last executing test programs:

4.96432523s ago: executing program 3 (id=2576):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, r1, 0x301, 0x0, 0x0, {{0x32}, {@void, @val={0x4, 0x99, {0xf0}}}}}, 0x20}}, 0x0)

4.793458975s ago: executing program 3 (id=2581):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x8a, &(0x7f0000000000)={@local, @random="de9ea3f675c1", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x54, 0x6, 0x0, @remote, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "eb3ffa01d3e709af3cf2e0ac744f24ca"}, @md5sig={0x13, 0x12, "58d74f5d02d8d561f97b2bdb1bc7617f"}, @fastopen={0x22, 0x9, "3ca78571dadd93"}, @timestamp={0x8, 0xa, 0x0, 0x41000000}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

4.666200614s ago: executing program 3 (id=2584):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1f, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48)

4.55753258s ago: executing program 3 (id=2589):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12)
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001ff700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x25, {}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0)

4.098329619s ago: executing program 3 (id=2599):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev}}}]}]}, 0x44}, 0x1, 0x0, 0x5000000}, 0x0)

3.969663893s ago: executing program 3 (id=2602):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000072009fd20000000a0000ddff07000000", @ANYRES32=r0, @ANYBLOB="080001"], 0x20}}, 0x0)

2.217952131s ago: executing program 1 (id=2634):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close(r2)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000))
connect$bt_l2cap(r0, &(0x7f0000000040), 0xe)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f00000000c0)=0xfffffffffffffeb9)

1.921341021s ago: executing program 0 (id=2640):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0xf84}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0xf000000}, 0x0)

1.792064633s ago: executing program 4 (id=2641):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000029004b040000000002eb9245e18fedac", @ANYRES32=r0, @ANYBLOB="00000100000000005000128008000100677265004400028006000f"], 0x70}}, 0x0)

1.256118378s ago: executing program 4 (id=2645):
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x1, 0x0, 0x0, 0xa000000}})

1.255790386s ago: executing program 2 (id=2646):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x3e, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@typed={0x4}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0xffffff7f00000000}, 0x0)

1.231437692s ago: executing program 0 (id=2647):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x4, 0xc, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0xb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}]}, 0x44}, 0x1, 0x0, 0xc000000}, 0x0)

1.212173603s ago: executing program 1 (id=2648):
r0 = socket(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, <r3=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc9f, 0x0, 0x0, 0x0}, 0x90)
accept4$tipc(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_type(r4, &(0x7f0000000040), 0x9)
r5 = socket$kcm(0x10, 0x2, 0x4)
close(r5)
socket(0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000003c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0080002000700000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c9530000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r6, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x4}, @in={0x2, 0x0, @empty}, @in6={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00', 0x2}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x31}}, @in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}], 0x84)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FITRIM(r7, 0xc0185879, &(0x7f0000000180)={0xcb8abea, 0xffbffffffffffff8, 0x4000000})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x1, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg2\x00'})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$binfmt_script(r8, 0x0, 0xb)

1.104113791s ago: executing program 2 (id=2649):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xffff0000}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0)

1.098311007s ago: executing program 2 (id=2650):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r2 = socket(0x26, 0x3, 0x2)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xe)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x400, 0x6}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}], @NL80211_ATTR_OPER_CLASS={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x20004801) (async)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x400, 0x6}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}], @NL80211_ATTR_OPER_CLASS={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x20004801)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000300)=""/19, 0x13, 0x0, &(0x7f0000000340)=""/95, 0x5f}}, 0x10) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000300)=""/19, 0x13, 0x0, &(0x7f0000000340)=""/95, 0x5f}}, 0x10)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4)
getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000600)={@broadcast, @initdev, <r5=>0x0}, &(0x7f0000000640)=0xc)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x3b, 0x0, 0x37, 0x6}, @typedef={0x5, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30, 0x30]}}, &(0x7f00000006c0)=""/106, 0x38, 0x6a, 0x1, 0xffff}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%pS    \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)='%-5lx  \x00'}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x14, &(0x7f0000000480)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0xa8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @alu={0x4, 0x1, 0x0, 0x6, 0xa, 0x20, 0xfffffffffffffff0}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x7}, @map_idx_val={0x18, 0xc, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000540)='syzkaller\x00', 0x401, 0x52, &(0x7f0000000580)=""/82, 0x41100, 0x38, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000780)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000940)=[r7, r8], &(0x7f0000000980)=[{0x2, 0x5, 0x9, 0x1}, {0x4, 0x3, 0x10, 0xe8dca41d044887d}]}, 0x90)
bind$inet(r2, &(0x7f0000000a80)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4)
socket$inet6(0xa, 0x1, 0x8)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000b40)={0x0, 0x7, 0x1, 0x7f, 0x24, 0x3}, &(0x7f0000000b80)=0x14) (async)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000b40)={<r10=>0x0, 0x7, 0x1, 0x7f, 0x24, 0x3}, &(0x7f0000000b80)=0x14)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r9, 0x84, 0x79, &(0x7f0000000bc0)={r10, 0x0, 0x6}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r9, 0x84, 0x79, &(0x7f0000000bc0)={r10, 0x0, 0x6}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r0) (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000001440)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001400)={&(0x7f0000000c80)={0x758, r11, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb, 0x5f}}}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}, @NL80211_ATTR_TX_RATES={0x46c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x104, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x5, 0x4, 0x22, 0xc, 0x9, 0x12, 0x36, 0x1b, 0xc, 0x48, 0x60, 0x3, 0x18, 0x1, 0xb, 0x5, 0x18, 0xb, 0xe1953dbcd04b111c, 0x48, 0x6, 0x6c, 0x3, 0xc, 0x1b, 0x2, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x0, 0x5}, {0x4, 0x3}, {0x2, 0x2}, {0x7, 0x2}, {0x5, 0x3}, {0x5, 0x1}, {0x0, 0x6}, {0x0, 0x1}, {0x4, 0x5}, {0x0, 0xa}, {0x1, 0x1}, {0x6, 0x8}, {0x7, 0x2}, {0x2, 0x8}, {0x1, 0x9}, {0x1, 0x3}, {0x2, 0x3}, {0x5, 0xa}, {0x0, 0x6}, {0x7, 0x9}, {0x2, 0x5}, {0x3, 0x9}, {0x4, 0xa}, {0x0, 0x3}, {0x3, 0x5}, {0x5, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xff7f, 0x1, 0x2, 0x5, 0x4, 0x5, 0x8]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x2, 0x5}, {0x0, 0x7}, {0x4, 0x9}, {0x1, 0x9}, {0x2, 0x6}, {0x7, 0x1}, {0x3, 0x7}, {0x2, 0x9}, {0x1, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x4, 0x3}, {0x7, 0x9}, {0x0, 0x5}, {0x1, 0x9}, {0x1, 0xa}, {0x1, 0x5}, {0x5, 0x3}, {0x3}, {0x1, 0x5}, {0x6, 0x4}, {0x0, 0x3}, {0x2, 0x4}, {0x0, 0x1}, {0x5, 0xa}, {0x0, 0x9}, {0x1, 0xa}, {0x7, 0x8}, {0x0, 0x6}, {0x4, 0x5}, {}, {0x5, 0x3}, {0x6, 0x2}, {0x5, 0x7}, {0x2, 0x4}, {0x7, 0x6}, {0x6, 0x7}, {0x1, 0x19}, {0x7, 0x1}, {0x4, 0x7}, {0x0, 0x9}, {0x0, 0x2}, {0x7, 0x2}, {0x7, 0x7}, {0x5, 0xa}, {0x2, 0x2}, {0x1, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x3, 0x7}, {0x6, 0x8}, {0x1, 0x1}, {0x4, 0x7}, {0x6, 0x8}, {0x4, 0x2}, {0x7}, {0x1, 0x8}, {0x3, 0x8}, {0x4, 0x2}, {0x2}, {0x2, 0x3}, {0x3, 0x7}, {0x5, 0x9}, {0x2}, {0x4}, {0x4, 0x4}, {0x4, 0x9}, {0x1, 0x6}, {0x0, 0x6}, {0x1, 0x3}, {0x3, 0x4}, {0x0, 0x9}, {0x1, 0x8}, {0x4, 0x6}, {0x7, 0xa}, {0x7}, {0x3, 0x3}, {0x1, 0x4}, {0x7, 0x8}, {0x6, 0x3}, {0x4, 0x1}, {0x2, 0x7}, {0x3, 0x3}, {0x1, 0x5}, {0x1, 0x2}, {0x6, 0x1}, {0x7, 0x8}, {0x2, 0x7}, {0x1, 0x9}, {0x1, 0x3}, {0x3, 0x7}, {0x1, 0x7}, {0x3, 0xa}, {0x2, 0x8}, {0x0, 0xa}, {0x7, 0x5}, {0x3, 0x1}, {0x6, 0x3}, {0x1, 0x9}, {0x0, 0x4}, {0x6, 0xa}, {0x1, 0x7}, {0x5, 0x2}, {0x4, 0xa}, {0x1, 0x5}, {0x2, 0x8}, {0x0, 0x4}, {0x3, 0x4}, {0x6, 0x9}, {0x7, 0x2}, {0x4, 0x4}, {0x7, 0x1}, {0x7, 0x8}, {0x6, 0x4}, {0x3, 0x7}, {}, {0x1, 0x2}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8000, 0x8, 0x9, 0x2, 0x401, 0x3b, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0xf0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x0, 0x8}, {}, {0x0, 0x6}, {0x7, 0xa}, {0x0, 0x2}, {}, {0x2}, {0x1, 0x3}, {0x3, 0x9}, {0x1, 0xa}, {0x0, 0x7}, {0x6, 0x1}, {}, {0x1}, {0x3, 0xa}, {0x0, 0x3}, {0x1}, {0x0, 0x8}, {0x7, 0x2}, {0x6, 0x8}, {0x1, 0x8}, {0x7, 0x6}, {0x2, 0x1}, {0x0, 0x8}, {}, {0x5, 0x4}, {0x4, 0x7}, {0x6, 0x4}, {0x0, 0x4}, {0x6, 0xa}, {0x5, 0x8}, {0x4, 0x5}, {0x4, 0x9}, {0x3, 0x7}, {0x0, 0x9}, {0x5, 0x9}, {0x3, 0x7}, {0x6, 0x1}, {0x1, 0x7}, {0x6, 0x1}, {0x7, 0x7}, {0x4, 0x4}, {0x7, 0x6}, {0x0, 0x3}, {0x1, 0x1}, {0x3, 0x2}, {0x6, 0x2}, {0x7, 0x1}, {0x1, 0x8}, {0x3, 0x9}, {0x3, 0x6}, {0x6, 0x1}, {0x1}, {0x5, 0xa}, {0x7, 0x7}, {0x4, 0x7}, {0x5, 0x9}, {0x6, 0x1}, {0x1, 0x8}, {0x5, 0x6}, {0x2, 0x5}, {0x4, 0x7}, {0x3, 0x8}, {0x6, 0x8}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x5}, {0x5, 0x4}, {0x5, 0x5}, {0x1, 0x3}, {0x3, 0x5}, {0x0, 0x1}, {0x1, 0x6}, {0x0, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x8bb, 0x8, 0xd0, 0x0, 0xf62, 0x7, 0x5]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x18, 0x16, 0x2, 0x4, 0x3, 0x48, 0x12, 0x16, 0x6c, 0x0, 0x5, 0x9, 0x0, 0xb, 0x16, 0x16, 0x36, 0x0, 0x2, 0x5, 0x6c, 0x1b, 0x1, 0x6, 0x22]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x6, 0x8}, {0x0, 0x8}, {0x0, 0x8}, {0x1, 0x6}, {0x2, 0x7}, {0x3, 0x3}]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x4, 0x7}, {0x0, 0x9}, {0x2, 0x2}, {0x2, 0x8}, {0x6, 0x4}, {0x1, 0x8}, {0x2}, {0x1, 0x2}, {0x1}, {0x1, 0x4}, {0x1, 0x1}, {0x1}, {0x4, 0x9}, {0x3, 0x9}, {0x7, 0x8}, {0x5}, {0x3, 0xa}, {0x2}, {0x2, 0x3}, {0x4, 0x8}, {0x0, 0xa}, {0x7, 0xa}, {0x3, 0x9}, {0x5, 0x4}, {0x4, 0x8}, {0x4}, {0x2, 0x6}, {0x7, 0x3}, {0x7, 0x9}, {0x3, 0x9}, {0x2, 0x3}, {0x4, 0x5}, {0x1}, {0x7, 0x9}, {0x6, 0x1}, {0x0, 0x3}, {0x3, 0x4}, {0x1, 0x2}, {0x3, 0x6}, {0x0, 0x8}, {0x6, 0x9}, {0x4, 0x2}, {0x5, 0x1}, {0x0, 0x7}, {0x4}, {0x0, 0x2}, {0x2, 0x6}, {0x5, 0x5}, {0x5, 0x8}, {0x0, 0x9}, {0x7, 0x1}, {}, {0x5, 0xa}, {0x0, 0x3}, {0x1, 0x3}, {0x0, 0x6}, {0x4}, {0x4, 0xa}, {0x1, 0x5}, {0x3, 0x1}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x2, 0x4}, {0x3}, {0x4, 0x3}, {0x2, 0x8}, {0x7, 0x4}, {0x3, 0x5}, {0x7, 0x7}, {0x1, 0x3}, {0x1, 0x5}, {0x4, 0xa}, {0x1, 0x9}, {0x3, 0x7}, {0x1, 0x6}, {0x5, 0x7}, {0x4, 0x4}, {0x7, 0x5}, {0x5, 0x9}, {0x7, 0x1}, {0x5, 0x7}, {0x0, 0x4}, {0x2, 0xa}, {0x4, 0x8}, {0x5}, {0x3, 0x1}, {0x1, 0x7}, {0x6, 0x3}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x1}, {0x3, 0x5}, {0x3, 0x7}, {0x0, 0x7}, {0x7, 0x8}, {0x4, 0x9}, {0x1, 0x5}, {0x7, 0x3}, {0x6}, {0x1, 0x5}, {0x1, 0x8}, {0x7, 0x9}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x5}, {0x7, 0x1}, {0x6, 0x9}, {0x0, 0x4}, {0x3, 0x8}, {0x7, 0x6}, {0x0, 0x2}, {0x6, 0x9}, {0x0, 0x9}, {0x3, 0x1}, {0x0, 0x5}, {0x2, 0x3}, {0x0, 0x7}, {0x1, 0x9}, {0x6, 0x6}, {0x7}, {0x4, 0x8}, {0x7}, {0x0, 0x6}, {0x7, 0x1}, {0x6, 0x5}, {0x6, 0xa}, {0x0, 0x9}, {0x5, 0xa}, {0x0, 0xa}, {0x7}, {0x1, 0x8}, {0x6, 0xa}, {0x6, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe7, 0x3, 0x8, 0x4, 0x1b4, 0x8, 0x2079, 0x3ff]}}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x1, 0x48, 0x1b, 0x6, 0x1, 0x1b, 0x12, 0x24, 0x32, 0x48, 0x4, 0x12, 0x36, 0x2, 0x71, 0x24, 0x9, 0xc, 0x9, 0x6, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x4, 0x6}, {0x2, 0x1}, {0x0, 0x5}, {0x2, 0x5}, {0x6}, {0x2, 0xa}, {0x6, 0x8}, {0x6, 0xa}, {0x2, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0xfff, 0x9, 0xbe8, 0xfffd, 0xc860, 0x6]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x7, 0x6, 0x9, 0x2c, 0x2, 0x10]}}]}, @NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8, 0x4, 0x919d, 0x5, 0x9, 0x0, 0x779]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1b, 0x16, 0xc, 0x5, 0x18, 0x1, 0x12, 0x6, 0x60, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x4, 0x9}, {0x6, 0x3}, {0x1, 0x5}, {0x2, 0x5}, {0x1, 0x5}, {0x4, 0x3}, {0x2, 0x4}, {0x0, 0x4}, {0x6, 0x16}, {0x4, 0xa}, {0x0, 0x4}, {0x1, 0x4}, {0x0, 0x6}, {0x1, 0x3}, {0x7, 0x5}, {0x1, 0x7}, {0x4, 0x3}, {0x0, 0x3}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x3}, {0x1, 0x7}, {0x1, 0x5}, {0x6, 0x8}, {0x0, 0x8}, {0x1, 0xa}, {0x4, 0x4}, {0x5, 0x1}, {0x0, 0xa}, {0x1, 0x8}, {0x7, 0x3}, {0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x40ef, 0x60, 0x1000, 0x7, 0xf599, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7f, 0x7, 0x5887, 0x3, 0xa10e, 0x8000, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x824e, 0x9, 0x81, 0x8, 0x5, 0x2, 0x100]}}]}, @NL80211_BAND_5GHZ={0xcc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x5278, 0x7, 0x3, 0x6, 0x5, 0x6]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x48, 0x2, 0x4, 0x164af3a79cdb7fd1, 0x24, 0x60, 0x60, 0x1b, 0x1b, 0x4, 0xb, 0x1b, 0x2, 0x4, 0x5, 0x9, 0x1, 0x6c, 0xe]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0x8}, {0x3, 0x1}, {0x6, 0xa}, {0x6}, {0x4, 0x1}, {0x1, 0x6}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0x6}, {0x1, 0x7}, {0x0, 0x5}, {0x7, 0x5}, {0x0, 0x9}, {0x7, 0x4}, {0x7, 0xa}, {0x1, 0x6}, {0x0, 0x8}, {0x4, 0x3}, {0x6, 0x5}, {0x4, 0x6}, {0x2, 0x5}, {0x5, 0x2}, {0x4, 0x9}, {0x2, 0x3}, {0x1, 0x4}, {0x2, 0x7}, {0x1, 0x7}, {0x5, 0x6}, {0x3, 0x8}, {0x7, 0x2}, {0x5, 0xa}, {0x3, 0x4}, {0x5, 0x2}, {0x3, 0x2}, {0x3, 0x5}, {0x2, 0x2}, {0x0, 0x3}, {0x6, 0x5}, {0x3, 0x8}, {0x4, 0x6}, {0x6, 0x7}, {0x3, 0xa}, {0x7, 0x2}, {0x4, 0x6}, {0x1}]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x0, 0x19}, {0x0, 0x8}, {}, {0x5, 0xa}, {0x0, 0x5}, {0x3}, {0x7, 0x6}, {0x7, 0xa}, {0x1, 0x4}, {0x7, 0x2}, {0x0, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x4, 0xf801, 0x5, 0x8, 0x5, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x4, 0x5}, {0x3, 0x9}, {0x7, 0x9}, {0x7, 0x5}, {0x7, 0x6}, {0x0, 0x9}, {0x7, 0x6}, {0x1, 0x6}, {0x0, 0x1}, {0x6, 0x3}, {0x3, 0x9}, {0x5, 0xa}, {0x1, 0x6}, {0x2, 0x7}, {0x1, 0x8}, {0x1, 0x8}, {0x5, 0x4}, {0x7, 0x4}, {0x7, 0x1}, {0x0, 0x4}, {0x5, 0x4}, {0x4, 0x7}, {0x1, 0x2}, {0x1}, {0x4, 0x8}, {0x4, 0x9}, {0x1, 0xa}, {0x3, 0xa}, {0x6, 0x9}, {0x4, 0x2}, {0x3, 0x7}, {0x0, 0x6}, {0x2, 0x8}, {0x4, 0xa}, {0x6}, {0x6, 0x8}, {0x4, 0x7}, {0x4, 0x4}, {0x5, 0x6}, {0x6, 0xa}, {0x0, 0x1}, {0x2, 0x3}, {0x1, 0x9}, {0x1, 0x3}, {0x6, 0x9}, {0x0, 0x2}, {0x0, 0x3}, {0x1, 0x1}, {0x2, 0x3}, {0x4, 0x9}, {0x4, 0x6}, {0x5, 0x6}, {0x0, 0x5}]}]}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_TX_RATES={0x2ac, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x18, 0x1, 0x12, 0x36, 0x1, 0x6c, 0x60, 0x3, 0x5, 0x2b, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xcb, 0x5, 0x5e8, 0xc6, 0xa, 0x5, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x4, 0x6, 0xffff, 0x9, 0x0, 0x1, 0xbd]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0x8}, {0x7, 0x7}, {0x5, 0x3}, {0x5, 0x8}, {0x4, 0xa}, {0x5, 0xa}, {0x2, 0x3}, {0x2, 0xa}, {0x5, 0x4}, {0x4, 0x5}, {0x1, 0x7}, {0x0, 0x7}, {0x4, 0x4}, {0x3, 0x6}, {0x0, 0x8}, {0x1, 0x2}, {0x6, 0x7}, {0x2, 0x8}, {0x1, 0x9}, {0x6, 0x1}, {0x7, 0x4}, {0x2, 0x1}, {0x5, 0xa}, {0x0, 0x4}, {0x1, 0xa}, {0x1, 0x9}, {0x7, 0x6}, {0x1, 0x3}, {0x0, 0x3}, {0x1, 0x1}, {0x4, 0x2}, {0x7, 0x2}, {0x0, 0x4}, {0x6, 0x7}, {0x2, 0x8}, {0x0, 0x4}, {0x7, 0x9}, {0x0, 0xa}, {0x0, 0x8}, {0x5, 0x2}, {0x2, 0x5}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x6}, {0x2}, {0x4, 0x2}, {0x2, 0x4}, {0x1, 0x9}, {0x7, 0x8}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0x5}, {0x2, 0x9}, {0x1, 0x3}, {0x0, 0x3}, {0x5, 0x8}, {0x1, 0x4}, {0x4}, {}, {0x1, 0x7}, {0x1, 0x9}, {0x1, 0x4}, {0x1, 0x1}, {0x2, 0x5}, {0x3, 0x9}, {0x3, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x2, 0x16, 0x30, 0x36, 0x60, 0x4d, 0x0, 0x5, 0x48, 0x12, 0x60, 0xc, 0x18, 0x9, 0x2, 0x18, 0xc, 0x6, 0x6c, 0x34, 0x4, 0x1f, 0x6, 0x36, 0x6, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x800, 0x3, 0x8, 0x200]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7421, 0x9, 0x7, 0x7fff, 0x1, 0x3, 0x3, 0xfbff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0x8a21, 0x5, 0x8, 0x5, 0x7, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xce75, 0xfffb, 0x3, 0x81, 0x5, 0x4, 0x4, 0x8000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x3, 0xdda, 0xa, 0x6, 0x10, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xf0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa9, 0x3, 0x7, 0x1, 0xa, 0xfffe, 0x8, 0x8]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x60, 0x48, 0x2, 0x9, 0x36, 0x36, 0x12, 0xb, 0x2, 0xc, 0x48, 0xb, 0x9, 0x16, 0xb, 0x1b, 0x24, 0x18, 0x2f, 0x66, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x7}, {0x2, 0x8}, {0x4, 0x4}, {0x1, 0x6}, {0x4, 0x3}, {0x6, 0x1}, {0x0, 0x3}, {0x2, 0x9}, {0x0, 0x1}, {0x3, 0x7}, {0x0, 0x6}, {0x6}, {0x2, 0x1}, {0x3}, {0x6, 0x4}, {0x3, 0x2}, {0x3}, {0x0, 0x8}, {0x7, 0x2}, {0x6}, {0x1, 0x6}, {0x1, 0x6}, {0x4, 0x1}, {0x1, 0x6}, {0x3, 0x4}, {0x0, 0x9}, {0x2}, {0x7, 0xa}, {0x6, 0xa}, {0x5}, {0x1, 0xa}, {0x1, 0x3}, {0x7}, {0x4, 0x2}, {0x5, 0x7}, {0x1, 0x6}, {0x1, 0xa}, {0x2, 0x1}, {0x3, 0x9}, {0x1, 0x2}, {0x5, 0x3}, {0x6, 0x4}, {0x1}, {0x6, 0x8}, {0x0, 0x6}, {0x7, 0x2}, {0x1, 0x6}, {0x4, 0x8}, {0x6, 0x3}, {0x1, 0x2}, {0x1, 0xa}, {0x0, 0x2}, {0x4, 0x8}, {0x3, 0x7}, {0x5, 0x4}, {0x3, 0x6}, {0x5, 0xa}, {0x4, 0x5}, {0x1, 0x2}, {0x5, 0x8}, {0x1, 0x4}, {0x0, 0x5}, {0x7, 0x5}, {0x6, 0x6}, {0x3, 0x1}, {0x3, 0x7}, {0x1, 0x3}, {0x3, 0x4}, {0x0, 0x2}, {0x6, 0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4}]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x7, 0x5}, {0x7}, {0x6, 0x9}, {0x4}, {0x6, 0x7}, {0x0, 0xa}, {0x0, 0xa}, {0x2, 0x1}, {0x6, 0x1}, {0x1, 0x5}, {0x0, 0xa}, {0x1, 0x4}, {0x1, 0x8}, {0x2, 0x1}, {0x6, 0x5}, {0x6, 0x4}, {0x3, 0x7}, {0x2, 0x7}, {}, {0x4, 0xa}, {0x0, 0xa}, {0x1, 0x2}, {0x5, 0x7}, {0x0, 0x8}, {0x5, 0x7}, {0x2, 0x1}, {0x0, 0xa}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x6}, {0x6, 0x6}, {0x3, 0x2}, {0x7, 0x8}, {0x7, 0x2}, {0x3, 0x8}, {0x6, 0x6}, {0x7, 0x2}, {0x2, 0x8}]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x5, 0x6}, {0x2, 0x9}, {0x0, 0x7}, {0x3, 0x5}, {0x1, 0x4}, {0x1, 0x1}, {0x6, 0x2}, {0x3, 0x6}, {0x6, 0x3}, {0x5, 0x3}, {0x7, 0x8}, {0x6}, {0x3, 0x8}, {0x0, 0x3}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0x6}, {0x0, 0x2}, {0x7, 0x9}, {0x2, 0x1}, {0x0, 0x8}, {0x6}, {0x7, 0x7}, {0x2, 0x8}, {0x7, 0x4}, {0x3, 0x4}, {0x1, 0x4}, {0x6, 0x5}, {0x6, 0x1}]}]}]}]}, 0x758}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000001)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002700)={&(0x7f00000015c0)="77e41391d0d53f5d48661b02986a8ab794a4609e23e77e5dab6c2eecc6fe7650324f084c42", &(0x7f0000001600)=""/78, &(0x7f0000001680)="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", &(0x7f0000002680)="3c2caef586be257f5e81b9cd5c5f2e7690142d48574081ed1762e43427de5127c35fc064e00b8c1c43e1cb9db2fcaba642f8ac59d377ed70aaab98a53b565687b4f37f9964525de31f38adb7f40398ab8f", 0x6f2e3302, r4}, 0x38)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000002740)={r10, @in={{0x2, 0x4e20, @local}}, 0x9, 0x40}, &(0x7f0000002800)=0x90) (async)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000002740)={r10, @in={{0x2, 0x4e20, @local}}, 0x9, 0x40}, &(0x7f0000002800)=0x90)
r12 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002840)='syz0\x00', 0x200002, 0x0)
openat$cgroup_type(r12, &(0x7f0000002880), 0x2, 0x0)
socket$inet6(0xa, 0x4, 0x101)

1.075354488s ago: executing program 4 (id=2651):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000000000000000000b0200000002000000000000120000000000005f"], &(0x7f0000000240)=""/194, 0x34, 0xc2, 0xa}, 0x20)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18)
syz_emit_ethernet(0xbe, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x97ff, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0)

1.015566648s ago: executing program 0 (id=2652):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000340), 0x12)
sendfile(r1, r0, 0x0, 0xf03a0005) (fail_nth: 34)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
listen(0xffffffffffffffff, 0x0)

926.620559ms ago: executing program 4 (id=2653):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0x21, &(0x7f00000002c0)=""/33}, 0x90) (async)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r1 = socket$kcm(0x2, 0xa, 0x2) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x1c) (async)
sendto$inet6(r3, &(0x7f0000000140)='l', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3f}, 0x1c)
setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r4, 0x8947, &(0x7f0000000580)={'bond0\x00', 0x10001}) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYRES8], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) (async)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="01000000000000000000010000001400090000a40000000000000000000000000000050002000a00000006000a004e"], 0x38}}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, 0x0)
write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
socket$netlink(0x10, 0x3, 0x0)

651.203032ms ago: executing program 2 (id=2654):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x2c}, 0x1, 0x700}, 0x0)

585.87059ms ago: executing program 1 (id=2655):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x1, 0x0, 0x6000, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14}]}]}]}]}, 0x40}}, 0x0)

584.225511ms ago: executing program 0 (id=2656):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000200000000000000000000000730116000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90)

468.811339ms ago: executing program 0 (id=2657):
socket(0x10, 0x3, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bind$vsock_stream(r1, &(0x7f0000000000)={0x10}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r2)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', <r4=>0x0})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000440)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001d00000008000300", @ANYRES32=r7, @ANYBLOB="38002f80200003801400038006000100000000001800020000000000080001000000000008000100000000000c00"], 0x54}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', <r9=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r3, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}]}, 0x70}, 0x1, 0x0, 0x0, 0x44080}, 0x4010)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
getsockopt$bt_BT_SECURITY(r10, 0x6, 0x4, 0x0, 0xf0ff1f00000000)
r11 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r11, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
listen(r11, 0x81)
r12 = accept4(r11, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r12, 0x84, 0x82, &(0x7f0000000000), 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff)
r13 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
bind$can_raw(r13, &(0x7f00000005c0), 0x10)
recvmmsg(r13, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)=""/94, 0x5e}, {0x0}], 0x2}}], 0x2, 0x40002001, 0x0)

412.103865ms ago: executing program 1 (id=2658):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000010c0)={{0x14, 0x10, 0x1, 0x0, 0x1d000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}}, 0x0)

411.647274ms ago: executing program 4 (id=2659):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x6d, &(0x7f0000000240)={r4}, &(0x7f0000000280)=0x8)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x7, 0x4)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'gretap0\x00', <r7=>0x0})
sendto$packet(r5, &(0x7f00000002c0)="05030500d3fc030000004788031c09101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90324fc6004001c000a000200053582c137153e37000c0480fc0b10000300", 0x33fe0}], 0x1}, 0x0)

386.537699ms ago: executing program 1 (id=2660):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x38, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c002b8008004800", @ANYRES32, @ANYBLOB="08a50c2030c273644adaf00003001900000008000100", @ANYRES32, @ANYBLOB="08001b"], 0x44}}, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r2=>r0, 0x1, 0x36, 0x80})
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x8810)
getpeername$packet(r2, &(0x7f00000013c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001400)=0x14)
sendmmsg$inet(r2, &(0x7f0000003d00)=[{{&(0x7f0000000280)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000001380)=[{&(0x7f00000002c0)="8b721ae3a9b953b401cc3d09b88771183f6c2d32146fe661851fa52232218f508ac6e1583727534c6c0655abea6d7c6957b2decc5c56a39ab4ccc3a5427820c06604600f8a8175b11b2a514aa1111b033134ebef1b50d0d1907ccc733d80894aac33334006", 0x65}, {&(0x7f0000000340)="40c62b6b4b48be5040948cb83e", 0xd}, {&(0x7f0000000380)="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", 0x1000}], 0x3, &(0x7f0000001440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010101, @remote}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000001480)="8470937bc6746b3eedaec8758412b6e85c8b8da95ced258290a0af0cbf440dad7f09788acf50028746a592fd7b6e", 0x2e}, {&(0x7f00000014c0)="4dd6ec2c9b4b227b0641b1ac6066a2de0eb461686204cc51253c3edfa2cc81fa4b252911d2f7047a1f1eddfa2546eea3e699205450b36df0aa0042533da2a02218dd0f9899f9df4335ee2369bd0ac2a3a451bec0a32b095c96c11aa5bfe5227a159680e4c92faf34585887ad4272fd", 0x6f}, {&(0x7f0000001540)}, {&(0x7f0000001580)="02d3ab", 0x3}, {&(0x7f00000015c0)="cd30eba4b7492fa43c689405df69335a81f0d2274adccf973c3bdf91add84723f0acd246e181f13e45c9cdd46ff879a4880f892f76c724bf59117e8fa4f329913cc4279b6b81d0ca3515f3690c7a345d2d9f50307ef69b83f6396fc25e87e29c2a6374662cf1c670d203a9302b0635c3b7cf600b3000cac45edb6add1afa9346774ec775447bfe8fbdd0cd82a9a11f11ac378a53d04a2edd6dab6d6634845a301a6db352fc836e3604e8700549d10412342e7706a993b833d1b3b23e50dadb4a27bb2b1cc12171853fa771384ca5e442624486c0e05928c92beb1802d25a7d38cc70b7f393ee", 0xe6}, {&(0x7f00000016c0)="3ef251309279b247b6c7e97475055ca68cf41b", 0x13}, {&(0x7f0000001700)="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", 0x1000}], 0x7, &(0x7f0000002780)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}], 0x18}}, {{&(0x7f00000027c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000002ac0)=[{&(0x7f0000002800)="dfd2b37b31462819568d4c34b118c04ef90c3903ff5bbb050c66ecfc419f48ab930a12fe8c4199c96d57fbdebc80d577d8a2f7a9276faf8ac639ab9b7a573c76ff4446fe2788c221b8104048f3ff135bce813d5435967c53cb139318fba22582393278258fdadd4e40564fd599850f042a220c6944", 0x75}, {&(0x7f0000002880)="2b6cb2f5ef0767c5877c85cb98912a5b13d54b15", 0x14}, {&(0x7f00000028c0)="ab2dd12e2d1b6df3b7683a9e202b7bc28ceb0e08ed4396ffd32a9c68035c0471be952d446037af931bcfe74fee606529a5ce845334ec3c57ce4085", 0x3b}, {&(0x7f0000002900)="b13ecdf29c4517f0d7cee10fbd393676edb486bf8f0411e32a9752ed65e52477554bff02e3ce81347af5e2fc475e08f69d2aa81b5821b8797498c0361d20e3d12bb5ba6ef9252023463081d5793c4002a93ab4c640e87ea94c95430a88309ed05ccdb798967c43b07d3e4d2b69ba34c88a19f4650f17c1d7e04e32475b071a12c2bc72298721b52da3009b609a43e6c29b1f1c2444d4d726bf6acb5235993dd11435bdb62d0fc590477b7fa86e7a80a12dd04168dbaae953f4640fb201a901afb4db1d440b0de928612a3ced37f58e8ef4d587d6a2e8ac25531e2af3e4226a52956932e16bd4bf1e", 0xe8}, {&(0x7f0000002a00)="aed20fba75dad7bfdd557d66cda6435966a5166220d418b2049f213f37054f5d735b0be1d6e9e16292b29410bff35a27f57c5c742fa799e78fe76de665bbce7b321616a6a585e1a08c8a6dc4318928b9ee0bd1808f5624b94679b0dc09daeaa0358ff6b5e17f7fc9b3cbb4143b68aa792bdcfc85124028ca559f5789e0e41ffa0638f725e4b9e296a289b5e57e341b30be3109e2f318cdae2f415f7a639af9d3a0", 0xa1}, {&(0x7f0000002c00)="e1ce379b44dc0252fc55bd5729adcef5ff82ea19285d47d432e2c576313e31dadc1ac0c8c8c92c9c072a11e8d7a34c360077a5a9e46085d258027e2a495e9c2458eb2bda618b093471eb82e24c2d7fe98ea24fa30814f61e42a1a7ea3d87fd1e0c7717a26459916399fc5f6ef8fea8a94084df02e1eabec2661cba6fc5199b056a88999f2f8a6bbad161606232be712e6f12950f33c1dfb07eb3abc261949d87f0f23484f698d5b17d648ff9189a1973ab164376cdd0eba473c4a4f8a03ef932e5b8fcf23e99ad9d1860a82a260d32df661f4c7165f8e2a4eb0a4ab93664127272c7c6e85a5ab03ab478370d5fec5c6e7b2fb9e47a700bea5f741618771d39ff801ec0e90650f9d8effc5b2ff1c0a299b99688a6956afc26992cd792d065edd19f3937b15a11dcf120c826cfff62dd0236aad1595f440cdc1945783c5191d814c11a6b0ab9fb215cb2a735c6855079afe6155d5462824037d87187e37c90144185aebe74e7ddec1ddead6df91fd6c4ce324134ced0741f21aa147c07dc727e4ad611c647de8bd311b7ca2c6d706f1b4aba45a5deab3c73941bfb9d4e9a284d002344996cb11c6d05049ddd9fa784feef1c592415f0ca57f4c2aa063dcb28558f4d83d520cb4b37b84ab71e0b9db6a11a06fd6a00925fd9e5a368be1c8631ef09c94881df24fa09a29845313f3692d9421a0bae56d0c74015f682f36923759301f35dcf456fe7353d73882d0524499dc855a4d70662b72c03b2d99d90bfe8768318395f3c72497e388f43a5026ecdeb0011c7048c50b19abcd640c22d08f787c1bc184074e2152a8b113575366d5b74cc2c8fc89a4c187585f6ab7bd5854dde5a7e1eb0a13065d53d8c95c9b0914b8613c46fc7e6d12fb11effa3249e3851b1a0e9f20afd97fc10264cbbfc53ab28a97fc17cbbaaa8635d2c1436f575cc0d937335e520066ab571e57f9edeea7b1912dca273e8a280a73ab0a7ab871b26a4a20b6634fb896f812df1f02118fe3c73d195142c86b70a8a0e9dd40526e42439bc0ba2a09d998afe19ab4604caf0dbf7605e1b5e57b5a004aa8755440793d4d31aca344f90a5efa579bd7a857b0c033de83f1837d39d165a8ca9021880ce431e7b8380519715a0105445645b04c49ef1c8dda265abc53454ee6942d9fcdc6781405dc7d8b05ee600ec4f340d4d2119646603f075fdbbe5eeff89ff274eed54a75af4eaed78cfeb46f1658251db6d9627e698f006c5450c2d8b6e69632799167e1d254cfb2122f7ad21d2e7267324001554e74bbb4b6a41a4d82a6cc4f84ee5833d6a9a2c8775a5cabf10d349fd7bc545bd7a8993398289aaec495707815b7a905b978a60e7d07f6cc4185e14a5a6f1ea73d54d9b02ccfd8ea3d8056c28f570babda8a7da746443de9bc668017296543f837650487e48d6fe9235a6e352641929f783a3b5ca08d10e09af2533e3af17d2c237235964806f46993b6880c3473459cd36c2ee589fe94d13d76020231e84e5398181eb522a7579f5f8ad22788af58dfa91252444cfc03ef786af7319326f41c45a68762e80262716e3d128777096ad665a61bfbb6ca21a2b73122d2d7237f16fb099c1f3da861749a43f1fe19a550dabffd15043378e8a651ab20f669666017f2eed518871d4926af812a9537b1b88d710008b2f2e7f6b2fea5fe2fb65a9594f6af962c7d38e1b50b6bc4e1f82c9a39f3b9939356ae75fe879de20b712a700a320075247b800308bc4bc82b3ddf8a28b5cc8589899c80eb5ef9402bfd31e193a7f2462841dc8a00aaffc5d763fa3e8b3b95b714ee9fe47e312d385cdce7e2b059af68b574bb00bbfb15aac4e0953bade296c1fe2d4029d38895c817fffbb05eee16249a56329f7ebe7dc8605485740f0dc221e85dd288e243cfc7713548156ec15f07dd9e4d36bc64dcab707ed068a0bf9a9f91b1d259fe591694d347bae7fec7f91345dd1c72fc32d8b92fb7191b275f00231d794ebda5dad0043e37f8b1eea4d647c16788c7cf4a7f3afecce18a65e46069daf6f72c1e19f065fca6de0818cc785fe47141d7ef52f12aed04f0c044e3a577132b3197f80d20797bcb6aaaf3c90425f7e419773ce51dc06b9cd91c426f01c28743f66210372eb2fa7b3f34d8ad61714c2da3ea13821b48c50a4575b84d4acabd82ae788b1def9f9d93c8460633c4c95f3d893ea913a1a54e0485edac38ffade5cd6b775241dc5ff5340f3c6902bc56eebe063a6753ef58476f0ba79ad96bbd7aee941c4bd53e94f1c5988dab74124a1675bdbbbc3cb204fdc2c7d79d98fcaba86aaf3dd1aeb81ad661fc0c9c12f520e7a8b64bfda4d122c9569d47bb5af6de9d4461fda06244eafb08056ca34f6dc545c4c0de1d30ad079cdd90d86af1072a84bd7b68403a31b0ce25c0fdc01c7bc351dd69788a4b3c87dd0611b46dced87406bea2f48f2075d3f2007417cb4e7fc4b4cb8cb6224c0f1e93112c355af0de185960dcbfc8d8061439d20cf10f21341a49a49d1d11a151b3eabc23cca5d8b62474341456e8b9804aff2fafda7c57d37747f6645373e6d2d187ca2e0249bfd7681ffdb387b636f5ad167874902facae141965c07433ae1a079dd4be37f2358845d08b4ef19960940b5589409f4f8d2f940f476894c74bab15f8ec0423b9412b2738a65a3bfce9750ee1d5a588313d01b220536b6b28e7497cfb7b9d99ef32d4e35e37c289c4837cf912c506ec35c18f8134cfd3e0ac2e3aa54f708c046a65614623184db321dcf82e3cd4f2ff99ca08d4b8d1f427cd1ce5a23fae8e61bd6abc0d85243767c1a0d01fdf87fe107c56d22e4123219f2767d9958b0b1b9b66db619d3df389328102403d569bd30ada31389f8fd228ac0a481304e11b5c72e57f9b0f1140c0ab3712075e6ac8b44c891e389a95b60c03b9d9d46d4fefffe4ce11cef692798e5c6094604e9ce26521cb5de5cf5c2964e06cd4076149ff94b6ff316f35681fd7e0bb52510472cd0986d553b6c47374655273b4a969159aff08dc9a47dd16adbff3b2a6eb38b9b1320a578e0a7a64c1e5034fae8eb31367c341b130eae77f9bdacdbd05474ea0fab8069cab89c3a1646239dda3ebb4581e6c91c5918efa7fd8ec2fc5eab32c7ae7fe37888caf77cbe0d409ffe3d1e5e0f4bc80989675a14f581fc5c68537cc042bab2a74a28ba3b63b70251ca2c3a9666ccfb96b73357f62b320d1f16c52c4ad8067bedac4a0a751fed196633e09dd1af7643e0be15bcd5cfb4a78e63c08e12aa2192c9f6142ecec7ab95ae67399e4648c7d120b61924f5938aa9b342fbdc66db3f7cb233dd673b21f2fb0a86fb3035fb927c01299664f2028e93dc872f8413356f0a3e8334bb8d9f52cf9820d164bb0a699af6f9b782af887db5e1bf3ff9888b5756b50b0018fd37af133ea85887302d7b38bca2ee61a682849ab4a454ba53b9807f2ee6f55045d40100e6bc70cd5136f22aa4c24e15a5ee055fb9a71bf314da8bdbc1ee5258e41d86da37b6100bc187f0bb778a3b3d82e261cd0f364f2b3cb868cedbdaa489604bac338bd1ff22337a1b58a5d5985e9db78b544b8899be66e7d48f57afb047a3f4693ccf02c1192453994d2244c1ac3cfafa1f3735b6c36b20df70df804b6049f41131785cbde388fb913c6874b7ec81123e27afbc683796c52acf978ed8fe3727ad7d1f30dc538d1894f5e9694db04773b41a0b2e89d199f32b402015b38e61158d4e385eb87e96c8fc9d61373426cf99aa0640b996b810464f312cd98361de0f49b8527f0613f8878aa338d2fa6940951d761c84ac4155578097ed9bfee4243dd18b68f51a69594d04ef7245d94bd143520cb60bcdb8fa22ce607fdf2e954dec442d9a033eac4dc3ca19a4666c23c3c01dc205a56a9ba6d5a795345732e289a03396c7f7218062b8ed83e2e9891c821ef78703e046ea32defb85235d71d275e3da292e8944df404db0f1e9709f574431b6669b7b3588c7a43611d6ed3c3d6a4a3a9a1d745414d3b6e9e8f947db6056caf16e99cbd87e2642ae3886912ef25038148ff2dcf6ff9d63c0c087cbe5ce296934cd94e55d272c949482a23374c2d0348d1b4deccc5b8010360cfe35d1885d16bc1bb2f9ecca29b75bc693766602ee7b2f596d7a57dc00d8186fe845fe78f569b9fcfb4d5c6cee38033dd7153a368b329127fc18b5e23de8d382c183fff1e7b3d1ae1298792e9ec9574372a70167eb2313eb2d886f88c263bcc5593762de1ecaa125ecdafdc638a51a8025a57f695a72d35b6a5d2c9ac9220d643823b9d9640e3ae73a1bb27539e2371b69d739cef0841fdd4374ad982024089f47717316c17a4394d14a7d58bacc2972df3bc98375cb0cee1cac86f60fb85fae9c112abe1fcb174ad06ca090cd3b85c4c39dd03cab03fe7d4099ee0cf8419b530e1ff0cca9dc8c5f178c9b5de672f31870371389c293a504d055fe827ac5e1b7c663dfb0bccb53c45104af377b5f80168c49961a7d6f4735786fdd75c6baf4c43a4a63e8142ca3de15d5b1eea22aa7b0fec044359fa2e7d82dd7a1e985832eeda624c682aa404c9c5686e94ed56828f3977412610774020a0ccb160ff79b66b97ba6cdd100962a53a4c34080cf1195e99fdd9841ee6883f4a4f2edf54ec24852531f0ebfff77e8f0e0179f82f24abafaff3707de173699a2dd55850cc23ed2a96143230b124290d6e9112ca7baef85887f7607c00305a7de970ff7ca1b85e5ced94b5e8c43938d119487482dcbb74d9306cef3b45e5262de41f1ed0349babf67ae4cba535aa28b025d868420ebf4c7beb17ff265b08406bbe95c6bdbaa9663dc880f8f58ba79f9417f05dec626b1d7b8a403a149fbf7657139a51883ee6448795d67a9ede56fdde10151ee03b775f37a55693cb32029bb95bb0bd44f5162eb2f7be38f6e9ed46f7cbd8bffcd7d1a06d0211ae796b6375b9a8922e16a5e0c74262968fc7077c390b403f8963fc75261fa30e1a9bb4c30ef97cefca04158e8817d2f9d558eaba7657e42005fdc2d520020678e5699f1909fe50895fadc6ac5cc7b7efe28ee92e8e4ac3a578323d51a81445062aa0f2e252ebd5e5999ef0b76b5dfbfe254268ba42a94b895d62f6f35050a7359b4b9fe17eef86fc022114fd81b86b7bfa758c3993a9dfaf36726e581d6283fe81baad77a80cf760a1fa445f4930f302496b3dff418d70667b425a7d309431751930523c76816ed05fced7e865f73c9cfc1c115124135ded936e6bf73290c172ea355f0e3ec1e7aef5ee74553c8019a4636e690ad89d3215669bbc2447b5c668e6c520144d83fd2bc0e79935fd1cd3400cba4620afbac9e38595dcade230170c08379dfbef90924e16d5cf9bb169b4493cabee8ef0e046d80ea426c00987f3e73d2f53193809256e3eae5605b3fa6452d1000da3e2cf56cf2e4d04493b963ef905f2f6394f2f07751667bbe3bd4fdeb1e33aba55979d3819ed96901a16054bc5824428e0e98cf87a68b24f2b887592a8118b431e707ce0f0e43145b0ad31bbdbe9ebe8e5d3b17f27fff2a65b72b376c62f32ded675069e0a3b2d994cb7c138538e599b887d2b0e7fd31d0ab8da2e28e76ddd798b1d9fc9e3532c8a4cc1a6542bd84201477f18327cbdc80a07edbd859d181fef77be549a5fe1049db0c127a818cabe66b9669722f8d3113512620046bf6e727cbfb855745b082342b6b1775d0d54ac69bc87b3552b7bc47c21358806919ad68e9bda0fa5a13e425d1ec366c058146ebe7a385c91042d03ba5582f1463cde1", 0x1000}, {&(0x7f0000003c00)="0f3d1e55b167ff672c61c12cc4c73735d9b5174d5d43dcb9b9e3ccec01d7f3f449f6e80d902ecd1f3604de94d97fdb94f047cf21df3251821e8ff111e6cfeaf48ddad0e782b877f3d9efe8801b0a44d1cd106409eaaeda28855119e5ad30a77309766e76a3d544e7fc7c9a167122531b25aec37992be5049aa3cf5da5f703ee31c8b46be2da106b198153b4330dcee87aa48bdc04782a1c052d125ea1547b94e", 0xa0}], 0x7, &(0x7f0000003cc0)}}], 0x3, 0x8011)

316.893129ms ago: executing program 2 (id=2661):
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = epoll_create1(0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) (rerun: 32)
writev(r3, &(0x7f0000000180)=[{&(0x7f0000000000)="9c", 0xffffff7d}], 0x1) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)) (async)
shutdown(r3, 0x1) (async)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000040)={0xa0002007}) (async)
pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
connect$inet6(r1, &(0x7f0000000000)={0x2, 0x0, 0x0, @loopback}, 0x1c) (rerun: 64)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81000e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

135.955983ms ago: executing program 2 (id=2662):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x7, <r6=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@cgroup, 0xffffffffffffffff, 0x2c, 0x2c, 0x0, @link_id=r6}, 0x20)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYRESDEC=r5, @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}}, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000200)={0x1f, 0x8, 0x715, 0x9, 0x7})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000006c0)={0x34, r10, 0x319, 0x0, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x4)
connect$inet(r1, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10)

135.555688ms ago: executing program 1 (id=2663):
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000000000000060ec970000302c00fe8000000000000000000300000000aaff0200000000000000000000000000013a"], 0xfdef)

33.110927ms ago: executing program 4 (id=2664):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x38, r1, 0x5, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x11}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x38}}, 0x0) (fail_nth: 7)

0s ago: executing program 0 (id=2665):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x50)

kernel console output (not intermixed with test programs):

 has an invalid length.
[  127.694876][ T7947] FAULT_INJECTION: forcing a failure.
[  127.694876][ T7947] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  127.750341][ T7947] CPU: 0 PID: 7947 Comm: syz.1.841 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0
[  127.760367][ T7947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  127.770440][ T7947] Call Trace:
[  127.773735][ T7947]  <TASK>
[  127.776672][ T7947]  dump_stack_lvl+0x241/0x360
[  127.781378][ T7947]  ? __pfx_dump_stack_lvl+0x10/0x10
[  127.786591][ T7947]  ? __pfx__printk+0x10/0x10
[  127.791204][ T7947]  ? __pfx_lock_release+0x10/0x10
[  127.796249][ T7947]  should_fail_ex+0x3b0/0x4e0
[  127.800948][ T7947]  _copy_from_iter+0x1f6/0x1960
[  127.805815][ T7947]  ? __virt_addr_valid+0x183/0x520
[  127.810929][ T7947]  ? __pfx_lock_release+0x10/0x10
[  127.815955][ T7947]  ? __alloc_skb+0x28f/0x440
[  127.820537][ T7947]  ? __pfx__copy_from_iter+0x10/0x10
[  127.825821][ T7947]  ? __virt_addr_valid+0x183/0x520
[  127.830924][ T7947]  ? __virt_addr_valid+0x183/0x520
[  127.836044][ T7947]  ? __virt_addr_valid+0x44e/0x520
[  127.841148][ T7947]  ? __check_object_size+0x49c/0x900
[  127.846432][ T7947]  netlink_sendmsg+0x73d/0xcb0
[  127.851197][ T7947]  ? __pfx_netlink_sendmsg+0x10/0x10
[  127.856475][ T7947]  ? __import_iovec+0x536/0x820
[  127.861322][ T7947]  ? aa_sock_msg_perm+0x91/0x160
[  127.866259][ T7947]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  127.871552][ T7947]  ? security_socket_sendmsg+0x87/0xb0
[  127.877002][ T7947]  ? __pfx_netlink_sendmsg+0x10/0x10
[  127.882275][ T7947]  __sock_sendmsg+0x221/0x270
[  127.886950][ T7947]  ____sys_sendmsg+0x525/0x7d0
[  127.891717][ T7947]  ? __pfx_____sys_sendmsg+0x10/0x10
[  127.897005][ T7947]  __sys_sendmsg+0x2b0/0x3a0
[  127.901593][ T7947]  ? __pfx___sys_sendmsg+0x10/0x10
[  127.906703][ T7947]  ? vfs_write+0x7c4/0xc90
[  127.911144][ T7947]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  127.917501][ T7947]  ? do_syscall_64+0x100/0x230
[  127.922261][ T7947]  ? do_syscall_64+0xb6/0x230
[  127.926929][ T7947]  do_syscall_64+0xf3/0x230
[  127.931423][ T7947]  ? clear_bhb_loop+0x35/0x90
[  127.936093][ T7947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.941976][ T7947] RIP: 0033:0x7fa0ad375bd9
[  127.946388][ T7947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.965987][ T7947] RSP: 002b:00007fa0acdff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  127.974391][ T7947] RAX: ffffffffffffffda RBX: 00007fa0ad503f60 RCX: 00007fa0ad375bd9
[  127.982348][ T7947] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004
[  127.990306][ T7947] RBP: 00007fa0acdff0a0 R08: 0000000000000000 R09: 0000000000000000
[  127.998265][ T7947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  128.006225][ T7947] R13: 000000000000000b R14: 00007fa0ad503f60 R15: 00007ffc98aa4798
[  128.014202][ T7947]  </TASK>
[  128.194782][ T7958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.847'.
[  128.552373][ T7983] netlink: 596 bytes leftover after parsing attributes in process `syz.1.853'.
[  128.562021][ T7981] netlink: 'syz.4.854': attribute type 1 has an invalid length.
[  128.570976][ T7981] netlink: 'syz.4.854': attribute type 1 has an invalid length.
[  128.645098][ T7975] macvlan0: entered promiscuous mode
[  128.697321][ T7975] ipvlan0: entered promiscuous mode
[  128.711480][ T7975] ipvlan0: left promiscuous mode
[  128.718026][ T7975] macvlan0: left promiscuous mode
[  129.303159][ T8009] bridge0: entered promiscuous mode
[  129.377156][ T5098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  129.397580][ T5098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  129.408888][ T5098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  129.409540][ T8008] bridge0: left promiscuous mode
[  129.431294][ T5098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  129.446469][ T5098] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  129.454465][ T5098] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  129.632790][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.666633][ T8015] netlink: 'syz.2.867': attribute type 4 has an invalid length.
[  129.807310][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.832324][ T8024] netlink: 'syz.1.871': attribute type 10 has an invalid length.
[  129.951598][ T8024] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  130.066667][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.092117][ T8038] __nla_validate_parse: 5 callbacks suppressed
[  130.092134][ T8038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.874'.
[  130.123644][ T8040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.877'.
[  130.268347][   T12] team0: Port device netdevsim0 removed
[  130.283513][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.313600][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.876'.
[  130.801872][ T8010] chnl_net:caif_netlink_parms(): no params data found
[  130.816253][ T8075] netlink: 2352 bytes leftover after parsing attributes in process `syz.3.886'.
[  130.866774][   T12] bridge_slave_1: left allmulticast mode
[  130.886089][   T12] bridge_slave_1: left promiscuous mode
[  130.898932][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.971837][   T12] bridge_slave_0: left allmulticast mode
[  130.994930][   T12] bridge_slave_0: left promiscuous mode
[  131.001968][ T8082] netlink: 248 bytes leftover after parsing attributes in process `syz.1.890'.
[  131.034209][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.554578][ T5091] Bluetooth: hci2: command tx timeout
[  131.791087][ T8114] netlink: 48 bytes leftover after parsing attributes in process `syz.4.898'.
[  131.794543][ T5098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  131.812000][   T12] bond0 (unregistering): (slave vlan2): Releasing backup interface
[  131.820916][ T5098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  131.828971][ T5098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  131.842264][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  131.851136][ T5098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  131.883856][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  132.156073][   T12] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  132.281390][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.293233][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.307482][   T12] bond0 (unregistering): Released all slaves
[  132.406023][ T8128] netlink: 'syz.4.902': attribute type 10 has an invalid length.
[  132.446884][ T8128] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  132.529297][   T12] tipc: Disabling bearer <eth:macvlan0>
[  132.538716][   T12] tipc: Left network mode
[  132.838639][ T8010] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.870794][ T8010] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.883033][ T8010] bridge_slave_0: entered allmulticast mode
[  132.891607][ T8010] bridge_slave_0: entered promiscuous mode
[  133.001528][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.909'.
[  133.046561][ T8010] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.056733][ T8010] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.097928][ T8010] bridge_slave_1: entered allmulticast mode
[  133.115165][ T8010] bridge_slave_1: entered promiscuous mode
[  133.159234][ T1244] ieee802154 phy0 wpan0: encryption failed: -22
[  133.501822][ T8180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.917'.
[  133.532636][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.918'.
[  133.595940][ T8010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.634030][ T5098] Bluetooth: hci2: command tx timeout
[  133.688410][   T12] hsr_slave_0: left promiscuous mode
[  133.724457][   T12] hsr_slave_1: left promiscuous mode
[  133.769937][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.799353][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  133.831730][ T8200] netlink: 184 bytes leftover after parsing attributes in process `syz.1.924'.
[  133.831818][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.870427][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.932302][   T12] veth1_macvtap: left promiscuous mode
[  133.946324][   T12] veth0_macvtap: left promiscuous mode
[  133.952393][   T12] veth1_vlan: left promiscuous mode
[  133.957836][ T5098] Bluetooth: hci1: command tx timeout
[  133.957952][   T12] veth0_vlan: left promiscuous mode
[  134.432668][   T12] team0 (unregistering): Port device team_slave_1 removed
[  134.478575][   T12] team0 (unregistering): Port device team_slave_0 removed
[  134.804648][ T8010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.837559][ T8215] netlink: 'syz.2.928': attribute type 5 has an invalid length.
[  135.032748][ T8010] team0: Port device team_slave_0 added
[  135.053193][ T8010] team0: Port device team_slave_1 added
[  135.314940][ T8010] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.328968][ T8010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.397456][ T8010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  135.482000][ T8010] batman_adv: batadv0: Adding interface: batadv_slave_1
[  135.509540][ T8010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.574402][ T8010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.715616][ T5098] Bluetooth: hci2: command tx timeout
[  135.898106][ T8265] __nla_validate_parse: 5 callbacks suppressed
[  135.898124][ T8265] netlink: 14 bytes leftover after parsing attributes in process `syz.1.938'.
[  135.934935][ T8010] hsr_slave_0: entered promiscuous mode
[  135.986439][ T8010] hsr_slave_1: entered promiscuous mode
[  135.997825][ T8010] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  136.014621][ T8010] Cannot create hsr debugfs directory
[  136.033854][ T5098] Bluetooth: hci1: command tx timeout
[  136.055533][ T8115] chnl_net:caif_netlink_parms(): no params data found
[  136.420098][ T8115] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.446247][ T8115] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.468450][ T8115] bridge_slave_0: entered allmulticast mode
[  136.493130][ T8115] bridge_slave_0: entered promiscuous mode
[  136.509702][ T8115] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.525244][ T8115] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.540896][ T8115] bridge_slave_1: entered allmulticast mode
[  136.563832][ T8115] bridge_slave_1: entered promiscuous mode
[  136.781237][ T8115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.918485][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.962962][ T8115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  137.146099][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.311714][ T8115] team0: Port device team_slave_0 added
[  137.330834][ T8115] team0: Port device team_slave_1 added
[  137.361843][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.393437][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'.
[  137.621811][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.652607][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.962'.
[  137.766624][ T8115] batman_adv: batadv0: Adding interface: batadv_slave_0
[  137.785606][ T8115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.813936][ T5098] Bluetooth: hci2: command tx timeout
[  137.825172][ T8115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  137.842796][ T8115] batman_adv: batadv0: Adding interface: batadv_slave_1
[  137.868420][ T8115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.905734][ T8115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  137.980155][ T8341] syzkaller0: entered promiscuous mode
[  137.990325][ T8341] syzkaller0: entered allmulticast mode
[  138.114016][ T5098] Bluetooth: hci1: command tx timeout
[  139.534072][ T8115] hsr_slave_0: entered promiscuous mode
[  139.540347][ T8115] hsr_slave_1: entered promiscuous mode
[  139.549416][ T8115] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  139.560305][ T8115] Cannot create hsr debugfs directory
[  139.566808][ T8357] netlink: 'syz.1.965': attribute type 4 has an invalid length.
[  139.818171][ T8367] FAULT_INJECTION: forcing a failure.
[  139.818171][ T8367] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  139.877358][ T8367] CPU: 0 PID: 8367 Comm: syz.1.971 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0
[  139.886263][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.970'.
[  139.887447][ T8367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  139.906266][ T8367] Call Trace:
[  139.909562][ T8367]  <TASK>
[  139.912513][ T8367]  dump_stack_lvl+0x241/0x360
[  139.917241][ T8367]  ? __pfx_dump_stack_lvl+0x10/0x10
[  139.922456][ T8367]  ? __pfx__printk+0x10/0x10
[  139.927068][ T8367]  ? __pfx_lock_release+0x10/0x10
[  139.932116][ T8367]  should_fail_ex+0x3b0/0x4e0
[  139.936826][ T8367]  _copy_from_user+0x2f/0xe0
[  139.941441][ T8367]  do_sys_poll+0x23a/0x1300
[  139.945982][ T8367]  ? _parse_integer_limit+0x1b5/0x200
[  139.951380][ T8367]  ? mark_lock+0x9a/0x350
[  139.955734][ T8367]  ? __pfx_do_sys_poll+0x10/0x10
[  139.960836][ T8367]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  139.962309][ T8010] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  139.966729][ T8367]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  139.966779][ T8367]  ? __pfx_do_sys_openat2+0x10/0x10
[  139.966814][ T8367]  __se_sys_poll+0x1c5/0x400
[  139.988860][ T8367]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  139.994858][ T8367]  ? __pfx___se_sys_poll+0x10/0x10
[  139.999992][ T8367]  ? do_syscall_64+0x100/0x230
[  140.004778][ T8367]  ? do_syscall_64+0xb6/0x230
[  140.009480][ T8367]  do_syscall_64+0xf3/0x230
[  140.014094][ T8367]  ? clear_bhb_loop+0x35/0x90
[  140.018799][ T8367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.024710][ T8367] RIP: 0033:0x7fa0ad375bd9
[  140.029141][ T8367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.048767][ T8367] RSP: 002b:00007fa0acdff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000007
[  140.057204][ T8367] RAX: ffffffffffffffda RBX: 00007fa0ad503f60 RCX: 00007fa0ad375bd9
[  140.065195][ T8367] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020000040
[  140.073185][ T8367] RBP: 00007fa0acdff0a0 R08: 0000000000000000 R09: 0000000000000000
[  140.081260][ T8367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  140.089261][ T8367] R13: 000000000000000b R14: 00007fa0ad503f60 R15: 00007ffc98aa4798
[  140.097267][ T8367]  </TASK>
[  140.128432][   T12] bridge_slave_1: left allmulticast mode
[  140.141528][   T12] bridge_slave_1: left promiscuous mode
[  140.170278][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.193843][ T5098] Bluetooth: hci1: command tx timeout
[  140.227300][   T12] bridge_slave_0: left allmulticast mode
[  140.232986][   T12] bridge_slave_0: left promiscuous mode
[  140.259230][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.839007][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.982'.
[  140.848700][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  140.861611][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  140.872367][   T12] bond0 (unregistering): Released all slaves
[  140.893893][ T8010] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  140.903268][ T8398] netlink: 'syz.2.976': attribute type 10 has an invalid length.
[  140.933381][ T8398] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  141.086584][ T8010] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  141.152976][ T8010] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  141.313217][ T8433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  141.463912][ T8446] netlink: 'syz.2.991': attribute type 1 has an invalid length.
[  141.491786][ T8446] netlink: 224 bytes leftover after parsing attributes in process `syz.2.991'.
[  141.604145][ T8444] netlink: 16 bytes leftover after parsing attributes in process `syz.4.990'.
[  141.861890][   T12] hsr_slave_0: left promiscuous mode
[  141.909201][   T12] hsr_slave_1: left promiscuous mode
[  141.917251][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.943323][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.960797][ T8466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.995'.
[  141.984735][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.992179][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.041150][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.994'.
[  142.068972][   T12] veth1_macvtap: left promiscuous mode
[  142.093237][   T12] veth0_macvtap: left promiscuous mode
[  142.126290][   T12] veth1_vlan: left promiscuous mode
[  142.136644][   T12] veth0_vlan: left promiscuous mode
[  142.739005][   T12] team0 (unregistering): Port device team_slave_1 removed
[  142.772513][   T12] team0 (unregistering): Port device team_slave_0 removed
[  143.223646][ T8010] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.301290][ T8503] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  143.388587][ T8010] 8021q: adding VLAN 0 to HW filter on device team0
[  143.509837][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.517046][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.623270][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.630479][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.712577][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'.
[  143.886933][ T8010] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  143.901543][ T8543] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1013'.
[  143.927081][ T8542] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1012'.
[  143.975461][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1011'.
[  144.128042][ T8554] tipc: Started in network mode
[  144.132955][ T8554] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711
[  144.156876][ T8554] tipc: Enabled bearer <eth:batadv0>, priority 0
[  144.178491][ T8115] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  144.223321][ T8115] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  144.286779][ T8115] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  144.340756][ T8115] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  144.549018][ T8578] syzkaller1: entered promiscuous mode
[  144.558401][ T8578] syzkaller1: entered allmulticast mode
[  144.604326][ T8010] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.682283][ T8588] netlink: 'syz.4.1024': attribute type 11 has an invalid length.
[  144.951429][ T8115] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.031928][ T8010] veth0_vlan: entered promiscuous mode
[  145.061684][ T8010] veth1_vlan: entered promiscuous mode
[  145.078202][ T8115] 8021q: adding VLAN 0 to HW filter on device team0
[  145.119082][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.126263][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.174408][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.181556][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.252782][ T8010] veth0_macvtap: entered promiscuous mode
[  145.276401][ T5155] tipc: Node number set to 8432298
[  145.278431][ T8619] nft_compat: unsupported protocol 0
[  145.297510][ T8010] veth1_macvtap: entered promiscuous mode
[  145.381156][ T8010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.410831][ T8010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.416458][ T8628] FAULT_INJECTION: forcing a failure.
[  145.416458][ T8628] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  145.433770][ T8010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.433793][ T8010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.433809][ T8010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.433822][ T8010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.435498][ T8010] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.446926][ T8628] CPU: 0 PID: 8628 Comm: syz.4.1034 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0
[  145.492052][ T8628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  145.502099][ T8628] Call Trace:
[  145.505370][ T8628]  <TASK>
[  145.508298][ T8628]  dump_stack_lvl+0x241/0x360
[  145.512969][ T8628]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.518159][ T8628]  ? __pfx__printk+0x10/0x10
[  145.522748][ T8628]  ? __pfx_lock_release+0x10/0x10
[  145.527788][ T8628]  should_fail_ex+0x3b0/0x4e0
[  145.532480][ T8628]  _copy_to_user+0x2f/0xb0
[  145.536892][ T8628]  bpf_test_finish+0x30f/0x8b0
[  145.541684][ T8628]  ? __pfx_bpf_test_finish+0x10/0x10
[  145.546972][ T8628]  ? _copy_from_user+0xa6/0xe0
[  145.551729][ T8628]  ? bpf_test_init+0x15a/0x180
[  145.556486][ T8628]  bpf_prog_test_run_xdp+0x905/0x11b0
[  145.561857][ T8628]  ? __pfx_lock_release+0x10/0x10
[  145.566879][ T8628]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  145.572765][ T8628]  ? __fget_files+0x29/0x470
[  145.577360][ T8628]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  145.583160][ T8628]  bpf_prog_test_run+0x33a/0x3b0
[  145.588092][ T8628]  __sys_bpf+0x48d/0x810
[  145.592334][ T8628]  ? __pfx___sys_bpf+0x10/0x10
[  145.597100][ T8628]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  145.603077][ T8628]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  145.609392][ T8628]  ? do_syscall_64+0x100/0x230
[  145.614162][ T8628]  __x64_sys_bpf+0x7c/0x90
[  145.618585][ T8628]  do_syscall_64+0xf3/0x230
[  145.623102][ T8628]  ? clear_bhb_loop+0x35/0x90
[  145.627779][ T8628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.633669][ T8628] RIP: 0033:0x7fe169775bd9
[  145.638078][ T8628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.657681][ T8628] RSP: 002b:00007fe16a615048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  145.666088][ T8628] RAX: ffffffffffffffda RBX: 00007fe169903f60 RCX: 00007fe169775bd9
[  145.674049][ T8628] RDX: 000000000000000c RSI: 0000000020000500 RDI: 000000000000000a
[  145.682010][ T8628] RBP: 00007fe16a6150a0 R08: 0000000000000000 R09: 0000000000000000
[  145.689970][ T8628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  145.697940][ T8628] R13: 000000000000000b R14: 00007fe169903f60 R15: 00007fff381c7658
[  145.705936][ T8628]  </TASK>
[  145.713611][ T8010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.733218][ T8010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.744828][ T8010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.755526][ T8010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.766175][ T8010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.793491][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1035'.
[  145.803244][ T8010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.827037][ T8010] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.873389][ T8115] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.958129][ T8115] veth0_vlan: entered promiscuous mode
[  145.992199][ T8115] veth1_vlan: entered promiscuous mode
[  146.051047][ T8010] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.103778][ T8010] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.112509][ T8010] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.152341][ T8010] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.192597][ T8644] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1040'.
[  146.218286][ T8647] netlink: 'syz.2.1040': attribute type 2 has an invalid length.
[  146.250431][ T8647] netlink: 'syz.2.1040': attribute type 2 has an invalid length.
[  146.292123][ T8647] netlink: 'syz.2.1040': attribute type 2 has an invalid length.
[  146.301566][ T8647] netlink: 'syz.2.1040': attribute type 2 has an invalid length.
[  146.309139][ T8115] veth0_macvtap: entered promiscuous mode
[  146.318108][ T8647] netlink: 'syz.2.1040': attribute type 2 has an invalid length.
[  146.329203][ T8647] netlink: 'syz.2.1040': attribute type 2 has an invalid length.
[  146.341529][ T8647] netlink: 'syz.2.1040': attribute type 2 has an invalid length.
[  146.367179][ T8115] veth1_macvtap: entered promiscuous mode
[  146.373108][ T8647] netlink: 'syz.2.1040': attribute type 2 has an invalid length.
[  146.389079][ T8647] netlink: 'syz.2.1040': attribute type 2 has an invalid length.
[  146.398826][ T8647] netlink: 'syz.2.1040': attribute type 2 has an invalid length.
[  146.532109][ T8115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.549754][ T8115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.561859][ T8115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.572653][ T8115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.582867][ T8115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.597658][ T8115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.609132][ T8115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.625407][ T8658] __nla_validate_parse: 1 callbacks suppressed
[  146.625423][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1046'.
[  146.642236][ T8115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.654351][ T8115] batman_adv: batadv0: Interface activated: batadv_slave_0
[  146.691833][ T8115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.709254][ T8115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.729403][ T8115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.743155][ T8115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.749795][ T8662] ieee802154 phy0 wpan0: encryption failed: -22
[  146.757825][ T8115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.770395][ T8115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.781637][ T8115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.792452][ T8115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.805184][ T8115] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.816789][ T8115] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.833126][ T8115] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.842407][ T8115] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.851781][ T8115] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.870913][ T1253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.881207][ T1253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.978839][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.005144][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.120664][ T8673] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1050'.
[  147.310622][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.331499][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.378441][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1053'.
[  147.406679][ T8679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  147.413989][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.429321][ T8679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  147.461605][ T8679] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1053'.
[  147.470787][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.580961][ T8687] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1056'.
[  147.590848][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1055'.
[  147.620356][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1056'.
[  147.771977][ T8697] netlink: 88 bytes leftover after parsing attributes in process `syz.3.893'.
[  147.803288][ T8697] netem: invalid attributes len -24
[  147.813355][ T8697] netem: change failed
[  148.140629][ T8715] team0: entered promiscuous mode
[  148.149783][ T8715] team_slave_0: entered promiscuous mode
[  148.163616][ T8715] team_slave_1: entered promiscuous mode
[  148.311149][ T8720] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1066'.
[  148.335457][ T8709] team0: left promiscuous mode
[  148.352444][ T8709] team_slave_0: left promiscuous mode
[  148.366453][ T8709] team_slave_1: left promiscuous mode
[  148.436718][ T8729] syzkaller1: entered promiscuous mode
[  148.450640][ T8729] syzkaller1: entered allmulticast mode
[  148.486612][ T8733] netlink: 210620 bytes leftover after parsing attributes in process `syz.2.1070'.
[  148.942701][ T8755] syzkaller1: entered promiscuous mode
[  148.951103][ T8755] syzkaller1: entered allmulticast mode
[  149.917344][ T8812] Cannot find add_set index 0 as target
[  150.191992][ T8827] tipc: Enabled bearer <udp:syz2>, priority 10
[  150.340154][ T8836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  151.807269][ T8951] __nla_validate_parse: 5 callbacks suppressed
[  151.807287][ T8951] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1151'.
[  151.916157][ T8965] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1155'.
[  151.968571][    C1] vxcan0: j1939_tp_rxtimer: 0xffff88802393d000: rx timeout, send abort
[  151.978835][    C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802393d000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  152.187142][ T8983] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1162'.
[  152.319217][ T8991] validate_nla: 62 callbacks suppressed
[  152.319236][ T8991] netlink: 'syz.1.1165': attribute type 63 has an invalid length.
[  152.603568][ T9006] netlink: 'syz.2.1171': attribute type 27 has an invalid length.
[  152.698750][ T8975] atomic_op ffff8880678fb998 conn xmit_atomic 0000000000000000
[  152.781858][ T9019] FAULT_INJECTION: forcing a failure.
[  152.781858][ T9019] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  152.803832][ T9019] CPU: 1 PID: 9019 Comm: syz.3.1176 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0
[  152.813939][ T9019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  152.824007][ T9019] Call Trace:
[  152.827288][ T9019]  <TASK>
[  152.830209][ T9019]  dump_stack_lvl+0x241/0x360
[  152.834942][ T9019]  ? __pfx_dump_stack_lvl+0x10/0x10
[  152.840132][ T9019]  ? __pfx__printk+0x10/0x10
[  152.844722][ T9019]  ? __pfx_lock_release+0x10/0x10
[  152.849737][ T9019]  ? vfs_write+0x7c4/0xc90
[  152.854147][ T9019]  should_fail_ex+0x3b0/0x4e0
[  152.858820][ T9019]  _copy_from_user+0x2f/0xe0
[  152.863402][ T9019]  __sys_bpf+0x1a4/0x810
[  152.867649][ T9019]  ? __pfx___sys_bpf+0x10/0x10
[  152.872414][ T9019]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  152.878386][ T9019]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  152.884705][ T9019]  ? do_syscall_64+0x100/0x230
[  152.889470][ T9019]  __x64_sys_bpf+0x7c/0x90
[  152.893889][ T9019]  do_syscall_64+0xf3/0x230
[  152.898393][ T9019]  ? clear_bhb_loop+0x35/0x90
[  152.903064][ T9019]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.908954][ T9019] RIP: 0033:0x7f2f70775bd9
[  152.913362][ T9019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.932957][ T9019] RSP: 002b:00007f2f701ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  152.941362][ T9019] RAX: ffffffffffffffda RBX: 00007f2f70903f60 RCX: 00007f2f70775bd9
[  152.949322][ T9019] RDX: 0000000000000050 RSI: 00000000200003c0 RDI: 000000000000000a
[  152.957282][ T9019] RBP: 00007f2f701ff0a0 R08: 0000000000000000 R09: 0000000000000000
[  152.965239][ T9019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  152.973284][ T9019] R13: 000000000000000b R14: 00007f2f70903f60 R15: 00007fff858b64c8
[  152.981255][ T9019]  </TASK>
[  153.086500][ T9024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1177'.
[  153.274084][ T9035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  153.700387][ T9064] tipc: Enabled bearer <ib:caif0>, priority 0
[  153.796313][ T9043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  153.824785][ T9071] netlink: 'syz.1.1192': attribute type 28 has an invalid length.
[  153.853435][ T9071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'.
[  153.887388][ T9079] syz_tun: entered allmulticast mode
[  153.916634][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1196'.
[  154.008938][ T9079] syz_tun (unregistering): left allmulticast mode
[  154.183288][ T9103] netlink: 'syz.3.1204': attribute type 1 has an invalid length.
[  154.685198][ T9128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1215'.
[  154.705895][ T9128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1215'.
[  154.757326][ T9140] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1218'.
[  154.854261][ T9145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1220'.
[  155.696241][ T9208] Cannot find add_set index 0 as target
[  155.869311][ T9220] delete_channel: no stack
[  155.990699][ T9229] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  156.007817][ T9229] gretap2: entered promiscuous mode
[  156.031523][ T9229] gretap2: entered allmulticast mode
[  156.190876][ T9247] syz.4.1259 uses old SIOCAX25GETINFO
[  156.201613][ T9243] FAULT_INJECTION: forcing a failure.
[  156.201613][ T9243] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  156.262623][ T9243] CPU: 1 PID: 9243 Comm: syz.0.1257 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0
[  156.272738][ T9243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  156.282815][ T9243] Call Trace:
[  156.286111][ T9243]  <TASK>
[  156.289055][ T9243]  dump_stack_lvl+0x241/0x360
[  156.293757][ T9243]  ? __pfx_dump_stack_lvl+0x10/0x10
[  156.298989][ T9243]  ? __pfx__printk+0x10/0x10
[  156.303651][ T9243]  ? __pfx_lock_release+0x10/0x10
[  156.308689][ T9243]  ? vfs_write+0x7c4/0xc90
[  156.313103][ T9243]  should_fail_ex+0x3b0/0x4e0
[  156.317784][ T9243]  _copy_from_user+0x2f/0xe0
[  156.322369][ T9243]  __sys_bpf+0x1a4/0x810
[  156.326659][ T9243]  ? __pfx___sys_bpf+0x10/0x10
[  156.331425][ T9243]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  156.337398][ T9243]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  156.343720][ T9243]  ? do_syscall_64+0x100/0x230
[  156.348479][ T9243]  __x64_sys_bpf+0x7c/0x90
[  156.352891][ T9243]  do_syscall_64+0xf3/0x230
[  156.357382][ T9243]  ? clear_bhb_loop+0x35/0x90
[  156.362053][ T9243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.367935][ T9243] RIP: 0033:0x7f9349975bd9
[  156.372348][ T9243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.391950][ T9243] RSP: 002b:00007f934a7f3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  156.400357][ T9243] RAX: ffffffffffffffda RBX: 00007f9349b03f60 RCX: 00007f9349975bd9
[  156.408317][ T9243] RDX: 0000000000000020 RSI: 0000000020000400 RDI: 0000000000000004
[  156.416279][ T9243] RBP: 00007f934a7f30a0 R08: 0000000000000000 R09: 0000000000000000
[  156.424240][ T9243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  156.432198][ T9243] R13: 000000000000000b R14: 00007f9349b03f60 R15: 00007ffc9ee0ea08
[  156.440172][ T9243]  </TASK>
[  156.973218][ T9277] netlink: 'syz.2.1269': attribute type 4 has an invalid length.
[  157.012806][ T9277] netlink: 'syz.2.1269': attribute type 4 has an invalid length.
[  157.204191][ T9291] syzkaller1: entered promiscuous mode
[  157.218143][ T9291] syzkaller1: entered allmulticast mode
[  157.237676][ T9291] dccp_invalid_packet: P.type (SYNC) not Data || [Data]Ack, while P.X == 0
[  157.442930][ T9303] __nla_validate_parse: 4 callbacks suppressed
[  157.442948][ T9303] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1276'.
[  157.488858][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1275'.
[  157.538552][ T9300] syz_tun: entered promiscuous mode
[  157.549512][ T9300] macvtap1: entered promiscuous mode
[  157.566101][ T9300] macvtap1: entered allmulticast mode
[  157.579585][ T9300] syz_tun: entered allmulticast mode
[  157.604182][ T9309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1275'.
[  157.645437][ T9309] syz_tun: left allmulticast mode
[  157.655345][ T9313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.666038][ T9309] syz_tun: left promiscuous mode
[  157.681919][ T9309] macvtap1: left promiscuous mode
[  157.689252][ T9309] macvtap1: left allmulticast mode
[  158.052723][ T9337] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.060024][ T9337] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.095933][ T9341] netlink: 'syz.3.1292': attribute type 30 has an invalid length.
[  158.230218][ T9351] syzkaller1: entered promiscuous mode
[  158.237418][ T9351] syzkaller1: entered allmulticast mode
[  158.582823][ T9373] Bluetooth: MGMT ver 1.22
[  158.584175][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1304'.
[  158.622968][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1306'.
[  158.940088][ T9401] pim6reg: entered allmulticast mode
[  159.254747][ T9418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1319'.
[  159.361052][ T9426] netlink: 'syz.1.1323': attribute type 11 has an invalid length.
[  159.374541][ T9426] netlink: 'syz.1.1323': attribute type 11 has an invalid length.
[  159.402072][ T9426] debugfs: Directory 'netdev:' with parent 'phy12' already present!
[  159.690055][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1330'.
[  160.024189][ T9473] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1340'.
[  160.205426][ T9493] netlink: 'syz.1.1348': attribute type 1 has an invalid length.
[  160.791741][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1358'.
[  160.811701][ T9530] netlink: 'syz.3.1358': attribute type 29 has an invalid length.
[  161.057499][ T9539] xt_TCPMSS: Only works on TCP SYN packets
[  161.066214][ T9539] rdma_op ffff8880117301f0 conn xmit_rdma 0000000000000000
[  161.077805][ T9539] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1363'.
[  161.129902][ T9539] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  161.901479][ T9581] vlan2: entered promiscuous mode
[  161.910675][ T9581] bridge3: entered promiscuous mode
[  161.926486][ T9581] bridge3: port 1(vlan2) entered blocking state
[  161.938949][ T9581] bridge3: port 1(vlan2) entered disabled state
[  161.948008][ T9581] vlan2: entered allmulticast mode
[  161.961922][ T9581] bridge3: entered allmulticast mode
[  161.979463][ T9581] vlan2: left allmulticast mode
[  161.990101][ T9581] bridge3: left allmulticast mode
[  161.999174][ T9581] bridge3: left promiscuous mode
[  162.233805][ T9600] raw_sendmsg: syz.2.1387 forgot to set AF_INET. Fix it!
[  162.918487][ T9642] __nla_validate_parse: 5 callbacks suppressed
[  162.918505][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1408'.
[  163.016350][ T9643] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1407'.
[  163.165412][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1412'.
[  163.200058][ T9654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1412'.
[  163.257817][ T9658] syzkaller0: tun_chr_ioctl cmd 1074025681
[  163.334964][ T9662] bridge1: entered promiscuous mode
[  163.341900][ T9662] vlan2: entered promiscuous mode
[  163.358336][ T9662] bridge1: port 1(vlan2) entered blocking state
[  163.375141][ T9662] bridge1: port 1(vlan2) entered disabled state
[  163.391229][ T9662] vlan2: entered allmulticast mode
[  163.414575][ T9662] bridge1: entered allmulticast mode
[  163.506052][ T9662] vlan2: left allmulticast mode
[  163.519305][ T9662] bridge1: left allmulticast mode
[  163.525960][ T9662] bridge1: left promiscuous mode
[  163.664970][ T9679] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1418'.
[  163.938501][ T9697] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1421'.
[  164.036488][ T9700] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  164.279384][ T9728] Bluetooth: MGMT ver 1.22
[  164.295252][ T9728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1426'.
[  164.354432][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1429'.
[  164.397620][ T9735] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1427'.
[  164.481250][ T9738] netlink: 'syz.0.1430': attribute type 10 has an invalid length.
[  164.531360][ T9738] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.589130][ T9738] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.600631][ T9745] netlink: 304 bytes leftover after parsing attributes in process `syz.3.1432'.
[  164.627239][ T9738] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  165.404281][ T9800] netlink: 'syz.0.1451': attribute type 1 has an invalid length.
[  165.526224][ T9807] xt_l2tp: missing protocol rule (udp|l2tpip)
[  165.835124][ T9834] netlink: 'syz.1.1461': attribute type 63 has an invalid length.
[  165.971932][ T9842] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  166.246651][ T9862] tipc: MTU too low for tipc bearer
[  166.747269][ T9903] netlink: 'syz.0.1495': attribute type 32 has an invalid length.
[  166.765116][ T9903] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116)
[  167.342706][ T9942] xt_l2tp: unknown flags: 10
[  167.561897][ T9961] netlink: 'syz.0.1519': attribute type 11 has an invalid length.
[  167.971282][ T9990] __nla_validate_parse: 11 callbacks suppressed
[  167.971302][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1529'.
[  168.021420][ T9992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1530'.
[  168.047499][ T9990] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  168.071169][ T9990] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  168.091773][ T9990] batman_adv: batadv1: Adding interface: netdevsim0
[  168.125186][ T9990] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.164794][ T9990] batman_adv: batadv1: Interface activated: netdevsim0
[  168.295939][T10006] netlink: 'syz.0.1534': attribute type 11 has an invalid length.
[  168.330207][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1538'.
[  168.721908][ T5091] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  168.752661][ T5091] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  168.761993][ T5091] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  168.771184][ T5091] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  168.781845][ T5091] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  168.791485][ T5091] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  169.072257][T10022] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.081051][T10022] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.335480][T10022] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  169.575558][ T9709] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.613175][T10071] netem: change failed
[  169.630588][T10079] pim6reg: entered allmulticast mode
[  169.732146][ T9709] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.758631][T10070] pim6reg: left allmulticast mode
[  169.889261][ T9709] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.047969][ T9709] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.131847][T10109] netlink: 'syz.0.1561': attribute type 11 has an invalid length.
[  170.374463][T10123] netlink: 'syz.1.1568': attribute type 1 has an invalid length.
[  170.389408][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1568'.
[  170.479144][ T9709] bridge_slave_1: left allmulticast mode
[  170.489107][T10130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1569'.
[  170.507057][ T9709] bridge_slave_1: left promiscuous mode
[  170.512905][ T9709] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.555561][ T9709] bridge_slave_0: left allmulticast mode
[  170.561243][ T9709] bridge_slave_0: left promiscuous mode
[  170.591574][ T9709] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.835130][ T5098] Bluetooth: hci3: command tx timeout
[  171.242917][ T9709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.254981][ T9709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.269967][ T9709] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  171.288557][ T9709] bond0 (unregistering): Released all slaves
[  171.334551][T10140] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1573'.
[  171.405434][T10159] �eth0_vlan: renamed from bridge_slave_1 (while UP)
[  171.544359][ T9709] tipc: Disabling bearer <eth:batadv0>
[  171.565302][ T9709] tipc: Disabling bearer <udp:syz2>
[  171.578602][ T9709] tipc: Disabling bearer <ib:caif0>
[  171.594327][ T9709] tipc: Left network mode
[  171.599099][T10029] chnl_net:caif_netlink_parms(): no params data found
[  171.767425][T10181] netlink: 'syz.0.1581': attribute type 11 has an invalid length.
[  171.969222][ T9709] hsr_slave_0: left promiscuous mode
[  171.997550][ T9709] hsr_slave_1: left promiscuous mode
[  172.020553][ T9709] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.033958][ T9709] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.056218][ T9709] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.065088][ T9709] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.108402][ T9709] veth1_macvtap: left promiscuous mode
[  172.120991][ T9709] veth0_macvtap: left promiscuous mode
[  172.127581][ T9709] veth1_vlan: left promiscuous mode
[  172.132993][ T9709] veth0_vlan: left promiscuous mode
[  172.582043][ T9709] team0 (unregistering): Port device team_slave_1 removed
[  172.620647][ T9709] team0 (unregistering): Port device team_slave_0 removed
[  172.923964][ T5098] Bluetooth: hci3: command tx timeout
[  172.968583][T10191] team0: Port device virt_wifi0 added
[  172.980070][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1589'.
[  173.121636][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1590'.
[  173.215672][T10216] veth0_macvtap: left promiscuous mode
[  173.312341][T10029] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.336743][T10029] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.350917][T10029] bridge_slave_0: entered allmulticast mode
[  173.360566][T10029] bridge_slave_0: entered promiscuous mode
[  173.369830][T10234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1590'.
[  173.396884][T10029] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.427320][T10029] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.434873][T10029] bridge_slave_1: entered allmulticast mode
[  173.447993][T10029] bridge_slave_1: entered promiscuous mode
[  173.566606][T10029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.587699][T10029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.659637][T10250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1601'.
[  173.707165][T10029] team0: Port device team_slave_0 added
[  173.731995][T10029] team0: Port device team_slave_1 added
[  173.810317][T10029] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.822155][T10252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1602'.
[  173.831666][T10029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.858084][T10252] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1602'.
[  173.869315][T10029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.903565][T10029] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.913157][T10029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.942038][T10029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.960438][T10261] netlink: 'syz.1.1604': attribute type 10 has an invalid length.
[  174.027327][T10261] team0: Device veth1_vlan failed to register rx_handler
[  174.135008][T10029] hsr_slave_0: entered promiscuous mode
[  174.154522][T10029] hsr_slave_1: entered promiscuous mode
[  174.700868][T10029] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  174.722604][T10029] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  174.750642][T10029] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  174.801101][T10029] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  174.895894][T10303] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1617'.
[  175.000400][ T5098] Bluetooth: hci3: command tx timeout
[  175.039977][T10309] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1620'.
[  175.062755][T10029] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.172634][T10029] 8021q: adding VLAN 0 to HW filter on device team0
[  175.194761][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.201963][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.241396][T10038] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.248593][T10038] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.287825][T10317] netlink: 'syz.1.1623': attribute type 63 has an invalid length.
[  175.308650][T10319] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1622'.
[  175.318991][T10317] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1623'.
[  175.330484][T10319] unsupported nlmsg_type 40
[  175.566837][T10327] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  175.751810][T10337] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  175.774746][T10029] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.017242][T10355] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  176.142301][T10029] veth0_vlan: entered promiscuous mode
[  176.160896][T10029] veth1_vlan: entered promiscuous mode
[  176.230304][T10029] veth0_macvtap: entered promiscuous mode
[  176.247623][T10029] veth1_macvtap: entered promiscuous mode
[  176.283352][T10365] vlan2: entered promiscuous mode
[  176.339722][T10029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.364111][T10029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.406564][T10029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.427326][T10029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.447187][T10029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.460136][T10029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.475588][T10029] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.490830][T10375] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check.
[  176.537228][T10029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.560577][T10029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.584327][T10029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.597888][T10029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.629326][T10029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.663943][T10029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.703590][T10029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.714561][T10386] netlink: 'syz.0.1649': attribute type 2 has an invalid length.
[  176.723931][T10029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.742978][T10029] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.793210][T10029] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.803322][T10029] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.812392][T10029] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.821222][T10029] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.019467][ T9704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.034195][ T9704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.074149][ T5098] Bluetooth: hci3: command tx timeout
[  177.124164][ T9704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.133076][ T9704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.650139][T10440] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  177.694331][T10442] syzkaller1: entered promiscuous mode
[  177.710002][T10442] syzkaller1: entered allmulticast mode
[  177.878040][T10459] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  178.093282][T10476] tipc: Started in network mode
[  178.111108][T10476] tipc: Node identity , cluster identity 4711
[  178.120110][T10476] tipc: Failed to set node id, please configure manually
[  178.128481][T10476] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  178.260870][T10484] pim6reg1: entered promiscuous mode
[  178.274371][T10484] pim6reg1: entered allmulticast mode
[  178.458015][T10496] sctp: [Deprecated]: syz.1.1687 (pid 10496) Use of int in maxseg socket option.
[  178.458015][T10496] Use struct sctp_assoc_value instead
[  179.023346][T10516] ɶƣ0GCTw
�: entered promiscuous mode
[  179.093223][T10513] ɶƣ0GC�: entered promiscuous mode
[  179.332483][T10527] __nla_validate_parse: 3 callbacks suppressed
[  179.332501][T10527] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1695'.
[  179.469536][T10532] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  179.586354][T10540] netlink: 'syz.0.1702': attribute type 12 has an invalid length.
[  179.596145][T10540] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.1702'.
[  179.726288][T10540] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1702'.
[  179.760701][T10540] openvswitch: netlink: VXLAN extension 1024 out of range max 1
[  179.788694][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  180.061187][T10576] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1712'.
[  180.108911][T10579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1713'.
[  180.128738][T10579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1713'.
[  180.143224][T10580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1714'.
[  180.187732][T10580] bond0: (slave netdevsim0): Releasing backup interface
[  180.224461][T10580] batman_adv: batadv1: Adding interface: netdevsim0
[  180.242818][T10580] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.293808][T10580] batman_adv: batadv1: Not using interface netdevsim0 (retrying later): interface not active
[  180.476215][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1722'.
[  180.528162][T10610] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1722'.
[  180.662037][T10616] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1726'.
[  180.717291][T10620] FAULT_INJECTION: forcing a failure.
[  180.717291][T10620] name failslab, interval 1, probability 0, space 0, times 0
[  180.745599][T10620] CPU: 1 PID: 10620 Comm: syz.0.1728 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0
[  180.755799][T10620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  180.765873][T10620] Call Trace:
[  180.769167][T10620]  <TASK>
[  180.772116][T10620]  dump_stack_lvl+0x241/0x360
[  180.776834][T10620]  ? __pfx_dump_stack_lvl+0x10/0x10
[  180.782049][T10620]  ? __pfx__printk+0x10/0x10
[  180.786674][T10620]  should_fail_ex+0x3b0/0x4e0
[  180.791378][T10620]  ? __alloc_skb+0x1c3/0x440
[  180.795995][T10620]  should_failslab+0x9/0x20
[  180.800521][T10620]  kmem_cache_alloc_node_noprof+0x71/0x320
[  180.806358][T10620]  __alloc_skb+0x1c3/0x440
[  180.810805][T10620]  ? __pfx___alloc_skb+0x10/0x10
[  180.815772][T10620]  ? netlink_ack_tlv_len+0x6e/0x200
[  180.820994][T10620]  netlink_ack+0x13f/0xa30
[  180.825429][T10620]  ? __pfx_lock_acquire+0x10/0x10
[  180.830451][T10620]  ? __pfx_netlbl_unlabel_staticremovedef+0x10/0x10
[  180.837052][T10620]  netlink_rcv_skb+0x262/0x430
[  180.841819][T10620]  ? __pfx_genl_rcv_msg+0x10/0x10
[  180.846859][T10620]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  180.852166][T10620]  genl_rcv+0x28/0x40
[  180.856145][T10620]  netlink_unicast+0x7f0/0x990
[  180.860918][T10620]  ? __pfx_netlink_unicast+0x10/0x10
[  180.866197][T10620]  ? __virt_addr_valid+0x183/0x520
[  180.871310][T10620]  ? __check_object_size+0x49c/0x900
[  180.876597][T10620]  ? bpf_lsm_netlink_send+0x9/0x10
[  180.881710][T10620]  netlink_sendmsg+0x8e4/0xcb0
[  180.886482][T10620]  ? __pfx_netlink_sendmsg+0x10/0x10
[  180.891764][T10620]  ? __import_iovec+0x361/0x820
[  180.896607][T10620]  ? aa_sock_msg_perm+0x91/0x160
[  180.901545][T10620]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  180.906822][T10620]  ? security_socket_sendmsg+0x87/0xb0
[  180.912283][T10620]  ? __pfx_netlink_sendmsg+0x10/0x10
[  180.917566][T10620]  __sock_sendmsg+0x221/0x270
[  180.922240][T10620]  ____sys_sendmsg+0x525/0x7d0
[  180.927010][T10620]  ? __pfx_____sys_sendmsg+0x10/0x10
[  180.932311][T10620]  __sys_sendmsg+0x2b0/0x3a0
[  180.937003][T10620]  ? __pfx___sys_sendmsg+0x10/0x10
[  180.942123][T10620]  ? vfs_write+0x7c4/0xc90
[  180.946583][T10620]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  180.952912][T10620]  ? do_syscall_64+0x100/0x230
[  180.957679][T10620]  ? do_syscall_64+0xb6/0x230
[  180.962356][T10620]  do_syscall_64+0xf3/0x230
[  180.966858][T10620]  ? clear_bhb_loop+0x35/0x90
[  180.971537][T10620]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.977425][T10620] RIP: 0033:0x7f9349975bd9
[  180.981869][T10620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  181.001483][T10620] RSP: 002b:00007f934a7f3048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  181.009899][T10620] RAX: ffffffffffffffda RBX: 00007f9349b03f60 RCX: 00007f9349975bd9
[  181.017868][T10620] RDX: 0000000000000000 RSI: 0000000020000d40 RDI: 0000000000000004
[  181.025831][T10620] RBP: 00007f934a7f30a0 R08: 0000000000000000 R09: 0000000000000000
[  181.033794][T10620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  181.041756][T10620] R13: 000000000000000b R14: 00007f9349b03f60 R15: 00007ffc9ee0ea08
[  181.049751][T10620]  </TASK>
[  181.314105][ T5091] Bluetooth: hci4: command 0x0405 tx timeout
[  181.377893][T10649] netlink: 'syz.4.1741': attribute type 1 has an invalid length.
[  181.829062][T10678] netlink: 'syz.4.1751': attribute type 20 has an invalid length.
[  182.259479][T10690] netlink: 'syz.0.1760': attribute type 5 has an invalid length.
[  182.611033][T10710] xt_TPROXY: Can be used only with -p tcp or -p udp
[  182.638003][T10715] netlink: 'syz.3.1770': attribute type 7 has an invalid length.
[  182.678675][T10716] netlink: 'syz.3.1770': attribute type 7 has an invalid length.
[  183.052103][T10731] netlink: 'syz.4.1775': attribute type 5 has an invalid length.
[  184.519596][T10847] netlink: 'syz.4.1821': attribute type 4 has an invalid length.
[  184.650396][T10848] syzkaller0: entered promiscuous mode
[  184.664570][T10857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  184.664576][T10848] syzkaller0: entered allmulticast mode
[  184.740399][T10858] netlink: 'syz.1.1825': attribute type 3 has an invalid length.
[  184.743029][T10859] __nla_validate_parse: 8 callbacks suppressed
[  184.743044][T10859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1826'.
[  184.752968][T10858] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1825'.
[  184.795228][T10860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.009032][T10869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.023093][T10869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.101072][T10870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.116202][T10870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  186.131398][T10864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1827'.
[  186.514932][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1830'.
[  186.634588][T10901] netlink: 'syz.0.1834': attribute type 1 has an invalid length.
[  187.067656][T10936] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1850'.
[  187.255249][T10946] trusted_key: syz.0.1855 sent an empty control message without MSG_MORE.
[  187.433999][T10960] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1859'.
[  187.450755][T10960] netlink: 5300 bytes leftover after parsing attributes in process `syz.2.1859'.
[  187.471670][T10960] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  187.626905][T10971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1861'.
[  187.868399][T10983] batadv0: entered promiscuous mode
[  187.922296][T10992] 8021q: adding VLAN 0 to HW filter on device batadv0
[  188.020275][T10993] IPVS: Scheduler module ip_vs_sip not found
[  188.022128][T10996] FAULT_INJECTION: forcing a failure.
[  188.022128][T10996] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  188.042175][T10996] CPU: 0 PID: 10996 Comm: syz.2.1870 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0
[  188.052363][T10996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  188.062434][T10996] Call Trace:
[  188.065729][T10996]  <TASK>
[  188.068675][T10996]  dump_stack_lvl+0x241/0x360
[  188.073380][T10996]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.078596][T10996]  ? __pfx__printk+0x10/0x10
[  188.083216][T10996]  ? __pfx_lock_release+0x10/0x10
[  188.088263][T10996]  should_fail_ex+0x3b0/0x4e0
[  188.092974][T10996]  _copy_to_user+0x2f/0xb0
[  188.097421][T10996]  bpf_prog_test_run_syscall+0x34b/0x4e0
[  188.103083][T10996]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  188.109265][T10996]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  188.115445][T10996]  bpf_prog_test_run+0x33a/0x3b0
[  188.120410][T10996]  __sys_bpf+0x48d/0x810
[  188.124704][T10996]  ? __pfx___sys_bpf+0x10/0x10
[  188.129510][T10996]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  188.135517][T10996]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  188.141998][T10996]  ? do_syscall_64+0x100/0x230
[  188.146800][T10996]  __x64_sys_bpf+0x7c/0x90
[  188.151373][T10996]  do_syscall_64+0xf3/0x230
[  188.155896][T10996]  ? clear_bhb_loop+0x35/0x90
[  188.160604][T10996]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.166520][T10996] RIP: 0033:0x7f07cdf75bd9
[  188.170946][T10996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.190546][T10996] RSP: 002b:00007f07ced62048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  188.198962][T10996] RAX: ffffffffffffffda RBX: 00007f07ce103f60 RCX: 00007f07cdf75bd9
[  188.206930][T10996] RDX: 0000000000000050 RSI: 00000000200003c0 RDI: 000000000000000a
[  188.214896][T10996] RBP: 00007f07ced620a0 R08: 0000000000000000 R09: 0000000000000000
[  188.222866][T10996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  188.230833][T10996] R13: 000000000000000b R14: 00007f07ce103f60 R15: 00007ffe7444e4b8
[  188.238839][T10996]  </TASK>
[  188.412529][T11013] netlink: 'syz.2.1874': attribute type 28 has an invalid length.
[  188.427120][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1874'.
[  188.568029][T11023] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1880'.
[  188.611437][T11023] netlink: 'syz.2.1880': attribute type 1 has an invalid length.
[  188.689762][T11028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  188.883005][T11034] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  188.900310][T11036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  188.961987][   T29] audit: type=1107 audit(1720200031.546:2): pid=11041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�'
[  189.046114][T11045] ip6gretap0: entered promiscuous mode
[  189.077219][T11045] batadv_slave_0: entered promiscuous mode
[  189.093364][T11045] ip6gretap0: left promiscuous mode
[  189.110960][T11045] batadv_slave_0: left promiscuous mode
[  189.485737][ T5091] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  189.499721][ T5091] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  189.507683][ T5091] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  189.517177][ T5091] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  189.527331][ T5091] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  189.535019][ T5091] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  189.872163][T11073] netlink: 'syz.1.1899': attribute type 5 has an invalid length.
[  189.887829][T11073] __nla_validate_parse: 2 callbacks suppressed
[  189.887845][T11073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1899'.
[  189.973532][ T9709] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.022697][T11058] chnl_net:caif_netlink_parms(): no params data found
[  190.150191][ T9709] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.325511][ T9709] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.459584][ T9709] batman_adv: batadv1: Removing interface: netdevsim0
[  190.483814][ T9709] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.605632][T11119] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  190.706215][T11058] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.713451][T11058] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.726337][T11058] bridge_slave_0: entered allmulticast mode
[  190.740422][T11058] bridge_slave_0: entered promiscuous mode
[  190.772729][T11058] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.803477][T11058] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.816727][T11058] bridge_slave_1: entered allmulticast mode
[  190.834333][T11058] bridge_slave_1: entered promiscuous mode
[  190.994813][T11058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  191.031403][ T9709] bridge_slave_1: left allmulticast mode
[  191.038158][ T9709] bridge_slave_1: left promiscuous mode
[  191.053882][ T9709] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.063529][ T9709] bridge_slave_0: left allmulticast mode
[  191.069929][ T9709] bridge_slave_0: left promiscuous mode
[  191.089439][ T9709] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.553814][ T5091] Bluetooth: hci0: command tx timeout
[  191.670600][ T9709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  191.681663][ T9709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  191.692491][ T9709] bond0 (unregistering): Released all slaves
[  191.708401][T11058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  191.781152][T11058] team0: Port device team_slave_0 added
[  192.068215][T11058] team0: Port device team_slave_1 added
[  192.090376][T11169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1931'.
[  192.145808][T11169] bridge_slave_1: left allmulticast mode
[  192.153828][T11169] bridge_slave_1: left promiscuous mode
[  192.185496][T11169] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.216213][T11169] bridge_slave_0: left allmulticast mode
[  192.221981][T11169] bridge_slave_0: left promiscuous mode
[  192.244273][T11169] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.464634][T11058] batman_adv: batadv0: Adding interface: batadv_slave_0
[  192.487866][T11058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.528936][T11058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  192.603335][T11058] batman_adv: batadv0: Adding interface: batadv_slave_1
[  192.610544][T11058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.638121][T11058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  192.732171][ T9709] hsr_slave_0: left promiscuous mode
[  192.769285][ T9709] hsr_slave_1: left promiscuous mode
[  192.779316][ T9709] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.791772][ T9709] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.800063][ T9709] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.810814][ T9709] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.881554][ T9709] veth1_macvtap: left promiscuous mode
[  192.882401][T11212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1942'.
[  192.887392][ T9709] veth0_macvtap: left promiscuous mode
[  192.887562][ T9709] veth1_vlan: left promiscuous mode
[  192.907731][ T9709] veth0_vlan: left promiscuous mode
[  193.282296][ T9709] team0 (unregistering): Port device virt_wifi0 removed
[  193.460551][ T9709] team0 (unregistering): Port device team_slave_1 removed
[  193.490127][ T9709] team0 (unregistering): Port device team_slave_0 removed
[  193.636434][ T5091] Bluetooth: hci0: command tx timeout
[  193.968311][T11229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1948'.
[  194.029726][T11058] hsr_slave_0: entered promiscuous mode
[  194.051030][T11058] hsr_slave_1: entered promiscuous mode
[  194.074700][T11058] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  194.087192][T11058] Cannot create hsr debugfs directory
[  194.193365][T11242] netlink: 'syz.3.1953': attribute type 142 has an invalid length.
[  194.471328][T11256] netlink: 'syz.3.1958': attribute type 8 has an invalid length.
[  194.483271][T11256] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1958'.
[  194.663032][T11257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  194.718929][T11261] netlink: 'syz.3.1960': attribute type 10 has an invalid length.
[  194.730080][T11261] batman_adv: batadv0: Adding interface: team0
[  194.736425][T11261] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.763886][T11261] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  194.806926][T11058] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  194.826294][T11058] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  194.837558][T11058] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  194.847427][T11271] vcan0 speed is unknown, defaulting to 1000
[  194.847809][T11058] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  194.871590][T11271] vcan0 speed is unknown, defaulting to 1000
[  194.881095][T11271] vcan0 speed is unknown, defaulting to 1000
[  195.032164][T11058] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.070695][T11271] infiniband syz1: set active
[  195.088651][T11058] 8021q: adding VLAN 0 to HW filter on device team0
[  195.092823][T11271] infiniband syz1: added vcan0
[  195.102039][ T5142] vcan0 speed is unknown, defaulting to 1000
[  195.110248][ T8583] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.117435][ T8583] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.137385][ T8583] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.144587][ T8583] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.215578][T11271] RDS/IB: syz1: added
[  195.230686][T11271] smc: adding ib device syz1 with port count 1
[  195.244252][T11271] smc:    ib device syz1 port 1 has pnetid 
[  195.268109][ T8583] vcan0 speed is unknown, defaulting to 1000
[  195.277417][T11280] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1964'.
[  195.282941][T11058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  195.293874][T11278] netlink: 'syz.0.1965': attribute type 10 has an invalid length.
[  195.310419][T11271] vcan0 speed is unknown, defaulting to 1000
[  195.338682][T11276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1964'.
[  195.437898][T11280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1964'.
[  195.626806][T11271] vcan0 speed is unknown, defaulting to 1000
[  195.714857][ T5091] Bluetooth: hci0: command tx timeout
[  195.729510][T11058] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.878152][T11058] veth0_vlan: entered promiscuous mode
[  195.944858][T11058] veth1_vlan: entered promiscuous mode
[  195.982792][T11308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  195.987117][T11296] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1968'.
[  196.086797][T11271] vcan0 speed is unknown, defaulting to 1000
[  196.100847][T11058] veth0_macvtap: entered promiscuous mode
[  196.121721][T11058] veth1_macvtap: entered promiscuous mode
[  196.167686][T11058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.185875][T11058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.218457][T11058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.243773][T11058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.253615][T11058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.288157][T11058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.322970][T11058] batman_adv: batadv0: Interface activated: batadv_slave_0
[  196.405938][T11058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.426854][T11058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.442395][T11058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.455640][T11058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.465738][T11058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.477104][T11058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.497152][T11058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.507969][T11058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.522671][T11058] batman_adv: batadv0: Interface activated: batadv_slave_1
[  196.541899][T11271] vcan0 speed is unknown, defaulting to 1000
[  196.611844][T11321] netlink: 'syz.3.1977': attribute type 7 has an invalid length.
[  196.619892][T11318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  196.663287][T11324] netem: change failed
[  196.705765][T11058] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.733606][T11058] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.764510][T11058] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.779771][T11058] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.867400][T11271] vcan0 speed is unknown, defaulting to 1000
[  196.915307][ T9797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.923613][ T9797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.014304][T11335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1981'.
[  197.026358][ T9686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.047813][ T9686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.078170][T11337] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1982'.
[  197.091164][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1982'.
[  197.256051][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1984'.
[  197.438126][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1991'.
[  197.455998][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1991'.
[  197.637549][T11375] macsec1: entered promiscuous mode
[  197.653573][T11375] macvlan0: entered promiscuous mode
[  197.795088][ T5091] Bluetooth: hci0: command tx timeout
[  197.819359][T11392] veth1_macvtap: left promiscuous mode
[  198.212131][T11415] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  198.244280][T11415] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  198.456982][T11438] veth0_macvtap: left promiscuous mode
[  199.524566][T11512] netlink: 'syz.2.2044': attribute type 5 has an invalid length.
[  199.828661][T11539] netlink: 'syz.1.2050': attribute type 63 has an invalid length.
[  199.921199][T11537] netlink: 'syz.2.2049': attribute type 29 has an invalid length.
[  199.959953][T11537] netlink: 'syz.2.2049': attribute type 29 has an invalid length.
[  200.225245][T11564] netlink: 'syz.4.2058': attribute type 3 has an invalid length.
[  200.487684][T11575] __nla_validate_parse: 9 callbacks suppressed
[  200.487704][T11575] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2062'.
[  200.610022][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2066'.
[  200.776349][T11591] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2068'.
[  200.862537][T11595] vlan2: entered promiscuous mode
[  200.889933][T11595] team0: entered promiscuous mode
[  200.907663][T11595] team_slave_0: entered promiscuous mode
[  200.924333][T11595] team_slave_1: entered promiscuous mode
[  200.936035][T11595] team0: Device vlan2 is already an upper device of the team interface
[  201.068990][T11595] team0: left promiscuous mode
[  201.081257][T11595] team_slave_0: left promiscuous mode
[  201.093565][T11595] team_slave_1: left promiscuous mode
[  201.518387][T11621] bond0: entered promiscuous mode
[  201.553875][T11621] bond_slave_0: entered promiscuous mode
[  201.559751][T11621] bond_slave_1: entered promiscuous mode
[  202.124680][T11666] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2090'.
[  202.333153][T11686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2093'.
[  202.489220][T11697] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2095'.
[  202.748314][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2103'.
[  202.781220][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2102'.
[  202.795698][T11718] vcan0 speed is unknown, defaulting to 1000
[  203.161060][T11745] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2116'.
[  203.738484][T11780] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  203.868612][T11787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  203.943813][T11791] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2133'.
[  204.041202][T11793] infiniband syz1: set down
[  204.099459][ T5138] vcan0 speed is unknown, defaulting to 1000
[  204.130153][ T9798] smc: removing ib device syz1
[  204.149745][    C1] vxcan0: j1939_session_tx_dat: 0xffff88802b825000: queue data error: -100
[  204.308592][T11806] netlink: 'syz.1.2138': attribute type 153 has an invalid length.
[  204.543419][T11800] syz.2.2135: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[  204.580432][T11800] CPU: 0 PID: 11800 Comm: syz.2.2135 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0
[  204.590619][T11800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  204.600689][T11800] Call Trace:
[  204.603986][T11800]  <TASK>
[  204.606929][T11800]  dump_stack_lvl+0x241/0x360
[  204.611635][T11800]  ? __pfx_dump_stack_lvl+0x10/0x10
[  204.616852][T11800]  ? __pfx__printk+0x10/0x10
[  204.621474][T11800]  ? __rcu_read_unlock+0xa1/0x110
[  204.626515][T11800]  warn_alloc+0x278/0x410
[  204.630865][T11800]  ? __pfx_warn_alloc+0x10/0x10
[  204.635742][T11800]  ? hash_netport_create+0x356/0x1040
[  204.641131][T11800]  ? __get_vm_area_node+0x23d/0x270
[  204.646347][T11800]  __vmalloc_node_range_noprof+0x69f/0x1460
[  204.652282][T11800]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  204.658629][T11800]  ? rcu_is_watching+0x15/0xb0
[  204.663409][T11800]  ? trace_kmalloc+0x1f/0xd0
[  204.668013][T11800]  ? __kmalloc_node_noprof+0x247/0x440
[  204.673485][T11800]  ? kvmalloc_node_noprof+0x72/0x190
[  204.678793][T11800]  kvmalloc_node_noprof+0x142/0x190
[  204.684010][T11800]  ? hash_netport_create+0x356/0x1040
[  204.689401][T11800]  hash_netport_create+0x356/0x1040
[  204.694627][T11800]  ? __pfx_hash_netport_create+0x10/0x10
[  204.700280][T11800]  ip_set_create+0xa5c/0x1900
[  204.704977][T11800]  ? ip_set_create+0x45e/0x1900
[  204.709841][T11800]  ? trace_raw_output_contention_end+0x4a/0xd0
[  204.716018][T11800]  ? __pfx_ip_set_create+0x10/0x10
[  204.721146][T11800]  ? trace_contention_end+0x3c/0x120
[  204.726487][T11800]  ? nfnetlink_rcv_msg+0x225/0x1180
[  204.731699][T11800]  nfnetlink_rcv_msg+0xbec/0x1180
[  204.736743][T11800]  ? kernel_text_address+0xa7/0xe0
[  204.741875][T11800]  ? nfnetlink_rcv_msg+0x225/0x1180
[  204.747115][T11800]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  204.752614][T11800]  ? netlink_deliver_tap+0x19d/0x1b0
[  204.757912][T11800]  ? netlink_unicast+0x7be/0x990
[  204.762857][T11800]  ? netlink_sendmsg+0x8e4/0xcb0
[  204.767806][T11800]  ? __sock_sendmsg+0x221/0x270
[  204.772670][T11800]  ? ____sys_sendmsg+0x525/0x7d0
[  204.777627][T11800]  ? __sys_sendmsg+0x2b0/0x3a0
[  204.782409][T11800]  ? do_syscall_64+0xf3/0x230
[  204.787097][T11800]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.793193][T11800]  netlink_rcv_skb+0x1e3/0x430
[  204.797976][T11800]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  204.803451][T11800]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  204.808765][T11800]  ? apparmor_capable+0x138/0x1b0
[  204.813813][T11800]  ? bpf_lsm_capable+0x9/0x10
[  204.818504][T11800]  ? security_capable+0x90/0xb0
[  204.823376][T11800]  nfnetlink_rcv+0x297/0x2a90
[  204.828070][T11800]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  204.833808][T11800]  ? __dev_queue_xmit+0x2da/0x3e90
[  204.838939][T11800]  ? __dev_queue_xmit+0x1763/0x3e90
[  204.844160][T11800]  ? kasan_save_track+0x51/0x80
[  204.849035][T11800]  ? do_syscall_64+0xf3/0x230
[  204.853725][T11800]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  204.858848][T11800]  ? __dev_queue_xmit+0x2da/0x3e90
[  204.863974][T11800]  ? __pfx___dev_queue_xmit+0x10/0x10
[  204.869375][T11800]  ? ref_tracker_free+0x643/0x7e0
[  204.874413][T11800]  ? __asan_memcpy+0x40/0x70
[  204.879011][T11800]  ? __pfx_ref_tracker_free+0x10/0x10
[  204.884418][T11800]  ? netlink_deliver_tap+0x2e/0x1b0
[  204.889626][T11800]  ? skb_clone+0x240/0x390
[  204.894057][T11800]  ? __pfx_lock_release+0x10/0x10
[  204.899098][T11800]  ? __netlink_deliver_tap+0x77e/0x7c0
[  204.904585][T11800]  ? netlink_deliver_tap+0x2e/0x1b0
[  204.909804][T11800]  netlink_unicast+0x7f0/0x990
[  204.914589][T11800]  ? __pfx_netlink_unicast+0x10/0x10
[  204.919882][T11800]  ? __virt_addr_valid+0x183/0x520
[  204.925013][T11800]  ? __check_object_size+0x49c/0x900
[  204.930312][T11800]  ? bpf_lsm_netlink_send+0x9/0x10
[  204.935442][T11800]  netlink_sendmsg+0x8e4/0xcb0
[  204.940234][T11800]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.945529][T11800]  ? __import_iovec+0x536/0x820
[  204.950384][T11800]  ? aa_sock_msg_perm+0x91/0x160
[  204.955339][T11800]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  204.960635][T11800]  ? security_socket_sendmsg+0x87/0xb0
[  204.966118][T11800]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.971411][T11800]  __sock_sendmsg+0x221/0x270
[  204.976106][T11800]  ____sys_sendmsg+0x525/0x7d0
[  204.980896][T11800]  ? __pfx_____sys_sendmsg+0x10/0x10
[  204.986223][T11800]  __sys_sendmsg+0x2b0/0x3a0
[  204.990831][T11800]  ? __pfx___sys_sendmsg+0x10/0x10
[  204.996000][T11800]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  205.002339][T11800]  ? do_syscall_64+0x100/0x230
[  205.007123][T11800]  ? do_syscall_64+0xb6/0x230
[  205.011819][T11800]  do_syscall_64+0xf3/0x230
[  205.016335][T11800]  ? clear_bhb_loop+0x35/0x90
[  205.021024][T11800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.026928][T11800] RIP: 0033:0x7f0e94775bd9
[  205.031351][T11800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.050967][T11800] RSP: 002b:00007f0e954b9048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  205.059400][T11800] RAX: ffffffffffffffda RBX: 00007f0e94904038 RCX: 00007f0e94775bd9
[  205.067380][T11800] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000c
[  205.075360][T11800] RBP: 00007f0e947e4aa1 R08: 0000000000000000 R09: 0000000000000000
[  205.083340][T11800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  205.091319][T11800] R13: 000000000000000b R14: 00007f0e94904038 R15: 00007fff325a5e28
[  205.099319][T11800]  </TASK>
[  205.113766][T11800] Mem-Info:
[  205.119686][T11800] active_anon:3085 inactive_anon:0 isolated_anon:0
[  205.119686][T11800]  active_file:1542 inactive_file:38208 isolated_file:0
[  205.119686][T11800]  unevictable:768 dirty:289 writeback:0
[  205.119686][T11800]  slab_reclaimable:9298 slab_unreclaimable:99556
[  205.119686][T11800]  mapped:13262 shmem:1240 pagetables:652
[  205.119686][T11800]  sec_pagetables:0 bounce:0
[  205.119686][T11800]  kernel_misc_reclaimable:0
[  205.119686][T11800]  free:1402626 free_pcp:380 free_cma:0
[  205.293877][ T5138] IPVS: starting estimator thread 0...
[  205.414387][T11831] IPVS: using max 17 ests per chain, 40800 per kthread
[  205.494999][T11800] Node 0 active_anon:12676kB inactive_anon:0kB active_file:6168kB inactive_file:152764kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:53104kB dirty:1152kB writeback:0kB shmem:3424kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11324kB pagetables:2760kB sec_pagetables:0kB all_unreclaimable? no
[  205.557976][T11800] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  205.598475][T11800] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  205.637465][T11800] lowmem_reserve[]: 0 2571 2571 0 0
[  205.642846][T11800] Node 0 DMA32 free:1650368kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:12732kB inactive_anon:0kB active_file:6168kB inactive_file:152456kB unevictable:1536kB writepending:1148kB present:3129332kB managed:2659864kB mlocked:0kB bounce:0kB free_pcp:1868kB local_pcp:1324kB free_cma:0kB
[  205.674910][T11838] __nla_validate_parse: 1 callbacks suppressed
[  205.674928][T11838] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2146'.
[  205.702084][T11800] lowmem_reserve[]: 0 0 0 0 0
[  205.708154][T11800] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  205.761217][T11800] lowmem_reserve[]: 0 0 0 0 0
[  205.779709][T11800] Node 1 Normal free:3946124kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  205.847960][T11842] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  205.860310][T11800] lowmem_reserve[]: 0 0 0 0 0
[  205.866315][T11800] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  205.869224][T11842] bridge_slave_0: default FDB implementation only supports local addresses
[  205.923958][T11842] netlink: 'syz.4.2150': attribute type 11 has an invalid length.
[  205.934310][T11800] Node 0 DMA32: 262*4kB (UME) 333*8kB (UME) 229*16kB (UME) 227*32kB (UME) 85*64kB (UME) 51*128kB (UME) 34*256kB (UME) 33*512kB (UME) 17*1024kB (UM) 5*2048kB (ME) 384*4096kB (UM) = 1652720kB
[  205.963861][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2150'.
[  205.974107][T11800] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  205.989707][T11800] Node 1 Normal: 1*4kB (M) 5*8kB (UM) 6*16kB (UM) 8*32kB (UM) 8*64kB (UM) 4*128kB (UM) 3*256kB (U) 3*512kB (UM) 2*1024kB (U) 6*2048kB (U) 959*4096kB (M) = 3946124kB
[  206.008537][T11800] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  206.028252][T11800] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  206.045104][T11800] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  206.054930][T11800] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  206.113269][T11800] 40990 total pagecache pages
[  206.133020][T11800] 0 pages in swap cache
[  206.177956][T11800] Free swap  = 124996kB
[  206.182150][T11800] Total swap = 124996kB
[  206.203844][T11800] 2097051 pages RAM
[  206.207682][T11800] 0 pages HighMem/MovableOnly
[  206.212355][T11800] 400875 pages reserved
[  206.226984][T11800] 0 pages cma reserved
[  206.245871][T11866] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  206.680594][T11893] netlink: 766 bytes leftover after parsing attributes in process `syz.1.2171'.
[  206.776025][T11901] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96
[  206.902877][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2175'.
[  207.120224][T11927] netlink: 'syz.0.2182': attribute type 10 has an invalid length.
[  207.160854][T11927] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  207.232575][T11940] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2187'.
[  207.479949][T11954] Bluetooth: MGMT ver 1.22
[  207.760001][T11971] delete_channel: no stack
[  207.885638][T11983] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003
[  207.923575][T11983] atomic_op ffff88807c488198 conn xmit_atomic 0000000000000000
[  208.081513][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2209'.
[  208.100844][T11998] netlink: 'syz.4.2209': attribute type 7 has an invalid length.
[  208.110480][T11997] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  208.135835][T11998] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  208.144989][T11998] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  208.154278][T11998] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  208.163336][T11998] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  208.172501][T11998] vxlan1: entered promiscuous mode
[  208.458372][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2215'.
[  209.015323][T12046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2227'.
[  209.501773][T12093] tipc: Started in network mode
[  209.509250][T12093] tipc: Node identity 020400bf05, cluster identity 4711
[  209.525812][T12093] tipc: Enabled bearer <eth:batadv0>, priority 0
[  209.586002][T12098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2241'.
[  209.990489][T12115] netlink: 'syz.3.2247': attribute type 3 has an invalid length.
[  210.142579][T12125] netlink: 'syz.1.2250': attribute type 11 has an invalid length.
[  210.409680][T12140] netlink: 'syz.3.2256': attribute type 10 has an invalid length.
[  210.429131][T12140] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.2256'.
[  210.464793][T12140] openvswitch: netlink: Flow key attr not present in new flow.
[  210.537358][T12150] syzkaller1: entered promiscuous mode
[  210.552683][T12150] syzkaller1: entered allmulticast mode
[  210.637654][T12152] syzkaller1: entered promiscuous mode
[  210.654117][ T5142] tipc: Node number set to 117702847
[  210.659627][T12152] syzkaller1: entered allmulticast mode
[  211.034316][T12183] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2275'.
[  211.043435][T12183] tc_dump_action: action bad kind
[  211.401829][T12184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2276'.
[  211.620051][T12202] ɶƣ0GC�: entered promiscuous mode
[  211.707368][T12208] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  212.096613][T12239] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2294'.
[  212.216296][T12245] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2298'.
[  212.525508][T12258] infiniband syz2: set down
[  212.530229][T12258] infiniband syz2: added bond_slave_1
[  212.572892][T12258] RDS/IB: syz2: added
[  212.577109][T12258] smc: adding ib device syz2 with port count 1
[  212.583365][T12258] smc:    ib device syz2 port 1 has pnetid 
[  212.587118][   T29] audit: type=1107 audit(1720200055.176:3): pid=12266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�'
[  212.827207][T12284] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  213.236536][T12303] smc: net device lo applied user defined pnetid SYZ2
[  213.313026][T12307] xt_TPROXY: Can be used only with -p tcp or -p udp
[  213.682544][T12318] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  214.405833][T12348] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  214.442488][T12335] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003
[  214.595923][T12335] atomic_op ffff888023c87198 conn xmit_atomic 0000000000000000
[  214.778796][ T5098] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  214.788730][ T5098] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  214.797533][ T5098] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  214.810901][ T5098] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  214.824099][ T5098] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  214.831590][ T5098] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  215.706045][T12404] netlink: 'syz.0.2356': attribute type 11 has an invalid length.
[  215.715375][T12404] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2356'.
[  215.818312][T12363] chnl_net:caif_netlink_parms(): no params data found
[  216.143775][T12426] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003
[  216.181767][T12363] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.195287][T12363] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.202499][T12363] bridge_slave_0: entered allmulticast mode
[  216.222250][T12363] bridge_slave_0: entered promiscuous mode
[  216.240837][T12363] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.251847][T12363] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.277677][T12363] bridge_slave_1: entered allmulticast mode
[  216.305697][T12363] bridge_slave_1: entered promiscuous mode
[  216.367246][T12363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  216.395325][T12363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  216.462114][T12438] tipc: Enabled bearer <eth:vlan0>, priority 10
[  216.481577][T12363] team0: Port device team_slave_0 added
[  216.491679][T12440] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present
[  216.500792][T12440] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1)
[  216.521935][T12363] team0: Port device team_slave_1 added
[  216.576271][T12363] batman_adv: batadv0: Adding interface: batadv_slave_0
[  216.597908][T12363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.636657][T12363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  216.659966][T12363] batman_adv: batadv0: Adding interface: batadv_slave_1
[  216.672868][T12363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.711867][T12363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  216.744837][T12451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2371'.
[  216.872668][T12451] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2371'.
[  216.903945][T12451] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2371'.
[  216.913960][ T5091] Bluetooth: hci5: command tx timeout
[  216.955537][T12363] hsr_slave_0: entered promiscuous mode
[  216.965098][T12363] hsr_slave_1: entered promiscuous mode
[  216.985919][T12363] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  217.022890][T12363] Cannot create hsr debugfs directory
[  217.186081][T12473] syz.0.2380[12473] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  217.294581][T12480] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2381'.
[  217.465638][T12363] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.614235][T12363] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.761623][T12363] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.901386][T12363] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.058659][T12512] syzkaller1: entered promiscuous mode
[  218.075867][T12512] syzkaller1: entered allmulticast mode
[  218.094627][T12511] netlink: 'syz.1.2395': attribute type 17 has an invalid length.
[  218.102470][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2395'.
[  218.129380][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2395'.
[  218.304132][T12531] netlink: 'syz.4.2398': attribute type 5 has an invalid length.
[  218.312949][T12535] tipc: Started in network mode
[  218.318213][T12535] tipc: Node identity cea8, cluster identity 4711
[  218.325683][T12535] tipc: Node number set to 52904
[  218.478800][T12363] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  218.541899][T12363] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  218.573880][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2407'.
[  218.573972][T12363] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  218.627178][T12553] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2409'.
[  218.652120][T12363] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  218.792015][T12562] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2414'.
[  218.822991][T12363] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.847177][T12559] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003
[  218.880015][T12363] 8021q: adding VLAN 0 to HW filter on device team0
[  218.914431][T10042] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.921640][T10042] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.964511][T10042] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.971708][T10042] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.993800][ T5091] Bluetooth: hci5: command tx timeout
[  219.372757][T12363] 8021q: adding VLAN 0 to HW filter on device batadv0
[  219.470663][T12363] veth0_vlan: entered promiscuous mode
[  219.539611][T12363] veth1_vlan: entered promiscuous mode
[  219.577803][T12588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2422'.
[  219.606816][T12588] veth0_macvtap: left promiscuous mode
[  219.706782][T12363] veth0_macvtap: entered promiscuous mode
[  219.732818][T12363] veth1_macvtap: entered promiscuous mode
[  219.760580][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.777242][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.799118][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.814482][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.824750][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.835211][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.849428][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.883705][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.902733][T12363] batman_adv: batadv0: Interface activated: batadv_slave_0
[  219.923795][T12603] sctp: [Deprecated]: syz.3.2426 (pid 12603) Use of int in max_burst socket option.
[  219.923795][T12603] Use struct sctp_assoc_value instead
[  219.941771][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.968720][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.997298][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  220.018194][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.032385][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  220.042981][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.052953][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  220.064727][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.077593][T12363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  220.089427][T12363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.100584][T12363] batman_adv: batadv0: Interface activated: batadv_slave_1
[  220.112657][T12607] vxcan4: entered allmulticast mode
[  220.143580][T12363] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  220.166285][T12363] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  220.190136][T12363] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  220.200556][T12363] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  220.256731][T12614] x_tables: duplicate underflow at hook 1
[  220.465408][ T9797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.479739][ T9797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.532517][ T9709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.549043][ T9709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.992310][T12665] netlink: 'syz.3.2446': attribute type 1 has an invalid length.
[  221.084078][ T5091] Bluetooth: hci5: command tx timeout
[  221.148991][T12665] 8021q: adding VLAN 0 to HW filter on device batadv3
[  221.198359][T12665] bond1: (slave batadv3): Enslaving as a backup interface with an up link
[  221.271041][T12682] veth0_macvtap: left promiscuous mode
[  221.399674][T12665] bond1 (unregistering): (slave batadv3): Releasing backup interface
[  221.433594][T12665] bond1 (unregistering): Released all slaves
[  221.624788][T12712] ipt_rpfilter: unknown options
[  221.764980][T12716] xt_l2tp: missing protocol rule (udp|l2tpip)
[  222.479291][T12754] __nla_validate_parse: 10 callbacks suppressed
[  222.479310][T12754] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2476'.
[  222.649028][T12762] netlink: 'syz.2.2479': attribute type 1 has an invalid length.
[  222.702237][T12762] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2479'.
[  222.785368][T12768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2481'.
[  222.894383][T12772] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2478'.
[  222.950736][T12773] netlink: 'syz.2.2484': attribute type 10 has an invalid length.
[  222.987780][T12773] team0: Port device netdevsim0 added
[  222.999319][T12785] netlink: 'syz.2.2484': attribute type 10 has an invalid length.
[  223.010819][T12786] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2487'.
[  223.154134][ T5091] Bluetooth: hci5: command tx timeout
[  223.228367][T12798] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2493'.
[  223.327083][T12805] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2496'.
[  223.355232][T12805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2496'.
[  223.466304][T12819] ebt_among: dst integrity fail: 100
[  223.498982][T12818] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2501'.
[  223.566427][T10042] bridge0: port 2(�eth0_vlan) entered disabled state
[  223.610714][T12826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2504'.
[  224.253054][T12871] vlan2: entered promiscuous mode
[  224.360216][T12881] netlink: 'syz.4.2519': attribute type 1 has an invalid length.
[  224.571043][T12894] netlink: 'syz.4.2525': attribute type 1 has an invalid length.
[  225.866188][T12967] IPv6: Can't replace route, no match found
[  226.065512][T12984] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  226.077644][T12986] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  226.206937][T12990] FAULT_INJECTION: forcing a failure.
[  226.206937][T12990] name failslab, interval 1, probability 0, space 0, times 0
[  226.236546][T12990] CPU: 1 PID: 12990 Comm: syz.3.2563 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0
[  226.246738][T12990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  226.256807][T12990] Call Trace:
[  226.260102][T12990]  <TASK>
[  226.263045][T12990]  dump_stack_lvl+0x241/0x360
[  226.267747][T12990]  ? __pfx_dump_stack_lvl+0x10/0x10
[  226.272966][T12990]  ? __pfx__printk+0x10/0x10
[  226.277595][T12990]  should_fail_ex+0x3b0/0x4e0
[  226.282293][T12990]  ? sctp_add_bind_addr+0x89/0x3a0
[  226.287421][T12990]  should_failslab+0x9/0x20
[  226.291940][T12990]  kmalloc_trace_noprof+0x6c/0x2c0
[  226.297079][T12990]  sctp_add_bind_addr+0x89/0x3a0
[  226.302040][T12990]  sctp_copy_local_addr_list+0x311/0x500
[  226.307696][T12990]  ? sctp_copy_local_addr_list+0xab/0x500
[  226.313438][T12990]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  226.319617][T12990]  ? sctp_v6_is_any+0x60/0x70
[  226.324315][T12990]  sctp_bind_addr_copy+0xad/0x3b0
[  226.329338][T12990]  ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190
[  226.335661][T12990]  sctp_connect_new_asoc+0x2f3/0x6c0
[  226.340939][T12990]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  226.346733][T12990]  ? sctp_sendmsg+0xbb9/0x3520
[  226.351529][T12990]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  226.357079][T12990]  ? security_sctp_bind_connect+0x90/0xb0
[  226.362815][T12990]  sctp_sendmsg+0x219a/0x3520
[  226.367515][T12990]  ? __pfx_sctp_sendmsg+0x10/0x10
[  226.372544][T12990]  ? __pfx_aa_sk_perm+0x10/0x10
[  226.377401][T12990]  ? inet_sendmsg+0x330/0x390
[  226.382085][T12990]  __sock_sendmsg+0x1a6/0x270
[  226.386766][T12990]  __sys_sendto+0x3a4/0x4f0
[  226.391273][T12990]  ? __pfx___sys_sendto+0x10/0x10
[  226.396311][T12990]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  226.402284][T12990]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  226.408606][T12990]  __x64_sys_sendto+0xde/0x100
[  226.413372][T12990]  do_syscall_64+0xf3/0x230
[  226.417874][T12990]  ? clear_bhb_loop+0x35/0x90
[  226.422543][T12990]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.428426][T12990] RIP: 0033:0x7f2f70775bd9
[  226.432831][T12990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  226.452429][T12990] RSP: 002b:00007f2f701ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  226.460833][T12990] RAX: ffffffffffffffda RBX: 00007f2f70903f60 RCX: 00007f2f70775bd9
[  226.468793][T12990] RDX: 000000000000fee4 RSI: 0000000020847fff RDI: 0000000000000003
[  226.476757][T12990] RBP: 00007f2f701ff0a0 R08: 000000002005ffe4 R09: 000000000000001c
[  226.484720][T12990] R10: 00000000000002fc R11: 0000000000000246 R12: 0000000000000002
[  226.492678][T12990] R13: 000000000000000b R14: 00007f2f70903f60 R15: 00007fff858b64c8
[  226.500652][T12990]  </TASK>
[  226.743180][T13013] x_tables: ip_tables: ah match: only valid for protocol 51
[  226.920736][T13030] netlink: 'syz.3.2576': attribute type 153 has an invalid length.
[  227.225750][T13058] netlink: 'syz.4.2586': attribute type 9 has an invalid length.
[  227.404376][T13064] batman_adv: batadv1: Interface deactivated: netdevsim0
[  227.450904][T13064] batman_adv: batadv1: Removing interface: netdevsim0
[  227.505196][T13064] batman_adv: batadv4: Adding interface: netdevsim0
[  227.523833][T13064] batman_adv: batadv4: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.564156][T13064] batman_adv: batadv4: Interface activated: netdevsim0
[  227.584591][T13089] x_tables: ip_tables: ah match: only valid for protocol 51
[  227.624383][T13087] netlink: 'syz.1.2596': attribute type 10 has an invalid length.
[  227.705410][T13087] batman_adv: batadv0: Adding interface: team0
[  227.732140][T13087] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.769345][T13087] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  227.799518][T13092] netlink: 'syz.1.2596': attribute type 10 has an invalid length.
[  227.816700][T13092] __nla_validate_parse: 9 callbacks suppressed
[  227.816718][T13092] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2596'.
[  227.837239][T13092] team0: entered promiscuous mode
[  227.846152][T13092] team_slave_0: entered promiscuous mode
[  227.852087][T13092] team_slave_1: entered promiscuous mode
[  227.860573][T13092] 8021q: adding VLAN 0 to HW filter on device team0
[  227.867804][T13092] batman_adv: batadv0: Interface activated: team0
[  227.875641][T13092] batman_adv: batadv0: Interface deactivated: team0
[  227.882394][T13092] batman_adv: batadv0: Removing interface: team0
[  227.891000][T13092] bridge0: port 4(team0) entered blocking state
[  227.899313][T13092] bridge0: port 4(team0) entered disabled state
[  227.918591][T13092] team0: entered allmulticast mode
[  227.930690][T13092] team_slave_0: entered allmulticast mode
[  227.936840][T13092] team_slave_1: entered allmulticast mode
[  227.947240][T13092] bridge0: port 4(team0) entered blocking state
[  227.953612][T13092] bridge0: port 4(team0) entered forwarding state
[  228.376401][T13120] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2608'.
[  228.406049][T13120] netlink: 'syz.0.2608': attribute type 1 has an invalid length.
[  228.598212][ T5098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  228.607169][ T5098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  228.634182][ T5098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  228.659209][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  228.668848][ T5098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  228.684945][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  228.891043][ T9694] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.989635][T13149] bond1: entered promiscuous mode
[  229.011335][T13149] bond1: entered allmulticast mode
[  229.062487][ T9694] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.101641][T13159] IPv6: NLM_F_REPLACE set, but no existing node found!
[  229.262612][ T9694] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.276762][T13173] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2627'.
[  229.364504][T13173] ���: entered promiscuous mode
[  229.375772][ T9694] batman_adv: batadv4: Interface deactivated: netdevsim0
[  229.487734][ T9694] batman_adv: batadv4: Removing interface: netdevsim0
[  229.508253][ T9694] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.527734][T13180] tipc: MTU too low for tipc bearer
[  229.628439][T13190] ip6t_REJECT: ECHOREPLY is not supported
[  229.719422][T13186] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.2632'.
[  229.776424][ T9694] bridge_slave_1: left allmulticast mode
[  229.782442][ T9694] bridge_slave_1: left promiscuous mode
[  229.788308][ T9694] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.824662][ T9694] bridge_slave_0: left allmulticast mode
[  229.834024][ T9694] bridge_slave_0: left promiscuous mode
[  229.847320][ T9694] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.900299][T13203] netlink: 'syz.2.2639': attribute type 11 has an invalid length.
[  230.359846][ T9694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  230.372745][ T9694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  230.385088][ T9694] infiniband syz2: set down
[  230.391389][ T9694] bond0 (unregistering): Released all slaves
[  230.513392][T13135] chnl_net:caif_netlink_parms(): no params data found
[  230.756255][ T5098] Bluetooth: hci1: command tx timeout
[  230.808112][T13248] FAULT_INJECTION: forcing a failure.
[  230.808112][T13248] name failslab, interval 1, probability 0, space 0, times 0
[  230.822386][T13248] CPU: 0 PID: 13248 Comm: syz.0.2652 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0
[  230.832565][T13248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  230.842631][T13248] Call Trace:
[  230.845922][T13248]  <TASK>
[  230.848863][T13248]  dump_stack_lvl+0x241/0x360
[  230.853573][T13248]  ? __pfx_dump_stack_lvl+0x10/0x10
[  230.858789][T13248]  ? __pfx__printk+0x10/0x10
[  230.863406][T13248]  ? seqcount_lockdep_reader_access+0x1d7/0x220
[  230.869678][T13248]  should_fail_ex+0x3b0/0x4e0
[  230.874376][T13248]  ? iter_file_splice_write+0x308/0x14e0
[  230.880022][T13248]  should_failslab+0x9/0x20
[  230.884541][T13248]  __kmalloc_noprof+0xd8/0x400
[  230.889329][T13248]  iter_file_splice_write+0x308/0x14e0
[  230.894796][T13248]  ? __lock_acquire+0x1346/0x1fd0
[  230.899835][T13248]  ? __pfx_iter_file_splice_write+0x10/0x10
[  230.905729][T13248]  ? rcu_read_lock_any_held+0xb7/0x160
[  230.911180][T13248]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  230.917076][T13248]  ? __pfx_iter_file_splice_write+0x10/0x10
[  230.922960][T13248]  direct_splice_actor+0x11e/0x220
[  230.928074][T13248]  splice_direct_to_actor+0x58e/0xc90
[  230.933458][T13248]  ? __pfx_direct_splice_actor+0x10/0x10
[  230.939083][T13248]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  230.944968][T13248]  ? __fget_files+0x29/0x470
[  230.949556][T13248]  ? __pfx_lock_release+0x10/0x10
[  230.954572][T13248]  do_splice_direct+0x28c/0x3e0
[  230.959418][T13248]  ? __pfx_do_splice_direct+0x10/0x10
[  230.964778][T13248]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  230.970665][T13248]  ? rw_verify_area+0x1d2/0x6b0
[  230.975509][T13248]  do_sendfile+0x56d/0xe20
[  230.979922][T13248]  ? __pfx_do_sendfile+0x10/0x10
[  230.984861][T13248]  __se_sys_sendfile64+0x17c/0x1e0
[  230.989965][T13248]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  230.995593][T13248]  ? do_syscall_64+0x100/0x230
[  231.000347][T13248]  ? do_syscall_64+0xb6/0x230
[  231.005012][T13248]  do_syscall_64+0xf3/0x230
[  231.009503][T13248]  ? clear_bhb_loop+0x35/0x90
[  231.014174][T13248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.020056][T13248] RIP: 0033:0x7f9349975bd9
[  231.024464][T13248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  231.044146][T13248] RSP: 002b:00007f934a7f3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  231.052551][T13248] RAX: ffffffffffffffda RBX: 00007f9349b03f60 RCX: 00007f9349975bd9
[  231.060509][T13248] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[  231.068483][T13248] RBP: 00007f934a7f30a0 R08: 0000000000000000 R09: 0000000000000000
[  231.076458][T13248] R10: 00000000f03a0005 R11: 0000000000000246 R12: 0000000000000002
[  231.084422][T13248] R13: 000000000000000b R14: 00007f9349b03f60 R15: 00007ffc9ee0ea08
[  231.092402][T13248]  </TASK>
[  231.114327][T13135] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.122450][T13135] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.164002][T13135] bridge_slave_0: entered allmulticast mode
[  231.189232][T13135] bridge_slave_0: entered promiscuous mode
[  231.244014][T13135] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.257953][T13135] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.271121][T13135] bridge_slave_1: entered allmulticast mode
[  231.288428][T13135] bridge_slave_1: entered promiscuous mode
[  231.501650][T13270] netlink: 'syz.4.2659': attribute type 4 has an invalid length.
[  231.527885][T13270] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2659'.
[  231.562626][T13272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2660'.
[  231.583173][T13135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  231.709515][T13135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  231.817188][T13286] netlink: 'syz.2.2662': attribute type 5 has an invalid length.
[  231.835611][T13294] FAULT_INJECTION: forcing a failure.
[  231.835611][T13294] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  231.836937][T13294] 
[  231.836944][T13294] ======================================================
[  231.836951][T13294] WARNING: possible circular locking dependency detected
[  231.836958][T13294] 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0 Not tainted
[  231.836968][T13294] ------------------------------------------------------
[  231.836974][T13294] syz.4.2664/13294 is trying to acquire lock:
[  231.836983][T13294] ffffffff8e328140 (console_owner){..-.}-{0:0}, at: console_flush_all+0x152/0xfd0
[  231.837030][T13294] 
[  231.837030][T13294] but task is already holding lock:
[  231.837036][T13294] ffff8880b943e858 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  231.837079][T13294] 
[  231.837079][T13294] which lock already depends on the new lock.
[  231.837079][T13294] 
[  231.837084][T13294] 
[  231.837084][T13294] the existing dependency chain (in reverse order) is:
[  231.837091][T13294] 
[  231.837091][T13294] -> #4 (&rq->__lock){-.-.}-{2:2}:
[  231.837112][T13294]        lock_acquire+0x1ed/0x550
[  231.837129][T13294]        _raw_spin_lock_nested+0x31/0x40
[  231.837147][T13294]        raw_spin_rq_lock_nested+0x2a/0x140
[  231.837173][T13294]        task_fork_fair+0x61/0x1e0
[  231.837193][T13294]        sched_cgroup_fork+0x37c/0x410
[  231.837210][T13294]        copy_process+0x2217/0x3dc0
[  231.837223][T13294]        kernel_clone+0x226/0x8f0
[  231.837238][T13294]        user_mode_thread+0x132/0x1a0
[  231.837254][T13294]        rest_init+0x23/0x300
[  231.837269][T13294]        start_kernel+0x47a/0x500
[  231.837287][T13294]        x86_64_start_reservations+0x2a/0x30
[  231.837301][T13294]        x86_64_start_kernel+0x99/0xa0
[  231.837315][T13294]        common_startup_64+0x13e/0x147
[  231.837328][T13294] 
[  231.837328][T13294] -> #3 (&p->pi_lock){-.-.}-{2:2}:
[  231.837347][T13294]        lock_acquire+0x1ed/0x550
[  231.837359][T13294]        _raw_spin_lock_irqsave+0xd5/0x120
[  231.837372][T13294]        try_to_wake_up+0xb0/0x1470
[  231.837385][T13294]        __wake_up_common_lock+0x130/0x1e0
[  231.837397][T13294]        tty_port_default_wakeup+0xa6/0xf0
[  231.837414][T13294]        serial8250_tx_chars+0x6e2/0x930
[  231.837428][T13294]        serial8250_handle_irq+0x558/0x710
[  231.837441][T13294]        serial8250_default_handle_irq+0xd1/0x1f0
[  231.837458][T13294]        serial8250_interrupt+0xa9/0x1f0
[  231.837470][T13294]        __handle_irq_event_percpu+0x29a/0xa80
[  231.837485][T13294]        handle_irq_event+0x89/0x1f0
[  231.837499][T13294]        handle_edge_irq+0x25f/0xc20
[  231.837512][T13294]        __common_interrupt+0x136/0x230
[  231.837526][T13294]        common_interrupt+0xa5/0xd0
[  231.837539][T13294]        asm_common_interrupt+0x26/0x40
[  231.837552][T13294]        acpi_safe_halt+0x21/0x30
[  231.837564][T13294]        acpi_idle_enter+0xe4/0x140
[  231.837576][T13294]        cpuidle_enter_state+0x112/0x480
[  231.837587][T13294]        cpuidle_enter+0x5d/0xa0
[  231.837600][T13294]        do_idle+0x375/0x5d0
[  231.837612][T13294]        cpu_startup_entry+0x42/0x60
[  231.837623][T13294]        __pfx_ap_starting+0x0/0x10
[  231.837636][T13294]        common_startup_64+0x13e/0x147
[  231.837647][T13294] 
[  231.837647][T13294] -> #2 (&tty->write_wait){-.-.}-{2:2}:
[  231.837664][T13294]        lock_acquire+0x1ed/0x550
[  231.837676][T13294]        _raw_spin_lock_irqsave+0xd5/0x120
[  231.837689][T13294]        __wake_up_common_lock+0x25/0x1e0
[  231.837700][T13294]        tty_port_default_wakeup+0xa6/0xf0
[  231.837715][T13294]        serial8250_tx_chars+0x6e2/0x930
[  231.837729][T13294]        serial8250_handle_irq+0x558/0x710
[  231.837742][T13294]        serial8250_default_handle_irq+0xd1/0x1f0
[  231.837758][T13294]        serial8250_interrupt+0xa9/0x1f0
[  231.837771][T13294]        __handle_irq_event_percpu+0x29a/0xa80
[  231.837785][T13294]        handle_irq_event+0x89/0x1f0
[  231.837799][T13294]        handle_edge_irq+0x25f/0xc20
[  231.837815][T13294]        __common_interrupt+0x136/0x230
[  231.837829][T13294]        common_interrupt+0xa5/0xd0
[  231.837842][T13294]        asm_common_interrupt+0x26/0x40
[  231.837855][T13294]        acpi_safe_halt+0x21/0x30
[  231.837867][T13294]        acpi_idle_enter+0xe4/0x140
[  231.837880][T13294]        cpuidle_enter_state+0x112/0x480
[  231.837891][T13294]        cpuidle_enter+0x5d/0xa0
[  231.837903][T13294]        do_idle+0x375/0x5d0
[  231.837914][T13294]        cpu_startup_entry+0x42/0x60
[  231.837927][T13294]        __pfx_ap_starting+0x0/0x10
[  231.837939][T13294]        common_startup_64+0x13e/0x147
[  231.837951][T13294] 
[  231.837951][T13294] -> #1 (&port_lock_key){-.-.}-{2:2}:
[  231.837967][T13294]        lock_acquire+0x1ed/0x550
[  231.837978][T13294]        _raw_spin_lock_irqsave+0xd5/0x120
[  231.837991][T13294]        serial8250_console_write+0x1a8/0x1770
[  231.838006][T13294]        console_flush_all+0x867/0xfd0
[  231.838022][T13294]        console_unlock+0x13b/0x4d0
[  231.838035][T13294]        vprintk_emit+0x5a6/0x770
[  231.838049][T13294]        _printk+0xd5/0x120
[  231.838065][T13294]        register_console+0x727/0xcf0
[  231.838080][T13294]        univ8250_console_init+0x49/0x50
[  231.838095][T13294]        console_init+0x1b8/0x6f0
[  231.838111][T13294]        start_kernel+0x2d3/0x500
[  231.838123][T13294]        x86_64_start_reservations+0x2a/0x30
[  231.838131][T13294]        x86_64_start_kernel+0x99/0xa0
[  231.838139][T13294]        common_startup_64+0x13e/0x147
[  231.838148][T13294] 
[  231.838148][T13294] -> #0 (console_owner){..-.}-{0:0}:
[  231.838160][T13294]        validate_chain+0x18e0/0x5900
[  231.838176][T13294]        __lock_acquire+0x1346/0x1fd0
[  231.838185][T13294]        lock_acquire+0x1ed/0x550
[  231.838193][T13294]        console_flush_all+0x810/0xfd0
[  231.838205][T13294]        console_unlock+0x13b/0x4d0
[  231.838217][T13294]        vprintk_emit+0x5a6/0x770
[  231.838228][T13294]        _printk+0xd5/0x120
[  231.838240][T13294]        should_fail_ex+0x391/0x4e0
[  231.838253][T13294]        strncpy_from_user+0x36/0x2f0
[  231.838264][T13294]        strncpy_from_user_nofault+0x71/0x140
[  231.838275][T13294]        bpf_probe_read_compat_str+0xe9/0x180
[  231.838286][T13294]        bpf_prog_f2ce78ec2d45df6f+0x3d/0x3f
[  231.838293][T13294]        bpf_trace_run4+0x334/0x590
[  231.838306][T13294]        __traceiter_sched_switch+0x98/0xd0
[  231.838319][T13294]        __schedule+0x2587/0x4a20
[  231.838336][T13294]        preempt_schedule_common+0x84/0xd0
[  231.838347][T13294]        preempt_schedule+0xe1/0xf0
[  231.838357][T13294]        preempt_schedule_thunk+0x1a/0x30
[  231.838366][T13294]        _raw_spin_unlock_irqrestore+0x130/0x140
[  231.838376][T13294]        srcu_gp_start_if_needed+0xea3/0x11e0
[  231.838386][T13294]        __synchronize_srcu+0x34f/0x400
[  231.838394][T13294]        nbd_config_put+0x3d2/0x7e0
[  231.838404][T13294]        nbd_genl_connect+0x15af/0x1c80
[  231.838414][T13294]        genl_rcv_msg+0xb14/0xec0
[  231.838427][T13294]        netlink_rcv_skb+0x1e3/0x430
[  231.838436][T13294]        genl_rcv+0x28/0x40
[  231.838448][T13294]        netlink_unicast+0x7f0/0x990
[  231.838455][T13294]        netlink_sendmsg+0x8e4/0xcb0
[  231.838465][T13294]        __sock_sendmsg+0x221/0x270
[  231.838475][T13294]        ____sys_sendmsg+0x525/0x7d0
[  231.838487][T13294]        __sys_sendmsg+0x2b0/0x3a0
[  231.838499][T13294]        do_syscall_64+0xf3/0x230
[  231.838508][T13294]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.838517][T13294] 
[  231.838517][T13294] other info that might help us debug this:
[  231.838517][T13294] 
[  231.838520][T13294] Chain exists of:
[  231.838520][T13294]   console_owner --> &p->pi_lock --> &rq->__lock
[  231.838520][T13294] 
[  231.838534][T13294]  Possible unsafe locking scenario:
[  231.838534][T13294] 
[  231.838537][T13294]        CPU0                    CPU1
[  231.838540][T13294]        ----                    ----
[  231.838542][T13294]   lock(&rq->__lock);
[  231.838548][T13294]                                lock(&p->pi_lock);
[  231.838554][T13294]                                lock(&rq->__lock);
[  231.838561][T13294]   lock(console_owner);
[  231.838566][T13294] 
[  231.838566][T13294]  *** DEADLOCK ***
[  231.838566][T13294] 
[  231.838568][T13294] 7 locks held by syz.4.2664/13294:
[  231.838574][T13294]  #0: ffffffff8f6513f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40
[  231.838600][T13294]  #1: ffffffff8f6512a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0
[  231.838625][T13294]  #2: ffff8880204b9998 (&nbd->config_lock){+.+.}-{3:3}, at: refcount_dec_and_mutex_lock+0x30/0x100
[  231.838648][T13294]  #3: ffff8880b943e858 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  231.838674][T13294]  #4: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x244/0x590
[  231.838700][T13294]  #5: ffffffff8e20fa60 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120
[  231.838726][T13294]  #6: ffffffff8e20f690 (console_srcu){....}-{0:0}, at: console_flush_all+0x152/0xfd0
[  231.838751][T13294] 
[  231.838751][T13294] stack backtrace:
[  231.838754][T13294] CPU: 0 PID: 13294 Comm: syz.4.2664 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0
[  231.838765][T13294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  231.838771][T13294] Call Trace:
[  231.838775][T13294]  <TASK>
[  231.838779][T13294]  dump_stack_lvl+0x241/0x360
[  231.838791][T13294]  ? __pfx_dump_stack_lvl+0x10/0x10
[  231.838803][T13294]  ? print_circular_bug+0x130/0x1a0
[  231.838817][T13294]  check_noncircular+0x36a/0x4a0
[  231.838830][T13294]  ? __pfx_check_noncircular+0x10/0x10
[  231.838843][T13294]  ? lockdep_lock+0x123/0x2b0
[  231.838853][T13294]  ? add_lock_to_list+0x1de/0x2e0
[  231.838867][T13294]  validate_chain+0x18e0/0x5900
[  231.838886][T13294]  ? __pfx_validate_chain+0x10/0x10
[  231.838899][T13294]  ? sprintf+0xda/0x120
[  231.838911][T13294]  ? vsnprintf+0x1cc3/0x1da0
[  231.838930][T13294]  ? info_print_prefix+0x204/0x310
[  231.838941][T13294]  ? mark_lock+0x9a/0x350
[  231.838953][T13294]  __lock_acquire+0x1346/0x1fd0
[  231.838967][T13294]  lock_acquire+0x1ed/0x550
[  231.838977][T13294]  ? console_flush_all+0x152/0xfd0
[  231.838992][T13294]  ? __pfx_lock_acquire+0x10/0x10
[  231.839002][T13294]  ? __pfx_lock_release+0x10/0x10
[  231.839011][T13294]  ? do_raw_spin_lock+0x14f/0x370
[  231.839027][T13294]  ? do_raw_spin_unlock+0x13c/0x8b0
[  231.839041][T13294]  ? console_flush_all+0x3a8/0xfd0
[  231.839055][T13294]  console_flush_all+0x810/0xfd0
[  231.839068][T13294]  ? console_flush_all+0x152/0xfd0
[  231.839082][T13294]  ? console_flush_all+0x152/0xfd0
[  231.839098][T13294]  ? __pfx_console_flush_all+0x10/0x10
[  231.839112][T13294]  ? __pfx_lock_acquire+0x10/0x10
[  231.839122][T13294]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  231.839136][T13294]  console_unlock+0x13b/0x4d0
[  231.839150][T13294]  ? __pfx_console_unlock+0x10/0x10
[  231.839162][T13294]  ? _printk+0xd5/0x120
[  231.839179][T13294]  ? _printk+0xd5/0x120
[  231.839193][T13294]  ? __pfx___down_trylock_console_sem+0x10/0x10
[  231.839207][T13294]  ? validate_chain+0x11e/0x5900
[  231.839222][T13294]  vprintk_emit+0x5a6/0x770
[  231.839234][T13294]  ? __pfx_vprintk_emit+0x10/0x10
[  231.839247][T13294]  ? __pfx_validate_chain+0x10/0x10
[  231.839262][T13294]  _printk+0xd5/0x120
[  231.839278][T13294]  ? __pfx__printk+0x10/0x10
[  231.839296][T13294]  should_fail_ex+0x391/0x4e0
[  231.839310][T13294]  strncpy_from_user+0x36/0x2f0
[  231.839324][T13294]  strncpy_from_user_nofault+0x71/0x140
[  231.839336][T13294]  bpf_probe_read_compat_str+0xe9/0x180
[  231.839348][T13294]  ? bpf_trace_run4+0x244/0x590
[  231.839361][T13294]  bpf_prog_f2ce78ec2d45df6f+0x3d/0x3f
[  231.839369][T13294]  bpf_trace_run4+0x334/0x590
[  231.839384][T13294]  ? __pfx_rcu_read_lock_sched_held+0x10/0x10
[  231.839395][T13294]  ? __pfx_bpf_trace_run4+0x10/0x10
[  231.839411][T13294]  ? __pfx_probe_sched_switch+0x10/0x10
[  231.839425][T13294]  ? tracing_record_taskinfo_sched_switch+0x7b/0x390
[  231.839439][T13294]  ? __pfx___bpf_trace_sched_switch+0x10/0x10
[  231.839452][T13294]  __traceiter_sched_switch+0x98/0xd0
[  231.839466][T13294]  __schedule+0x2587/0x4a20
[  231.839479][T13294]  ? ttwu_do_activate+0x200/0x7e0
[  231.839493][T13294]  ? __pfx___schedule+0x10/0x10
[  231.839505][T13294]  ? __queue_work+0x198/0xee0
[  231.839520][T13294]  ? preempt_schedule+0xe1/0xf0
[  231.839531][T13294]  preempt_schedule_common+0x84/0xd0
[  231.839543][T13294]  preempt_schedule+0xe1/0xf0
[  231.839555][T13294]  ? __pfx_preempt_schedule+0x10/0x10
[  231.839567][T13294]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  231.839577][T13294]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  231.839588][T13294]  preempt_schedule_thunk+0x1a/0x30
[  231.839599][T13294]  _raw_spin_unlock_irqrestore+0x130/0x140
[  231.839611][T13294]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  231.839625][T13294]  srcu_gp_start_if_needed+0xea3/0x11e0
[  231.839639][T13294]  ? __pfx_srcu_gp_start_if_needed+0x10/0x10
[  231.839652][T13294]  ? __init_swait_queue_head+0xae/0x150
[  231.839668][T13294]  __synchronize_srcu+0x34f/0x400
[  231.839678][T13294]  ? __pfx___synchronize_srcu+0x10/0x10
[  231.839687][T13294]  ? __pfx_wakeme_after_rcu+0x10/0x10
[  231.839702][T13294]  ? synchronize_srcu+0x2c3/0x2e0
[  231.839712][T13294]  nbd_config_put+0x3d2/0x7e0
[  231.839723][T13294]  ? nla_memcpy+0x8b/0xc0
[  231.839733][T13294]  nbd_genl_connect+0x15af/0x1c80
[  231.839747][T13294]  ? __pfx_nbd_genl_connect+0x10/0x10
[  231.839761][T13294]  ? __nla_parse+0x40/0x60
[  231.839771][T13294]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  231.839787][T13294]  genl_rcv_msg+0xb14/0xec0
[  231.839800][T13294]  ? mark_lock+0x9a/0x350
[  231.839812][T13294]  ? __pfx_genl_rcv_msg+0x10/0x10
[  231.839832][T13294]  ? __pfx_lock_acquire+0x10/0x10
[  231.839841][T13294]  ? __pfx_nbd_genl_connect+0x10/0x10
[  231.839852][T13294]  ? __pfx___might_resched+0x10/0x10
[  231.839867][T13294]  netlink_rcv_skb+0x1e3/0x430
[  231.839878][T13294]  ? __pfx_genl_rcv_msg+0x10/0x10
[  231.839891][T13294]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  231.839909][T13294]  genl_rcv+0x28/0x40
[  231.839922][T13294]  netlink_unicast+0x7f0/0x990
[  231.839933][T13294]  ? __pfx_netlink_unicast+0x10/0x10
[  231.839942][T13294]  ? __virt_addr_valid+0x183/0x520
[  231.839957][T13294]  ? __check_object_size+0x49c/0x900
[  231.839971][T13294]  ? bpf_lsm_netlink_send+0x9/0x10
[  231.839987][T13294]  netlink_sendmsg+0x8e4/0xcb0
[  231.840001][T13294]  ? __pfx_netlink_sendmsg+0x10/0x10
[  231.840013][T13294]  ? __import_iovec+0x536/0x820
[  231.840023][T13294]  ? aa_sock_msg_perm+0x91/0x160
[  231.840039][T13294]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  231.840048][T13294]  ? security_socket_sendmsg+0x87/0xb0
[  231.840061][T13294]  ? __pfx_netlink_sendmsg+0x10/0x10
[  231.840071][T13294]  __sock_sendmsg+0x221/0x270
[  231.840082][T13294]  ____sys_sendmsg+0x525/0x7d0
[  231.840098][T13294]  ? __pfx_____sys_sendmsg+0x10/0x10
[  231.840116][T13294]  __sys_sendmsg+0x2b0/0x3a0
[  231.840130][T13294]  ? __pfx___sys_sendmsg+0x10/0x10
[  231.840143][T13294]  ? vfs_write+0x7c4/0xc90
[  231.840165][T13294]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  231.840181][T13294]  ? do_syscall_64+0x100/0x230
[  231.840194][T13294]  ? do_syscall_64+0xb6/0x230
[  231.840207][T13294]  do_syscall_64+0xf3/0x230
[  231.840217][T13294]  ? clear_bhb_loop+0x35/0x90
[  231.840234][T13294]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.840249][T13294] RIP: 0033:0x7f49fbf75bd9
[  231.840257][T13294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  231.840266][T13294] RSP: 002b:00007f49fccb9048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  231.840277][T13294] RAX: ffffffffffffffda RBX: 00007f49fc103f60 RCX: 00007f49fbf75bd9
[  231.840284][T13294] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004
[  231.840290][T13294] RBP: 00007f49fccb90a0 R08: 0000000000000000 R09: 0000000000000000
[  231.840297][T13294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  231.840303][T13294] R13: 000000000000004d R14: 00007f49fc103f60 R15: 00007ffe24262418
[  231.840314][T13294]  </TASK>
[  233.346517][T13294] CPU: 0 PID: 13294 Comm: syz.4.2664 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0
[  233.356643][T13294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  233.366675][T13294] Call Trace:
[  233.369932][T13294]  <TASK>
[  233.372841][T13294]  dump_stack_lvl+0x241/0x360
[  233.377502][T13294]  ? __pfx_dump_stack_lvl+0x10/0x10
[  233.382675][T13294]  ? __pfx__printk+0x10/0x10
[  233.387246][T13294]  should_fail_ex+0x3b0/0x4e0
[  233.391905][T13294]  strncpy_from_user+0x36/0x2f0
[  233.396756][T13294]  strncpy_from_user_nofault+0x71/0x140
[  233.402287][T13294]  bpf_probe_read_compat_str+0xe9/0x180
[  233.407811][T13294]  ? bpf_trace_run4+0x244/0x590
[  233.412644][T13294]  bpf_prog_f2ce78ec2d45df6f+0x3d/0x3f
[  233.418080][T13294]  bpf_trace_run4+0x334/0x590
[  233.422743][T13294]  ? __pfx_rcu_read_lock_sched_held+0x10/0x10
[  233.428816][T13294]  ? __pfx_bpf_trace_run4+0x10/0x10
[  233.434001][T13294]  ? __pfx_probe_sched_switch+0x10/0x10
[  233.439531][T13294]  ? tracing_record_taskinfo_sched_switch+0x7b/0x390
[  233.446186][T13294]  ? __pfx___bpf_trace_sched_switch+0x10/0x10
[  233.452233][T13294]  __traceiter_sched_switch+0x98/0xd0
[  233.457589][T13294]  __schedule+0x2587/0x4a20
[  233.462074][T13294]  ? ttwu_do_activate+0x200/0x7e0
[  233.467080][T13294]  ? __pfx___schedule+0x10/0x10
[  233.471927][T13294]  ? __queue_work+0x198/0xee0
[  233.476673][T13294]  ? preempt_schedule+0xe1/0xf0
[  233.481505][T13294]  preempt_schedule_common+0x84/0xd0
[  233.486771][T13294]  preempt_schedule+0xe1/0xf0
[  233.491427][T13294]  ? __pfx_preempt_schedule+0x10/0x10
[  233.496797][T13294]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  233.502773][T13294]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  233.509078][T13294]  preempt_schedule_thunk+0x1a/0x30
[  233.514257][T13294]  _raw_spin_unlock_irqrestore+0x130/0x140
[  233.520062][T13294]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  233.526383][T13294]  srcu_gp_start_if_needed+0xea3/0x11e0
[  233.531941][T13294]  ? __pfx_srcu_gp_start_if_needed+0x10/0x10
[  233.537902][T13294]  ? __init_swait_queue_head+0xae/0x150
[  233.543428][T13294]  __synchronize_srcu+0x34f/0x400
[  233.548429][T13294]  ? __pfx___synchronize_srcu+0x10/0x10
[  233.553970][T13294]  ? __pfx_wakeme_after_rcu+0x10/0x10
[  233.559377][T13294]  ? synchronize_srcu+0x2c3/0x2e0
[  233.564405][T13294]  nbd_config_put+0x3d2/0x7e0
[  233.569095][T13294]  ? nla_memcpy+0x8b/0xc0
[  233.573439][T13294]  nbd_genl_connect+0x15af/0x1c80
[  233.578467][T13294]  ? __pfx_nbd_genl_connect+0x10/0x10
[  233.583844][T13294]  ? __nla_parse+0x40/0x60
[  233.588348][T13294]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  233.594670][T13294]  genl_rcv_msg+0xb14/0xec0
[  233.599246][T13294]  ? mark_lock+0x9a/0x350
[  233.603557][T13294]  ? __pfx_genl_rcv_msg+0x10/0x10
[  233.608566][T13294]  ? __pfx_lock_acquire+0x10/0x10
[  233.613574][T13294]  ? __pfx_nbd_genl_connect+0x10/0x10
[  233.618926][T13294]  ? __pfx___might_resched+0x10/0x10
[  233.624192][T13294]  netlink_rcv_skb+0x1e3/0x430
[  233.628931][T13294]  ? __pfx_genl_rcv_msg+0x10/0x10
[  233.633933][T13294]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  233.639226][T13294]  genl_rcv+0x28/0x40
[  233.643211][T13294]  netlink_unicast+0x7f0/0x990
[  233.647965][T13294]  ? __pfx_netlink_unicast+0x10/0x10
[  233.653235][T13294]  ? __virt_addr_valid+0x183/0x520
[  233.658343][T13294]  ? __check_object_size+0x49c/0x900
[  233.663617][T13294]  ? bpf_lsm_netlink_send+0x9/0x10
[  233.668731][T13294]  netlink_sendmsg+0x8e4/0xcb0
[  233.673497][T13294]  ? __pfx_netlink_sendmsg+0x10/0x10
[  233.678781][T13294]  ? __import_iovec+0x536/0x820
[  233.683614][T13294]  ? aa_sock_msg_perm+0x91/0x160
[  233.688537][T13294]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  233.693803][T13294]  ? security_socket_sendmsg+0x87/0xb0
[  233.699248][T13294]  ? __pfx_netlink_sendmsg+0x10/0x10
[  233.704512][T13294]  __sock_sendmsg+0x221/0x270
[  233.709173][T13294]  ____sys_sendmsg+0x525/0x7d0
[  233.713922][T13294]  ? __pfx_____sys_sendmsg+0x10/0x10
[  233.719192][T13294]  __sys_sendmsg+0x2b0/0x3a0
[  233.723765][T13294]  ? __pfx___sys_sendmsg+0x10/0x10
[  233.728858][T13294]  ? vfs_write+0x7c4/0xc90
[  233.733263][T13294]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  233.739567][T13294]  ? do_syscall_64+0x100/0x230
[  233.744306][T13294]  ? do_syscall_64+0xb6/0x230
[  233.748958][T13294]  do_syscall_64+0xf3/0x230
[  233.753436][T13294]  ? clear_bhb_loop+0x35/0x90
[  233.758093][T13294]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.763993][T13294] RIP: 0033:0x7f49fbf75bd9
[  233.768400][T13294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  233.787992][T13294] RSP: 002b:00007f49fccb9048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  233.796473][T13294] RAX: ffffffffffffffda RBX: 00007f49fc103f60 RCX: 00007f49fbf75bd9
[  233.804422][T13294] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004
[  233.812370][T13294] RBP: 00007f49fccb90a0 R08: 0000000000000000 R09: 0000000000000000
[  233.820340][T13294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  233.828286][T13294] R13: 000000000000004d R14: 00007f49fc103f60 R15: 00007ffe24262418
[  233.836239][T13294]  </TASK>
[  233.873481][ T5098] Bluetooth: hci1: command 0x041b tx timeout
[  233.933055][T13135] team0: Port device team_slave_0 added
[  233.972479][T13135] team0: Port device team_slave_1 added
[  234.009617][ T9694] hsr_slave_0: left promiscuous mode
[  234.015741][ T9694] hsr_slave_1: left promiscuous mode
[  234.021521][ T9694] batman_adv: batadv0: Removing interface: team0
[  234.036267][ T9694] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  234.043685][ T9694] batman_adv: batadv0: Removing interface: batadv_slave_0
[  234.051212][ T9694] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  234.059761][ T9694] batman_adv: batadv0: Removing interface: batadv_slave_1
[  234.069253][ T9694] veth1_macvtap: left promiscuous mode
[  234.075118][ T9694] veth1_vlan: left promiscuous mode
[  234.080386][ T9694] veth0_vlan: left promiscuous mode
[  234.211496][ T9694] team0 (unregistering): Port device team_slave_1 removed
[  234.229007][ T9694] team0 (unregistering): Port device team_slave_0 removed
[  234.256223][ T9709] smc: removing ib device syz2
[  234.864671][T13135] batman_adv: batadv0: Adding interface: batadv_slave_0
[  234.871657][T13135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.902581][T13135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  234.944233][T13135] batman_adv: batadv0: Adding interface: batadv_slave_1
[  234.966872][T13135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.992889][T13135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  235.058043][T13135] hsr_slave_0: entered promiscuous mode
[  235.064222][T13135] hsr_slave_1: entered promiscuous mode
[  235.070226][T13135] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  235.078370][T13135] Cannot create hsr debugfs directory
[  235.421492][T13135] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  235.430651][T13135] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  235.439434][T13135] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  235.454680][T13135] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  235.512844][T13135] 8021q: adding VLAN 0 to HW filter on device bond0
[  235.531161][T13135] 8021q: adding VLAN 0 to HW filter on device team0
[  235.541354][T10042] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.548457][T10042] bridge0: port 1(bridge_slave_0) entered forwarding state
[  235.561927][T10042] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.569164][T10042] bridge0: port 2(bridge_slave_1) entered forwarding state
[  235.680141][T13135] 8021q: adding VLAN 0 to HW filter on device batadv0
[  235.711529][T13135] veth0_vlan: entered promiscuous mode
[  235.721340][T13135] veth1_vlan: entered promiscuous mode
[  235.747353][T13135] veth0_macvtap: entered promiscuous mode
[  235.756468][T13135] veth1_macvtap: entered promiscuous mode
[  235.770737][T13135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.781596][T13135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.791988][T13135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.803230][T13135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.813295][T13135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.824031][T13135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.836243][T13135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.847287][T13135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.858738][T13135] batman_adv: batadv0: Interface activated: batadv_slave_0
[  235.870781][T13135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.881694][T13135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.891582][T13135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.902146][T13135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.912017][T13135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.923363][T13135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.934623][T13135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.946242][T13135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.954510][ T5091] Bluetooth: hci1: command 0x041b tx timeout
[  235.957635][T13135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.976031][T13135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.987115][T13135] batman_adv: batadv0: Interface activated: batadv_slave_1
[  235.999554][T13135] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.009083][T13135] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.018089][T13135] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.027202][T13135] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  236.060171][T13135] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht'
[  236.083134][ T9704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.085578][T13135] ieee80211 phy37: Selected rate control algorithm 'minstrel_ht'
[  236.099836][ T9704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.123070][ T9704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.131417][ T9704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.034171][ T5091] Bluetooth: hci1: command 0x041b tx timeout
[  240.114456][ T5091] Bluetooth: hci1: command 0x041b tx timeout