last executing test programs:

1m20.478863519s ago: executing program 2 (id=740):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000001080)={'wlan1\x00'})
socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001040)={0x3, 0x3}, 0xfffffffffffffedb)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[], 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x3f}, 0x80, &(0x7f0000000040)=[{&(0x7f00000006c0)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4deb8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18fc0260ee65302fba79b6ede33d5653fc260616254bfd2094fcd732947077c67052b95dc84c79a46940cb8e29750471fde0e2190613b3537", 0x83}, {&(0x7f0000001340)="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", 0xec4}, {&(0x7f0000000300)="1f7da2f0c99ffb815b58c74d6f7c71bd8ba3b13dcd0b7303551c34c4e8c81b970f5efe39825400e5fdca4dcf71bee004f8076bc034909e4e7783bfe3b2f4b0021bece403dcd4246080aed97e3d62b45358a65243ee54211a374fb0cb80e8fd2711c9129aa71845005f136cc3add133d8e2232a7347864fc1afdf984833d0736e64d6833bd6006df2a7ea93e740c7cb88fbac42fd6d1a063f534535dfb275adb500f3bbb16e5ccca5fceaaa2c06cc903082e743", 0xb3}], 0x3}, 0x9cdc2384016b48f8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)=r3)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4)
sendmmsg$inet(r4, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001ec0)="8d", 0x1}], 0x1}}], 0x1, 0x4008440)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="1905adad66fc3a94d49143e569b1a0f868a459a6fe262d96465c16b960f7a9fa2c985067970d67de032c89dc5fdae6a7e9913f90cd7f9178856ba7e2446bec468270411ce51d5179eac44615fb5a5d572a2882116eed1e96370e40b7e13bf915b4560d3e6cb4c3030dff59a87091bc896f7f708824a3db0ac06489c36c75984cb513a953941b97737433ea74"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd608a27f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000000f6"], 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa110040"], 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x3}}, 0x10)
splice(r1, &(0x7f00000001c0)=0x7, r5, &(0x7f00000002c0)=0x4, 0x8, 0x4)
close(r5)
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000010c0)=@generic={&(0x7f0000001140)='./file0\x00'}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x24, 0x0, &(0x7f0000000040)="06ff03076844268cb89e14f008004ee1546cb1c6a177ef96190a001710febabec41177fb", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)

1m13.854873198s ago: executing program 1 (id=874):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x5c, r1, 0x1, 0x70bd2a, 0x25dfdbf8, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xc}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x99}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x400c844)

1m6.188182557s ago: executing program 2 (id=740):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000001080)={'wlan1\x00'})
socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001040)={0x3, 0x3}, 0xfffffffffffffedb)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[], 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x3f}, 0x80, &(0x7f0000000040)=[{&(0x7f00000006c0)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4deb8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18fc0260ee65302fba79b6ede33d5653fc260616254bfd2094fcd732947077c67052b95dc84c79a46940cb8e29750471fde0e2190613b3537", 0x83}, {&(0x7f0000001340)="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", 0xec4}, {&(0x7f0000000300)="1f7da2f0c99ffb815b58c74d6f7c71bd8ba3b13dcd0b7303551c34c4e8c81b970f5efe39825400e5fdca4dcf71bee004f8076bc034909e4e7783bfe3b2f4b0021bece403dcd4246080aed97e3d62b45358a65243ee54211a374fb0cb80e8fd2711c9129aa71845005f136cc3add133d8e2232a7347864fc1afdf984833d0736e64d6833bd6006df2a7ea93e740c7cb88fbac42fd6d1a063f534535dfb275adb500f3bbb16e5ccca5fceaaa2c06cc903082e743", 0xb3}], 0x3}, 0x9cdc2384016b48f8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)=r3)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4)
sendmmsg$inet(r4, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001ec0)="8d", 0x1}], 0x1}}], 0x1, 0x4008440)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="1905adad66fc3a94d49143e569b1a0f868a459a6fe262d96465c16b960f7a9fa2c985067970d67de032c89dc5fdae6a7e9913f90cd7f9178856ba7e2446bec468270411ce51d5179eac44615fb5a5d572a2882116eed1e96370e40b7e13bf915b4560d3e6cb4c3030dff59a87091bc896f7f708824a3db0ac06489c36c75984cb513a953941b97737433ea74"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd608a27f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000000f6"], 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa110040"], 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x3}}, 0x10)
splice(r1, &(0x7f00000001c0)=0x7, r5, &(0x7f00000002c0)=0x4, 0x8, 0x4)
close(r5)
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000010c0)=@generic={&(0x7f0000001140)='./file0\x00'}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x24, 0x0, &(0x7f0000000040)="06ff03076844268cb89e14f008004ee1546cb1c6a177ef96190a001710febabec41177fb", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)

57.751320828s ago: executing program 1 (id=874):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x5c, r1, 0x1, 0x70bd2a, 0x25dfdbf8, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xc}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x99}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x400c844)

50.367551469s ago: executing program 2 (id=740):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000001080)={'wlan1\x00'})
socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001040)={0x3, 0x3}, 0xfffffffffffffedb)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[], 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x3f}, 0x80, &(0x7f0000000040)=[{&(0x7f00000006c0)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4deb8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18fc0260ee65302fba79b6ede33d5653fc260616254bfd2094fcd732947077c67052b95dc84c79a46940cb8e29750471fde0e2190613b3537", 0x83}, {&(0x7f0000001340)="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", 0xec4}, {&(0x7f0000000300)="1f7da2f0c99ffb815b58c74d6f7c71bd8ba3b13dcd0b7303551c34c4e8c81b970f5efe39825400e5fdca4dcf71bee004f8076bc034909e4e7783bfe3b2f4b0021bece403dcd4246080aed97e3d62b45358a65243ee54211a374fb0cb80e8fd2711c9129aa71845005f136cc3add133d8e2232a7347864fc1afdf984833d0736e64d6833bd6006df2a7ea93e740c7cb88fbac42fd6d1a063f534535dfb275adb500f3bbb16e5ccca5fceaaa2c06cc903082e743", 0xb3}], 0x3}, 0x9cdc2384016b48f8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)=r3)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4)
sendmmsg$inet(r4, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001ec0)="8d", 0x1}], 0x1}}], 0x1, 0x4008440)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="1905adad66fc3a94d49143e569b1a0f868a459a6fe262d96465c16b960f7a9fa2c985067970d67de032c89dc5fdae6a7e9913f90cd7f9178856ba7e2446bec468270411ce51d5179eac44615fb5a5d572a2882116eed1e96370e40b7e13bf915b4560d3e6cb4c3030dff59a87091bc896f7f708824a3db0ac06489c36c75984cb513a953941b97737433ea74"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd608a27f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000000f6"], 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa110040"], 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x3}}, 0x10)
splice(r1, &(0x7f00000001c0)=0x7, r5, &(0x7f00000002c0)=0x4, 0x8, 0x4)
close(r5)
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000010c0)=@generic={&(0x7f0000001140)='./file0\x00'}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x24, 0x0, &(0x7f0000000040)="06ff03076844268cb89e14f008004ee1546cb1c6a177ef96190a001710febabec41177fb", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)

49.477512101s ago: executing program 1 (id=874):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x5c, r1, 0x1, 0x70bd2a, 0x25dfdbf8, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xc}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x99}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x400c844)

35.253797321s ago: executing program 1 (id=874):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x5c, r1, 0x1, 0x70bd2a, 0x25dfdbf8, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xc}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x99}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x400c844)

34.847572025s ago: executing program 2 (id=740):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000001080)={'wlan1\x00'})
socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001040)={0x3, 0x3}, 0xfffffffffffffedb)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[], 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x3f}, 0x80, &(0x7f0000000040)=[{&(0x7f00000006c0)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4deb8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18fc0260ee65302fba79b6ede33d5653fc260616254bfd2094fcd732947077c67052b95dc84c79a46940cb8e29750471fde0e2190613b3537", 0x83}, {&(0x7f0000001340)="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", 0xec4}, {&(0x7f0000000300)="1f7da2f0c99ffb815b58c74d6f7c71bd8ba3b13dcd0b7303551c34c4e8c81b970f5efe39825400e5fdca4dcf71bee004f8076bc034909e4e7783bfe3b2f4b0021bece403dcd4246080aed97e3d62b45358a65243ee54211a374fb0cb80e8fd2711c9129aa71845005f136cc3add133d8e2232a7347864fc1afdf984833d0736e64d6833bd6006df2a7ea93e740c7cb88fbac42fd6d1a063f534535dfb275adb500f3bbb16e5ccca5fceaaa2c06cc903082e743", 0xb3}], 0x3}, 0x9cdc2384016b48f8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)=r3)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4)
sendmmsg$inet(r4, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001ec0)="8d", 0x1}], 0x1}}], 0x1, 0x4008440)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="1905adad66fc3a94d49143e569b1a0f868a459a6fe262d96465c16b960f7a9fa2c985067970d67de032c89dc5fdae6a7e9913f90cd7f9178856ba7e2446bec468270411ce51d5179eac44615fb5a5d572a2882116eed1e96370e40b7e13bf915b4560d3e6cb4c3030dff59a87091bc896f7f708824a3db0ac06489c36c75984cb513a953941b97737433ea74"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd608a27f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000000f6"], 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa110040"], 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x3}}, 0x10)
splice(r1, &(0x7f00000001c0)=0x7, r5, &(0x7f00000002c0)=0x4, 0x8, 0x4)
close(r5)
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000010c0)=@generic={&(0x7f0000001140)='./file0\x00'}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x24, 0x0, &(0x7f0000000040)="06ff03076844268cb89e14f008004ee1546cb1c6a177ef96190a001710febabec41177fb", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)

22.421527516s ago: executing program 1 (id=874):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x5c, r1, 0x1, 0x70bd2a, 0x25dfdbf8, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xc}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x99}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x400c844)

21.651961098s ago: executing program 2 (id=740):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000001080)={'wlan1\x00'})
socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001040)={0x3, 0x3}, 0xfffffffffffffedb)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[], 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x3f}, 0x80, &(0x7f0000000040)=[{&(0x7f00000006c0)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4deb8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18fc0260ee65302fba79b6ede33d5653fc260616254bfd2094fcd732947077c67052b95dc84c79a46940cb8e29750471fde0e2190613b3537", 0x83}, {&(0x7f0000001340)="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", 0xec4}, {&(0x7f0000000300)="1f7da2f0c99ffb815b58c74d6f7c71bd8ba3b13dcd0b7303551c34c4e8c81b970f5efe39825400e5fdca4dcf71bee004f8076bc034909e4e7783bfe3b2f4b0021bece403dcd4246080aed97e3d62b45358a65243ee54211a374fb0cb80e8fd2711c9129aa71845005f136cc3add133d8e2232a7347864fc1afdf984833d0736e64d6833bd6006df2a7ea93e740c7cb88fbac42fd6d1a063f534535dfb275adb500f3bbb16e5ccca5fceaaa2c06cc903082e743", 0xb3}], 0x3}, 0x9cdc2384016b48f8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)=r3)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4)
sendmmsg$inet(r4, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001ec0)="8d", 0x1}], 0x1}}], 0x1, 0x4008440)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="1905adad66fc3a94d49143e569b1a0f868a459a6fe262d96465c16b960f7a9fa2c985067970d67de032c89dc5fdae6a7e9913f90cd7f9178856ba7e2446bec468270411ce51d5179eac44615fb5a5d572a2882116eed1e96370e40b7e13bf915b4560d3e6cb4c3030dff59a87091bc896f7f708824a3db0ac06489c36c75984cb513a953941b97737433ea74"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd608a27f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000000f6"], 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa110040"], 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x3}}, 0x10)
splice(r1, &(0x7f00000001c0)=0x7, r5, &(0x7f00000002c0)=0x4, 0x8, 0x4)
close(r5)
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000010c0)=@generic={&(0x7f0000001140)='./file0\x00'}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x24, 0x0, &(0x7f0000000040)="06ff03076844268cb89e14f008004ee1546cb1c6a177ef96190a001710febabec41177fb", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)

10.671669979s ago: executing program 1 (id=874):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x5c, r1, 0x1, 0x70bd2a, 0x25dfdbf8, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xc}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x99}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x400c844)

10.204147783s ago: executing program 2 (id=740):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000001080)={'wlan1\x00'})
socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001040)={0x3, 0x3}, 0xfffffffffffffedb)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[], 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x3f}, 0x80, &(0x7f0000000040)=[{&(0x7f00000006c0)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4deb8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18fc0260ee65302fba79b6ede33d5653fc260616254bfd2094fcd732947077c67052b95dc84c79a46940cb8e29750471fde0e2190613b3537", 0x83}, {&(0x7f0000001340)="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", 0xec4}, {&(0x7f0000000300)="1f7da2f0c99ffb815b58c74d6f7c71bd8ba3b13dcd0b7303551c34c4e8c81b970f5efe39825400e5fdca4dcf71bee004f8076bc034909e4e7783bfe3b2f4b0021bece403dcd4246080aed97e3d62b45358a65243ee54211a374fb0cb80e8fd2711c9129aa71845005f136cc3add133d8e2232a7347864fc1afdf984833d0736e64d6833bd6006df2a7ea93e740c7cb88fbac42fd6d1a063f534535dfb275adb500f3bbb16e5ccca5fceaaa2c06cc903082e743", 0xb3}], 0x3}, 0x9cdc2384016b48f8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)=r3)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4)
sendmmsg$inet(r4, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001ec0)="8d", 0x1}], 0x1}}], 0x1, 0x4008440)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="1905adad66fc3a94d49143e569b1a0f868a459a6fe262d96465c16b960f7a9fa2c985067970d67de032c89dc5fdae6a7e9913f90cd7f9178856ba7e2446bec468270411ce51d5179eac44615fb5a5d572a2882116eed1e96370e40b7e13bf915b4560d3e6cb4c3030dff59a87091bc896f7f708824a3db0ac06489c36c75984cb513a953941b97737433ea74"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd608a27f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000000f6"], 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa110040"], 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x3}}, 0x10)
splice(r1, &(0x7f00000001c0)=0x7, r5, &(0x7f00000002c0)=0x4, 0x8, 0x4)
close(r5)
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000010c0)=@generic={&(0x7f0000001140)='./file0\x00'}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x24, 0x0, &(0x7f0000000040)="06ff03076844268cb89e14f008004ee1546cb1c6a177ef96190a001710febabec41177fb", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)

3.747904438s ago: executing program 0 (id=1325):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000e40)=@filter={'filter\x00', 0x42, 0x4, 0x418, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x380, 0x380, 0x380, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@uncond, 0x287, 0x158, 0x180, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x2, {0xf}}}, @common=@unspec=@connlabel={{0x28}, {0x7fff}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x138, 0x168, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff000000, 0xffffff, 0xffffff00], @ipv4=@rand_addr=0x64010101, [0x0, 0xffffff00, 0xffffffff, 0xffffffff], @ipv6=@local, [0xff, 0x0, 0xffffffff, 0xff000000], @ipv6=@remote, [0xff000000, 0xffffff00, 0xffffff00], 0x2, 0x10001, 0x3c, 0x4e20, 0x4e24, 0x4e21, 0x4e24, 0x300, 0x2001}, 0x80, 0x1000, 0x4e29, 0x4e22, 0x4e23, 0x4e24}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x4, 0x6}, {}, 0x360, 0xa}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=<r1=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"c748a7132ad6fc9b4dbf15c55b8ae7fb", r1, 0x0, {0x80, 0x4}, {0x3e5c}, 0x8, [0x2, 0xfffffffffffffbd9, 0x6, 0x200, 0xfffffffffffff7d9, 0x8, 0x2, 0xf, 0x2, 0x7, 0xffffffff, 0x5195a187, 0xfffffffffffffeff, 0x10000, 0x2]})

3.699503586s ago: executing program 0 (id=1327):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x7ffd)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x6}]})
connect$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0xffffffffffffffff, 0x3fff}, 0xc)
write$ppp(r0, &(0x7f0000000480)='3I', 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x5}]}}}]}, 0x3c}}, 0x8000)

3.521226156s ago: executing program 0 (id=1331):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFULA_CFG_NLBUFSIZ={0xc, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040004)

3.331800448s ago: executing program 0 (id=1333):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56761, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x2c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xa926, 0x3c1, 0x2f, 0x4, 0xa, 0x20}}, @TCA_CHOKE_STAB={0x0, 0x2, "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"}]}}]}, 0x5c}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=r3], 0x1000f)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0)
recvmmsg(r4, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x8}], 0x3, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

3.257552664s ago: executing program 0 (id=1335):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "828bf7", 0x34, 0x3a, 0x0, @private2, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2b, 0x0, @private1, @rand_addr=' \x01\x00', [], "1e520b4c"}}}}}}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="40002d800a00000001010101010100000a00000001010101010100000a00000002020202020200000a00000002020202020200000a0000000202020202020000"], 0x5c}}, 0x40000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
bind$unix(r2, &(0x7f0000000140)=@abs={0x1, 0x0, 0x3}, 0x6e)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x1}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @remote}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/mnt\x00')
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r9 = accept4(r8, 0x0, 0x0, 0x0)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000004010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000c700000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
pipe(&(0x7f0000001240)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendfile(r11, r9, 0x0, 0x21)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x38, 0x1402, 0x300, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r7}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r11}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x4040040)
sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000170a01010000000000000000010000040800074000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x40054}, 0x40005)

2.536207526s ago: executing program 4 (id=1344):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'nicvf0\x00'})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000140)="474d15221515d13a6da17e949366c8e056600100cf1f34d5", 0x18}], 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$tun(0xffffffffffffff9c, 0x0, 0x44480, 0x0)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r5, &(0x7f0000000080)={0x1f, @any, 0x3b}, 0xa)
getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r6, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'broadcast-link\x00'}}}, 0x28}}, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0)
r9 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1}}, 0xa0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe)
r10 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r8}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r11}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

1.111785984s ago: executing program 4 (id=1347):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x6}, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r3, 0xe0, &(0x7f0000000680)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00)={r4}, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bind$alg(r6, 0x0, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310)
write$tun(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="000008000100000000003d0000004600f94000000000001414aa000000000003000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b4000000907800040a0300050200000000000880000002d58838068b91000000"], 0x4e)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000380)={0x1, 'bridge_slave_1\x00', 0x1}, 0x18)
syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @private, @empty}}}}}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x60}}, 0x0)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000001dc0), 0xffffffffffffffff)

976.277611ms ago: executing program 3 (id=1349):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r2}, 0x38)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r3=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r3, 0x0, 0x8, 0x4, 0x6, 0x7ff}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd0}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r2}, 0x38) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r3, 0x0, 0x8, 0x4, 0x6, 0x7ff}, 0x14) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd0}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async)

836.003604ms ago: executing program 3 (id=1350):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

708.087039ms ago: executing program 3 (id=1351):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0xfffffff5}}, 0x68}}, 0x4048010)

707.727186ms ago: executing program 4 (id=1352):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
syz_emit_ethernet(0x6c, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004503002a00000000002f907800000000e0000001248081000002000000ff7f49100008000005000086dd080088be00000000100000000100000000000000080022eb000000002000000002000000000000000000000008006558000000004cda17cbf0179663da57ae64e2608acd4a82c3b7b454a2479a9855635c62353e99ab6d9c5287810222f28755aa0d035f37"], 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
pipe(&(0x7f0000000300))
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x9, 0x1b, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000061d8d837000000002c2c00001811dbf3", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000023000000184900000400000000000000000000001800000007000000000000000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000183400000100000000000000000000008520000004"], 0x0, 0x800, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000005100000000000000000a200000000900010073797a300000000014000000100001"], 0x48}}, 0x20050800)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000300000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="32000100", @ANYRES32=r4, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB='\b'], 0x90}}, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000440)={'wpan1\x00'})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x0)
sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0)
connect$unix(r1, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x81, 0x4, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x40, 0x7, 0xa, 0x4}})

408.225083ms ago: executing program 3 (id=1353):
unshare(0x24020400)
unshare(0x22020400)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events\x00', 0x275a, 0x0)
unshare(0x20000400)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="ff", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x20000, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0xfd, 0x0, 0x5, 0x4, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x50}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)

285.138837ms ago: executing program 3 (id=1354):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000170001030000000000000000ffffffff0000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000000ffff7f000001ff010000000080ffffff00000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0x134}}, 0x0)

224.109908ms ago: executing program 4 (id=1355):
r0 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x0, @host}, 0x10)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

166.773926ms ago: executing program 4 (id=1356):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56761, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x2c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xa926, 0x3c1, 0x2f, 0x4, 0xa, 0x20}}, @TCA_CHOKE_STAB={0x0, 0x2, "c7ff43d31e6fbdd490b3d977ff52cf5dc1004af4fc63f3ae90d8e2d48141f1ddc19535b9675f5f0d2492a3e7d80eb58a31062a2eb8d6592d06783aa751093f25d9552b5e81a8f6743a7d06300fee9b07cbe88778ea809301f7b2fb9f3896ae07c2e29efecb0f69494b43c36020342d707728ac841f38a5cf84e7f488e928d036febafa2917b1c046138a1b3c7c6db84c4eb5ad3b6b2d4d2392571cfc8968b8bd9afa2f7398e05497f7a01e127fbe6ff3e702920448e162d1ff55528715e315485441cc769ce64fef12d26ec0897a4e2d328c9e586f42b0683a51b957b2ce2044faaa083ce37ee4b4beff955aa1f6f04d9c2ecc78987a2cced4974170fa4b3e4e"}]}}]}, 0x5c}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=r3], 0x1000f)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0)
recvmmsg(r4, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x8}], 0x3, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

146.231192ms ago: executing program 3 (id=1357):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x1, 0x3}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="010000000606010200cec4b832392a9fc4760000feffffffffffffff0873797a3200"/53], 0x2c}, 0x1, 0x0, 0x0, 0x44858}, 0x8000)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x258, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1c0, 0x230, 0x242, 0x1c0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0xff, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x2e}, 0x0, 0xd0, 0x100, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@mac={{0x30}, {@local, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {}, 0x367e1a3a}}}, {{@uncond, 0xec010000, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ff7afedf}, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x80000}, 0xc)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYRESDEC=r4], 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000340)={r9, 0x3}, &(0x7f0000001540)=0x8)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r6, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x4)
setsockopt$inet_int(r6, 0x0, 0x14, &(0x7f0000000180)=0x10000, 0x4)
recvmmsg(r6, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300767ee51d5b4d48000004c68d63880d00"/27, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r10, &(0x7f00000000c0), &(0x7f0000000680)=""/246}, 0x20)

57.595417ms ago: executing program 4 (id=1358):
socket$inet6(0xa, 0x7ffff, 0x2)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x548}, 0x1, 0x0, 0x0, 0x40850}, 0xc814)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x50)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, 0x0, 0x4050)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="c8010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x10}, 0x4008001)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x40, r6, 0x60b, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
unshare(0x22020600)
pipe(&(0x7f0000000080))
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00')
r9 = socket(0x10, 0x3, 0x0)
write(r9, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x3000000}, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, r10)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)

0s ago: executing program 0 (id=1359):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18)
r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)="00214717a70700000000030600710a06069d856829c2f5d7a3", 0x19}], 0x1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

96][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  168.756157][ T9250] nbd: socks must be embedded in a SOCK_ITEM attr
[  168.766963][ T9250] block nbd2: shutting down sockets
[  168.774108][ T8096] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.865431][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.884'.
[  168.876503][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.884'.
[  168.890379][ T9257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.884'.
[  168.915500][ T9253] lo speed is unknown, defaulting to 1000
[  169.012760][ T8096] gretap0: left allmulticast mode
[  169.020660][ T8096] gretap0: left promiscuous mode
[  169.029771][ T8096] bridge0: port 3(gretap0) entered disabled state
[  169.048343][ T8096] bridge_slave_1: left allmulticast mode
[  169.054131][ T8096] bridge_slave_1: left promiscuous mode
[  169.062518][ T8096] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.081847][ T8096] bridge_slave_0: left allmulticast mode
[  169.089469][ T8096] bridge_slave_0: left promiscuous mode
[  169.096994][ T8096] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.507527][ T8096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.518391][ T8096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.528762][ T8096] bond0 (unregistering): Released all slaves
[  169.602586][ T8096] bond1 (unregistering): Released all slaves
[  169.633698][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.886'.
[  169.642691][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.886'.
[  169.664259][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.886'.
[  169.773784][ T8096] tipc: Left network mode
[  169.820699][ T8096] IPVS: stopping master sync thread 6951 ...
[  169.871710][ T9278] netlink: 'syz.4.889': attribute type 32 has an invalid length.
[  169.897561][ T9278] netlink: 24 bytes leftover after parsing attributes in process `syz.4.889'.
[  169.998180][ T9089] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  170.011896][ T9089] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  170.118387][ T9089] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  170.143773][ T9285] macvlan3: entered promiscuous mode
[  170.150223][ T9285] macvlan3: entered allmulticast mode
[  170.168918][ T9089] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  170.260288][ T8096] hsr_slave_0: left promiscuous mode
[  170.270521][ T8096] hsr_slave_1: left promiscuous mode
[  170.275910][ T5854] Bluetooth: hci3: command tx timeout
[  170.282432][ T8096] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.291074][ T8096] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.299216][ T8096] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.306829][ T8096] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.328032][ T8096] veth0_macvtap: left promiscuous mode
[  170.333588][ T8096] veth1_vlan: left promiscuous mode
[  170.339278][ T8096] veth0_vlan: left promiscuous mode
[  170.431655][ T8096] pim6reg (unregistering): left allmulticast mode
[  170.689844][ T8096] team0 (unregistering): Port device team_slave_1 removed
[  170.722607][ T8096] team0 (unregistering): Port device C removed
[  170.841134][ T5854] Bluetooth: hci4: command tx timeout
[  171.033209][ T9294] vlan3: entered promiscuous mode
[  171.038538][ T9294] vlan3: entered allmulticast mode
[  171.158400][ T9253] chnl_net:caif_netlink_parms(): no params data found
[  171.166153][ T9298] netlink: 'syz.3.895': attribute type 1 has an invalid length.
[  171.214424][ T9298] nbd: socks must be embedded in a SOCK_ITEM attr
[  171.223695][ T9298] block nbd2: shutting down sockets
[  171.422367][ T9308] netlink: 'syz.3.897': attribute type 13 has an invalid length.
[  171.462856][ T9308] macvtap0: entered promiscuous mode
[  171.470034][ T9308] macvtap0: refused to change device tx_queue_len
[  171.535256][ T9312] netlink: 'syz.4.899': attribute type 1 has an invalid length.
[  171.562003][ T9312] netlink: 'syz.4.899': attribute type 2 has an invalid length.
[  171.562931][ T9089] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.584612][ T8096] IPVS: stop unused estimator thread 0...
[  171.592641][ T9253] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.619707][ T9253] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.635078][ T9253] bridge_slave_0: entered allmulticast mode
[  171.642722][ T9253] bridge_slave_0: entered promiscuous mode
[  171.671426][ T9253] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.679902][ T9253] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.734802][ T9253] bridge_slave_1: entered allmulticast mode
[  171.760355][ T9253] bridge_slave_1: entered promiscuous mode
[  172.415947][ T9089] 8021q: adding VLAN 0 to HW filter on device team0
[  172.439464][ T9253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.469183][ T9253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.531378][ T9342] xt_socket: unknown flags 0x4
[  172.541875][   T30] audit: type=1804 audit(1744969290.376:4): pid=9346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.903" name="/newroot/199/cgroup.controllers" dev="tmpfs" ino=1048 res=1 errno=0
[  172.568370][ T9331] lo speed is unknown, defaulting to 1000
[  172.574670][   T30] audit: type=1800 audit(1744969290.376:5): pid=9346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.903" name="cgroup.controllers" dev="tmpfs" ino=1048 res=0 errno=0
[  172.615186][ T9253] team0: Port device team_slave_0 added
[  172.632399][ T9253] team0: Port device team_slave_1 added
[  172.645582][ T9339] lo speed is unknown, defaulting to 1000
[  172.702756][ T9350] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20003
[  172.745789][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.752985][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.770710][ T9350] sch_tbf: burst 3631 is lower than device lo mtu (65550) !
[  172.876258][ T9253] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.893483][ T9253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.926440][ T5854] Bluetooth: hci4: command tx timeout
[  172.939851][ T9253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.942620][ T9363] netlink: 'syz.3.908': attribute type 1 has an invalid length.
[  172.972765][ T9253] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.980497][ T9253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.010988][ T9253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.021863][ T9363] nbd: socks must be embedded in a SOCK_ITEM attr
[  173.028566][ T9363] block nbd2: shutting down sockets
[  173.213960][ T8096] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.221148][ T8096] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.270007][ T9253] hsr_slave_0: entered promiscuous mode
[  173.287010][ T9253] hsr_slave_1: entered promiscuous mode
[  173.293881][ T9253] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  173.307941][ T9253] Cannot create hsr debugfs directory
[  173.354501][ T9378] netlink: 'syz.0.913': attribute type 4 has an invalid length.
[  173.407809][ T9382] netlink: 'syz.0.913': attribute type 4 has an invalid length.
[  173.487501][    T9] lo speed is unknown, defaulting to 1000
[  173.494077][    T9] syz1: Port: 1 Link ACTIVE
[  173.710832][ T9388] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  173.884618][ T9401] x_tables: duplicate underflow at hook 1
[  174.001414][ T9089] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.210391][ T9089] veth0_vlan: entered promiscuous mode
[  174.258313][ T9089] veth1_vlan: entered promiscuous mode
[  174.302393][ T9407] __nla_validate_parse: 13 callbacks suppressed
[  174.302409][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.921'.
[  174.318720][ T9253] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  174.324441][ T9407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.921'.
[  174.338627][ T9407] netlink: 'syz.3.921': attribute type 1 has an invalid length.
[  174.347295][ T9407] netlink: 10 bytes leftover after parsing attributes in process `syz.3.921'.
[  174.352499][ T9253] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  174.397064][ T9407] nbd: socks must be embedded in a SOCK_ITEM attr
[  174.403632][ T9407] block nbd2: shutting down sockets
[  174.414502][ T9089] veth0_macvtap: entered promiscuous mode
[  174.434619][ T9253] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  174.451951][ T9410] sctp: [Deprecated]: syz.4.922 (pid 9410) Use of struct sctp_assoc_value in delayed_ack socket option.
[  174.451951][ T9410] Use struct sctp_sack_info instead
[  174.476273][ T9089] veth1_macvtap: entered promiscuous mode
[  174.499075][ T9253] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  174.603808][ T9089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  174.619091][ T9089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.665439][ T9089] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.692474][ T9089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.703320][ T9089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.721366][ T9089] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.748385][ T9089] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.760416][ T9089] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.769558][ T9089] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.778876][ T9089] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.913341][ T9423] netlink: 1264 bytes leftover after parsing attributes in process `syz.4.926'.
[  174.927178][ T9426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.927'.
[  174.939102][ T9424] netlink: 1264 bytes leftover after parsing attributes in process `syz.4.926'.
[  174.961783][  T193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.969906][  T193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.994672][ T5854] Bluetooth: hci4: command tx timeout
[  175.006831][ T9253] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.029951][ T8096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.038611][ T8096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.083780][ T9253] 8021q: adding VLAN 0 to HW filter on device team0
[  175.128918][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.136205][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.161517][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.928'.
[  175.171751][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.928'.
[  175.183779][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.928'.
[  175.199742][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.206926][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.497307][  T193] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.621391][ T9253] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.666230][  T193] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.806547][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.933'.
[  175.821064][ T9442] netlink: 'syz.4.933': attribute type 1 has an invalid length.
[  175.834128][  T193] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.874937][ T9442] nbd: socks must be embedded in a SOCK_ITEM attr
[  175.884620][ T9442] block nbd2: shutting down sockets
[  176.108934][  T193] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.177924][ T9253] veth0_vlan: entered promiscuous mode
[  176.222292][ T9253] veth1_vlan: entered promiscuous mode
[  176.265652][ T9448] lo speed is unknown, defaulting to 1000
[  176.421312][ T9253] veth0_macvtap: entered promiscuous mode
[  176.628646][ T9253] veth1_macvtap: entered promiscuous mode
[  176.708290][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  176.717274][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  176.725469][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  176.751175][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  176.759644][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  176.848086][ T9463] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  177.076768][  T193] bridge_slave_1: left allmulticast mode
[  177.077647][ T5856] Bluetooth: hci4: command tx timeout
[  177.082884][  T193] bridge_slave_1: left promiscuous mode
[  177.123471][  T193] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.142902][  T193] bridge_slave_0: left allmulticast mode
[  177.149302][  T193] bridge_slave_0: left promiscuous mode
[  177.161287][  T193] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.584035][  T193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  177.595866][  T193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  177.607472][  T193] bond0 (unregistering): Released all slaves
[  177.621045][ T9460] lo speed is unknown, defaulting to 1000
[  177.621448][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.638532][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.649270][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.660004][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.671394][ T9253] batman_adv: batadv0: Interface activated: batadv_slave_0
[  177.747743][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.774265][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.784119][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.794974][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.806313][ T9253] batman_adv: batadv0: Interface activated: batadv_slave_1
[  178.842380][ T5856] Bluetooth: hci3: command tx timeout
[  179.231242][ T9253] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.319855][ T9253] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.400792][ T9253] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.512328][ T9253] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.931156][ T5856] Bluetooth: hci3: command tx timeout
[  181.101050][ T9506] __nla_validate_parse: 10 callbacks suppressed
[  181.101072][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.946'.
[  181.539318][  T193] hsr_slave_0: left promiscuous mode
[  181.572049][  T193] hsr_slave_1: left promiscuous mode
[  181.578806][  T193] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.588313][  T193] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.600379][  T193] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.608067][  T193] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.640726][  T193] veth1_macvtap: left promiscuous mode
[  181.646848][  T193] veth0_macvtap: left promiscuous mode
[  181.653719][  T193] veth1_vlan: left promiscuous mode
[  181.659281][  T193] veth0_vlan: left promiscuous mode
[  182.233865][  T193] team0 (unregistering): Port device team_slave_1 removed
[  182.279125][  T193] team0 (unregistering): Port device team_slave_0 removed
[  183.004900][ T5856] Bluetooth: hci3: command tx timeout
[  183.128160][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.128555][ T9460] chnl_net:caif_netlink_parms(): no params data found
[  183.166107][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.290832][ T8096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.313171][ T8096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.415849][ T9460] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.433234][ T9460] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.448929][ T9460] bridge_slave_0: entered allmulticast mode
[  183.457491][ T9460] bridge_slave_0: entered promiscuous mode
[  183.554400][ T9460] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.563387][ T9460] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.573884][ T9460] bridge_slave_1: entered allmulticast mode
[  183.593027][ T9460] bridge_slave_1: entered promiscuous mode
[  183.697000][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.956'.
[  183.718234][ T9548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.956'.
[  183.757869][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.955'.
[  183.778412][ T9548] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  183.787267][ T9548] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  183.796457][ T9548] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  183.806158][ T9548] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  183.838369][ T9460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.910866][ T9460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  184.090603][ T9460] team0: Port device team_slave_0 added
[  184.131757][ T9460] team0: Port device team_slave_1 added
[  184.180088][ T9460] batman_adv: batadv0: Adding interface: batadv_slave_0
[  184.192352][ T9460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.223929][ T9460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  184.241945][ T9460] batman_adv: batadv0: Adding interface: batadv_slave_1
[  184.249173][ T9460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.311771][ T9460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.345038][ T9564] netlink: 'syz.4.961': attribute type 8 has an invalid length.
[  184.377108][  T193] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.399616][ T9569] netlink: 16 bytes leftover after parsing attributes in process `syz.0.959'.
[  184.424337][ T9569] netlink: 224 bytes leftover after parsing attributes in process `syz.0.959'.
[  184.448242][ T9570] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.960'.
[  184.556516][ T9460] hsr_slave_0: entered promiscuous mode
[  184.563016][ T9460] hsr_slave_1: entered promiscuous mode
[  184.579020][ T9460] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  184.608030][ T9460] Cannot create hsr debugfs directory
[  184.620556][ T9572] netlink: 28 bytes leftover after parsing attributes in process `syz.3.962'.
[  184.637114][ T9572] netlink: 28 bytes leftover after parsing attributes in process `syz.3.962'.
[  184.648875][  T193] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.712889][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  184.721632][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  184.730320][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  184.742691][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  184.750469][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  184.787536][  T193] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.792220][ T9581] netlink: 76 bytes leftover after parsing attributes in process `syz.4.963'.
[  184.879312][  T193] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.906777][ T9574] lo speed is unknown, defaulting to 1000
[  184.940169][ T9575] lo speed is unknown, defaulting to 1000
[  185.074275][ T5854] Bluetooth: hci3: command tx timeout
[  185.108088][ T9594] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  185.233765][ T9594] lo speed is unknown, defaulting to 1000
[  185.298161][  T193] bridge_slave_1: left allmulticast mode
[  185.304070][  T193] bridge_slave_1: left promiscuous mode
[  185.311826][  T193] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.324127][  T193] bridge_slave_0: left allmulticast mode
[  185.332036][  T193] bridge_slave_0: left promiscuous mode
[  185.340650][  T193] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.668100][  T193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  185.680802][  T193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  185.691022][  T193] bond0 (unregistering): Released all slaves
[  186.062345][ T9575] chnl_net:caif_netlink_parms(): no params data found
[  186.120913][ T9602] lo speed is unknown, defaulting to 1000
[  186.169798][  T193] hsr_slave_0: left promiscuous mode
[  186.176183][  T193] hsr_slave_1: left promiscuous mode
[  186.182005][  T193] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  186.189607][  T193] batman_adv: batadv0: Removing interface: batadv_slave_0
[  186.198755][  T193] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  186.206324][  T193] batman_adv: batadv0: Removing interface: batadv_slave_1
[  186.230136][  T193] veth1_macvtap: left promiscuous mode
[  186.235838][  T193] veth0_macvtap: left promiscuous mode
[  186.241532][  T193] veth1_vlan: left promiscuous mode
[  186.251092][  T193] veth0_vlan: left promiscuous mode
[  186.592026][  T193] team0 (unregistering): Port device team_slave_1 removed
[  186.624520][  T193] team0 (unregistering): Port device team_slave_0 removed
[  186.834521][ T5856] Bluetooth: hci4: command tx timeout
[  187.058357][ T9575] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.066470][ T9575] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.073606][ T9575] bridge_slave_0: entered allmulticast mode
[  187.083740][ T9575] bridge_slave_0: entered promiscuous mode
[  187.100055][ T9575] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.107293][ T9575] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.118606][ T9575] bridge_slave_1: entered allmulticast mode
[  187.126543][ T9575] bridge_slave_1: entered promiscuous mode
[  187.143876][ T9460] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  187.206731][ T9460] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  187.219587][ T9460] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  187.240964][ T9575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.254735][ T9460] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  187.283602][ T9575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.370046][ T9575] team0: Port device team_slave_0 added
[  187.385931][ T9575] team0: Port device team_slave_1 added
[  187.455426][ T9575] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.477408][ T9575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.506360][ T9575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.521640][ T9575] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.529395][ T9575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.604415][ T9575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.747679][ T9575] hsr_slave_0: entered promiscuous mode
[  187.760100][ T9575] hsr_slave_1: entered promiscuous mode
[  187.768054][ T9575] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  187.776217][ T9575] Cannot create hsr debugfs directory
[  187.787129][ T9632] __nla_validate_parse: 1 callbacks suppressed
[  187.787147][ T9632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.976'.
[  188.018992][ T9460] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.081821][ T9641] netlink: 100 bytes leftover after parsing attributes in process `syz.4.980'.
[  188.133690][ T9460] 8021q: adding VLAN 0 to HW filter on device team0
[  188.167937][ T9649] sctp: [Deprecated]: syz.0.981 (pid 9649) Use of struct sctp_assoc_value in delayed_ack socket option.
[  188.167937][ T9649] Use struct sctp_sack_info instead
[  188.196185][ T9648] sctp: [Deprecated]: syz.0.981 (pid 9648) Use of struct sctp_assoc_value in delayed_ack socket option.
[  188.196185][ T9648] Use struct sctp_sack_info instead
[  188.249367][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.256583][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.348825][ T9655] netlink: 248 bytes leftover after parsing attributes in process `syz.3.984'.
[  188.371802][ T3442] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.378998][ T3442] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.568602][ T9460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  188.720104][ T9678] netlink: 'syz.3.989': attribute type 3 has an invalid length.
[  188.921487][ T5856] Bluetooth: hci4: command 0x041b tx timeout
[  188.952903][ T9687] vlan5: entered promiscuous mode
[  188.958739][ T9687] vlan4: entered promiscuous mode
[  188.963928][ T9687] gretap0: entered promiscuous mode
[  188.976392][ T9689] netlink: 'syz.3.993': attribute type 5 has an invalid length.
[  189.001138][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.993'.
[  189.011909][ T9689] netlink: 16 bytes leftover after parsing attributes in process `syz.3.993'.
[  189.067869][ T9460] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.105439][ T9575] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  189.122564][ T9694] pimreg: entered allmulticast mode
[  189.129702][ T9694] pimreg: left allmulticast mode
[  189.158133][ T9575] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  189.170297][ T9575] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  189.192316][ T9575] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  189.278466][ T9460] veth0_vlan: entered promiscuous mode
[  189.316589][ T9460] veth1_vlan: entered promiscuous mode
[  189.330272][ T9700] batadv0: left allmulticast mode
[  189.336176][ T9700] batadv0: left promiscuous mode
[  189.341636][ T9700] bridge0: port 3(batadv0) entered disabled state
[  189.353344][ T9700] bridge_slave_0: left allmulticast mode
[  189.364689][ T9700] bridge_slave_0: left promiscuous mode
[  189.371956][ T9700] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.390725][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'.
[  189.417778][ T9700] bridge_slave_1: left allmulticast mode
[  189.423538][ T9700] bridge_slave_1: left promiscuous mode
[  189.433076][ T9700] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.445962][ T9700] team0: Port device team_slave_0 removed
[  189.455667][ T9700] team0: Port device team_slave_1 removed
[  189.461982][ T9700] batman_adv: batadv0: Removing interface: batadv_slave_0
[  189.471121][ T9700] batman_adv: batadv0: Removing interface: batadv_slave_1
[  189.751911][ T9460] veth0_macvtap: entered promiscuous mode
[  189.787947][ T9460] veth1_macvtap: entered promiscuous mode
[  189.826859][ T9575] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.890367][ T9575] 8021q: adding VLAN 0 to HW filter on device team0
[  189.915308][ T9460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.931786][ T9460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.951979][ T9460] batman_adv: batadv0: Interface activated: batadv_slave_0
[  189.969184][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.976476][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  190.007393][ T9721] sctp: [Deprecated]: syz.3.1003 (pid 9721) Use of int in maxseg socket option.
[  190.007393][ T9721] Use struct sctp_assoc_value instead
[  190.029828][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.037040][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  190.053758][ T9460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.069072][ T9460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.091239][ T9460] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.131584][ T9460] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.147170][ T9460] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.163963][ T9460] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.186767][ T9460] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.394106][ T9735] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1007'.
[  190.440754][  T193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.456574][  T193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.533771][  T193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.559283][  T193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.599781][ T9742] sctp: [Deprecated]: syz.3.1008 (pid 9742) Use of struct sctp_assoc_value in delayed_ack socket option.
[  190.599781][ T9742] Use struct sctp_sack_info instead
[  190.744745][ T9750] sctp: [Deprecated]: syz.3.1008 (pid 9750) Use of int in max_burst socket option deprecated.
[  190.744745][ T9750] Use struct sctp_assoc_value instead
[  190.789970][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1012'.
[  190.819960][ T9575] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.983821][ T9575] veth0_vlan: entered promiscuous mode
[  190.994488][ T5854] Bluetooth: hci4: command 0x041b tx timeout
[  191.019508][ T9575] veth1_vlan: entered promiscuous mode
[  191.062668][ T9575] veth0_macvtap: entered promiscuous mode
[  191.075764][ T9575] veth1_macvtap: entered promiscuous mode
[  191.094622][ T9575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.109261][ T9575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.123973][ T9575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.137246][ T9575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.148765][ T9575] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.184108][ T9763] IPVS: persistence engine module ip_vs_pe_ not found
[  191.196675][ T9575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.213708][ T9763] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1016'.
[  191.236159][ T9575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.272634][ T9575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.289195][ T9575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.300374][ T9575] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.331749][ T9575] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.341113][ T9575] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.365219][ T9575] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.374124][ T9575] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.438055][ T4596] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.522766][ T4596] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.570311][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.584469][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.609688][  T193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.617993][  T193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.867359][ T4596] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.007455][ T9769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1017'.
[  192.080522][ T4596] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.142651][ T9769] lo speed is unknown, defaulting to 1000
[  192.445067][ T4596] bridge_slave_1: left allmulticast mode
[  192.450770][ T4596] bridge_slave_1: left promiscuous mode
[  192.506164][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  192.515574][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  192.523416][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  192.523619][ T4596] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.532354][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  192.546072][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  192.582037][ T4596] bridge_slave_0: left allmulticast mode
[  192.604926][ T4596] bridge_slave_0: left promiscuous mode
[  192.610734][ T4596] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.024113][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  193.033256][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  193.046110][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  193.065193][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  193.079543][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  193.128696][ T4596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  193.142432][ T4596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  193.152603][ T4596] bond0 (unregistering): Released all slaves
[  193.250884][ T9782] lo speed is unknown, defaulting to 1000
[  193.353354][ T9806] lo speed is unknown, defaulting to 1000
[  193.468888][ T9813] netlink: 'syz.3.1031': attribute type 3 has an invalid length.
[  193.573021][ T4596] hsr_slave_0: left promiscuous mode
[  193.579199][ T4596] hsr_slave_1: left promiscuous mode
[  193.585915][ T4596] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  193.593320][ T4596] batman_adv: batadv0: Removing interface: batadv_slave_0
[  193.601735][ T4596] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  193.611609][ T4596] batman_adv: batadv0: Removing interface: batadv_slave_1
[  193.641994][ T4596] veth1_macvtap: left promiscuous mode
[  193.648763][ T4596] veth0_macvtap: left promiscuous mode
[  193.654724][ T4596] veth1_vlan: left promiscuous mode
[  193.660165][ T4596] veth0_vlan: left promiscuous mode
[  193.830273][ T9826] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  194.119727][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  194.202783][ T4596] team0 (unregistering): Port device team_slave_1 removed
[  194.249025][ T4596] team0 (unregistering): Port device team_slave_0 removed
[  194.594589][ T5856] Bluetooth: hci3: command tx timeout
[  195.167723][ T5856] Bluetooth: hci4: command tx timeout
[  195.798228][ T9853] __nla_validate_parse: 1 callbacks suppressed
[  195.798248][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1042'.
[  195.816821][ T9848] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1041'.
[  196.002736][ T9806] chnl_net:caif_netlink_parms(): no params data found
[  196.040273][ T9782] chnl_net:caif_netlink_parms(): no params data found
[  196.060018][ T9861] bridge_slave_0: left allmulticast mode
[  196.069741][ T9861] bridge_slave_0: left promiscuous mode
[  196.080845][ T9861] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.091905][ T9861] bridge_slave_1: left promiscuous mode
[  196.098206][ T9861] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.110924][ T9861] bond0: (slave bond_slave_0): Releasing backup interface
[  196.121266][ T9861] bond0: (slave bond_slave_1): Releasing backup interface
[  196.130635][ T9861] team_slave_0: left promiscuous mode
[  196.141438][ T9861] team0: Port device team_slave_0 removed
[  196.148859][ T9861] team_slave_1: left promiscuous mode
[  196.158704][ T9861] team0: Port device team_slave_1 removed
[  196.165322][ T9861] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.173386][ T9861] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.268344][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'.
[  196.279214][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'.
[  196.304766][ T9869] netlink: 'syz.3.1046': attribute type 18 has an invalid length.
[  196.400694][ T9874] bond3: entered allmulticast mode
[  196.490059][ T9882] netlink: 356 bytes leftover after parsing attributes in process `syz.0.1048'.
[  196.502827][ T9882] netlink: 356 bytes leftover after parsing attributes in process `syz.0.1048'.
[  196.562063][ T4596] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.583995][ T9806] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.591312][ T9806] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.598002][ T9887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1050'.
[  196.599903][ T9806] bridge_slave_0: entered allmulticast mode
[  196.619310][ T9806] bridge_slave_0: entered promiscuous mode
[  196.621224][ T9887] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1050'.
[  196.627561][ T9782] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.642987][ T9782] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.650507][ T9782] bridge_slave_0: entered allmulticast mode
[  196.658335][ T9782] bridge_slave_0: entered promiscuous mode
[  196.684961][ T5856] Bluetooth: hci3: command tx timeout
[  196.691121][ T4596] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.711801][ T9806] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.730519][ T9806] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.750222][ T9806] bridge_slave_1: entered allmulticast mode
[  196.774501][ T9806] bridge_slave_1: entered promiscuous mode
[  196.821745][ T9782] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.837997][ T9782] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.850506][ T9782] bridge_slave_1: entered allmulticast mode
[  196.858311][ T9892] netlink: 'syz.3.1051': attribute type 1 has an invalid length.
[  196.861103][ T9782] bridge_slave_1: entered promiscuous mode
[  196.886038][ T9892] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1051'.
[  197.006242][ T4596] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.057400][ T9806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.091052][ T9782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.118386][ T9782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.152492][ T9806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.177890][ T4596] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.205639][ T9895] lo speed is unknown, defaulting to 1000
[  197.235183][ T5856] Bluetooth: hci4: command tx timeout
[  197.281834][ T9887] lo speed is unknown, defaulting to 1000
[  197.360122][ T9910] netlink: 'syz.3.1056': attribute type 10 has an invalid length.
[  197.362041][ T9782] team0: Port device team_slave_0 added
[  197.368129][ T9910] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1056'.
[  197.383049][ T9782] team0: Port device team_slave_1 added
[  197.407435][ T9806] team0: Port device team_slave_0 added
[  197.418805][ T9806] team0: Port device team_slave_1 added
[  197.440887][ T9910] dummy0: entered promiscuous mode
[  197.449173][ T9910] bridge0: port 1(dummy0) entered blocking state
[  197.455887][ T9910] bridge0: port 1(dummy0) entered disabled state
[  197.462423][ T9910] dummy0: entered allmulticast mode
[  197.567758][ T9782] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.575331][ T9782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.603308][ T9782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.615604][ T9806] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.625975][ T9806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.652659][ T9806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.670547][ T9806] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.678061][ T9806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.705236][ T9806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.751415][ T9782] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.760082][ T9782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.796684][ T9782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.972564][ T9806] hsr_slave_0: entered promiscuous mode
[  197.979868][ T9806] hsr_slave_1: entered promiscuous mode
[  197.987048][ T9806] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  197.995075][ T9806] Cannot create hsr debugfs directory
[  198.039825][ T9782] hsr_slave_0: entered promiscuous mode
[  198.047355][ T9782] hsr_slave_1: entered promiscuous mode
[  198.053372][ T9782] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.063412][ T9782] Cannot create hsr debugfs directory
[  198.069376][ T4596] bridge_slave_1: left allmulticast mode
[  198.075655][ T4596] bridge_slave_1: left promiscuous mode
[  198.081419][ T4596] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.091011][ T4596] bridge_slave_0: left allmulticast mode
[  198.096913][ T4596] bridge_slave_0: left promiscuous mode
[  198.102683][ T4596] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.382181][ T4596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  198.394989][ T4596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  198.406191][ T4596] bond0 (unregistering): Released all slaves
[  198.764098][ T5856] Bluetooth: hci3: command tx timeout
[  198.855804][ T4596] hsr_slave_0: left promiscuous mode
[  198.872021][ T4596] hsr_slave_1: left promiscuous mode
[  198.882111][ T4596] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  198.900501][ T4596] batman_adv: batadv0: Removing interface: batadv_slave_0
[  198.936153][ T4596] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  198.943584][ T4596] batman_adv: batadv0: Removing interface: batadv_slave_1
[  198.989411][ T4596] veth1_macvtap: left promiscuous mode
[  198.995703][ T4596] veth0_macvtap: left promiscuous mode
[  199.001862][ T4596] veth1_vlan: left promiscuous mode
[  199.010815][ T4596] veth0_vlan: left promiscuous mode
[  199.314358][ T5844] Bluetooth: hci4: command tx timeout
[  199.701548][ T4596] team0 (unregistering): Port device team_slave_1 removed
[  199.743439][ T4596] team0 (unregistering): Port device team_slave_0 removed
[  200.213927][ T9943] batman_adv: batadv0: Adding interface: ip6gretap1
[  200.221524][ T9943] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.248266][ T9943] batman_adv: batadv0: Interface activated: ip6gretap1
[  200.336331][ T9960] 8021q: adding VLAN 0 to HW filter on device bond4
[  200.663101][ T9982] macsec0: entered promiscuous mode
[  200.674616][ T9982] macsec0: entered allmulticast mode
[  200.701400][ T9979] veth1_macvtap: entered allmulticast mode
[  200.708957][ T9979] macsec0: left promiscuous mode
[  200.714462][ T9979] macsec0: left allmulticast mode
[  200.719779][ T9979] veth1_macvtap: left allmulticast mode
[  200.723111][ T9988] netlink: 'syz.3.1077': attribute type 18 has an invalid length.
[  200.775876][ T9990] netlink: 'syz.3.1077': attribute type 10 has an invalid length.
[  200.787163][ T9985] syzkaller0: entered promiscuous mode
[  200.792668][ T9985] syzkaller0: entered allmulticast mode
[  200.825575][ T9993] __nla_validate_parse: 7 callbacks suppressed
[  200.825592][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1078'.
[  200.840760][ T5844] Bluetooth: hci3: command tx timeout
[  201.317345][ T5844] Bluetooth: hci2: command 0x0406 tx timeout
[  201.317478][ T5843] Bluetooth: hci1: command 0x0406 tx timeout
[  201.397397][ T5854] Bluetooth: hci4: command tx timeout
[  202.058196][T10011] lo speed is unknown, defaulting to 1000
[  202.277211][ T9782] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  202.305560][ T9782] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  202.318127][ T9782] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  202.359736][ T9782] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  202.370181][T10026] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1086'.
[  202.436152][ T9806] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  202.469029][ T9806] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  202.509969][ T9806] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  202.547107][ T9806] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  202.573837][T10032] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1088'.
[  202.619929][T10034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1089'.
[  202.649067][T10034] netlink: 'syz.3.1089': attribute type 1 has an invalid length.
[  202.751355][T10038] netlink: 'syz.0.1090': attribute type 1 has an invalid length.
[  202.788453][ T9782] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.798857][T10038] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  202.853992][ T9782] 8021q: adding VLAN 0 to HW filter on device team0
[  202.875088][ T9806] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.896356][ T9806] 8021q: adding VLAN 0 to HW filter on device team0
[  202.908181][T10042] xt_hashlimit: max too large, truncated to 1048576
[  202.915544][T10042] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  202.938859][ T4596] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.946142][ T4596] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.060122][ T4596] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.067450][ T4596] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.085879][ T4596] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.093055][ T4596] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.153522][ T3442] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.160741][ T3442] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.286505][T10049] lo speed is unknown, defaulting to 1000
[  203.644074][ T9806] 8021q: adding VLAN 0 to HW filter on device batadv0
[  203.731874][ T9782] 8021q: adding VLAN 0 to HW filter on device batadv0
[  203.773412][T10076] lo speed is unknown, defaulting to 1000
[  203.782786][ T9806] veth0_vlan: entered promiscuous mode
[  203.826280][ T9806] veth1_vlan: entered promiscuous mode
[  203.872612][T10077] lo speed is unknown, defaulting to 1000
[  203.974164][ T9806] veth0_macvtap: entered promiscuous mode
[  203.996976][ T9782] veth0_vlan: entered promiscuous mode
[  204.053477][ T9782] veth1_vlan: entered promiscuous mode
[  204.083629][ T9806] veth1_macvtap: entered promiscuous mode
[  204.202140][ T9782] veth0_macvtap: entered promiscuous mode
[  204.247566][ T9782] veth1_macvtap: entered promiscuous mode
[  204.321417][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.372625][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.412272][ T9806] batman_adv: batadv0: Interface activated: batadv_slave_0
[  204.573059][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  204.612001][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.633066][ T9806] batman_adv: batadv0: Interface activated: batadv_slave_1
[  204.646798][ T9806] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.657074][ T9806] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.666672][ T9806] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.681228][ T9806] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.012089][ T9782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.023799][ T9782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.033763][ T9782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.046059][ T9782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.060077][ T9782] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.125465][ T9782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.159684][ T9782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.186901][ T9782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.211912][ T9782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.228522][ T9782] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.281908][ T9782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.300393][ T9782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.311625][ T9782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.320853][T10113] xt_CT: You must specify a L4 protocol and not use inversions on it
[  205.325959][ T9782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.408935][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.443353][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.552929][T10118] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1111'.
[  205.753617][  T193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.767793][T10118] lo speed is unknown, defaulting to 1000
[  205.768874][  T193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.952836][ T3442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.973992][ T3442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.024479][ T8096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.064720][ T8096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.331981][T10125] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1112'.
[  206.414774][  T193] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.559945][  T193] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.738812][  T193] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.803303][T10128] netlink: 'syz.0.1113': attribute type 4 has an invalid length.
[  206.814932][T10128] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1113'.
[  206.824605][T10128] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1113'.
[  206.867145][  T193] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.982791][  T193] bridge_slave_1: left allmulticast mode
[  206.988992][  T193] bridge_slave_1: left promiscuous mode
[  206.995515][  T193] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.006063][  T193] bridge_slave_0: left allmulticast mode
[  207.011727][  T193] bridge_slave_0: left promiscuous mode
[  207.018128][  T193] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.068518][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  207.089943][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  207.100587][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  207.109022][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  207.123389][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  207.431133][  T193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  207.466496][  T193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  207.491191][  T193] bond0 (unregistering): Released all slaves
[  207.637707][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1114'.
[  207.663327][T10135] syz_tun (unregistering): left promiscuous mode
[  207.717979][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  207.727205][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  207.735375][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  207.743511][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  207.752537][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  207.791513][T10129] lo speed is unknown, defaulting to 1000
[  207.900432][T10142] lo speed is unknown, defaulting to 1000
[  208.022359][  T193] hsr_slave_0: left promiscuous mode
[  208.057865][  T193] hsr_slave_1: left promiscuous mode
[  208.063856][  T193] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.086806][  T193] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.104928][  T193] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.112350][  T193] batman_adv: batadv0: Removing interface: batadv_slave_1
[  208.152477][  T193] veth1_macvtap: left promiscuous mode
[  208.152754][T10150] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1117'.
[  208.163921][  T193] veth0_macvtap: left promiscuous mode
[  208.179385][T10150] Bluetooth: MGMT ver 1.23
[  208.184483][  T193] veth1_vlan: left promiscuous mode
[  208.189822][  T193] veth0_vlan: left promiscuous mode
[  208.191214][T10151] ieee802154 phy1 wpan1: encryption failed: -22
[  208.767749][  T193] team0 (unregistering): Port device team_slave_1 removed
[  208.804733][  T193] team0 (unregistering): Port device team_slave_0 removed
[  209.155471][ T5854] Bluetooth: hci3: command tx timeout
[  209.467114][T10161] bridge0: port 3(vlan2) entered disabled state
[  209.473797][T10161] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.481441][T10161] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.629395][T10174] netlink: 'syz.3.1122': attribute type 10 has an invalid length.
[  209.696007][T10161] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.717576][T10176] netlink: 'syz.3.1122': attribute type 10 has an invalid length.
[  209.717705][T10161] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.750540][T10176] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1122'.
[  209.796344][T10161] geneve0: left allmulticast mode
[  209.802163][T10161] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.811342][T10161] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.820405][ T5854] Bluetooth: hci4: command tx timeout
[  209.832861][T10161] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.843102][T10161] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.904271][T10161] bond1: left promiscuous mode
[  209.911129][T10161] batadv1: left promiscuous mode
[  209.921086][T10161] batadv1: left allmulticast mode
[  209.932401][T10161] vlan3: left promiscuous mode
[  209.947368][T10161] vlan3: left allmulticast mode
[  209.964268][T10161] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  209.973446][T10161] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  209.982705][T10161] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  209.991987][T10161] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  210.085609][T10174] batman_adv: batadv0: Adding interface: team0
[  210.098895][T10174] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.164305][T10174] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  210.189936][T10176] 8021q: adding VLAN 0 to HW filter on device team0
[  210.197319][T10176] batman_adv: batadv0: Interface activated: team0
[  210.203936][T10176] batman_adv: batadv0: Interface deactivated: team0
[  210.210762][T10176] batman_adv: batadv0: Removing interface: team0
[  210.218415][T10176] bridge0: port 2(team0) entered blocking state
[  210.224939][T10176] bridge0: port 2(team0) entered disabled state
[  210.231306][T10176] team0: entered allmulticast mode
[  210.241099][T10176] team0: left allmulticast mode
[  210.252851][T10186] tipc: Started in network mode
[  210.259385][T10186] tipc: Node identity , cluster identity 4711
[  210.265657][T10186] tipc: Failed to set node id, please configure manually
[  210.272791][T10186] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  210.371349][T10189] netlink: 'syz.0.1126': attribute type 4 has an invalid length.
[  210.680338][T10129] chnl_net:caif_netlink_parms(): no params data found
[  210.782932][T10142] chnl_net:caif_netlink_parms(): no params data found
[  210.837225][  T193] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.973781][T10129] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.998753][T10129] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.013269][T10129] bridge_slave_0: entered allmulticast mode
[  211.038672][T10129] bridge_slave_0: entered promiscuous mode
[  211.093672][  T193] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.118917][T10129] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.127931][T10129] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.140757][T10129] bridge_slave_1: entered allmulticast mode
[  211.148542][T10129] bridge_slave_1: entered promiscuous mode
[  211.184646][T10223] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1136'.
[  211.210582][  T193] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.244602][ T5854] Bluetooth: hci3: command tx timeout
[  211.269220][T10129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  211.315638][  T193] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.332957][T10129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  211.371152][T10142] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.378589][T10142] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.386553][T10142] bridge_slave_0: entered allmulticast mode
[  211.393792][T10142] bridge_slave_0: entered promiscuous mode
[  211.405501][T10142] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.412696][T10142] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.420069][T10142] bridge_slave_1: entered allmulticast mode
[  211.427938][T10142] bridge_slave_1: entered promiscuous mode
[  211.539277][T10226] IPVS: set_ctl: invalid protocol: 29 172.30.0.5:20002
[  211.558972][T10129] team0: Port device team_slave_0 added
[  211.572132][T10129] team0: Port device team_slave_1 added
[  211.581894][T10142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  211.598167][T10142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  211.686774][T10129] batman_adv: batadv0: Adding interface: batadv_slave_0
[  211.693746][T10129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.720672][T10129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  211.734063][T10129] batman_adv: batadv0: Adding interface: batadv_slave_1
[  211.742416][T10129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.768828][T10129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  211.808231][T10142] team0: Port device team_slave_0 added
[  211.818926][T10142] team0: Port device team_slave_1 added
[  211.874410][ T5854] Bluetooth: hci4: command tx timeout
[  211.964924][T10236] FAULT_INJECTION: forcing a failure.
[  211.964924][T10236] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  212.026143][T10236] CPU: 1 UID: 0 PID: 10236 Comm: syz.0.1142 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) 
[  212.026171][T10236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  212.026182][T10236] Call Trace:
[  212.026189][T10236]  <TASK>
[  212.026197][T10236]  dump_stack_lvl+0x241/0x360
[  212.026241][T10236]  ? __pfx_dump_stack_lvl+0x10/0x10
[  212.026266][T10236]  ? __pfx__printk+0x10/0x10
[  212.026301][T10236]  should_fail_ex+0x424/0x570
[  212.026326][T10236]  _copy_from_user+0x2d/0xb0
[  212.026355][T10236]  copy_msghdr_from_user+0xb3/0x580
[  212.026387][T10236]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  212.026427][T10236]  ? __fget_files+0x2a/0x420
[  212.026450][T10236]  ? __fget_files+0x2a/0x420
[  212.026479][T10236]  __sys_sendmsg+0x20a/0x360
[  212.026509][T10236]  ? __pfx___sys_sendmsg+0x10/0x10
[  212.026597][T10236]  ? do_syscall_64+0xb6/0x210
[  212.026622][T10236]  do_syscall_64+0xf3/0x210
[  212.026642][T10236]  ? clear_bhb_loop+0x45/0xa0
[  212.026667][T10236]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.026688][T10236] RIP: 0033:0x7ffb10d8e169
[  212.026712][T10236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  212.026729][T10236] RSP: 002b:00007ffb11b3a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  212.026756][T10236] RAX: ffffffffffffffda RBX: 00007ffb10fb5fa0 RCX: 00007ffb10d8e169
[  212.026771][T10236] RDX: 0000000000008000 RSI: 00002000000006c0 RDI: 0000000000000003
[  212.026785][T10236] RBP: 00007ffb11b3a090 R08: 0000000000000000 R09: 0000000000000000
[  212.026798][T10236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  212.026810][T10236] R13: 0000000000000000 R14: 00007ffb10fb5fa0 R15: 00007ffff4e3cc88
[  212.026843][T10236]  </TASK>
[  212.241557][T10129] hsr_slave_0: entered promiscuous mode
[  212.249325][T10129] hsr_slave_1: entered promiscuous mode
[  212.266051][T10242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1145'.
[  212.276682][T10129] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  212.285960][T10129] Cannot create hsr debugfs directory
[  212.292269][T10142] batman_adv: batadv0: Adding interface: batadv_slave_0
[  212.299638][T10142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.327543][T10142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  212.347875][T10142] batman_adv: batadv0: Adding interface: batadv_slave_1
[  212.354879][T10142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.380902][T10142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  212.399153][  T193] bridge_slave_1: left allmulticast mode
[  212.405229][  T193] bridge_slave_1: left promiscuous mode
[  212.410970][  T193] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.437243][  T193] bridge_slave_0: left allmulticast mode
[  212.442926][  T193] bridge_slave_0: left promiscuous mode
[  212.454421][  T193] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.843075][  T193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  212.853932][  T193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  212.863766][  T193] bond0 (unregistering): Released all slaves
[  213.098851][T10142] hsr_slave_0: entered promiscuous mode
[  213.107267][T10142] hsr_slave_1: entered promiscuous mode
[  213.113341][T10142] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  213.121692][T10142] Cannot create hsr debugfs directory
[  213.203905][T10264] siw: device registration error -23
[  213.267976][T10264] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1151'.
[  213.277112][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1151'.
[  213.289810][T10264] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1151'.
[  213.314287][ T5854] Bluetooth: hci3: command tx timeout
[  213.325276][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1151'.
[  213.502362][  T193] hsr_slave_0: left promiscuous mode
[  213.510535][  T193] hsr_slave_1: left promiscuous mode
[  213.522049][  T193] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.530795][  T193] batman_adv: batadv0: Removing interface: batadv_slave_0
[  213.556331][  T193] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.563947][  T193] batman_adv: batadv0: Removing interface: batadv_slave_1
[  213.570661][T10277] FAULT_INJECTION: forcing a failure.
[  213.570661][T10277] name failslab, interval 1, probability 0, space 0, times 0
[  213.590116][T10277] CPU: 0 UID: 0 PID: 10277 Comm: syz.4.1155 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) 
[  213.590141][T10277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  213.590153][T10277] Call Trace:
[  213.590161][T10277]  <TASK>
[  213.590168][T10277]  dump_stack_lvl+0x241/0x360
[  213.590207][T10277]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.590231][T10277]  ? __pfx__printk+0x10/0x10
[  213.590259][T10277]  ? __pfx___might_resched+0x10/0x10
[  213.590290][T10277]  should_fail_ex+0x424/0x570
[  213.590313][T10277]  should_failslab+0xac/0x100
[  213.590332][T10277]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[  213.590351][T10277]  ? __alloc_skb+0x1c2/0x480
[  213.590392][T10277]  __alloc_skb+0x1c2/0x480
[  213.590415][T10277]  ? __pfx___alloc_skb+0x10/0x10
[  213.590436][T10277]  ? netlink_autobind+0xd6/0x2f0
[  213.590453][T10277]  ? netlink_autobind+0x2b0/0x2f0
[  213.590475][T10277]  netlink_sendmsg+0x638/0xcd0
[  213.590517][T10277]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.590550][T10277]  ? aa_sock_msg_perm+0x91/0x160
[  213.590580][T10277]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.590606][T10277]  __sock_sendmsg+0x221/0x270
[  213.590636][T10277]  ____sys_sendmsg+0x523/0x860
[  213.590667][T10277]  ? __pfx_____sys_sendmsg+0x10/0x10
[  213.590686][T10277]  ? __fget_files+0x2a/0x420
[  213.590707][T10277]  ? __fget_files+0x2a/0x420
[  213.590734][T10277]  __sys_sendmsg+0x271/0x360
[  213.590761][T10277]  ? __pfx___sys_sendmsg+0x10/0x10
[  213.590836][T10277]  ? do_syscall_64+0xb6/0x210
[  213.590858][T10277]  do_syscall_64+0xf3/0x210
[  213.590876][T10277]  ? clear_bhb_loop+0x45/0xa0
[  213.590900][T10277]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.590918][T10277] RIP: 0033:0x7f12c358e169
[  213.590935][T10277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.590951][T10277] RSP: 002b:00007f12c445a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  213.590972][T10277] RAX: ffffffffffffffda RBX: 00007f12c37b5fa0 RCX: 00007f12c358e169
[  213.590986][T10277] RDX: 0000000000008000 RSI: 00002000000006c0 RDI: 0000000000000003
[  213.590999][T10277] RBP: 00007f12c445a090 R08: 0000000000000000 R09: 0000000000000000
[  213.591011][T10277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  213.591022][T10277] R13: 0000000000000000 R14: 00007f12c37b5fa0 R15: 00007fffad300df8
[  213.591063][T10277]  </TASK>
[  213.607855][  T193] veth1_macvtap: left promiscuous mode
[  213.809274][T10283] delete_channel: no stack
[  213.812880][  T193] veth0_macvtap: left promiscuous mode
[  213.846532][  T193] veth1_vlan: left promiscuous mode
[  213.852263][  T193] veth0_vlan: left promiscuous mode
[  213.954468][ T5854] Bluetooth: hci4: command tx timeout
[  214.301190][  T193] team0 (unregistering): Port device team_slave_1 removed
[  214.336856][  T193] team0 (unregistering): Port device team_slave_0 removed
[  214.666551][T10278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1152'.
[  214.898057][T10294] netlink: 'syz.3.1161': attribute type 21 has an invalid length.
[  214.971863][T10294] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1161'.
[  214.977245][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1162'.
[  214.996355][T10299] bond0: entered promiscuous mode
[  215.003046][T10299] batadv0: entered promiscuous mode
[  215.009378][T10299] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  215.022641][T10299] Cannot create hsr debugfs directory
[  215.028435][T10299] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  215.077139][T10299] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  215.088789][T10299] 8021q: adding VLAN 0 to HW filter on device hsr1
[  215.395510][ T5854] Bluetooth: hci3: command tx timeout
[  215.402768][T10129] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  215.431370][T10129] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  215.449225][T10129] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  215.482759][T10129] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  215.582637][T10334] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  215.632607][T10336] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1175'.
[  215.889746][T10142] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  215.919167][T10142] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  215.945737][T10142] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  215.971883][T10129] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.998040][T10142] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  216.034707][ T5854] Bluetooth: hci4: command tx timeout
[  216.078626][T10129] 8021q: adding VLAN 0 to HW filter on device team0
[  216.087207][T10352] FAULT_INJECTION: forcing a failure.
[  216.087207][T10352] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  216.104798][T10352] CPU: 0 UID: 0 PID: 10352 Comm: syz.0.1180 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) 
[  216.104824][T10352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  216.104835][T10352] Call Trace:
[  216.104842][T10352]  <TASK>
[  216.104849][T10352]  dump_stack_lvl+0x241/0x360
[  216.104890][T10352]  ? __pfx_dump_stack_lvl+0x10/0x10
[  216.104934][T10352]  ? __pfx__printk+0x10/0x10
[  216.104973][T10352]  should_fail_ex+0x424/0x570
[  216.104999][T10352]  _copy_from_iter+0x211/0x1c70
[  216.105032][T10352]  ? __build_skb_around+0x247/0x3d0
[  216.105057][T10352]  ? __alloc_skb+0x298/0x480
[  216.105074][T10352]  ? __pfx__copy_from_iter+0x10/0x10
[  216.105103][T10352]  ? __pfx___alloc_skb+0x10/0x10
[  216.105123][T10352]  ? skb_put+0x114/0x1f0
[  216.105147][T10352]  netlink_sendmsg+0x73c/0xcd0
[  216.105189][T10352]  ? __pfx_netlink_sendmsg+0x10/0x10
[  216.105232][T10352]  ? aa_sock_msg_perm+0x91/0x160
[  216.105260][T10352]  ? __pfx_netlink_sendmsg+0x10/0x10
[  216.105284][T10352]  __sock_sendmsg+0x221/0x270
[  216.105313][T10352]  ____sys_sendmsg+0x523/0x860
[  216.105341][T10352]  ? __pfx_____sys_sendmsg+0x10/0x10
[  216.105359][T10352]  ? __fget_files+0x2a/0x420
[  216.105379][T10352]  ? __fget_files+0x2a/0x420
[  216.105404][T10352]  __sys_sendmsg+0x271/0x360
[  216.105429][T10352]  ? __pfx___sys_sendmsg+0x10/0x10
[  216.105499][T10352]  ? do_syscall_64+0xb6/0x210
[  216.105520][T10352]  do_syscall_64+0xf3/0x210
[  216.105537][T10352]  ? clear_bhb_loop+0x45/0xa0
[  216.105558][T10352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.105574][T10352] RIP: 0033:0x7ffb10d8e169
[  216.105589][T10352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  216.105621][T10352] RSP: 002b:00007ffb11b3a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  216.105641][T10352] RAX: ffffffffffffffda RBX: 00007ffb10fb5fa0 RCX: 00007ffb10d8e169
[  216.105655][T10352] RDX: 0000000000008000 RSI: 00002000000006c0 RDI: 0000000000000003
[  216.105667][T10352] RBP: 00007ffb11b3a090 R08: 0000000000000000 R09: 0000000000000000
[  216.105678][T10352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  216.105689][T10352] R13: 0000000000000000 R14: 00007ffb10fb5fa0 R15: 00007ffff4e3cc88
[  216.105718][T10352]  </TASK>
[  216.357502][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.364656][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  216.375763][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.382918][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[  216.520117][T10142] 8021q: adding VLAN 0 to HW filter on device bond0
[  216.572702][T10142] 8021q: adding VLAN 0 to HW filter on device team0
[  216.600126][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.607322][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  216.633058][  T193] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.640252][  T193] bridge0: port 2(bridge_slave_1) entered forwarding state
[  216.877809][T10129] 8021q: adding VLAN 0 to HW filter on device batadv0
[  216.997561][T10129] veth0_vlan: entered promiscuous mode
[  217.028579][T10129] veth1_vlan: entered promiscuous mode
[  217.091916][T10142] 8021q: adding VLAN 0 to HW filter on device batadv0
[  217.134000][T10129] veth0_macvtap: entered promiscuous mode
[  217.161126][T10129] veth1_macvtap: entered promiscuous mode
[  217.206710][T10142] veth0_vlan: entered promiscuous mode
[  217.242055][T10142] veth1_vlan: entered promiscuous mode
[  217.265878][T10129] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.291820][T10129] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.317966][T10129] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.332820][T10129] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.343470][T10129] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.364612][T10129] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.439893][T10142] veth0_macvtap: entered promiscuous mode
[  217.484714][T10142] veth1_macvtap: entered promiscuous mode
[  217.532039][ T3442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.553021][T10142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.564753][ T3442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.573398][T10142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.586182][T10142] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.657045][T10142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.676625][T10142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.692247][T10142] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.715923][T10142] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.725749][T10142] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.735156][T10142] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.743859][T10142] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.773757][ T4596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.821432][ T4596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.856004][T10390] FAULT_INJECTION: forcing a failure.
[  217.856004][T10390] name failslab, interval 1, probability 0, space 0, times 0
[  217.879422][T10388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1192'.
[  217.888482][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1192'.
[  217.901442][  T193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.901676][T10388] netlink: 'syz.0.1192': attribute type 1 has an invalid length.
[  217.917407][T10390] CPU: 1 UID: 0 PID: 10390 Comm: syz.4.1191 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) 
[  217.917434][T10390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  217.917448][T10390] Call Trace:
[  217.917455][T10390]  <TASK>
[  217.917462][T10390]  dump_stack_lvl+0x241/0x360
[  217.917493][T10390]  ? __pfx_dump_stack_lvl+0x10/0x10
[  217.917516][T10390]  ? __pfx__printk+0x10/0x10
[  217.917542][T10390]  ? __pfx___might_resched+0x10/0x10
[  217.917587][T10390]  should_fail_ex+0x424/0x570
[  217.917621][T10390]  should_failslab+0xac/0x100
[  217.917637][T10390]  __kmalloc_cache_noprof+0x73/0x370
[  217.917650][T10390]  ? rtnl_newlink+0x144/0x1fe0
[  217.917675][T10390]  rtnl_newlink+0x144/0x1fe0
[  217.917699][T10390]  ? 0xffffffffa0000954
[  217.917712][T10390]  ? is_bpf_text_address+0x288/0x2a0
[  217.917731][T10390]  ? is_bpf_text_address+0x26/0x2a0
[  217.917751][T10390]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  217.917769][T10390]  ? kernel_text_address+0xa7/0xe0
[  217.917789][T10390]  ? __pfx_rtnl_newlink+0x10/0x10
[  217.917809][T10390]  ? unwind_get_return_address+0x4d/0x90
[  217.917827][T10390]  ? arch_stack_walk+0xff/0x150
[  217.917846][T10390]  ? __lock_acquire+0xad5/0xd80
[  217.917870][T10390]  ? __lock_acquire+0xad5/0xd80
[  217.917892][T10390]  ? __lock_acquire+0xad5/0xd80
[  217.917927][T10390]  ? is_bpf_text_address+0x26/0x2a0
[  217.917958][T10390]  ? 0xffffffffa0000954
[  217.917971][T10390]  ? is_bpf_text_address+0x288/0x2a0
[  217.917990][T10390]  ? is_bpf_text_address+0x26/0x2a0
[  217.918013][T10390]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  217.918034][T10390]  ? kernel_text_address+0xa7/0xe0
[  217.918055][T10390]  ? __kernel_text_address+0xd/0x40
[  217.918081][T10390]  ? aa_get_newest_label+0x101/0x6f0
[  217.918108][T10390]  ? __lock_acquire+0xad5/0xd80
[  217.918150][T10390]  ? __pfx_rtnl_newlink+0x10/0x10
[  217.918178][T10390]  rtnetlink_rcv_msg+0x80f/0xd70
[  217.918202][T10390]  ? rtnetlink_rcv_msg+0x1ba/0xd70
[  217.918232][T10390]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  217.918255][T10390]  ? __lock_acquire+0xad5/0xd80
[  217.918293][T10390]  netlink_rcv_skb+0x208/0x480
[  217.918321][T10390]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  217.918349][T10390]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  217.918392][T10390]  ? netlink_deliver_tap+0x2e/0x1b0
[  217.918419][T10390]  ? netlink_deliver_tap+0x2e/0x1b0
[  217.918447][T10390]  netlink_unicast+0x7f8/0x9a0
[  217.918479][T10390]  ? __pfx_netlink_unicast+0x10/0x10
[  217.918505][T10390]  ? skb_put+0x114/0x1f0
[  217.918526][T10390]  netlink_sendmsg+0x8c3/0xcd0
[  217.918563][T10390]  ? __pfx_netlink_sendmsg+0x10/0x10
[  217.918594][T10390]  ? aa_sock_msg_perm+0x91/0x160
[  217.918621][T10390]  ? __pfx_netlink_sendmsg+0x10/0x10
[  217.918646][T10390]  __sock_sendmsg+0x221/0x270
[  217.918673][T10390]  ____sys_sendmsg+0x523/0x860
[  217.918702][T10390]  ? __pfx_____sys_sendmsg+0x10/0x10
[  217.918720][T10390]  ? __fget_files+0x2a/0x420
[  217.918739][T10390]  ? __fget_files+0x2a/0x420
[  217.918764][T10390]  __sys_sendmsg+0x271/0x360
[  217.918789][T10390]  ? __pfx___sys_sendmsg+0x10/0x10
[  217.918859][T10390]  ? do_syscall_64+0xb6/0x210
[  217.918880][T10390]  do_syscall_64+0xf3/0x210
[  217.918897][T10390]  ? clear_bhb_loop+0x45/0xa0
[  217.918918][T10390]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.918942][T10390] RIP: 0033:0x7f12c358e169
[  217.918957][T10390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  217.918972][T10390] RSP: 002b:00007f12c445a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  217.918991][T10390] RAX: ffffffffffffffda RBX: 00007f12c37b5fa0 RCX: 00007f12c358e169
[  217.919004][T10390] RDX: 0000000000008000 RSI: 00002000000006c0 RDI: 0000000000000003
[  217.919015][T10390] RBP: 00007f12c445a090 R08: 0000000000000000 R09: 0000000000000000
[  217.919025][T10390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  217.919036][T10390] R13: 0000000000000000 R14: 00007f12c37b5fa0 R15: 00007fffad300df8
[  217.919063][T10390]  </TASK>
[  217.936382][  T193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.951524][T10388] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1192'.
[  218.368669][T10388] nbd: socks must be embedded in a SOCK_ITEM attr
[  218.377503][T10388] block nbd2: shutting down sockets
[  218.385028][T10394] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1193'.
[  218.529553][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.551634][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.552622][T10400] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  218.622561][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'.
[  218.636950][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'.
[  218.648107][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1196'.
[  218.801438][T10410] netlink: 'syz.0.1198': attribute type 32 has an invalid length.
[  219.132775][T10428] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1204'.
[  219.231047][T10432] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1207'.
[  219.249415][   T54] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.262104][T10435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1207'.
[  220.051441][   T54] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.139077][   T54] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.210817][   T54] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.240792][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  220.249646][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  220.257816][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  220.270340][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  220.278658][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  220.322652][   T54] bridge_slave_1: left allmulticast mode
[  220.328676][   T54] bridge_slave_1: left promiscuous mode
[  220.334716][   T54] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.343770][   T54] bridge_slave_0: left allmulticast mode
[  220.349998][   T54] bridge_slave_0: left promiscuous mode
[  220.356398][   T54] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.584878][   T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  220.596151][   T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  220.607117][   T54] bond0 (unregistering): Released all slaves
[  220.627786][T10440] lo speed is unknown, defaulting to 1000
[  220.776317][T10449] FAULT_INJECTION: forcing a failure.
[  220.776317][T10449] name failslab, interval 1, probability 0, space 0, times 0
[  220.797607][T10448] netlink: 'syz.4.1210': attribute type 1 has an invalid length.
[  220.834633][T10449] CPU: 1 UID: 0 PID: 10449 Comm: syz.3.1209 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) 
[  220.834661][T10449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  220.834672][T10449] Call Trace:
[  220.834679][T10449]  <TASK>
[  220.834686][T10449]  dump_stack_lvl+0x241/0x360
[  220.834718][T10449]  ? __pfx_dump_stack_lvl+0x10/0x10
[  220.834742][T10449]  ? __pfx__printk+0x10/0x10
[  220.834769][T10449]  ? __pfx___might_resched+0x10/0x10
[  220.834800][T10449]  should_fail_ex+0x424/0x570
[  220.834824][T10449]  should_failslab+0xac/0x100
[  220.834843][T10449]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[  220.834862][T10449]  ? __alloc_skb+0x1c2/0x480
[  220.834885][T10449]  __alloc_skb+0x1c2/0x480
[  220.834907][T10449]  ? __pfx___alloc_skb+0x10/0x10
[  220.834924][T10449]  ? __pfx_rtnl_newlink+0x10/0x10
[  220.834954][T10449]  ? netlink_ack_tlv_len+0x6e/0x200
[  220.834983][T10449]  netlink_ack+0x147/0xa70
[  220.835005][T10449]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  220.835029][T10449]  ? __lock_acquire+0xad5/0xd80
[  220.835066][T10449]  netlink_rcv_skb+0x296/0x480
[  220.835093][T10449]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  220.835119][T10449]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  220.835161][T10449]  ? netlink_deliver_tap+0x2e/0x1b0
[  220.835189][T10449]  ? netlink_deliver_tap+0x2e/0x1b0
[  220.835222][T10449]  netlink_unicast+0x7f8/0x9a0
[  220.835254][T10449]  ? __pfx_netlink_unicast+0x10/0x10
[  220.835279][T10449]  ? skb_put+0x114/0x1f0
[  220.835302][T10449]  netlink_sendmsg+0x8c3/0xcd0
[  220.835340][T10449]  ? __pfx_netlink_sendmsg+0x10/0x10
[  220.835376][T10449]  ? aa_sock_msg_perm+0x91/0x160
[  220.835404][T10449]  ? __pfx_netlink_sendmsg+0x10/0x10
[  220.835429][T10449]  __sock_sendmsg+0x221/0x270
[  220.835457][T10449]  ____sys_sendmsg+0x523/0x860
[  220.835485][T10449]  ? __pfx_____sys_sendmsg+0x10/0x10
[  220.835504][T10449]  ? __fget_files+0x2a/0x420
[  220.835523][T10449]  ? __fget_files+0x2a/0x420
[  220.835548][T10449]  __sys_sendmsg+0x271/0x360
[  220.835572][T10449]  ? __pfx___sys_sendmsg+0x10/0x10
[  220.835642][T10449]  ? do_syscall_64+0xb6/0x210
[  220.835663][T10449]  do_syscall_64+0xf3/0x210
[  220.835680][T10449]  ? clear_bhb_loop+0x45/0xa0
[  220.835701][T10449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.835719][T10449] RIP: 0033:0x7f3ffab8e169
[  220.835735][T10449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  220.835750][T10449] RSP: 002b:00007f3ff89f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  220.835769][T10449] RAX: ffffffffffffffda RBX: 00007f3ffadb5fa0 RCX: 00007f3ffab8e169
[  220.835782][T10449] RDX: 0000000000008000 RSI: 00002000000006c0 RDI: 0000000000000003
[  220.835793][T10449] RBP: 00007f3ff89f6090 R08: 0000000000000000 R09: 0000000000000000
[  220.835804][T10449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  220.835814][T10449] R13: 0000000000000000 R14: 00007f3ffadb5fa0 R15: 00007ffeb9a31108
[  220.835842][T10449]  </TASK>
[  220.983578][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  221.006718][T10448] nbd: socks must be embedded in a SOCK_ITEM attr
[  221.010907][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  221.012891][T10448] block nbd2: shutting down sockets
[  221.019545][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  221.187005][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  221.195835][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  221.441945][T10440] chnl_net:caif_netlink_parms(): no params data found
[  221.472752][   T54] hsr_slave_0: left promiscuous mode
[  221.480400][   T54] hsr_slave_1: left promiscuous mode
[  221.486488][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.499371][   T54] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.508516][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  221.520448][   T54] batman_adv: batadv0: Removing interface: batadv_slave_1
[  221.565332][   T54] veth1_macvtap: left promiscuous mode
[  221.570895][   T54] veth0_macvtap: left promiscuous mode
[  221.577230][   T54] veth1_vlan: left promiscuous mode
[  221.584390][   T54] veth0_vlan: left promiscuous mode
[  221.938210][   T54] team0 (unregistering): Port device team_slave_1 removed
[  221.972382][   T54] team0 (unregistering): Port device team_slave_0 removed
[  222.292124][T10450] lo speed is unknown, defaulting to 1000
[  222.354950][ T5856] Bluetooth: hci3: command tx timeout
[  222.452782][T10440] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.464906][T10440] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.472195][T10440] bridge_slave_0: entered allmulticast mode
[  222.481465][T10440] bridge_slave_0: entered promiscuous mode
[  222.498130][T10486] netlink: 'syz.3.1218': attribute type 3 has an invalid length.
[  222.507788][T10440] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.521695][T10440] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.531637][T10440] bridge_slave_1: entered allmulticast mode
[  222.539286][T10440] bridge_slave_1: entered promiscuous mode
[  222.868522][T10440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  222.872245][T10509] netlink: 'syz.4.1225': attribute type 1 has an invalid length.
[  222.882231][T10440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  222.913582][T10509] __nla_validate_parse: 10 callbacks suppressed
[  222.913600][T10509] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1225'.
[  222.964062][T10517] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1226'.
[  222.964425][T10509] nbd: socks must be embedded in a SOCK_ITEM attr
[  222.990162][T10509] block nbd2: shutting down sockets
[  223.062239][T10440] team0: Port device team_slave_0 added
[  223.152701][T10440] team0: Port device team_slave_1 added
[  223.189326][T10522] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1228'.
[  223.235484][ T5856] Bluetooth: hci4: command tx timeout
[  223.277180][T10440] batman_adv: batadv0: Adding interface: batadv_slave_0
[  223.288278][T10440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.314663][T10440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.346016][T10440] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.352980][T10440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.390656][T10440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  223.430771][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1229'.
[  223.441832][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1229'.
[  223.450781][T10533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1229'.
[  223.490268][   T54] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.527194][T10450] chnl_net:caif_netlink_parms(): no params data found
[  223.573403][   T54] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.650564][T10440] hsr_slave_0: entered promiscuous mode
[  223.659943][T10440] hsr_slave_1: entered promiscuous mode
[  223.675504][T10440] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  223.692431][T10440] Cannot create hsr debugfs directory
[  223.732234][   T54] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.909480][   T54] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.083157][T10560] FAULT_INJECTION: forcing a failure.
[  224.083157][T10560] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  224.110579][T10560] CPU: 1 UID: 0 PID: 10560 Comm: syz.3.1237 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) 
[  224.110606][T10560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  224.110617][T10560] Call Trace:
[  224.110625][T10560]  <TASK>
[  224.110632][T10560]  dump_stack_lvl+0x241/0x360
[  224.110665][T10560]  ? __pfx_dump_stack_lvl+0x10/0x10
[  224.110690][T10560]  ? __pfx__printk+0x10/0x10
[  224.110724][T10560]  should_fail_ex+0x424/0x570
[  224.110750][T10560]  _copy_to_user+0x31/0xb0
[  224.110779][T10560]  simple_read_from_buffer+0xc4/0x170
[  224.110810][T10560]  proc_fail_nth_read+0x1ef/0x260
[  224.110841][T10560]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  224.110872][T10560]  ? rw_verify_area+0x246/0x630
[  224.110894][T10560]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  224.110923][T10560]  vfs_read+0x21f/0xb90
[  224.110950][T10560]  ? __pfx___mutex_lock+0x10/0x10
[  224.110968][T10560]  ? __pfx_vfs_read+0x10/0x10
[  224.110994][T10560]  ? __fget_files+0x2a/0x420
[  224.111012][T10560]  ? __fget_files+0x39d/0x420
[  224.111027][T10560]  ? __fget_files+0x2a/0x420
[  224.111060][T10560]  ksys_read+0x19d/0x2d0
[  224.111087][T10560]  ? __pfx_ksys_read+0x10/0x10
[  224.111114][T10560]  ? do_syscall_64+0xb6/0x210
[  224.111134][T10560]  do_syscall_64+0xf3/0x210
[  224.111151][T10560]  ? clear_bhb_loop+0x45/0xa0
[  224.111173][T10560]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.111190][T10560] RIP: 0033:0x7f3ffab8cb7c
[  224.111206][T10560] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  224.111221][T10560] RSP: 002b:00007f3ff89f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  224.111240][T10560] RAX: ffffffffffffffda RBX: 00007f3ffadb5fa0 RCX: 00007f3ffab8cb7c
[  224.111253][T10560] RDX: 000000000000000f RSI: 00007f3ff89f60a0 RDI: 0000000000000004
[  224.111264][T10560] RBP: 00007f3ff89f6090 R08: 0000000000000000 R09: 0000000000000000
[  224.111274][T10560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  224.111285][T10560] R13: 0000000000000000 R14: 00007f3ffadb5fa0 R15: 00007ffeb9a31108
[  224.111313][T10560]  </TASK>
[  224.116805][T10450] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.339974][T10450] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.347565][T10450] bridge_slave_0: entered allmulticast mode
[  224.360710][T10450] bridge_slave_0: entered promiscuous mode
[  224.377829][T10551] lo speed is unknown, defaulting to 1000
[  224.405420][T10450] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.412906][T10450] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.422645][T10450] bridge_slave_1: entered allmulticast mode
[  224.433708][T10450] bridge_slave_1: entered promiscuous mode
[  224.439613][ T5856] Bluetooth: hci3: command tx timeout
[  224.516167][T10573] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1239'.
[  224.673175][T10450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  224.713954][T10450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  224.731363][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1241'.
[  224.740336][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1241'.
[  224.749767][T10577] netlink: 'syz.0.1241': attribute type 1 has an invalid length.
[  224.762712][T10577] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1241'.
[  224.804321][T10577] nbd: socks must be embedded in a SOCK_ITEM attr
[  224.810874][T10577] block nbd2: shutting down sockets
[  225.038583][T10450] team0: Port device team_slave_0 added
[  225.057758][T10450] team0: Port device team_slave_1 added
[  225.189000][   T54] bridge_slave_1: left allmulticast mode
[  225.195355][   T54] bridge_slave_1: left promiscuous mode
[  225.204886][   T54] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.218505][   T54] bridge_slave_0: left allmulticast mode
[  225.229855][   T54] bridge_slave_0: left promiscuous mode
[  225.241109][   T54] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.319567][ T5856] Bluetooth: hci4: command tx timeout
[  225.542031][   T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  225.552808][   T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  225.562938][   T54] bond0 (unregistering): Released all slaves
[  225.578125][T10450] batman_adv: batadv0: Adding interface: batadv_slave_0
[  225.585497][T10450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.611792][T10450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  225.663117][T10450] batman_adv: batadv0: Adding interface: batadv_slave_1
[  225.672372][T10450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.699400][T10450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  225.834109][T10450] hsr_slave_0: entered promiscuous mode
[  225.850364][T10450] hsr_slave_1: entered promiscuous mode
[  225.862174][T10450] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  225.869963][T10450] Cannot create hsr debugfs directory
[  226.028536][T10602] openvswitch: netlink: Message has 8 unknown bytes.
[  226.037665][T10602] netlink: 'syz.0.1248': attribute type 8 has an invalid length.
[  226.073236][   T54] hsr_slave_0: left promiscuous mode
[  226.089699][   T54] hsr_slave_1: left promiscuous mode
[  226.095852][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  226.103336][   T54] batman_adv: batadv0: Removing interface: batadv_slave_0
[  226.125209][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  226.150035][   T54] batman_adv: batadv0: Removing interface: batadv_slave_1
[  226.191664][   T54] veth1_macvtap: left promiscuous mode
[  226.198317][   T54] veth0_macvtap: left promiscuous mode
[  226.203968][   T54] veth1_vlan: left promiscuous mode
[  226.215910][   T54] veth0_vlan: left promiscuous mode
[  226.516119][T10603] ieee802154 phy1 wpan1: encryption failed: -22
[  226.534614][ T5856] Bluetooth: hci3: command tx timeout
[  226.701276][   T54] team0 (unregistering): Port device team_slave_1 removed
[  226.737560][   T54] team0 (unregistering): Port device team_slave_0 removed
[  227.048337][T10601] lo speed is unknown, defaulting to 1000
[  227.160606][T10440] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  227.199938][T10440] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  227.240257][T10614] netlink: 'syz.0.1254': attribute type 1 has an invalid length.
[  227.248487][T10440] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  227.289473][T10614] nbd: socks must be embedded in a SOCK_ITEM attr
[  227.300551][T10614] block nbd2: shutting down sockets
[  227.331974][T10440] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  227.410679][ T5856] Bluetooth: hci4: command tx timeout
[  227.521224][T10440] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.603231][T10440] 8021q: adding VLAN 0 to HW filter on device team0
[  227.664072][  T193] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.671253][  T193] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.767218][  T193] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.774418][  T193] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.798609][T10629] netlink: 'syz.4.1259': attribute type 1 has an invalid length.
[  227.808691][T10629] netlink: 'syz.4.1259': attribute type 1 has an invalid length.
[  227.855456][T10627] lo speed is unknown, defaulting to 1000
[  227.935305][T10633] __nla_validate_parse: 10 callbacks suppressed
[  227.935322][T10633] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1261'.
[  228.047145][T10450] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  228.062279][T10450] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  228.201787][T10450] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  228.218950][T10450] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  228.241368][T10646] veth0_to_bond: entered promiscuous mode
[  228.290302][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1262'.
[  228.321736][T10648] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1262'.
[  228.333051][T10642] Bluetooth: MGMT ver 1.23
[  228.348326][T10642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1263'.
[  228.357511][T10648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1262'.
[  228.401627][T10642] veth0_to_bond (unregistering): left promiscuous mode
[  228.563226][T10450] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.595064][ T5856] Bluetooth: hci3: command tx timeout
[  228.622099][T10450] 8021q: adding VLAN 0 to HW filter on device team0
[  228.686713][  T193] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.693932][  T193] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.709455][  T193] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.716672][  T193] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.739387][T10440] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.806170][T10662] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1267'.
[  228.940784][T10440] veth0_vlan: entered promiscuous mode
[  228.969018][T10440] veth1_vlan: entered promiscuous mode
[  229.031740][T10440] veth0_macvtap: entered promiscuous mode
[  229.056919][T10440] veth1_macvtap: entered promiscuous mode
[  229.109638][T10440] batman_adv: batadv0: Interface activated: batadv_slave_0
[  229.129171][T10440] batman_adv: batadv0: Interface activated: batadv_slave_1
[  229.165200][T10440] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  229.191480][T10440] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  229.215990][T10440] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  229.229971][T10440] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  229.301548][T10450] 8021q: adding VLAN 0 to HW filter on device batadv0
[  229.341768][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'.
[  229.353226][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'.
[  229.362627][T10677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1271'.
[  229.421609][ T3442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.432262][ T3442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.474662][ T5856] Bluetooth: hci4: command tx timeout
[  229.513384][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'.
[  229.543681][T10682] hsr0: left allmulticast mode
[  229.558128][T10682] hsr_slave_0: left allmulticast mode
[  229.563520][T10682] hsr_slave_1: left allmulticast mode
[  229.569457][T10682] hsr0: left promiscuous mode
[  229.596587][T10686] xt_TCPMSS: Only works on TCP SYN packets
[  229.645710][ T4596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.674338][ T4596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.710582][T10450] veth0_vlan: entered promiscuous mode
[  229.759576][T10688] netlink: 'syz.3.1275': attribute type 1 has an invalid length.
[  229.763368][T10450] veth1_vlan: entered promiscuous mode
[  229.787376][ T3442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.807321][ T3442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.825299][T10688] nbd: socks must be embedded in a SOCK_ITEM attr
[  229.846286][T10450] veth0_macvtap: entered promiscuous mode
[  229.855369][T10688] block nbd2: shutting down sockets
[  229.863035][T10450] veth1_macvtap: entered promiscuous mode
[  229.973289][T10450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.000304][T10450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.019845][T10450] batman_adv: batadv0: Interface activated: batadv_slave_0
[  230.055690][T10450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.066730][T10450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.095225][T10450] batman_adv: batadv0: Interface activated: batadv_slave_1
[  230.148492][T10450] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.159815][T10450] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.173760][T10450] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.186678][T10450] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.328454][ T3442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.346854][ T3442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.431760][ T4596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.455695][ T4596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.977576][  T193] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.051189][T10730] netlink: 'syz.0.1288': attribute type 1 has an invalid length.
[  231.195515][T10733] bond3: (slave gretap1): making interface the new active one
[  231.227818][T10733] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  231.358285][  T193] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.615671][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  231.623508][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  231.631509][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  231.641401][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  231.649326][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  231.672961][  T193] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.702803][T10743] lo speed is unknown, defaulting to 1000
[  231.752182][  T193] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.885681][T10743] chnl_net:caif_netlink_parms(): no params data found
[  231.903151][  T193] bridge_slave_1: left allmulticast mode
[  231.908896][  T193] bridge_slave_1: left promiscuous mode
[  231.917084][  T193] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.926066][  T193] bridge_slave_0: left allmulticast mode
[  231.931700][  T193] bridge_slave_0: left promiscuous mode
[  231.937879][  T193] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.190883][T10754] netlink: 'syz.4.1292': attribute type 1 has an invalid length.
[  232.215045][T10754] nbd: socks must be embedded in a SOCK_ITEM attr
[  232.221583][T10754] block nbd2: shutting down sockets
[  232.480198][  T193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  232.507067][  T193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  232.526336][  T193] bond0 (unregistering): Released all slaves
[  232.640348][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  232.649090][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  232.657381][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  232.671821][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  232.680328][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  232.851278][T10769] lo speed is unknown, defaulting to 1000
[  232.938710][T10743] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.950546][T10743] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.959455][T10743] bridge_slave_0: entered allmulticast mode
[  232.967263][T10743] bridge_slave_0: entered promiscuous mode
[  233.016626][T10743] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.023805][T10743] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.033217][T10743] bridge_slave_1: entered allmulticast mode
[  233.042573][T10743] bridge_slave_1: entered promiscuous mode
[  233.073683][T10783] lo speed is unknown, defaulting to 1000
[  233.111921][T10743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  233.145256][  T193] hsr_slave_0: left promiscuous mode
[  233.155532][  T193] hsr_slave_1: left promiscuous mode
[  233.161490][  T193] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  233.169725][  T193] batman_adv: batadv0: Removing interface: batadv_slave_0
[  233.177857][  T193] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  233.185277][  T193] batman_adv: batadv0: Removing interface: batadv_slave_1
[  233.206693][  T193] veth1_macvtap: left promiscuous mode
[  233.212547][  T193] veth0_macvtap: left promiscuous mode
[  233.218308][  T193] veth1_vlan: left promiscuous mode
[  233.223621][  T193] veth0_vlan: left promiscuous mode
[  233.583895][  T193] team0 (unregistering): Port device team_slave_1 removed
[  233.622099][  T193] team0 (unregistering): Port device team_slave_0 removed
[  233.717514][ T5854] Bluetooth: hci3: command tx timeout
[  233.923417][T10743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  234.051648][T10743] team0: Port device team_slave_0 added
[  234.072747][T10743] team0: Port device team_slave_1 added
[  234.259515][T10743] batman_adv: batadv0: Adding interface: batadv_slave_0
[  234.269940][T10743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.308481][T10743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  234.332126][T10799] __nla_validate_parse: 11 callbacks suppressed
[  234.332141][T10799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1302'.
[  234.379657][T10799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1302'.
[  234.388646][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1302'.
[  234.461142][T10743] batman_adv: batadv0: Adding interface: batadv_slave_1
[  234.476404][T10743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.508304][T10743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  234.719710][T10743] hsr_slave_0: entered promiscuous mode
[  234.726936][T10743] hsr_slave_1: entered promiscuous mode
[  234.733300][T10743] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  234.741341][T10743] Cannot create hsr debugfs directory
[  234.754370][ T5854] Bluetooth: hci4: command tx timeout
[  234.765343][T10769] chnl_net:caif_netlink_parms(): no params data found
[  234.801837][T10807] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1303'.
[  234.860468][  T193] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.032586][  T193] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.112079][T10813] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1304'.
[  235.201878][  T193] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.333072][T10769] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.354049][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1308'.
[  235.363061][T10769] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.363208][T10769] bridge_slave_0: entered allmulticast mode
[  235.369023][T10769] bridge_slave_0: entered promiscuous mode
[  235.375916][T10827] nbd: must specify an index to disconnect
[  235.410809][  T193] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.451973][T10769] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.474419][T10769] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.491342][T10769] bridge_slave_1: entered allmulticast mode
[  235.506834][T10769] bridge_slave_1: entered promiscuous mode
[  235.602215][T10769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.651262][T10769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.789787][T10769] team0: Port device team_slave_0 added
[  235.799894][ T5854] Bluetooth: hci3: command tx timeout
[  235.838061][T10847] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1318'.
[  235.859577][T10769] team0: Port device team_slave_1 added
[  235.970277][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1316'.
[  235.980057][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1316'.
[  235.989625][T10845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1316'.
[  235.999021][  T193] bridge_slave_1: left allmulticast mode
[  236.005667][  T193] bridge_slave_1: left promiscuous mode
[  236.011461][  T193] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.031372][  T193] bridge_slave_0: left allmulticast mode
[  236.039624][  T193] bridge_slave_0: left promiscuous mode
[  236.045545][  T193] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.351305][  T193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  236.363989][  T193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  236.374728][  T193] bond0 (unregistering): Released all slaves
[  236.389748][T10769] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.398213][T10769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.425048][T10769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.517358][T10769] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.530259][T10769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.561608][T10769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.740523][T10855] lo speed is unknown, defaulting to 1000
[  236.790560][T10769] hsr_slave_0: entered promiscuous mode
[  236.801988][T10769] hsr_slave_1: entered promiscuous mode
[  236.821990][T10769] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  236.830606][T10769] Cannot create hsr debugfs directory
[  236.840690][ T5854] Bluetooth: hci4: command tx timeout
[  236.999143][  T193] hsr_slave_0: left promiscuous mode
[  237.009028][  T193] hsr_slave_1: left promiscuous mode
[  237.019113][  T193] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  237.029463][  T193] batman_adv: batadv0: Removing interface: batadv_slave_0
[  237.038950][T10873] nbd: must specify a device to reconfigure
[  237.045825][  T193] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  237.053224][  T193] batman_adv: batadv0: Removing interface: batadv_slave_1
[  237.073648][  T193] veth1_macvtap: left promiscuous mode
[  237.079257][  T193] veth0_macvtap: left promiscuous mode
[  237.084960][  T193] veth1_vlan: left promiscuous mode
[  237.090239][  T193] veth0_vlan: left promiscuous mode
[  237.429941][  T193] team0 (unregistering): Port device team_slave_1 removed
[  237.463862][  T193] team0 (unregistering): Port device team_slave_0 removed
[  237.878376][ T5854] Bluetooth: hci3: command tx timeout
[  237.993858][T10743] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  238.005583][T10743] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  238.033247][T10743] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  238.086046][T10743] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  238.419637][T10743] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.451993][T10743] 8021q: adding VLAN 0 to HW filter on device team0
[  238.480377][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.487581][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  238.507777][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.514951][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  238.684076][T10769] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  238.733502][T10769] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  238.756956][T10769] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  238.777970][T10769] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  238.924765][ T5854] Bluetooth: hci4: command tx timeout
[  239.027312][T10915] netlink: 'syz.4.1343': attribute type 2 has an invalid length.
[  239.035493][T10915] netlink: 'syz.4.1343': attribute type 1 has an invalid length.
[  239.059945][T10769] 8021q: adding VLAN 0 to HW filter on device bond0
[  239.087313][T10743] 8021q: adding VLAN 0 to HW filter on device batadv0
[  239.113083][T10769] 8021q: adding VLAN 0 to HW filter on device team0
[  239.175962][  T193] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.183216][  T193] bridge0: port 1(bridge_slave_0) entered forwarding state
[  239.209040][  T193] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.216228][  T193] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.243053][T10921] tipc: Started in network mode
[  239.250902][T10921] tipc: Node identity 6e695ceeffc7, cluster identity 4711
[  239.259063][T10921] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.327881][T10919] syzkaller0: entered promiscuous mode
[  239.333409][T10919] syzkaller0: entered allmulticast mode
[  239.341938][T10919] tipc: Resetting bearer <eth:syzkaller0>
[  239.377664][T10918] tipc: Resetting bearer <eth:syzkaller0>
[  239.964448][ T5854] Bluetooth: hci3: command tx timeout
[  240.352435][T10918] tipc: Disabling bearer <eth:syzkaller0>
[  240.358997][  T976] tipc: Node number set to 2444123374
[  240.373235][T10743] veth0_vlan: entered promiscuous mode
[  240.426811][T10743] veth1_vlan: entered promiscuous mode
[  240.512556][T10743] veth0_macvtap: entered promiscuous mode
[  240.535986][T10743] veth1_macvtap: entered promiscuous mode
[  240.587214][T10743] batman_adv: batadv0: Interface activated: batadv_slave_0
[  240.599290][T10931] __nla_validate_parse: 9 callbacks suppressed
[  240.599304][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1347'.
[  240.621287][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1347'.
[  240.630623][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1347'.
[  240.656812][T10743] batman_adv: batadv0: Interface activated: batadv_slave_1
[  240.676193][T10743] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.690613][T10743] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.700816][T10743] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.717182][T10743] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.847784][T10769] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.931641][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.944796][T10769] veth0_vlan: entered promiscuous mode
[  240.958513][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.995235][ T5854] Bluetooth: hci4: command tx timeout
[  240.997293][T10769] veth1_vlan: entered promiscuous mode
[  241.009113][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1352'.
[  241.021170][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1352'.
[  241.027940][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.040631][T10948] netlink: 'syz.4.1352': attribute type 1 has an invalid length.
[  241.051259][T10948] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1352'.
[  241.073095][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.089304][T10769] veth0_macvtap: entered promiscuous mode
[  241.121080][T10769] veth1_macvtap: entered promiscuous mode
[  241.130843][T10948] nbd: socks must be embedded in a SOCK_ITEM attr
[  241.167284][T10948] block nbd2: shutting down sockets
[  241.211843][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  241.234768][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.259414][T10769] batman_adv: batadv0: Interface activated: batadv_slave_0
[  241.297680][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  241.323906][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.351748][T10769] batman_adv: batadv0: Interface activated: batadv_slave_1
[  241.379840][T10769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.391836][T10769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  241.410400][T10769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  241.419510][T10769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  241.492079][T10963] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1356'.
[  241.570562][T10965] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1357'.
[  241.599191][T10967] xt_l2tp: missing protocol rule (udp|l2tpip)
[  241.600546][T10965] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1357'.
[  241.665176][T10769] ------------[ cut here ]------------
[  241.670834][T10769] WARNING: CPU: 0 PID: 10769 at ./include/net/netdev_lock.h:17 netdev_nl_dev_fill+0x6bc/0x860
[  241.681819][T10769] Modules linked in:
[  241.686224][T10769] CPU: 0 UID: 0 PID: 10769 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) 
[  241.698567][T10769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  241.708758][T10769] RIP: 0010:netdev_nl_dev_fill+0x6bc/0x860
[  241.716058][T10769] Code: 1c 24 44 29 eb 4c 89 e8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 4a 01 00 00 41 89 5d 00 31 c0 e9 4d fe ff ff e8 65 4e c4 f7 90 <0f> 0b 90 e9 2c fa ff ff e8 57 4e c4 f7 90 0f 0b 90 42 80 3c 3b 00
[  241.736143][T10769] RSP: 0018:ffffc90003b4ea20 EFLAGS: 00010293
[  241.742238][T10769] RAX: ffffffff89fe6c5b RBX: 0000000000000000 RCX: ffff888026358000
[  241.751323][T10769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  241.759452][T10769] RBP: ffffc90003b4eb50 R08: ffffffff89fe667c R09: 1ffff11008c429dc
[  241.767504][T10769] R10: dffffc0000000000 R11: ffffed1008c429dd R12: ffff888076178000
[  241.775838][T10769] R13: ffff88805d20cc80 R14: ffff88805d20cc80 R15: ffffc90003b4eba0
[  241.783838][T10769] FS:  000055556b04e500(0000) GS:ffff888124fab000(0000) knlGS:0000000000000000
[  241.792853][T10769] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  241.800559][T10769] CR2: 00002000000000c0 CR3: 000000004e22e000 CR4: 00000000003526f0
[  241.809358][T10769] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  241.817942][T10769] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  241.826418][T10769] Call Trace:
[  241.829746][T10769]  <TASK>
[  241.832696][T10769]  ? __build_skb_around+0x247/0x3d0
[  241.838239][T10769]  ? __pfx_netdev_nl_dev_fill+0x10/0x10
[  241.843837][T10769]  ? __alloc_skb+0x298/0x480
[  241.848515][T10769]  ? __pfx___alloc_skb+0x10/0x10
[  241.853489][T10769]  netdev_genl_dev_notify+0x1fb/0x450
[  241.858973][T10769]  ? __pfx_netdev_genl_dev_notify+0x10/0x10
[  241.865205][T10769]  ? dev_map_notification+0x14d/0x9a0
[  241.870608][T10769]  ? ip_vs_dst_event+0x508/0x6a0
[  241.875874][T10769]  netdev_genl_netdevice_event+0x81/0xa0
[  241.881533][T10769]  notifier_call_chain+0x1a5/0x3f0
[  241.886723][T10769]  register_netdevice+0x16c0/0x1b80
[  241.891968][T10769]  ? __pfx_register_netdevice+0x10/0x10
[  241.897859][T10769]  ? ieee80211_debugfs_recreate_netdev+0x629/0x1520
[  241.904524][T10769]  cfg80211_register_netdevice+0x149/0x2f0
[  241.910360][T10769]  ieee80211_if_add+0x119b/0x1780
[  241.915831][T10769]  ieee80211_register_hw+0x3718/0x42d0
[  241.921701][T10769]  ? ieee80211_register_hw+0x15c1/0x42d0
[  241.927741][T10769]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  241.933595][T10769]  ? __hrtimer_setup+0x17f/0x200
[  241.938610][T10769]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  241.944537][T10769]  mac80211_hwsim_new_radio+0x2adc/0x4a60
[  241.950317][T10769]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  241.957008][T10769]  ? nla_get_range_unsigned+0x26e/0x490
[  241.962609][T10769]  hwsim_new_radio_nl+0xed0/0x2290
[  241.967839][T10769]  ? __pfx___nla_validate_parse+0x10/0x10
[  241.973589][T10769]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  241.979309][T10769]  ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290
[  241.985988][T10769]  genl_rcv_msg+0xb38/0xf00
[  241.990534][T10769]  ? __pfx_genl_rcv_msg+0x10/0x10
[  241.995638][T10769]  ? __dev_queue_xmit+0x1780/0x3f60
[  242.000870][T10769]  ? kasan_save_track+0x3f/0x80
[  242.005792][T10769]  ? __kasan_slab_alloc+0x66/0x80
[  242.010849][T10769]  ? do_syscall_64+0xf3/0x210
[  242.015885][T10769]  ? __lock_acquire+0xad5/0xd80
[  242.021252][T10769]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  242.028007][T10769]  netlink_rcv_skb+0x208/0x480
[  242.032813][T10769]  ? __pfx_genl_rcv_msg+0x10/0x10
[  242.038464][T10769]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  242.043816][T10769]  ? netlink_deliver_tap+0x2e/0x1b0
[  242.049414][T10769]  genl_rcv+0x28/0x40
[  242.053418][T10769]  netlink_unicast+0x7f8/0x9a0
[  242.058251][T10769]  ? __pfx_netlink_unicast+0x10/0x10
[  242.063570][T10769]  ? skb_put+0x114/0x1f0
[  242.067906][T10769]  netlink_sendmsg+0x8c3/0xcd0
[  242.072718][T10769]  ? __pfx_netlink_sendmsg+0x10/0x10
[  242.078323][T10769]  ? aa_sock_msg_perm+0x91/0x160
[  242.081641][T10977] netlink: 'syz.4.1358': attribute type 3 has an invalid length.
[  242.083275][T10769]  ? __pfx_netlink_sendmsg+0x10/0x10
[  242.096413][T10769]  __sock_sendmsg+0x221/0x270
[  242.101134][T10769]  __sys_sendto+0x365/0x4c0
[  242.106013][T10769]  ? __pfx___sys_sendto+0x10/0x10
[  242.109105][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1358'.
[  242.111065][T10769]  ? _raw_spin_unlock_irq+0x23/0x50
[  242.126587][T10769]  ? blkcg_maybe_throttle_current+0x1ad/0xbb0
[  242.132809][T10769]  __x64_sys_sendto+0xde/0x100
[  242.137955][T10769]  do_syscall_64+0xf3/0x210
[  242.142493][T10769]  ? clear_bhb_loop+0x45/0xa0
[  242.147262][T10769]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.153186][T10769] RIP: 0033:0x7f3320b8fffc
[  242.157779][T10769] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  242.177911][T10769] RSP: 002b:00007fffa1964ea0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  242.186405][T10769] RAX: ffffffffffffffda RBX: 00007f33218e4620 RCX: 00007f3320b8fffc
[  242.194523][T10769] RDX: 0000000000000024 RSI: 00007f33218e4670 RDI: 0000000000000003
[  242.202496][T10769] RBP: 0000000000000000 R08: 00007fffa1964ef4 R09: 000000000000000c
[  242.210764][T10769] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  242.218774][T10769] R13: 0000000000000000 R14: 00007f33218e4670 R15: 0000000000000000
[  242.227329][T10769]  </TASK>
[  242.230375][T10769] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  242.237676][T10769] CPU: 0 UID: 0 PID: 10769 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) 
[  242.249957][T10769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  242.260013][T10769] Call Trace:
[  242.263311][T10769]  <TASK>
[  242.266251][T10769]  dump_stack_lvl+0x241/0x360
[  242.270939][T10769]  ? __pfx_dump_stack_lvl+0x10/0x10
[  242.276143][T10769]  ? __pfx__printk+0x10/0x10
[  242.280743][T10769]  ? vscnprintf+0x5d/0x90
[  242.285091][T10769]  panic+0x349/0x880
[  242.289021][T10769]  ? __warn+0x174/0x4d0
[  242.293198][T10769]  ? __pfx_panic+0x10/0x10
[  242.297636][T10769]  __warn+0x344/0x4d0
[  242.301631][T10769]  ? netdev_nl_dev_fill+0x6bc/0x860
[  242.306840][T10769]  report_bug+0x2b3/0x500
[  242.311179][T10769]  ? netdev_nl_dev_fill+0x6bc/0x860
[  242.316388][T10769]  ? netdev_nl_dev_fill+0x6bc/0x860
[  242.321616][T10769]  ? netdev_nl_dev_fill+0x6be/0x860
[  242.326819][T10769]  handle_bug+0x89/0x170
[  242.331066][T10769]  exc_invalid_op+0x1a/0x50
[  242.335578][T10769]  asm_exc_invalid_op+0x1a/0x20
[  242.340434][T10769] RIP: 0010:netdev_nl_dev_fill+0x6bc/0x860
[  242.346258][T10769] Code: 1c 24 44 29 eb 4c 89 e8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 4a 01 00 00 41 89 5d 00 31 c0 e9 4d fe ff ff e8 65 4e c4 f7 90 <0f> 0b 90 e9 2c fa ff ff e8 57 4e c4 f7 90 0f 0b 90 42 80 3c 3b 00
[  242.365865][T10769] RSP: 0018:ffffc90003b4ea20 EFLAGS: 00010293
[  242.371938][T10769] RAX: ffffffff89fe6c5b RBX: 0000000000000000 RCX: ffff888026358000
[  242.379910][T10769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  242.387886][T10769] RBP: ffffc90003b4eb50 R08: ffffffff89fe667c R09: 1ffff11008c429dc
[  242.395861][T10769] R10: dffffc0000000000 R11: ffffed1008c429dd R12: ffff888076178000
[  242.403838][T10769] R13: ffff88805d20cc80 R14: ffff88805d20cc80 R15: ffffc90003b4eba0
[  242.411827][T10769]  ? netdev_nl_dev_fill+0xdc/0x860
[  242.416954][T10769]  ? netdev_nl_dev_fill+0x6bb/0x860
[  242.422173][T10769]  ? __build_skb_around+0x247/0x3d0
[  242.427382][T10769]  ? __pfx_netdev_nl_dev_fill+0x10/0x10
[  242.432936][T10769]  ? __alloc_skb+0x298/0x480
[  242.437534][T10769]  ? __pfx___alloc_skb+0x10/0x10
[  242.442484][T10769]  netdev_genl_dev_notify+0x1fb/0x450
[  242.447863][T10769]  ? __pfx_netdev_genl_dev_notify+0x10/0x10
[  242.453767][T10769]  ? dev_map_notification+0x14d/0x9a0
[  242.459148][T10769]  ? ip_vs_dst_event+0x508/0x6a0
[  242.464092][T10769]  netdev_genl_netdevice_event+0x81/0xa0
[  242.469741][T10769]  notifier_call_chain+0x1a5/0x3f0
[  242.474872][T10769]  register_netdevice+0x16c0/0x1b80
[  242.480092][T10769]  ? __pfx_register_netdevice+0x10/0x10
[  242.485648][T10769]  ? ieee80211_debugfs_recreate_netdev+0x629/0x1520
[  242.492262][T10769]  cfg80211_register_netdevice+0x149/0x2f0
[  242.498077][T10769]  ieee80211_if_add+0x119b/0x1780
[  242.503109][T10769]  ieee80211_register_hw+0x3718/0x42d0
[  242.508582][T10769]  ? ieee80211_register_hw+0x15c1/0x42d0
[  242.514224][T10769]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  242.520048][T10769]  ? __hrtimer_setup+0x17f/0x200
[  242.524991][T10769]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  242.530814][T10769]  mac80211_hwsim_new_radio+0x2adc/0x4a60
[  242.536566][T10769]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  242.542636][T10769]  ? nla_get_range_unsigned+0x26e/0x490
[  242.548192][T10769]  hwsim_new_radio_nl+0xed0/0x2290
[  242.553310][T10769]  ? __pfx___nla_validate_parse+0x10/0x10
[  242.559029][T10769]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  242.564598][T10769]  ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290
[  242.570927][T10769]  genl_rcv_msg+0xb38/0xf00
[  242.575433][T10769]  ? __pfx_genl_rcv_msg+0x10/0x10
[  242.580454][T10769]  ? __dev_queue_xmit+0x1780/0x3f60
[  242.585658][T10769]  ? kasan_save_track+0x3f/0x80
[  242.590509][T10769]  ? __kasan_slab_alloc+0x66/0x80
[  242.595538][T10769]  ? do_syscall_64+0xf3/0x210
[  242.600242][T10769]  ? __lock_acquire+0xad5/0xd80
[  242.605121][T10769]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  242.610680][T10769]  netlink_rcv_skb+0x208/0x480
[  242.615446][T10769]  ? __pfx_genl_rcv_msg+0x10/0x10
[  242.620472][T10769]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  242.625771][T10769]  ? netlink_deliver_tap+0x2e/0x1b0
[  242.630975][T10769]  genl_rcv+0x28/0x40
[  242.634955][T10769]  netlink_unicast+0x7f8/0x9a0
[  242.639741][T10769]  ? __pfx_netlink_unicast+0x10/0x10
[  242.645027][T10769]  ? skb_put+0x114/0x1f0
[  242.649266][T10769]  netlink_sendmsg+0x8c3/0xcd0
[  242.654042][T10769]  ? __pfx_netlink_sendmsg+0x10/0x10
[  242.659340][T10769]  ? aa_sock_msg_perm+0x91/0x160
[  242.664287][T10769]  ? __pfx_netlink_sendmsg+0x10/0x10
[  242.669570][T10769]  __sock_sendmsg+0x221/0x270
[  242.674252][T10769]  __sys_sendto+0x365/0x4c0
[  242.678757][T10769]  ? __pfx___sys_sendto+0x10/0x10
[  242.683783][T10769]  ? _raw_spin_unlock_irq+0x23/0x50
[  242.688999][T10769]  ? blkcg_maybe_throttle_current+0x1ad/0xbb0
[  242.695084][T10769]  __x64_sys_sendto+0xde/0x100
[  242.699849][T10769]  do_syscall_64+0xf3/0x210
[  242.704352][T10769]  ? clear_bhb_loop+0x45/0xa0
[  242.709023][T10769]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.714907][T10769] RIP: 0033:0x7f3320b8fffc
[  242.719317][T10769] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  242.738921][T10769] RSP: 002b:00007fffa1964ea0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  242.747337][T10769] RAX: ffffffffffffffda RBX: 00007f33218e4620 RCX: 00007f3320b8fffc
[  242.755305][T10769] RDX: 0000000000000024 RSI: 00007f33218e4670 RDI: 0000000000000003
[  242.763267][T10769] RBP: 0000000000000000 R08: 00007fffa1964ef4 R09: 000000000000000c
[  242.771231][T10769] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  242.779199][T10769] R13: 0000000000000000 R14: 00007f33218e4670 R15: 0000000000000000
[  242.787207][T10769]  </TASK>
[  242.790587][T10769] Kernel Offset: disabled
[  242.794948][T10769] Rebooting in 86400 seconds..