last executing test programs:

1m0.297376298s ago: executing program 0 (id=1428):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440261, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8d0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket(0x1e, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f0000000600)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000180), 0x2ae, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', <r6=>0x0})
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0)

48.562040301s ago: executing program 0 (id=1428):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440261, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8d0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket(0x1e, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f0000000600)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000180), 0x2ae, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', <r6=>0x0})
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0)

36.373065847s ago: executing program 0 (id=1428):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440261, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8d0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket(0x1e, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f0000000600)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000180), 0x2ae, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', <r6=>0x0})
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0)

25.759552206s ago: executing program 0 (id=1428):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440261, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8d0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket(0x1e, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f0000000600)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000180), 0x2ae, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', <r6=>0x0})
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0)

13.680892072s ago: executing program 0 (id=1428):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440261, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8d0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket(0x1e, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f0000000600)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000180), 0x2ae, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', <r6=>0x0})
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0)

5.849105945s ago: executing program 3 (id=2533):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa00, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200a40, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x63, 0x0, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000003277fbac141416e000030a89079f03b180004408050300845013f2325f009402050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa00734611196", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
socket(0x26, 0x3, 0xfa)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x11, 0x2, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r3], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
pipe(&(0x7f0000000080))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/pid\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x22, 0x5, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

4.75061506s ago: executing program 2 (id=2536):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff018}, {0x80000006, 0x8, 0xb, 0x20000}]}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002a000b00000000000000000006f0000008000300040001000c000180"], 0x28}}, 0x0)

3.325121945s ago: executing program 2 (id=2537):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff030}, {0x80000006}]}, 0x10)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2000}, [@RTA_NH_ID={0x8, 0x1e, 0x800}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x840)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
connect$vsock_stream(r1, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x205, 0x0, 0x2}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc)
r7 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xe0}], 0x1}, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r6}, 0xc)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r9 = accept4(r8, 0x0, 0x0, 0x800)
ppoll(&(0x7f0000000240)=[{r9, 0x801a}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8001)
sendto$inet6(r5, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e2b, 0x0, @loopback, 0xffffffff}, 0x1c)

3.276249706s ago: executing program 3 (id=2539):
r0 = socket$inet6(0xa, 0x4, 0xfffffffe)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x50, r2, 0x101, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x2, 0x3, 0x0, {0xd4, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40e, 0x8, 0x4}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
listen(r0, 0x101)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg$inet(r4, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20048045)

3.184453262s ago: executing program 3 (id=2540):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000300)=ANY=[@ANYRESOCT], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.empty_time\x00', 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)={0x2, 0x16, 0x7, 0x9, 0xa, 0x0, 0x70bd2b, 0x25dfdbfe, [@sadb_x_policy={0x8, 0x12, 0x1, 0x0, 0x0, 0x0, 0x6c, {0x6, 0x9d, 0xa6, 0xf, 0x0, 0x6e531a13, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}}, 0x20000080)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1, 0x0, 0x8}, 0x18)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)
openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.swap.current\x00', 0x0, 0x0)

2.940215563s ago: executing program 2 (id=2542):
socket$inet_dccp(0x2, 0x6, 0x0) (async, rerun: 32)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r1, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x1, @mcast1, 0xffffffff}}, 0x6, 0x6, 0x7ff, 0x0, 0x88, 0x401, 0x2}, 0x9c) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
socket$packet(0x11, 0x3, 0x300) (rerun: 32)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = socket(0x1, 0x803, 0x0) (async)
pipe(&(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={&(0x7f0000000480)="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", &(0x7f0000000580)=""/60, &(0x7f00000005c0)="1e4bf07ae15e92fb7546e78f12549448ad74291b53bd3175d424430d02d74da07d96cad6aaf1ef6c16d7ed03b6936947f4034a44a261da58aa282d15e9d1ff60a6a03c4d35f26655bf", &(0x7f0000000640)="a556e8325a4c6ebac935cf71a97a87077132971fc38f7fa1cdce694a972de9b0432a6d65373ee68128b43f2c63e0c11fd1e302a163e4969cd26ee1a68ec49ad5b743b978d23f9808e2", 0xfffffc01, r7}, 0x38) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_PROBE_CLIENT(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, r9, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x8884}, 0x4000000) (async)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad88545b5e0bd4983ddb6eba9bf25183f47536d9c7581144695bce476046f23c34787fae5355ecb20e76ff5d0e0430d3762abdb3237159904c4478875c3a3b6228aaec0000000000", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)

2.938626606s ago: executing program 3 (id=2543):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6(0xa, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
accept$inet6(r1, &(0x7f0000001680), &(0x7f00000016c0)=0x1c)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r5=>0x0})
connect$can_bcm(r3, &(0x7f0000000080)={0x1d, r5}, 0x10)
sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x48}}, 0x0)
recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)=""/225, 0xe1}, {&(0x7f0000000100)=""/236, 0xec}, {&(0x7f0000001740)=""/4102, 0xfffffffffffffdb9}, {&(0x7f0000001200)=""/3, 0x3}], 0x48, &(0x7f0000001280)=""/116, 0x74}, 0x7}, {{&(0x7f0000001300)=@sco, 0x80, &(0x7f0000001480)=[{&(0x7f0000001380)=""/141, 0x8d}, {&(0x7f0000001440)=""/1, 0x1}], 0x2, &(0x7f00000014c0)=""/217, 0xd9}, 0x25}], 0x2, 0x22, &(0x7f0000001640)={0x0, 0x989680})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r6)

2.696238783s ago: executing program 2 (id=2545):
r0 = socket(0x1e, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x7d)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001800010000000000000000000a800000ff0300065fb259"], 0x30}, 0x1, 0x0, 0x0, 0x48090}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES8=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4008094}, 0x800)

2.48943534s ago: executing program 2 (id=2547):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r0, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c)
r1 = socket$kcm(0x2b, 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8}]}], {0x14, 0x10}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000200)={<r3=>r0, 0x0, 0xffffffffffffff10, 0x800000000000})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={<r4=>0x0, @multicast2}, &(0x7f0000000280)=0xc)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'ip6_vti0\x00', <r5=>r4, 0x0, 0x35, 0x80, 0x0, 0x10, @dev={0xfe, 0x80, '\x00', 0x3f}, @loopback, 0x40, 0x7800, 0xfffffffe}})
sendmsg$inet(r1, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @private=0xa010100}, 0x28, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES16=r5, @ANYRES16=r5, @ANYRESDEC=r3], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
sendmsg$sock(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)='k', 0x1}], 0x1, &(0x7f0000000140)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x2c0)
r7 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
unshare(0x20000400)
r8 = socket(0x2, 0x80805, 0x0)
unshare(0x48060600)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r8)
shutdown(r7, 0x0)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="040026bd7000fbdbdf250d00000006000a00ffff0000"], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x10)

2.482346182s ago: executing program 3 (id=2548):
r0 = socket$inet(0x2, 0x6, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[], 0xb4}}, 0x0)
shutdown(r0, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
unshare(0x22020600)
unshare(0x2a020400)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000580)={'syztnl1\x00', <r3=>0x0, 0x8, 0x7800, 0x4aa, 0x92, {{0x15, 0x4, 0x1, 0x29, 0x54, 0x68, 0x0, 0x1, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x17}, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0x6f, 0x1, 0x0, [{@local, 0x141}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@private=0xa010102, 0x1}, {@multicast2, 0x6}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x66, [@loopback, @rand_addr=0x64010102]}]}}}}})
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', r4}, 0x18)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000)
recvmmsg$unix(r2, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/91, 0x5b}, {&(0x7f0000000480)=""/210, 0xd2}], 0x2}}, {{0x0, 0x0, &(0x7f0000002700)}}], 0x2, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000ac0)=@nl, 0x0, &(0x7f0000002e00)=[{&(0x7f0000000b40)=""/204}, {&(0x7f0000000240)=""/27}, {&(0x7f0000000c40)=""/189}, {&(0x7f0000000d00)=""/4096}, {&(0x7f0000001d00)=""/229}, {&(0x7f0000001e00)=""/4096}], 0x0, &(0x7f0000002e80)=""/157}, 0x6}, {{&(0x7f0000002f40)=@rc={0x1f, @none}, 0x0, &(0x7f0000000300)=[{&(0x7f0000002fc0)=""/145}, {&(0x7f0000003100)=""/88}]}, 0x1}, {{&(0x7f0000003180)=@can, 0x0, &(0x7f0000004480)=[{&(0x7f0000003200)=""/4096}, {&(0x7f0000005180)=""/4096}, {&(0x7f0000004200)=""/144}, {&(0x7f00000042c0)=""/135}, {&(0x7f0000004380)=""/83}, {&(0x7f0000000740)=""/15}, {&(0x7f0000004400)=""/83}], 0x0, &(0x7f0000004500)=""/137}, 0x2}, {{&(0x7f00000045c0)=@ax25={{0x3, @null}, [@remote, @remote, @null, @rose, @rose, @netrom, @null]}, 0x0, &(0x7f0000003080)=[{&(0x7f0000004640)=""/128}, {&(0x7f00000046c0)=""/120}], 0x0, &(0x7f0000006180)=""/4096}}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000004740)=""/23}, {&(0x7f0000004780)=""/40}, {&(0x7f0000007180)=""/4096}, {&(0x7f00000047c0)=""/211}, {&(0x7f00000048c0)=""/12}, {&(0x7f0000004900)=""/92}, {&(0x7f0000004980)=""/54}, {&(0x7f00000049c0)=""/244}, {&(0x7f0000004ac0)=""/4}], 0x0, &(0x7f0000004bc0)=""/247}}], 0xa30, 0x0, 0x0)
syz_emit_ethernet(0x9e, &(0x7f0000004e00)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8c00", 0x68, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0xfffd, 0x0, 0x0, {[@generic={0x13, 0xc, "b2e4322739e6da161590"}, @sack={0x5, 0x2}]}}, {"56c79c3ceca193cbef6840d5ad79038d7f628bd2bafe000000000000334e283a822115cbac8efdc767774fdce7d373826c05886bba87967579904e4896676fe4736171a4"}}}}}}}, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in=@local, 0x100, 0x0, 0x2, 0x0, 0xa, 0x10}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, {0x0, 0x40000000, 0x0, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@empty, 0xfffffffe, 0x4}}, 0xe8)
sendmmsg$inet6(r6, &(0x7f0000000380)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x4c, 0x1a, 0x130, 0x73, 0x210, 0x258, 0x258, 0x210, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x6}}, @common=@ipv6header={{0x28}, {0x0, 0x0, 0x1}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000004f00)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='mm_page_alloc\x00', r7}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9, 0x0, 0xffffffffffffffff}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x10}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8)

2.351974278s ago: executing program 1 (id=2549):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9}}, 0x1c}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f00000000c0)=""/181, 0x32, 0xb5, 0x1, 0x10, 0x0, @void, @value}, 0x28)
r2 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000040)={0x1, 'syz0\x00'})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x200, 0x0, @loopback={0xfec0ffff00000000}}], 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @private2, 0x8}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x148, 0x4c, 0x1a, 0x0, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8)
r5 = socket$inet6(0xa, 0x3, 0xff)
sendmmsg$inet6(r5, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
bind$rds(r6, &(0x7f0000000100)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa88800200000140003006d6163736563300000000000000000000a00010095"], 0x40}}, 0x0)

1.742734389s ago: executing program 4 (id=2551):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)

1.395019309s ago: executing program 4 (id=2552):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916ac3b4dafef92c", 0xfe71}], 0x1}, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x800, 0x7ff, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x26, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000040)=@raw=[@map_fd={0x18, 0x3, 0x1, 0x0, r3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x43, &(0x7f00000001c0)=""/67, 0x41100, 0x40, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x4, 0x9, 0x0, 0x1b}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[r3, r3], &(0x7f0000000340)=[{0x0, 0x5, 0x8, 0x1}], 0x10, 0x40, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='cq_schedule\x00', r4, 0x0, 0x401}, 0x18)
r5 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000040)={0x14, 0x14, 0x1, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161)
sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @broadcast}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @noop]}}}, @ip_tos_u8={{0x11}}], 0x88}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r3)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)={0x44, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x24, 0x1, 0x0, 0x1, [@nested={0x20, 0x10, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x14, 0xe4, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x44}}, 0x0)

1.247887956s ago: executing program 1 (id=2553):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8fff8ffb703000008000000b7040000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000200001030000000000000000020000000000000002ff000005001600890000004849ac"], 0x24}, 0x1, 0x0, 0x0, 0x240088d4}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000500)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000001c0)=<r7=>0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"/1782], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000001940)={{r0}, r7, 0x2, @inherit={0x58, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000000f4000002000000750000000000800000020000000700000000000000000000000000000002000000000000000300000000000000000000000000000004000000000000003df600000000000002000000000000"]}, @name="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"})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="000429bd7000fddbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000e73502c58a500a7dda0ae33bf5e9ab4ce696fa60d99dcdedf25dcea6fd6a4a390a51ccc01611f8f07077aaf4cc13595e1cb2fc5dc586da40cc4e0fa4b693e2ffd2dcfe9a4016da6d4a4f4a25b31247f7fd8bf6abd06c3ce533b222f712bb46a75fd697d7fd0e61a28b38fef16fe935a744a9f75b55235126"], 0x84}, 0x1, 0x0, 0x0, 0x810}, 0x14008000)
r8 = socket$inet(0x2, 0x3, 0xff)
setsockopt$inet_opts(r8, 0x0, 0x4, 0x0, 0x0)
sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x2, 0x0, @broadcast}, 0x10)
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r8)
socket$inet_dccp(0x2, 0x6, 0x0)
r9 = syz_init_net_socket$ax25(0x3, 0x5, 0x7)
ioctl$SIOCAX25GETINFO(r9, 0x89ed, &(0x7f0000000000))
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
socket(0x29, 0x2, 0x1)
recvmmsg(r0, &(0x7f0000004140)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/179, 0xb3}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f00000006c0)=""/231, 0xe7}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000004300)=""/40, 0x28}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x10000}], 0x4, 0xa0, 0x0)

1.232344893s ago: executing program 4 (id=2554):
socket(0x11, 0x4, 0x9) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) (async, rerun: 64)
r1 = accept(r0, 0x0, 0x0) (rerun: 64)
recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) (async, rerun: 32)
bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) (rerun: 32)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000158126180095000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

1.165676106s ago: executing program 1 (id=2555):
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x4000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, &(0x7f00000000c0)=""/209, 0x0, 0xd1, 0x1, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb040018000000000906c59def32bca40008000000cdffffff00006100"], 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000000080102000000000000000000000000090001"], 0x34}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = accept4(r1, 0x0, 0x0, 0x80800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

995.890062ms ago: executing program 1 (id=2556):
socket$isdn(0x22, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='xprt_reserve\x00', r1, 0x0, 0x1}, 0x18)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000580)={0x7, 0xfffffffffffffffc, 0x9, 0x0, 0xffff, 0xaee3, 0x5}, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={[0x2]}, 0x8})

995.330152ms ago: executing program 4 (id=2557):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
unshare(0x600)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0)
listen(r1, 0xfffffffc)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800010000000000140004800500030007000000040003000100000008000200010000000800020001000000a00008"], 0xe0}}, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x30bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)

873.499281ms ago: executing program 4 (id=2558):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000010004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000010004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0) (async)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0xff, @empty, 0x4}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00Q\r1S]\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000010000000850000008600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000000000000477e6e3daf3b50296b4e5e23a7c3881a3106d195ce00"/48], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2, 0x0, 0x0, @void, @value}, 0x20)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x1eb041, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000580)) (async)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000580))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syz_tun\x00', <r4=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0x66, &(0x7f0000000780)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0)
ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x50, 0x13, 0x0, 0x9}, {0x6, 0x0, 0x0, 0xfe}]}) (async)
ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x50, 0x13, 0x0, 0x9}, {0x6, 0x0, 0x0, 0xfe}]})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000340)={0x1, 'team_slave_1\x00', {}, 0x101})
write$ppp(r3, &(0x7f0000000300)="4daf8a728ed3a61d", 0x8)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x2}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="2eb9", 0x2}, {&(0x7f0000000200)="83a38848bd6eb196eaee0575", 0xc}], 0x2}}], 0x2, 0x0)
shutdown(r5, 0x1) (async)
shutdown(r5, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000180)={<r6=>r3, 0x0, 0x5, 0x9})
r7 = socket$inet6(0xa, 0x6, 0x0)
setsockopt(r7, 0x10d, 0x1, 0x0, 0x0) (async)
setsockopt(r7, 0x10d, 0x1, 0x0, 0x0)
r8 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r8, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141410e0000001000000002800000000000000000000000700000001940400f0"], 0x48}, 0x0)
openat$cgroup_procs(r6, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) (async)
openat$cgroup_procs(r6, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000100)=0xc)

553.354076ms ago: executing program 4 (id=2559):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000700f1ff00fcffffff000400000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580), &(0x7f0000001280), 0x8, r0}, 0x38)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000080))
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r3, 0x2000000, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r2, &(0x7f0000007b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004200)=""/39, 0x27}, 0x1}], 0x1, 0x832b, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x3, r0, 0x4}, 0x38)

100.133226ms ago: executing program 1 (id=2560):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x1}]}, {0x0, [0x2e, 0x155f32473ce84695]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x4000007, 0x2, 0xff, 0x8, 0x200}, 0x20)
socket(0x40000000015, 0x5, 0x0) (async)
socket(0x40000000015, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x11, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYBLOB="c3"], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYBLOB="c3"], 0x48)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) (async)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040))
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x11, 0x30, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x6a00}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)

72.195589ms ago: executing program 0 (id=1428):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440261, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8d0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket(0x1e, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f0000000600)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000180), 0x2ae, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', <r6=>0x0})
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0)

71.634713ms ago: executing program 3 (id=2561):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x40, r1, 0x852dd6c070cd7e4d, 0xffdfffff, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x40}, 0x4, 0xfd, 0x0, 0x81}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [0x7ff, 0x3, 0x9, 0x0, 0x6, 0xfffffffffffffc00]}, &(0x7f0000000040)=0x78)

51.534734ms ago: executing program 2 (id=2562):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r2, 0x1, {0x1, 0xff, 0x1}, 0xfd}, 0x18)
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r2, 0x1, {0x3, 0xff}, 0x2}, 0x18)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000001500)=[{&(0x7f00000001c0)="77690addcfbe1fbb66ec", 0xa}, {&(0x7f0000000200)="061ab27c1bb04c862980bae7915819bcdf33d71c65f51bc6d1cb28d9b5bb0154e0a95ca9c854db3d4466e7c6c7854aa0e5fb828aafd0811cb984df54069992955ba7ab83752ec47eb1d4ad113d41ace887e408901095378593af66dbb85132f8c41a0555c7dcdb5b094656d35942c1acfa97f897da2fab357f478c9c3d929ebf84d3a6650aaf2b00f04941b70663f4669c6cf0ee0fa23b", 0xffffffffffffff48}, {&(0x7f0000000180)="df913fff134348c81e8f0ade88c21e90efb2e100642cd0195e82a1f6872d0484ae9e78cf2b6eac14521f013e", 0x2c}, {&(0x7f00000002c0)="c3e0fcac186e83d1afa4b4fc00312099678494c61dae1246d6eafae67f1a802eaf9d9022a55cb74dd22ffd429eaea6273d6546bd5bbae5dcae978bc6e9be341b28", 0x41}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001400)="16441c20b75d2cda73b1de4a8bfd2d123a8e898a64175203d359e28860b1516976c500ea8f902fb3222b0111592c9e227c85d1454d140bc9edf4993b5fa631dea8220576376fe427dbcdd9551be88ab59a8e17721205b71b5e1872642f149d7f78d6910c8443145ee56e296d221956d3e341c8fc92aaf2a0de76e383f58fa14d1efeeec09a124f6c743cb84a13e8c736d76408a0ba7d085307ae263713e40a79e44d368fc9c5ff56e2d9f2500327e8abae032c5935efd9b0ca6dd10ae24bbc5f8f6b2b82f2573c789b3e8fbcf8c4fe28131fa256b101c7be4e5b00cc2860ea7b66d88d40fa143bcb1ed653", 0x5b}, {&(0x7f00000013c0)="4ec8d3a28adb18275463e82419045e8c2bb06acbe04acc8a397aa8f8ee3c", 0x1e}, {&(0x7f0000001580)="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", 0x1b0}], 0x8, 0x8)
socketpair(0x3, 0x80000, 0x53, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
listen(r7, 0x0)
ioctl$SIOCX25SENDCALLACCPT(r6, 0x89e9)
close(r5)
socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0)
splice(r4, 0x0, r5, 0x0, 0x10500, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
close(0x4)
ioctl$SIOCX25GFACILITIES(r5, 0x89e2, &(0x7f0000000040))

0s ago: executing program 1 (id=2563):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
socket$pppoe(0x18, 0x1, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x420, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x398, 0x238, 0x238, 0x398, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x218, 0x280, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@inet=@sctp={{0x148}, {[], [], [], 0x0, [], 0x0, 0x0, 0xa}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @private0, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="40000000003368d5a60000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0x5f80, 0x4)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x45833af92e4b39ff, 0x0)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8)
close(r6)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r6, 0x0, 0x0}, 0x10)
r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYRES32=r7], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3679, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRESHEX=r6, @ANYRES8, @ANYRES64=r4, @ANYRESHEX=r5], 0x50)
r9 = openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_netprio_ifpriomap(r9, &(0x7f0000000680)=ANY=[@ANYBLOB="a2b4984d922c4ea30d8d1ce3e2f1e00d7c58781d3d5eec4b46e2166f126c57a540ad62da7ea636827d9946b0bee9d348a9a33c745e4d8d3bbfc6e1ae341f8e627e8e95dbb223ed0fddaf1cc9d1d248d34b8a6d2d243a2b4b0d"], 0x8)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="85d8e951", @ANYRES16=0x0, @ANYBLOB="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"], 0x26c}, 0x1, 0x0, 0x0, 0x200040d0}, 0x0)
getgid()
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r10, 0x29, 0xd0, &(0x7f0000000080), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

kernel console output (not intermixed with test programs):

dding VLAN 0 to HW filter on device team0
[  273.619578][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.626801][ T6426] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.661309][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.668517][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.678931][T11970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1644'.
[  273.811068][T11977] --map-set only usable from mangle table
[  273.863969][   T54] Bluetooth: hci0: command tx timeout
[  273.913703][T11984] netlink: 1024 bytes leftover after parsing attributes in process `syz.4.1647'.
[  273.923150][T11984] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  273.993018][T11986] sock: sock_timestamping_bind_phc: sock not bind to device
[  274.067471][T11771] 8021q: adding VLAN 0 to HW filter on device batadv0
[  274.101857][T11994] netlink: 'syz.4.1651': attribute type 4 has an invalid length.
[  274.162334][T11771] veth0_vlan: entered promiscuous mode
[  274.186170][T11771] veth1_vlan: entered promiscuous mode
[  274.219326][T11996] openvswitch: netlink: IPv4 tun info is not correct
[  274.228539][T11996] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20000
[  274.270863][T11771] veth0_macvtap: entered promiscuous mode
[  274.303106][T11771] veth1_macvtap: entered promiscuous mode
[  274.340677][T11771] batman_adv: batadv0: Interface activated: batadv_slave_0
[  274.362381][T11771] batman_adv: batadv0: Interface activated: batadv_slave_1
[  274.392748][T11771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.424368][T11771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.461781][T11771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.507661][T11771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.555062][ T6410] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  274.624145][T12013] __nla_validate_parse: 6 callbacks suppressed
[  274.624164][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1658'.
[  274.734534][ T6410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.764008][ T6410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.789974][ T6430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.804659][ T6430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.841863][T12018] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1659'.
[  275.040619][T12025] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.1662'.
[  275.397604][T12035] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11
[  275.485837][T12035] sctp: [Deprecated]: syz.4.1665 (pid 12035) Use of struct sctp_assoc_value in delayed_ack socket option.
[  275.485837][T12035] Use struct sctp_sack_info instead
[  275.537224][T12035] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1665'.
[  275.687899][T12045] netlink: 'syz.2.1668': attribute type 1 has an invalid length.
[  275.708310][ T6402] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  275.724819][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1668'.
[  275.743208][T12047] SET target dimension over the limit!
[  275.749808][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1668'.
[  276.034856][T12064] netlink: 'syz.2.1676': attribute type 10 has an invalid length.
[  276.314250][T12082] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  276.369420][ T6400] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.873510][ T6410] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  276.986373][T12086] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1682'.
[  277.277624][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  277.289774][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  277.298288][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  277.314289][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  277.323179][ T5147] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  277.330757][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  277.381574][T12095] lo speed is unknown, defaulting to 1000
[  277.725186][ T6400] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.762179][T12095] chnl_net:caif_netlink_parms(): no params data found
[  277.938177][ T6400] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.082903][ T6426] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  278.126442][ T6400] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.154724][T12118] netlink: 'syz.1.1688': attribute type 4 has an invalid length.
[  278.206449][T12123] netlink: 'syz.1.1688': attribute type 4 has an invalid length.
[  278.272516][T12095] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.301024][T12095] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.316018][T12095] bridge_slave_0: entered allmulticast mode
[  278.334861][T12128] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  278.341318][T12095] bridge_slave_0: entered promiscuous mode
[  278.386793][T12095] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.394669][T12095] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.402484][T12095] bridge_slave_1: entered allmulticast mode
[  278.410359][T12095] bridge_slave_1: entered promiscuous mode
[  278.706526][T12095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  278.739815][T12095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  278.786528][ T6400] bridge_slave_1: left allmulticast mode
[  278.792220][ T6400] bridge_slave_1: left promiscuous mode
[  278.815216][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.835172][ T6400] bridge_slave_0: left allmulticast mode
[  278.840860][ T6400] bridge_slave_0: left promiscuous mode
[  278.860842][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.244510][ T6402] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  279.385241][   T54] Bluetooth: hci0: command tx timeout
[  279.686459][ T6400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  279.716806][ T6400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  279.736365][ T6400] bond0 (unregistering): Released all slaves
[  279.771738][T12160] --map-set only usable from mangle table
[  279.839502][T12095] team0: Port device team_slave_0 added
[  279.887367][T12095] team0: Port device team_slave_1 added
[  280.025911][T12095] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.032922][T12095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.089276][T12095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.168800][T12163] --map-set only usable from mangle table
[  280.179011][T12095] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.193503][T12095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.252341][T12095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  280.393984][ T6402] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  280.601347][T12170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1702'.
[  280.668654][T12173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1702'.
[  280.788032][T12174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1702'.
[  281.465274][   T54] Bluetooth: hci0: command tx timeout
[  281.560440][ T6402] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  282.667859][T12095] hsr_slave_0: entered promiscuous mode
[  282.673650][ T3565] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  282.674324][T12095] hsr_slave_1: entered promiscuous mode
[  282.690644][T12095] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  282.698416][T12095] Cannot create hsr debugfs directory
[  282.721740][ T6400] hsr_slave_0: left promiscuous mode
[  282.728138][ T6400] hsr_slave_1: left promiscuous mode
[  282.740322][ T6400] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  282.751172][ T6400] batman_adv: batadv0: Removing interface: batadv_slave_0
[  282.762123][ T6400] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  282.771520][ T6400] batman_adv: batadv0: Removing interface: batadv_slave_1
[  282.800649][ T6400] veth1_macvtap: left promiscuous mode
[  282.806375][ T6400] veth0_macvtap: left promiscuous mode
[  282.812323][T12182] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  282.821338][ T6400] veth1_vlan: left promiscuous mode
[  282.827227][ T6400] veth0_vlan: left promiscuous mode
[  283.229131][ T6400] team0 (unregistering): Port device team_slave_1 removed
[  283.276268][ T6400] team0 (unregistering): Port device team_slave_0 removed
[  283.555515][   T54] Bluetooth: hci0: command tx timeout
[  283.784634][ T6430] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  283.836743][T12186] wireguard0: entered promiscuous mode
[  283.842264][T12186] wireguard0: entered allmulticast mode
[  283.994735][T12201] netlink: 'syz.3.1709': attribute type 27 has an invalid length.
[  284.217918][T12203] lo speed is unknown, defaulting to 1000
[  284.588993][T12208] lo speed is unknown, defaulting to 1000
[  284.690826][T12215] --map-set only usable from mangle table
[  284.894244][   T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  284.928238][T12095] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  284.993487][T12095] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  285.013100][T12095] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  285.028176][T12095] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  285.061579][T12219] lo speed is unknown, defaulting to 1000
[  285.192036][ T5916] IPVS: starting estimator thread 0...
[  285.316646][T12227] IPVS: using max 28 ests per chain, 67200 per kthread
[  285.322353][T12095] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.449585][T12095] 8021q: adding VLAN 0 to HW filter on device team0
[  285.507525][ T3565] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.514705][ T3565] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.549437][ T3565] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.556630][ T3565] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.616259][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1719'.
[  285.633665][   T54] Bluetooth: hci0: command tx timeout
[  285.652691][T12095] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  285.723938][T12095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  285.884437][T12236] lo speed is unknown, defaulting to 1000
[  285.886033][T12221] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1714'.
[  286.012202][T12221] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  286.033758][ T6426] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  286.136406][T12247] bond9 (unregistering): Released all slaves
[  286.169390][T12221] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1714'.
[  286.548830][T12095] 8021q: adding VLAN 0 to HW filter on device batadv0
[  286.725476][T12095] veth0_vlan: entered promiscuous mode
[  286.785869][T12095] veth1_vlan: entered promiscuous mode
[  286.859863][T12264] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1725'.
[  286.912440][T12095] veth0_macvtap: entered promiscuous mode
[  286.923926][T12269] netlink: 'syz.1.1726': attribute type 10 has an invalid length.
[  286.936603][T12095] veth1_macvtap: entered promiscuous mode
[  286.972450][T12269] 8021q: adding VLAN 0 to HW filter on device team0
[  287.083789][T12279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1730'.
[  287.164271][ T1110] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  287.178283][T12095] batman_adv: batadv0: Interface activated: batadv_slave_0
[  287.224810][T12095] batman_adv: batadv0: Interface activated: batadv_slave_1
[  287.263578][T12275] --map-set only usable from mangle table
[  287.284306][T12095] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  287.309397][T12095] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.333039][T12095] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.360632][T12095] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.423634][T12293] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1733'.
[  287.569192][ T6400] IPVS: stop unused estimator thread 0...
[  287.579459][T12273] infiniband syz1: set down
[  287.585088][T12273] infiniband syz1: added team_slave_0
[  287.614229][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.622098][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.648703][T12273] RDS/IB: syz1: added
[  287.669342][T12273] smc: adding ib device syz1 with port count 1
[  287.675899][T12273] smc:    ib device syz1 port 1 has pnetid 
[  287.689762][ T6402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.711450][ T6402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.909437][T12307] netlink: 'syz.2.1736': attribute type 7 has an invalid length.
[  288.173179][T12313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1739'.
[  288.309751][T12320] vlan3: entered allmulticast mode
[  288.315520][ T3565] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  288.327953][T12320] bond0: entered allmulticast mode
[  288.334740][T12320] bond0: left allmulticast mode
[  289.455426][ T1110] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  289.493227][ T6400] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.635941][T12367] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1751'.
[  289.742424][ T6400] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.775405][T12372] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  289.829463][T12372] xt_hashlimit: size too large, truncated to 1048576
[  289.854805][T12366] --map-set only usable from mangle table
[  289.895572][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1753'.
[  289.920201][T12376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1753'.
[  289.973798][ T6400] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.241186][ T6400] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.281008][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  290.282472][T12389] atomic_op ffff88807f84e198 conn xmit_atomic 0000000000000000
[  290.296545][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  290.305144][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  290.350360][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  290.360023][ T5147] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  290.367882][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  290.513185][T12398] netlink: 'syz.4.1760': attribute type 12 has an invalid length.
[  290.525005][T12390] lo speed is unknown, defaulting to 1000
[  290.562201][ T6400] bridge_slave_1: left allmulticast mode
[  290.579342][ T6400] bridge_slave_1: left promiscuous mode
[  290.596552][T12405] openvswitch: netlink: Flow actions attr not present in new flow.
[  290.602145][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.605027][ T3565] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  290.649695][T12407] netlink: 'syz.3.1761': attribute type 1 has an invalid length.
[  290.659565][ T6400] bridge_slave_0: left allmulticast mode
[  290.679069][ T6400] bridge_slave_0: left promiscuous mode
[  290.691770][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.382080][ T6400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  291.393938][ T6400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  291.414759][ T6400] bond0 (unregistering): Released all slaves
[  291.427124][T12407] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  291.764841][   T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  291.808986][T12422] __nla_validate_parse: 1 callbacks suppressed
[  291.809004][T12422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1766'.
[  291.832349][T12422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1766'.
[  291.842514][T12422] netlink: 'syz.2.1766': attribute type 14 has an invalid length.
[  291.870362][T12422] netlink: 'syz.2.1766': attribute type 11 has an invalid length.
[  292.423639][T12457] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  292.434931][ T5147] Bluetooth: hci0: command tx timeout
[  292.477961][T12390] chnl_net:caif_netlink_parms(): no params data found
[  292.503497][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  292.593917][T12452] bridge_slave_0 (unregistering): left allmulticast mode
[  292.608556][T12452] bridge_slave_0 (unregistering): left promiscuous mode
[  292.620349][T12452] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.679498][T12462] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.1777'.
[  292.709106][T12462] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  292.722873][ T6400] hsr_slave_0: left promiscuous mode
[  292.729635][ T6400] hsr_slave_1: left promiscuous mode
[  292.739072][ T6400] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  292.747066][ T6400] batman_adv: batadv0: Removing interface: batadv_slave_0
[  292.756293][ T6400] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  292.770877][ T6400] batman_adv: batadv0: Removing interface: batadv_slave_1
[  292.840967][ T6400] veth1_macvtap: left promiscuous mode
[  292.849877][ T6400] veth0_macvtap: left promiscuous mode
[  292.862389][ T6400] veth1_vlan: left promiscuous mode
[  292.870991][ T6400] veth0_vlan: left promiscuous mode
[  292.877725][ T3565] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  293.432429][T12471] netlink: 'syz.1.1780': attribute type 1 has an invalid length.
[  293.851515][ T6400] team0 (unregistering): Port device team_slave_1 removed
[  293.925691][ T6400] team0 (unregistering): Port device team_slave_0 removed
[  294.003812][ T1110] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  294.425019][T12488] --map-set only usable from mangle table
[  294.508723][ T5147] Bluetooth: hci0: command tx timeout
[  294.566030][T12464] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  294.574562][T12471] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  294.697875][T12499] netlink: 'syz.3.1784': attribute type 6 has an invalid length.
[  294.734962][T12499] netlink: 'syz.3.1784': attribute type 30 has an invalid length.
[  294.749973][T12390] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.773721][T12390] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.780982][T12390] bridge_slave_0: entered allmulticast mode
[  294.796547][T12390] bridge_slave_0: entered promiscuous mode
[  294.811672][T12390] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.821911][T12390] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.837704][T12390] bridge_slave_1: entered allmulticast mode
[  294.854648][T12390] bridge_slave_1: entered promiscuous mode
[  294.891135][T12508] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1784'.
[  294.925276][T12509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1787'.
[  294.974273][T12390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  295.005809][T12390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  295.030435][T12502] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1787'.
[  295.134596][ T6402] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  295.253468][T12390] team0: Port device team_slave_0 added
[  295.284271][T12390] team0: Port device team_slave_1 added
[  295.427747][T12390] batman_adv: batadv0: Adding interface: batadv_slave_0
[  295.438855][T12390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.503465][T12390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  295.607168][T12390] batman_adv: batadv0: Adding interface: batadv_slave_1
[  295.623921][T12390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.688415][T12390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.908895][T12390] hsr_slave_0: entered promiscuous mode
[  295.921863][T12390] hsr_slave_1: entered promiscuous mode
[  295.929591][T12390] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  295.939104][T12390] Cannot create hsr debugfs directory
[  296.065276][T12537] netlink: 'syz.3.1793': attribute type 30 has an invalid length.
[  296.137054][T12537] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1793'.
[  296.243797][ T6400] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  296.269476][T12543] lo speed is unknown, defaulting to 1000
[  296.586308][   T54] Bluetooth: hci0: command tx timeout
[  296.663743][T12550] macsec1: entered promiscuous mode
[  296.668991][T12550] gretap0: entered promiscuous mode
[  296.694569][T12550] gretap0: left promiscuous mode
[  297.029265][T12390] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  297.109183][T12390] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  297.216337][T12390] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  297.322342][T12390] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  297.385153][ T6426] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  297.470356][T12545] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1797'.
[  297.589550][T12564] --map-set only usable from mangle table
[  297.654269][T12390] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.729469][T12390] 8021q: adding VLAN 0 to HW filter on device team0
[  297.759914][ T6402] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.767196][ T6402] bridge0: port 1(bridge_slave_0) entered forwarding state
[  297.901745][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.908923][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state
[  298.107017][T12569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1804'.
[  298.489851][T12390] 8021q: adding VLAN 0 to HW filter on device batadv0
[  298.503623][   T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  298.663480][   T54] Bluetooth: hci0: command 0x0419 tx timeout
[  298.713879][T12390] veth0_vlan: entered promiscuous mode
[  298.906581][T12390] veth1_vlan: entered promiscuous mode
[  298.978899][T12390] veth0_macvtap: entered promiscuous mode
[  299.007112][T12390] veth1_macvtap: entered promiscuous mode
[  299.093803][T12390] batman_adv: batadv0: Interface activated: batadv_slave_0
[  299.175513][T12390] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.196546][T12390] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.225697][T12390] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.253389][T12390] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.264874][T12617] --map-set only usable from mangle table
[  299.290720][T12390] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  299.511257][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.528606][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.594963][ T6426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.603037][ T6426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.635068][ T6426] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  300.127281][T12647] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1827'.
[  300.235807][T12652] lo speed is unknown, defaulting to 1000
[  300.246707][T12655] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1828'.
[  300.501109][T12670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1829'.
[  300.727579][ T3565] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.775044][ T1110] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  300.789939][T12673] pimreg: entered allmulticast mode
[  300.797146][T12672] pimreg: left allmulticast mode
[  301.199222][ T3565] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.529590][ T3565] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.602348][ T3565] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.885178][T12689] --map-set only usable from mangle table
[  301.925607][ T3565] bridge_slave_1: left allmulticast mode
[  301.931560][ T3565] bridge_slave_1: left promiscuous mode
[  301.936277][T12694] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  301.937699][   T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  301.971109][ T3565] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.033280][ T3565] bridge_slave_0: left allmulticast mode
[  302.050626][ T3565] bridge_slave_0: left promiscuous mode
[  302.073552][ T3565] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.270138][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  302.286925][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  302.301853][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  302.317747][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  302.329624][   T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  302.342453][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  302.712295][ T3565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  302.724826][ T3565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  302.736245][ T3565] bond0 (unregistering): Released all slaves
[  302.750421][T12705] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1840'.
[  302.799962][T12709] lo speed is unknown, defaulting to 1000
[  303.114479][   T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  303.345159][T12742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1848'.
[  303.355904][T12742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1848'.
[  303.378704][T12743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1847'.
[  303.397204][T12746] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1849'.
[  303.415497][T12743] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1847'.
[  303.451746][T12747] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1848'.
[  303.695504][T12758] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1852'.
[  303.856317][ T3565] hsr_slave_0: left promiscuous mode
[  303.987398][ T3565] hsr_slave_1: left promiscuous mode
[  304.004206][T12759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1851'.
[  304.004812][ T3565] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  304.029319][T12764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1853'.
[  304.038289][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_0
[  304.047531][ T3565] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  304.090834][ T3565] batman_adv: batadv0: Removing interface: batadv_slave_1
[  304.135532][ T3565] veth1_macvtap: left promiscuous mode
[  304.141095][ T3565] veth0_macvtap: left promiscuous mode
[  304.153642][ T3565] veth1_vlan: left promiscuous mode
[  304.158948][ T3565] veth0_vlan: left promiscuous mode
[  304.244425][   T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  304.423647][ T5147] Bluetooth: hci0: command tx timeout
[  304.965990][ T3565] team0 (unregistering): Port device team_slave_1 removed
[  305.033036][ T3565] team0 (unregistering): Port device team_slave_0 removed
[  305.403582][ T6402] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  305.505222][T12764] vlan4: entered promiscuous mode
[  305.510311][T12764] vlan4: entered allmulticast mode
[  305.530170][T12755] lo speed is unknown, defaulting to 1000
[  305.539868][T12709] chnl_net:caif_netlink_parms(): no params data found
[  305.757875][T12709] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.779502][T12709] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.787973][T12709] bridge_slave_0: entered allmulticast mode
[  305.795434][T12709] bridge_slave_0: entered promiscuous mode
[  305.823736][T12709] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.831785][T12709] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.843552][T12709] bridge_slave_1: entered allmulticast mode
[  305.850603][T12709] bridge_slave_1: entered promiscuous mode
[  306.285536][T12709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  306.307070][T12709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  306.405980][T12709] team0: Port device team_slave_0 added
[  306.509470][ T5147] Bluetooth: hci0: command tx timeout
[  306.526242][T12709] team0: Port device team_slave_1 added
[  306.578127][T12709] batman_adv: batadv0: Adding interface: batadv_slave_0
[  306.585961][T12709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  306.612441][T12709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  306.623593][ T6402] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  306.683374][T12709] batman_adv: batadv0: Adding interface: batadv_slave_1
[  306.714896][T12709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  306.803629][T12709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  306.958473][T12798] netlink: 'syz.1.1861': attribute type 10 has an invalid length.
[  307.052936][T12709] hsr_slave_0: entered promiscuous mode
[  307.090150][T12709] hsr_slave_1: entered promiscuous mode
[  307.111638][T12709] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  307.133650][T12709] Cannot create hsr debugfs directory
[  307.297144][T12811] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  307.367994][T12811] netlink: 'syz.3.1864': attribute type 4 has an invalid length.
[  307.456085][T12811] netlink: 'syz.3.1864': attribute type 4 has an invalid length.
[  307.627179][   T25] lo speed is unknown, defaulting to 1000
[  307.663198][   T25] lo speed is unknown, defaulting to 1000
[  307.803124][ T6402] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  308.144907][T12845] __nla_validate_parse: 6 callbacks suppressed
[  308.144926][T12845] netlink: 105 bytes leftover after parsing attributes in process `syz.3.1875'.
[  308.339019][T12709] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  308.360808][T12709] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  308.376667][T12709] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  308.397149][T12709] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  308.510111][T12709] 8021q: adding VLAN 0 to HW filter on device bond0
[  308.547278][T12709] 8021q: adding VLAN 0 to HW filter on device team0
[  308.560118][ T3565] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.567353][ T3565] bridge0: port 1(bridge_slave_0) entered forwarding state
[  308.583765][ T5147] Bluetooth: hci0: command tx timeout
[  308.620470][ T3565] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.627625][ T3565] bridge0: port 2(bridge_slave_1) entered forwarding state
[  308.915469][T12877] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  308.951220][T12877] lo speed is unknown, defaulting to 1000
[  308.958089][ T3565] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  309.076233][T12709] 8021q: adding VLAN 0 to HW filter on device batadv0
[  309.132223][T12709] veth0_vlan: entered promiscuous mode
[  309.167897][T12709] veth1_vlan: entered promiscuous mode
[  309.271385][T12709] veth0_macvtap: entered promiscuous mode
[  309.296703][T12709] veth1_macvtap: entered promiscuous mode
[  309.374434][T12709] batman_adv: batadv0: Interface activated: batadv_slave_0
[  309.424900][T12709] batman_adv: batadv0: Interface activated: batadv_slave_1
[  309.497148][T12709] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  309.518128][T12709] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  309.531839][T12709] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  309.545397][T12709] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  309.562914][T12881] lo speed is unknown, defaulting to 1000
[  309.832717][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1891'.
[  309.940311][T12905] netlink: 'syz.2.1892': attribute type 1 has an invalid length.
[  310.004668][ T6400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.013712][ T6400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.089071][T12905] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1892'.
[  310.091129][T12908] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  310.107686][ T1110] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  310.119299][T12905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1892'.
[  310.163704][T12908] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  310.172608][T12908] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  310.181671][T12908] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  310.199130][T12908] bond8: (slave geneve2): making interface the new active one
[  310.223905][T12908] bond8: (slave geneve2): Enslaving as an active interface with an up link
[  310.256128][T12905] 8021q: adding VLAN 0 to HW filter on device bond8
[  310.288382][T12908] syz.2.1892 (12908) used greatest stack depth: 18584 bytes left
[  310.319823][ T6400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.343697][ T6400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.709362][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1896'.
[  311.159617][T12937] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1899'.
[  311.182315][T12937] ip6gretap0: entered promiscuous mode
[  311.191914][T12937] batadv_slave_0: entered promiscuous mode
[  311.225862][ T6426] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  311.242842][T12937] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  311.263457][T12937] Cannot create hsr debugfs directory
[  311.946100][ T6400] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.373678][ T1110] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  312.413778][ T6400] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.506614][ T6400] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.595681][ T6400] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.715710][ T6400] bridge_slave_1: left allmulticast mode
[  312.721404][ T6400] bridge_slave_1: left promiscuous mode
[  312.728810][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.776755][ T6400] bridge_slave_0: left allmulticast mode
[  312.782537][ T6400] bridge_slave_0: left promiscuous mode
[  312.812465][T12959] ieee802154 phy0 wpan0: encryption failed: -22
[  312.819680][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.834742][T12959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1903'.
[  312.853596][T12959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1903'.
[  312.876136][T12959] netlink: 'syz.2.1903': attribute type 6 has an invalid length.
[  313.325652][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  313.337563][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  313.346558][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  313.367864][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  313.376077][   T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  313.385495][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  313.534822][ T1110] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  313.881878][ T6400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  313.906218][ T6400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  313.934656][ T6400] bond0 (unregistering): Released all slaves
[  314.006453][T12962] lo speed is unknown, defaulting to 1000
[  314.368370][T12984] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1909'.
[  314.403566][T12984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  314.645863][T12990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1911'.
[  314.663671][ T6430] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  315.263190][T13005] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  315.289983][T12962] chnl_net:caif_netlink_parms(): no params data found
[  315.323965][T13005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1915'.
[  315.463437][ T5147] Bluetooth: hci0: command tx timeout
[  315.761089][ T6400] hsr_slave_0: left promiscuous mode
[  315.773578][ T6400] hsr_slave_1: left promiscuous mode
[  315.779507][ T6400] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  315.788498][ T3565] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  315.820673][ T6400] batman_adv: batadv0: Removing interface: batadv_slave_0
[  315.846668][ T6400] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  315.862566][ T6400] batman_adv: batadv0: Removing interface: batadv_slave_1
[  315.906598][ T6400] veth1_macvtap: left promiscuous mode
[  315.912184][ T6400] veth0_macvtap: left promiscuous mode
[  315.922407][ T6400] veth1_vlan: left promiscuous mode
[  315.928484][ T6400] veth0_vlan: left promiscuous mode
[  316.412712][ T6400] team0 (unregistering): Port device team_slave_1 removed
[  316.460778][ T6400] team0 (unregistering): Port device team_slave_0 removed
[  316.898458][T12962] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.906251][T12962] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.917674][T12962] bridge_slave_0: entered allmulticast mode
[  316.924526][ T1110] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  316.933976][T12962] bridge_slave_0: entered promiscuous mode
[  316.950340][T13026] ip6tnl3: entered promiscuous mode
[  316.956000][T13026] ip6tnl3: entered allmulticast mode
[  316.962409][T13026] team0: Device ip6tnl3 is of different type
[  317.006552][T12962] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.018256][T12962] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.030888][T12962] bridge_slave_1: entered allmulticast mode
[  317.058333][T12962] bridge_slave_1: entered promiscuous mode
[  317.131308][T13042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1923'.
[  317.235431][T12962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  317.265141][T12962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  317.375070][T13057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1925'.
[  317.466296][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  317.506241][T12962] team0: Port device team_slave_0 added
[  317.528729][T12962] team0: Port device team_slave_1 added
[  317.551199][ T5147] Bluetooth: hci0: command tx timeout
[  317.651447][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1927'.
[  317.697480][T12962] batman_adv: batadv0: Adding interface: batadv_slave_0
[  317.705383][T12962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.732494][T12962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  317.773748][T12962] batman_adv: batadv0: Adding interface: batadv_slave_1
[  317.781289][T12962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.808124][T12962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  317.932175][T12962] hsr_slave_0: entered promiscuous mode
[  317.947152][T12962] hsr_slave_1: entered promiscuous mode
[  317.959216][T12962] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  317.970682][T12962] Cannot create hsr debugfs directory
[  317.982270][T13078] netlink: 'syz.3.1934': attribute type 12 has an invalid length.
[  318.090189][T13084] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  318.103665][ T6426] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  318.155717][T13086] bridge0: left promiscuous mode
[  318.169556][T13086] macvlan0: left promiscuous mode
[  318.310888][ T5916] hid-generic 0005:0458:0009.0002: unknown main item tag 0x0
[  318.331965][ T5916] hid-generic 0005:0458:0009.0002: unknown main item tag 0x0
[  318.364070][ T5916] hid-generic 0005:0458:0009.0002: unknown main item tag 0x0
[  318.383234][ T5916] hid-generic 0005:0458:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa
[  318.403032][T13101] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1941'.
[  318.482301][T13110] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1941'.
[  318.720665][T13122] 8021q: VLANs not supported on ip6tnl0
[  318.924930][T13131] --map-set only usable from mangle table
[  318.946722][T12962] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  318.977890][T12962] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  318.998587][T12962] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  319.012366][T12962] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  319.111562][T13141] netlink: 'syz.1.1953': attribute type 2 has an invalid length.
[  319.192402][T13143] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1954'.
[  319.240561][T12962] 8021q: adding VLAN 0 to HW filter on device bond0
[  319.248911][ T6426] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  319.282815][T12962] 8021q: adding VLAN 0 to HW filter on device team0
[  319.315360][ T6402] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.322551][ T6402] bridge0: port 1(bridge_slave_0) entered forwarding state
[  319.347074][ T6402] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.351703][T13150] netlink: 'syz.3.1957': attribute type 21 has an invalid length.
[  319.354282][ T6402] bridge0: port 2(bridge_slave_1) entered forwarding state
[  319.373109][T13151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1956'.
[  319.382769][T13151] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1956'.
[  319.469212][T13154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1958'.
[  319.478489][T13154] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1958'.
[  319.491480][T13154] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  319.502131][T13154] gretap1: entered promiscuous mode
[  319.513170][T13154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1958'.
[  319.634867][ T5147] Bluetooth: hci0: command tx timeout
[  319.669222][T12962] 8021q: adding VLAN 0 to HW filter on device batadv0
[  319.741780][T12962] veth0_vlan: entered promiscuous mode
[  319.752940][T12962] veth1_vlan: entered promiscuous mode
[  319.823017][T13160] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  319.825839][T12962] veth0_macvtap: entered promiscuous mode
[  319.852123][T12962] veth1_macvtap: entered promiscuous mode
[  319.867893][T13160] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1
[  319.896966][T12962] batman_adv: batadv0: Interface activated: batadv_slave_0
[  319.931134][T12962] batman_adv: batadv0: Interface activated: batadv_slave_1
[  319.953667][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1962'.
[  319.967293][T12962] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  319.987627][T12962] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  320.003219][T12962] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  320.014539][T12962] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  320.173826][T13181] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1965'.
[  320.205893][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.247460][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.300219][ T6426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.327443][ T6426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.390744][ T6430] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  320.573693][T13194] lo speed is unknown, defaulting to 1000
[  320.707667][T13197] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1971'.
[  320.890271][T13205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1973'.
[  320.893232][T13209] macvlan3: entered promiscuous mode
[  320.911361][T13209] bridge0: entered promiscuous mode
[  320.934297][T13209] bridge0: port 3(macvlan3) entered blocking state
[  320.951573][T13209] bridge0: port 3(macvlan3) entered disabled state
[  320.961098][T13209] macvlan3: entered allmulticast mode
[  320.968053][T13209] bridge0: entered allmulticast mode
[  320.976795][T13209] macvlan3: left allmulticast mode
[  320.985865][T13209] bridge0: left allmulticast mode
[  320.993803][T13214] ieee802154 phy0 wpan0: encryption failed: -22
[  321.001390][T13209] bridge0: left promiscuous mode
[  321.112673][T13208] netlink: 'syz.3.1975': attribute type 8 has an invalid length.
[  321.129316][T13208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1975'.
[  321.410636][T13223] netlink: 'syz.2.1979': attribute type 21 has an invalid length.
[  321.443206][T13195] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1970'.
[  321.541435][ T3565] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  321.582818][T13195] IPVS: set_ctl: invalid protocol: 29 172.30.5.2:20001
[  321.675529][T12962] syz-executor (12962) used greatest stack depth: 18424 bytes left
[  321.802687][ T6400] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.850129][T13244] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (60)
[  322.673604][ T6426] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  322.765226][ T6400] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.095227][ T6400] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.570087][ T6400] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.652592][T13264] lo speed is unknown, defaulting to 1000
[  323.701310][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  323.711851][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  323.720569][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  323.735603][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  323.745530][   T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  323.754578][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  323.784769][ T1110] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  323.901411][T13288] netlink: 'syz.4.1995': attribute type 7 has an invalid length.
[  323.951952][T13281] lo speed is unknown, defaulting to 1000
[  323.964447][ T6400] bridge_slave_1: left allmulticast mode
[  323.983418][ T6400] bridge_slave_1: left promiscuous mode
[  323.995940][T13290] netlink: 'syz.3.1996': attribute type 10 has an invalid length.
[  324.022162][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.065725][ T6400] bridge_slave_0: left allmulticast mode
[  324.071435][ T6400] bridge_slave_0: left promiscuous mode
[  324.083771][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.432562][T13296] __nla_validate_parse: 1 callbacks suppressed
[  324.432575][T13296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1998'.
[  324.632074][ T6400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  324.643209][ T6400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  324.653533][ T6400] bond0 (unregistering): Released all slaves
[  324.682050][T13293] lo speed is unknown, defaulting to 1000
[  324.909525][ T3565] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  324.929450][T13292] lo speed is unknown, defaulting to 1000
[  325.191018][T13281] chnl_net:caif_netlink_parms(): no params data found
[  325.614584][T13281] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.629040][T13281] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.643769][T13281] bridge_slave_0: entered allmulticast mode
[  325.671500][T13281] bridge_slave_0: entered promiscuous mode
[  325.683899][T13281] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.691171][T13281] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.699320][T13281] bridge_slave_1: entered allmulticast mode
[  325.706871][T13281] bridge_slave_1: entered promiscuous mode
[  325.785913][   T54] Bluetooth: hci0: command tx timeout
[  325.977059][T13281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  326.057011][ T1110] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  326.065922][T13281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  326.113663][ T6400] hsr_slave_0: left promiscuous mode
[  326.136037][ T6400] hsr_slave_1: left promiscuous mode
[  326.141965][ T6400] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  326.178708][ T6400] batman_adv: batadv0: Removing interface: batadv_slave_0
[  326.187070][ T6400] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  326.203112][ T6400] batman_adv: batadv0: Removing interface: batadv_slave_1
[  326.250407][ T6400] veth1_macvtap: left promiscuous mode
[  326.261574][ T6400] veth0_macvtap: left promiscuous mode
[  326.267295][ T6400] veth1_vlan: left promiscuous mode
[  326.272548][ T6400] veth0_vlan: left promiscuous mode
[  326.729197][T13339] --map-set only usable from mangle table
[  326.796880][ T6400] team0 (unregistering): Port device team_slave_1 removed
[  326.850406][ T6400] team0 (unregistering): Port device team_slave_0 removed
[  327.238817][ T6430] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  327.321596][T13281] team0: Port device team_slave_0 added
[  327.395251][T13281] team0: Port device team_slave_1 added
[  327.401257][T13341] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2008'.
[  327.515356][T13281] batman_adv: batadv0: Adding interface: batadv_slave_0
[  327.522345][T13281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  327.592402][T13281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  327.627609][T13346] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2009'.
[  327.662976][T13344] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2009'.
[  327.705548][T13281] batman_adv: batadv0: Adding interface: batadv_slave_1
[  327.712544][T13281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  327.763948][T13281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  327.873688][   T54] Bluetooth: hci0: command tx timeout
[  327.931275][T13281] hsr_slave_0: entered promiscuous mode
[  327.938034][T13281] hsr_slave_1: entered promiscuous mode
[  327.944311][T13281] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  327.951994][T13281] Cannot create hsr debugfs directory
[  328.223929][T13368] netlink: 'syz.4.2014': attribute type 1 has an invalid length.
[  328.393498][ T3565] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  328.464339][T13370] lo speed is unknown, defaulting to 1000
[  328.699860][T13390] --map-set only usable from mangle table
[  329.004037][T13281] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  329.043075][T13281] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  329.046909][T13405] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2024'.
[  329.067539][T13281] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  329.155303][T13281] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  329.245723][T13409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2025'.
[  329.315725][T13409] erspan0: entered promiscuous mode
[  329.322189][T13409] erspan0: left promiscuous mode
[  329.533908][   T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  329.758120][T13281] 8021q: adding VLAN 0 to HW filter on device bond0
[  329.871515][T13424] IPVS: Unknown mcast interface: pim6reg0
[  329.881874][T13281] 8021q: adding VLAN 0 to HW filter on device team0
[  329.927147][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.934324][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  329.954292][   T54] Bluetooth: hci0: command tx timeout
[  329.985835][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.993012][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  330.026966][T13281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  330.153140][T13431] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  330.286309][T13281] 8021q: adding VLAN 0 to HW filter on device batadv0
[  330.359582][T13281] veth0_vlan: entered promiscuous mode
[  330.388599][T13439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2036'.
[  330.402723][T13281] veth1_vlan: entered promiscuous mode
[  330.468924][T13281] veth0_macvtap: entered promiscuous mode
[  330.501392][T13281] veth1_macvtap: entered promiscuous mode
[  330.555347][T13281] batman_adv: batadv0: Interface activated: batadv_slave_0
[  330.580749][T13281] batman_adv: batadv0: Interface activated: batadv_slave_1
[  330.620353][T13281] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  330.655958][ T6426] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  330.656107][T13281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  330.693379][T13281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  330.702817][T13281] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  330.990938][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  331.004379][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  331.082811][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  331.092201][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  331.159889][T13466] netlink: 'syz.4.2044': attribute type 5 has an invalid length.
[  331.481780][T13474] openvswitch: netlink: Message has 8 unknown bytes.
[  331.598733][T13483] netlink: 'syz.2.2051': attribute type 10 has an invalid length.
[  331.613475][T13483] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2051'.
[  331.631990][T13483] team0: entered promiscuous mode
[  331.642018][T13483] team_slave_0: entered promiscuous mode
[  331.653612][T13483] team_slave_1: entered promiscuous mode
[  331.659999][T13483] 8021q: adding VLAN 0 to HW filter on device team0
[  331.668660][T13483] bridge0: port 3(team0) entered blocking state
[  331.676948][T13483] bridge0: port 3(team0) entered disabled state
[  331.683498][T13483] team0: entered allmulticast mode
[  331.688648][T13483] team_slave_0: entered allmulticast mode
[  331.695017][T13483] team_slave_1: entered allmulticast mode
[  331.835453][ T6400] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  331.927517][T13507] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2057'.
[  332.165561][ T6426] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.203192][T13516] lo speed is unknown, defaulting to 1000
[  332.973978][ T6400] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  333.300495][ T6426] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.406968][T13536] ieee802154 phy0 wpan0: encryption failed: -22
[  333.460299][T13538] lo speed is unknown, defaulting to 1000
[  333.576802][ T6426] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.936724][ T6426] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.954655][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  333.964995][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  333.982841][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  333.991858][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  334.003228][ T5147] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  334.011187][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  334.094070][ T6400] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  334.180223][T13556] lo speed is unknown, defaulting to 1000
[  334.563152][T13572] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.2075'.
[  334.578341][T13540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'.
[  334.591503][ T6426] bridge_slave_1: left allmulticast mode
[  334.598572][ T6426] bridge_slave_1: left promiscuous mode
[  334.608348][ T6426] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.645828][ T6426] bridge_slave_0: left allmulticast mode
[  334.651722][ T6426] bridge_slave_0: left promiscuous mode
[  334.668224][ T6426] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.845282][T13560] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2072'.
[  335.164231][ T6426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  335.176914][ T6426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  335.187275][ T6426] bond0 (unregistering): Released all slaves
[  335.205723][T13559] lo speed is unknown, defaulting to 1000
[  335.285239][ T6400] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  336.107791][ T5147] Bluetooth: hci0: command tx timeout
[  336.395414][T13614] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  336.422388][   T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  336.534059][ T6426] hsr_slave_0: left promiscuous mode
[  336.544647][ T6426] hsr_slave_1: left promiscuous mode
[  336.550554][ T6426] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  336.584005][ T6426] batman_adv: batadv0: Removing interface: batadv_slave_0
[  336.591947][ T6426] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  336.602087][ T6426] batman_adv: batadv0: Removing interface: batadv_slave_1
[  336.633216][T13618] xt_CT: No such helper "pptp"
[  336.642155][ T6426] veth1_macvtap: left promiscuous mode
[  336.647919][ T6426] veth0_macvtap: left promiscuous mode
[  336.653571][ T6426] veth1_vlan: left promiscuous mode
[  336.658833][ T6426] veth0_vlan: left promiscuous mode
[  337.120295][ T6426] team0 (unregistering): Port device team_slave_1 removed
[  337.170294][ T6426] team0 (unregistering): Port device team_slave_0 removed
[  337.543801][   T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  337.749427][T13559] chnl_net:caif_netlink_parms(): no params data found
[  337.962822][T13559] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.983806][T13559] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.991075][T13559] bridge_slave_0: entered allmulticast mode
[  338.027739][T13559] bridge_slave_0: entered promiscuous mode
[  338.047608][T13559] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.052455][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2089'.
[  338.073774][T13559] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.081030][T13559] bridge_slave_1: entered allmulticast mode
[  338.094982][T13559] bridge_slave_1: entered promiscuous mode
[  338.145088][T13559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  338.185353][ T5147] Bluetooth: hci0: command tx timeout
[  338.186189][T13559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  338.311483][T13559] team0: Port device team_slave_0 added
[  338.388368][T13559] team0: Port device team_slave_1 added
[  338.407050][T13645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2091'.
[  338.475917][T13649] netlink: 'syz.4.2092': attribute type 29 has an invalid length.
[  338.529700][T13559] batman_adv: batadv0: Adding interface: batadv_slave_0
[  338.537330][T13559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.570660][T13559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  338.582027][T13656] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2095'.
[  338.591573][T13652] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  338.606096][T13559] batman_adv: batadv0: Adding interface: batadv_slave_1
[  338.613091][T13559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.659294][T13652] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2092'.
[  338.673846][ T6430] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  338.710568][T13559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  338.734465][T13649] netlink: 'syz.4.2092': attribute type 29 has an invalid length.
[  338.853181][T13663] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2097'.
[  339.011969][T13559] hsr_slave_0: entered promiscuous mode
[  339.030188][T13559] hsr_slave_1: entered promiscuous mode
[  339.046160][T13559] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  339.062702][T13559] Cannot create hsr debugfs directory
[  339.081005][T13661] lo speed is unknown, defaulting to 1000
[  339.504978][T13691] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  339.805975][ T1110] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  339.897916][T13559] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  339.999214][T13559] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  340.025397][T13559] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  340.044645][T13706] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2110'.
[  340.076896][T13559] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  340.263598][ T5147] Bluetooth: hci0: command tx timeout
[  340.271675][T13559] 8021q: adding VLAN 0 to HW filter on device bond0
[  340.290111][T13559] 8021q: adding VLAN 0 to HW filter on device team0
[  340.318992][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.326147][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  340.371435][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.378797][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  340.528760][T13732] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2117'.
[  340.572016][T13732] openvswitch: netlink: Flow actions attr not present in new flow.
[  340.632259][T13732] lo speed is unknown, defaulting to 1000
[  340.660199][T13735] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2118'.
[  340.850144][T13559] 8021q: adding VLAN 0 to HW filter on device batadv0
[  340.958411][T13559] veth0_vlan: entered promiscuous mode
[  341.000180][T13559] veth1_vlan: entered promiscuous mode
[  341.024309][ T1110] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  341.071751][T13559] veth0_macvtap: entered promiscuous mode
[  341.101053][T13559] veth1_macvtap: entered promiscuous mode
[  341.170508][T13559] batman_adv: batadv0: Interface activated: batadv_slave_0
[  341.209683][T13559] batman_adv: batadv0: Interface activated: batadv_slave_1
[  341.226520][T13559] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  341.236355][T13559] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  341.245346][T13559] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  341.254541][T13559] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  341.378556][ T6428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.417497][ T6428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.593660][ T6430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.613506][ T6430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  342.121714][T13795] lo speed is unknown, defaulting to 1000
[  342.154492][ T4554] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  342.367722][T13808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2136'.
[  342.427041][T13809] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  342.455411][T13809] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  342.475286][T13809] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  342.492439][T13809] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  342.503721][T13809] geneve2: entered promiscuous mode
[  342.525133][T13811] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2137'.
[  342.894805][T13828] --map-set only usable from mangle table
[  343.057657][ T6430] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.283110][T13795] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  343.294300][ T6428] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  343.309716][T13795] __nla_validate_parse: 1 callbacks suppressed
[  343.309728][T13795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2133'.
[  343.799623][ T6430] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.045237][ T6430] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.104841][ T6430] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.276677][T13837] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2143'.
[  344.288353][ T6430] bridge_slave_1: left allmulticast mode
[  344.302735][ T6430] bridge_slave_1: left promiscuous mode
[  344.313573][T13837] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2143'.
[  344.329017][ T6430] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.380187][ T6430] bridge_slave_0: left allmulticast mode
[  344.398863][ T6430] bridge_slave_0: left promiscuous mode
[  344.416616][ T6400] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  344.424112][ T6430] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.460535][T13846] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2145'.
[  344.491952][T13846] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2145'.
[  344.571982][T13853] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2145'.
[  344.832008][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  344.844004][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  344.854939][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  344.867190][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  344.879233][   T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  344.887249][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  345.260189][ T6430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  345.276471][ T6430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  345.286777][ T6430] bond0 (unregistering): Released all slaves
[  345.300813][T13840] lo speed is unknown, defaulting to 1000
[  345.327228][T13846] ip6gretap0: entered promiscuous mode
[  345.380892][T13846] ip6gretap0: left promiscuous mode
[  345.442470][T13857] vlan4: entered promiscuous mode
[  345.449371][T13857] vlan4: entered allmulticast mode
[  345.463395][T13857] hsr_slave_1: entered allmulticast mode
[  345.490733][T13879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2152'.
[  345.615016][T13865] lo speed is unknown, defaulting to 1000
[  345.644459][ T4554] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  345.744840][T13882] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.767446][T13882] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.777549][T13882] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.794491][T13882] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.829857][T13882] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  345.838643][T13882] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  345.847604][T13882] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  345.856087][T13882] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  345.868461][T13882] vxlan0: left promiscuous mode
[  345.873492][T13882] vxlan0: left allmulticast mode
[  345.883887][T13882] tipc: Resetting bearer <eth:syzkaller0>
[  345.931887][T13882] ip6erspan0: left promiscuous mode
[  345.964510][T13882] bond5: left promiscuous mode
[  345.969452][T13882] batadv0: left promiscuous mode
[  345.977858][T13882] vlan3: left promiscuous mode
[  345.997810][T13882] bond7: left promiscuous mode
[  346.013458][T13882] batadv1: left promiscuous mode
[  346.022966][T13882] batadv1: left allmulticast mode
[  346.034493][T13882] batadv2: left promiscuous mode
[  346.044798][T13882] batadv2: left allmulticast mode
[  346.091697][T13882] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  346.100305][T13882] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  346.109141][T13882] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  346.117692][T13882] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  346.137617][T13882] hsr_slave_1: left allmulticast mode
[  346.143110][T13882] vlan4: left promiscuous mode
[  346.148072][T13882] vlan4: left allmulticast mode
[  346.330527][T13885] nr0: entered promiscuous mode
[  346.535294][T13897] netlink: 'syz.4.2157': attribute type 1 has an invalid length.
[  346.543164][T13897] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2157'.
[  346.643406][T13903] netlink: 'syz.1.2158': attribute type 1 has an invalid length.
[  346.651179][T13903] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2158'.
[  346.813231][ T6430] hsr_slave_0: left promiscuous mode
[  346.839499][ T6430] hsr_slave_1: left promiscuous mode
[  346.850058][ T6430] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  346.858622][ T6430] batman_adv: batadv0: Removing interface: batadv_slave_0
[  346.871061][ T6430] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  346.895400][ T6430] batman_adv: batadv0: Removing interface: batadv_slave_1
[  346.980942][ T6430] veth1_macvtap: left promiscuous mode
[  346.993961][ T6430] veth0_macvtap: left promiscuous mode
[  347.002637][ T6430] veth1_vlan: left promiscuous mode
[  347.012987][ T6430] veth0_vlan: left promiscuous mode
[  347.315370][T13893] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2154'.
[  347.751457][ T6430] team0 (unregistering): Port device team_slave_1 removed
[  347.802204][ T6430] team0 (unregistering): Port device team_slave_0 removed
[  348.246587][T13892] lo speed is unknown, defaulting to 1000
[  348.426178][T13921] RDS: rds_bind could not find a transport for fc01::8, load rds_tcp or rds_rdma?
[  348.456460][T13865] chnl_net:caif_netlink_parms(): no params data found
[  348.512783][T13930] sctp: [Deprecated]: syz.4.2162 (pid 13930) Use of struct sctp_assoc_value in delayed_ack socket option.
[  348.512783][T13930] Use struct sctp_sack_info instead
[  348.654938][T13937] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12
[  348.780660][T13865] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.787412][T13937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2163'.
[  348.796816][T13865] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.797017][T13865] bridge_slave_0: entered allmulticast mode
[  348.816574][T13865] bridge_slave_0: entered promiscuous mode
[  348.868796][T13865] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.879550][T13865] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.890788][T13865] bridge_slave_1: entered allmulticast mode
[  348.900060][T13865] bridge_slave_1: entered promiscuous mode
[  348.970859][T13865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  348.991858][T13865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  349.060057][T13865] team0: Port device team_slave_0 added
[  349.087107][T13865] team0: Port device team_slave_1 added
[  349.295698][T13947] netlink: 'syz.3.2166': attribute type 10 has an invalid length.
[  349.382520][T13865] batman_adv: batadv0: Adding interface: batadv_slave_0
[  349.422971][T13865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.477224][T13865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  349.574295][T13865] batman_adv: batadv0: Adding interface: batadv_slave_1
[  349.581332][T13865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.651199][T13865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.690978][T13964] netlink: 'syz.4.2170': attribute type 11 has an invalid length.
[  349.705377][T13961] netlink: 308 bytes leftover after parsing attributes in process `syz.1.2169'.
[  349.908616][T13865] hsr_slave_0: entered promiscuous mode
[  349.944630][T13865] hsr_slave_1: entered promiscuous mode
[  349.966990][T13865] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  349.995172][T13865] Cannot create hsr debugfs directory
[  350.702096][T13972] macsec1: entered promiscuous mode
[  350.733683][T13972] gretap0: entered promiscuous mode
[  350.754329][T13972] gretap0: left promiscuous mode
[  350.771692][T13977] netlink: 'syz.3.2174': attribute type 1 has an invalid length.
[  350.779928][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2174'.
[  350.789183][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2174'.
[  350.832457][T13975] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2174'.
[  350.872839][T13976] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2174'.
[  351.040259][T13982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2175'.
[  351.100205][T13985] netlink: 'syz.3.2176': attribute type 21 has an invalid length.
[  351.125644][T13985] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2176'.
[  351.394466][T13865] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  351.416003][T13865] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  351.444785][T13865] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  351.451841][T14001] xt_socket: unknown flags 0x8
[  351.503667][T13998] netlink: 'syz.2.2180': attribute type 1 has an invalid length.
[  351.511268][T14007] Bluetooth: MGMT ver 1.23
[  351.511489][T13865] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  351.524891][T13998] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  351.545804][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2180'.
[  351.593664][T13998] netlink: 'syz.2.2180': attribute type 3 has an invalid length.
[  351.679707][T13865] 8021q: adding VLAN 0 to HW filter on device bond0
[  351.698603][T13865] 8021q: adding VLAN 0 to HW filter on device team0
[  351.715494][ T6428] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.722590][ T6428] bridge0: port 1(bridge_slave_0) entered forwarding state
[  351.761399][ T6428] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.768578][ T6428] bridge0: port 2(bridge_slave_1) entered forwarding state
[  351.818406][T14015] hsr_slave_0: left promiscuous mode
[  351.829134][T14015] hsr_slave_1: left promiscuous mode
[  351.852349][T14018] netlink: 'syz.1.2187': attribute type 1 has an invalid length.
[  351.866156][T14021] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2185'.
[  352.052883][T14029] netlink: 'syz.3.2189': attribute type 10 has an invalid length.
[  352.432849][T14042] --map-set only usable from mangle table
[  352.437329][T13865] 8021q: adding VLAN 0 to HW filter on device batadv0
[  352.564662][T13865] veth0_vlan: entered promiscuous mode
[  352.605099][T13865] veth1_vlan: entered promiscuous mode
[  352.666385][T13865] veth0_macvtap: entered promiscuous mode
[  352.688328][T13865] veth1_macvtap: entered promiscuous mode
[  352.710455][T13865] batman_adv: batadv0: Interface activated: batadv_slave_0
[  352.724982][T13865] batman_adv: batadv0: Interface activated: batadv_slave_1
[  352.756716][T13865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  352.774645][T13865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  352.788603][T13865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  352.797782][T13865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  353.140668][T14066] netlink: 'syz.4.2198': attribute type 1 has an invalid length.
[  353.153458][T14063] lo speed is unknown, defaulting to 1000
[  353.159397][ T6430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.189798][ T6430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.274820][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.282686][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.525824][T14085] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13
[  353.808546][T14094] netlink: 'syz.3.2210': attribute type 3 has an invalid length.
[  353.859539][T14094] __nla_validate_parse: 3 callbacks suppressed
[  353.859557][T14094] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2210'.
[  353.881205][T14101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2211'.
[  354.271873][T14106] --map-set only usable from mangle table
[  354.441155][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2215'.
[  354.460968][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2215'.
[  354.554180][T14119] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2214'.
[  354.570215][T14119] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  354.579131][T14119] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  354.587939][T14119] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  354.596779][T14119] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  354.644301][T14119] vxlan1: entered promiscuous mode
[  354.728366][ T1110] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.734462][ T1110] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.795345][ T1110] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.854741][ T1110] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.929856][ T1110] bridge_slave_1: left allmulticast mode
[  355.937219][ T1110] bridge_slave_1: left promiscuous mode
[  355.943003][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.012679][T14135] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2220'.
[  356.028378][ T1110] bridge_slave_0: left allmulticast mode
[  356.041938][ T1110] bridge_slave_0: left promiscuous mode
[  356.050607][T14140] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2221'.
[  356.068153][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.101651][T14146] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2220'.
[  356.370101][T14158] netlink: 'syz.3.2223': attribute type 1 has an invalid length.
[  356.606452][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  356.617847][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  356.637135][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  356.645503][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  356.664894][   T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  356.679018][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  356.814603][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  356.826224][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  356.836548][ T1110] bond0 (unregistering): Released all slaves
[  356.896569][T14158] 8021q: adding VLAN 0 to HW filter on device bond5
[  357.109922][T14165] lo speed is unknown, defaulting to 1000
[  357.328853][T14179] lo speed is unknown, defaulting to 1000
[  357.360261][T14186] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5)
[  357.400386][T14189] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2231'.
[  357.424191][T14189] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  357.733641][T14197] --map-set only usable from mangle table
[  357.947736][T14165] chnl_net:caif_netlink_parms(): no params data found
[  358.076269][T14201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2228'.
[  358.176793][T14165] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.244552][T14165] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.306046][T14165] bridge_slave_0: entered allmulticast mode
[  358.338929][T14165] bridge_slave_0: entered promiscuous mode
[  358.353189][T14165] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.378326][T14165] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.391539][T14165] bridge_slave_1: entered allmulticast mode
[  358.406083][T14165] bridge_slave_1: entered promiscuous mode
[  358.744083][   T54] Bluetooth: hci0: command tx timeout
[  358.794595][ T1110] hsr_slave_0: left promiscuous mode
[  358.801841][ T1110] hsr_slave_1: left promiscuous mode
[  358.809177][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  358.817668][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0
[  358.828567][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  358.841683][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1
[  358.890181][ T1110] veth1_macvtap: left promiscuous mode
[  358.896438][ T1110] veth0_macvtap: left promiscuous mode
[  358.902625][ T1110] veth1_vlan: left promiscuous mode
[  358.908368][ T1110] veth0_vlan: left promiscuous mode
[  359.278468][T14233] __nla_validate_parse: 3 callbacks suppressed
[  359.278487][T14233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2239'.
[  359.498234][ T1110] team0 (unregistering): Port device team_slave_1 removed
[  359.546496][ T1110] team0 (unregistering): Port device team_slave_0 removed
[  360.026555][T14165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  360.115782][T14165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  360.260610][T14245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2242'.
[  360.297426][T14245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2242'.
[  360.318277][T14165] team0: Port device team_slave_0 added
[  360.423192][T14245] 8021q: adding VLAN 0 to HW filter on device bond1
[  360.465576][T14245] team0: Port device bond1 added
[  360.524494][T14165] team0: Port device team_slave_1 added
[  360.658937][T14249] --map-set only usable from mangle table
[  360.708030][T14165] batman_adv: batadv0: Adding interface: batadv_slave_0
[  360.733710][T14165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  360.800719][T14165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  360.823622][   T54] Bluetooth: hci0: command tx timeout
[  361.026639][T14165] batman_adv: batadv0: Adding interface: batadv_slave_1
[  361.043397][T14165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.081372][T14165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  361.606007][T14165] hsr_slave_0: entered promiscuous mode
[  361.633683][T14165] hsr_slave_1: entered promiscuous mode
[  361.639647][T14165] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  361.663352][T14165] Cannot create hsr debugfs directory
[  361.932312][T14291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2256'.
[  362.678462][T14325] --map-set only usable from mangle table
[  362.905570][   T54] Bluetooth: hci0: command tx timeout
[  362.992488][T14165] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  363.046724][T14165] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  363.078481][T14165] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  363.116376][T14165] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  363.314649][T14165] 8021q: adding VLAN 0 to HW filter on device bond0
[  363.354350][T14165] 8021q: adding VLAN 0 to HW filter on device team0
[  363.367025][ T6428] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.374203][ T6428] bridge0: port 1(bridge_slave_0) entered forwarding state
[  363.412652][ T6430] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.419873][ T6430] bridge0: port 2(bridge_slave_1) entered forwarding state
[  363.614779][T14348] lo speed is unknown, defaulting to 1000
[  363.986880][T14165] 8021q: adding VLAN 0 to HW filter on device batadv0
[  364.099437][T14165] veth0_vlan: entered promiscuous mode
[  364.111011][T14165] veth1_vlan: entered promiscuous mode
[  364.225350][T14165] veth0_macvtap: entered promiscuous mode
[  364.260592][T14165] veth1_macvtap: entered promiscuous mode
[  364.326492][T14165] batman_adv: batadv0: Interface activated: batadv_slave_0
[  364.358289][T14165] batman_adv: batadv0: Interface activated: batadv_slave_1
[  364.426701][T14165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  364.464498][T14165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  364.473267][T14165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  364.494872][T14165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  364.664546][T14387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2278'.
[  364.717572][T14395] --map-set only usable from mangle table
[  364.741489][ T6430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.758754][ T6430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.850644][ T6430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.881854][T14402] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  364.883592][T14351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2270'.
[  364.900433][ T6430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.984023][   T54] Bluetooth: hci0: command tx timeout
[  365.015155][T14405] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2286'.
[  365.164403][T14405] bond9: entered promiscuous mode
[  365.179061][T14405] 8021q: adding VLAN 0 to HW filter on device bond9
[  365.529420][T14421] netlink: 'syz.4.2292': attribute type 142 has an invalid length.
[  366.283026][T14474] xt_hashlimit: invalid rate
[  366.384532][T14479] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2300'.
[  366.422234][T14479] veth0_to_bond: entered promiscuous mode
[  366.430776][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2300'.
[  366.528732][T14479] veth0_to_bond (unregistering): left promiscuous mode
[  366.625839][T14479] bond0: (slave 
1!€ÿ): Releasing backup interface
[  366.690900][T14487] lo speed is unknown, defaulting to 1000
[  366.923650][   T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.974412][   T54] Bluetooth: hci4: link tx timeout
[  366.979633][   T54] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  367.450079][   T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.522935][   T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.576287][   T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.661147][   T52] bridge_slave_1: left allmulticast mode
[  367.667194][   T52] bridge_slave_1: left promiscuous mode
[  367.673261][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.682418][   T52] bridge_slave_0: left allmulticast mode
[  367.688418][   T52] bridge_slave_0: left promiscuous mode
[  367.694573][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.106980][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  368.119864][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  368.130979][   T52] bond0 (unregistering): Released all slaves
[  368.620165][T14519] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2310'.
[  368.661478][T14519] openvswitch: netlink: Actions may not be safe on all matching packets
[  368.810317][   T52] hsr_slave_0: left promiscuous mode
[  368.840671][   T52] hsr_slave_1: left promiscuous mode
[  368.851433][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  368.880176][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  368.904385][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  368.923506][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  369.032718][   T52] veth1_macvtap: left promiscuous mode
[  369.043483][   T52] veth0_macvtap: left promiscuous mode
[  369.055949][   T52] veth1_vlan: left promiscuous mode
[  369.062653][   T52] veth0_vlan: left promiscuous mode
[  369.079616][ T5147] Bluetooth: hci4: command 0x0405 tx timeout
[  369.099924][T14541] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2316'.
[  369.174467][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  369.184975][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  369.193427][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  369.202233][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  369.210721][ T5147] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  369.218290][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  369.753161][   T52] team0 (unregistering): Port device team_slave_1 removed
[  369.800104][   T52] team0 (unregistering): Port device team_slave_0 removed
[  370.317110][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2318'.
[  370.368179][T14545] lo speed is unknown, defaulting to 1000
[  370.699299][T14571] team0: Device gtp0 is of different type
[  370.745768][T14574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2325'.
[  370.820584][T14574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2325'.
[  371.141776][T14601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2332'.
[  371.204286][T14604] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2332'.
[  371.255486][T14605] bond0: Unable to set down delay as MII monitoring is disabled
[  371.284006][T14604] netlink: 'syz.4.2332': attribute type 2 has an invalid length.
[  371.303835][   T54] Bluetooth: hci0: command tx timeout
[  371.386998][T14603] bond0: Unable to set down delay as MII monitoring is disabled
[  371.545431][T14618] netlink: 'syz.2.2336': attribute type 12 has an invalid length.
[  371.583780][T14545] chnl_net:caif_netlink_parms(): no params data found
[  371.906044][T14545] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.922074][T14545] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.931493][T14545] bridge_slave_0: entered allmulticast mode
[  371.948200][T14545] bridge_slave_0: entered promiscuous mode
[  371.957084][T14545] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.964409][T14545] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.972254][T14545] bridge_slave_1: entered allmulticast mode
[  371.979709][T14545] bridge_slave_1: entered promiscuous mode
[  372.060325][T14545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  372.078080][T14649] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2345'.
[  372.089493][T14545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  372.149945][T14545] team0: Port device team_slave_0 added
[  372.162345][T14545] team0: Port device team_slave_1 added
[  372.255122][T14545] batman_adv: batadv0: Adding interface: batadv_slave_0
[  372.262203][T14545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.303157][T14545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  372.316819][T14545] batman_adv: batadv0: Adding interface: batadv_slave_1
[  372.324403][T14545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.351023][T14545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  372.402342][T14545] hsr_slave_0: entered promiscuous mode
[  372.409154][T14545] hsr_slave_1: entered promiscuous mode
[  372.417004][T14545] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  372.424795][T14545] Cannot create hsr debugfs directory
[  372.900398][T14686] lo speed is unknown, defaulting to 1000
[  372.964321][T14696] syzkaller1: entered promiscuous mode
[  372.992542][T14696] syzkaller1: entered allmulticast mode
[  373.297523][T14545] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  373.342747][T14545] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  373.373151][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2359'.
[  373.396086][T14545] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  373.413492][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2359'.
[  373.425844][T14545] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  373.448211][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.453505][T14710] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2359'.
[  373.474574][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.570853][T14710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2359'.
[  373.617138][T14719] xt_ecn: cannot match TCP bits for non-tcp packets
[  373.759470][T14727] lo speed is unknown, defaulting to 1000
[  373.850619][T14545] 8021q: adding VLAN 0 to HW filter on device bond0
[  373.899584][T14545] 8021q: adding VLAN 0 to HW filter on device team0
[  373.917901][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  373.925077][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  373.959810][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  373.966984][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  374.396365][T14745] caif0: Master is either lo or non-ether device
[  374.475103][T14545] 8021q: adding VLAN 0 to HW filter on device batadv0
[  374.586784][T14545] veth0_vlan: entered promiscuous mode
[  374.621511][T14545] veth1_vlan: entered promiscuous mode
[  374.669469][T14754] netlink: 'syz.2.2369': attribute type 4 has an invalid length.
[  374.875096][T14758] ip6tnl3: entered promiscuous mode
[  374.880564][T14758] ip6tnl3: entered allmulticast mode
[  374.887524][T14758] team0: Device ip6tnl3 is of different type
[  374.959045][T14760] syzkaller1: entered promiscuous mode
[  374.973526][T14760] syzkaller1: entered allmulticast mode
[  375.040096][T14545] veth0_macvtap: entered promiscuous mode
[  375.092896][T14545] veth1_macvtap: entered promiscuous mode
[  375.159177][T14545] batman_adv: batadv0: Interface activated: batadv_slave_0
[  375.164195][T14774] netlink: 'syz.4.2375': attribute type 1 has an invalid length.
[  375.176624][T14545] batman_adv: batadv0: Interface activated: batadv_slave_1
[  375.188283][T14545] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  375.197130][T14545] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  375.207098][T14545] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  375.243626][T14545] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  375.546904][T14782] __nla_validate_parse: 4 callbacks suppressed
[  375.546922][T14782] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2377'.
[  375.800980][   T29] audit: type=1107 audit(1741519154.203:4): pid=14789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Àïï'
[  375.844918][T14790] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2380'.
[  375.847520][ T6426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.870715][ T6426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.907960][T14785] lo speed is unknown, defaulting to 1000
[  375.922115][T14792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2382'.
[  375.939893][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.963427][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  376.034195][T14794] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  376.061823][T14796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2383'.
[  376.087895][T14796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2383'.
[  376.509357][T14818] lo speed is unknown, defaulting to 1000
[  376.885266][T14835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2394'.
[  376.904769][T14835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2394'.
[  377.009152][T14839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2395'.
[  377.550285][ T6410] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.651231][T14862] bridge0: Device is already in use.
[  378.041152][ T6410] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.137675][ T6410] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.207337][ T6410] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.341916][ T6410] bridge_slave_1: left allmulticast mode
[  378.348856][ T6410] bridge_slave_1: left promiscuous mode
[  378.354754][ T6410] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.366000][ T6410] bridge_slave_0: left allmulticast mode
[  378.371653][ T6410] bridge_slave_0: left promiscuous mode
[  378.377622][ T6410] bridge0: port 1(bridge_slave_0) entered disabled state
[  378.737022][ T6410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  378.751848][ T6410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  378.761974][ T6410] bond0 (unregistering): Released all slaves
[  379.369597][T14884] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2406'.
[  379.371865][T14883] --map-set only usable from mangle table
[  379.418622][ T6410] hsr_slave_0: left promiscuous mode
[  379.458472][ T6410] hsr_slave_1: left promiscuous mode
[  379.475693][ T6410] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  379.499942][ T6410] batman_adv: batadv0: Removing interface: batadv_slave_0
[  379.506576][T14889] netlink: 'syz.3.2409': attribute type 2 has an invalid length.
[  379.516186][ T6410] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  379.527259][ T6410] batman_adv: batadv0: Removing interface: batadv_slave_1
[  379.550038][T14892] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2408'.
[  379.575004][ T6410] veth1_macvtap: left promiscuous mode
[  379.580892][ T6410] veth0_macvtap: left promiscuous mode
[  379.587094][ T6410] veth1_vlan: left promiscuous mode
[  379.592668][ T6410] veth0_vlan: left promiscuous mode
[  379.741246][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  379.753232][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  379.770510][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  379.781377][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  379.800124][ T5147] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  379.808547][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  380.354837][ T6410] team0 (unregistering): Port device team_slave_1 removed
[  380.410608][ T6410] team0 (unregistering): Port device team_slave_0 removed
[  380.929643][T14894] lo speed is unknown, defaulting to 1000
[  381.198298][T14918] lo speed is unknown, defaulting to 1000
[  381.792215][T14939] xt_socket: unknown flags 0x4
[  381.873222][T14894] chnl_net:caif_netlink_parms(): no params data found
[  381.874257][ T5147] Bluetooth: hci0: command tx timeout
[  382.031828][T14918] __nla_validate_parse: 2 callbacks suppressed
[  382.031848][T14918] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2415'.
[  382.076371][T14894] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.083781][T14894] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.091154][T14894] bridge_slave_0: entered allmulticast mode
[  382.098625][T14894] bridge_slave_0: entered promiscuous mode
[  382.107081][T14894] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.114796][T14894] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.122115][T14894] bridge_slave_1: entered allmulticast mode
[  382.130274][T14894] bridge_slave_1: entered promiscuous mode
[  382.163244][ T5915] hid-generic 0005:07C0:06E6.0003: item fetching failed at offset 0/1
[  382.184357][ T5915] hid-generic 0005:07C0:06E6.0003: probe with driver hid-generic failed with error -22
[  382.261132][T14894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  382.307907][T14894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  382.557608][T14973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2426'.
[  382.616517][T14978] atomic_op ffff88805cbe8198 conn xmit_atomic 0000000000000000
[  382.649093][T14978] atomic_op ffff88805cbef198 conn xmit_atomic 0000000000000000
[  382.697803][T14894] team0: Port device team_slave_0 added
[  382.726712][T14894] team0: Port device team_slave_1 added
[  382.750138][T14978] delete_channel: no stack
[  382.869666][T14986] netlink: 'syz.2.2430': attribute type 2 has an invalid length.
[  382.921951][T14986] netlink: 'syz.2.2430': attribute type 2 has an invalid length.
[  382.947154][T14988] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2431'.
[  382.961854][T14989] netlink: 'syz.3.2429': attribute type 2 has an invalid length.
[  382.970639][T14989] netlink: 'syz.3.2429': attribute type 2 has an invalid length.
[  382.978921][T14989] netlink: 'syz.3.2429': attribute type 2 has an invalid length.
[  382.982589][T14894] batman_adv: batadv0: Adding interface: batadv_slave_0
[  382.993900][T14989] netlink: 'syz.3.2429': attribute type 2 has an invalid length.
[  383.001855][T14989] netlink: 'syz.3.2429': attribute type 1 has an invalid length.
[  383.053417][T14894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  383.053936][T14995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2432'.
[  383.112764][T14993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2432'.
[  383.128402][T14894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  383.167766][T14999] syz.2.2433 uses old SIOCAX25GETINFO
[  383.210366][T14894] batman_adv: batadv0: Adding interface: batadv_slave_1
[  383.225058][T14894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  383.300443][T14894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  383.349012][T15006] netlink: 'syz.4.2434': attribute type 13 has an invalid length.
[  383.369311][T15006] Bluetooth: MGMT ver 1.23
[  383.382744][T14894] hsr_slave_0: entered promiscuous mode
[  383.396522][T14894] hsr_slave_1: entered promiscuous mode
[  383.410012][T14894] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  383.417971][T14894] Cannot create hsr debugfs directory
[  383.712078][T15013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2438'.
[  383.732126][T15015] xt_CT: You must specify a L4 protocol and not use inversions on it
[  383.975591][   T54] Bluetooth: hci0: command tx timeout
[  384.322498][T15038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2442'.
[  386.027377][   T54] Bluetooth: hci0: command 0x040f tx timeout
[  386.513204][T15047] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.525871][T15047] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.534946][T15047] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.543126][T15047] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.551773][T15047] geneve3: entered promiscuous mode
[  386.558582][T15052] ksmbd: Unknown IPC event: 4, ignore.
[  386.594052][T14894] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  386.626802][T14894] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  386.671836][T14894] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  386.705475][T14894] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  386.740757][T15059] netlink: 'syz.1.2450': attribute type 3 has an invalid length.
[  386.763446][T15059] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2450'.
[  386.907268][T14894] 8021q: adding VLAN 0 to HW filter on device bond0
[  386.949915][T14894] 8021q: adding VLAN 0 to HW filter on device team0
[  387.033036][ T6410] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.040209][ T6410] bridge0: port 1(bridge_slave_0) entered forwarding state
[  387.081528][T15086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2456'.
[  387.090833][ T6410] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.097998][ T6410] bridge0: port 2(bridge_slave_1) entered forwarding state
[  387.125549][T15086] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2456'.
[  387.239702][T15094] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2458'.
[  387.294004][T15097] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20000
[  387.510798][T14894] 8021q: adding VLAN 0 to HW filter on device batadv0
[  387.611285][T15115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2462'.
[  387.622911][T14894] veth0_vlan: entered promiscuous mode
[  387.643483][T15115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2462'.
[  387.650730][T14894] veth1_vlan: entered promiscuous mode
[  387.690234][T15123] lo speed is unknown, defaulting to 1000
[  387.692854][T15115] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2462'.
[  387.711441][T14894] veth0_macvtap: entered promiscuous mode
[  387.740148][T15126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2464'.
[  387.751345][T14894] veth1_macvtap: entered promiscuous mode
[  387.784220][T14894] batman_adv: batadv0: Interface activated: batadv_slave_0
[  387.828758][T14894] batman_adv: batadv0: Interface activated: batadv_slave_1
[  387.859660][T14894] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  387.881068][T14894] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  387.892019][T15135] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2467'.
[  387.901109][T14894] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  387.901141][T14894] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  388.040841][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  388.059122][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.096909][ T6406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  388.113074][ T6406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.114534][ T5147] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  388.127120][   T54] Bluetooth: hci0: command 0x040f tx timeout
[  388.204561][T15142] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  388.543137][T15154] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  389.449239][T15200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2478'.
[  389.458303][T15200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2478'.
[  389.669467][ T6408] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.716277][T15213] lo speed is unknown, defaulting to 1000
[  389.722113][T15213] lo speed is unknown, defaulting to 1000
[  389.732594][T15213] lo speed is unknown, defaulting to 1000
[  389.741217][T15213] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  389.760752][T15213] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  389.797943][T15213] lo speed is unknown, defaulting to 1000
[  389.805463][T15213] lo speed is unknown, defaulting to 1000
[  389.812360][T15213] lo speed is unknown, defaulting to 1000
[  389.820089][T15213] lo speed is unknown, defaulting to 1000
[  389.826518][T15213] lo speed is unknown, defaulting to 1000
[  389.832832][T15213] lo speed is unknown, defaulting to 1000
[  390.585204][   T54] Bluetooth: hci4: command 0x0405 tx timeout
[  390.992673][ T6408] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.161745][ T6408] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.222901][ T6408] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.493632][ T6408] bridge_slave_1: left allmulticast mode
[  391.509204][ T6408] bridge_slave_1: left promiscuous mode
[  391.521677][ T6408] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.561189][T15236] netlink: 'syz.1.2487': attribute type 8 has an invalid length.
[  391.574401][ T6408] bridge_slave_0: left allmulticast mode
[  391.584905][ T6408] bridge_slave_0: left promiscuous mode
[  391.593623][ T6408] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.780209][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  391.795974][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  391.807630][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  391.821821][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  391.830056][   T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  391.841793][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  392.076328][ T6408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  392.087653][ T6408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  392.097915][ T6408] bond0 (unregistering): Released all slaves
[  392.182811][T15240] lo speed is unknown, defaulting to 1000
[  392.600256][T15258] xt_CT: No such helper "pptp"
[  392.663020][T15261] __nla_validate_parse: 3 callbacks suppressed
[  392.663040][T15261] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2496'.
[  392.752030][T15240] lo speed is unknown, defaulting to 1000
[  392.752310][T15263] netlink: 'syz.2.2497': attribute type 4 has an invalid length.
[  393.121077][T15291] --map-set only usable from mangle table
[  393.137922][T15285] netlink: 'syz.2.2503': attribute type 2 has an invalid length.
[  393.263582][T15277] lo speed is unknown, defaulting to 1000
[  393.270243][T15288] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511)
[  393.284494][T15288] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  393.322069][T15294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2504'.
[  393.362205][T15296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2504'.
[  393.411968][ T6408] hsr_slave_0: left promiscuous mode
[  393.434273][ T6408] hsr_slave_1: left promiscuous mode
[  393.444191][ T6408] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  393.452444][ T6408] batman_adv: batadv0: Removing interface: batadv_slave_0
[  393.461464][ T6408] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  393.469677][ T6408] batman_adv: batadv0: Removing interface: batadv_slave_1
[  393.510879][ T6408] veth1_macvtap: left promiscuous mode
[  393.522627][ T6408] veth0_macvtap: left promiscuous mode
[  393.533223][ T6408] veth1_vlan: left promiscuous mode
[  393.547076][ T6408] veth0_vlan: left promiscuous mode
[  393.658987][T15307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2505'.
[  393.863473][ T5147] Bluetooth: hci0: command tx timeout
[  394.138806][T15312] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2507'.
[  394.188551][ T6408] team0 (unregistering): Port device team_slave_1 removed
[  394.284989][ T6408] team0 (unregistering): Port device team_slave_0 removed
[  394.994634][T15302] bridge_slave_0: invalid flags given to default FDB implementation
[  395.012512][T15303] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2505'.
[  395.074786][T15240] chnl_net:caif_netlink_parms(): no params data found
[  395.335754][T15277] lo speed is unknown, defaulting to 1000
[  395.382169][T15337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2514'.
[  395.465645][T15240] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.473057][T15240] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.480436][T15240] bridge_slave_0: entered allmulticast mode
[  395.488077][T15240] bridge_slave_0: entered promiscuous mode
[  395.523738][T15240] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.543928][T15240] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.554564][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2516'.
[  395.563634][T15240] bridge_slave_1: entered allmulticast mode
[  395.579757][T15344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2516'.
[  395.580152][T15240] bridge_slave_1: entered promiscuous mode
[  395.742533][T15240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  395.792567][T15240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  395.882705][T15240] team0: Port device team_slave_0 added
[  395.930556][T15240] team0: Port device team_slave_1 added
[  395.990716][T15240] batman_adv: batadv0: Adding interface: batadv_slave_0
[  395.997940][T15240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  396.030024][T15240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  396.068660][T15240] batman_adv: batadv0: Adding interface: batadv_slave_1
[  396.075976][T15240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  396.111818][T15240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  396.179274][T15362] netlink: 'syz.1.2521': attribute type 83 has an invalid length.
[  396.188490][T15362] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2521'.
[  396.202363][T15240] hsr_slave_0: entered promiscuous mode
[  396.214562][T15240] hsr_slave_1: entered promiscuous mode
[  396.220536][T15240] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  396.228439][T15240] Cannot create hsr debugfs directory
[  396.405208][T15365] lo speed is unknown, defaulting to 1000
[  396.467262][T15369] xt_ecn: cannot match TCP bits for non-tcp packets
[  396.517044][T15369] netlink: 'syz.2.2524': attribute type 21 has an invalid length.
[  396.533845][T15369] netlink: 'syz.2.2524': attribute type 6 has an invalid length.
[  396.845517][T15378] netlink: 'syz.3.2527': attribute type 39 has an invalid length.
[  397.483925][T15396] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  397.505589][T15396] syzkaller0: entered promiscuous mode
[  397.511252][T15396] syzkaller0: entered allmulticast mode
[  397.552689][T15240] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  399.153586][   T54] Bluetooth: hci4: command 0x0405 tx timeout
[  399.743377][T15240] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  399.751963][T15365] lo speed is unknown, defaulting to 1000
[  399.752340][T15240] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  399.773504][T15407] netlink: 'syz.2.2536': attribute type 1 has an invalid length.
[  399.797212][T15407] netlink: 'syz.2.2536': attribute type 1 has an invalid length.
[  399.855261][T15240] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  399.955860][T15413] __nla_validate_parse: 2 callbacks suppressed
[  399.955879][T15413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2537'.
[  400.101802][T15240] 8021q: adding VLAN 0 to HW filter on device bond0
[  400.175190][T15240] 8021q: adding VLAN 0 to HW filter on device team0
[  400.215355][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.222510][ T6417] bridge0: port 1(bridge_slave_0) entered forwarding state
[  400.278916][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.286076][ T6417] bridge0: port 2(bridge_slave_1) entered forwarding state
[  400.353156][T15240] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  400.370678][T15240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  400.606513][T15436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2545'.
[  400.776208][T15240] 8021q: adding VLAN 0 to HW filter on device batadv0
[  400.841700][T15443] lo speed is unknown, defaulting to 1000
[  400.858233][T15240] veth0_vlan: entered promiscuous mode
[  400.910237][T15240] veth1_vlan: entered promiscuous mode
[  400.998165][T15240] veth0_macvtap: entered promiscuous mode
[  401.034187][T15240] veth1_macvtap: entered promiscuous mode
[  401.046786][T15452] xt_l2tp: v2 doesn't support IP mode
[  401.108216][T15240] batman_adv: batadv0: Interface activated: batadv_slave_0
[  401.144929][T15240] batman_adv: batadv0: Interface activated: batadv_slave_1
[  401.178788][T15240] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  401.204127][T15240] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.212865][T15240] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.253726][T15240] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  401.378783][ T6428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.402003][ T6428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.492891][ T6408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.507158][ T6408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.825313][T15443] lo speed is unknown, defaulting to 1000
[  401.897885][T15461] openvswitch: netlink: Tunnel attr 228 out of range max 16
[  402.470431][T15480] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  402.470431][T15479] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  403.041185][T15447] --map-set only usable from mangle table
[  403.273243][ T6428] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.473983][ T6428] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.503711][    C1] ==================================================================
[  404.511822][    C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x464/0x4a0
[  404.519705][    C1] Read of size 2 at addr ffff88801cf4e02a by task swapper/1/0
[  404.527146][    C1] 
[  404.529451][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0
[  404.529464][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  404.529479][    C1] Call Trace:
[  404.529483][    C1]  <IRQ>
[  404.529488][    C1]  dump_stack_lvl+0x241/0x360
[  404.529504][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  404.529514][    C1]  ? __pfx__printk+0x10/0x10
[  404.529524][    C1]  ? _printk+0xd5/0x120
[  404.529533][    C1]  ? __virt_addr_valid+0x183/0x530
[  404.529542][    C1]  ? __virt_addr_valid+0x183/0x530
[  404.529552][    C1]  print_report+0x16e/0x5b0
[  404.529564][    C1]  ? __virt_addr_valid+0x183/0x530
[  404.529573][    C1]  ? __virt_addr_valid+0x183/0x530
[  404.529581][    C1]  ? __virt_addr_valid+0x45f/0x530
[  404.529590][    C1]  ? __phys_addr+0xba/0x170
[  404.529598][    C1]  ? rose_timer_expiry+0x464/0x4a0
[  404.529607][    C1]  kasan_report+0x143/0x180
[  404.529619][    C1]  ? rose_timer_expiry+0x464/0x4a0
[  404.529630][    C1]  rose_timer_expiry+0x464/0x4a0
[  404.529639][    C1]  call_timer_fn+0x187/0x650
[  404.529648][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  404.529662][    C1]  ? call_timer_fn+0xc0/0x650
[  404.529670][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  404.529684][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  404.529699][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  404.529713][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  404.529726][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  404.529739][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  404.529748][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[  404.529759][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  404.529772][    C1]  __run_timer_base+0x66a/0x8e0
[  404.529787][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  404.529801][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  404.529815][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  404.529828][    C1]  run_timer_softirq+0xb7/0x170
[  404.529841][    C1]  handle_softirqs+0x2d4/0x9b0
[  404.529854][    C1]  ? __irq_exit_rcu+0xf7/0x220
[  404.529865][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  404.529876][    C1]  ? irqtime_account_irq+0xd1/0x1d0
[  404.529891][    C1]  __irq_exit_rcu+0xf7/0x220
[  404.529901][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  404.529918][    C1]  irq_exit_rcu+0x9/0x30
[  404.529927][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  404.529938][    C1]  </IRQ>
[  404.529941][    C1]  <TASK>
[  404.529945][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  404.529962][    C1] RIP: 0010:acpi_safe_halt+0x21/0x30
[  404.529976][    C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 c0 d6 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 05 e0 7f 00 f3 0f 1e fa fb f4 <fa> c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90
[  404.529984][    C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246
[  404.529994][    C1] RAX: ffff88801da98000 RBX: ffff8881446e0864 RCX: 00000000000953f1
[  404.530002][    C1] RDX: 0000000000000001 RSI: ffff8881446e0800 RDI: ffff8881446e0864
[  404.530009][    C1] RBP: 000000000003aab8 R08: ffff8880b873799b R09: 1ffff110170e6f33
[  404.530015][    C1] R10: dffffc0000000000 R11: ffffffff8c0ab010 R12: ffff88801efde800
[  404.530023][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f3382e0
[  404.530030][    C1]  ? __pfx_acpi_idle_enter+0x10/0x10
[  404.530045][    C1]  acpi_idle_enter+0xe4/0x140
[  404.530057][    C1]  cpuidle_enter_state+0x109/0x470
[  404.530069][    C1]  ? __pfx_menu_select+0x10/0x10
[  404.530084][    C1]  cpuidle_enter+0x5d/0xa0
[  404.530096][    C1]  do_idle+0x372/0x5c0
[  404.530109][    C1]  ? __pfx_do_idle+0x10/0x10
[  404.530122][    C1]  ? do_idle+0x59e/0x5c0
[  404.530134][    C1]  cpu_startup_entry+0x42/0x60
[  404.530145][    C1]  start_secondary+0x102/0x110
[  404.530157][    C1]  common_startup_64+0x13e/0x147
[  404.530170][    C1]  </TASK>
[  404.530174][    C1] 
[  404.891325][    C1] Allocated by task 15150:
[  404.895722][    C1]  kasan_save_track+0x3f/0x80
[  404.900380][    C1]  __kasan_kmalloc+0x98/0xb0
[  404.904950][    C1]  __kmalloc_cache_noprof+0x243/0x390
[  404.910301][    C1]  rxrpc_alloc_peer+0x7f/0x330
[  404.915039][    C1]  rxrpc_lookup_peer+0x3ea/0x8b0
[  404.919951][    C1]  rxrpc_do_sendmsg+0xedb/0x1ac0
[  404.924872][    C1]  __sock_sendmsg+0x221/0x270
[  404.929527][    C1]  ____sys_sendmsg+0x53a/0x860
[  404.934268][    C1]  __sys_sendmmsg+0x36a/0x720
[  404.938938][    C1]  __x64_sys_sendmmsg+0xa0/0xb0
[  404.943770][    C1]  do_syscall_64+0xf3/0x230
[  404.948256][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  404.954129][    C1] 
[  404.956432][    C1] Freed by task 6404:
[  404.960384][    C1]  kasan_save_track+0x3f/0x80
[  404.965038][    C1]  kasan_save_free_info+0x40/0x50
[  404.970069][    C1]  __kasan_slab_free+0x59/0x70
[  404.974809][    C1]  kmem_cache_free_bulk+0x2d8/0x530
[  404.979986][    C1]  kvfree_rcu_bulk+0xd3/0x1d0
[  404.984641][    C1]  kfree_rcu_monitor+0x20a/0x2a0
[  404.989554][    C1]  process_scheduled_works+0xabe/0x18e0
[  404.995080][    C1]  worker_thread+0x870/0xd30
[  404.999663][    C1]  kthread+0x7a9/0x920
[  405.003712][    C1]  ret_from_fork+0x4b/0x80
[  405.008114][    C1]  ret_from_fork_asm+0x1a/0x30
[  405.012855][    C1] 
[  405.015156][    C1] Last potentially related work creation:
[  405.020844][    C1]  kasan_save_stack+0x3f/0x60
[  405.025505][    C1]  kasan_record_aux_stack+0xaa/0xc0
[  405.030679][    C1]  kvfree_call_rcu+0xa9/0x3e0
[  405.035331][    C1]  rxrpc_clean_up_connection+0x42e/0x680
[  405.040943][    C1]  rxrpc_clean_up_local_conns+0x196/0x200
[  405.046643][    C1]  rxrpc_destroy_local+0x189/0x2b0
[  405.051742][    C1]  rxrpc_io_thread+0x3598/0x3690
[  405.056658][    C1]  kthread+0x7a9/0x920
[  405.060700][    C1]  ret_from_fork+0x4b/0x80
[  405.065092][    C1]  ret_from_fork_asm+0x1a/0x30
[  405.069833][    C1] 
[  405.072131][    C1] The buggy address belongs to the object at ffff88801cf4e000
[  405.072131][    C1]  which belongs to the cache kmalloc-512 of size 512
[  405.086159][    C1] The buggy address is located 42 bytes inside of
[  405.086159][    C1]  freed 512-byte region [ffff88801cf4e000, ffff88801cf4e200)
[  405.099842][    C1] 
[  405.102145][    C1] The buggy address belongs to the physical page:
[  405.108541][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801cf4f800 pfn:0x1cf4c
[  405.118578][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  405.127056][    C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  405.135527][    C1] page_type: f5(slab)
[  405.139484][    C1] raw: 00fff00000000240 ffff88801b041c80 ffffea0001706e10 ffffea00014d5b10
[  405.148040][    C1] raw: ffff88801cf4f800 0000000000100008 00000000f5000000 0000000000000000
[  405.156602][    C1] head: 00fff00000000240 ffff88801b041c80 ffffea0001706e10 ffffea00014d5b10
[  405.165262][    C1] head: ffff88801cf4f800 0000000000100008 00000000f5000000 0000000000000000
[  405.173914][    C1] head: 00fff00000000002 ffffea000073d301 ffffffffffffffff 0000000000000000
[  405.182579][    C1] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000
[  405.191242][    C1] page dumped because: kasan: bad access detected
[  405.197662][    C1] page_owner tracks the page as allocated
[  405.203364][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1110, tgid 1110 (kworker/u8:6), ts 64279212002, free_ts 64209125401
[  405.224712][    C1]  post_alloc_hook+0x1f4/0x240
[  405.229463][    C1]  get_page_from_freelist+0x365c/0x37a0
[  405.234986][    C1]  __alloc_frozen_pages_noprof+0x292/0x710
[  405.240767][    C1]  alloc_pages_mpol+0x311/0x660
[  405.245595][    C1]  allocate_slab+0x8f/0x3a0
[  405.250103][    C1]  ___slab_alloc+0xc27/0x14a0
[  405.254762][    C1]  __slab_alloc+0x58/0xa0
[  405.259072][    C1]  __kmalloc_noprof+0x2e6/0x4c0
[  405.263903][    C1]  fib6_info_alloc+0x2e/0xf0
[  405.268476][    C1]  ip6_route_info_create+0x445/0x12b0
[  405.273827][    C1]  addrconf_f6i_alloc+0x3c2/0x7f0
[  405.278838][    C1]  ipv6_add_addr+0x5b6/0x1090
[  405.283496][    C1]  addrconf_add_linklocal+0x36c/0xa30
[  405.288865][    C1]  addrconf_addr_gen+0x510/0xbb0
[  405.293788][    C1]  addrconf_init_auto_addrs+0x96a/0xeb0
[  405.299323][    C1]  addrconf_notify+0xaff/0x1020
[  405.304155][    C1] page last free pid 5830 tgid 5830 stack trace:
[  405.310481][    C1]  free_frozen_pages+0xe0d/0x10e0
[  405.315486][    C1]  __slab_free+0x2c2/0x380
[  405.319888][    C1]  qlist_free_all+0x9a/0x140
[  405.324455][    C1]  kasan_quarantine_reduce+0x14f/0x170
[  405.329891][    C1]  __kasan_slab_alloc+0x23/0x80
[  405.334736][    C1]  __kmalloc_cache_noprof+0x1d9/0x390
[  405.340094][    C1]  rtnl_newlink+0x13e/0x1d90
[  405.344676][    C1]  rtnetlink_rcv_msg+0x791/0xcf0
[  405.349616][    C1]  netlink_rcv_skb+0x206/0x480
[  405.354361][    C1]  netlink_unicast+0x7f6/0x990
[  405.359103][    C1]  netlink_sendmsg+0x8de/0xcb0
[  405.363851][    C1]  __sock_sendmsg+0x221/0x270
[  405.368518][    C1]  __sys_sendto+0x363/0x4c0
[  405.373093][    C1]  __x64_sys_sendto+0xde/0x100
[  405.377855][    C1]  do_syscall_64+0xf3/0x230
[  405.382351][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.388254][    C1] 
[  405.390579][    C1] Memory state around the buggy address:
[  405.396188][    C1]  ffff88801cf4df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  405.404231][    C1]  ffff88801cf4df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  405.412269][    C1] >ffff88801cf4e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  405.420304][    C1]                                   ^
[  405.425670][    C1]  ffff88801cf4e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  405.433712][    C1]  ffff88801cf4e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  405.441799][    C1] ==================================================================
[  405.450009][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  405.457207][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0
[  405.467516][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  405.477571][    C1] Call Trace:
[  405.480840][    C1]  <IRQ>
[  405.483675][    C1]  dump_stack_lvl+0x241/0x360
[  405.488533][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  405.493720][    C1]  ? __pfx__printk+0x10/0x10
[  405.498315][    C1]  ? vscnprintf+0x5d/0x90
[  405.502634][    C1]  panic+0x349/0x880
[  405.506514][    C1]  ? check_panic_on_warn+0x21/0xb0
[  405.511613][    C1]  ? __pfx_panic+0x10/0x10
[  405.516031][    C1]  ? mark_lock+0x9a/0x360
[  405.520366][    C1]  ? _raw_spin_unlock_irqrestore+0xd8/0x140
[  405.526264][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  405.532165][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  405.538477][    C1]  ? print_report+0x519/0x5b0
[  405.543139][    C1]  check_panic_on_warn+0x86/0xb0
[  405.548062][    C1]  ? rose_timer_expiry+0x464/0x4a0
[  405.553156][    C1]  end_report+0x77/0x160
[  405.557381][    C1]  kasan_report+0x154/0x180
[  405.561870][    C1]  ? rose_timer_expiry+0x464/0x4a0
[  405.567006][    C1]  rose_timer_expiry+0x464/0x4a0
[  405.571931][    C1]  call_timer_fn+0x187/0x650
[  405.576500][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  405.581951][    C1]  ? call_timer_fn+0xc0/0x650
[  405.586622][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  405.592107][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  405.597229][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  405.602674][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  405.608130][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  405.613574][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  405.618761][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[  405.623953][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  405.629401][    C1]  __run_timer_base+0x66a/0x8e0
[  405.634238][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  405.639590][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  405.645898][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  405.651079][    C1]  run_timer_softirq+0xb7/0x170
[  405.655916][    C1]  handle_softirqs+0x2d4/0x9b0
[  405.660662][    C1]  ? __irq_exit_rcu+0xf7/0x220
[  405.665404][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  405.670678][    C1]  ? irqtime_account_irq+0xd1/0x1d0
[  405.675872][    C1]  __irq_exit_rcu+0xf7/0x220
[  405.680458][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  405.685644][    C1]  irq_exit_rcu+0x9/0x30
[  405.689864][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  405.695487][    C1]  </IRQ>
[  405.698396][    C1]  <TASK>
[  405.701306][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  405.707268][    C1] RIP: 0010:acpi_safe_halt+0x21/0x30
[  405.712534][    C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 c0 d6 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 05 e0 7f 00 f3 0f 1e fa fb f4 <fa> c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90
[  405.732136][    C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246
[  405.738195][    C1] RAX: ffff88801da98000 RBX: ffff8881446e0864 RCX: 00000000000953f1
[  405.746186][    C1] RDX: 0000000000000001 RSI: ffff8881446e0800 RDI: ffff8881446e0864
[  405.754159][    C1] RBP: 000000000003aab8 R08: ffff8880b873799b R09: 1ffff110170e6f33
[  405.762116][    C1] R10: dffffc0000000000 R11: ffffffff8c0ab010 R12: ffff88801efde800
[  405.770083][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f3382e0
[  405.778052][    C1]  ? __pfx_acpi_idle_enter+0x10/0x10
[  405.783330][    C1]  acpi_idle_enter+0xe4/0x140
[  405.787995][    C1]  cpuidle_enter_state+0x109/0x470
[  405.793104][    C1]  ? __pfx_menu_select+0x10/0x10
[  405.798027][    C1]  cpuidle_enter+0x5d/0xa0
[  405.802423][    C1]  do_idle+0x372/0x5c0
[  405.806475][    C1]  ? __pfx_do_idle+0x10/0x10
[  405.811043][    C1]  ? do_idle+0x59e/0x5c0
[  405.815266][    C1]  cpu_startup_entry+0x42/0x60
[  405.820010][    C1]  start_secondary+0x102/0x110
[  405.824759][    C1]  common_startup_64+0x13e/0x147
[  405.829702][    C1]  </TASK>
[  405.832997][    C1] Kernel Offset: disabled
[  405.837311][    C1] Rebooting in 86400 seconds..