute type 1 has an invalid length.
[  174.560250][T10204] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.1100'.
[  174.575862][T10207] siw: device registration error -23
[  174.580278][T10204] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.603003][T10207] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1101'.
[  174.840585][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1103'.
[  174.938686][T10225] netlink: 'syz.2.1104': attribute type 1 has an invalid length.
[  174.981440][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1104'.
[  174.996044][T10211] team0: Port device team_slave_1 removed
[  175.060929][T10227] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1106'.
[  175.392932][ T5142] Bluetooth: hci4: command 0x0405 tx timeout
[  175.454744][T10239] netlink: 'syz.0.1109': attribute type 2 has an invalid length.
[  176.030984][T10247] delete_channel: no stack
[  176.728441][T10281] vlan4: entered promiscuous mode
[  176.736788][T10281] ip6gretap0: entered promiscuous mode
[  176.746776][T10281] ip6gretap0: left promiscuous mode
[  177.050179][T10300] netlink: 'syz.0.1124': attribute type 10 has an invalid length.
[  177.175006][T10306] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  177.678240][T10340] netlink: 'syz.2.1135': attribute type 12 has an invalid length.
[  177.802054][T10352] pimreg3: entered allmulticast mode
[  178.501436][T10393] x_tables: duplicate underflow at hook 2
[  178.562956][T10401] netlink: 'syz.4.1154': attribute type 22 has an invalid length.
[  179.255657][T10406] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9
[  179.571311][T10428] __nla_validate_parse: 9 callbacks suppressed
[  179.571330][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1162'.
[  179.738594][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1163'.
[  179.753443][T10423] xt_CT: You must specify a L4 protocol and not use inversions on it
[  179.924131][T10457] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  180.120252][T10470] netlink: 'syz.4.1174': attribute type 13 has an invalid length.
[  180.156067][T10472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1175'.
[  180.445503][T10493] IPVS: Error connecting to the multicast addr
[  180.470449][T10495] IPVS: Error connecting to the multicast addr
[  180.721870][T10511] IPVS: length: 108 != 24
[  180.853340][T10519] macvtap1: entered promiscuous mode
[  180.856249][T10522] Cannot find add_set index 0 as target
[  180.858681][T10519] vlan0: entered promiscuous mode
[  180.872599][T10519] vlan0: left promiscuous mode
[  180.892970][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1192'.
[  181.452845][T10562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1201'.
[  181.468260][T10562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1201'.
[  182.273177][ T5838] Bluetooth: hci4: command 0x0405 tx timeout
[  182.466146][T10575] netlink: 'syz.3.1206': attribute type 30 has an invalid length.
[  182.572719][T10576] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1206'.
[  183.433534][T10563] veth1_macvtap: left promiscuous mode
[  183.460818][T10567] netlink: 'syz.4.1204': attribute type 29 has an invalid length.
[  183.480172][T10566] lo speed is unknown, defaulting to 1000
[  183.585817][T10580] xt_l2tp: v2 sid > 0xffff: 262144
[  183.679664][T10568] lo speed is unknown, defaulting to 1000
[  183.697181][T10566] ip6gre0 speed is unknown, defaulting to 1000
[  183.812166][T10595] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1212'.
[  184.188845][T10568] ip6gre0 speed is unknown, defaulting to 1000
[  184.744238][T10641] netlink: 'syz.3.1222': attribute type 2 has an invalid length.
[  184.867856][ T7364] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.962993][ T7364] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.064271][ T7364] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.173671][ T7364] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.253446][ T7364] bridge_slave_1: left allmulticast mode
[  185.259110][ T7364] bridge_slave_1: left promiscuous mode
[  185.264956][ T7364] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.276956][ T7364] bridge_slave_0: left allmulticast mode
[  185.290428][ T7364] bridge_slave_0: left promiscuous mode
[  185.296364][ T7364] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.086299][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  186.094123][T10677] netlink: 'syz.4.1232': attribute type 8 has an invalid length.
[  186.112643][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  186.123514][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  186.131695][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  186.142547][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  186.150404][ T7364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  186.159354][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  186.185656][ T7364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  186.202514][ T7364] bond0 (unregistering): Released all slaves
[  186.228907][T10673] bond0: Unable to set peer notification delay as MII monitoring is disabled
[  186.278822][T10679] lo speed is unknown, defaulting to 1000
[  186.291873][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1233'.
[  186.321441][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1233'.
[  186.434150][ T5842] Bluetooth: hci0: command 0x0406 tx timeout
[  186.440328][ T5843] Bluetooth: hci3: command 0x0406 tx timeout
[  186.446583][ T5832] Bluetooth: hci2: command 0x0406 tx timeout
[  186.697604][T10679] ip6gre0 speed is unknown, defaulting to 1000
[  186.862288][T10716] rdma_op ffff88805baa09f0 conn xmit_rdma 0000000000000000
[  186.890998][T10719] rdma_op ffff88805baa21f0 conn xmit_rdma 0000000000000000
[  186.910401][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1241'.
[  186.946929][T10718] sit0: left promiscuous mode
[  187.247166][T10718] veth0_to_bond: left promiscuous mode
[  187.253498][T10718] veth0_to_bond: left allmulticast mode
[  187.288823][T10718] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.312636][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1247'.
[  187.323840][T10718] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.361863][T10718] veth0_vlan: left allmulticast mode
[  187.384600][T10718] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.399198][T10718] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.408231][T10718] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.417762][T10718] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.428467][T10718] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  187.455991][T10718] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.465119][T10718] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.474229][T10718] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.483190][T10718] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.499310][T10718] vlan3: left promiscuous mode
[  187.504556][T10718] vlan3: left allmulticast mode
[  187.525566][T10721] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1244'.
[  187.535501][T10746] netlink: 'syz.4.1247': attribute type 6 has an invalid length.
[  187.558994][T10753] netlink: 5440 bytes leftover after parsing attributes in process `syz.2.1251'.
[  187.586708][T10757] netlink: 'syz.4.1247': attribute type 21 has an invalid length.
[  187.602965][T10757] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1247'.
[  187.936653][T10782] netlink: 'syz.2.1255': attribute type 10 has an invalid length.
[  188.024464][T10786] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  188.038273][T10786] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.064895][T10786] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1257'.
[  188.080362][T10782] team0: Port device netdevsim0 removed
[  188.114019][T10782] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  188.192117][ T5142] Bluetooth: hci1: command tx timeout
[  188.220516][ T7364] hsr_slave_0: left promiscuous mode
[  188.231834][ T7364] hsr_slave_1: left promiscuous mode
[  188.246387][ T7364] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  188.254015][ T7364] batman_adv: batadv0: Removing interface: batadv_slave_0
[  188.263813][ T7364] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  188.271680][ T7364] batman_adv: batadv0: Removing interface: batadv_slave_1
[  188.316795][ T7364] veth1_macvtap: left promiscuous mode
[  188.322763][ T7364] veth0_macvtap: left promiscuous mode
[  188.328565][ T7364] veth1_vlan: left promiscuous mode
[  188.334664][ T7364] veth0_vlan: left promiscuous mode
[  188.467856][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1260'.
[  189.134483][ T7364] team0 (unregistering): Port device team_slave_1 removed
[  189.197580][ T7364] team0 (unregistering): Port device team_slave_0 removed
[  189.868685][T10679] chnl_net:caif_netlink_parms(): no params data found
[  190.167301][T10679] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.183829][T10679] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.191863][T10679] bridge_slave_0: entered allmulticast mode
[  190.199172][T10679] bridge_slave_0: entered promiscuous mode
[  190.207494][T10679] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.214997][T10679] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.222409][T10679] bridge_slave_1: entered allmulticast mode
[  190.229797][T10679] bridge_slave_1: entered promiscuous mode
[  190.271354][ T5142] Bluetooth: hci1: command tx timeout
[  190.304584][T10679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.323803][T10679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.413813][T10679] team0: Port device team_slave_0 added
[  190.423691][T10857] SET target dimension over the limit!
[  190.460642][T10679] team0: Port device team_slave_1 added
[  190.489052][T10860] pim6reg: entered allmulticast mode
[  190.531949][T10857] lo speed is unknown, defaulting to 1000
[  190.563435][T10679] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.581312][T10679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.667864][T10679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.701158][T10679] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.724549][T10679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.780100][T10679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.817344][T10857] ip6gre0 speed is unknown, defaulting to 1000
[  190.892487][T10679] hsr_slave_0: entered promiscuous mode
[  190.919024][T10679] hsr_slave_1: entered promiscuous mode
[  190.959851][T10679] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  190.980359][T10679] Cannot create hsr debugfs directory
[  191.072932][T10880] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1283'.
[  191.240558][T10882] No such timeout policy "syz0"
[  192.184882][T10916] __nla_validate_parse: 1 callbacks suppressed
[  192.184902][T10916] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1294'.
[  192.292749][T10922] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1294'.
[  192.336066][T10918] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1295'.
[  192.361656][ T5142] Bluetooth: hci1: command tx timeout
[  192.601327][T10679] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  192.629522][T10679] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  192.871548][T10679] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  192.909824][T10679] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  193.212380][T10945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1300'.
[  193.359822][T10944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1301'.
[  193.362164][T10679] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.384947][T10679] 8021q: adding VLAN 0 to HW filter on device team0
[  193.398288][ T7364] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.405505][ T7364] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.511803][ T3445] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.518953][ T3445] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.577061][T10953] nft_compat: unsupported protocol 0
[  193.930603][T10679] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.967038][T10980] netlink: 'syz.4.1311': attribute type 13 has an invalid length.
[  193.987810][T10984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1312'.
[  193.999986][T10980] macvtap0: entered allmulticast mode
[  194.002497][T10982] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10
[  194.010781][T10980] macvtap0: refused to change device tx_queue_len
[  194.060129][T10679] veth0_vlan: entered promiscuous mode
[  194.085396][T10991] netlink: 'syz.0.1312': attribute type 10 has an invalid length.
[  194.097564][T10991] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1312'.
[  194.107998][T10991] team0: entered promiscuous mode
[  194.113883][T10991] team_slave_0: entered promiscuous mode
[  194.119976][T10991] team_slave_1: entered promiscuous mode
[  194.120675][T10980] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1311'.
[  194.147746][T10991] 8021q: adding VLAN 0 to HW filter on device team0
[  194.157765][T10991] bridge0: port 3(team0) entered blocking state
[  194.164813][T10991] bridge0: port 3(team0) entered disabled state
[  194.172726][T10991] team0: entered allmulticast mode
[  194.177974][T10991] team_slave_0: entered allmulticast mode
[  194.185351][T10991] team_slave_1: entered allmulticast mode
[  194.200913][T10679] veth1_vlan: entered promiscuous mode
[  194.234158][T10984] netlink: 'syz.0.1312': attribute type 1 has an invalid length.
[  194.250393][T10984] vlan3: entered promiscuous mode
[  194.257185][T10984] gretap0: entered promiscuous mode
[  194.272732][T10984] gretap0: left promiscuous mode
[  194.328002][T10996] veth0_to_batadv: entered promiscuous mode
[  194.334835][T10996] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check.
[  194.367303][T11001] tap0: tun_chr_ioctl cmd 1074025673
[  194.421431][T10998] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1317'.
[  194.430548][T10998] netlink: 'syz.3.1317': attribute type 3 has an invalid length.
[  194.431816][ T5142] Bluetooth: hci1: command tx timeout
[  194.455990][T11003] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1317'.
[  194.465411][T11003] netlink: 'syz.3.1317': attribute type 3 has an invalid length.
[  194.469101][T10679] veth0_macvtap: entered promiscuous mode
[  194.480218][T10998] tap0: tun_chr_ioctl cmd 1074025677
[  194.487169][T10998] tap0: linktype set to 65534
[  194.513626][T10679] veth1_macvtap: entered promiscuous mode
[  194.530216][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.540748][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.551850][T10679] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.561672][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.572430][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.583326][T10679] batman_adv: batadv0: Interface activated: batadv_slave_1
[  194.597438][T10679] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.606280][T10679] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.615163][T10679] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.624370][T10679] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.891752][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.918637][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.970349][T11033] sch_fq: defrate 511 ignored.
[  195.251287][T11038] netlink: 'syz.4.1323': attribute type 15 has an invalid length.
[  195.288423][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.307958][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.797766][T11069] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  195.829862][T11069] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  196.414152][   T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.565244][   T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.850042][   T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.925132][   T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.998433][   T52] bridge_slave_1: left allmulticast mode
[  197.005415][   T52] bridge_slave_1: left promiscuous mode
[  197.011104][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.019834][   T52] bridge_slave_0: left allmulticast mode
[  197.025739][   T52] bridge_slave_0: left promiscuous mode
[  197.031793][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.122474][T11084] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  197.398633][T11098] __nla_validate_parse: 5 callbacks suppressed
[  197.398654][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1342'.
[  197.428088][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1342'.
[  197.464274][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  197.474565][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  197.483398][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  197.492891][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  197.494483][T11098] netlink: 'syz.4.1342': attribute type 5 has an invalid length.
[  197.501733][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  197.515699][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  197.532586][T11098] netlink: 'syz.4.1342': attribute type 6 has an invalid length.
[  197.546418][T11095] syz.4.1342[11095] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  197.546535][T11095] syz.4.1342[11095] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  197.559219][T11095] syz.4.1342[11095] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  197.925415][T11110] smc: ib device s ibport 1 erased user defined pnetid SYZ2
[  198.088343][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  198.100215][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  198.112814][   T52] bond0 (unregistering): Released all slaves
[  198.158905][T11099] lo speed is unknown, defaulting to 1000
[  198.454890][T11099] ip6gre0 speed is unknown, defaulting to 1000
[  198.494727][T11124] netlink: 'syz.4.1347': attribute type 1 has an invalid length.
[  198.583046][T11132] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1347'.
[  198.630612][T11131] No such timeout policy "syz1"
[  198.657075][T11124] 8021q: adding VLAN 0 to HW filter on device bond3
[  198.969752][T11140] tipc: Started in network mode
[  198.981583][T11140] tipc: Node identity 1, cluster identity 4711
[  198.988021][T11140] tipc: Node number set to 1
[  199.013000][T11140] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1352'.
[  199.082978][T11146] Cannot find set identified by id 0 to match
[  199.293764][   T52] hsr_slave_0: left promiscuous mode
[  199.310264][   T52] hsr_slave_1: left promiscuous mode
[  199.327892][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.341884][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.357694][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.366049][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.396756][   T52] veth1_macvtap: left promiscuous mode
[  199.402538][   T52] veth0_macvtap: left promiscuous mode
[  199.408411][   T52] veth1_vlan: left promiscuous mode
[  199.414296][   T52] veth0_vlan: left promiscuous mode
[  199.558473][ T5142] Bluetooth: hci1: command tx timeout
[  200.162555][   T52] team0 (unregistering): Port device team_slave_1 removed
[  200.219650][   T52] team0 (unregistering): Port device team_slave_0 removed
[  200.756192][T11099] chnl_net:caif_netlink_parms(): no params data found
[  201.006237][T11099] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.008553][T11193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1366'.
[  201.018110][T11099] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.032424][T11192] xt_cluster: node mask cannot exceed total number of nodes
[  201.062674][T11099] bridge_slave_0: entered allmulticast mode
[  201.069957][T11099] bridge_slave_0: entered promiscuous mode
[  201.079268][T11099] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.087266][T11099] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.095040][T11099] bridge_slave_1: entered allmulticast mode
[  201.104460][T11099] bridge_slave_1: entered promiscuous mode
[  201.207385][T11099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.225523][T11099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.326607][T11099] team0: Port device team_slave_0 added
[  201.349980][T11099] team0: Port device team_slave_1 added
[  201.422314][T11099] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.442191][T11099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.476458][T11099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.490738][T11099] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.498069][T11099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.524414][T11099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.616142][T11099] hsr_slave_0: entered promiscuous mode
[  201.632209][ T5142] Bluetooth: hci1: command tx timeout
[  201.638342][T11099] hsr_slave_1: entered promiscuous mode
[  201.653183][T11099] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  201.669648][T11099] Cannot create hsr debugfs directory
[  201.786701][T11230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1376'.
[  201.801137][T11238] netlink: 4632 bytes leftover after parsing attributes in process `syz.0.1379'.
[  202.070285][T11255] vxcan1: tx drop: invalid da for name 0x0000000000000002
[  202.114031][T11252] netlink: 'syz.3.1384': attribute type 3 has an invalid length.
[  202.142388][T11252] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1384'.
[  202.180346][T11256] netlink: 'syz.3.1384': attribute type 3 has an invalid length.
[  202.202618][T11256] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1384'.
[  202.222540][T11265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'.
[  202.285888][T11265] netlink: 'syz.4.1387': attribute type 6 has an invalid length.
[  202.390295][T11272] pim6reg: entered allmulticast mode
[  202.401613][T11277] __nla_validate_parse: 1 callbacks suppressed
[  202.401633][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1389'.
[  202.415954][T11272] pim6reg: left allmulticast mode
[  202.446779][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1389'.
[  202.483989][T11277] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1389'.
[  202.615127][T11099] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  202.645203][T11099] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  202.683978][T11099] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  202.704064][T11099] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  203.017714][T11099] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.055081][T11099] 8021q: adding VLAN 0 to HW filter on device team0
[  203.068151][T11311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1397'.
[  203.080242][T11311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1397'.
[  203.099962][T11311] netlink: 'syz.2.1397': attribute type 6 has an invalid length.
[  203.116087][ T7364] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.123331][ T7364] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.146128][T10919] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.153324][T10919] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.475540][T11099] 8021q: adding VLAN 0 to HW filter on device batadv0
[  203.557264][T11099] veth0_vlan: entered promiscuous mode
[  203.582729][T11099] veth1_vlan: entered promiscuous mode
[  203.651698][T11099] veth0_macvtap: entered promiscuous mode
[  203.673826][T11099] veth1_macvtap: entered promiscuous mode
[  203.708904][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.720889][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.721695][ T5142] Bluetooth: hci1: command tx timeout
[  203.744560][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1408'.
[  203.780662][T11099] batman_adv: batadv0: Interface activated: batadv_slave_0
[  203.820251][T11099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.837418][T11099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.864884][T11099] batman_adv: batadv0: Interface activated: batadv_slave_1
[  203.885002][T11342] netlink: 'syz.2.1408': attribute type 1 has an invalid length.
[  203.885907][T11340] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.893618][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1408'.
[  203.908635][T11340] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.920081][T11340] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.934108][T11340] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.943433][T11340] geneve3: entered promiscuous mode
[  203.954195][T11340] geneve3: entered allmulticast mode
[  203.973094][T11340] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  203.983224][T11340] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  203.992755][T11340] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  204.002156][T11340] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  204.037197][T11348] vxcan1: tx drop: invalid da for name 0x0000000000000002
[  204.053609][T11099] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.068012][T11099] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.077447][T11099] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.093099][T11099] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  204.217523][T11351] netlink: 'syz.3.1411': attribute type 13 has an invalid length.
[  204.235869][T11351] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.1411'.
[  204.283677][T10921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.303843][T10921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.323063][T11361] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1413'.
[  204.393696][T10921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.409302][T10921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.809800][T11393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1424'.
[  205.174472][T11419] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  205.196557][T11419] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  205.634911][T11452] veth0_to_team: entered promiscuous mode
[  205.651908][T11452] veth0_to_team: entered allmulticast mode
[  205.739124][T11465] tap0: tun_chr_ioctl cmd 1074025677
[  205.758109][T11465] tap0: linktype set to 776
[  206.020714][ T7364] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.528347][ T7364] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.692882][ T7364] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.766879][ T7364] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.833619][ T7364] bridge_slave_1: left allmulticast mode
[  206.839316][ T7364] bridge_slave_1: left promiscuous mode
[  206.845674][ T7364] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.855753][ T7364] bridge_slave_0: left allmulticast mode
[  206.861871][ T7364] bridge_slave_0: left promiscuous mode
[  206.867559][ T7364] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.232778][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  207.249923][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  207.260170][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  207.275103][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  207.308986][T11505] netlink: 'syz.3.1452': attribute type 10 has an invalid length.
[  207.316645][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  207.325293][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  207.514875][ T7364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  207.526254][ T7364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  207.537072][ T7364] bond0 (unregistering): Released all slaves
[  207.547344][T11489] __nla_validate_parse: 13 callbacks suppressed
[  207.547364][T11489] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1450'.
[  207.572238][T11494] bridge_slave_1: left allmulticast mode
[  207.578315][T11494] bridge_slave_1: left promiscuous mode
[  207.591894][T11494] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.694940][T11505] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  207.730653][T11511] netlink: 'syz.4.1454': attribute type 1 has an invalid length.
[  207.749040][T11512] netlink: 'syz.4.1454': attribute type 1 has an invalid length.
[  207.895273][T11500] lo speed is unknown, defaulting to 1000
[  208.194767][T11500] ip6gre0 speed is unknown, defaulting to 1000
[  208.434960][ T5879] IPVS: starting estimator thread 0...
[  208.450834][T11543] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  208.541487][T11549] IPVS: using max 26 ests per chain, 62400 per kthread
[  208.890370][ T7364] hsr_slave_0: left promiscuous mode
[  208.931579][ T7364] hsr_slave_1: left promiscuous mode
[  208.959580][ T7364] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.971659][ T7364] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.986744][ T7364] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.000180][ T7364] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.044965][ T7364] veth1_macvtap: left promiscuous mode
[  209.061832][ T7364] veth0_macvtap: left promiscuous mode
[  209.069052][ T7364] veth1_vlan: left promiscuous mode
[  209.073912][T11583] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1471'.
[  209.081369][ T7364] veth0_vlan: left promiscuous mode
[  209.392643][ T5142] Bluetooth: hci1: command tx timeout
[  209.735466][ T7364] team0 (unregistering): Port device team_slave_1 removed
[  209.799030][ T7364] team0 (unregistering): Port device team_slave_0 removed
[  210.298986][T11586] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1472'.
[  210.362773][T11588] lo speed is unknown, defaulting to 1000
[  210.594538][T11588] ip6gre0 speed is unknown, defaulting to 1000
[  210.657616][T11500] chnl_net:caif_netlink_parms(): no params data found
[  210.949445][T11617] syzkaller0: entered promiscuous mode
[  210.957622][T11617] syzkaller0: entered allmulticast mode
[  211.005742][T11500] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.026302][T11500] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.038098][T11500] bridge_slave_0: entered allmulticast mode
[  211.045453][T11500] bridge_slave_0: entered promiscuous mode
[  211.053540][T11500] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.060789][T11500] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.068578][T11500] bridge_slave_1: entered allmulticast mode
[  211.076220][T11500] bridge_slave_1: entered promiscuous mode
[  211.090428][T11629] sctp: [Deprecated]: syz.3.1478 (pid 11629) Use of int in maxseg socket option.
[  211.090428][T11629] Use struct sctp_assoc_value instead
[  211.279945][T11500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  211.443078][T11646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1485'.
[  211.472123][ T5142] Bluetooth: hci1: command tx timeout
[  213.240684][T11500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  213.258745][T11646] batadv_slave_0: entered promiscuous mode
[  213.381053][T11500] team0: Port device team_slave_0 added
[  213.416826][T11500] team0: Port device team_slave_1 added
[  213.551538][ T5142] Bluetooth: hci1: command tx timeout
[  213.560820][T11500] batman_adv: batadv0: Adding interface: batadv_slave_0
[  213.592399][T11500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.702658][T11500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  213.747991][T11500] batman_adv: batadv0: Adding interface: batadv_slave_1
[  213.775977][T11500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.785396][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1490'.
[  213.818094][T11500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  213.915201][T11500] hsr_slave_0: entered promiscuous mode
[  213.928514][T11500] hsr_slave_1: entered promiscuous mode
[  213.951643][T11500] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  213.959277][T11500] Cannot create hsr debugfs directory
[  214.190819][T11688] macsec4: entered promiscuous mode
[  214.206302][T11688] ip6gretap0: entered promiscuous mode
[  214.229103][T11688] macsec4: entered allmulticast mode
[  214.234777][T11688] ip6gretap0: entered allmulticast mode
[  214.261711][T11688] ip6gretap0: left allmulticast mode
[  214.271499][T11688] ip6gretap0: left promiscuous mode
[  214.348862][T11691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1494'.
[  214.426953][T11699] vlan3: entered promiscuous mode
[  214.524913][T11708] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1502'.
[  214.594400][T11712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  214.805853][T11723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1506'.
[  214.899905][T11500] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  214.920323][T11500] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  214.976032][T11500] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  214.993605][T11727] netlink: 'syz.0.1508': attribute type 1 has an invalid length.
[  215.041252][T11500] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  215.244119][T11500] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.296073][T11500] 8021q: adding VLAN 0 to HW filter on device team0
[  215.337532][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.344746][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  215.397369][T10921] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.404671][T10921] bridge0: port 2(bridge_slave_1) entered forwarding state
[  215.415935][T11747] openvswitch: netlink: IP tunnel dst address not specified
[  215.425151][T11742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1514'.
[  215.498324][T11500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  215.585565][T11757] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1518'.
[  215.619894][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1518'.
[  215.631759][ T5142] Bluetooth: hci1: command tx timeout
[  215.647693][T11757] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1518'.
[  215.743327][T11500] 8021q: adding VLAN 0 to HW filter on device batadv0
[  215.753572][T11763] netlink: 'syz.0.1519': attribute type 1 has an invalid length.
[  215.762817][T11763] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1519'.
[  215.954867][T11500] veth0_vlan: entered promiscuous mode
[  215.975225][T11500] veth1_vlan: entered promiscuous mode
[  216.009848][T11500] veth0_macvtap: entered promiscuous mode
[  216.050312][T11500] veth1_macvtap: entered promiscuous mode
[  216.135368][T11771] ip6gretap0: left allmulticast mode
[  216.143206][T11771] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.224370][T11771] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  216.239136][T11771] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  216.347756][T11771] vlan1: left promiscuous mode
[  216.353492][T11771] vlan1: left allmulticast mode
[  216.359584][T11771] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.368914][T11771] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.379102][T11771] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.388363][T11771] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.480138][T11500] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.518529][T11500] batman_adv: batadv0: Interface activated: batadv_slave_1
[  216.543234][T11500] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.564659][T11500] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.581262][T11500] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.605851][T11500] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.645766][T11785] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  216.763902][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1527'.
[  216.787216][T10920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.812791][T10920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.906011][ T3445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.914138][ T3445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.123664][T11810] netlink: 'syz.4.1529': attribute type 2 has an invalid length.
[  217.164133][T11809] lo speed is unknown, defaulting to 1000
[  217.578214][T11809] ip6gre0 speed is unknown, defaulting to 1000
[  217.924376][T11848] netlink: 'syz.4.1543': attribute type 2 has an invalid length.
[  217.932296][T11848] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  218.255339][T11869] vlan2: entered promiscuous mode
[  218.515825][T11878] netlink: 'syz.3.1549': attribute type 10 has an invalid length.
[  218.555702][T11878] team0: Port device hsr_slave_0 added
[  218.959466][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.369028][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.440105][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.505809][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.595393][   T11] bridge_slave_1: left allmulticast mode
[  219.601059][   T11] bridge_slave_1: left promiscuous mode
[  219.607478][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.616923][   T11] bridge_slave_0: left allmulticast mode
[  219.625047][   T11] bridge_slave_0: left promiscuous mode
[  219.630834][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.815888][T11897] netlink: 'syz.2.1551': attribute type 1 has an invalid length.
[  219.824085][T11898] netlink: 'syz.2.1551': attribute type 1 has an invalid length.
[  219.833089][T11897] __nla_validate_parse: 12 callbacks suppressed
[  219.833107][T11897] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1551'.
[  219.848683][T11898] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1551'.
[  220.044172][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1555'.
[  220.119152][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  220.129776][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  220.146544][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  220.159003][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  220.188358][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  220.199674][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  220.308811][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1557'.
[  220.416410][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  220.428556][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  220.439067][   T11] bond0 (unregistering): Released all slaves
[  220.461623][T11906] IPVS: Unknown mcast interface: vcan0
[  220.513125][T11909] lo speed is unknown, defaulting to 1000
[  220.638903][T11920] netlink: 'syz.2.1558': attribute type 1 has an invalid length.
[  220.832373][T11909] ip6gre0 speed is unknown, defaulting to 1000
[  220.874407][T11929] netlink: 'syz.0.1562': attribute type 1 has an invalid length.
[  221.210455][T11938] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1564'.
[  221.223805][T11944] tap0: tun_chr_ioctl cmd 1074025677
[  221.244768][T11944] tap0: linktype set to 825
[  221.364065][T11947] tap0: tun_chr_ioctl cmd 21731
[  221.446721][T11950] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1566'.
[  221.611543][   T11] hsr_slave_0: left promiscuous mode
[  221.618462][   T11] hsr_slave_1: left promiscuous mode
[  221.642870][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.650595][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.676080][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  221.693987][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  221.728865][   T11] veth1_macvtap: left promiscuous mode
[  221.739524][   T11] veth0_macvtap: left promiscuous mode
[  221.745425][   T11] veth1_vlan: left promiscuous mode
[  221.750762][   T11] veth0_vlan: left promiscuous mode
[  222.237277][   T11] team0 (unregistering): Port device team_slave_1 removed
[  222.274612][ T5838] Bluetooth: hci1: command tx timeout
[  222.293013][   T11] team0 (unregistering): Port device team_slave_0 removed
[  223.045760][T11909] chnl_net:caif_netlink_parms(): no params data found
[  223.070803][T11978] netlink: 'syz.4.1574': attribute type 1 has an invalid length.
[  223.124458][T11982] netlink: 'syz.4.1574': attribute type 1 has an invalid length.
[  223.183758][T11981] team0 (unregistering): left allmulticast mode
[  223.192127][T11981] team_slave_0: left allmulticast mode
[  223.200697][T11981] team_slave_1: left allmulticast mode
[  223.208879][T11981] bridge0: port 3(team0) entered disabled state
[  223.244761][T11981] team_slave_0: left promiscuous mode
[  223.255145][T11981] team0 (unregistering): Port device team_slave_0 removed
[  223.263074][T11981] team_slave_1: left promiscuous mode
[  223.275591][T11981] team0 (unregistering): Port device team_slave_1 removed
[  223.396248][T11909] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.409936][T11909] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.417687][T11909] bridge_slave_0: entered allmulticast mode
[  223.425245][T11909] bridge_slave_0: entered promiscuous mode
[  223.449095][T11909] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.457852][T11909] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.465310][T11909] bridge_slave_1: entered allmulticast mode
[  223.501962][T11909] bridge_slave_1: entered promiscuous mode
[  223.552634][T11909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.570505][T11909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.586225][T12001] netlink: 'syz.4.1580': attribute type 10 has an invalid length.
[  223.664112][T11909] team0: Port device team_slave_0 added
[  223.669077][T12003] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  223.673196][T11909] team0: Port device team_slave_1 added
[  223.708539][T11909] batman_adv: batadv0: Adding interface: batadv_slave_0
[  223.728508][T11909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.761541][T11909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.774907][T11909] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.782183][T11909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.808468][T11909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  223.878812][T12008] netlink: 'syz.4.1582': attribute type 13 has an invalid length.
[  223.904876][T11909] hsr_slave_0: entered promiscuous mode
[  223.916848][T11909] hsr_slave_1: entered promiscuous mode
[  223.934555][T11909] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  223.961414][T11909] Cannot create hsr debugfs directory
[  223.964626][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1583'.
[  224.104842][T12020] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1583'.
[  224.142586][T12017] netlink: 'syz.4.1585': attribute type 10 has an invalid length.
[  224.215269][T12017] 8021q: adding VLAN 0 to HW filter on device team0
[  224.230328][T12017] bond0: (slave team0): Enslaving as an active interface with an up link
[  224.260789][T12026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1587'.
[  224.351474][ T5838] Bluetooth: hci1: command tx timeout
[  224.559654][T12045] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1592'.
[  224.580568][T12045] netlink: 'syz.3.1592': attribute type 10 has an invalid length.
[  224.610041][T12045] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  224.641825][T12045] team0: Failed to send options change via netlink (err -105)
[  224.649362][T12045] team0: Port device netdevsim0 added
[  224.950105][T11909] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  225.015377][T11909] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  225.040527][T11909] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  225.060805][T11909] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  225.143599][T12076] __nla_validate_parse: 2 callbacks suppressed
[  225.143618][T12076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1596'.
[  225.216372][T12076] bond4: entered promiscuous mode
[  225.232670][T12080] bridge4: entered promiscuous mode
[  225.238654][T12080] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  225.270731][T11909] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.286425][T12076] bond4 (unregistering): (slave bridge4): Releasing backup interface
[  225.299257][T12076] bridge4: left promiscuous mode
[  225.308360][T12076] bond4 (unregistering): Released all slaves
[  225.365420][T11909] 8021q: adding VLAN 0 to HW filter on device team0
[  225.378021][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.385235][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.416615][T10921] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.423801][T10921] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.623719][T11909] 8021q: adding VLAN 0 to HW filter on device batadv0
[  225.684643][T11909] veth0_vlan: entered promiscuous mode
[  225.706671][T11909] veth1_vlan: entered promiscuous mode
[  225.772628][T11909] veth0_macvtap: entered promiscuous mode
[  225.790117][T11909] veth1_macvtap: entered promiscuous mode
[  225.810167][T11909] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.836176][T11909] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.857946][T11909] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.867232][T11909] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.890955][T11909] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.905138][T11909] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.998651][T12095] tipc: Invalid UDP bearer configuration
[  225.998693][T12095] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  226.159780][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.185548][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.245251][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.271820][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.296536][T12112] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1606'.
[  226.324312][T12109] netlink: 'syz.2.1605': attribute type 1 has an invalid length.
[  226.432893][ T5838] Bluetooth: hci1: command tx timeout
[  226.668442][T12121] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1609'.
[  226.687485][T12122] netlink: 'syz.3.1608': attribute type 2 has an invalid length.
[  226.707607][T12121] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11
[  226.709069][T12122] netlink: 'syz.3.1608': attribute type 1 has an invalid length.
[  226.740938][T12124] netlink: 'syz.2.1610': attribute type 1 has an invalid length.
[  226.855912][T12132] netlink: 'syz.3.1612': attribute type 6 has an invalid length.
[  226.917038][T12131] netlink: 'syz.3.1612': attribute type 6 has an invalid length.
[  227.200695][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1616'.
[  227.245320][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1615'.
[  227.302824][T12152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1615'.
[  227.310947][T12157] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1616'.
[  227.325586][T12152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1615'.
[  227.520343][ T5838] Bluetooth: hci4: link tx timeout
[  227.526907][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  227.538225][ T5142] Bluetooth: hci4: link tx timeout
[  227.559153][ T5142] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  227.868380][T10921] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.930466][T12184] hsr_slave_0: left promiscuous mode
[  227.937422][T12184] hsr_slave_1: left promiscuous mode
[  228.821477][T12195] netlink: 'syz.4.1623': attribute type 1 has an invalid length.
[  228.978142][T12195] 8021q: adding VLAN 0 to HW filter on device bond4
[  229.105928][T12216] hsr0: entered promiscuous mode
[  229.174032][T12200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1622'.
[  229.255372][T12227] netlink: 560 bytes leftover after parsing attributes in process `syz.4.1628'.
[  229.284851][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  229.297392][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  229.297462][T12227] netlink: 'syz.4.1628': attribute type 4 has an invalid length.
[  229.314719][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  229.326689][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  229.336476][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  229.344598][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  229.487937][T10921] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.510135][T12229] lo speed is unknown, defaulting to 1000
[  229.516077][T12215] hsr0: left promiscuous mode
[  229.523332][T12237] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.631804][ T5838] Bluetooth: hci4: command 0x0405 tx timeout
[  229.654821][T10921] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.676785][T12229] ip6gre0 speed is unknown, defaulting to 1000
[  229.869613][T10921] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.968147][T12254] nbd: couldn't find a device at index 1073741824
[  230.058384][T10921] bridge_slave_1: left allmulticast mode
[  230.086422][T10921] bridge_slave_1: left promiscuous mode
[  230.095740][T10921] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.108537][T10921] bridge_slave_0: left allmulticast mode
[  230.116727][T10921] bridge_slave_0: left promiscuous mode
[  230.136062][T10921] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.264808][ T7364] tipc: Subscription rejected, illegal request
[  230.659929][T10921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  230.675531][T10921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  230.690040][T10921] bond0 (unregistering): Released all slaves
[  230.720187][T12229] chnl_net:caif_netlink_parms(): no params data found
[  230.984274][T12280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1644'.
[  231.194851][T12229] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.202278][T12229] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.209575][T12229] bridge_slave_0: entered allmulticast mode
[  231.231000][T12229] bridge_slave_0: entered promiscuous mode
[  231.241091][T12289] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1646'.
[  231.252616][T12229] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.259751][T12229] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.277370][T12229] bridge_slave_1: entered allmulticast mode
[  231.289805][T12229] bridge_slave_1: entered promiscuous mode
[  231.391742][ T5838] Bluetooth: hci1: command tx timeout
[  231.470659][T12298] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0
[  231.590995][T12275] team0: Failed to send options change via netlink (err -105)
[  231.631955][T12275] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  231.662483][T12275] team0: Port device netdevsim0 removed
[  231.685735][T12229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  231.790846][T10921] hsr_slave_0: left promiscuous mode
[  231.807043][T10921] hsr_slave_1: left promiscuous mode
[  231.824736][T10921] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  231.840587][T10921] batman_adv: batadv0: Removing interface: batadv_slave_0
[  231.864275][T10921] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  231.876254][T10921] batman_adv: batadv0: Removing interface: batadv_slave_1
[  231.920628][T10921] veth1_macvtap: left promiscuous mode
[  231.930011][T10921] veth0_macvtap: left promiscuous mode
[  231.938523][T10921] veth1_vlan: left promiscuous mode
[  231.946201][T10921] veth0_vlan: left promiscuous mode
[  232.464502][T10921] team0 (unregistering): Port device team_slave_1 removed
[  232.510586][T10921] team0 (unregistering): Port device team_slave_0 removed
[  232.957269][T12229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.998846][T12229] team0: Port device team_slave_0 added
[  233.005490][T12311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1651'.
[  233.080313][T12229] team0: Port device team_slave_1 added
[  233.184430][T12229] batman_adv: batadv0: Adding interface: batadv_slave_0
[  233.197593][T12229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.230114][T12229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  233.247409][T12229] batman_adv: batadv0: Adding interface: batadv_slave_1
[  233.260055][T12229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.301277][T12229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  233.471496][ T5838] Bluetooth: hci1: command tx timeout
[  233.595812][T12229] hsr_slave_0: entered promiscuous mode
[  233.662879][T12229] hsr_slave_1: entered promiscuous mode
[  233.679431][T12229] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  233.688932][T12229] Cannot create hsr debugfs directory
[  233.720906][T12337] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1661'.
[  233.828437][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1662'.
[  233.838476][ T5142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  233.855766][ T5142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  233.868368][ T5142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  233.880799][ T5142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  233.902011][ T5142] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  233.912435][ T5142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  234.016242][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1663'.
[  234.032997][T12345] lo speed is unknown, defaulting to 1000
[  234.081104][T12352] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1664'.
[  234.170347][T12345] ip6gre0 speed is unknown, defaulting to 1000
[  234.348363][T12358] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073357230079)
[  234.365081][T12358] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  234.488698][T12229] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  234.516215][T12229] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  234.548817][T12229] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  234.571082][T12229] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  234.616574][T12371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1670'.
[  234.700469][T12381] 8021q: adding VLAN 0 to HW filter on device bond4
[  234.760798][T12385] bond5 (unregistering): Released all slaves
[  234.847517][T12391] team0: Device veth0_vlan failed to register rx_handler
[  234.952812][T12229] 8021q: adding VLAN 0 to HW filter on device bond0
[  235.013662][T12400] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1676'.
[  235.026547][T12345] chnl_net:caif_netlink_parms(): no params data found
[  235.048563][T12229] 8021q: adding VLAN 0 to HW filter on device team0
[  235.115305][T10921] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.122498][T10921] bridge0: port 1(bridge_slave_0) entered forwarding state
[  235.139924][T12400] netlink: 'syz.4.1676': attribute type 39 has an invalid length.
[  235.176160][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.183338][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  235.195664][T12405] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1676'.
[  235.317938][T12345] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.346600][T12345] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.386383][T12345] bridge_slave_0: entered allmulticast mode
[  235.393828][T12345] bridge_slave_0: entered promiscuous mode
[  235.427889][T12345] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.446309][T12345] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.460111][T12345] bridge_slave_1: entered allmulticast mode
[  235.514508][T12345] bridge_slave_1: entered promiscuous mode
[  235.523972][T12424] xt_bpf: check failed: parse error
[  235.551978][ T5838] Bluetooth: hci1: command tx timeout
[  235.576431][T12229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  235.628391][T12345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.683277][T12345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.803565][T12345] team0: Port device team_slave_0 added
[  235.824062][T12345] team0: Port device team_slave_1 added
[  235.898142][T12345] batman_adv: batadv0: Adding interface: batadv_slave_0
[  235.911657][T12345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.951759][ T5838] Bluetooth: hci2: command tx timeout
[  235.965525][T12345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.026981][T12345] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.045110][T12345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.073130][T12345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.100793][T12229] 8021q: adding VLAN 0 to HW filter on device batadv0
[  236.170718][T12456] lo speed is unknown, defaulting to 1000
[  236.195590][T12345] hsr_slave_0: entered promiscuous mode
[  236.232508][T12345] hsr_slave_1: entered promiscuous mode
[  236.251623][T12345] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  236.259454][T12345] Cannot create hsr debugfs directory
[  236.532741][T12229] veth0_vlan: entered promiscuous mode
[  236.538703][T12456] ip6gre0 speed is unknown, defaulting to 1000
[  236.552279][T12229] veth1_vlan: entered promiscuous mode
[  236.720009][T12229] veth0_macvtap: entered promiscuous mode
[  236.747820][T12229] veth1_macvtap: entered promiscuous mode
[  236.852829][T12229] batman_adv: batadv0: Interface activated: batadv_slave_0
[  236.877901][T12229] batman_adv: batadv0: Interface activated: batadv_slave_1
[  236.969188][T12229] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.981664][T12229] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.994172][T12229] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.007942][T12229] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.024048][T12484] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  237.059847][T12345] bond0: (slave netdevsim0): Releasing backup interface
[  237.095209][T12484] ------------[ cut here ]------------
[  237.101084][T12484] WARNING: CPU: 1 PID: 12484 at drivers/net/wireless/virtual/mac80211_hwsim.c:1445 mac80211_hwsim_config_mac_nl+0x2b2/0x370
[  237.114569][T12484] Modules linked in:
[  237.118493][T12484] CPU: 1 UID: 0 PID: 12484 Comm: syz.0.1698 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0
[  237.129376][T12484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  237.139860][T12484] RIP: 0010:mac80211_hwsim_config_mac_nl+0x2b2/0x370
[  237.146628][T12484] Code: 48 8b 3c 24 4c 89 fe 44 89 ea 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 eb f8 ff ff e8 d6 60 87 fa eb 05 e8 cf 60 87 fa 90 <0f> 0b 90 e9 10 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 90 fd
[  237.166903][T12484] RSP: 0018:ffffc900036676b0 EFLAGS: 00010293
[  237.173414][T12484] RAX: ffffffff87181151 RBX: 0000000000000000 RCX: ffff88802acd1e00
[  237.181787][T12484] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  237.189839][T12484] RBP: 0000000000000000 R08: ffffffff87180f5d R09: 1ffffffff2032a4e
[  237.198574][T12484] R10: dffffc0000000000 R11: ffffffff87177fa0 R12: ffff888027256e32
[  237.206869][T12484] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880253d30a0
[  237.215384][T12484] FS:  00007f73ac5646c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  237.224680][T12484] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  237.231675][T12484] CR2: 00007fd147a756c0 CR3: 000000007e248000 CR4: 00000000003526f0
[  237.239684][T12484] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  237.247755][T12484] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  237.256086][T12484] Call Trace:
[  237.259398][T12484]  <TASK>
[  237.262408][T12484]  ? __warn+0x165/0x4d0
[  237.266596][T12484]  ? mac80211_hwsim_config_mac_nl+0x2b2/0x370
[  237.273014][T12484]  ? report_bug+0x2b3/0x500
[  237.277549][T12484]  ? mac80211_hwsim_config_mac_nl+0x2b2/0x370
[  237.283711][T12484]  ? handle_bug+0x60/0x90
[  237.288062][T12484]  ? exc_invalid_op+0x1a/0x50
[  237.293082][T12484]  ? asm_exc_invalid_op+0x1a/0x20
[  237.298140][T12484]  ? __pfx_mac80211_hwsim_add_interface+0x10/0x10
[  237.304658][T12484]  ? mac80211_hwsim_config_mac_nl+0xbd/0x370
[  237.310679][T12484]  ? mac80211_hwsim_config_mac_nl+0x2b1/0x370
[  237.317406][T12484]  ? mac80211_hwsim_config_mac_nl+0x2b2/0x370
[  237.323577][T12484]  ? mac80211_hwsim_add_interface+0x86/0x320
[  237.329608][T12484]  mac80211_hwsim_add_interface+0x9a/0x320
[  237.335767][T12484]  drv_add_interface+0x2f8/0x8e0
[  237.340741][T12484]  ieee80211_do_open+0x73d/0x2420
[  237.345867][T12484]  ? ieee80211_check_concurrent_iface+0x70e/0x7e0
[  237.352581][T12484]  ieee80211_open+0x192/0x200
[  237.357309][T12484]  __dev_open+0x2d3/0x450
[  237.361728][T12484]  ? __pfx___dev_open+0x10/0x10
[  237.366610][T12484]  ? dev_set_rx_mode+0xb8/0x2e0
[  237.371784][T12484]  __dev_change_flags+0x1e2/0x6f0
[  237.376848][T12484]  ? __pfx___mutex_lock+0x10/0x10
[  237.381958][T12484]  ? __pfx___dev_change_flags+0x10/0x10
[  237.387534][T12484]  ? apparmor_capable+0x13b/0x1b0
[  237.392959][T12484]  dev_change_flags+0x8b/0x1a0
[  237.397777][T12484]  devinet_ioctl+0xcce/0x1ac0
[  237.402550][T12484]  inet_ioctl+0x3d7/0x4f0
[  237.406913][T12484]  ? __pfx_inet_ioctl+0x10/0x10
[  237.412105][T12484]  ? tomoyo_path_number_perm+0x679/0x860
[  237.417791][T12484]  ? __lock_acquire+0x1397/0x2100
[  237.422902][T12484]  ? tomoyo_path_number_perm+0x206/0x860
[  237.428675][T12484]  sock_do_ioctl+0x158/0x460
[  237.433587][T12484]  ? __pfx_sock_do_ioctl+0x10/0x10
[  237.438756][T12484]  sock_ioctl+0x626/0x8e0
[  237.443154][T12484]  ? __pfx_sock_ioctl+0x10/0x10
[  237.448050][T12484]  ? __fget_files+0x2a/0x410
[  237.452970][T12484]  ? __fget_files+0x2a/0x410
[  237.457611][T12484]  ? __pfx_sock_ioctl+0x10/0x10
[  237.462574][T12484]  __se_sys_ioctl+0xf5/0x170
[  237.467218][T12484]  do_syscall_64+0xf3/0x230
[  237.472138][T12484]  ? clear_bhb_loop+0x35/0x90
[  237.476860][T12484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.482833][T12484] RIP: 0033:0x7f73ab77fadb
[  237.487270][T12484] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  237.507210][T12484] RSP: 002b:00007f73ac562e80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  237.515717][T12484] RAX: ffffffffffffffda RBX: 00007f73ac562fa0 RCX: 00007f73ab77fadb
[  237.524026][T12484] RDX: 00007f73ac562f00 RSI: 0000000000008914 RDI: 000000000000000e
[  237.532103][T12484] RBP: 000000000000000e R08: 0000000000000000 R09: 0000000000000000
[  237.540097][T12484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024
[  237.548380][T12484] R13: 0000000000000048 R14: 00007f73ac562fc0 R15: 00007f73ac562f00
[  237.556501][T12484]  </TASK>
[  237.559577][T12484] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  237.566876][T12484] CPU: 1 UID: 0 PID: 12484 Comm: syz.0.1698 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0
[  237.577643][T12484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  237.587787][T12484] Call Trace:
[  237.591063][T12484]  <TASK>
[  237.593993][T12484]  dump_stack_lvl+0x241/0x360
[  237.598699][T12484]  ? __pfx_dump_stack_lvl+0x10/0x10
[  237.603903][T12484]  ? __pfx__printk+0x10/0x10
[  237.608504][T12484]  ? vscnprintf+0x5d/0x90
[  237.612833][T12484]  panic+0x349/0x880
[  237.616732][T12484]  ? __warn+0x174/0x4d0
[  237.620889][T12484]  ? __pfx_panic+0x10/0x10
[  237.625316][T12484]  __warn+0x344/0x4d0
[  237.629297][T12484]  ? mac80211_hwsim_config_mac_nl+0x2b2/0x370
[  237.635365][T12484]  report_bug+0x2b3/0x500
[  237.639697][T12484]  ? mac80211_hwsim_config_mac_nl+0x2b2/0x370
[  237.645767][T12484]  handle_bug+0x60/0x90
[  237.649919][T12484]  exc_invalid_op+0x1a/0x50
[  237.654423][T12484]  asm_exc_invalid_op+0x1a/0x20
[  237.659278][T12484] RIP: 0010:mac80211_hwsim_config_mac_nl+0x2b2/0x370
[  237.665954][T12484] Code: 48 8b 3c 24 4c 89 fe 44 89 ea 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 eb f8 ff ff e8 d6 60 87 fa eb 05 e8 cf 60 87 fa 90 <0f> 0b 90 e9 10 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 90 fd
[  237.685566][T12484] RSP: 0018:ffffc900036676b0 EFLAGS: 00010293
[  237.691640][T12484] RAX: ffffffff87181151 RBX: 0000000000000000 RCX: ffff88802acd1e00
[  237.699615][T12484] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  237.707586][T12484] RBP: 0000000000000000 R08: ffffffff87180f5d R09: 1ffffffff2032a4e
[  237.715562][T12484] R10: dffffc0000000000 R11: ffffffff87177fa0 R12: ffff888027256e32
[  237.723545][T12484] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880253d30a0
[  237.731517][T12484]  ? __pfx_mac80211_hwsim_add_interface+0x10/0x10
[  237.737938][T12484]  ? mac80211_hwsim_config_mac_nl+0xbd/0x370
[  237.744012][T12484]  ? mac80211_hwsim_config_mac_nl+0x2b1/0x370
[  237.750084][T12484]  ? mac80211_hwsim_add_interface+0x86/0x320
[  237.756073][T12484]  mac80211_hwsim_add_interface+0x9a/0x320
[  237.761888][T12484]  drv_add_interface+0x2f8/0x8e0
[  237.766835][T12484]  ieee80211_do_open+0x73d/0x2420
[  237.771865][T12484]  ? ieee80211_check_concurrent_iface+0x70e/0x7e0
[  237.778290][T12484]  ieee80211_open+0x192/0x200
[  237.782975][T12484]  __dev_open+0x2d3/0x450
[  237.787317][T12484]  ? __pfx___dev_open+0x10/0x10
[  237.792170][T12484]  ? dev_set_rx_mode+0xb8/0x2e0
[  237.797046][T12484]  __dev_change_flags+0x1e2/0x6f0
[  237.802100][T12484]  ? __pfx___mutex_lock+0x10/0x10
[  237.807141][T12484]  ? __pfx___dev_change_flags+0x10/0x10
[  237.812717][T12484]  ? apparmor_capable+0x13b/0x1b0
[  237.817777][T12484]  dev_change_flags+0x8b/0x1a0
[  237.822562][T12484]  devinet_ioctl+0xcce/0x1ac0
[  237.827254][T12484]  inet_ioctl+0x3d7/0x4f0
[  237.831586][T12484]  ? __pfx_inet_ioctl+0x10/0x10
[  237.836436][T12484]  ? tomoyo_path_number_perm+0x679/0x860
[  237.842083][T12484]  ? __lock_acquire+0x1397/0x2100
[  237.847116][T12484]  ? tomoyo_path_number_perm+0x206/0x860
[  237.852845][T12484]  sock_do_ioctl+0x158/0x460
[  237.857445][T12484]  ? __pfx_sock_do_ioctl+0x10/0x10
[  237.862570][T12484]  sock_ioctl+0x626/0x8e0
[  237.866905][T12484]  ? __pfx_sock_ioctl+0x10/0x10
[  237.871764][T12484]  ? __fget_files+0x2a/0x410
[  237.876358][T12484]  ? __fget_files+0x2a/0x410
[  237.880947][T12484]  ? __pfx_sock_ioctl+0x10/0x10
[  237.885802][T12484]  __se_sys_ioctl+0xf5/0x170
[  237.890400][T12484]  do_syscall_64+0xf3/0x230
[  237.894909][T12484]  ? clear_bhb_loop+0x35/0x90
[  237.899589][T12484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.905490][T12484] RIP: 0033:0x7f73ab77fadb
[  237.909904][T12484] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  237.929512][T12484] RSP: 002b:00007f73ac562e80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  237.937930][T12484] RAX: ffffffffffffffda RBX: 00007f73ac562fa0 RCX: 00007f73ab77fadb
[  237.945901][T12484] RDX: 00007f73ac562f00 RSI: 0000000000008914 RDI: 000000000000000e
[  237.953875][T12484] RBP: 000000000000000e R08: 0000000000000000 R09: 0000000000000000
[  237.961840][T12484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024
[  237.969808][T12484] R13: 0000000000000048 R14: 00007f73ac562fc0 R15: 00007f73ac562f00
[  237.977789][T12484]  </TASK>
[  237.981117][T12484] Kernel Offset: disabled
[  237.985524][T12484] Rebooting in 86400 seconds..