last executing test programs:

50.368708533s ago: executing program 2 (id=267):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x15, 0x0, 0x3, 0xfffffffe}, {0x0, 0x4, 0xfd}, {}, {}, {0x6, 0x3}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1900000004000000080000000100000000"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2}, 0x57)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000040)=0x1, 0x4)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10)

39.94540382s ago: executing program 2 (id=267):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x15, 0x0, 0x3, 0xfffffffe}, {0x0, 0x4, 0xfd}, {}, {}, {0x6, 0x3}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1900000004000000080000000100000000"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2}, 0x57)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000040)=0x1, 0x4)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10)

31.175703174s ago: executing program 2 (id=267):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x15, 0x0, 0x3, 0xfffffffe}, {0x0, 0x4, 0xfd}, {}, {}, {0x6, 0x3}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1900000004000000080000000100000000"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2}, 0x57)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000040)=0x1, 0x4)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10)

21.352935952s ago: executing program 2 (id=267):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x15, 0x0, 0x3, 0xfffffffe}, {0x0, 0x4, 0xfd}, {}, {}, {0x6, 0x3}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1900000004000000080000000100000000"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2}, 0x57)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000040)=0x1, 0x4)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10)

9.457807563s ago: executing program 2 (id=267):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x15, 0x0, 0x3, 0xfffffffe}, {0x0, 0x4, 0xfd}, {}, {}, {0x6, 0x3}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1900000004000000080000000100000000"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2}, 0x57)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000040)=0x1, 0x4)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10)

7.220806892s ago: executing program 1 (id=1089):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000140)={0x77359400}, 0x10) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0)

6.982352592s ago: executing program 1 (id=1090):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59e3d", 0xd8}], 0x1}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000740)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x2, 0x2}]}}}}}}}}, 0x0)

6.44059791s ago: executing program 1 (id=1093):
syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00102b000000000000000000e9fffeffac14142efe80000000000000000000000000008dc3d9dc75b5acaa3b000441680000000000000000089078"], 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @mcast1, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) (async)
bind$inet6(r0, 0x0, 0x0) (async)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) (async)
r4 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @remote, @null, 0x0, [@netrom, @netrom, @default, @bcast, @remote, @rose]}, &(0x7f0000000080)=0x40, 0x0)
getsockopt$rose(r4, 0x104, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async)
setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000002c0), 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, r0, 0x0) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r8=>0x0}) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0103000000000015000009"], 0x24}}, 0x0)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x34, r13, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x7b}, @val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x490c2283}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x840)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r8, @ANYBLOB="0500030001"], 0x28}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "527b2e4cb02f9647", "876a042c0ef2e3be2acc779bd5c380c8", "18e9bb11", "de3b0b42a4f78876"}, 0x28)

5.790508808s ago: executing program 1 (id=1097):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800900010076657468000000001800028014000100", @ANYRES64], 0x48}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x44}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f0000001480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x43, 0x4, 0x1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

5.636802331s ago: executing program 1 (id=1098):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
unshare(0x400)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%-5lx  \x00'}, 0x20)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x5, &(0x7f0000000700)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r3}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r4, r3}, 0xc)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup, r1, 0x4, 0x0, 0x0, @void, @value}, 0x20)
r5 = socket(0x1, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000100), &(0x7f00000001c0)=@udp6=r5, 0x2}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
unshare(0x400) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)='%-5lx  \x00'}, 0x20) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x5, &(0x7f0000000700)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r3}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r4, r3}, 0xc) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup, r1, 0x4, 0x0, 0x0, @void, @value}, 0x20) (async)
socket(0x1, 0x2, 0x0) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000100), &(0x7f00000001c0)=@udp6=r5, 0x2}, 0x20) (async)

5.577898896s ago: executing program 1 (id=1099):
r0 = getpid()
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r3}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x3e9, 0x224, 0x70bd2b, 0x25dfdbfd, {0x40, 0x1, 0x0, r0, 0xfff, 0xff, 0x3, 0xffff558e, 0x0, 0x4, 0x6}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000840)
sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0)

3.651033257s ago: executing program 2 (id=267):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x15, 0x0, 0x3, 0xfffffffe}, {0x0, 0x4, 0xfd}, {}, {}, {0x6, 0x3}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1900000004000000080000000100000000"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2}, 0x57)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000040)=0x1, 0x4)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10)

3.363914853s ago: executing program 32 (id=267):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x15, 0x0, 0x3, 0xfffffffe}, {0x0, 0x4, 0xfd}, {}, {}, {0x6, 0x3}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1900000004000000080000000100000000"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2}, 0x57)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000040)=0x1, 0x4)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10)

2.465875491s ago: executing program 0 (id=1123):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='hybla\x00', 0x6)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='scalable\x00', 0x9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@bridge_getlink={0x28, 0x12, 0x319, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x200, 0x40}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2}]}, 0x28}}, 0x0)
shutdown(r0, 0x2)

2.295864829s ago: executing program 3 (id=1124):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], 0x0, 0x26, 0x0, 0x1, 0x7, 0x0, @void, @value}, 0x28)
unshare(0x20000400)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f000000dc80)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f000000df00)={0x0, 0x0, &(0x7f000000dec0)={&(0x7f000000dcc0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fbdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="08006b000a000000040003030300"/32], 0x3c}, 0x1, 0x0, 0x0, 0x24000015}, 0x4000880)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="142c0000512d47bf52626eb9b7a94ab884af27ee62c74403d12f5f3cb40f9630822801ce8b085c52c0d8bc73cd2893c16553192e7aa13306890c348d1177fcc61b819f2984bbd6f7", @ANYRES16=0x0, @ANYBLOB="0400000000000000000012000000"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r6)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r6)
r8 = socket(0x2, 0x80805, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r10=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000340)={r10}, 0x8)
sendmsg$NLBL_MGMT_C_VERSION(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="030f0003000000000000081d00d24c56552d5df7f0628d43045961d760640c000000000000000000000000006f3d000000001829369f8c4bd55ecf3fb22c44ce0000"], 0x14}}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"])
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r11, 0x1, 0x2, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r11, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x86, &(0x7f0000002600)}, 0x10)
r12 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_int(r12, 0x28, 0x1, 0x0, 0x0)
r13 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r13, 0x0, 0xa, &(0x7f0000000040)=0x978c, 0x4)
bind$inet(r13, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="fe000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0)

2.293671436s ago: executing program 4 (id=1125):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket(0x2, 0x3, 0xff)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
shutdown(r2, 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r4}, 0x38)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x6c}}, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff041480"], 0x528}}, 0xc000)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r4}, 0x38)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@nop, @generic={0x13, 0x4, "e2cd"}, @fastopen={0x22, 0x7, "ce2781a9df"}]}}}}}}}}, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000040)={@private=0xa010101, @multicast1}, 0x8)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x14, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

2.191469762s ago: executing program 0 (id=1126):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1})
r2 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1})
close(0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000002340)=ANY=[@ANYRES8=<r3=>0xffffffffffffffff, @ANYBLOB="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", @ANYBLOB="2a265bc44164224a2a26ca5f0fb70ebeb5df8b5a281d034efcf2d77a8a0d3df64c5755b684d2c1452e6ef43a734ae6bf2a76152dfabaef900bb5c7e221f8fc0c94da5a709cd7962a0d08efd78863027077c982a9443bf9bd466fcf751ff580ee8cccff57e75e4fa1ff7c55c691e29ecf54d2a238b8bcfda5f8aebea1662099439fb1b0b094e18b10b1a650db0ff8ac2341a2de4002383f8acff0997d214b638087be6ce7b6333f009138516c830dbaa30a1e89b1ed4f29879591eec8f978b02adcd41294e2d19e67d39ee962f5f936a89842e0e41c5c60b4700eace50d78b73b3960fdd19db990c1bb4667"], 0x0, 0x4b, 0x0, 0x0, 0x3, 0x0, @void, @value}, 0x28)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x2, 0xfd, 0x0, 0x200}, {}, {}, {}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x80)
sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340055840000cefef0126764906e25ca604134bd6da08e5f7ecd4477152c4a8a50e8a555251907a591a71f447792d448838908ea1a8fc87dc0b3214d29da146d70365d524fad27badfc3360e8eed5ce7ece5e17d7b0eecbbd9698cdd49e32e554c4ad4a0c651499b13296358bdf4080000007ad5ede6b53ddb8b9de4178cf3e0d148a350b190a0b6323a3fe3dca2d4e025c5f8bffd7856", @ANYRES16=r5, @ANYRES64], 0x34}, 0x1, 0x0, 0x0, 0x20008040}, 0x4004044)
r6 = socket(0x23, 0x5, 0x9)
recvmmsg(0xffffffffffffffff, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000002180)=[{0x0}, {&(0x7f0000001e80)=""/63, 0x3f}], 0x2}}], 0x1, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000090a01040000000000000000070000000900020073797a310000fb9d8f3c1d3060d57a30000000000800054000000000300000001e0a05b6b64f49554d388410000000000900020073797a310000000008000440000000030800038004423a84ecaae6bd598a8a50370293000080140000001000010000000000000000000084000ac4b3fad38bcc4724ebd05ee1d157fe75a24b258c2994514fc6bd32a5086585a15f8a7450fb833a495df1575264390b8a8d93553ecd512aa1b9c1943727df769792edcc7d572b4af5aeecf8"], 0x8c}}, 0x40000)
r8 = syz_init_net_socket$ax25(0x3, 0x0, 0x3)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000001000008900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000b560f0511daa566408b7f600f0ffffff00920a422d8563c4b9d0bcd4e7b4846646f1881cc03d39e25953ca5df5a060"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x7}, 0x38)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b200000020000000000000000006073a9197500ddb94df773c05d00092568a844407375320c7c7e3efc2fb1ee9b78f2aef7921dc921dc6caaf55a8a1f54fcb79dd8cb880e78983430be0e08800ab9c764a298860c6dd29c236a186286704e93973e74df01d4933c92c1177b41e1a7", @ANYRES64=r8, @ANYBLOB="000000000df7000076f3df09d0ea8b4f00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28, @ANYRESOCT=r6, @ANYRESHEX=r3], 0x48)

2.056854081s ago: executing program 4 (id=1127):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000001801000020696c2500000000002020207b1af8ff00008400000000000000000007010000f8ffffffb702000008040000b7030000080000008500000006000000181100004f2ce8f5ddb39a8ae6a5804aa1ce735b5d71d87da8eeb49a00b366577d893164c9305f796f6ba28b8ae6c13783f93134e1831619f696128d9d356fef018e0ecf52b8be02fab087f5424fb66c5bdfa517d44bfe2bdad3c7b8f7b776a0f57ff0030f5f728884b5865a349eb9f7d1413b6508fcf40e92c374703f4207c54bdc1770bfc00578eba48b000f00000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x1, 0x10, 0x1, 0x7}, &(0x7f0000000380)=0x18)

1.974387249s ago: executing program 4 (id=1128):
socket(0xa, 0x3, 0x3a)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00')
socket(0x40000000002, 0x3, 0x80000000002)
openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8)
ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000208500000072000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_free_batched\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

1.034060459s ago: executing program 3 (id=1129):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async)
shutdown(r1, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012801100010300724b6467655f736c6176650006000000000580"], 0x3c}}, 0x0) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc020000000000008000000000000000ff02000000000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
ioctl$SIOCGETSGCNT_IN6(r1, 0x89e1, &(0x7f00000001c0)={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00'}) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async)
r5 = socket(0x10, 0x3, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0)
write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@dellink={0x58, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_IFNAME={0x14, 0x3, 'batadv_slave_1\x00'}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xa}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}]}, 0x58}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)={0x34, r10, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa}], @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}]}, 0x34}}, 0x0)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r14, @ANYBLOB="080002002e01000040cbc7be94146f614e2c5b3f66a7efcb24eb80ed2355a99b5fa7a9c8ac52fe30bd9418f2f9c6a6c1d6482385ee5d5ba1de83a928d82793c37dcaf0aad1a2895be369902b3d905bac694f47faaa797aff4e70a5ca262ac1451dd175ca9cab4fff7ee10b01a5"], 0x24}, 0x1, 0x6c00}, 0x0)

976.885366ms ago: executing program 0 (id=1130):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x24, 0x11, 0x0, 0x0, @binary="fedcbb7d1d11c6d3139ebb7290e4d8a1c39156c2a7ef6ad7ecb70f506210f4f5"}]}, 0x38}], 0x1, 0x0, 0x0, 0x8800}, 0x0)
write(r1, &(0x7f00000000c0)="af209421e8b5f0ddfcf9f4d308e1c485d209643bfb297238691356a0362bf1d63e9380b58bf3d0b03a8d4e168c2907e8deff85ba087ce99395ea2d94b6297592aba37db8a8", 0x45)

923.928358ms ago: executing program 3 (id=1131):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x248, 0x0, 0xffffffff, 0xffffffff, 0x90, 0xffffffff, 0x1b0, 0xffffffff, 0xffffffff, 0x1b0, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@ip={@remote, @multicast2, 0xff000000, 0x0, 'tunl0\x00', 'team_slave_0\x00', {}, {0xff}, 0x84, 0x1, 0x31}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3e}, @multicast2, 0xff000000, 0x0, 'dummy0\x00', 'netdevsim0\x00', {}, {}, 0x89, 0x1, 0x8}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x2, 0x4, 0x3, 0x4, 0x2, 0x5], 0x1, 0x4}, {0x3, [0x0, 0x0, 0x3, 0x1, 0x1, 0x5], 0x2, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x22020600)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000200)={'security\x00', 0x24, [{}, {}, {}, {}, {}]}, 0x58)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x38, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg1\x00'}]}]}, @NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc8}}, 0x4008000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc4}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110180000000000d4050000100000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

781.739485ms ago: executing program 0 (id=1132):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x4, 0x9, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet(0x2, 0x4000000805, 0x0)
listen(r2, 0x7)
sendmmsg(r2, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @private=0xa010100}, 0xfffffffffffffcd8, &(0x7f0000000300)=[{&(0x7f0000000080)="a3", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000f58d000083ea000005"], 0x18}}], 0x2, 0x0)

777.242728ms ago: executing program 4 (id=1133):
socket$inet6(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd0, 0x11, 0x148, 0x0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x3, 0x1]}, {0xffffffffffffffff}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'veth1_to_batadv\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={<r3=>r2})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bind$bt_sco(r3, &(0x7f0000000180), 0x8)
epoll_create1(0x0)
getpid()
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="1a0000000000000000002500000096fbe979256891689999ccecbbb2771e2473cc6332519168a241fb73a9054475052bdaa9b8603f759e756774e55fdf52e26aea2b5ebb0476a55bdbdc50e4d640420e448ccc301853767674695b3c5231618b09c052218d71a6dc1289997102b2702ee5bce7768f7d76bd"], 0x14}}, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000600), 0x800)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000140009050000000000000000020100ff", @ANYRES32=r7, @ANYBLOB="1400060006000000000000f0000000000000000008000200ac1414aa"], 0x70}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x3c, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r10}, [@IFA_CACHEINFO={0x14, 0x6, {0x6, 0xf0000000}}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1}]}, 0x3c}}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r12, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000040)=0x2, 0x4)
getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4880)

696.828ms ago: executing program 3 (id=1134):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000200)={0x1ff, 0x0, 0xffffffff}, 0xffffffffffffff8f)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a0080"], 0x1c}}, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000110000000c000980be53b00100010000"], 0x20}}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r3, @ANYBLOB="000128bd7000fddbdf251600000024000380080003000600000008000200020000000800030000000000080002004c0c00007000028008000200060000004c00038008000100db000000080001000000000008000200090000000800020002000000080001000a00000008000200000000000800020004000000080001000200000008000200000000000800020001009333d214ca3edd59000008000200090000001400038008000100c0c2000008000300ffffffff"], 0xbc}, 0x1, 0x0, 0x0, 0x8841}, 0x40)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
write(r0, &(0x7f00000000c0)="1800000016005f0214fffffffffffff8070000000e000000", 0x18)

560.214007ms ago: executing program 0 (id=1135):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r4=>0x0})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x18, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008085}, 0x4000000) (async)
sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x18, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008085}, 0x4000000)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r4, 0x11, 0x6}, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @local}, 0x10)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

438.12305ms ago: executing program 3 (id=1136):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x17}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x11, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x9c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000180)={'team0\x00'})
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r5, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x4}]}, 0x1c}}, 0x0)

240.909034ms ago: executing program 4 (id=1137):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xa, 0xfff3}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x19, 0x4)

167.659151ms ago: executing program 3 (id=1138):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000010000000000000000000000691205000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x800, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)={@map=r2, r3, 0x2f, 0x4, 0x4, @void, @value=r3}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'vxcan1\x00'}]}, 0x30}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x1, 0x720, 0x4, 0x8, {{0x17, 0x4, 0x2, 0x3, 0x5c, 0x64, 0x0, 0x2, 0x4, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x13, 0xd4, [@dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010101, @multicast1, @loopback]}, @timestamp={0x44, 0x10, 0xe0, 0x0, 0x4, [0x3, 0x40000, 0x8]}, @timestamp_prespec={0x44, 0xc, 0x99, 0x3, 0x1, [{@empty, 0x9}]}, @lsrr={0x83, 0x13, 0xab, [@multicast2, @broadcast, @multicast2, @broadcast]}, @end, @ra={0x94, 0x4}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
epoll_create(0x3)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r7 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfff, @loopback}, 0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@private2}, 0x0, @in=@remote}}, 0x0)
ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000580)={0x3, @null, r8})
getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, &(0x7f00000001c0))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x4, 0x7, 0x9})
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xe8)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000400), &(0x7f00000005c0)=0xc)
getgid()

86.421062ms ago: executing program 4 (id=1139):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="2c0000000f1401002dbd7000fddbdf250800010000000000090045006973736d"], 0x2c}, 0x1, 0x0, 0x0, 0xc841}, 0x20000000)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030001000000070000000000000005000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000000040)=0xffff, 0x4)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a000000060a0904000000000000000002000000240004800c000180080001006c6f6700140001800b00010064796e73657400000400c2a961a358feb430484d362f19f557ac02840900010073797a30000000000900022073797a32000000001400000061df2e66994e289478a65172f6ee3c849fc9c7c62c1a8fda9a570111abf14176148269463aebea87fc7d33165b1aa941aa26b33d298af7"], 0x78}}, 0x4048040)
r7 = socket$packet(0x11, 0x1, 0x300)
accept4(r7, 0x0, &(0x7f0000000000), 0x1000)

0s ago: executing program 0 (id=1140):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
ioctl$AUTOFS_IOC_READY(r3, 0x400442c8, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5cdcb37fd8c4660400000000000000", @ANYRES16=r2, @ANYBLOB="010000000000000000002500000008000300", @ANYRES32=r4, @ANYBLOB="0a00060008021100000100001800508004000500050002000300000008000700020000000a00340001010101010100000800350004000000080026006c090000"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x40050)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c70125d69004c4c000480280001800700014000000002080002400000001605000300000000000900010073797a30000000000900020073797a32000000001400000011000100"/128], 0x80}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000001040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, @NFT_MSG_DELTABLE={0x104, 0x2, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xa9, 0x6, "b21afe51fd529b0188679f93b0216c66b10cfa66ac9577297e0bdacbc85d5cb33b77e6d80b487b3e30fb332fe630f1dab3834a157a6f8aba9bc25a1fb95f5fa65beb12076d0c465b98737a67354fc5316c1855e0e510984ed6d2050f1c47fe196249dd8d34a9f9a7ce04fd4271171eefa8378d35033debbb8dcf43c3ffe9f20bce18399af145e32ccd04c7ffeca76c91aedcbe53d7c093f636a795f99902590471252d2da3"}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x150, 0x6, 0xa, 0x202, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0x102, 0x7, 0x1, 0x0, "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"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x9, 0x7, 0x1, 0x0, "19dcf1dc89"}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6000}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_DELSETELEM={0x68, 0xe, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}}], {0x14}}, 0x388}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1400, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0xffff}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

kernel console output (not intermixed with test programs):

ve interface with an up link
[   98.393890][ T6955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.505833][ T6955] team0: Port device team_slave_0 added
[   98.540581][ T6955] team0: Port device team_slave_1 added
[   98.556754][ T7124] netlink: 'syz.4.308': attribute type 33 has an invalid length.
[   98.572794][ T7124] netlink: 160 bytes leftover after parsing attributes in process `syz.4.308'.
[   98.708385][ T6955] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.730783][ T6955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.766894][ T6955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.841623][ T7129] netlink: 'syz.1.310': attribute type 21 has an invalid length.
[   98.850794][ T7129] netlink: 128 bytes leftover after parsing attributes in process `syz.1.310'.
[   98.873264][ T7129] netlink: 'syz.1.310': attribute type 5 has an invalid length.
[   98.891762][ T7129] netlink: 'syz.1.310': attribute type 6 has an invalid length.
[   98.909720][ T7129] netlink: 3 bytes leftover after parsing attributes in process `syz.1.310'.
[   98.942499][ T6955] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.959085][ T6955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.013923][ T6955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.017273][ T7145] netlink: 60 bytes leftover after parsing attributes in process `syz.3.315'.
[   99.128298][ T6955] hsr_slave_0: entered promiscuous mode
[   99.147719][ T6955] hsr_slave_1: entered promiscuous mode
[   99.167908][ T6955] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   99.186377][ T6955] Cannot create hsr debugfs directory
[   99.251632][ T7151] netlink: 'syz.3.316': attribute type 39 has an invalid length.
[   99.284434][ T7152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.316'.
[   99.302383][ T7150] smc: net device wg0 applied user defined pnetid SYZ0
[   99.420130][ T7151] smc: removing net device wg0 with user defined pnetid SYZ0
[   99.887097][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.322'.
[  100.038238][ T5840] Bluetooth: hci1: command tx timeout
[  100.196718][ T7205] netlink: 144 bytes leftover after parsing attributes in process `syz.4.326'.
[  100.234495][ T7208] netlink: 144 bytes leftover after parsing attributes in process `syz.4.326'.
[  100.297491][ T7212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.347094][ T7202] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7
[  100.534246][ T7219] Cannot find del_set index 0 as target
[  100.632369][ T6955] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  100.663087][ T6955] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  100.710310][ T6955] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  100.785484][ T6955] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  101.026453][ T7237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  101.060894][ T6955] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.144924][ T6955] 8021q: adding VLAN 0 to HW filter on device team0
[  101.206897][ T6567] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.215048][ T6567] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.238960][ T6567] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.246133][ T6567] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.262772][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'.
[  101.323925][ T6955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  101.392228][ T7247] tun1: tun_chr_ioctl cmd 1074812117
[  101.478480][ T7259] veth0_vlan: entered allmulticast mode
[  101.517235][ T7267] veth0_vlan: left promiscuous mode
[  101.535371][ T7267] veth0_vlan: entered promiscuous mode
[  101.686701][ T6955] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.825114][ T6955] veth0_vlan: entered promiscuous mode
[  101.831427][ T7278] netlink: 'syz.4.343': attribute type 24 has an invalid length.
[  101.840621][ T7281] netlink: 'syz.1.344': attribute type 1 has an invalid length.
[  101.882864][ T7281] 8021q: adding VLAN 0 to HW filter on device bond2
[  101.962465][ T7285] 8021q: adding VLAN 0 to HW filter on device bond2
[  101.969837][ T7285] bond2: (slave vti0): The slave device specified does not support setting the MAC address
[  101.988134][ T7285] bond2: (slave vti0): Error -95 calling set_mac_address
[  102.022436][ T6955] veth1_vlan: entered promiscuous mode
[  102.117998][ T5840] Bluetooth: hci1: command tx timeout
[  102.135917][ T6955] veth0_macvtap: entered promiscuous mode
[  102.175950][ T6955] veth1_macvtap: entered promiscuous mode
[  102.233093][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  102.278081][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.323009][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  102.354430][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.387632][ T6955] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.426784][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  102.466828][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.497247][ T6955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  102.518064][ T6955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.558956][ T6955] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.680755][ T7318] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.718833][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.353'.
[  102.800376][ T6955] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.827152][ T6955] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.854611][ T6955] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.892838][ T6955] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.076862][ T7318] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.304230][ T7340] syzkaller0: entered promiscuous mode
[  103.323330][ T7340] syzkaller0: entered allmulticast mode
[  103.432683][ T7318] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.555784][ T7318] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.443508][ T6567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.458025][ T6567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.465022][ T7318] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.505922][ T7318] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.515132][ T7394] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  105.593981][ T7318] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.610704][ T6563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.630900][ T6563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.635986][ T7318] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.663093][ T7398] netlink: 'syz.0.365': attribute type 3 has an invalid length.
[  105.672585][ T7315] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.685640][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'.
[  105.714984][ T7403] bridge0: entered promiscuous mode
[  105.727459][ T7402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.367'.
[  105.736475][ T7402] bridge_slave_1: left allmulticast mode
[  105.755517][ T7402] bridge_slave_1: left promiscuous mode
[  105.785975][ T7402] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.827937][ T7402] bridge_slave_0: left allmulticast mode
[  105.860739][ T7402] bridge_slave_0: left promiscuous mode
[  105.866510][ T7402] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.953528][ T7402] bridge0 (unregistering): left promiscuous mode
[  106.002011][ T7315] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.084388][ T7315] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.124966][ T7414] netlink: 'syz.0.368': attribute type 3 has an invalid length.
[  106.147953][ T7414] netlink: 36 bytes leftover after parsing attributes in process `syz.0.368'.
[  106.175251][ T7315] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.363701][ T6567] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.388294][ T7414] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  106.540098][ T6567] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.572747][ T7429] netlink: 56 bytes leftover after parsing attributes in process `syz.4.373'.
[  106.583719][ T7428] veth0_vlan: entered allmulticast mode
[  106.670695][ T6567] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.706642][ T7428] veth0_vlan: left promiscuous mode
[  106.716629][ T7428] veth0_vlan: entered promiscuous mode
[  106.787126][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  106.792140][ T6567] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.805007][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  106.813508][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  106.823309][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  106.831704][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  106.839506][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  107.044622][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.375'.
[  107.138347][ T6567] bridge_slave_1: left allmulticast mode
[  107.144137][ T6567] bridge_slave_1: left promiscuous mode
[  107.149919][ T6567] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.183322][ T6567] bridge_slave_0: left allmulticast mode
[  107.189297][ T6567] bridge_slave_0: left promiscuous mode
[  107.196155][ T6567] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.424104][ T7466] netlink: 32 bytes leftover after parsing attributes in process `syz.0.380'.
[  107.897448][ T6567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  107.908800][ T6567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  107.921909][ T6567] bond0 (unregistering): Released all slaves
[  107.950769][ T7461] netlink: 'syz.0.380': attribute type 3 has an invalid length.
[  108.004010][ T7475] syzkaller1: entered promiscuous mode
[  108.031226][ T7475] syzkaller1: entered allmulticast mode
[  108.171416][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.383'.
[  108.255624][ T7497] netlink: 'syz.3.383': attribute type 10 has an invalid length.
[  108.266372][ T7497] netlink: 55 bytes leftover after parsing attributes in process `syz.3.383'.
[  108.499810][ T6567] hsr_slave_0: left promiscuous mode
[  108.524545][ T7506] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8
[  108.572644][ T6567] hsr_slave_1: left promiscuous mode
[  108.605561][ T6567] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.614057][ T6567] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.624832][ T6567] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.632905][ T6567] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.654528][ T6567] veth1_macvtap: left promiscuous mode
[  108.661106][ T6567] veth0_macvtap: left promiscuous mode
[  108.666863][ T6567] veth1_vlan: left promiscuous mode
[  108.672646][ T6567] veth0_vlan: left promiscuous mode
[  108.844071][ T7527] Driver unsupported XDP return value 0 on prog  (id 278) dev N/A, expect packet loss!
[  108.918164][ T5840] Bluetooth: hci1: command tx timeout
[  109.070545][ T7527] xt_CT: You must specify a L4 protocol and not use inversions on it
[  109.462169][ T6567] team0 (unregistering): Port device team_slave_1 removed
[  109.508413][ T6567] team0 (unregistering): Port device team_slave_0 removed
[  109.813095][ T7435] chnl_net:caif_netlink_parms(): no params data found
[  109.826898][ T7506] bond0: option mode: unable to set because the bond device has slaves
[  109.868063][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.387'.
[  109.893979][ T7547] macsec0: entered promiscuous mode
[  109.934143][ T7548] veth1_macvtap: left promiscuous mode
[  109.974134][ T7548] macsec0 (unregistering): left promiscuous mode
[  110.133930][ T7315] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.194392][ T7315] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.306522][ T7315] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.325131][ T7315] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.351231][ T7435] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.378051][ T7435] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.385300][ T7435] bridge_slave_0: entered allmulticast mode
[  110.401026][ T7435] bridge_slave_0: entered promiscuous mode
[  110.430989][ T7435] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.453601][ T7435] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.476402][ T7435] bridge_slave_1: entered allmulticast mode
[  110.492924][ T7435] bridge_slave_1: entered promiscuous mode
[  110.573737][ T7435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.633022][ T7435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.748331][ T7435] team0: Port device team_slave_0 added
[  110.791852][ T7435] team0: Port device team_slave_1 added
[  110.834807][ T7435] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.850594][ T7435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.907933][ T7435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.001495][ T5840] Bluetooth: hci1: command tx timeout
[  111.035630][ T7435] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.043619][ T7435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.070025][ T7435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.153316][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'.
[  111.259452][ T7435] hsr_slave_0: entered promiscuous mode
[  111.300598][ T7435] hsr_slave_1: entered promiscuous mode
[  111.319218][ T7435] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  111.326876][ T7435] Cannot create hsr debugfs directory
[  111.382330][ T7615] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  111.391035][ T7615] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  111.399590][ T7615] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  111.408116][ T7615] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  111.428682][ T7615] vxlan0: entered promiscuous mode
[  111.433853][ T7615] vxlan0: entered allmulticast mode
[  111.469807][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'.
[  112.102271][ T7640] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.125493][ T7640] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.426075][ T7640] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.444242][ T7640] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.557038][ T7640] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.575268][ T7640] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.737308][ T7640] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.747471][ T7678] netlink: 'syz.3.419': attribute type 8 has an invalid length.
[  112.749343][ T7640] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.787277][ T7678] ipt_rpfilter: unknown options
[  112.973898][ T7435] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  112.985866][ T7435] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  113.002528][ T7435] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  113.020881][ T7435] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  113.079033][ T5840] Bluetooth: hci1: command tx timeout
[  113.172126][ T7686] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.306891][ T7686] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.379838][ T7435] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.393071][ T7698] veth0_vlan: left promiscuous mode
[  113.444199][ T7686] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.475971][ T7697] delete_channel: no stack
[  113.495096][ T7435] 8021q: adding VLAN 0 to HW filter on device team0
[  113.539837][ T7686] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode
[  113.641026][ T7686] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.662492][ T6563] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.669692][ T6563] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.683194][ T6563] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.690389][ T6563] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.692114][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'.
[  113.736226][ T7709] vlan4: entered promiscuous mode
[  113.741450][ T7709] bond0: entered promiscuous mode
[  113.854377][ T7640] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  113.866172][ T7640] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.905143][ T7686] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.943784][ T7640] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  113.972476][ T7640] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.998090][ T7640] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  114.018375][ T7640] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.044812][ T7686] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.083537][ T7686] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.166740][ T7640] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  114.183878][ T7640] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.203982][ T7686] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.227425][ T7729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.428'.
[  114.366782][ T7729] netlink: 'syz.0.428': attribute type 39 has an invalid length.
[  114.649662][ T7435] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.652523][ T7756] netlink: 68 bytes leftover after parsing attributes in process `syz.1.434'.
[  114.680296][ T7435] veth0_vlan: entered promiscuous mode
[  114.734432][ T7435] veth1_vlan: entered promiscuous mode
[  114.779192][ T7435] veth0_macvtap: entered promiscuous mode
[  114.821153][ T7435] veth1_macvtap: entered promiscuous mode
[  114.863767][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.909644][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.926581][ T7772] netlink: 628 bytes leftover after parsing attributes in process `syz.3.437'.
[  114.970253][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.981002][ T7772] netlink: 12568 bytes leftover after parsing attributes in process `syz.3.437'.
[  115.001875][ T7772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.437'.
[  115.022173][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.051334][ T7435] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.063823][ T7784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'.
[  115.081975][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.436'.
[  115.161869][ T5840] Bluetooth: hci1: command tx timeout
[  115.167759][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.170348][ T7772] netlink: 'syz.3.437': attribute type 3 has an invalid length.
[  115.186209][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.197035][ T7435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.216581][ T7435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.227552][ T7435] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.237390][ T7435] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.246400][ T7435] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.255280][ T7435] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.264138][ T7435] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.463073][ T7804] netlink: 'syz.0.441': attribute type 5 has an invalid length.
[  117.528260][ T6580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.579439][ T6580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.649142][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.683628][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.738881][ T7854] syz_tun: entered promiscuous mode
[  117.744156][ T7854] macsec1: entered promiscuous mode
[  117.775859][ T7861] netlink: 'syz.4.446': attribute type 13 has an invalid length.
[  117.798902][ T7854] syz_tun: left promiscuous mode
[  117.883088][ T7867] xt_time: unknown flags 0x4
[  118.144614][ T7880] syz.0.449: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  118.167166][ T7874] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  118.185662][ T7880] CPU: 0 UID: 0 PID: 7880 Comm: syz.0.449 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0
[  118.204555][ T7880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  118.214650][ T7880] Call Trace:
[  118.217947][ T7880]  <TASK>
[  118.220898][ T7880]  dump_stack_lvl+0x241/0x360
[  118.225614][ T7880]  ? __pfx_dump_stack_lvl+0x10/0x10
[  118.230843][ T7880]  ? __pfx__printk+0x10/0x10
[  118.235469][ T7880]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  118.241908][ T7880]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  118.248417][ T7880]  warn_alloc+0x278/0x410
[  118.252744][ T7880]  ? stack_depot_save_flags+0x29/0x830
[  118.258199][ T7880]  ? __vmalloc_node_range_noprof+0x106/0x1380
[  118.264257][ T7880]  ? __pfx_warn_alloc+0x10/0x10
[  118.269101][ T7880]  ? kasan_save_track+0x3f/0x80
[  118.273948][ T7880]  ? __kasan_kmalloc+0x98/0xb0
[  118.278705][ T7880]  ? xsk_setsockopt+0x4ea/0x950
[  118.283547][ T7880]  ? do_sock_setsockopt+0x3af/0x720
[  118.288749][ T7880]  ? __x64_sys_setsockopt+0x1ee/0x280
[  118.294130][ T7880]  ? do_syscall_64+0xf3/0x230
[  118.298811][ T7880]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.304890][ T7880]  __vmalloc_node_range_noprof+0x126/0x1380
[  118.310799][ T7880]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  118.317127][ T7880]  ? __kasan_kmalloc+0x98/0xb0
[  118.321889][ T7880]  vmalloc_user_noprof+0x74/0x80
[  118.326856][ T7880]  ? xskq_create+0xb6/0x170
[  118.331355][ T7880]  xskq_create+0xb6/0x170
[  118.335682][ T7880]  xsk_init_queue+0xa1/0x100
[  118.340272][ T7880]  xsk_setsockopt+0x4ea/0x950
[  118.344945][ T7880]  ? __pfx_xsk_setsockopt+0x10/0x10
[  118.350137][ T7880]  ? __pfx_aa_sk_perm+0x10/0x10
[  118.354987][ T7880]  ? aa_sock_opt_perm+0x79/0x120
[  118.359921][ T7880]  ? __pfx_xsk_setsockopt+0x10/0x10
[  118.365111][ T7880]  do_sock_setsockopt+0x3af/0x720
[  118.370137][ T7880]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  118.375677][ T7880]  ? __fget_files+0x395/0x410
[  118.380344][ T7880]  ? __fget_files+0x2a/0x410
[  118.384930][ T7880]  __x64_sys_setsockopt+0x1ee/0x280
[  118.390129][ T7880]  do_syscall_64+0xf3/0x230
[  118.394631][ T7880]  ? clear_bhb_loop+0x35/0x90
[  118.399302][ T7880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.405190][ T7880] RIP: 0033:0x7f370bd7fed9
[  118.409611][ T7880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.429207][ T7880] RSP: 002b:00007f3709bf6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  118.437616][ T7880] RAX: ffffffffffffffda RBX: 00007f370bf46160 RCX: 00007f370bd7fed9
[  118.445583][ T7880] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  118.453548][ T7880] RBP: 00007f370bdf3cc8 R08: 0000000000000004 R09: 0000000000000000
[  118.461512][ T7880] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000
[  118.469473][ T7880] R13: 0000000000000001 R14: 00007f370bf46160 R15: 00007ffc7d9b2f48
[  118.477446][ T7880]  </TASK>
[  118.492681][ T7880] Mem-Info:
[  118.496275][ T7880] active_anon:4780 inactive_anon:0 isolated_anon:0
[  118.496275][ T7880]  active_file:1449 inactive_file:38215 isolated_file:0
[  118.496275][ T7880]  unevictable:768 dirty:218 writeback:0
[  118.496275][ T7880]  slab_reclaimable:10010 slab_unreclaimable:99248
[  118.496275][ T7880]  mapped:29846 shmem:1430 pagetables:763
[  118.496275][ T7880]  sec_pagetables:0 bounce:0
[  118.496275][ T7880]  kernel_misc_reclaimable:0
[  118.496275][ T7880]  free:1341973 free_pcp:392 free_cma:0
[  118.548567][ T7880] Node 0 active_anon:19120kB inactive_anon:0kB active_file:5796kB inactive_file:152784kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119384kB dirty:872kB writeback:0kB shmem:4184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11760kB pagetables:2952kB sec_pagetables:0kB all_unreclaimable? no
[  118.612446][ T7880] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  118.714951][ T7880] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  118.742940][ T7880] lowmem_reserve[]: 0 2465 2466 0 0
[  118.754039][ T7880] Node 0 DMA32 free:1444932kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:19180kB inactive_anon:0kB active_file:5796kB inactive_file:151956kB unevictable:1536kB writepending:868kB present:3129332kB managed:2552844kB mlocked:0kB bounce:0kB free_pcp:1052kB local_pcp:464kB free_cma:0kB
[  118.872727][ T7880] lowmem_reserve[]: 0 0 0 0 0
[  118.882772][ T7880] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  118.914432][ T7880] lowmem_reserve[]: 0 0 0 0 0
[  118.927972][ T7880] Node 1 Normal free:3908192kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  118.957091][ T7880] lowmem_reserve[]: 0 0 0 0 0
[  118.961932][ T7880] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  118.990260][   T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.011048][ T7880] Node 0 DMA32: 318*4kB (UM) 59*8kB (UME) 148*16kB (UME) 286*32kB (UME) 722*64kB (UME) 180*128kB (UME) 81*256kB (UM) 23*512kB (UME) 9*1024kB (UM) 2*2048kB (ME) 322*4096kB (UM) = 1447248kB
[  119.064085][ T7880] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  119.082712][ T7880] Node 1 Normal: 214*4kB (UE) 49*8kB (UME) 32*16kB (UME) 196*32kB (UME) 86*64kB (UME) 23*128kB (UME) 14*256kB (UME) 10*512kB (UM) 8*1024kB (UME) 2*2048kB (UE) 945*4096kB (UM) = 3908192kB
[  119.108585][ T7910] __nla_validate_parse: 1 callbacks suppressed
[  119.108603][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.456'.
[  119.134741][ T7880] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  119.159936][ T7880] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  119.185148][ T7880] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  119.213540][ T7880] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  119.230831][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.247944][ T7880] 41101 total pagecache pages
[  119.275346][ T7880] 0 pages in swap cache
[  119.286617][ T7880] Free swap  = 124996kB
[  119.301026][ T7880] Total swap = 124996kB
[  119.316214][ T7880] 2097051 pages RAM
[  119.324422][ T7880] 0 pages HighMem/MovableOnly
[  119.335324][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'.
[  119.337080][ T7880] 426990 pages reserved
[  119.357524][ T7880] 0 pages cma reserved
[  119.674427][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.459'.
[  119.798034][ T7939] netlink: 32 bytes leftover after parsing attributes in process `syz.4.460'.
[  119.817480][ T7941] x_tables: unsorted underflow at hook 2
[  119.829290][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.851429][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  119.865643][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  119.876956][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  119.880204][ T7932] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  119.885776][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  119.902434][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  119.913133][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  120.005457][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.046302][ T7953] syz.4.463[7953] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  120.046400][ T7953] syz.4.463[7953] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  120.058184][ T7953] syz.4.463[7953] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  120.500177][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.468'.
[  120.550626][ T7942] chnl_net:caif_netlink_parms(): no params data found
[  120.862414][ T7991] netlink: 'syz.1.472': attribute type 21 has an invalid length.
[  120.902168][ T7991] netlink: 'syz.1.472': attribute type 6 has an invalid length.
[  120.919965][ T7991] netlink: 64 bytes leftover after parsing attributes in process `syz.1.472'.
[  120.929651][   T11] bridge_slave_1: left allmulticast mode
[  120.935399][   T11] bridge_slave_1: left promiscuous mode
[  120.949574][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.005253][   T11] bridge_slave_0: left allmulticast mode
[  121.020921][   T11] bridge_slave_0: left promiscuous mode
[  121.028102][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.226347][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.470'.
[  121.556826][ T8025] netlink: 47 bytes leftover after parsing attributes in process `syz.1.477'.
[  121.697758][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  121.709291][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  121.719829][   T11] bond0 (unregistering): Released all slaves
[  121.734828][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'.
[  121.744139][ T7998] netlink: 48 bytes leftover after parsing attributes in process `syz.0.473'.
[  121.774796][ T8009] veth0_to_team: entered promiscuous mode
[  121.809050][ T8009] veth0_to_team: entered allmulticast mode
[  121.958458][ T5843] Bluetooth: hci1: command tx timeout
[  122.116490][ T7942] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.127111][ T7942] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.135236][ T7942] bridge_slave_0: entered allmulticast mode
[  122.142974][ T7942] bridge_slave_0: entered promiscuous mode
[  122.191814][ T7942] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.201638][ T7942] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.210543][ T7942] bridge_slave_1: entered allmulticast mode
[  122.218730][ T7942] bridge_slave_1: entered promiscuous mode
[  122.354327][ T7942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.430336][   T11] hsr_slave_0: left promiscuous mode
[  122.452705][   T11] hsr_slave_1: left promiscuous mode
[  122.495081][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.502742][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.519324][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.527112][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.582639][   T11] veth1_macvtap: left promiscuous mode
[  122.600003][   T11] veth0_macvtap: left promiscuous mode
[  122.610583][   T11] veth1_vlan: left promiscuous mode
[  122.621823][   T11] veth0_vlan: left promiscuous mode
[  123.255044][   T11] team0 (unregistering): Port device team_slave_1 removed
[  123.292297][   T11] team0 (unregistering): Port device team_slave_0 removed
[  123.680131][ T7942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  123.890816][ T7942] team0: Port device team_slave_0 added
[  123.918417][ T7942] team0: Port device team_slave_1 added
[  124.039014][ T5843] Bluetooth: hci1: command tx timeout
[  124.095139][ T7942] batman_adv: batadv0: Adding interface: batadv_slave_0
[  124.119618][ T7942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.178271][ T7942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  124.215354][ T7942] batman_adv: batadv0: Adding interface: batadv_slave_1
[  124.243499][ T7942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.326123][ T7942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  124.538835][ T7942] hsr_slave_0: entered promiscuous mode
[  124.558668][ T7942] hsr_slave_1: entered promiscuous mode
[  124.590328][ T7942] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  124.614769][ T7942] Cannot create hsr debugfs directory
[  124.620189][ T8142] netlink: 'syz.0.503': attribute type 3 has an invalid length.
[  124.620210][ T8142] netlink: 'syz.0.503': attribute type 1 has an invalid length.
[  124.643617][ T8135] __nla_validate_parse: 7 callbacks suppressed
[  124.643636][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.501'.
[  124.871893][ T8143] netlink: 4076 bytes leftover after parsing attributes in process `syz.3.502'.
[  124.942803][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.506'.
[  124.952889][ T8154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.507'.
[  125.148840][ T8164] netlink: 16 bytes leftover after parsing attributes in process `syz.3.508'.
[  125.201433][ T8164] netlink: 32 bytes leftover after parsing attributes in process `syz.3.508'.
[  125.731123][ T8191] netlink: 40 bytes leftover after parsing attributes in process `syz.0.511'.
[  125.990810][ T7942] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  126.053437][ T7942] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  126.082000][ T7942] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  126.118227][ T5843] Bluetooth: hci1: command tx timeout
[  126.145032][ T7942] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  126.233055][ T8209] veth0_to_team: entered promiscuous mode
[  126.242264][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.514'.
[  126.251555][ T8209] veth0_to_team: entered allmulticast mode
[  126.337049][ T8209] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  126.665868][ T7942] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.702292][ T7942] 8021q: adding VLAN 0 to HW filter on device team0
[  126.748181][ T8228] batadv_slave_1: entered promiscuous mode
[  126.769504][ T8228] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.871532][ T8228] batadv_slave_1 (unregistering): left promiscuous mode
[  126.883974][ T8228] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.963827][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.971024][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.003540][ T6580] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.010742][ T6580] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.030440][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.522'.
[  127.083400][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.522'.
[  127.114950][ T8236] 8021q: adding VLAN 0 to HW filter on device bond1
[  127.133158][ T8236] bond0: (slave bond1): Enslaving as an active interface with an up link
[  127.316647][ T7942] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  127.365157][ T7942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  127.519230][ T8279] gtp0: entered promiscuous mode
[  127.544229][ T8279] gtp0: entered allmulticast mode
[  127.701143][ T8284] netlink: 'syz.3.529': attribute type 21 has an invalid length.
[  127.715751][ T8288] netlink: 'syz.3.529': attribute type 21 has an invalid length.
[  127.798032][ T7942] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.964893][ T7942] veth0_vlan: entered promiscuous mode
[  128.011263][ T7942] veth1_vlan: entered promiscuous mode
[  128.097656][ T7942] veth0_macvtap: entered promiscuous mode
[  128.164958][ T7942] veth1_macvtap: entered promiscuous mode
[  128.197971][ T5843] Bluetooth: hci1: command tx timeout
[  128.236221][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.279934][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.319697][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.378810][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.418195][ T7942] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.511241][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  128.553820][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.587097][ T7942] batman_adv: batadv0: Interface activated: batadv_slave_1
[  128.633200][ T8338] dvmrp0: entered allmulticast mode
[  128.644428][ T7942] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.664938][ T7942] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.674604][ T7942] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.683535][ T7942] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.742139][ T8331] dvmrp0: left allmulticast mode
[  129.042478][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.050463][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.181533][ T6579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.189535][ T6579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.411934][ T8359] bond0: entered promiscuous mode
[  129.428055][ T8359] bond_slave_0: entered promiscuous mode
[  129.439954][ T8359] bond_slave_1: entered promiscuous mode
[  129.466436][ T8359] ip6gretap0: entered promiscuous mode
[  129.497461][ T8361] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  129.537996][ T8361] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  130.153150][ T8398] netlink: 'syz.4.551': attribute type 1 has an invalid length.
[  130.204841][ T6563] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.258940][ T8398] 8021q: adding VLAN 0 to HW filter on device bond1
[  130.473669][ T6563] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.781630][ T8406] __nla_validate_parse: 12 callbacks suppressed
[  130.781649][ T8406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.555'.
[  130.803078][ T8409] netlink: 516 bytes leftover after parsing attributes in process `syz.3.554'.
[  130.818091][ T6563] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.879398][ T8406] netlink: 44 bytes leftover after parsing attributes in process `syz.4.555'.
[  130.946873][ T6563] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.043385][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.553'.
[  131.285180][ T6563] bridge_slave_1: left allmulticast mode
[  131.300648][ T6563] bridge_slave_1: left promiscuous mode
[  131.316778][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.333514][ T6563] bridge_slave_0: left allmulticast mode
[  131.342720][ T6563] bridge_slave_0: left promiscuous mode
[  131.354877][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.406679][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  131.417079][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  131.430965][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  131.442740][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  131.453379][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  131.462639][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  131.808645][ T6563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  131.819717][ T6563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.830755][ T6563] bond0 (unregistering): Released all slaves
[  131.846757][ T8427] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.558'.
[  132.192376][ T8430] chnl_net:caif_netlink_parms(): no params data found
[  132.308155][ T6563] hsr_slave_0: left promiscuous mode
[  132.318654][ T6563] hsr_slave_1: left promiscuous mode
[  132.342121][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.368539][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.384131][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.392193][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.410613][ T6563] veth1_macvtap: left promiscuous mode
[  132.416298][ T6563] veth0_macvtap: left promiscuous mode
[  132.422132][ T6563] veth1_vlan: left promiscuous mode
[  132.425758][ T8455] netlink: 104 bytes leftover after parsing attributes in process `syz.1.566'.
[  132.427574][ T6563] veth0_vlan: left promiscuous mode
[  132.793181][ T6563] team0 (unregistering): Port device team_slave_1 removed
[  132.829292][ T6563] team0 (unregistering): Port device team_slave_0 removed
[  133.005925][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  133.014909][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  133.458968][ T8430] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.497219][ T8430] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.558020][ T5840] Bluetooth: hci1: command tx timeout
[  133.568225][ T8430] bridge_slave_0: entered allmulticast mode
[  133.575772][ T8430] bridge_slave_0: entered promiscuous mode
[  133.628632][ T8430] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.655315][ T8430] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.693702][ T8430] bridge_slave_1: entered allmulticast mode
[  133.719078][ T8430] bridge_slave_1: entered promiscuous mode
[  133.813863][ T8430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.849711][ T8430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  133.911140][ T8430] team0: Port device team_slave_0 added
[  133.985878][ T8430] team0: Port device team_slave_1 added
[  133.988996][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'.
[  134.044458][ T8497] netlink: 32 bytes leftover after parsing attributes in process `syz.1.577'.
[  134.138337][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'.
[  134.191269][ T8430] batman_adv: batadv0: Adding interface: batadv_slave_0
[  134.204536][ T8501] netlink: 'syz.4.578': attribute type 10 has an invalid length.
[  134.214187][ T8430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.221407][ T8505] netlink: 'syz.3.579': attribute type 1 has an invalid length.
[  134.245948][ T8430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  134.269871][ T8430] batman_adv: batadv0: Adding interface: batadv_slave_1
[  134.276831][ T8430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.307141][ T8430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  134.336525][ T8508] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.580'.
[  134.367412][ T8501] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  134.379659][ T8501] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  134.407572][ T8505] 8021q: adding VLAN 0 to HW filter on device bond2
[  134.445106][ T8512] delete_channel: no stack
[  134.531350][ T8514] netlink: 'syz.4.581': attribute type 1 has an invalid length.
[  134.537355][ T8430] hsr_slave_0: entered promiscuous mode
[  134.561061][ T8430] hsr_slave_1: entered promiscuous mode
[  134.575994][ T8430] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  134.594544][ T8430] Cannot create hsr debugfs directory
[  134.736377][ T8523] netlink: 'syz.3.584': attribute type 1 has an invalid length.
[  134.780089][ T8523] 8021q: adding VLAN 0 to HW filter on device bond3
[  134.813301][ T8529] 8021q: adding VLAN 0 to HW filter on device batadv1
[  134.828633][ T8529] bond3: (slave batadv1): making interface the new active one
[  134.845601][ T8529] bond3: (slave batadv1): Enslaving as an active interface with an up link
[  135.011302][ T8536] ipt_REJECT: ECHOREPLY no longer supported.
[  135.021469][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803528c000: rx timeout, send abort
[  135.031568][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803528c000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session.
[  135.155460][ T8542] bond0: (slave macsec1): Error -34 calling dev_set_mtu
[  135.210539][ T8430] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  135.222482][ T8430] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  135.237480][ T8430] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  135.259713][ T8430] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  135.349423][ T8430] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.375941][ T8430] 8021q: adding VLAN 0 to HW filter on device team0
[  135.391884][ T6567] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.399049][ T6567] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.431626][ T6563] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.438828][ T6563] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.637939][ T5840] Bluetooth: hci1: command tx timeout
[  135.706540][ T8430] 8021q: adding VLAN 0 to HW filter on device batadv0
[  135.763521][ T8430] veth0_vlan: entered promiscuous mode
[  135.785271][ T8430] veth1_vlan: entered promiscuous mode
[  135.817748][ T8430] veth0_macvtap: entered promiscuous mode
[  135.828972][ T8430] veth1_macvtap: entered promiscuous mode
[  135.846709][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.857644][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.867668][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.878986][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.889635][ T8537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.910261][ T8430] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.929133][ T8430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.940168][ T8430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.957221][ T8430] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.975164][ T8430] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.985438][ T8430] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.013529][ T8430] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.022973][ T8430] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.064913][ T8563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.096933][ T8563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.119520][ T8563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.140374][ T8563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.156750][ T8563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.173599][ T8563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.190171][ T8563] vlan2: entered promiscuous mode
[  136.199882][ T8563] bond0: entered promiscuous mode
[  136.210628][ T8563] batadv_slave_0: entered promiscuous mode
[  136.226512][ T8563] vlan2: entered allmulticast mode
[  136.235845][ T8563] bond0: entered allmulticast mode
[  136.248929][ T8563] batadv_slave_0: entered allmulticast mode
[  136.250232][ T8576] __nla_validate_parse: 3 callbacks suppressed
[  136.250249][ T8576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.594'.
[  136.255787][ T8563] team0: Port device vlan2 added
[  136.265237][ T8576] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[  136.489359][ T6567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.514266][ T6567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.577250][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.631487][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.784633][ T8587] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  137.029891][ T8604] netlink: 276 bytes leftover after parsing attributes in process `syz.1.604'.
[  137.555121][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'.
[  137.572769][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'.
[  137.595809][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'.
[  137.636216][ T8620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.610'.
[  138.022028][ T8636] IPv6: NLM_F_CREATE should be specified when creating new route
[  138.034804][ T8636] IPv6: Can't replace route, no match found
[  138.130900][ T8641] x_tables: duplicate underflow at hook 1
[  138.138233][ T8641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.617'.
[  138.418819][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.619'.
[  138.481139][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.619'.
[  138.530921][ T8650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.619'.
[  138.548391][ T6567] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.693205][ T8643] netlink: 'syz.1.618': attribute type 11 has an invalid length.
[  139.294901][ T8658] Bluetooth: MGMT ver 1.23
[  139.512182][ T6567] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.661241][ T6567] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.748298][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  139.758294][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  139.766810][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  139.776631][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  139.817911][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  139.827978][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  139.837058][ T6567] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.861397][ T8690] netlink: 'syz.1.630': attribute type 1 has an invalid length.
[  139.907683][ T8690] netlink: 'syz.1.630': attribute type 2 has an invalid length.
[  139.940941][ T8690] netlink: 'syz.1.630': attribute type 2 has an invalid length.
[  139.997137][ T8690] netlink: 'syz.1.630': attribute type 2 has an invalid length.
[  140.080296][ T8696] netlink: 'syz.4.634': attribute type 3 has an invalid length.
[  140.158181][ T6567] bridge_slave_1: left allmulticast mode
[  140.174708][ T6567] bridge_slave_1: left promiscuous mode
[  140.181004][ T6567] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.208671][ T6567] bridge_slave_0: left allmulticast mode
[  140.218613][ T6567] bridge_slave_0: left promiscuous mode
[  140.224431][ T6567] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.718313][ T8718] netlink: 'syz.1.641': attribute type 9 has an invalid length.
[  140.957733][ T6567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  140.969416][ T6567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  140.980654][ T6567] bond0 (unregistering): Released all slaves
[  141.055159][ T8720] vlan3: entered promiscuous mode
[  141.185715][ T8729] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢
…D£øUDŒw˜}�z
[  141.329255][ T5840] Bluetooth: hci0: command tx timeout
[  141.425141][ T8738] netlink: 'syz.0.646': attribute type 10 has an invalid length.
[  141.481451][ T8682] chnl_net:caif_netlink_parms(): no params data found
[  141.488445][ T8739] netlink: 'syz.0.646': attribute type 10 has an invalid length.
[  141.560896][ T6567] hsr_slave_0: left promiscuous mode
[  141.574922][ T6567] hsr_slave_1: left promiscuous mode
[  141.582015][ T6567] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.589822][ T6567] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.602521][ T6567] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.610411][ T6567] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.633545][ T6567] veth1_macvtap: left promiscuous mode
[  141.639418][ T6567] veth0_macvtap: left promiscuous mode
[  141.645086][ T6567] veth1_vlan: left promiscuous mode
[  141.650502][ T6567] veth0_vlan: left promiscuous mode
[  141.654521][ T8750] netlink: 'syz.3.648': attribute type 1 has an invalid length.
[  141.878416][ T5840] Bluetooth: hci1: command tx timeout
[  142.023030][ T6567] team0 (unregistering): Port device team_slave_1 removed
[  142.065378][ T6567] team0 (unregistering): Port device team_slave_0 removed
[  142.421953][ T8738] bond0: (slave team0): refused to change device type
[  142.634945][ T8759] __nla_validate_parse: 5 callbacks suppressed
[  142.634965][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.652'.
[  142.718908][ T8759] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  142.746163][ T8759] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.775031][ T8759] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.811328][ T8759] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.961194][ T8682] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.968811][ T8682] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.990614][ T8682] bridge_slave_0: entered allmulticast mode
[  143.021722][ T8682] bridge_slave_0: entered promiscuous mode
[  143.047265][ T8682] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.073580][ T8682] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.082485][ T8774] netlink: 224 bytes leftover after parsing attributes in process `syz.4.655'.
[  143.101373][ T8682] bridge_slave_1: entered allmulticast mode
[  143.133880][ T8682] bridge_slave_1: entered promiscuous mode
[  143.293536][ T8682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  143.333481][ T8682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  143.391773][ T8682] team0: Port device team_slave_0 added
[  143.416748][ T8682] team0: Port device team_slave_1 added
[  143.512020][ T8785] xt_CT: No such helper "netbios-ns"
[  143.556140][ T8792] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  143.563205][ T8792] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  143.753949][ T8682] batman_adv: batadv0: Adding interface: batadv_slave_0
[  143.773935][ T8682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.820304][ T8682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.834762][ T8799] sctp: [Deprecated]: syz.1.664 (pid 8799) Use of struct sctp_assoc_value in delayed_ack socket option.
[  143.834762][ T8799] Use struct sctp_sack_info instead
[  143.836215][ T8682] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.858852][ T8682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.899138][ T8682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.958227][ T5840] Bluetooth: hci1: command tx timeout
[  144.079121][ T8682] hsr_slave_0: entered promiscuous mode
[  144.096612][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.665'.
[  144.118557][ T8807] netlink: 32 bytes leftover after parsing attributes in process `syz.1.665'.
[  144.146276][ T8682] hsr_slave_1: entered promiscuous mode
[  144.188578][ T8682] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  144.196200][ T8682] Cannot create hsr debugfs directory
[  144.482109][ T8811] netlink: 24 bytes leftover after parsing attributes in process `syz.3.666'.
[  144.977502][ T8854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.671'.
[  145.028019][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'.
[  145.028723][ T8860] netlink: 32 bytes leftover after parsing attributes in process `syz.3.672'.
[  145.065690][ T8860] netlink: 44 bytes leftover after parsing attributes in process `syz.3.672'.
[  145.083187][ T8860] netlink: 44 bytes leftover after parsing attributes in process `syz.3.672'.
[  145.134330][ T8854] 8021q: adding VLAN 0 to HW filter on device bond4
[  145.342877][ T8875] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9
[  145.473653][ T8885] netlink: 'syz.1.679': attribute type 2 has an invalid length.
[  145.487356][ T8885] netlink: 'syz.1.679': attribute type 4 has an invalid length.
[  145.503154][ T8682] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  145.534139][ T8682] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  145.557017][ T8682] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  145.689939][ T8682] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  145.736365][ T8902] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20004
[  145.803238][ T8898] pimreg: entered allmulticast mode
[  145.910509][ T8907] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[  146.038581][ T5840] Bluetooth: hci1: command tx timeout
[  146.072106][ T8682] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.113650][ T8913] netlink: 'syz.1.684': attribute type 9 has an invalid length.
[  146.181435][ T8682] 8021q: adding VLAN 0 to HW filter on device team0
[  146.202540][ T6577] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.209754][ T6577] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.325512][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.332691][ T6578] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.644162][ T8682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  147.200343][ T8682] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.221598][ T8961] xt_TPROXY: Can be used only with -p tcp or -p udp
[  147.333305][ T8959] blackhole_netdev_xmit(): Dropping skb.
[  147.341191][ T8958] blackhole_netdev_xmit(): Dropping skb.
[  147.515099][ T8682] veth0_vlan: entered promiscuous mode
[  147.531521][ T8682] veth1_vlan: entered promiscuous mode
[  147.617211][ T8682] veth0_macvtap: entered promiscuous mode
[  147.637068][ T8682] veth1_macvtap: entered promiscuous mode
[  147.704667][ T8682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.728081][ T8682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.752403][ T8682] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.796116][ T8682] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.831878][ T8682] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.853100][ T8682] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.884635][ T8682] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.898387][ T8682] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.006438][ T8989] delete_channel: no stack
[  148.073813][ T8996] __nla_validate_parse: 8 callbacks suppressed
[  148.073832][ T8996] netlink: 28 bytes leftover after parsing attributes in process `syz.0.702'.
[  148.103580][ T6567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.118535][ T5840] Bluetooth: hci1: command tx timeout
[  148.120614][ T6567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.194607][ T6567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.227502][ T6567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.234694][ T9002] netlink: 52 bytes leftover after parsing attributes in process `syz.3.705'.
[  148.261778][ T9001] netlink: 52 bytes leftover after parsing attributes in process `syz.3.705'.
[  148.594169][ T9018] netlink: 'syz.3.711': attribute type 4 has an invalid length.
[  148.624722][ T9018] netlink: 'syz.3.711': attribute type 4 has an invalid length.
[  149.116665][ T9036] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  149.135029][ T9036] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  149.238840][ T9042] netlink: 32 bytes leftover after parsing attributes in process `syz.3.717'.
[  149.253109][ T9042] netlink: 24 bytes leftover after parsing attributes in process `syz.3.717'.
[  149.287934][ T9042] netlink: 32 bytes leftover after parsing attributes in process `syz.3.717'.
[  149.328837][ T9042] netlink: 32 bytes leftover after parsing attributes in process `syz.3.717'.
[  149.362597][ T9052] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[  149.371779][   T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.741679][ T9038] syz.4.715 (9038) used obsolete PPPIOCDETACH ioctl
[  149.835562][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.159744][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.317232][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.373588][ T9069] netlink: 'syz.3.720': attribute type 1 has an invalid length.
[  150.408302][ T9069] netlink: 244 bytes leftover after parsing attributes in process `syz.3.720'.
[  150.558286][ T9073] netlink: 100 bytes leftover after parsing attributes in process `syz.1.722'.
[  150.621255][   T11] bridge_slave_1: left allmulticast mode
[  150.627043][   T11] bridge_slave_1: left promiscuous mode
[  150.648356][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.707737][   T11] bridge_slave_0: left allmulticast mode
[  150.732969][   T11] bridge_slave_0: left promiscuous mode
[  150.769004][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.845438][ T9081] netlink: 'syz.3.726': attribute type 10 has an invalid length.
[  150.886244][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  150.901078][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  150.908935][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  150.935811][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  150.969696][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  151.017664][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  151.106688][ T9101] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.374299][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'.
[  151.524874][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  151.539062][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  151.551721][   T11] bond0 (unregistering): Released all slaves
[  151.578054][ T9081] 8021q: adding VLAN 0 to HW filter on device team0
[  151.595431][ T9081] bond0: (slave team0): Enslaving as an active interface with an up link
[  151.619264][ T9098] bond0: (slave bond_slave_0): Releasing backup interface
[  151.655920][ T9098] bond_slave_0: left promiscuous mode
[  151.687068][ T9098] bond0: (slave bond_slave_1): Releasing backup interface
[  151.706656][ T9098] bond_slave_1: left promiscuous mode
[  151.746896][ T9098] team0: Port device team_slave_0 removed
[  151.772492][ T9098] team0: Port device team_slave_1 removed
[  151.780792][ T9098] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.788369][ T9098] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.802184][ T9098] bond0: (slave wlan1): Releasing backup interface
[  151.811474][ T9098] mac80211_hwsim hwsim6 wlan1: left promiscuous mode
[  151.908759][ T9104] netlink: 'syz.1.729': attribute type 6 has an invalid length.
[  151.917666][ T9105] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  151.936618][ T9105] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  151.945935][ T9105] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  152.064711][ T9119] batadv_slave_1: entered promiscuous mode
[  152.073991][ T9120] batadv_slave_1: left promiscuous mode
[  152.105529][ T9123] netlink: 'syz.0.733': attribute type 6 has an invalid length.
[  152.352023][ T9140] openvswitch: netlink: IP tunnel dst address not specified
[  152.365871][   T11] hsr_slave_0: left promiscuous mode
[  152.381386][   T11] hsr_slave_1: left promiscuous mode
[  152.387540][ T9140] xt_TPROXY: Can be used only with -p tcp or -p udp
[  152.403419][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.427838][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.441649][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.449469][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.485737][   T11] veth1_macvtap: left promiscuous mode
[  152.491941][   T11] veth0_macvtap: left promiscuous mode
[  152.497658][   T11] veth1_vlan: left promiscuous mode
[  152.503340][   T11] veth0_vlan: left promiscuous mode
[  153.072447][   T11] team0 (unregistering): Port device team_slave_1 removed
[  153.110345][   T11] team0 (unregistering): Port device team_slave_0 removed
[  153.160927][ T5843] Bluetooth: hci1: command tx timeout
[  153.697284][ T9082] chnl_net:caif_netlink_parms(): no params data found
[  154.009989][ T9082] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.021292][ T9082] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.041374][ T9082] bridge_slave_0: entered allmulticast mode
[  154.048594][ T9082] bridge_slave_0: entered promiscuous mode
[  154.313057][ T9082] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.320728][ T9082] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.329050][ T9082] bridge_slave_1: entered allmulticast mode
[  154.339329][ T9082] bridge_slave_1: entered promiscuous mode
[  154.358537][ T9204] __nla_validate_parse: 3 callbacks suppressed
[  154.358554][ T9204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.752'.
[  154.395298][ T9082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.417093][ T9082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.474019][ T9082] team0: Port device team_slave_0 added
[  154.508608][ T9082] team0: Port device team_slave_1 added
[  154.588357][ T9082] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.595354][ T9082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.667843][ T9082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.700068][ T9082] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.707093][ T9082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.801719][ T9082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.005437][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.758'.
[  155.063624][ T9082] hsr_slave_0: entered promiscuous mode
[  155.074795][ T9082] hsr_slave_1: entered promiscuous mode
[  155.127895][ T9082] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  155.142424][ T9082] Cannot create hsr debugfs directory
[  155.156898][ T9228] netlink: 272 bytes leftover after parsing attributes in process `syz.3.760'.
[  155.174110][ T9230] netlink: 'syz.4.761': attribute type 46 has an invalid length.
[  155.188416][ T9230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.761'.
[  155.237973][ T5843] Bluetooth: hci1: command tx timeout
[  155.544490][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'.
[  155.600621][ T9242] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28
[  155.852507][ T9247] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  155.935786][ T9249] delete_channel: no stack
[  156.116131][ T9266] netlink: 'syz.4.772': attribute type 27 has an invalid length.
[  156.133988][ T9267] netlink: 'syz.4.772': attribute type 27 has an invalid length.
[  156.185462][ T9273] netlink: 'syz.0.769': attribute type 13 has an invalid length.
[  156.227372][ T9273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.769'.
[  156.263624][ T9082] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  156.306350][ T9273] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  156.340651][ T9082] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  156.373671][ T9082] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  156.395573][ T9281] dvmrp0: entered allmulticast mode
[  156.425658][ T9082] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  156.589076][ T9291] netlink: 32 bytes leftover after parsing attributes in process `syz.1.776'.
[  156.657314][ T9082] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.705341][ T9082] 8021q: adding VLAN 0 to HW filter on device team0
[  156.734139][ T6567] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.741321][ T6567] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.814489][ T6567] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.821724][ T6567] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.069980][ T9311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.781'.
[  157.091390][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.781'.
[  157.286254][ T9321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.782'.
[  157.318683][ T5843] Bluetooth: hci1: command tx timeout
[  157.319487][ T9082] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.356748][ T9325] ÿÿÿÿÿÿ: renamed from veth1_vlan (while UP)
[  157.522017][ T9082] veth0_vlan: entered promiscuous mode
[  157.555883][ T9082] veth1_vlan: entered promiscuous mode
[  157.587128][ T9333] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  157.758312][ T9082] veth0_macvtap: entered promiscuous mode
[  157.771161][ T9343] hsr0: default FDB implementation only supports local addresses
[  157.817500][ T9082] veth1_macvtap: entered promiscuous mode
[  157.853516][ T9342] hsr0: default FDB implementation only supports local addresses
[  157.878658][ T9350] netlink: 'syz.0.791': attribute type 1 has an invalid length.
[  157.904150][ T9350] tipc: Can't bind to reserved service type 3
[  157.920254][ T9082] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.939384][ T9349] Bluetooth: MGMT ver 1.23
[  157.945792][ T9082] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.993134][ T9082] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.032652][ T9082] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.088991][ T9082] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.137497][ T9082] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.541073][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.554224][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.612264][ T6563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.623572][ T6563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.930800][ T9397] pim6reg: entered allmulticast mode
[  159.021209][ T9397] pim6reg: left allmulticast mode
[  159.052997][ T9405] Cannot find set identified by id 0 to match
[  159.224915][ T9411] netlink: 'syz.4.807': attribute type 3 has an invalid length.
[  159.691870][ T6564] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.711926][ T9434] __nla_validate_parse: 10 callbacks suppressed
[  159.711946][ T9434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.812'.
[  159.730902][ T9433] netlink: 'syz.0.812': attribute type 4 has an invalid length.
[  159.807947][ T9434] netlink: 'syz.0.812': attribute type 1 has an invalid length.
[  159.834654][ T9434] netlink: 224 bytes leftover after parsing attributes in process `syz.0.812'.
[  160.056009][ T6564] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.332210][ T6564] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.393051][ T6564] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.530809][ T6564] bridge_slave_1: left allmulticast mode
[  160.536518][ T6564] bridge_slave_1: left promiscuous mode
[  160.542847][ T6564] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.551271][ T6564] bridge_slave_0: left allmulticast mode
[  160.556911][ T6564] bridge_slave_0: left promiscuous mode
[  160.563050][ T6564] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.144049][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  161.154217][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  161.163145][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  161.172931][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  161.199144][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  161.208557][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  161.628366][ T6564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  161.646818][ T6564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  161.669598][ T6564] bond0 (unregistering): Released all slaves
[  161.974744][ T9488] netlink: 'syz.0.825': attribute type 4 has an invalid length.
[  162.053879][ T9499] netlink: 'syz.3.829': attribute type 1 has an invalid length.
[  162.105785][ T9500] Dead loop on virtual device ip6_vti0, fix it urgently!
[  162.174376][ T9499] 8021q: adding VLAN 0 to HW filter on device bond4
[  162.235763][ T9501] 8021q: adding VLAN 0 to HW filter on device bond4
[  162.247312][ T9501] bond4: (slave vcan0): The slave device specified does not support setting the MAC address
[  162.259158][ T9501] bond4: (slave vcan0): Error -95 calling set_mac_address
[  162.298909][ T6564] hsr_slave_0: left promiscuous mode
[  162.314465][ T6564] hsr_slave_1: left promiscuous mode
[  162.321518][ T6564] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.335293][ T6564] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.349860][ T6564] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.357598][ T6564] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.404519][ T6564] veth1_macvtap: left promiscuous mode
[  162.438471][ T6564] veth0_macvtap: left promiscuous mode
[  162.444132][ T6564] veth1_vlan: left promiscuous mode
[  162.455038][ T6564] veth0_vlan: left promiscuous mode
[  162.461851][ T9513] FAULT_INJECTION: forcing a failure.
[  162.461851][ T9513] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  162.506143][ T9513] CPU: 1 UID: 0 PID: 9513 Comm: syz.3.832 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0
[  162.516798][ T9513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  162.526877][ T9513] Call Trace:
[  162.530178][ T9513]  <TASK>
[  162.533124][ T9513]  dump_stack_lvl+0x241/0x360
[  162.537837][ T9513]  ? __pfx_dump_stack_lvl+0x10/0x10
[  162.543068][ T9513]  ? __pfx__printk+0x10/0x10
[  162.547687][ T9513]  ? __pfx_lock_release+0x10/0x10
[  162.552734][ T9513]  ? rcu_is_watching+0x15/0xb0
[  162.557533][ T9513]  should_fail_ex+0x3b0/0x4e0
[  162.562234][ T9513]  _copy_from_iter+0x21f/0x1e70
[  162.567104][ T9513]  ? alloc_pages_mpol_noprof+0x417/0x680
[  162.572747][ T9513]  ? __pfx__copy_from_iter+0x10/0x10
[  162.578045][ T9513]  ? __pfx_alloc_pages_mpol_noprof+0x10/0x10
[  162.584029][ T9513]  ? alloc_pages_noprof+0xef/0x170
[  162.589149][ T9513]  ? page_copy_sane+0x46/0x260
[  162.593929][ T9513]  copy_page_from_iter+0x7a/0x100
[  162.598992][ T9513]  tun_get_user+0x203c/0x4890
[  162.603679][ T9513]  ? tun_get_user+0x86e/0x4890
[  162.608444][ T9513]  ? __lock_acquire+0x1397/0x2100
[  162.613477][ T9513]  ? __pfx_tun_get_user+0x10/0x10
[  162.618517][ T9513]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  162.623977][ T9513]  ? tun_get+0x1e/0x2f0
[  162.628133][ T9513]  ? __pfx_lock_release+0x10/0x10
[  162.633162][ T9513]  ? tun_get+0x1e/0x2f0
[  162.637312][ T9513]  ? tun_get+0x27d/0x2f0
[  162.641549][ T9513]  tun_chr_write_iter+0x10d/0x1f0
[  162.646569][ T9513]  vfs_write+0xaeb/0xd30
[  162.650811][ T9513]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  162.656354][ T9513]  ? __pfx_vfs_write+0x10/0x10
[  162.661116][ T9513]  ? __fget_files+0x2a/0x410
[  162.665701][ T9513]  ? __fget_files+0x2a/0x410
[  162.670294][ T9513]  ksys_write+0x18f/0x2b0
[  162.674619][ T9513]  ? __pfx_ksys_write+0x10/0x10
[  162.679465][ T9513]  ? do_syscall_64+0x100/0x230
[  162.684232][ T9513]  ? do_syscall_64+0xb6/0x230
[  162.688919][ T9513]  do_syscall_64+0xf3/0x230
[  162.693419][ T9513]  ? clear_bhb_loop+0x35/0x90
[  162.698100][ T9513]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.704003][ T9513] RIP: 0033:0x7f444137e98f
[  162.708418][ T9513] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  162.728038][ T9513] RSP: 002b:00007f4442195020 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  162.736456][ T9513] RAX: ffffffffffffffda RBX: 00007f4441545fa0 RCX: 00007f444137e98f
[  162.744436][ T9513] RDX: 000000000000004e RSI: 0000000020000740 RDI: 00000000000000c8
[  162.752400][ T9513] RBP: 00007f44421950a0 R08: 0000000000000000 R09: 0000000000000000
[  162.760363][ T9513] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001
[  162.768326][ T9513] R13: 0000000000000001 R14: 00007f4441545fa0 R15: 00007fffa7455408
[  162.776299][ T9513]  </TASK>
[  163.240029][ T5840] Bluetooth: hci1: command tx timeout
[  163.402921][ T6564] team0 (unregistering): Port device team_slave_1 removed
[  163.441198][ T6564] team0 (unregistering): Port device team_slave_0 removed
[  163.810014][ T9536] ip6gre1: entered allmulticast mode
[  163.984850][ T9542] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  164.004938][ T9544] ebt_among: src integrity fail: 100
[  164.061647][ T9456] chnl_net:caif_netlink_parms(): no params data found
[  164.082873][ T9550] netlink: 16 bytes leftover after parsing attributes in process `syz.1.841'.
[  164.096442][ T9550] netlink: 72 bytes leftover after parsing attributes in process `syz.1.841'.
[  164.110787][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'.
[  164.112062][ T9547] lo speed is unknown, defaulting to 1000
[  164.126800][ T9550] netlink: 16 bytes leftover after parsing attributes in process `syz.1.841'.
[  164.176026][ T9547] lo speed is unknown, defaulting to 1000
[  164.227597][ T9547] lo speed is unknown, defaulting to 1000
[  164.252253][ T9547] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  164.262800][ T9456] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.273658][ T9456] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.281200][ T9456] bridge_slave_0: entered allmulticast mode
[  164.288485][ T9456] bridge_slave_0: entered promiscuous mode
[  164.306825][ T9456] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.324585][ T9456] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.367105][ T9456] bridge_slave_1: entered allmulticast mode
[  164.409209][ T9456] bridge_slave_1: entered promiscuous mode
[  164.424734][ T9547] lo speed is unknown, defaulting to 1000
[  164.475725][ T9547] lo speed is unknown, defaulting to 1000
[  164.509592][ T9456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.530883][ T9547] lo speed is unknown, defaulting to 1000
[  164.632815][ T9456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.642496][ T9547] lo speed is unknown, defaulting to 1000
[  164.693058][ T9547] lo speed is unknown, defaulting to 1000
[  164.705627][ T9456] team0: Port device team_slave_0 added
[  164.725364][ T9577] netlink: 'syz.4.847': attribute type 10 has an invalid length.
[  164.731315][ T9456] team0: Port device team_slave_1 added
[  164.792439][ T9456] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.820332][ T9456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.856971][ T9456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.869774][ T9456] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.876775][ T9456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.903163][ T9456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.041508][ T9456] hsr_slave_0: entered promiscuous mode
[  165.059964][ T9456] hsr_slave_1: entered promiscuous mode
[  165.070232][ T9456] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  165.083590][ T9456] Cannot create hsr debugfs directory
[  165.114445][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'.
[  165.183986][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'.
[  165.233090][ T9602] netlink: 64 bytes leftover after parsing attributes in process `syz.3.856'.
[  165.298628][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'.
[  165.318260][ T5840] Bluetooth: hci1: command tx timeout
[  165.731835][ T9626] openvswitch: netlink: Tunnel attr 6 has unexpected len 16 expected 0
[  165.747589][ T9628] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.990878][ T9640] netlink: 'syz.0.865': attribute type 49 has an invalid length.
[  166.065055][ T9456] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  166.086065][ T9456] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  166.098215][ T9456] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  166.110019][ T9456] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  166.134633][ T9648] netlink: 100 bytes leftover after parsing attributes in process `syz.1.867'.
[  166.225344][ T9651] openvswitch: netlink: IP tunnel dst address not specified
[  166.234259][ T9456] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.255719][ T9456] 8021q: adding VLAN 0 to HW filter on device team0
[  166.273366][ T6563] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.280478][ T6563] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.301255][ T6563] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.308400][ T6563] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.347254][ T9653] netlink: 'syz.3.869': attribute type 11 has an invalid length.
[  166.372263][ T9653] netlink: 204 bytes leftover after parsing attributes in process `syz.3.869'.
[  166.637263][ T9456] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.689115][ T9456] veth0_vlan: entered promiscuous mode
[  166.702469][ T9456] veth1_vlan: entered promiscuous mode
[  166.726686][ T9456] veth0_macvtap: entered promiscuous mode
[  166.743312][ T9456] veth1_macvtap: entered promiscuous mode
[  166.776087][ T9456] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.791123][ T9456] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.805438][ T9456] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.815118][ T9456] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.827491][ T9456] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.836606][ T9456] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.993495][ T6564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.018416][ T6564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.114029][ T6564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.133240][ T6564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.814254][ T9696] netlink: 'syz.3.883': attribute type 21 has an invalid length.
[  167.842516][ T9696] netlink: 128 bytes leftover after parsing attributes in process `syz.3.883'.
[  167.879190][ T9696] netlink: 'syz.3.883': attribute type 5 has an invalid length.
[  167.904763][ T9696] netlink: 'syz.3.883': attribute type 6 has an invalid length.
[  167.912791][ T9696] netlink: 3 bytes leftover after parsing attributes in process `syz.3.883'.
[  168.032855][ T9701] syzkaller0: mtu less than device minimum
[  168.303022][ T9708] netlink: 'syz.0.888': attribute type 2 has an invalid length.
[  168.407241][ T9716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.888'.
[  168.510255][ T6567] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.868642][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.895'.
[  169.878226][ T9741] netlink: 'syz.0.897': attribute type 3 has an invalid length.
[  169.986058][ T6567] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.238557][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  170.308321][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  170.341964][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  170.351673][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  170.365612][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  170.373241][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  170.566518][ T6567] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.615566][ T9780] lo speed is unknown, defaulting to 1000
[  170.630874][ T9783] netlink: 'syz.1.900': attribute type 13 has an invalid length.
[  170.754172][ T6567] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.845906][ T9799] netlink: 'syz.1.905': attribute type 8 has an invalid length.
[  170.886737][ T9799] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  171.103654][ T9813] vlan3: entered promiscuous mode
[  171.118983][ T9813] vlan3: entered allmulticast mode
[  171.124507][ T9813] xfrm0: entered allmulticast mode
[  171.131261][ T9813] xfrm0: entered promiscuous mode
[  171.148050][ T9813] team0: Port device vlan3 added
[  171.157578][ T9780] chnl_net:caif_netlink_parms(): no params data found
[  171.169209][ T6567] bridge_slave_1: left allmulticast mode
[  171.174969][ T6567] bridge_slave_1: left promiscuous mode
[  171.182351][ T6567] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.206762][ T6567] bridge_slave_0: left allmulticast mode
[  171.213221][ T6567] bridge_slave_0: left promiscuous mode
[  171.219395][ T6567] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.551108][ T9829] __nla_validate_parse: 1 callbacks suppressed
[  171.551123][ T9829] netlink: 40 bytes leftover after parsing attributes in process `syz.4.912'.
[  171.623153][ T6567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.634782][ T6567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.651092][ T6567] bond0 (unregistering): Released all slaves
[  171.666710][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.910'.
[  171.949709][ T9848] netlink: 32 bytes leftover after parsing attributes in process `syz.3.916'.
[  172.077868][ T9855] ipt_ECN: cannot use operation on non-tcp rule
[  172.117490][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.917'.
[  172.147258][ T9855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.917'.
[  172.147908][ T9780] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.160430][ T9855] netlink: 'syz.4.917': attribute type 25 has an invalid length.
[  172.180144][ T9858] xt_cgroup: path and classid specified
[  172.191675][ T9780] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.206053][ T9780] bridge_slave_0: entered allmulticast mode
[  172.218377][ T9780] bridge_slave_0: entered promiscuous mode
[  172.295245][ T9780] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.314878][ T9780] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.339712][ T9780] bridge_slave_1: entered allmulticast mode
[  172.349286][ T9780] bridge_slave_1: entered promiscuous mode
[  172.438204][ T5843] Bluetooth: hci1: command tx timeout
[  172.481589][ T9872] netlink: 24 bytes leftover after parsing attributes in process `syz.3.924'.
[  172.504416][ T9780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.520232][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'.
[  172.529701][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'.
[  172.534853][ T9780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.604986][ T6567] hsr_slave_0: left promiscuous mode
[  172.649295][ T6567] hsr_slave_1: left promiscuous mode
[  172.657601][ T6567] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.669578][ T6567] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.698791][ T6567] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.706470][ T6567] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.757276][ T6567] veth1_macvtap: left promiscuous mode
[  172.773131][ T6567] veth0_macvtap: left promiscuous mode
[  172.779643][ T6567] veth1_vlan: left promiscuous mode
[  172.785006][ T6567] veth0_vlan: left promiscuous mode
[  173.030734][    T9] IPVS: starting estimator thread 0...
[  173.138121][ T9899] IPVS: using max 32 ests per chain, 76800 per kthread
[  173.263955][ T9905] netlink: 'syz.4.931': attribute type 2 has an invalid length.
[  173.315091][ T9909] netlink: 187320 bytes leftover after parsing attributes in process `syz.0.932'.
[  173.325398][ T9909] netlink: zone id is out of range
[  173.337620][ T9909] netlink: zone id is out of range
[  173.353756][ T9911] netlink: 187320 bytes leftover after parsing attributes in process `syz.0.932'.
[  173.365928][ T9911] netlink: zone id is out of range
[  173.372069][ T6567] team0 (unregistering): Port device team_slave_1 removed
[  173.385161][ T9911] netlink: zone id is out of range
[  173.391940][ T9911] netlink: zone id is out of range
[  173.397178][ T9911] netlink: zone id is out of range
[  173.410113][ T9911] netlink: zone id is out of range
[  173.415360][ T9911] netlink: zone id is out of range
[  173.421513][ T9911] netlink: zone id is out of range
[  173.426750][ T9911] netlink: zone id is out of range
[  173.433104][ T6567] team0 (unregistering): Port device team_slave_0 removed
[  173.848550][ T9907] dvmrp8: entered allmulticast mode
[  173.919928][ T9780] team0: Port device team_slave_0 added
[  173.944645][ T9780] team0: Port device team_slave_1 added
[  174.178909][ T9780] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.185911][ T9780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.212802][ T9780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.307326][ T9780] batman_adv: batadv0: Adding interface: batadv_slave_1
[  174.318019][ T9780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.370286][ T9780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.392388][ T9933] sit0: entered promiscuous mode
[  174.425661][ T9933] netlink: 'syz.4.941': attribute type 1 has an invalid length.
[  174.521078][ T5843] Bluetooth: hci1: command tx timeout
[  174.563035][ T9780] hsr_slave_0: entered promiscuous mode
[  174.599656][ T9780] hsr_slave_1: entered promiscuous mode
[  174.616202][ T9780] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  174.633929][ T9780] Cannot create hsr debugfs directory
[  174.796416][ T9953] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  174.865207][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.886758][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.080924][ T9963] smc: net device wg0 applied user defined pnetid SYZ0
[  175.092281][ T9963] netlink: 'syz.4.951': attribute type 39 has an invalid length.
[  175.127637][ T9963] smc: removing net device wg0 with user defined pnetid SYZ0
[  175.577863][ T9985] 8021q: adding VLAN 0 to HW filter on device bond3
[  175.609124][ T9998] sctp: [Deprecated]: syz.3.960 (pid 9998) Use of struct sctp_assoc_value in delayed_ack socket option.
[  175.609124][ T9998] Use struct sctp_sack_info instead
[  175.673788][ T9780] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  175.689053][ T9780] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  175.702423][ T9780] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  175.728064][ T9780] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  175.889605][T10007] ip6gretap0: entered promiscuous mode
[  175.902725][T10007] ip6gretap0: left promiscuous mode
[  175.972289][ T9780] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.018554][ T9780] 8021q: adding VLAN 0 to HW filter on device team0
[  176.041823][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.049151][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.067395][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.074655][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.279872][T10022] netlink: 'syz.1.966': attribute type 1 has an invalid length.
[  176.379272][T10029] netlink: 'syz.4.967': attribute type 3 has an invalid length.
[  176.521440][ T9780] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.551189][ T9780] veth0_vlan: entered promiscuous mode
[  176.585369][ T9780] veth1_vlan: entered promiscuous mode
[  176.604003][ T5843] Bluetooth: hci1: command tx timeout
[  176.630610][ T9780] veth0_macvtap: entered promiscuous mode
[  176.639596][ T9780] veth1_macvtap: entered promiscuous mode
[  176.655245][ T9780] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.666301][ T9780] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.675813][ T9780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.686792][ T9780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.695640][ T9780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.704456][ T9780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.852864][ T6580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.871061][ T6580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.895116][T10046] __nla_validate_parse: 41 callbacks suppressed
[  176.895133][T10046] netlink: 44 bytes leftover after parsing attributes in process `syz.4.971'.
[  176.914180][ T6579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.929048][ T6579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.943465][T10046] netlink: 35 bytes leftover after parsing attributes in process `syz.4.971'.
[  176.960120][T10046] netlink: 'syz.4.971': attribute type 5 has an invalid length.
[  176.982383][T10046] netlink: 35 bytes leftover after parsing attributes in process `syz.4.971'.
[  177.372414][T10058] ip6erspan0: entered promiscuous mode
[  177.459566][T10060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.975'.
[  177.490209][T10060] netlink: 104 bytes leftover after parsing attributes in process `syz.3.975'.
[  177.503244][T10060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.975'.
[  177.570923][T10067] netlink: 'syz.3.977': attribute type 39 has an invalid length.
[  177.667379][T10065] tipc: Started in network mode
[  177.678778][T10065] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711
[  177.688734][T10065] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  177.697437][T10072] netlink: 40 bytes leftover after parsing attributes in process `syz.3.978'.
[  178.115403][T10091] lo speed is unknown, defaulting to 1000
[  178.220577][T10093] syzkaller0: entered promiscuous mode
[  178.226113][T10093] syzkaller0: entered allmulticast mode
[  178.563192][   T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.498358][T10109] netlink: 'syz.4.989': attribute type 39 has an invalid length.
[  179.760336][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  179.780352][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  179.796227][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  179.804822][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  179.812571][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  179.820050][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  180.778637][T10126] rdma_rxe: rxe_newlink: failed to add lo
[  180.815579][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.862900][T10120] lo speed is unknown, defaulting to 1000
[  180.885144][T10127] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.990'.
[  180.921450][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.014888][T10138] netlink: 204 bytes leftover after parsing attributes in process `syz.4.994'.
[  181.087513][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.269800][T10120] chnl_net:caif_netlink_parms(): no params data found
[  181.569763][   T11] bridge_slave_1: left allmulticast mode
[  181.575536][   T11] bridge_slave_1: left promiscuous mode
[  181.581432][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.601969][   T11] bridge_slave_0: left allmulticast mode
[  181.614919][   T11] bridge_slave_0: left promiscuous mode
[  181.622877][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.880229][ T5843] Bluetooth: hci1: command tx timeout
[  181.963592][T10185] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1003'.
[  182.083698][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  182.095001][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  182.106891][   T11] bond0 (unregistering): Released all slaves
[  182.143650][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1003'.
[  182.152907][T10185] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1003'.
[  182.177161][T10120] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.212346][T10120] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.224963][T10120] bridge_slave_0: entered allmulticast mode
[  182.247128][T10120] bridge_slave_0: entered promiscuous mode
[  182.255240][T10120] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.266717][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1005'.
[  182.276021][T10120] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.289680][T10120] bridge_slave_1: entered allmulticast mode
[  182.326340][T10120] bridge_slave_1: entered promiscuous mode
[  182.408291][T10195] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1007'.
[  182.484260][T10203] x_tables: duplicate underflow at hook 1
[  182.497154][T10120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  182.535863][T10120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  182.587090][T10196] syzkaller0: entered promiscuous mode
[  182.594540][T10196] syzkaller0: entered allmulticast mode
[  182.697348][T10196] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1008'.
[  182.710232][T10120] team0: Port device team_slave_0 added
[  182.743269][   T11] hsr_slave_0: left promiscuous mode
[  182.769072][   T11] hsr_slave_1: left promiscuous mode
[  182.775677][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.787044][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  182.795909][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  182.824237][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  182.884053][   T11] veth1_macvtap: left promiscuous mode
[  182.896368][   T11] veth0_macvtap: left promiscuous mode
[  182.902268][   T11] veth1_vlan: left promiscuous mode
[  182.907527][   T11] veth0_vlan: left promiscuous mode
[  183.614914][   T11] team0 (unregistering): Port device team_slave_1 removed
[  183.655977][   T11] team0 (unregistering): Port device team_slave_0 removed
[  183.959444][ T5843] Bluetooth: hci1: command tx timeout
[  184.032301][T10120] team0: Port device team_slave_1 added
[  184.040761][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'.
[  185.845437][T10120] batman_adv: batadv0: Adding interface: batadv_slave_0
[  185.863098][T10120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.865653][T10246] ax25_connect(): syz.0.1016 uses autobind, please contact jreuter@yaina.de
[  185.895263][T10120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.000990][T10120] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.017959][T10120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.044027][ T5843] Bluetooth: hci1: command tx timeout
[  186.062065][T10249] delete_channel: no stack
[  186.111768][T10120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.177535][T10257] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10
[  186.285514][ T5843] Bluetooth: hci2: command 0x0406 tx timeout
[  186.291887][ T5843] Bluetooth: hci0: command 0x0406 tx timeout
[  186.295757][ T5840] Bluetooth: hci3: command 0x0406 tx timeout
[  186.361724][T10120] hsr_slave_0: entered promiscuous mode
[  186.370151][T10120] hsr_slave_1: entered promiscuous mode
[  186.377007][T10120] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  186.386706][T10120] Cannot create hsr debugfs directory
[  186.579865][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'.
[  186.655541][T10283] netlink: 'syz.3.1023': attribute type 8 has an invalid length.
[  186.744555][T10285] ipt_rpfilter: unknown options
[  186.816630][T10288] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  186.834782][T10288] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  186.984204][T10290] tun0: tun_chr_ioctl cmd 1074025675
[  186.994653][T10290] tun0: persist enabled
[  187.049645][T10290] tun0: tun_chr_ioctl cmd 1074025675
[  187.054994][T10290] tun0: persist disabled
[  187.257526][T10120] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  187.281256][T10120] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  187.301518][T10120] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  187.311108][T10120] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  187.448138][T10120] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.456920][T10321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1037'.
[  187.463169][T10120] 8021q: adding VLAN 0 to HW filter on device team0
[  187.479388][ T6579] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.486673][ T6579] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.514202][ T6579] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.521406][ T6579] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.790476][    T8] IPVS: starting estimator thread 0...
[  187.803860][T10339] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1040'.
[  187.813272][T10339] nbd: illegal input index 16744192
[  187.825499][T10120] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.865260][T10342] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1041'.
[  187.899161][T10120] veth0_vlan: entered promiscuous mode
[  187.905555][T10344] ip6t_srh: unknown srh match flags  4000
[  187.907911][T10340] IPVS: using max 22 ests per chain, 52800 per kthread
[  187.921874][T10120] veth1_vlan: entered promiscuous mode
[  187.974713][T10120] veth0_macvtap: entered promiscuous mode
[  187.985681][T10120] veth1_macvtap: entered promiscuous mode
[  187.995059][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'.
[  188.046161][T10120] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.074112][T10120] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.093268][T10120] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.102524][T10120] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.115821][T10120] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.118021][ T5846] Bluetooth: hci1: command tx timeout
[  188.124979][T10120] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.169277][T10353] bridge0: entered allmulticast mode
[  188.222596][T10353] team0: left allmulticast mode
[  188.227570][T10353] vlan2: left allmulticast mode
[  188.234826][T10353] team0: left promiscuous mode
[  188.242067][T10353] bridge0: port 1(team0) entered disabled state
[  188.378696][ T1337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.406404][ T1337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.423731][T10363] netlink: 'syz.3.1048': attribute type 4 has an invalid length.
[  188.466824][ T1337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.485759][ T1337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.038603][T10385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1052'.
[  189.102011][T10387] xt_TCPMSS: Only works on TCP SYN packets
[  189.381293][T10406] xt_TCPMSS: Only works on TCP SYN packets
[  189.388771][T10406] xt_TCPMSS: Only works on TCP SYN packets
[  189.846643][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1068'.
[  189.963225][T10449] netlink: 'syz.4.1070': attribute type 11 has an invalid length.
[  190.274145][   T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.285569][T10454] netlink: 'syz.4.1072': attribute type 9 has an invalid length.
[  190.302474][T10454] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1072'.
[  191.305864][T10464] netlink: 'syz.3.1076': attribute type 1 has an invalid length.
[  191.414061][T10475] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  191.556550][T10475] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.1075'.
[  191.589086][T10485] netlink: 'syz.0.1078': attribute type 21 has an invalid length.
[  191.595895][T10475] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.1075'.
[  191.650452][T10485] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1078'.
[  191.693550][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  191.705545][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  191.713785][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  191.721871][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  191.729813][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  191.739824][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  191.812641][T10493] lo speed is unknown, defaulting to 1000
[  191.947265][   T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.060917][   T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.158281][   T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.220638][T10518] xt_CT: You must specify a L4 protocol and not use inversions on it
[  192.399741][T10526] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.523113][T10493] chnl_net:caif_netlink_parms(): no params data found
[  192.526973][T10528] netlink: 'syz.4.1087': attribute type 1 has an invalid length.
[  192.539333][T10529] netlink: 'syz.4.1087': attribute type 1 has an invalid length.
[  192.578797][T10526] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.599272][   T53] bridge_slave_1: left allmulticast mode
[  192.605074][   T53] bridge_slave_1: left promiscuous mode
[  192.611407][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.620938][   T53] bridge_slave_0: left allmulticast mode
[  192.626734][   T53] bridge_slave_0: left promiscuous mode
[  192.634026][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.936993][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  192.947678][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  192.958195][   T53] bond0 (unregistering): Released all slaves
[  193.003231][T10541] netlink: 'syz.1.1090': attribute type 21 has an invalid length.
[  193.033275][T10541] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1090'.
[  193.120245][T10526] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.744003][T10526] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.798666][ T5832] Bluetooth: hci1: command tx timeout
[  193.970770][T10526] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.020687][T10526] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.085229][T10526] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.121873][T10526] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.147499][   T53] hsr_slave_0: left promiscuous mode
[  194.163795][   T53] hsr_slave_1: left promiscuous mode
[  194.182506][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.198919][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  194.218724][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.226361][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  194.253801][   T53] veth1_macvtap: left promiscuous mode
[  194.261978][   T53] veth0_macvtap: left promiscuous mode
[  194.274478][   T53] veth1_vlan: left promiscuous mode
[  194.287082][   T53] veth0_vlan: left promiscuous mode
[  194.406190][T10598] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1104'.
[  194.419442][T10598] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1104'.
[  194.437013][T10598] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1104'.
[  194.451564][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  194.469214][T10598] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1104'.
[  194.724534][   T53] team0 (unregistering): Port device team_slave_1 removed
[  194.765534][   T53] team0 (unregistering): Port device team_slave_0 removed
[  195.240004][T10493] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.257932][T10493] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.267126][T10493] bridge_slave_0: entered allmulticast mode
[  195.274629][T10614] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1107'.
[  195.282109][T10493] bridge_slave_0: entered promiscuous mode
[  195.295830][T10493] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.303025][T10493] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.310380][T10493] bridge_slave_1: entered allmulticast mode
[  195.317318][T10493] bridge_slave_1: entered promiscuous mode
[  195.325950][T10584] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  195.344652][T10584] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.484753][T10584] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  195.498187][T10584] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.549433][T10493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  195.561238][T10493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  195.640636][T10584] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  195.668010][T10584] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.875123][T10584] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  195.893106][T10584] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.957586][T10639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1114'.
[  196.024216][   T53] bridge_slave_1: left allmulticast mode
[  196.047456][   T53] bridge_slave_1: left promiscuous mode
[  196.064794][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.085404][   T53] bridge_slave_0: left allmulticast mode
[  196.092646][   T53] bridge_slave_0: left promiscuous mode
[  196.105241][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.243709][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  196.275711][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  196.295949][   T53] bond0 (unregistering): Released all slaves
[  196.725477][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  196.736505][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  196.746667][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  196.760393][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  196.768352][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  196.779994][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  196.862030][T10645] lo speed is unknown, defaulting to 1000
[  196.944088][T10649] lo speed is unknown, defaulting to 1000
[  197.105988][T10658] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0
[  197.326031][T10669] netlink: 'syz.4.1125': attribute type 1 has an invalid length.
[  197.334365][T10669] net_ratelimit: 14 callbacks suppressed
[  197.334382][T10669] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.369706][T10649] chnl_net:caif_netlink_parms(): no params data found
[  198.068199][T10666] veth0_to_team: left promiscuous mode
[  198.076651][T10666] veth0_to_team: left allmulticast mode
[  198.259897][T10666] veth0_vlan: left allmulticast mode
[  198.354531][T10666] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  198.372536][T10666] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  198.381211][T10666] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  198.390124][T10666] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  198.432457][T10666] bridge0: left promiscuous mode
[  198.473604][T10666] ip6gre1: left allmulticast mode
[  198.508903][    T8] lo speed is unknown, defaulting to 1000
[  198.574032][T10649] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.584769][T10702] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1129'.
[  198.585048][T10649] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.616109][T10649] bridge_slave_0: entered allmulticast mode
[  198.630131][T10649] bridge_slave_0: entered promiscuous mode
[  198.668228][T10649] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.675555][T10649] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.698503][T10649] bridge_slave_1: entered allmulticast mode
[  198.705555][T10649] bridge_slave_1: entered promiscuous mode
[  198.838138][T10709] No such timeout policy "syz1"
[  198.838342][ T5846] Bluetooth: hci1: command tx timeout
[  198.873659][T10649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.873710][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1134'.
[  198.900425][T10649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.001281][T10649] team0: Port device team_slave_0 added
[  199.009976][T10649] team0: Port device team_slave_1 added
[  199.023876][T10719] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1133'.
[  199.072052][T10649] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.090207][T10649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.124704][T10649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.141089][T10649] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.148352][T10649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.175670][T10649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.277568][T10649] hsr_slave_0: entered promiscuous mode
[  199.291476][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1135'.
[  199.300205][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1135'.
[  199.310086][T10649] hsr_slave_1: entered promiscuous mode
[  199.320514][T10649] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  199.329944][T10649] Cannot create hsr debugfs directory
[  199.335770][T10725] bridge0: entered promiscuous mode
[  199.337917][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1137'.
[  199.350205][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1137'.
[  199.359361][T10731] netlink: 'syz.4.1137': attribute type 12 has an invalid length.
[  199.367198][T10731] netlink: 'syz.4.1137': attribute type 11 has an invalid length.
[  199.397271][T10729] bridge0 (unregistering): left promiscuous mode
[  199.592182][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1139'.
[  199.726779][T10743] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1140'.
[  199.766538][T10743] ------------[ cut here ]------------
[  199.772142][T10743] WARNING: CPU: 1 PID: 10743 at net/core/skbuff.c:1219 sk_skb_reason_drop+0x87/0x380
[  199.781694][T10743] Modules linked in:
[  199.785625][T10743] CPU: 1 UID: 0 PID: 10743 Comm: syz.0.1140 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0
[  199.796451][T10743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  199.806574][T10743] RIP: 0010:sk_skb_reason_drop+0x87/0x380
[  199.812373][T10743] Code: 00 00 00 fc ff df 41 8d 9e 00 00 fc ff bf 01 00 fc ff 89 de e8 8a d1 0a f8 81 fb 00 00 fc ff 77 3a 4c 89 e5 e8 3a cd 0a f8 90 <0f> 0b 90 eb 5e bf 01 00 00 00 89 ee e8 68 d1 0a f8 85 ed 0f 8e 49
[  199.832076][T10743] RSP: 0018:ffffc90004d0f078 EFLAGS: 00010283
[  199.838207][T10743] RAX: ffffffff8994a4e6 RBX: 00000000fffbffea RCX: 0000000000080000
[  199.846200][T10743] RDX: ffffc9000dd83000 RSI: 0000000000004dbb RDI: 0000000000004dbc
[  199.854241][T10743] RBP: dffffc0000000000 R08: ffffffff8994a4d6 R09: 1ffff110049059ac
[  199.858713][T10649] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  199.862279][T10743] R10: dffffc0000000000 R11: ffffed10049059ad R12: dffffc0000000000
[  199.876968][T10743] R13: ffff88802482cc80 R14: 00000000ffffffea R15: 0000000000000000
[  199.885011][T10743] FS:  00007f370cab06c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  199.894002][T10743] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  199.900642][T10743] CR2: 0000000020001040 CR3: 000000003029c000 CR4: 00000000003526f0
[  199.908681][T10743] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  199.916677][T10743] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  199.924711][T10743] Call Trace:
[  199.928047][T10743]  <TASK>
[  199.930995][T10743]  ? __warn+0x165/0x4d0
[  199.935185][T10743]  ? sk_skb_reason_drop+0x87/0x380
[  199.940386][T10743]  ? report_bug+0x2b3/0x500
[  199.944925][T10743]  ? sk_skb_reason_drop+0x87/0x380
[  199.950109][T10743]  ? handle_bug+0x60/0x90
[  199.954471][T10743]  ? exc_invalid_op+0x1a/0x50
[  199.959218][T10743]  ? asm_exc_invalid_op+0x1a/0x20
[  199.964284][T10743]  ? sk_skb_reason_drop+0x76/0x380
[  199.969467][T10743]  ? sk_skb_reason_drop+0x86/0x380
[  199.974608][T10743]  ? sk_skb_reason_drop+0x87/0x380
[  199.979785][T10743]  ? sk_skb_reason_drop+0x86/0x380
[  199.984921][T10743]  ? ip_rcv_finish_core+0x129f/0x1b50
[  199.990378][T10743]  ip_rcv_finish_core+0xfde/0x1b50
[  199.995533][T10743]  ip_sublist_rcv+0x3b1/0xab0
[  200.000285][T10743]  ? __pfx_ip_sublist_rcv+0x10/0x10
[  200.005514][T10743]  ? skb_orphan+0xae/0xd0
[  200.009919][T10743]  ? __pfx_ip_rcv_finish+0x10/0x10
[  200.015072][T10743]  ip_list_rcv+0x42b/0x480
[  200.019573][T10743]  ? __pfx_ip_list_rcv+0x10/0x10
[  200.024552][T10743]  ? __pfx_ip_list_rcv+0x10/0x10
[  200.029565][T10743]  __netif_receive_skb_list_core+0x94e/0x980
[  200.035584][T10743]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  200.042252][T10743]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  200.048832][T10743]  ? read_tsc+0x9/0x20
[  200.052939][T10743]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[  200.059343][T10743]  netif_receive_skb_list_internal+0xa51/0xe30
[  200.065535][T10743]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[  200.071953][T10743]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  200.078699][T10743]  ? __pfx_eth_type_trans+0x10/0x10
[  200.083932][T10743]  ? __phys_addr+0xba/0x170
[  200.088510][T10743]  ? build_skb_around+0x111/0x260
[  200.093562][T10743]  ? __xdp_build_skb_from_frame+0x313/0x650
[  200.099551][T10743]  netif_receive_skb_list+0x55/0x4b0
[  200.104878][T10743]  bpf_test_run_xdp_live+0x1b9f/0x21f0
[  200.110405][T10743]  ? bpf_dispatcher_change_prog+0xd96/0xf20
[  200.116356][T10743]  ? bpf_test_run_xdp_live+0x5d6/0x21f0
[  200.121976][T10743]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  200.127853][T10743]  ? synchronize_rcu+0x11b/0x360
[  200.132822][T10743]  ? __pfx_synchronize_rcu+0x10/0x10
[  200.138210][T10743]  ? __pfx_bpf_dispatcher_change_prog+0x10/0x10
[  200.144505][T10743]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  200.150486][T10743]  ? _copy_from_user+0x99/0xc0
[  200.155284][T10743]  ? bpf_test_init+0x15a/0x180
[  200.160110][T10743]  ? xdp_convert_md_to_buff+0x5b/0x330
[  200.165594][T10743]  bpf_prog_test_run_xdp+0x805/0x11e0
[  200.171053][T10743]  ? __pfx_lock_release+0x10/0x10
[  200.176116][T10743]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  200.181994][T10743]  ? __fget_files+0x2a/0x410
[  200.186613][T10743]  ? __fget_files+0x2a/0x410
[  200.191267][T10743]  ? fput+0x21b/0x290
[  200.195270][T10743]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  200.201158][T10743]  bpf_prog_test_run+0x2e4/0x360
[  200.206124][T10743]  __sys_bpf+0x48d/0x810
[  200.210436][T10743]  ? __pfx___sys_bpf+0x10/0x10
[  200.215232][T10743]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  200.221288][T10743]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  200.227646][T10743]  ? do_syscall_64+0x100/0x230
[  200.232494][T10743]  __x64_sys_bpf+0x7c/0x90
[  200.236936][T10743]  do_syscall_64+0xf3/0x230
[  200.241489][T10743]  ? clear_bhb_loop+0x35/0x90
[  200.246190][T10743]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.252170][T10743] RIP: 0033:0x7f370bd7fed9
[  200.256614][T10743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.276314][T10743] RSP: 002b:00007f370cab0058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  200.284821][T10743] RAX: ffffffffffffffda RBX: 00007f370bf46080 RCX: 00007f370bd7fed9
[  200.292944][T10743] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a
[  200.300989][T10743] RBP: 00007f370bdf3cc8 R08: 0000000000000000 R09: 0000000000000000
[  200.309003][T10743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  200.316960][T10743] R13: 0000000000000000 R14: 00007f370bf46080 R15: 00007ffc7d9b2f48
[  200.324965][T10743]  </TASK>
[  200.328028][T10743] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  200.335312][T10743] CPU: 1 UID: 0 PID: 10743 Comm: syz.0.1140 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0
[  200.346094][T10743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  200.356152][T10743] Call Trace:
[  200.359439][T10743]  <TASK>
[  200.362376][T10743]  dump_stack_lvl+0x241/0x360
[  200.367085][T10743]  ? __pfx_dump_stack_lvl+0x10/0x10
[  200.372280][T10743]  ? __pfx__printk+0x10/0x10
[  200.376870][T10743]  ? vscnprintf+0x5d/0x90
[  200.381201][T10743]  panic+0x349/0x880
[  200.385095][T10743]  ? __warn+0x174/0x4d0
[  200.389249][T10743]  ? __pfx_panic+0x10/0x10
[  200.393673][T10743]  __warn+0x344/0x4d0
[  200.397647][T10743]  ? sk_skb_reason_drop+0x87/0x380
[  200.402773][T10743]  report_bug+0x2b3/0x500
[  200.407100][T10743]  ? sk_skb_reason_drop+0x87/0x380
[  200.412210][T10743]  handle_bug+0x60/0x90
[  200.416359][T10743]  exc_invalid_op+0x1a/0x50
[  200.420853][T10743]  asm_exc_invalid_op+0x1a/0x20
[  200.425702][T10743] RIP: 0010:sk_skb_reason_drop+0x87/0x380
[  200.431503][T10743] Code: 00 00 00 fc ff df 41 8d 9e 00 00 fc ff bf 01 00 fc ff 89 de e8 8a d1 0a f8 81 fb 00 00 fc ff 77 3a 4c 89 e5 e8 3a cd 0a f8 90 <0f> 0b 90 eb 5e bf 01 00 00 00 89 ee e8 68 d1 0a f8 85 ed 0f 8e 49
[  200.451111][T10743] RSP: 0018:ffffc90004d0f078 EFLAGS: 00010283
[  200.457178][T10743] RAX: ffffffff8994a4e6 RBX: 00000000fffbffea RCX: 0000000000080000
[  200.465148][T10743] RDX: ffffc9000dd83000 RSI: 0000000000004dbb RDI: 0000000000004dbc
[  200.473115][T10743] RBP: dffffc0000000000 R08: ffffffff8994a4d6 R09: 1ffff110049059ac
[  200.481079][T10743] R10: dffffc0000000000 R11: ffffed10049059ad R12: dffffc0000000000
[  200.489043][T10743] R13: ffff88802482cc80 R14: 00000000ffffffea R15: 0000000000000000
[  200.497018][T10743]  ? sk_skb_reason_drop+0x76/0x380
[  200.502127][T10743]  ? sk_skb_reason_drop+0x86/0x380
[  200.507237][T10743]  ? sk_skb_reason_drop+0x86/0x380
[  200.512337][T10743]  ? ip_rcv_finish_core+0x129f/0x1b50
[  200.517739][T10743]  ip_rcv_finish_core+0xfde/0x1b50
[  200.522856][T10743]  ip_sublist_rcv+0x3b1/0xab0
[  200.527538][T10743]  ? __pfx_ip_sublist_rcv+0x10/0x10
[  200.532730][T10743]  ? skb_orphan+0xae/0xd0
[  200.537076][T10743]  ? __pfx_ip_rcv_finish+0x10/0x10
[  200.542218][T10743]  ip_list_rcv+0x42b/0x480
[  200.546655][T10743]  ? __pfx_ip_list_rcv+0x10/0x10
[  200.551608][T10743]  ? __pfx_ip_list_rcv+0x10/0x10
[  200.556558][T10743]  __netif_receive_skb_list_core+0x94e/0x980
[  200.562561][T10743]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  200.569151][T10743]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  200.575677][T10743]  ? read_tsc+0x9/0x20
[  200.579754][T10743]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[  200.586083][T10743]  netif_receive_skb_list_internal+0xa51/0xe30
[  200.592239][T10743]  ? netif_receive_skb_list_internal+0x4e8/0xe30
[  200.598580][T10743]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  200.605272][T10743]  ? __pfx_eth_type_trans+0x10/0x10
[  200.610481][T10743]  ? __phys_addr+0xba/0x170
[  200.614986][T10743]  ? build_skb_around+0x111/0x260
[  200.620011][T10743]  ? __xdp_build_skb_from_frame+0x313/0x650
[  200.625906][T10743]  netif_receive_skb_list+0x55/0x4b0
[  200.631200][T10743]  bpf_test_run_xdp_live+0x1b9f/0x21f0
[  200.636680][T10743]  ? bpf_dispatcher_change_prog+0xd96/0xf20
[  200.642603][T10743]  ? bpf_test_run_xdp_live+0x5d6/0x21f0
[  200.648157][T10743]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  200.653976][T10743]  ? synchronize_rcu+0x11b/0x360
[  200.658925][T10743]  ? __pfx_synchronize_rcu+0x10/0x10
[  200.664233][T10743]  ? __pfx_bpf_dispatcher_change_prog+0x10/0x10
[  200.670498][T10743]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  200.676402][T10743]  ? _copy_from_user+0x99/0xc0
[  200.681176][T10743]  ? bpf_test_init+0x15a/0x180
[  200.685935][T10743]  ? xdp_convert_md_to_buff+0x5b/0x330
[  200.692004][T10743]  bpf_prog_test_run_xdp+0x805/0x11e0
[  200.697377][T10743]  ? __pfx_lock_release+0x10/0x10
[  200.702405][T10743]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  200.708204][T10743]  ? __fget_files+0x2a/0x410
[  200.712797][T10743]  ? __fget_files+0x2a/0x410
[  200.717385][T10743]  ? fput+0x21b/0x290
[  200.721362][T10743]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  200.727184][T10743]  bpf_prog_test_run+0x2e4/0x360
[  200.732135][T10743]  __sys_bpf+0x48d/0x810
[  200.736390][T10743]  ? __pfx___sys_bpf+0x10/0x10
[  200.741171][T10743]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  200.747158][T10743]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  200.753484][T10743]  ? do_syscall_64+0x100/0x230
[  200.758256][T10743]  __x64_sys_bpf+0x7c/0x90
[  200.762675][T10743]  do_syscall_64+0xf3/0x230
[  200.767179][T10743]  ? clear_bhb_loop+0x35/0x90
[  200.771849][T10743]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.777743][T10743] RIP: 0033:0x7f370bd7fed9
[  200.782154][T10743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.801763][T10743] RSP: 002b:00007f370cab0058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  200.810183][T10743] RAX: ffffffffffffffda RBX: 00007f370bf46080 RCX: 00007f370bd7fed9
[  200.818147][T10743] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a
[  200.826110][T10743] RBP: 00007f370bdf3cc8 R08: 0000000000000000 R09: 0000000000000000
[  200.834075][T10743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  200.842040][T10743] R13: 0000000000000000 R14: 00007f370bf46080 R15: 00007ffc7d9b2f48
[  200.850022][T10743]  </TASK>
[  200.853178][T10743] Kernel Offset: disabled
[  200.857493][T10743] Rebooting in 86400 seconds..