last executing test programs:

3.691675332s ago: executing program 1 (id=877):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100000000000000050000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r4, 0xd456100da20768b2, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000004c0)={0xe8, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0xcc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
r7 = socket$netlink(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)

3.555018025s ago: executing program 3 (id=878):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000002cc397", @ANYRES16=r1, @ANYBLOB="000228bd7000ffdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x10000005}, 0x4000)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r4 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
unshare(0xc000000)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r5, 0x0, r8, 0x0, 0x400000008000f28, 0x0)
splice(r7, 0x0, r6, 0x0, 0x114, 0xe)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0)

2.966864533s ago: executing program 1 (id=882):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ppoll(&(0x7f0000000280), 0x1, &(0x7f0000002d00)={0x0, 0x989680}, 0x0, 0x4f)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
unshare(0x62040200)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
listen(0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x20)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)=0x1) (async)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)=0x1)
unshare(0x40040000)
shutdown(0xffffffffffffffff, 0x0) (async)
shutdown(0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
ppoll(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x100000001, 0x4, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xfffffffffffffffc, 0x9, 0x0, 0xfffffffffffffffd, 0x7fffffff}, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x3a)
epoll_create(0x4) (async)
r2 = epoll_create(0x4)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000240)={0xb0000000}) (async)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000240)={0xb0000000})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062013c00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062013c00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010000287293704238a43b000000c1eb85c705d972a6977fb562cad8e6435a8fa4c6982f020f1e528c241be0ab9d1bd9fc2431b5b4", @ANYRES32=0x0, @ANYBLOB="010900000000000008001b0000000000"], 0x28}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000020eaff000300000000000000000268e6", @ANYRES32, @ANYBLOB='G\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000020eaff000300000000000000000268e6", @ANYRES32, @ANYBLOB='G\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) (async)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4)

2.232674253s ago: executing program 2 (id=887):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'})
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16=r1, @ANYBLOB="020027"], 0x14}}, 0x2004000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
sendmmsg$alg(r4, 0x0, 0x0, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2.167161174s ago: executing program 2 (id=888):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

2.088307452s ago: executing program 1 (id=889):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r2}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180))
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x0, 0x1a8, 0xb0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000006c00000000000100040500"}}}, {{@uncond, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112080000000000950b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d00)={'ip6tnl0\x00', &(0x7f0000000c80)={'ip6_vti0\x00', <r7=>0x0, 0x2f, 0x9a, 0x0, 0xfffffff9, 0x6a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x700, 0x7, 0x10, 0x2}})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x2e, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9b, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @alu={0x7, 0x0, 0x5, 0x4, 0x7, 0x8, 0x1}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}}, &(0x7f0000000c40)='syzkaller\x00', 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000d80)=[r1], &(0x7f0000000dc0)=[{0x3, 0x3, 0x9, 0x8}, {0x1, 0x3, 0x0, 0x4}, {0x4, 0x3, 0xa, 0x4}], 0x10, 0x7, @void, @value}, 0x94)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2.046517797s ago: executing program 2 (id=890):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000004000000000000000000000001020000129218c73d138dd3255ec021081c690442d9cb996d139a3d7c6fee11477ee778ca036dbc6b7f29c82deaf0a9e5e0368316fa611676b2222dcdeecce15d3150be6cbb8fa007643c45f7c51c35063b82f0afc45774a87b31bbc49d0033f506f5d24cac0ffe7f69e6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff00"/28], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
r1 = socket$inet(0xa, 0x801, 0x84)
shutdown(r1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x1401, 0x9, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x8804}, 0x40000)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='pim6reg1\x00', 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="3d5c8ce45a", 0x5}], 0x1}}], 0x1, 0x48800)
listen(r1, 0x10008)
accept4(r1, 0x0, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x2c, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4014}, 0x0)

1.850003925s ago: executing program 3 (id=892):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c)
setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000200)=0x9, 0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xc403, @loopback}, 0x1c)

1.70844871s ago: executing program 1 (id=895):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0xb8}}, 0x10)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1.707721728s ago: executing program 2 (id=896):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'})
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket(0x23, 0x5, 0x0)
write(r2, &(0x7f0000000000)="d1d0", 0x2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r4}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000001740), 0x2, r4}, 0x38)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7fe})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
close(0x4)
sendmmsg(r5, &(0x7f00000001c0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000400)=[{0xc0, 0x29, 0x0, "d2141f562fd3c5cadeae01cb85b05f96546d6cf85a9d7961570649a63ef0db13259831f644ec4ae9236e24d4a792531d2bd246c0f62d0ea4606344c30b4257f7a4d4ec270d83030caae2d936b662f3757d128d22721a9e763383f00040cf1b1a4a151197b08db6f8a7c944c7ab689ea2cc20b70701ad6010ba13e297ec925b46edbb601cbb00a9ea31e672935599d4773cba988ff3b661fe59a04ee6758febed62f6b3b5c6ab2d5fe54bc2bf206961"}], 0xc0}}], 0x1, 0x8000)

1.519290521s ago: executing program 1 (id=900):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

1.352630781s ago: executing program 1 (id=901):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000002cc397", @ANYRES16=r1, @ANYBLOB="000228bd7000ffdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x10000005}, 0x4000)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r4 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r5, 0x0, r8, 0x0, 0x400000008000f28, 0x0)
splice(r7, 0x0, r6, 0x0, 0x114, 0xe)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0)

1.309279325s ago: executing program 0 (id=902):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0xfffffffc)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd3000000000000100000014000180060001000200000008000300ac14141c"], 0x28}}, 0x0)

1.308212339s ago: executing program 4 (id=903):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 64)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xef1f, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'dummy0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) (async)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x140f, 0x1, 0x78b929, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040055}, 0x48010)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r7}, 0x10)

1.211203861s ago: executing program 2 (id=904):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x20, 0x40, 0x1001000, 0x756, {{0x5, 0x4, 0x2, 0x2, 0x4, 0x66, 0x0, 0xe9, 0x2f, 0x0, @private=0x2, @loopback}}}})
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'})
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16], 0x14}}, 0x2004000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[], 0xb8}}, 0x10)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1.202208625s ago: executing program 0 (id=905):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r2}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180))
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x0, 0x1a8, 0xb0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000006c00000000000100040500"}}}, {{@uncond, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112080000000000950b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d00)={'ip6tnl0\x00', &(0x7f0000000c80)={'ip6_vti0\x00', <r7=>0x0, 0x2f, 0x9a, 0x0, 0xfffffff9, 0x6a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x700, 0x7, 0x10, 0x2}})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x2e, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9b, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @alu={0x7, 0x0, 0x5, 0x4, 0x7, 0x8, 0x1}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}}, &(0x7f0000000c40)='syzkaller\x00', 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000d80)=[r1], &(0x7f0000000dc0)=[{0x3, 0x3, 0x9, 0x8}, {0x1, 0x3, 0x0, 0x4}, {0x4, 0x3, 0xa, 0x4}], 0x10, 0x7, @void, @value}, 0x94)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1.056815776s ago: executing program 4 (id=906):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000004000000000000000000000001020000129218c73d138dd3255ec021081c690442d9cb996d139a3d7c6fee11477ee778ca036dbc6b7f29c82deaf0a9e5e0368316fa611676b2222dcdeecce15d3150be6cbb8fa007643c45f7c51c35063b82f0afc45774a87b31bbc49d0033f506f5d24cac0ffe7f69e6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff00"/28], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
r1 = socket$inet(0xa, 0x801, 0x84)
shutdown(r1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x1401, 0x9, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x8804}, 0x40000)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='pim6reg1\x00', 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="3d5c8ce45a", 0x5}], 0x1}}], 0x1, 0x48800)
listen(r1, 0x10008)
accept4(r1, 0x0, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x2c, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4014}, 0x0)

1.009540997s ago: executing program 0 (id=907):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a0300000000000000000007000000"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

979.0678ms ago: executing program 2 (id=908):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000002cc397", @ANYRES16=r1, @ANYBLOB="000228bd7000ffdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x10000005}, 0x4000)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r4 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r5, 0x0, r8, 0x0, 0x400000008000f28, 0x0)
splice(r7, 0x0, r6, 0x0, 0x114, 0xe)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0)

832.698981ms ago: executing program 3 (id=909):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x20, 0x40, 0x1001000, 0x756, {{0x5, 0x4, 0x2, 0x2, 0x4, 0x66, 0x0, 0xe9, 0x2f, 0x0, @private=0x2, @loopback}}}})
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'})
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0}, 0x2004000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r1)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x54}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x17ce}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4040000)
r4 = accept4(r2, 0x0, 0x0, 0x80800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10002)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

756.66464ms ago: executing program 0 (id=910):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'lo\x00'})
r0 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x5)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)

718.662073ms ago: executing program 4 (id=911):
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000140001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000a00b00029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x10)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

643.490541ms ago: executing program 3 (id=912):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x20, 0x40, 0x1001000, 0x756, {{0x5, 0x4, 0x2, 0x2, 0x4, 0x66, 0x0, 0xe9, 0x2f, 0x0, @private=0x2, @loopback}}}})
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'})
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16=r1, @ANYBLOB="020027bd7000"], 0x14}}, 0x2004000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[], 0xb8}}, 0x10)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10002)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)='E', 0x1}], 0x1, 0x0, 0x0, 0x14008000}}], 0x1, 0x40000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

623.745891ms ago: executing program 0 (id=913):
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400"], 0x64}}, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x258, 0x194, 0x194, 0x258, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0xc0000000, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@socket1={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@broadcast, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:man_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', 0x0})
bind$alg(r0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
sendfile(r5, r5, &(0x7f00000000c0)=0x100000001, 0xba89)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r6}, &(0x7f0000000880), 0x0}, 0x20)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a3000000000140000001100"], 0x50}}, 0x0)

543.245666ms ago: executing program 4 (id=914):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$l2tp(0x2, 0x2, 0x73)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)={<r2=>0x0, 0xfb, "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"}, &(0x7f0000000380)=0x103)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r3=>r2, 0x39, &(0x7f00000003c0)=[@in6={0xa, 0x4e20, 0x10009, @private1, 0x9}]}, &(0x7f00000001c0)=0x10)
r4 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="b2", 0x1}, {&(0x7f0000000040)="000000070020ac", 0x7}], 0x2}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='cachefiles_mark_inactive\x00', r5, 0x0, 0x7}, 0x18)
r7 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r7, r6, 0x0, 0x16, 0xfffffffffffffffe}, 0x30)
r8 = epoll_create1(0x0)
r9 = socket(0x1, 0x80802, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000800290008c9010008002800000000e8"], 0x58}}, 0x0)
r12 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000600)={'team0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r13, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x0)
r14 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r14, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(r8, 0x2, r9, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r9, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="64000000170a05000000000000000000010000080900020073797a310000800008000000020900020073797a310000000008000740000000030c000540000000000000000508000740dc3333080900020073797a3100"/100], 0x64}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000000)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r3}, 0x8)

380.780546ms ago: executing program 3 (id=915):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

319.098738ms ago: executing program 0 (id=916):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x900, 0x0, 0x0, {0x5, 0x0, 0x8}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_NEWFLOWTABLE={0x24, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd8}}, 0x20008000)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000"], 0x5b0}, 0x20008001)
sendmsg$inet6(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="376cd97cb39285495ddf4bd660c811b4dca74500799dac8f26884d6d4cc781a3b510574bd853ed8eae31de87a5", 0x2d}], 0x1}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, 0x0)
shutdown(r3, 0x1)
r4 = socket$inet(0xa, 0x801, 0x84)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x891c)
shutdown(0xffffffffffffffff, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)="b970f6aa2bfdc9d7afbfe5c81e0b9b00b49015199ee375d7bd1e9a044aead3faf4a0f39154893e76f7c07b1ef464add3dac1272dfb540106eff5d18585394f8978a2a6e597b9479e904e68cfe4474d047fbd2a138da70c600c760ce32fdd162b9866cd8b1d2908ea2599011aba31a4b1193250944e602609300cbbb8f2bd89acef5fd0471e96cd071c31f8", 0x8b)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
shutdown(r4, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x4040850)
socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90324fc6004001c000a000200053582c137153e37000c0480fc0b10000300", 0x33fe0}], 0x1}, 0x0)

263.727497ms ago: executing program 3 (id=917):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000003d0007010000000000000000047c00000b000880", @ANYRES32, @ANYBLOB], 0xb8}}, 0xc000)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x80, 0x32, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x11}, [{0x6c, 0x1, [@m_vlan={0x68, 0x17, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x81000, 0x2, 0x1, 0x2, 0x84c}, 0x2}}]}, {0x18, 0x6, "794878d6bdeccd8a823895752e154040c8159be8"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x80}}, 0x44)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYRES32], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[@ANYBLOB="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"], 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="19517b", @ANYRES16=0x0, @ANYBLOB="000400000000000000000d0000000500190005000000050018004d00000006000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x18000}, 0x4004011)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x0, 0x33, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000000002000000400004803c0001800b00010065787468647200002c00028005000200940000000c000340000000000800044000000001080006400000000208000140000000130900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40)=0xffffffffffffffff, 0x12)
ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0xa, 0x2)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000001914000000110001"], 0xd8}}, 0x80)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))

100.956491ms ago: executing program 4 (id=918):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000de080000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 4 (id=919):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x814)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'})
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1402005c", @ANYRES16=r0, @ANYBLOB="020027bd7000fddbdf2515"], 0x14}}, 0x2004000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[], 0xb8}}, 0x10)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000), 0x0)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r1)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x54}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x17ce}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4040000)
r4 = accept4(r2, 0x0, 0x0, 0x80800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.64' (ED25519) to the list of known hosts.
[   57.957275][ T5822] cgroup: Unknown subsys name 'net'
[   58.063515][ T5822] cgroup: Unknown subsys name 'cpuset'
[   58.071596][ T5822] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.438301][ T5822] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.567253][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.573629][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.578210][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.583008][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.589948][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   61.596536][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   61.604302][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.617280][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.625467][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.634358][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.642009][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   61.647125][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.650025][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   61.657086][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   61.665040][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.678997][ T5852] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   61.687463][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.695900][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.699122][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   61.708252][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   61.712886][ T5852] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   61.717622][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.725321][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   61.731805][ T5854] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   61.738642][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   61.745658][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.754122][ T5847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   61.760210][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.767239][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   61.781440][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   62.244399][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   62.270386][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   62.374450][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   62.398065][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   62.408167][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   62.464592][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.473103][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.481144][ T5832] bridge_slave_0: entered allmulticast mode
[   62.488163][ T5832] bridge_slave_0: entered promiscuous mode
[   62.523950][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.533672][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.541607][ T5832] bridge_slave_1: entered allmulticast mode
[   62.548280][ T5832] bridge_slave_1: entered promiscuous mode
[   62.566424][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.573640][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.580961][ T5840] bridge_slave_0: entered allmulticast mode
[   62.587536][ T5840] bridge_slave_0: entered promiscuous mode
[   62.615075][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.622575][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.629768][ T5840] bridge_slave_1: entered allmulticast mode
[   62.636793][ T5840] bridge_slave_1: entered promiscuous mode
[   62.682736][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.711095][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.743216][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.770494][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.795410][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.803381][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.811095][ T5834] bridge_slave_0: entered allmulticast mode
[   62.817842][ T5834] bridge_slave_0: entered promiscuous mode
[   62.826017][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.833248][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.840859][ T5833] bridge_slave_0: entered allmulticast mode
[   62.847482][ T5833] bridge_slave_0: entered promiscuous mode
[   62.862070][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.869218][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.876710][ T5836] bridge_slave_0: entered allmulticast mode
[   62.883974][ T5836] bridge_slave_0: entered promiscuous mode
[   62.891805][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.898911][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.906174][ T5836] bridge_slave_1: entered allmulticast mode
[   62.913347][ T5836] bridge_slave_1: entered promiscuous mode
[   62.926773][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.934153][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.941624][ T5834] bridge_slave_1: entered allmulticast mode
[   62.948239][ T5834] bridge_slave_1: entered promiscuous mode
[   62.964148][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.971329][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.978521][ T5833] bridge_slave_1: entered allmulticast mode
[   62.985506][ T5833] bridge_slave_1: entered promiscuous mode
[   63.021913][ T5840] team0: Port device team_slave_0 added
[   63.030407][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.061947][ T5832] team0: Port device team_slave_0 added
[   63.069274][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.080983][ T5840] team0: Port device team_slave_1 added
[   63.098412][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.110052][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.121171][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.133114][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.144367][ T5832] team0: Port device team_slave_1 added
[   63.177306][ T5836] team0: Port device team_slave_0 added
[   63.216998][ T5834] team0: Port device team_slave_0 added
[   63.231714][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.238826][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.265408][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.288806][ T5836] team0: Port device team_slave_1 added
[   63.314550][ T5834] team0: Port device team_slave_1 added
[   63.323474][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.330625][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.357434][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.369172][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.376357][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.403272][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.422178][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.429260][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.455648][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.470719][ T5833] team0: Port device team_slave_0 added
[   63.489768][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.497314][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.523946][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.542336][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.549317][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.576067][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.588863][ T5833] team0: Port device team_slave_1 added
[   63.605303][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.612567][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.638833][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.675533][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.682648][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.709024][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.769129][ T5840] hsr_slave_0: entered promiscuous mode
[   63.775720][ T5840] hsr_slave_1: entered promiscuous mode
[   63.787957][ T5832] hsr_slave_0: entered promiscuous mode
[   63.795070][ T5832] hsr_slave_1: entered promiscuous mode
[   63.802022][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.809772][ T5832] Cannot create hsr debugfs directory
[   63.816093][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.823484][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.831407][ T5847] Bluetooth: hci1: command tx timeout
[   63.849742][ T5842] Bluetooth: hci0: command tx timeout
[   63.855470][ T5847] Bluetooth: hci3: command tx timeout
[   63.860590][ T5852] Bluetooth: hci2: command tx timeout
[   63.866383][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.884365][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.891430][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.918190][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.928779][ T5842] Bluetooth: hci4: command tx timeout
[   63.976241][ T5834] hsr_slave_0: entered promiscuous mode
[   63.982624][ T5834] hsr_slave_1: entered promiscuous mode
[   63.988522][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.996287][ T5834] Cannot create hsr debugfs directory
[   64.052185][ T5836] hsr_slave_0: entered promiscuous mode
[   64.058443][ T5836] hsr_slave_1: entered promiscuous mode
[   64.064923][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.072670][ T5836] Cannot create hsr debugfs directory
[   64.096471][ T5833] hsr_slave_0: entered promiscuous mode
[   64.103423][ T5833] hsr_slave_1: entered promiscuous mode
[   64.109356][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.117604][ T5833] Cannot create hsr debugfs directory
[   64.434753][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   64.452413][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   64.468128][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   64.493880][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   64.548915][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.569117][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.585734][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.597841][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.654333][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   64.665290][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   64.692116][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   64.703550][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   64.789733][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.805301][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.826482][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.854467][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.884171][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.908349][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   64.919325][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.943032][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.965628][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.972950][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.982250][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.996463][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.036092][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.046496][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.053641][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.126056][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.143379][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   65.185347][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   65.218739][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.226027][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.235788][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.242963][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.266053][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.273179][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.284584][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.291737][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.303562][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.346444][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   65.395071][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.402262][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.455589][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.462787][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.529303][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.569091][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   65.586899][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.646742][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.653964][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.711012][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.718150][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.910803][ T5842] Bluetooth: hci3: command tx timeout
[   65.916284][ T5842] Bluetooth: hci1: command tx timeout
[   65.921965][ T5838] Bluetooth: hci0: command tx timeout
[   65.927403][ T5838] Bluetooth: hci2: command tx timeout
[   65.977134][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.990695][ T5838] Bluetooth: hci4: command tx timeout
[   66.003666][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.097482][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.147215][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.174910][ T5832] veth0_vlan: entered promiscuous mode
[   66.207545][ T5834] veth0_vlan: entered promiscuous mode
[   66.236216][ T5832] veth1_vlan: entered promiscuous mode
[   66.248927][ T5834] veth1_vlan: entered promiscuous mode
[   66.286747][ T5840] veth0_vlan: entered promiscuous mode
[   66.316414][ T5833] veth0_vlan: entered promiscuous mode
[   66.326156][ T5833] veth1_vlan: entered promiscuous mode
[   66.347548][ T5834] veth0_macvtap: entered promiscuous mode
[   66.361271][ T5840] veth1_vlan: entered promiscuous mode
[   66.368649][ T5836] veth0_vlan: entered promiscuous mode
[   66.388395][ T5834] veth1_macvtap: entered promiscuous mode
[   66.409239][ T5832] veth0_macvtap: entered promiscuous mode
[   66.425073][ T5832] veth1_macvtap: entered promiscuous mode
[   66.435593][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.449085][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.461685][ T5836] veth1_vlan: entered promiscuous mode
[   66.484571][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.496249][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.505472][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.514321][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.563288][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.574860][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.586948][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.598843][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.609539][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.621476][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.637923][ T5833] veth0_macvtap: entered promiscuous mode
[   66.646375][ T5840] veth0_macvtap: entered promiscuous mode
[   66.658527][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.668041][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.677660][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.686713][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.713054][ T5833] veth1_macvtap: entered promiscuous mode
[   66.737741][ T5836] veth0_macvtap: entered promiscuous mode
[   66.746200][ T5840] veth1_macvtap: entered promiscuous mode
[   66.765706][ T5836] veth1_macvtap: entered promiscuous mode
[   66.815317][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.825252][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.837445][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.839355][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.848719][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.866116][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.877448][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.886927][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.898223][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.908531][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.919137][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.929223][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.939896][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.952972][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.971723][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.982329][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.992919][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.003440][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.014389][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.029943][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.043927][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.054267][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.064903][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.076466][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.089115][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.102414][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.126104][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.135084][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.145145][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.154033][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.168009][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.178856][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.188862][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.201785][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.211690][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.222159][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.234590][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.245173][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.256285][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.269411][ T5840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.278426][ T5840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.287774][ T5840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.296589][ T5840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.309248][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.313299][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.328030][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.338109][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.342957][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.348764][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.368044][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.379683][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.389952][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.401464][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.412539][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.428964][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.438269][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.447562][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.456595][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.476063][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.500789][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.617762][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.648599][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.670499][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.680781][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.693952][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.781384][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.807583][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.877678][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.921907][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.939589][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.976561][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.991008][ T5838] Bluetooth: hci2: command tx timeout
[   67.996463][ T5838] Bluetooth: hci1: command tx timeout
[   68.001971][ T5842] Bluetooth: hci0: command tx timeout
[   68.002413][ T5847] Bluetooth: hci3: command tx timeout
[   68.070750][ T5847] Bluetooth: hci4: command tx timeout
[   68.087814][ T5928] bridge_slave_0: left allmulticast mode
[   68.095974][ T5928] bridge_slave_0: left promiscuous mode
[   68.103934][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.117518][ T5928] bridge_slave_1: left allmulticast mode
[   68.123540][ T5928] bridge_slave_1: left promiscuous mode
[   68.129231][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.143833][ T5928] bond0: (slave bond_slave_0): Releasing backup interface
[   68.156826][ T5928] bond0: (slave bond_slave_1): Releasing backup interface
[   68.182813][ T5928] team0: Port device team_slave_0 removed
[   68.194548][ T5928] team0: Port device team_slave_1 removed
[   68.201299][ T5928] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.208721][ T5928] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.219207][ T5928] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.227637][ T5928] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.250750][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.258879][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.332690][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.360980][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.485249][ T5928] syz.3.6 (5928) used greatest stack depth: 18640 bytes left
[   68.885961][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.893569][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.985177][ T5958] trusted_key: syz.4.11 sent an empty control message without MSG_MORE.
[   69.006207][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.019056][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.106329][ T5943] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.120152][ T5943] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.129151][ T5943] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.138465][ T5943] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.236654][ T5940] bond1: entered promiscuous mode
[   69.246413][ T5940] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.257309][ T5953] warning: `syz.0.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.285484][ T5953] Zero length message leads to an empty skb
[   69.321456][ T5961] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode
[   69.330416][ T5961] macvtap1: entered promiscuous mode
[   69.336772][ T5961] macvtap1: entered allmulticast mode
[   69.342872][ T5961] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[   69.422170][ T5961] mac80211_hwsim hwsim10 wlan1: left allmulticast mode
[   69.432172][ T5961] mac80211_hwsim hwsim10 wlan1: left promiscuous mode
[   69.462482][ T5967] netlink: 104 bytes leftover after parsing attributes in process `syz.3.14'.
[   69.992911][ T5983] bond1 (unregistering): Released all slaves
[   70.087448][ T5847] Bluetooth: hci3: command tx timeout
[   70.087492][ T5842] Bluetooth: hci1: command tx timeout
[   70.094983][ T5847] Bluetooth: hci0: command tx timeout
[   70.110310][ T5838] Bluetooth: hci2: command tx timeout
[   70.140495][ T5989] netlink: 104 bytes leftover after parsing attributes in process `syz.0.23'.
[   70.149957][ T5852] Bluetooth: hci4: command tx timeout
[   70.462587][ T5997] netlink: 'syz.0.26': attribute type 15 has an invalid length.
[   70.486275][ T5998] syzkaller0: create flow: hash 1109911779 index 2
[   70.509712][ T5995] netlink: 40 bytes leftover after parsing attributes in process `syz.2.25'.
[   70.692414][   T81] syzkaller0: tun_net_xmit 76
[   70.697613][   T81] syzkaller0: tun_net_xmit 48
[   70.720289][ T5919] syzkaller0: tun_net_xmit 76
[   70.759088][ T5993] syzkaller0: delete flow: hash 1109911779 index 2
[   70.820362][   T25] syzkaller0: tun_net_xmit 76
[   70.998998][ T6011] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.167404][ T6011] netlink: 'syz.4.29': attribute type 10 has an invalid length.
[   71.218344][ T6015] netlink: 'syz.4.29': attribute type 10 has an invalid length.
[   71.229273][ T6015] netlink: 2 bytes leftover after parsing attributes in process `syz.4.29'.
[   71.504556][ T6021] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.29'.
[   71.785493][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[   71.793426][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[   71.890191][ T6004] syz.0.28 (6004) used greatest stack depth: 15696 bytes left
[   73.572372][ T6011] batman_adv: batadv0: Adding interface: team0
[   73.589448][ T6011] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.655653][ T6011] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   73.700064][ T6015] team0: entered promiscuous mode
[   73.705152][ T6015] team_slave_0: entered promiscuous mode
[   73.743130][ T6015] team_slave_1: entered promiscuous mode
[   73.760996][ T6015] 8021q: adding VLAN 0 to HW filter on device team0
[   73.767859][ T6015] batman_adv: batadv0: Interface activated: team0
[   73.774864][ T6015] batman_adv: batadv0: Interface deactivated: team0
[   73.783186][ T6015] batman_adv: batadv0: Removing interface: team0
[   73.795174][ T6015] bridge0: port 3(team0) entered blocking state
[   73.801891][ T6015] bridge0: port 3(team0) entered disabled state
[   73.808461][ T6015] team0: entered allmulticast mode
[   73.813819][ T6015] team_slave_0: entered allmulticast mode
[   73.819719][ T6015] team_slave_1: entered allmulticast mode
[   73.829563][ T6015] bridge0: port 3(team0) entered blocking state
[   73.836020][ T6015] bridge0: port 3(team0) entered forwarding state
[   73.894030][ T6024] bond1 (unregistering): Released all slaves
[   74.194531][ T6035] syzkaller0: tun_chr_ioctl cmd 1074025684
[   74.223569][ T6045] syz.1.35 uses obsolete (PF_INET,SOCK_PACKET)
[   74.361247][ T6049] netlink: 72 bytes leftover after parsing attributes in process `syz.2.37'.
[   74.376327][ T6049] openvswitch: netlink: Flow actions attr not present in new flow.
[   74.423362][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'.
[   74.493748][ T6050] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.609017][ T6079] netlink: 'syz.0.44': attribute type 1 has an invalid length.
[   76.734844][ T6082] netlink: 'syz.1.45': attribute type 1 has an invalid length.
[   76.781701][ T6079] bond1 (unregistering): Released all slaves
[   76.943409][ T6089] bond2 (unregistering): Released all slaves
[   77.090755][ T6092] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[   77.110764][ T6092] macvtap1: entered promiscuous mode
[   77.120913][ T6092] macvtap1: entered allmulticast mode
[   77.134248][ T6092] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[   77.217055][ T6092] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[   77.239472][ T6092] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[   77.363326][ T6098] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode
[   77.411645][ T6098] macvtap1: entered promiscuous mode
[   77.440789][ T6098] macvtap1: entered allmulticast mode
[   77.446234][ T6098] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[   77.486179][ T6107] netlink: 'syz.4.54': attribute type 10 has an invalid length.
[   77.504529][ T6098] mac80211_hwsim hwsim10 wlan1: left allmulticast mode
[   77.537351][ T6108] netlink: 'syz.4.54': attribute type 10 has an invalid length.
[   77.549015][ T6108] netlink: 2 bytes leftover after parsing attributes in process `syz.4.54'.
[   77.550587][ T6098] mac80211_hwsim hwsim10 wlan1: left promiscuous mode
[   77.680786][ T6107] bridge0: port 3(team0) entered disabled state
[   77.688164][ T6107] team0: left allmulticast mode
[   77.722550][ T6107] team_slave_0: left allmulticast mode
[   77.751708][ T6107] team_slave_1: left allmulticast mode
[   77.790020][ T6107] team0: left promiscuous mode
[   77.794887][ T6107] team_slave_0: left promiscuous mode
[   77.801077][ T6107] team_slave_1: left promiscuous mode
[   77.806948][ T6107] bridge0: port 3(team0) entered disabled state
[   77.824433][ T6117] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.54'.
[   77.855433][ T6107] batman_adv: batadv0: Adding interface: team0
[   77.890257][ T6107] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.949964][ T6107] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   78.007734][ T6108] team0: entered promiscuous mode
[   78.050049][ T6108] team_slave_0: entered promiscuous mode
[   78.062864][ T6108] team_slave_1: entered promiscuous mode
[   78.091737][ T6108] 8021q: adding VLAN 0 to HW filter on device team0
[   78.114683][ T6108] batman_adv: batadv0: Interface activated: team0
[   78.132652][ T6108] batman_adv: batadv0: Interface deactivated: team0
[   78.157654][ T6108] batman_adv: batadv0: Removing interface: team0
[   78.176715][ T6108] bridge0: port 3(team0) entered blocking state
[   78.190174][ T6108] bridge0: port 3(team0) entered disabled state
[   78.196635][ T6108] team0: entered allmulticast mode
[   78.219924][ T6108] team_slave_0: entered allmulticast mode
[   78.225697][ T6108] team_slave_1: entered allmulticast mode
[   78.251111][ T6108] bridge0: port 3(team0) entered blocking state
[   78.257581][ T6108] bridge0: port 3(team0) entered forwarding state
[   79.287704][ T6150] macvtap1: entered promiscuous mode
[   79.310023][ T6150] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[   79.331073][ T6150] macvtap1: entered allmulticast mode
[   79.375717][ T6150] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   79.455369][ T6150] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   79.500060][ T6150] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[   79.742814][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'.
[   80.178350][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'.
[   80.244230][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'.
[   80.290115][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'.
[   80.337976][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'.
[   80.387270][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'.
[   80.426786][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'.
[   80.471116][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'.
[   80.871797][ T6203] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[   80.889351][ T6203] macvtap1: entered promiscuous mode
[   80.909540][ T6203] macvtap1: entered allmulticast mode
[   80.917877][ T6203] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[   80.977219][ T6203] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[   80.988674][ T6203] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[   81.998659][  T908] cfg80211: failed to load regulatory.db
[   82.196202][ T6247] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode
[   82.219108][ T6247] macvtap1: entered promiscuous mode
[   82.251056][ T6247] macvtap1: entered allmulticast mode
[   82.256495][ T6247] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[   82.340393][ T6247] mac80211_hwsim hwsim10 wlan1: left allmulticast mode
[   82.380991][ T6247] mac80211_hwsim hwsim10 wlan1: left promiscuous mode
[   82.875935][ T6267] syzkaller0: tun_chr_ioctl cmd 1074025684
[   82.961314][ T6268] syzkaller0: create flow: hash 1109911779 index 2
[   83.162828][   T81] syzkaller0: tun_net_xmit 76
[   83.180213][   T81] syzkaller0: tun_net_xmit 48
[   83.186360][ T6267] syzkaller0: delete flow: hash 1109911779 index 2
[   83.187721][  T908] syzkaller0: tun_net_xmit 76
[   83.211805][ T6272] nbd: must specify a device to reconfigure
[   83.220886][ T6272] x_tables: duplicate underflow at hook 1
[   83.540010][ T6283] FAULT_INJECTION: forcing a failure.
[   83.540010][ T6283] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   83.576384][ T6283] CPU: 1 UID: 0 PID: 6283 Comm: syz.1.115 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0
[   83.576411][ T6283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   83.576425][ T6283] Call Trace:
[   83.576432][ T6283]  <TASK>
[   83.576440][ T6283]  dump_stack_lvl+0x241/0x360
[   83.576473][ T6283]  ? __pfx_dump_stack_lvl+0x10/0x10
[   83.576490][ T6283]  ? __pfx__printk+0x10/0x10
[   83.576509][ T6283]  ? __pfx_lock_release+0x10/0x10
[   83.576531][ T6283]  ? __lock_acquire+0x1397/0x2100
[   83.576556][ T6283]  should_fail_ex+0x40a/0x550
[   83.576581][ T6283]  _copy_from_user+0x2d/0xb0
[   83.576599][ T6283]  kstrtouint_from_user+0xc6/0x190
[   83.576618][ T6283]  ? __pfx_kstrtouint_from_user+0x10/0x10
[   83.576638][ T6283]  ? __pfx_lock_acquire+0x10/0x10
[   83.576678][ T6283]  proc_fail_nth_write+0xaa/0x2d0
[   83.576700][ T6283]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[   83.576720][ T6283]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   83.576747][ T6283]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   83.576769][ T6283]  vfs_write+0x29f/0xd10
[   83.576788][ T6283]  ? fdget_pos+0x254/0x320
[   83.576808][ T6283]  ? __mutex_unlock_slowpath+0x227/0x800
[   83.576831][ T6283]  ? __pfx_vfs_write+0x10/0x10
[   83.576845][ T6283]  ? do_sys_openat2+0x17a/0x1d0
[   83.576869][ T6283]  ? __fget_files+0x2a/0x410
[   83.576891][ T6283]  ? __fget_files+0x395/0x410
[   83.576910][ T6283]  ? __fget_files+0x2a/0x410
[   83.576939][ T6283]  ksys_write+0x18f/0x2b0
[   83.576958][ T6283]  ? __pfx_ksys_write+0x10/0x10
[   83.576975][ T6283]  ? do_syscall_64+0x100/0x230
[   83.576997][ T6283]  ? do_syscall_64+0xb6/0x230
[   83.577016][ T6283]  do_syscall_64+0xf3/0x230
[   83.577033][ T6283]  ? clear_bhb_loop+0x35/0x90
[   83.577057][ T6283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.577082][ T6283] RIP: 0033:0x7f50d298bc1f
[   83.577102][ T6283] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[   83.577115][ T6283] RSP: 002b:00007f50d3839030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   83.577133][ T6283] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f50d298bc1f
[   83.577144][ T6283] RDX: 0000000000000001 RSI: 00007f50d38390a0 RDI: 0000000000000004
[   83.577154][ T6283] RBP: 00007f50d3839090 R08: 0000000000000000 R09: 0000000000000000
[   83.577164][ T6283] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[   83.577173][ T6283] R13: 0000000000000000 R14: 00007f50d2ba5fa0 R15: 00007ffe1aad4ea8
[   83.577200][ T6283]  </TASK>
[   83.997514][ T6289] Cannot find add_set index 0 as target
[   85.396668][ T6285] bridge_slave_0: left allmulticast mode
[   85.403780][ T6285] bridge_slave_0: left promiscuous mode
[   85.409558][ T6285] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.441095][ T6285] bridge_slave_1: left allmulticast mode
[   85.449342][ T6285] bridge_slave_1: left promiscuous mode
[   85.470538][ T6285] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.515929][ T6285] bond0: (slave bond_slave_0): Releasing backup interface
[   85.537036][ T6285] bond0: (slave bond_slave_1): Releasing backup interface
[   85.587877][ T6285] team0: Port device team_slave_0 removed
[   85.622191][ T6285] team0: Port device team_slave_1 removed
[   85.653978][ T6285] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.661912][ T6285] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.676527][ T6285] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.688314][ T6285] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.716783][ T6286] team0: Mode changed to "loadbalance"
[   85.790173][ T6306] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   85.797395][ T6306] macvtap1: entered promiscuous mode
[   85.803795][ T6306] macvtap1: entered allmulticast mode
[   85.819963][ T6306] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   85.862606][ T6306] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   85.906557][ T6306] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[   87.629700][ T6364] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode
[   87.680077][ T6364] macvtap1: entered promiscuous mode
[   87.685581][ T6364] macvtap1: entered allmulticast mode
[   87.703090][ T6364] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[   87.811028][ T6364] mac80211_hwsim hwsim10 wlan1: left allmulticast mode
[   87.845223][ T6364] mac80211_hwsim hwsim10 wlan1: left promiscuous mode
[   89.420516][ T6415] FAULT_INJECTION: forcing a failure.
[   89.420516][ T6415] name failslab, interval 1, probability 0, space 0, times 1
[   89.462096][ T6415] CPU: 1 UID: 0 PID: 6415 Comm: syz.0.155 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0
[   89.462121][ T6415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   89.462131][ T6415] Call Trace:
[   89.462143][ T6415]  <TASK>
[   89.462151][ T6415]  dump_stack_lvl+0x241/0x360
[   89.462177][ T6415]  ? __pfx_dump_stack_lvl+0x10/0x10
[   89.462194][ T6415]  ? __pfx__printk+0x10/0x10
[   89.462224][ T6415]  should_fail_ex+0x40a/0x550
[   89.462251][ T6415]  should_failslab+0xac/0x100
[   89.462272][ T6415]  ? skb_clone+0x20c/0x390
[   89.462288][ T6415]  kmem_cache_alloc_noprof+0x70/0x380
[   89.462315][ T6415]  skb_clone+0x20c/0x390
[   89.462335][ T6415]  __netlink_deliver_tap+0x3c4/0x7f0
[   89.462367][ T6415]  ? netlink_deliver_tap+0x2e/0x1b0
[   89.462386][ T6415]  netlink_deliver_tap+0x19d/0x1b0
[   89.462407][ T6415]  netlink_unicast+0x7c4/0x990
[   89.462434][ T6415]  ? __pfx_netlink_unicast+0x10/0x10
[   89.462451][ T6415]  ? __virt_addr_valid+0x45f/0x530
[   89.462468][ T6415]  ? __phys_addr_symbol+0x2f/0x70
[   89.462482][ T6415]  ? __check_object_size+0x47a/0x730
[   89.462506][ T6415]  netlink_sendmsg+0x8de/0xcb0
[   89.462538][ T6415]  ? __pfx_netlink_sendmsg+0x10/0x10
[   89.462563][ T6415]  ? aa_sock_msg_perm+0x91/0x160
[   89.462590][ T6415]  ? __pfx_netlink_sendmsg+0x10/0x10
[   89.462609][ T6415]  __sock_sendmsg+0x221/0x270
[   89.462633][ T6415]  ____sys_sendmsg+0x53a/0x860
[   89.462658][ T6415]  ? __pfx_____sys_sendmsg+0x10/0x10
[   89.462672][ T6415]  ? __fget_files+0x2a/0x410
[   89.462694][ T6415]  ? __fget_files+0x2a/0x410
[   89.462721][ T6415]  __sys_sendmsg+0x269/0x350
[   89.462743][ T6415]  ? __pfx___sys_sendmsg+0x10/0x10
[   89.462770][ T6415]  ? do_sys_openat2+0x17a/0x1d0
[   89.462813][ T6415]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   89.462835][ T6415]  ? do_syscall_64+0x100/0x230
[   89.462856][ T6415]  ? do_syscall_64+0xb6/0x230
[   89.462875][ T6415]  do_syscall_64+0xf3/0x230
[   89.462893][ T6415]  ? clear_bhb_loop+0x35/0x90
[   89.462916][ T6415]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.462936][ T6415] RIP: 0033:0x7f6446f8d169
[   89.462950][ T6415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.462962][ T6415] RSP: 002b:00007f6447e96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   89.462980][ T6415] RAX: ffffffffffffffda RBX: 00007f64471a5fa0 RCX: 00007f6446f8d169
[   89.462990][ T6415] RDX: 000000000000c000 RSI: 0000400000000000 RDI: 0000000000000003
[   89.463000][ T6415] RBP: 00007f6447e96090 R08: 0000000000000000 R09: 0000000000000000
[   89.463009][ T6415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   89.463018][ T6415] R13: 0000000000000000 R14: 00007f64471a5fa0 R15: 00007ffedb980a18
[   89.463041][ T6415]  </TASK>
[   89.741072][ T6415] openvswitch: netlink: Actions may not be safe on all matching packets
[   89.941227][ T6420] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode
[   89.948464][ T6420] macvtap1: entered promiscuous mode
[   89.956773][ T6420] macvtap1: entered allmulticast mode
[   89.962219][ T6420] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[   90.004791][ T6420] mac80211_hwsim hwsim10 wlan1: left allmulticast mode
[   90.023072][ T6420] mac80211_hwsim hwsim10 wlan1: left promiscuous mode
[   90.276307][ T6433] 8021q: VLANs not supported on vxcan1
[   90.870936][ T6457] Driver unsupported XDP return value 0 on prog  (id 46) dev N/A, expect packet loss!
[   91.152827][ T6459] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode
[   91.191625][ T6459] macvtap1: entered promiscuous mode
[   91.206650][ T6459] macvtap1: entered allmulticast mode
[   91.222898][ T6459] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[   91.308000][ T6459] mac80211_hwsim hwsim10 wlan1: left allmulticast mode
[   91.315492][ T6459] mac80211_hwsim hwsim10 wlan1: left promiscuous mode
[   91.673460][ T6484] netlink: 'syz.0.185': attribute type 21 has an invalid length.
[   91.698866][ T6484] netlink: 'syz.0.185': attribute type 6 has an invalid length.
[   91.725821][ T6484] __nla_validate_parse: 47 callbacks suppressed
[   91.725840][ T6484] netlink: 144 bytes leftover after parsing attributes in process `syz.0.185'.
[   92.020587][ T6495] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.029537][ T6495] team0: Port device bond1 added
[   92.190189][ T6497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.188'.
[   92.256308][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'.
[   92.427714][ T6512] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode
[   92.455686][ T6512] macvtap1: entered promiscuous mode
[   92.461350][ T6512] macvtap1: entered allmulticast mode
[   92.467446][ T6512] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[   92.478603][ T6512] mac80211_hwsim hwsim10 wlan1: left allmulticast mode
[   92.493174][ T6512] mac80211_hwsim hwsim10 wlan1: left promiscuous mode
[   92.545437][ T6515] dvmrp0: entered allmulticast mode
[   93.414286][ T6557] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   93.428606][ T6557] macvtap1: entered promiscuous mode
[   93.438284][ T6557] macvtap1: entered allmulticast mode
[   93.444750][ T6557] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   93.473877][ T6557] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   93.482428][ T6557] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[   94.241168][ T6586] netlink: 164 bytes leftover after parsing attributes in process `syz.4.221'.
[   94.378021][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'.
[   94.659134][ T6601] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[   94.708603][ T6601] macvtap1: entered promiscuous mode
[   94.720162][ T6601] macvtap1: entered allmulticast mode
[   94.725602][ T6601] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[   94.774746][ T6601] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[   94.787095][ T6601] mac80211_hwsim hwsim11 wlan1: left promiscuous mode
[   95.242303][ T6628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.237'.
[   95.702138][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'.
[   95.731117][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.243'.
[   95.746437][ T6643] netlink: 'syz.1.243': attribute type 1 has an invalid length.
[   95.756288][ T6643] netlink: 10 bytes leftover after parsing attributes in process `syz.1.243'.
[   95.788489][ T6647] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[   95.796616][ T6649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.245'.
[   95.811682][ T6647] macvtap1: entered promiscuous mode
[   95.817381][ T6647] macvtap1: entered allmulticast mode
[   95.824908][ T5852] block nbd0: Receive control failed (result -107)
[   95.834979][ T6647] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[   95.845994][ T6647] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[   95.854216][ T6647] mac80211_hwsim hwsim11 wlan1: left promiscuous mode
[   95.950522][ T6655] bond1 (unregistering): Released all slaves
[   96.753817][ T6696] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   96.801185][ T6700] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode
[   96.808586][ T6700] macvtap1: entered promiscuous mode
[   96.814230][ T6700] macvtap1: entered allmulticast mode
[   96.819745][ T6700] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[   96.858094][ T6700] mac80211_hwsim hwsim10 wlan1: left allmulticast mode
[   96.870219][ T6700] mac80211_hwsim hwsim10 wlan1: left promiscuous mode
[   97.083019][ T6714] FAULT_INJECTION: forcing a failure.
[   97.083019][ T6714] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   97.136392][ T6714] CPU: 1 UID: 0 PID: 6714 Comm: syz.2.264 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0
[   97.136418][ T6714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   97.136428][ T6714] Call Trace:
[   97.136434][ T6714]  <TASK>
[   97.136441][ T6714]  dump_stack_lvl+0x241/0x360
[   97.136468][ T6714]  ? __pfx_dump_stack_lvl+0x10/0x10
[   97.136485][ T6714]  ? __pfx__printk+0x10/0x10
[   97.136503][ T6714]  ? __pfx_lock_release+0x10/0x10
[   97.136533][ T6714]  should_fail_ex+0x40a/0x550
[   97.136560][ T6714]  _copy_from_user+0x2d/0xb0
[   97.136580][ T6714]  copy_msghdr_from_user+0xae/0x680
[   97.136607][ T6714]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[   97.136625][ T6714]  ? __fget_files+0x2a/0x410
[   97.136649][ T6714]  ? __fget_files+0x2a/0x410
[   97.136677][ T6714]  __sys_sendmsg+0x209/0x350
[   97.136698][ T6714]  ? __pfx___sys_sendmsg+0x10/0x10
[   97.136727][ T6714]  ? do_sys_openat2+0x17a/0x1d0
[   97.136771][ T6714]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   97.136794][ T6714]  ? do_syscall_64+0x100/0x230
[   97.136815][ T6714]  ? do_syscall_64+0xb6/0x230
[   97.136835][ T6714]  do_syscall_64+0xf3/0x230
[   97.136853][ T6714]  ? clear_bhb_loop+0x35/0x90
[   97.136876][ T6714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.136895][ T6714] RIP: 0033:0x7f3fc558d169
[   97.136908][ T6714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   97.136920][ T6714] RSP: 002b:00007f3fc63cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   97.136936][ T6714] RAX: ffffffffffffffda RBX: 00007f3fc57a5fa0 RCX: 00007f3fc558d169
[   97.136947][ T6714] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000005
[   97.136956][ T6714] RBP: 00007f3fc63cc090 R08: 0000000000000000 R09: 0000000000000000
[   97.136965][ T6714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   97.136973][ T6714] R13: 0000000000000000 R14: 00007f3fc57a5fa0 R15: 00007ffe9888e7e8
[   97.136997][ T6714]  </TASK>
[   97.400111][ T6719] __nla_validate_parse: 1 callbacks suppressed
[   97.400129][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.267'.
[   97.425136][ T6722] netlink: 'syz.0.266': attribute type 1 has an invalid length.
[   97.433692][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'.
[   97.450060][ T6722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.266'.
[   97.467042][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.267'.
[   98.192499][ T6745] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   98.226388][ T6745] macvtap1: entered promiscuous mode
[   98.250223][ T6745] macvtap1: entered allmulticast mode
[   98.264429][ T6745] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   98.339634][ T6745] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   98.372912][ T6745] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[   99.062782][ T6768] netlink: 148 bytes leftover after parsing attributes in process `syz.1.284'.
[   99.099758][ T6768] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[   99.308254][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.288'.
[   99.338864][ T6778] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  101.154395][ T6786] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  101.194358][ T6786] macvtap1: entered promiscuous mode
[  101.220100][ T6786] macvtap1: entered allmulticast mode
[  101.252811][ T6786] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  101.290943][ T6786] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  101.301428][ T6786] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[  101.327789][ T6797] netlink: 28 bytes leftover after parsing attributes in process `syz.4.291'.
[  101.888135][ T6817] netlink: 104 bytes leftover after parsing attributes in process `syz.0.300'.
[  101.979683][ T6822] netlink: 104 bytes leftover after parsing attributes in process `syz.4.302'.
[  102.107998][ T6827] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  102.115887][ T6827] macvtap1: entered promiscuous mode
[  102.127165][ T6827] macvtap1: entered allmulticast mode
[  102.150239][ T6827] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  102.221620][ T6827] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  102.241667][ T6827] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[  102.327781][ T6829] bridge_slave_0: left allmulticast mode
[  102.343713][ T6829] bridge_slave_0: left promiscuous mode
[  102.349491][ T6829] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.386202][ T6829] bridge_slave_1: left allmulticast mode
[  102.419979][ T6829] bridge_slave_1: left promiscuous mode
[  102.436145][ T6829] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.452607][ T6829] bond0: (slave bond_slave_0): Releasing backup interface
[  102.465832][ T6829] bond0: (slave bond_slave_1): Releasing backup interface
[  102.512125][ T6829] team0: Port device team_slave_0 removed
[  102.536025][ T6829] team0: Port device team_slave_1 removed
[  102.543548][ T6829] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.551551][ T6829] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.561424][ T6829] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.574458][ T6829] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.596561][ T6829] team0: Port device bond1 removed
[  102.621790][ T6830] team0: Mode changed to "loadbalance"
[  102.899284][ T6860] netlink: 104 bytes leftover after parsing attributes in process `syz.4.315'.
[  102.922272][   T29] audit: type=1800 audit(1741481419.363:2): pid=6856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.314" name="memory.events" dev="tmpfs" ino=367 res=0 errno=0
[  102.983103][   T29] audit: type=1804 audit(1741481419.373:3): pid=6856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.314" name="/newroot/69/memory.events" dev="tmpfs" ino=367 res=1 errno=0
[  103.077543][ T6866] netlink: 72 bytes leftover after parsing attributes in process `syz.2.318'.
[  103.229522][ T6866] veth3: entered promiscuous mode
[  103.248260][ T6866] veth3: entered allmulticast mode
[  103.261138][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.318'.
[  104.083107][ T6890] dvmrp0: entered allmulticast mode
[  104.195462][ T6889] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  104.227932][ T6889] macvtap1: entered promiscuous mode
[  104.280183][ T6889] macvtap1: entered allmulticast mode
[  104.286636][ T6889] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  104.301063][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.329'.
[  104.320310][ T6889] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  104.330251][ T6889] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  104.487087][ T6905] bond1 (unregistering): Released all slaves
[  104.516772][ T6916] netlink: 104 bytes leftover after parsing attributes in process `syz.0.331'.
[  105.360070][ T6941] 8021q: adding VLAN 0 to HW filter on device bond1
[  105.370790][ T6941] bridge0: port 4(bond1) entered blocking state
[  105.378302][ T6941] bridge0: port 4(bond1) entered disabled state
[  105.390467][ T6941] bond1: entered allmulticast mode
[  105.397444][ T6941] bond1: entered promiscuous mode
[  105.411924][ T6941] bridge0: port 4(bond1) entered blocking state
[  105.418518][ T6941] bridge0: port 4(bond1) entered forwarding state
[  105.474546][ T6933] xt_TCPMSS: Only works on TCP SYN packets
[  105.662661][ T1162] bridge0: port 4(bond1) entered disabled state
[  126.798397][ T6951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.342'.
[  126.801541][ T6958] netlink: 104 bytes leftover after parsing attributes in process `syz.4.346'.
[  126.867333][ T6956] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  126.888308][ T6956] macvtap1: entered promiscuous mode
[  126.904990][ T6956] macvtap1: entered allmulticast mode
[  126.921793][ T6956] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  126.938844][ T6956] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  126.951212][ T6956] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  127.220355][ T6979] netlink: 28 bytes leftover after parsing attributes in process `syz.4.347'.
[  127.258228][ T6979] bond2 (unregistering): Released all slaves
[  127.641284][ T6993] macsec0: entered promiscuous mode
[  127.667143][ T6993] veth1_macvtap: left promiscuous mode
[  127.782130][ T6996] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96
[  127.797943][ T6996] rdma_op ffff88805ddc79f0 conn xmit_rdma 0000000000000000
[  127.808026][ T6993] macsec0 (unregistering): left promiscuous mode
[  127.837258][ T7000] netlink: 'syz.4.357': attribute type 10 has an invalid length.
[  127.851829][ T6996] xt_l2tp: invalid flags combination: c
[  127.956196][ T7000] veth0_vlan: left promiscuous mode
[  128.005732][ T7000] veth0_vlan: entered promiscuous mode
[  128.069705][ T7000] team0: Device veth0_vlan failed to register rx_handler
[  128.287180][ T7005] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  128.313823][ T7005] macvtap1: entered promiscuous mode
[  128.329728][ T7005] macvtap1: entered allmulticast mode
[  128.338846][ T7005] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  128.363405][ T7005] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  128.372263][ T7005] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[  128.430397][ T7011] team0: Unable to change to the same mode the team is in
[  128.456890][ T7018] netlink: 28 bytes leftover after parsing attributes in process `syz.1.363'.
[  128.621795][ T7018] bond2 (unregistering): Released all slaves
[  129.008864][ T7034] netlink: 'syz.3.369': attribute type 10 has an invalid length.
[  129.037066][ T7034] team0: Port device veth1_macvtap added
[  129.145996][ T7034] netlink: 'syz.3.369': attribute type 1 has an invalid length.
[  129.171515][ T7034] netlink: 224 bytes leftover after parsing attributes in process `syz.3.369'.
[  129.216078][ T7040] bridge0: port 3(team0) entered disabled state
[  129.226826][ T7041] netlink: 48 bytes leftover after parsing attributes in process `syz.3.369'.
[  129.355718][ T7040] team0 (unregistering): left allmulticast mode
[  129.362159][ T7040] team_slave_0: left allmulticast mode
[  129.367874][ T7040] team_slave_1: left allmulticast mode
[  129.373642][ T7040] bridge0: port 3(team0) entered disabled state
[  129.382775][ T7040] team_slave_0: left promiscuous mode
[  129.395449][ T7040] team0 (unregistering): Port device team_slave_0 removed
[  129.403254][ T7040] team_slave_1: left promiscuous mode
[  129.419750][ T7040] team0 (unregistering): Port device team_slave_1 removed
[  129.734425][ T7059] netlink: 36 bytes leftover after parsing attributes in process `syz.4.377'.
[  130.039396][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'.
[  130.055260][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'.
[  130.064398][ T7073] netlink: 'syz.2.380': attribute type 1 has an invalid length.
[  130.077977][ T7073] netlink: 10 bytes leftover after parsing attributes in process `syz.2.380'.
[  130.163875][ T5852] block nbd1: Receive control failed (result -107)
[  130.494900][ T7089] netlink: 'syz.0.389': attribute type 10 has an invalid length.
[  130.528975][ T7089] team0: Port device netdevsim0 added
[  130.763235][ T7099] bridge_slave_1: left allmulticast mode
[  130.769136][ T7099] bridge_slave_1: left promiscuous mode
[  130.781112][ T7099] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.817761][ T7099] bridge_slave_0: left allmulticast mode
[  130.874987][ T7099] bridge_slave_0: left promiscuous mode
[  130.901842][ T7099] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.135268][ T7100] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  131.706034][ T7135] Cannot find set identified by id 0 to match
[  131.770034][ T7141] netlink: 'syz.2.408': attribute type 1 has an invalid length.
[  132.462303][ T7161] __nla_validate_parse: 19 callbacks suppressed
[  132.462326][ T7161] netlink: 16 bytes leftover after parsing attributes in process `syz.2.415'.
[  132.749367][ T7167] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  132.781380][ T7169] netlink: 104 bytes leftover after parsing attributes in process `syz.4.418'.
[  133.010262][ T7178] netlink: 'syz.1.419': attribute type 10 has an invalid length.
[  133.182488][ T7179] netlink: 'syz.1.419': attribute type 10 has an invalid length.
[  133.200588][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  133.214155][ T7179] netlink: 2 bytes leftover after parsing attributes in process `syz.1.419'.
[  133.427977][ T7183] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.419'.
[  134.930225][ T7178] batman_adv: batadv0: Adding interface: team0
[  134.996949][ T7178] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.041052][ T7185] netlink: 'syz.2.420': attribute type 1 has an invalid length.
[  135.098639][ T7178] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  135.158148][ T7179] team0: entered promiscuous mode
[  135.175342][ T7179] team_slave_0: entered promiscuous mode
[  135.218712][ T7179] team_slave_1: entered promiscuous mode
[  135.256770][ T7179] 8021q: adding VLAN 0 to HW filter on device team0
[  135.307617][ T7179] batman_adv: batadv0: Interface activated: team0
[  135.320055][ T7179] batman_adv: batadv0: Interface deactivated: team0
[  135.336983][ T7179] batman_adv: batadv0: Removing interface: team0
[  136.155882][ T7214] netlink: 52 bytes leftover after parsing attributes in process `syz.3.431'.
[  136.338583][ T7219] netlink: 100 bytes leftover after parsing attributes in process `syz.3.433'.
[  137.051735][ T7231] netlink: 'syz.3.438': attribute type 1 has an invalid length.
[  137.151152][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'.
[  137.191218][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'.
[  137.224854][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'.
[  137.250660][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'.
[  137.603263][    T9] IPVS: starting estimator thread 0...
[  137.622843][ T7255] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20001
[  137.651906][ T7255] xt_l2tp: unknown flags: 10
[  137.653337][ T7260] __nla_validate_parse: 76 callbacks suppressed
[  137.653353][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'.
[  137.740050][ T7258] IPVS: using max 24 ests per chain, 57600 per kthread
[  138.125177][ T7278] netlink: 'syz.0.452': attribute type 1 has an invalid length.
[  138.271545][ T7277] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  138.295330][ T7277] macvtap1: entered promiscuous mode
[  138.328950][ T7277] macvtap1: entered allmulticast mode
[  138.382266][ T7277] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  138.417824][ T7277] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  138.425100][ T7277] mac80211_hwsim hwsim11 wlan1: left promiscuous mode
[  138.630879][ T7290] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode
[  138.677097][ T7290] macvtap1: entered promiscuous mode
[  138.729755][ T7290] macvtap1: entered allmulticast mode
[  138.766848][ T7290] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  138.830754][ T7290] mac80211_hwsim hwsim10 wlan1: left allmulticast mode
[  138.837832][ T7290] mac80211_hwsim hwsim10 wlan1: left promiscuous mode
[  139.012300][ T7311] netlink: 187320 bytes leftover after parsing attributes in process `syz.1.461'.
[  139.026430][ T7311] netlink: zone id is out of range
[  139.060651][ T7311] netlink: zone id is out of range
[  139.065828][ T7311] netlink: zone id is out of range
[  139.073918][ T7312] openvswitch: netlink: Key type 129 is out of range max 32
[  139.127816][ T7311] netlink: zone id is out of range
[  139.179147][ T7311] netlink: zone id is out of range
[  139.189086][ T7311] netlink: zone id is out of range
[  139.198732][ T7311] netlink: zone id is out of range
[  139.214049][ T7311] netlink: zone id is out of range
[  139.231040][ T7311] netlink: zone id is out of range
[  139.422184][ T7322] netlink: 'syz.3.466': attribute type 1 has an invalid length.
[  139.529364][ T7325] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  139.581423][ T7325] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  139.637369][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'.
[  139.705950][ T7338] netlink: 48 bytes leftover after parsing attributes in process `syz.4.470'.
[  139.772166][ T7338] netlink: 48 bytes leftover after parsing attributes in process `syz.4.470'.
[  139.864266][ T7338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.470'.
[  139.973547][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.474'.
[  140.009956][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'.
[  140.295238][ T7365] netlink: 'syz.2.482': attribute type 1 has an invalid length.
[  140.373241][ T7372] Cannot find del_set index 1 as target
[  140.538918][ T7380] netlink: 104 bytes leftover after parsing attributes in process `syz.2.487'.
[  140.787364][ T7388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.862377][ T7389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.883387][ T7388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.625214][ T7403] netlink: 'syz.4.497': attribute type 1 has an invalid length.
[  145.276684][ T7445] xt_bpf: check failed: parse error
[  145.351823][ T7447] netlink: 48 bytes leftover after parsing attributes in process `syz.1.514'.
[  145.379111][ T7447] netlink: 100 bytes leftover after parsing attributes in process `syz.1.514'.
[  145.683733][ T7463] netlink: 'syz.1.519': attribute type 5 has an invalid length.
[  145.735223][ T7465] vlan2: entered allmulticast mode
[  145.803309][ T7466] bridge_slave_0: left allmulticast mode
[  145.809496][ T7466] bridge_slave_0: left promiscuous mode
[  145.817211][ T7466] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.829143][ T7466] bridge_slave_1: left allmulticast mode
[  145.839233][ T7466] bridge_slave_1: left promiscuous mode
[  145.846065][ T7466] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.874616][ T7466] bond1: left promiscuous mode
[  145.883446][ T7466] bond0: (slave bond_slave_0): Releasing backup interface
[  145.902705][ T7466] bond0: (slave bond_slave_1): Releasing backup interface
[  145.931675][ T7466] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.939142][ T7466] batman_adv: batadv0: Removing interface: batadv_slave_0
[  146.000756][ T7466] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  146.008509][ T7466] batman_adv: batadv0: Removing interface: batadv_slave_1
[  146.043381][ T7466] bond1: left allmulticast mode
[  146.056380][ T7466] bridge0: port 4(bond1) entered disabled state
[  146.198912][ T7471] veth3: entered promiscuous mode
[  146.229553][ T7471] veth3: entered allmulticast mode
[  146.754935][ T7489] FAULT_INJECTION: forcing a failure.
[  146.754935][ T7489] name failslab, interval 1, probability 0, space 0, times 0
[  146.822782][ T7489] CPU: 1 UID: 0 PID: 7489 Comm: syz.4.529 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0
[  146.822810][ T7489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  146.822820][ T7489] Call Trace:
[  146.822826][ T7489]  <TASK>
[  146.822832][ T7489]  dump_stack_lvl+0x241/0x360
[  146.822864][ T7489]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.822882][ T7489]  ? __pfx__printk+0x10/0x10
[  146.822900][ T7489]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  146.822923][ T7489]  ? __pfx___might_resched+0x10/0x10
[  146.822942][ T7489]  ? aa_label_sk_perm+0x4f3/0x6c0
[  146.822966][ T7489]  should_fail_ex+0x40a/0x550
[  146.822993][ T7489]  should_failslab+0xac/0x100
[  146.823015][ T7489]  kmem_cache_alloc_node_noprof+0x77/0x380
[  146.823035][ T7489]  ? __alloc_skb+0x1c3/0x440
[  146.823055][ T7489]  __alloc_skb+0x1c3/0x440
[  146.823075][ T7489]  ? __pfx___alloc_skb+0x10/0x10
[  146.823100][ T7489]  netlink_sendmsg+0x634/0xcb0
[  146.823132][ T7489]  ? __pfx_netlink_sendmsg+0x10/0x10
[  146.823157][ T7489]  ? aa_sock_msg_perm+0x91/0x160
[  146.823184][ T7489]  ? __pfx_netlink_sendmsg+0x10/0x10
[  146.823203][ T7489]  __sock_sendmsg+0x221/0x270
[  146.823227][ T7489]  ____sys_sendmsg+0x53a/0x860
[  146.823252][ T7489]  ? __pfx_____sys_sendmsg+0x10/0x10
[  146.823267][ T7489]  ? __fget_files+0x2a/0x410
[  146.823291][ T7489]  ? __fget_files+0x2a/0x410
[  146.823320][ T7489]  __sys_sendmsg+0x269/0x350
[  146.823342][ T7489]  ? __pfx___sys_sendmsg+0x10/0x10
[  146.823371][ T7489]  ? do_sys_openat2+0x17a/0x1d0
[  146.823416][ T7489]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  146.823440][ T7489]  ? do_syscall_64+0x100/0x230
[  146.823462][ T7489]  ? do_syscall_64+0xb6/0x230
[  146.823483][ T7489]  do_syscall_64+0xf3/0x230
[  146.823500][ T7489]  ? clear_bhb_loop+0x35/0x90
[  146.823523][ T7489]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.823543][ T7489] RIP: 0033:0x7f571fd8d169
[  146.823558][ T7489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.823577][ T7489] RSP: 002b:00007f5720c57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  146.823595][ T7489] RAX: ffffffffffffffda RBX: 00007f571ffa5fa0 RCX: 00007f571fd8d169
[  146.823606][ T7489] RDX: 0000000000004000 RSI: 0000400000000280 RDI: 0000000000000003
[  146.823617][ T7489] RBP: 00007f5720c57090 R08: 0000000000000000 R09: 0000000000000000
[  146.823626][ T7489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  146.823636][ T7489] R13: 0000000000000000 R14: 00007f571ffa5fa0 R15: 00007fff8b1508e8
[  146.823662][ T7489]  </TASK>
[  148.723001][ T7469] net_ratelimit: 1 callbacks suppressed
[  148.723020][ T7469] Set syz1 is full, maxelem 65536 reached
[  149.776257][ T7505] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode
[  149.785116][ T7505] macvtap1: entered promiscuous mode
[  149.800524][ T7505] macvtap1: entered allmulticast mode
[  149.825274][ T7505] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  149.864800][ T7505] mac80211_hwsim hwsim10 wlan1: left allmulticast mode
[  149.877060][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.535'.
[  149.882365][ T7505] mac80211_hwsim hwsim10 wlan1: left promiscuous mode
[  149.938735][ T7509] netlink: 'syz.4.535': attribute type 21 has an invalid length.
[  150.537491][ T7540] sctp: [Deprecated]: syz.1.540 (pid 7540) Use of struct sctp_assoc_value in delayed_ack socket option.
[  150.537491][ T7540] Use struct sctp_sack_info instead
[  150.624176][ T7543] netlink: 104 bytes leftover after parsing attributes in process `syz.0.545'.
[  150.646683][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.540'.
[  152.607095][ T7560] FAULT_INJECTION: forcing a failure.
[  152.607095][ T7560] name failslab, interval 1, probability 0, space 0, times 0
[  152.645323][ T7560] CPU: 1 UID: 0 PID: 7560 Comm: syz.0.550 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0
[  152.645348][ T7560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  152.645358][ T7560] Call Trace:
[  152.645364][ T7560]  <TASK>
[  152.645372][ T7560]  dump_stack_lvl+0x241/0x360
[  152.645398][ T7560]  ? __pfx_dump_stack_lvl+0x10/0x10
[  152.645416][ T7560]  ? __pfx__printk+0x10/0x10
[  152.645446][ T7560]  should_fail_ex+0x40a/0x550
[  152.645474][ T7560]  should_failslab+0xac/0x100
[  152.645496][ T7560]  __kmalloc_cache_noprof+0x70/0x390
[  152.645516][ T7560]  ? sctp_add_bind_addr+0x89/0x3a0
[  152.645539][ T7560]  sctp_add_bind_addr+0x89/0x3a0
[  152.645562][ T7560]  sctp_copy_local_addr_list+0x311/0x500
[  152.645584][ T7560]  ? sctp_copy_local_addr_list+0xab/0x500
[  152.645604][ T7560]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  152.645625][ T7560]  ? sctp_v6_is_any+0x60/0x70
[  152.645646][ T7560]  ? sctp_copy_one_addr+0x94/0x360
[  152.645669][ T7560]  sctp_bind_addr_copy+0xad/0x3b0
[  152.645688][ T7560]  ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190
[  152.645716][ T7560]  sctp_connect_new_asoc+0x2f3/0x6c0
[  152.645740][ T7560]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  152.645760][ T7560]  ? sctp_sendmsg+0xf1a/0x35d0
[  152.645787][ T7560]  ? sctp_endpoint_lookup_assoc+0xc9/0x250
[  152.645806][ T7560]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  152.645830][ T7560]  sctp_sendmsg+0x1f64/0x35d0
[  152.645869][ T7560]  ? __pfx_sctp_sendmsg+0x10/0x10
[  152.645894][ T7560]  ? aa_sk_perm+0x96d/0xab0
[  152.645932][ T7560]  ? inet_sendmsg+0x330/0x390
[  152.645953][ T7560]  __sock_sendmsg+0x1a6/0x270
[  152.645977][ T7560]  ____sys_sendmsg+0x53a/0x860
[  152.646010][ T7560]  ? __pfx_____sys_sendmsg+0x10/0x10
[  152.646025][ T7560]  ? __fget_files+0x2a/0x410
[  152.646049][ T7560]  ? __fget_files+0x2a/0x410
[  152.646079][ T7560]  __sys_sendmmsg+0x36a/0x720
[  152.646109][ T7560]  ? __pfx___sys_sendmmsg+0x10/0x10
[  152.646139][ T7560]  ? __pfx_lock_release+0x10/0x10
[  152.646159][ T7560]  ? kstrtouint_from_user+0x128/0x190
[  152.646202][ T7560]  ? ksys_write+0x22a/0x2b0
[  152.646219][ T7560]  ? __pfx_lock_release+0x10/0x10
[  152.646246][ T7560]  ? sb_end_write+0xe9/0x1c0
[  152.646273][ T7560]  ? vfs_write+0x7fa/0xd10
[  152.646293][ T7560]  ? __mutex_unlock_slowpath+0x227/0x800
[  152.646342][ T7560]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  152.646362][ T7560]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  152.646382][ T7560]  ? do_syscall_64+0x100/0x230
[  152.646403][ T7560]  __x64_sys_sendmmsg+0xa0/0xb0
[  152.646419][ T7560]  do_syscall_64+0xf3/0x230
[  152.646434][ T7560]  ? clear_bhb_loop+0x35/0x90
[  152.646455][ T7560]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.646472][ T7560] RIP: 0033:0x7f6446f8d169
[  152.646486][ T7560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.646497][ T7560] RSP: 002b:00007f6447e96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  152.646515][ T7560] RAX: ffffffffffffffda RBX: 00007f64471a5fa0 RCX: 00007f6446f8d169
[  152.646525][ T7560] RDX: 0000000000000001 RSI: 0000400000000940 RDI: 0000000000000003
[  152.646534][ T7560] RBP: 00007f6447e96090 R08: 0000000000000000 R09: 0000000000000000
[  152.646542][ T7560] R10: 0000000000048081 R11: 0000000000000246 R12: 0000000000000002
[  152.646551][ T7560] R13: 0000000000000000 R14: 00007f64471a5fa0 R15: 00007ffedb980a18
[  152.646574][ T7560]  </TASK>
[  153.062050][ T7567] netlink: 17 bytes leftover after parsing attributes in process `syz.3.552'.
[  153.495733][ T7582] netlink: 'syz.3.557': attribute type 3 has an invalid length.
[  153.514667][ T7582] netlink: 20 bytes leftover after parsing attributes in process `syz.3.557'.
[  153.746133][ T7574] netlink: 240 bytes leftover after parsing attributes in process `syz.4.549'.
[  154.866009][ T7620] netlink: 16 bytes leftover after parsing attributes in process `syz.1.573'.
[  155.172254][ T7632] netlink: 'syz.0.578': attribute type 10 has an invalid length.
[  155.193045][ T7632] team0: Device veth1_macvtap failed to register rx_handler
[  155.247226][ T7632] netlink: 'syz.0.578': attribute type 1 has an invalid length.
[  155.256466][ T7632] netlink: 224 bytes leftover after parsing attributes in process `syz.0.578'.
[  155.275243][ T7632] netlink: 48 bytes leftover after parsing attributes in process `syz.0.578'.
[  155.695480][ T7646] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  155.780076][ T7646] syzkaller1: entered promiscuous mode
[  155.799623][ T7646] syzkaller1: entered allmulticast mode
[  156.053991][ T7663] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode
[  156.072580][ T7663] macvtap1: entered promiscuous mode
[  156.078167][ T7663] macvtap1: entered allmulticast mode
[  156.088528][ T7663] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  156.113090][ T7663] mac80211_hwsim hwsim10 wlan1: left allmulticast mode
[  156.120386][ T7663] mac80211_hwsim hwsim10 wlan1: left promiscuous mode
[  156.359679][   T29] audit: type=1800 audit(1741481472.803:4): pid=7679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.592" name="memory.events" dev="tmpfs" ino=682 res=0 errno=0
[  156.440668][   T29] audit: type=1804 audit(1741481472.843:5): pid=7679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.592" name="memory.events" dev="tmpfs" ino=682 res=1 errno=0
[  156.658776][ T7688] netlink: 104 bytes leftover after parsing attributes in process `syz.3.595'.
[  157.382110][ T7708] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  157.951381][ T7722] batadv_slave_1: entered promiscuous mode
[  157.958417][ T7721] batadv_slave_1: left promiscuous mode
[  158.025164][ T7726] netlink: 100 bytes leftover after parsing attributes in process `syz.1.612'.
[  158.856674][ T7763] vlan2: entered promiscuous mode
[  159.060641][ T7775] netlink: 20 bytes leftover after parsing attributes in process `syz.0.630'.
[  159.666849][ T7801] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  159.700701][ T7801] macvtap1: entered promiscuous mode
[  159.718817][ T7801] macvtap1: entered allmulticast mode
[  159.736195][ T7801] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  159.782261][ T7801] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  159.797374][ T7801] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  160.582388][ T7844] netlink: 'syz.1.652': attribute type 7 has an invalid length.
[  160.590828][ T7844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.652'.
[  160.600324][ T7844] netlink: 20 bytes leftover after parsing attributes in process `syz.1.652'.
[  160.917203][ T7854] netlink: 'syz.2.661': attribute type 2 has an invalid length.
[  160.939545][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'.
[  161.043394][ T7822] netlink: 240 bytes leftover after parsing attributes in process `syz.0.650'.
[  161.788942][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.675'.
[  162.528553][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'.
[  162.604450][ T7923] macvtap1: entered promiscuous mode
[  162.616355][ T7923] syz_tun: entered promiscuous mode
[  162.639157][ T7923] macvtap1: entered allmulticast mode
[  162.659501][ T7923] syz_tun: entered allmulticast mode
[  163.208876][ T5838] Bluetooth: hci2: command 0x0405 tx timeout
[  163.422954][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.703'.
[  163.476225][ T7959] netlink: 36 bytes leftover after parsing attributes in process `syz.1.705'.
[  163.477408][ T7961] Cannot find map_set index 0 as target
[  164.527122][ T7982] netlink: 240 bytes leftover after parsing attributes in process `syz.1.709'.
[  165.969464][ T7996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'.
[  166.283315][ T8010] SET target dimension over the limit!
[  166.621856][ T8025] netlink: 16 bytes leftover after parsing attributes in process `syz.0.733'.
[  166.644846][ T8026] netlink: 16 bytes leftover after parsing attributes in process `syz.0.733'.
[  166.663087][ T8025] netlink: 'syz.0.733': attribute type 10 has an invalid length.
[  166.835410][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.738'.
[  166.844758][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.738'.
[  167.250257][ T8055] IPVS: ip_vs_add_dest(): server weight less than zero
[  167.257287][    T9] IPVS: starting estimator thread 0...
[  167.366538][ T8057] IPVS: using max 27 ests per chain, 64800 per kthread
[  167.469678][ T8068] netlink: 104 bytes leftover after parsing attributes in process `syz.4.753'.
[  167.689495][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.757'.
[  167.979769][ T8086] macvtap2: entered promiscuous mode
[  168.018539][ T8086] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  168.045303][ T8086] macvtap2: entered allmulticast mode
[  168.065299][ T8086] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  168.101384][ T8086] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  168.108721][ T8086] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  168.517187][ T8109] vlan2: entered allmulticast mode
[  168.541951][ T8109] bond0: entered allmulticast mode
[  168.565536][ T8109] bond0: left allmulticast mode
[  168.800254][ T8123] xt_TCPMSS: Only works on TCP SYN packets
[  168.823570][ T8123] xt_TCPMSS: Only works on TCP SYN packets
[  168.837916][ T8122] tun0: tun_chr_ioctl cmd 1074025675
[  168.845933][ T8122] tun0: persist enabled
[  168.854342][ T8122] ip6t_srh: unknown srh match flags  5294
[  168.964946][ T8128] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  168.982873][ T8128] macvtap1: entered promiscuous mode
[  168.988525][ T8128] macvtap1: entered allmulticast mode
[  168.998922][ T8128] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  169.013455][ T8128] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  169.027468][ T8128] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  169.042607][ T8134] openvswitch: netlink: Actions may not be safe on all matching packets
[  169.611054][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.791'.
[  169.625946][ T8156] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  169.646255][ T8156] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  170.231444][ T8181] veth3: entered promiscuous mode
[  170.256953][ T8181] veth5: entered promiscuous mode
[  170.281169][ T8185] netlink: 'syz.3.804': attribute type 4 has an invalid length.
[  170.289943][ T8181] veth7: entered promiscuous mode
[  170.312817][ T8181] veth9: entered promiscuous mode
[  170.350379][ T8181] veth11: entered promiscuous mode
[  170.378874][ T8181] veth13: entered promiscuous mode
[  170.406316][ T8181] veth15: entered promiscuous mode
[  170.425415][ T8181] veth17: entered promiscuous mode
[  170.468737][ T8181] veth19: entered promiscuous mode
[  170.515645][ T8181] veth21: entered promiscuous mode
[  170.545047][ T8181] veth23: entered promiscuous mode
[  170.565941][ T8181] veth25: entered promiscuous mode
[  170.591749][ T8181] veth27: entered promiscuous mode
[  170.663388][ T8181] veth29: entered promiscuous mode
[  170.689561][ T8181] veth31: entered promiscuous mode
[  170.716159][ T8181] veth33: entered promiscuous mode
[  170.747013][ T8181] veth35: entered promiscuous mode
[  170.784973][ T8181] veth37: entered promiscuous mode
[  170.821824][ T8181] veth39: entered promiscuous mode
[  170.854666][ T8181] veth41: entered promiscuous mode
[  170.907724][ T8181] veth43: entered promiscuous mode
[  170.940582][ T8181] veth45: entered promiscuous mode
[  170.987157][ T8181] veth47: entered promiscuous mode
[  173.714343][ T8263] netlink: 'syz.0.837': attribute type 21 has an invalid length.
[  173.722545][ T8263] netlink: 176 bytes leftover after parsing attributes in process `syz.0.837'.
[  173.803648][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.836'.
[  174.093416][ T8280] x_tables: duplicate underflow at hook 2
[  175.550712][ T8281] ÿÿÿÿÿÿ: renamed from vlan1 (while UP)
[  176.868664][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'.
[  176.892391][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.865'.
[  177.491520][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.872'.
[  177.522539][ T8355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.872'.
[  177.725361][ T8355] nbd: socks must be embedded in a SOCK_ITEM attr
[  177.746655][ T6960] block nbd64: NBD_DISCONNECT
[  178.565947][ T8370] SET target dimension over the limit!
[  179.201391][ T8373] netlink: 'syz.4.875': attribute type 1 has an invalid length.
[  179.379876][ T8380] 8021q: adding VLAN 0 to HW filter on device bond4
[  179.390690][ T8380] bond3: (slave bond4): making interface the new active one
[  179.399472][ T8380] bond3: (slave bond4): Enslaving as an active interface with an up link
[  179.415570][ T8379] bond0: (slave bond_slave_0): Releasing backup interface
[  179.432484][ T8379] bond0: (slave bond_slave_1): Releasing backup interface
[  179.537309][ T8379] team_slave_0: left promiscuous mode
[  179.596059][ T8379] team0: Port device team_slave_0 removed
[  179.605364][ T8379] team_slave_1: left promiscuous mode
[  179.617639][ T8379] team0: Port device team_slave_1 removed
[  179.642649][ T8379] batman_adv: batadv0: Removing interface: batadv_slave_0
[  179.667963][ T8379] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.707283][ T8382] team0: Mode changed to "loadbalance"
[  180.648923][ T8392] netlink: 240 bytes leftover after parsing attributes in process `syz.3.878'.
[  180.659972][ T8394] netlink: 240 bytes leftover after parsing attributes in process `syz.0.879'.
[  180.680381][ T8418] netlink: 104 bytes leftover after parsing attributes in process `syz.4.886'.
[  180.913276][ T8425] SET target dimension over the limit!
[  181.363479][ T8440] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  181.397130][ T8440] macvtap1: entered promiscuous mode
[  181.404137][ T8440] macvtap1: entered allmulticast mode
[  181.405917][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.899'.
[  181.409775][ T8440] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  181.446412][ T8440] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  181.455427][ T8440] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[  181.720614][ T8459] SET target dimension over the limit!
[  181.986572][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.907'.
[  182.016175][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.907'.
[  182.361798][ T8482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'.
[  182.404188][ T8482] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  182.680292][ T8493] netlink: 160 bytes leftover after parsing attributes in process `syz.3.917'.
[  182.709711][ T8493] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  182.730595][ T8491] netlink: 'syz.0.916': attribute type 10 has an invalid length.
[  182.763898][ T8491] batman_adv: batadv0: Adding interface: team0
[  182.780760][ T8491] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.781209][ T8494] netlink: 'syz.0.916': attribute type 10 has an invalid length.
[  182.784737][ T8497] netlink: 'syz.3.917': attribute type 3 has an invalid length.
[  182.863747][ T8491] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  182.875587][ T8497] netlink: 20 bytes leftover after parsing attributes in process `syz.3.917'.
[  182.886843][ T8494] netlink: 2 bytes leftover after parsing attributes in process `syz.0.916'.
[  182.918235][ T8494] team0: entered promiscuous mode
[  182.936417][ T8494] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  182.973727][ T8494] 8021q: adding VLAN 0 to HW filter on device team0
[  183.000918][ T8494] batman_adv: batadv0: Interface activated: team0
[  183.037986][ T8494] batman_adv: batadv0: Interface deactivated: team0
[  183.060402][ T8494] batman_adv: batadv0: Removing interface: team0
[  183.093690][ T8494] bridge0: port 1(team0) entered blocking state
[  183.100437][ T8494] bridge0: port 1(team0) entered disabled state
[  183.106970][ T8494] team0: entered allmulticast mode
[  183.112498][ T8494] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:562
[  183.125426][ T8494] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 8494, name: syz.0.916
[  183.134750][ T8494] preempt_count: 0, expected: 0
[  183.139920][ T8494] RCU nest depth: 1, expected: 0
[  183.144978][ T8494] 2 locks held by syz.0.916/8494:
[  183.152604][ T8494]  #0: ffffffff8fed6908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90
[  183.175568][ T8494]  #1: ffffffff8eb392e0 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330
[  183.203691][ T8494] CPU: 1 UID: 0 PID: 8494 Comm: syz.0.916 Not tainted 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0
[  183.203719][ T8494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  183.203734][ T8494] Call Trace:
[  183.203741][ T8494]  <TASK>
[  183.203748][ T8494]  dump_stack_lvl+0x241/0x360
[  183.203777][ T8494]  ? __pfx_dump_stack_lvl+0x10/0x10
[  183.203796][ T8494]  ? __pfx__printk+0x10/0x10
[  183.203825][ T8494]  __might_resched+0x5d4/0x780
[  183.203843][ T8494]  ? __wake_up_klogd+0xd5/0x110
[  183.203866][ T8494]  ? __wake_up_klogd+0x1c/0x110
[  183.203887][ T8494]  ? __pfx___might_resched+0x10/0x10
[  183.203914][ T8494]  ? __lock_acquire+0x1397/0x2100
[  183.203946][ T8494]  __mutex_lock+0x126/0x1010
[  183.203978][ T8494]  ? dev_set_allmulti+0x11c/0x270
[  183.204005][ T8494]  ? __pfx___mutex_lock+0x10/0x10
[  183.204025][ T8494]  ? __pfx_lock_acquire+0x10/0x10
[  183.204053][ T8494]  ? netdev_info+0x122/0x170
[  183.204068][ T8494]  ? __pfx_ib_device_get_by_netdev+0x10/0x10
[  183.204089][ T8494]  ? hsr_netdev_notify+0x295/0xb50
[  183.204111][ T8494]  ? netif_set_allmulti+0x1a2/0x380
[  183.204140][ T8494]  dev_set_allmulti+0x11c/0x270
[  183.204170][ T8494]  team_change_rx_flags+0x1a8/0x330
[  183.204191][ T8494]  ? team_change_rx_flags+0x29/0x330
[  183.204212][ T8494]  ? __pfx_team_change_rx_flags+0x10/0x10
[  183.204231][ T8494]  netif_set_allmulti+0x20e/0x380
[  183.204263][ T8494]  dev_set_allmulti+0x143/0x270
[  183.204293][ T8494]  br_add_if+0x317/0xef0
[  183.204311][ T8494]  ? lockdep_hardirqs_on+0x99/0x150
[  183.204358][ T8494]  do_set_master+0x579/0x730
[  183.204392][ T8494]  do_setlink+0xfee/0x40f0
[  183.204442][ T8494]  ? __pfx_do_setlink+0x10/0x10
[  183.204479][ T8494]  ? __pfx___might_resched+0x10/0x10
[  183.204504][ T8494]  ? __pfx___mutex_trylock_common+0x10/0x10
[  183.204528][ T8494]  ? rcu_is_watching+0x15/0xb0
[  183.204547][ T8494]  ? trace_contention_end+0x3c/0x120
[  183.204566][ T8494]  ? __mutex_lock+0x397/0x1010
[  183.204588][ T8494]  ? __pfx_aa_get_newest_label+0x10/0x10
[  183.204618][ T8494]  ? rtnl_newlink+0xc4c/0x1d90
[  183.204645][ T8494]  ? __pfx___mutex_lock+0x10/0x10
[  183.204675][ T8494]  ? ns_capable+0x8a/0xf0
[  183.204696][ T8494]  ? rtnl_link_get_net_capable+0x168/0x340
[  183.204728][ T8494]  rtnl_newlink+0x15a6/0x1d90
[  183.204748][ T8494]  ? stack_depot_save_flags+0x37/0x940
[  183.204784][ T8494]  ? __pfx_rtnl_newlink+0x10/0x10
[  183.204803][ T8494]  ? __netlink_deliver_tap+0x561/0x7f0
[  183.204824][ T8494]  ? __pfx_validate_chain+0x10/0x10
[  183.204839][ T8494]  ? __sock_sendmsg+0x221/0x270
[  183.204858][ T8494]  ? ____sys_sendmsg+0x53a/0x860
[  183.204872][ T8494]  ? __sys_sendmsg+0x269/0x350
[  183.204886][ T8494]  ? do_syscall_64+0xf3/0x230
[  183.204902][ T8494]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.204942][ T8494]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  183.204966][ T8494]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  183.204994][ T8494]  ? mark_lock+0x9a/0x360
[  183.205013][ T8494]  ? __lock_acquire+0x1397/0x2100
[  183.205063][ T8494]  ? __pfx_lock_release+0x10/0x10
[  183.205093][ T8494]  ? __pfx_rtnl_newlink+0x10/0x10
[  183.205112][ T8494]  rtnetlink_rcv_msg+0x791/0xcf0
[  183.205132][ T8494]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  183.205157][ T8494]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  183.205183][ T8494]  ? ref_tracker_free+0x643/0x7e0
[  183.205204][ T8494]  netlink_rcv_skb+0x206/0x480
[  183.205226][ T8494]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  183.205248][ T8494]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  183.205291][ T8494]  ? netlink_deliver_tap+0x2e/0x1b0
[  183.205313][ T8494]  netlink_unicast+0x7f6/0x990
[  183.205348][ T8494]  ? __pfx_netlink_unicast+0x10/0x10
[  183.205365][ T8494]  ? __virt_addr_valid+0x45f/0x530
[  183.205381][ T8494]  ? __phys_addr_symbol+0x2f/0x70
[  183.205396][ T8494]  ? __check_object_size+0x47a/0x730
[  183.205422][ T8494]  netlink_sendmsg+0x8de/0xcb0
[  183.205454][ T8494]  ? __pfx_netlink_sendmsg+0x10/0x10
[  183.205479][ T8494]  ? aa_sock_msg_perm+0x91/0x160
[  183.205504][ T8494]  ? __pfx_netlink_sendmsg+0x10/0x10
[  183.205523][ T8494]  __sock_sendmsg+0x221/0x270
[  183.205545][ T8494]  ____sys_sendmsg+0x53a/0x860
[  183.205571][ T8494]  ? __pfx_____sys_sendmsg+0x10/0x10
[  183.205586][ T8494]  ? __fget_files+0x2a/0x410
[  183.205610][ T8494]  ? __fget_files+0x2a/0x410
[  183.205639][ T8494]  __sys_sendmsg+0x269/0x350
[  183.205655][ T8494]  ? __pfx_futex_wake+0x10/0x10
[  183.205680][ T8494]  ? __pfx___sys_sendmsg+0x10/0x10
[  183.205735][ T8494]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  183.205758][ T8494]  ? do_syscall_64+0x100/0x230
[  183.205778][ T8494]  ? do_syscall_64+0xb6/0x230
[  183.205798][ T8494]  do_syscall_64+0xf3/0x230
[  183.205815][ T8494]  ? clear_bhb_loop+0x35/0x90
[  183.205838][ T8494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.205858][ T8494] RIP: 0033:0x7f6446f8d169
[  183.205885][ T8494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  183.205898][ T8494] RSP: 002b:00007f6447e75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  183.205916][ T8494] RAX: ffffffffffffffda RBX: 00007f64471a6080 RCX: 00007f6446f8d169
[  183.205928][ T8494] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 000000000000000b
[  183.205938][ T8494] RBP: 00007f644700e2a0 R08: 0000000000000000 R09: 0000000000000000
[  183.205948][ T8494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  183.205958][ T8494] R13: 0000000000000000 R14: 00007f64471a6080 R15: 00007ffedb980a18
[  183.205982][ T8494]  </TASK>
[  183.209528][ T8494] 
[  183.737033][ T8494] =============================
[  183.741868][ T8494] [ BUG: Invalid wait context ]
[  183.746699][ T8494] 6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0 Tainted: G        W         
[  183.755270][ T8494] -----------------------------
[  183.760109][ T8494] syz.0.916/8494 is trying to lock:
[  183.765296][ T8494] ffff88805d26cd28 (&dev->lock){+.+.}-{4:4}, at: dev_set_allmulti+0x11c/0x270
[  183.774173][ T8494] other info that might help us debug this:
[  183.780082][ T8494] context-{5:5}
[  183.783524][ T8494] 2 locks held by syz.0.916/8494:
[  183.788544][ T8494]  #0: ffffffff8fed6908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90
[  183.797593][ T8494]  #1: ffffffff8eb392e0 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330
[  183.807460][ T8494] stack backtrace:
[  183.811175][ T8494] CPU: 1 UID: 0 PID: 8494 Comm: syz.0.916 Tainted: G        W          6.14.0-rc5-syzkaller-01147-g8ef890df4031 #0
[  183.811195][ T8494] Tainted: [W]=WARN
[  183.811200][ T8494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  183.811207][ T8494] Call Trace:
[  183.811213][ T8494]  <TASK>
[  183.811220][ T8494]  dump_stack_lvl+0x241/0x360
[  183.811238][ T8494]  ? __pfx_dump_stack_lvl+0x10/0x10
[  183.811252][ T8494]  ? __pfx__printk+0x10/0x10
[  183.811268][ T8494]  __lock_acquire+0x15a8/0x2100
[  183.811296][ T8494]  lock_acquire+0x1ed/0x550
[  183.811312][ T8494]  ? dev_set_allmulti+0x11c/0x270
[  183.811333][ T8494]  ? __pfx_lock_acquire+0x10/0x10
[  183.811349][ T8494]  ? __wake_up_klogd+0x1c/0x110
[  183.811365][ T8494]  ? __pfx___might_resched+0x10/0x10
[  183.811382][ T8494]  ? __lock_acquire+0x1397/0x2100
[  183.811400][ T8494]  __mutex_lock+0x19c/0x1010
[  183.811415][ T8494]  ? dev_set_allmulti+0x11c/0x270
[  183.811435][ T8494]  ? dev_set_allmulti+0x11c/0x270
[  183.811452][ T8494]  ? __pfx___mutex_lock+0x10/0x10
[  183.811466][ T8494]  ? __pfx_lock_acquire+0x10/0x10
[  183.811483][ T8494]  ? netdev_info+0x122/0x170
[  183.811495][ T8494]  ? __pfx_ib_device_get_by_netdev+0x10/0x10
[  183.811511][ T8494]  ? hsr_netdev_notify+0x295/0xb50
[  183.811527][ T8494]  ? netif_set_allmulti+0x1a2/0x380
[  183.811546][ T8494]  dev_set_allmulti+0x11c/0x270
[  183.811564][ T8494]  team_change_rx_flags+0x1a8/0x330
[  183.811584][ T8494]  ? team_change_rx_flags+0x29/0x330
[  183.811599][ T8494]  ? __pfx_team_change_rx_flags+0x10/0x10
[  183.811613][ T8494]  netif_set_allmulti+0x20e/0x380
[  183.811632][ T8494]  dev_set_allmulti+0x143/0x270
[  183.811651][ T8494]  br_add_if+0x317/0xef0
[  183.811664][ T8494]  ? lockdep_hardirqs_on+0x99/0x150
[  183.811681][ T8494]  do_set_master+0x579/0x730
[  183.811702][ T8494]  do_setlink+0xfee/0x40f0
[  183.811727][ T8494]  ? __pfx_do_setlink+0x10/0x10
[  183.811748][ T8494]  ? __pfx___might_resched+0x10/0x10
[  183.811764][ T8494]  ? __pfx___mutex_trylock_common+0x10/0x10
[  183.811780][ T8494]  ? rcu_is_watching+0x15/0xb0
[  183.811793][ T8494]  ? trace_contention_end+0x3c/0x120
[  183.811807][ T8494]  ? __mutex_lock+0x397/0x1010
[  183.811821][ T8494]  ? __pfx_aa_get_newest_label+0x10/0x10
[  183.811841][ T8494]  ? rtnl_newlink+0xc4c/0x1d90
[  183.811857][ T8494]  ? __pfx___mutex_lock+0x10/0x10
[  183.811873][ T8494]  ? ns_capable+0x8a/0xf0
[  183.811888][ T8494]  ? rtnl_link_get_net_capable+0x168/0x340
[  183.811906][ T8494]  rtnl_newlink+0x15a6/0x1d90
[  183.811922][ T8494]  ? stack_depot_save_flags+0x37/0x940
[  183.811945][ T8494]  ? __pfx_rtnl_newlink+0x10/0x10
[  183.811960][ T8494]  ? __netlink_deliver_tap+0x561/0x7f0
[  183.811977][ T8494]  ? __pfx_validate_chain+0x10/0x10
[  183.811989][ T8494]  ? __sock_sendmsg+0x221/0x270
[  183.812005][ T8494]  ? ____sys_sendmsg+0x53a/0x860
[  183.812017][ T8494]  ? __sys_sendmsg+0x269/0x350
[  183.812028][ T8494]  ? do_syscall_64+0xf3/0x230
[  183.812043][ T8494]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.812066][ T8494]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  183.812083][ T8494]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  183.812103][ T8494]  ? mark_lock+0x9a/0x360
[  183.812115][ T8494]  ? __lock_acquire+0x1397/0x2100
[  183.812141][ T8494]  ? __pfx_lock_release+0x10/0x10
[  183.812163][ T8494]  ? __pfx_rtnl_newlink+0x10/0x10
[  183.812179][ T8494]  rtnetlink_rcv_msg+0x791/0xcf0
[  183.812195][ T8494]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  183.812212][ T8494]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  183.812230][ T8494]  ? ref_tracker_free+0x643/0x7e0
[  183.812243][ T8494]  netlink_rcv_skb+0x206/0x480
[  183.812259][ T8494]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  183.812276][ T8494]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  183.812303][ T8494]  ? netlink_deliver_tap+0x2e/0x1b0
[  183.812319][ T8494]  netlink_unicast+0x7f6/0x990
[  183.812337][ T8494]  ? __pfx_netlink_unicast+0x10/0x10
[  183.812350][ T8494]  ? __virt_addr_valid+0x45f/0x530
[  183.812362][ T8494]  ? __phys_addr_symbol+0x2f/0x70
[  183.812374][ T8494]  ? __check_object_size+0x47a/0x730
[  183.812390][ T8494]  netlink_sendmsg+0x8de/0xcb0
[  183.812410][ T8494]  ? __pfx_netlink_sendmsg+0x10/0x10
[  183.812427][ T8494]  ? aa_sock_msg_perm+0x91/0x160
[  183.812445][ T8494]  ? __pfx_netlink_sendmsg+0x10/0x10
[  183.812460][ T8494]  __sock_sendmsg+0x221/0x270
[  183.812476][ T8494]  ____sys_sendmsg+0x53a/0x860
[  183.812492][ T8494]  ? __pfx_____sys_sendmsg+0x10/0x10
[  183.812504][ T8494]  ? __fget_files+0x2a/0x410
[  183.812521][ T8494]  ? __fget_files+0x2a/0x410
[  183.812539][ T8494]  __sys_sendmsg+0x269/0x350
[  183.812551][ T8494]  ? __pfx_futex_wake+0x10/0x10
[  183.812570][ T8494]  ? __pfx___sys_sendmsg+0x10/0x10
[  183.812595][ T8494]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  183.812612][ T8494]  ? do_syscall_64+0x100/0x230
[  183.812626][ T8494]  ? do_syscall_64+0xb6/0x230
[  183.812641][ T8494]  do_syscall_64+0xf3/0x230
[  183.812655][ T8494]  ? clear_bhb_loop+0x35/0x90
[  183.812672][ T8494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.812688][ T8494] RIP: 0033:0x7f6446f8d169
[  183.812700][ T8494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  183.812710][ T8494] RSP: 002b:00007f6447e75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  183.812725][ T8494] RAX: ffffffffffffffda RBX: 00007f64471a6080 RCX: 00007f6446f8d169
[  183.812734][ T8494] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 000000000000000b
[  183.812742][ T8494] RBP: 00007f644700e2a0 R08: 0000000000000000 R09: 0000000000000000
[  183.812750][ T8494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  183.812757][ T8494] R13: 0000000000000000 R14: 00007f64471a6080 R15: 00007ffedb980a18
[  183.812771][ T8494]  </TASK>
[  184.421281][ T8494] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  186.630088][ T5842] Bluetooth: hci3: command 0x0406 tx timeout
[  186.630102][ T5838] Bluetooth: hci0: command 0x0406 tx timeout
[  186.630124][ T5852] Bluetooth: hci4: command 0x0406 tx timeout
[  186.636131][ T5838] Bluetooth: hci1: command 0x0406 tx timeout