last executing test programs:

59.265816206s ago: executing program 4 (id=489):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100), 0x6)
getsockname(r0, 0x0, &(0x7f0000002100))
r1 = socket$xdp(0x2c, 0x3, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$inet6_udplite(0xa, 0x2, 0x88)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800, 0xfffffffc}, 0x20)

58.532677869s ago: executing program 4 (id=494):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='westwood\x00', 0x9)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895", 0x1b, 0x11, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010)

41.794947958s ago: executing program 4 (id=494):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='westwood\x00', 0x9)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895", 0x1b, 0x11, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010)

25.201180639s ago: executing program 4 (id=494):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='westwood\x00', 0x9)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895", 0x1b, 0x11, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010)

14.690964703s ago: executing program 2 (id=866):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e8162120960001", 0xe5}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3d", 0xe7}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67", 0xde}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a6590", 0x38}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e8", 0x76}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00", 0x2a}], 0x6}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72", 0x26}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd93", 0x59}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf14", 0x44}], 0x3}}], 0x2, 0xc0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000080)={0xffffffff, {{0xa, 0x4e24, 0x658, @empty, 0x9}}, {{0xa, 0x4e23, 0x52, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x7}}}, 0x108)
write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc0280200003031e000500e1000c0400070080000900", 0x33a)
socket(0x400000000010, 0x3, 0x0) (async)
socket$inet(0x2, 0x4000000000000001, 0x0) (async)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async)
sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e8162120960001", 0xe5}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3d", 0xe7}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67", 0xde}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a6590", 0x38}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e8", 0x76}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00", 0x2a}], 0x6}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72", 0x26}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd93", 0x59}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf14", 0x44}], 0x3}}], 0x2, 0xc0) (async)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async)
sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async)
setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000080)={0xffffffff, {{0xa, 0x4e24, 0x658, @empty, 0x9}}, {{0xa, 0x4e23, 0x52, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x7}}}, 0x108) (async)
write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc0280200003031e000500e1000c0400070080000900", 0x33a) (async)

13.707845352s ago: executing program 2 (id=880):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c514000300fe07366772653000000000000000000028000000000a05000000000000000700000000000000010073797a3100000000080002"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

13.493468333s ago: executing program 2 (id=882):
r0 = socket$tipc(0x1e, 0x5, 0x0)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f00000001c0)="4b554aed0c2a5611b81cf2657e81b728112456e42bc55c849b29a2355f1b557cceb47e28f6e156e16c2ba6a04d85994774511e7680736d0ac746d0f528bf4e13b163028392ca0e9daafb978c58f3297af6c11d6b14ca4baeafbfa925dc1c71b0613a749a0cbeda36a38791beeb525569545be81547a6e6d16996619488b59f27c0b9ffe7a166d501ed550777f7a1beb1e7726f", 0x93}, {&(0x7f0000000180)="d2070161c4d069444d2aeb62632c1b97328323417ec2672609000000caa727ca49", 0x21}], 0x3)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x180}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast2}]}}}]}, 0x48}, 0x1, 0x2, 0x0, 0x8000}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c)
setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000040)={@local, @dev={0xac, 0x14, 0x14, 0xf}, @remote}, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x9)
sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0)

13.275257359s ago: executing program 2 (id=885):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340), 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x2f}}], 0x1, 0x3404c8d4)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r0], 0x1000f)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000000000000000002000004000000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6)
ioctl$sock_bt_hci(r3, 0x800448d3, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r4, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r6, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x4000000)
setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000400), 0x4)
socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond_slave_0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x840)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newtaction={0xd0, 0x30, 0x400, 0x0, 0x0, {}, [{0xbc, 0x1, [@m_vlan={0xb8, 0x15, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x7f, 0x1, 0xffff0000, 0x3}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x8, 0x20000000, 0xfffffffd, 0x7fff}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1f}]}, {0x2a, 0x6, "0766b3c4e24333bd7ff9874d2dc6ab9759b126391f608ea69ccba60ef25562359a1c17a1f962"}, {0xc}, {0xc, 0x8, {0x5, 0x1}}}}]}]}, 0xd0}}, 0x0)
r8 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r10, 0x84, 0x7, &(0x7f0000000000)={0x5}, 0x4)

12.44862755s ago: executing program 4 (id=494):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='westwood\x00', 0x9)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895", 0x1b, 0x11, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010)

11.616807956s ago: executing program 2 (id=897):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000000008"], 0x14}], 0x1}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}}, 0x10) (async)
syz_emit_ethernet(0x27, &(0x7f0000000040)={@broadcast, @random="0a043c306c26", @void, {@generic={0x6, "95f3e26031d9eaf4754da94aa619d5b11d05496b127f2c391d"}}}, &(0x7f0000000080)={0x0, 0x2, [0xf40, 0xc9b, 0xfc, 0x802]})

11.489885338s ago: executing program 2 (id=899):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
unshare(0x400)
r1 = socket$isdn_base(0x22, 0x3, 0x0)
bind$inet(r1, 0x0, 0x0)
r2 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)={r2})
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0xfffc, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x80001}, @sack_perm], 0x8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r7=>0x0})
setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000180)=[{0x0, 0x3, {0x1}, {0x0, 0xff}, 0x1, 0x7f}, {0x2, 0xffffffffffffffdf, {0x2, 0x1}, {0x1, 0x0, 0x5}, 0x2, 0x1}, {0x1, 0x0, {0x0, 0x0, 0x2}, {0x0, 0xff, 0x1}, 0xfe}], 0x60)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840)
sendto$inet(r0, &(0x7f0000000200)="1ede55aa6d3e082729d481d4bd1b385012a92fbbf21fd438344a15f0820c74a5edf1b7caf206743e3e5e1e9c962b085e327c0000000000", 0x37, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
shutdown(r0, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311a30000000000851000000200000085000000000000008a0000f0ff0000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)

2.904537668s ago: executing program 1 (id=984):
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xd}}, @NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_DATA={0x4}}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x44810}, 0x44000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x7, @void, @value}, 0x94) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x98, 0x0, 0x7, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x98}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x100000000}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xa1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x81}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x40048094) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000100)={0x14, 0xd, 0x6, 0x3, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)

2.79722281s ago: executing program 0 (id=986):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r0, 0xd7735000)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000100)=0xfffffffe, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x4, 0x16, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)

2.660851088s ago: executing program 0 (id=987):
syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8edd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000005}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, @mcast2, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2}}}}}}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

2.658730318s ago: executing program 1 (id=988):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001100)={&(0x7f0000000040)={0x10a0, 0x2d, 0x8, 0x70bd2a, 0x25dfdbff, {0x1a}, [@generic="136866bce1e9ea1b96fbc77f2eac89c5dad0154c6116c98fd6ad999549520a982150095a69d7b4faa1c7809362c91af24d3ad937d513899aeea8c84961670183afa235e0ed9630ce69975ae2053010f93240e2df2906938e4d58e574b3a7386938254abf1d3f48a80bad2159ec5b8d2765aced55ea583a735980abbcfaec3ba9bf3302cf230934eb178806", @generic="6db7929c0e48b016e71b24142b3c11d5c465de5ad9b81358f1ee14cde352d92b1bc9dd440587308377ab880ebffca1f7e3af2a7edd82f2b5e80445a5117b5044abc63c5b9dbd83ab0b7ab55d78cd5e58cd7a6abd37e079487ec53e5d3599831d239448640cd94580d90cc64fc2a411ca7256a196cc866b939ac5980cc2471936487fa62e92afdb8d60f62e535a6e0c7d4f30e8fab4bc867d1b6cb3792fc3f7a3ca779506515fbd731ffd41a1526d3cd906917d9c69fde31b4cfb48416b70b815ef959e818a0d77942fa7e427395b12726bbb836c2b05b919945e8554e55b92008bd7bf73658112d6bd472bdda79fc1ceae6db185c6a7b163791d29991f3ac7664325edf46996d63e05bf8b263e794efae9027a2320f78afc259150f159cc009aa7e02aa0b4ffff71c25efd4170b0b291cec1162e3793a07b4bf29c47b5c01624e4d1798d1f1a974f216e8c9294b3d141be913387692410d6c53b9d663e2bd8c71f3ccc6fbd9b661c8e11c1e02dc9ed063496cf0d589335176f0b7cac0c561623dd2dcb1d3ca9de8af28c6b7d9ad36702b258fa221a2c47218382e1fbba60e27dbd958a50cc7e6eec43b4ce30553197e883537aaaf78446e514d34067170d8072b4db6747a153bfeeb517f08cbb3a2701a103fd043e6bf761b0c6a3aba668089b37458b99b88c1b83a86a0b1fea2ead9c99ac28c8cdcf58c7d05f0eab700969dbc1fca88bbd9bbb3afe67c6f2e381a2c9e9f2c823d5572d060d6f57e60943a95ef41b425d0349fd1e8b72e935660c743803df06745fd23e4719cd0c1e9b5c0c3fb9346d048321ecdbeea4724703afac52cea3047b5c4324cc3b38f692654e703ef8512d41cf1a3bf7f1ea50c9a350019d2cfe97a628d1f4570ba2dea53306f408cf11dbd5948816acc3f71a3ba9ad4ef9d307aba99f2e5fc78e37317df8ea1712c8eeb498df9ed7539b38e05ac818b8b0f82853c23045c7edb1821204c9d94fbb7ccbb886843d0520f1db22020c29d8f3c8567234cd0de75ab34d23b2d4d4707081483190b419f85858df19fe1ab2e558cc20403f563e0a37ef5ce43be3e1d277142fb379278b4378c412006119ade26f6d3e981189a0b7073646a831629b97915f887452314deb5daef19691421cb6151a78876d62bc62917c11c7ce90f80dff0fc3536cf672a8fc8f45abb4be5c2abaad6aba34ab348565f8183e9182cb16ef78bc976e1232822a8cc65f340bb449594073754e385a17608941dca996a3eaa87d569e4ca52743b7b608e44e56e598c3c9e63f13693503619e603ecffbbfd232ca4c95cbc3377e81351acac630c92bd5a3fc761dbcf0759d8e399f1f85a1e0d8edc497115d976256fe73623fcdb6df83524bd91019b954742b6d872f59224cb5209374aedeac97d9e61fcabd863bd623c87c6a4cbcfc3a7bdb3adad35efd30a3ee56700cbec42b4decbd8c396d7ac955cb8edaabfe6d70574b0579176f9a1f974bd4853965498e6c1e27d3636c8a9d39945c8db2bd29ae9c23519c3cf94ab7ed5ba5113ffa7e3f0bfc8830b1fd3e95a7ac378b203c4e39795b9df11bbd2738ecb755f677cf666f83ccbf0b2113249400e240df6dc53f398f99e3ac6978b5133d7582d178973678a2d3727742b60adbed8884cbfe1ee46f5d85c22780ab622551f837eac2355510f20510a8417fa812a1d6cfc7f10fe804b9ba2cad2f14a1072427d13d4537f7e86688df03426f863e0cd6856bc0e251ee6df9dd199645c2bfaf942d206d982f66186b45a930dda81c1fbdcc3d14dd3d742610189dc3a89d4d9f127d144aeb944fd6b4bc94a3eb16ad28cb4118a15286b1ddcffec25513bc36452184145ee8038e62336e078541478de7eebe0953474ca341ba41daa738ddfa1e81c6ed41ccb681077b3c4fb7efdfa2840e9ce5677e04b52f67e0c41392cfb6a9d65fb1b3ac80c7fe8b5cfe0ac8a097a52a4f667f17876da6ca75f06dbdaab6f388569311bab19ce7803074ee852eca2db5fdf03435fac8f5b39a41083bc30aeab1dbf1c170c7e0fea23077e5dcd61dd2bcb26b95f7baba090a44a22b0d96978a5d6e3ed9249112907f1a60b9e35efb47989c1f76a04e5871a8648899e5592fbc6374d110e72609a475dd2c6f7cde858995d4408aa39c910478a915a5f0afdbe76c5398004c5bbeaa41dbdfcd8dd473f19b889ad03b6031de1053db1944ccef9aed63527638b4dcb051323d8f0cf33f8891fa952e183c77b9d0bb9e61a78dfdad7b626ce700de268a6185ff60e20f00c29aec12aa3d07315d41550faeb41f8290da7ea9a42caa52a1edf31a318e5c258237b10aaf211cd8130304746da5e738e37ab089ccc8a5f38ccd9dd95df75ae34b501509513a694dbf391d6c6e393d1c25d2c73deab27406c47de44c3e46d06bb6223dfb2e10a9403c9c944b340d15c2d527b2293bfc663e87c91565b54fa2967acb3ddb03195e20ac742c83d96ef69b70ca6a15b7ad18f12ce320a63fa4c047b7402f72f0f457838e679d5dd7d2a12f7ec17f9775dfb48e971521eb954d0350b1b73445a7e8501479d6ee0af46f94f99ac2d9ced2c823c7b9bd13964aa082d8c51f582335c82721d58d6ac98352cca2d4b5b2682e5e7e55e2ff79ec7b09c4adbb7ab8774924740437a3fe48a8fd30ae133faf37fd3e8cdde619d5f9fbc561474ed2f21ffb2ade87229faf492deec4a146064c0ff2b3af7e0b810b8ab5b532cf26a18303d0196ce7aecda845113af17965113d57d507bc70c8fc88d45c4ddcc12ac2b72ebbef67a46da442f8df0dfd7a4115d3f0a8aed7a7cc989b9f14d4a5bbec248e3141c26a0c08fcba83226006951fd05e4e96b4b545a1dce91a08073923516dbb9e4ab1750da4c62528e203aeabf89232f0e3b8d45525bede823aadf073eb302c148e309abd99dbb84cf92be58dae1ff50e6938fbe0949337a7ee526adc9137e14f6e2121946f1e46ac7ba4cf3e3c3af1680b5bd1cb97b2b9da4561d85637a8f63c0bcaef83cd8c141edc2ae4ab1a0e12b9c3a4e31e451282ccd57c71224a9bda80725d706bee39f4ef3dc7b4fc35b1256858af068ed854dd3f56202d4c33409c7a272f2a694fc61f6c3242b3e04a890d6b03ae3ff74933cd0828203bb4145223e794dc391ab11e0c37887bd06d9ba86b5c5b6541099161bf73863b337fb2f3208312c486ebabd00c0944fc0d88369cad5bfae7b6f6daa6d5177b7d4451e635d9af89ff02757ebe48575445235ff618aaa550bfb8398b8813636fb36e64ce358e60018cf811f2b9091390506fc59b9d5a6711f56f2186af406d9c9bc25f59ebfbf827c859a755c0161015e5eedba7fb4d98fd87124d7890c585503cec877f6bace25d62de5f33341091ace6905617b63f6c1bbf598698ee78a96ce07b96624e53baa213b95cf5331d763b6a750ce4236aad4895242a2801cf3f8fc0a0791b8dd55a307fd1db1c421e609123c20102e5a9cad9a6840d68c8b29a75f6f06f5a0300578f77b3769a477c750659cf4ff4c389212621ba1f33861707fceac31e3f8ec8668639ed63a940abec614bdd7986fe021337c143916cb65bc1be76cc3329baa07e7466cf64c482ebe6526df6a962248dafb6466fcb720793a5a530064e21ae476695b86326decd80f2716c2db079a226360ed834c5a98d591ee8350c5ce929cf9b2a7b01771d413363cea231e22fb73a91addd0dfa833edb1f174f0940486299974a7295b7149db9a788ffe8e51ab25c909a32b8041d12b74b3e9c5a7c8644cbcd9db67df362503b71d5516e29b5585cbdf29df44df02cdb0bc9a5470743c673d9cf692a94486eae4be45fffddb30df6e0b6024b698ed61c63c16979faa9f821b495c829529a7de78fc55aa20a7d6dbcc3fc7396f8881d1451f2777b19ebcf43fc7f968ca859287655cfb1e6f8d064f721168cc7c5b8867f020d8f9810ba22792a42612b92588c228d04725616bc3725a32db35d1898928b13078e220afc860c218bf06021ea7e3e1c20759da2f68c0aa2ccd7c1f5889d41072da4ecdfa3992639fb95c4df95b5969d1bf5bd42f89785c983e072dc1ef258aee012f417180967c491af538cb9cc952f643baeff58f308ea5603ac21402701295af663b71ba8125d1c9343aabe2726489bae62f519e1acdcc20cd704a2a3bed70d97b0c715b15084864c44490d063df1f1b780ee03905f7061e2b7a3250df3ff88d0e77e4860ef534395617f9e9e67c94a52bf91b0e8653d74ee4fc1411227536f40f00558d1275fd7b5d08b2ca5944fbc6783603c557c8c92a3c1b4a929680615702a0286a5bf28a0e868e408d7e61125d0909af663ec52d1c76f935b0a279883f5e1b11abd8fb41be02af8601407916cd6dd16ce85a83242450f94a802863b06e494dd31bff390dcba3a6a36338aa2530b1e72dea6ac5dfa3f263095f1775413e729e7fc9915f9305245365f0ad9ab1cd6bc573ba5b81e0a017bc5944c713a5f6b89cfada05a9da2ba298aeec119729688a6dd5942df21365158ec3717450e7da70a4c1fe97dd658c484f445d6068d7a3e79e07f4f43fe629346c887e8255440faf7c9509d28aae2f699cb41deb57cfe71b60131a4f08985fb997e9256eaa666a5ce46d67cb602f3f2e2b1127d84fca4dd6aa65db58f19fccb03c0b807b15df4036fc727af2e4bf6bc38092357744c65144dde0f7c86762aeb51f6ba253ba87a9fca3a931818821bfa1a09114299edf226ff5e1ed7818b28b2d8b3167466f909e8f0c8e6118127c9ceee68bd1e5756eceddd644228e0091da480f3f0b6359832eb1bd99558d1efbf26d27fbdb87e7cc66afee51f213c42ac8e6bddc8ea1ee1393ee1b8dd47c6440e6b226543d26892b0fd0e805cb843267563b0b1282fc9471782684a767f7bdbb6fa30eea2cdb460043bea03e3a4b300b7caa0a2e79e85e69f6e5591e9e613d4aeb520ff941d188a90eefa50bd59877fad8e17daf2420710726128d1aa43010d1cc8a558a5b89e8555c89ae8278259780ecbf68454d154929454a57f57ae3a1565411511c7f5f8a21575f1725886208f2dad605d171756fd1d4d93963ffecfc90b8b6bef9521ef85fb39317b23f8558d716bbc5c1c3895092ee22b583045365841f83e0459aac322618d482c1e629e13cb8a83989125246dc617ef630a015081f1868888cad7c75b69c386113d82aba2b72eb92e89e5500271a81c18a3aed65823d786cbf1d07c8bb71655b03e8579098a1d00ca67ca0e6f7744da3f404f491fe0afcee6e5b3d21c5236f546f023dd761bdd2bc6df1922c8472d23e69df99ee352fc01ffacc049a1bd5cc59036a2051ed5297bb44c065878f61abda8f117f7293ad719069b0cb59d99193e81138a65385e75b4dd70ebc71c2d5f14bad1a459b13d92bf3c5a5b5eced00e3424cf9bad9ca9ac099cfaed4a389d0c3e420f80310286c778a13ccd93546ed34ec43a308854c4a509fd457fc8552bca8007f7d9fa497f531dcfd9a0353ae79889890ec05f322345b9f60b0a07b826d0546fdc4cae94d00394a7ef06728a8114f5fee090787b6d437d42ae058041fa34fd19295604c79dd237ca7023d3432871073af0243aff0afb8a9c4058ca8573a7df3bc2c0ad43d87886bde8be20fb5c54a91c67215967c460a3bf9c1b4b04076e0f8a9fc2139c9ced5ce87f5d96e93346134208d93c4a71bdd9caeacba182e09f15a3d8fde6138af88fbe87b5980875049b1a60343e6c8dea8841366454cd200164b5018e651c328f6357aa254ccb571763f85f"]}, 0x10a0}, 0x1, 0x0, 0x0, 0x20004040}, 0x4040010)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000011c0), r0)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x5c, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x4040004) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001380)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x28, r2, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x17}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008974}, 0x4)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001580)={0xffffffffffffffff, &(0x7f0000001480), &(0x7f00000014c0)=""/154}, 0x20) (async)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0), 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, r2, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001700)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xd77626b183713953}, 0xc, &(0x7f0000001880)={&(0x7f0000001740)={0x134, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xf8, 0x3, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xe3, 0x2, "3d5aac95c92464ebc90179711213d695dee9b749abb5a8918165f66dabfdc210187fbf1b6d89410d8815129fe817ec7ba06f5646d5a007b521da0dbc07da2e48dab4e647c8ac09a6619e70a58fd4a6248c3d148b05ae3d1b007291ff9f8351ff4e233eecdaa1cc66017984aa1a47e98aa62c7d29f293e748584be12be009f1f47e6dcf7b8c120ffd392977e1bdcaec4036481e1b9063e61264e28769f6ea2c0691004525b5e157585108081fe121a32a228827bf8b5d984a117cf9a3bdf74d15ded9a0c2ca362701cfa2b2901421cda5cdd917322b109b6bebb9401322ae27"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x134}, 0x1, 0x0, 0x0, 0x10}, 0x4)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001940), r0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x14, r5, 0x2, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004040) (async)
r6 = accept(r0, &(0x7f0000001a40)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000001ac0)=0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001b40)={'batadv0\x00', <r7=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001b80)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000001c80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x58, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x58}}, 0x4) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d40)={{0x1, <r9=>0xffffffffffffffff}, &(0x7f0000001cc0), &(0x7f0000001d00)}, 0x20) (async)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001dc0)=@o_path={&(0x7f0000001d80)='./file0\x00', 0x0, 0x8, r6}, 0x18)
r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001e00)='cgroup.controllers\x00', 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000002040)={'ip6_vti0\x00', &(0x7f0000001fc0)={'syztnl0\x00', <r12=>r8, 0x4, 0xb, 0xf, 0x6, 0x2d, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x8000, 0x20, 0x7, 0xfd}})
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002100)={0x11, 0x27, &(0x7f0000001e40)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x0, 0xcee450d9e2014729, 0x5, 0xfffffffffffffffe, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @map_fd={0x18, 0x7}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}, @jmp={0x5, 0x1, 0x2, 0x9, 0x1, 0xffffffffffffffe0, 0xfffffffffffffff0}, @alu={0x4, 0x1, 0x3, 0x4, 0x9, 0x1, 0x8}], &(0x7f0000001f80)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x42, '\x00', r12, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002080)={0x4, 0x0, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000020c0)=[{0x3, 0x1, 0x9, 0x4}, {0x1, 0x5, 0x5, 0x6}, {0x4, 0x1, 0x9}, {0x4, 0x3, 0xc, 0xa}], 0x10, 0x40, @void, @value}, 0x94)
sendmsg$NL80211_CMD_DISASSOCIATE(r11, &(0x7f0000002340)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x2040000}, 0xc, &(0x7f0000002300)={&(0x7f0000002200)={0xd0, r2, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb, 0x1e}}}}, [@NL80211_ATTR_SSID={0x21, 0x34, @random="967ecc97dd1fe877f0cbede42795aa236f5fb6657e05c3f179da4bbe9f"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfffa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x6a, 0x2a, [@fast_bss_trans={0x37, 0x64, {0xa5, 0x1, "7c5f16b8e8399b1116b1150014c1a786", "5d2db64e989c6555c7b66055d11ca55f95ecfd85ffe173dd66212e806ae1dd2d", "9992b3c7e3a840d1388c48e25af55013e319b447d7e145667fb9ab8dfe1e715a", [{0x1, 0x10, "281121a0a8a51645ab4c0c1d245f06a5"}]}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x81}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0xd0}, 0x1, 0x0, 0x0, 0x408c5}, 0x4000040)
bpf$ENABLE_STATS(0x20, &(0x7f0000002380), 0x4) (async)
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000002400)={0x1, &(0x7f00000023c0)=[{0x1, 0x5, 0x4, 0x9}]}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002480)={&(0x7f0000002440)='qgroup_meta_free_all_pertrans\x00', r13, 0x0, 0x35b6}, 0x18) (async)
r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002500), r6)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r11, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x24, r14, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004081}, 0x2000) (async, rerun: 64)
r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000002640), r9) (rerun: 64)
sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x34, r15, 0x400, 0x70bd28, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x10, 0x3, @udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004800)

2.634607449s ago: executing program 4 (id=494):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='westwood\x00', 0x9)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895", 0x1b, 0x11, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010)

1.581942212s ago: executing program 0 (id=990):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x18, 0x24, 0x301, 0x0, 0x0, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

1.581534509s ago: executing program 1 (id=991):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r1, 0x20, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x0, 0x0}}, 0x10) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETSTEERINGEBPF(r2, 0x400454da, &(0x7f0000000000)) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 64)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3404001c", @ANYRES16=r3, @ANYBLOB="010000000000fdffffff1000000018000180140002006e657464657673696d3000000000000008001100fb460000"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) (async)
socket$igmp(0x2, 0x3, 0x2) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SELECT={0x40, 0xe3, 0x0, 0x1, {0x3c, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x4e42}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x800}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xc, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x61f}]}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000004)

1.413055089s ago: executing program 3 (id=993):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x5c}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
close(r0)

1.228794095s ago: executing program 3 (id=994):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))
unshare(0x28000600)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000bdc5072e4c75223f007e6ca306000000000000009c91420b66f0980e90dc0a9900d145243692fe648adf4cbc1dc631c378820861eccfa60822e798d6526600eea6c33dd5b2a7762091bffe56a9440bf23deb4dc8947d2bafec88ae3708013fdc5b2a1dbc7d50fcb6d9a01d03491c35fee5ff00002e40db34dea1063eaf2e3d6959435775943a5a7090b1c08454a248811ed0850a0e16793732f7c9af95af00100000955133044fd041b55379c29cc8ca9e1e5223ceb6f2e4980e5be2d3f36ae968af01953b6e4b3aa3fe0c375b2e17019ccdf4b9b5caccc4722cf3e6cfa6567c5a8e01bf465f0a27e54911827c4fa432ca89bf5ac89effedbe12b66ce9643697ac0e12a966dcea592613f479d71eb2597dd9000000000000000000000000001d5bdafcd419016b45507fedc616a94a06268d9b21e956eabc"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000009000)=r1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x700, 0x0, 0x0, 0x0, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback, {[@noop, @timestamp_prespec={0x44, 0x1c, 0xd1, 0x3, 0x9, [{@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x1}, {@loopback, 0xf}]}]}}}}})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x50}}, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0)
close(r4)

710.887636ms ago: executing program 0 (id=995):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611210000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0)

710.419419ms ago: executing program 3 (id=996):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x3}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x8}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0x1c}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair(0xa, 0x5, 0x7, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)

685.318002ms ago: executing program 1 (id=997):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000d0cf0d5d749ffe6a542e77bd000080250000000000c24eaf89b1bf649b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000840)={0x1f, 0x0, @fixed, 0x0, 0x3}, 0xe)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fbdfd09172c182c604000000140005000000000000000000000000000000000108000200050000001400060020010000000000000000000000000001060005"], 0x4c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601030a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500000000000500010006000000140007"], 0x5c}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000700)={@map, 0xffffffffffffffff, 0xf, 0x18, 0x0, @void, @value}, 0x20)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011809ed61b77d9f16a96c594a1835eb265ba7f20e413597129961ed189d63c3391c4854d66a1452ed6b21900c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b710000004d0012803b6f2811032d68bea0612044f47c2842b277eb4bc53070416c6050e46d2e0d055c97c9e7f9bf0bafe4af56eba9024644942e3645a3e6db0d1191744909497df00d71a338c0c6a42d17"], 0xb4}}, 0x0)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r7, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40800)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000a6093e46b191000800"/37], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@exit]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[r8, r8], 0x0, 0x10, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='initcall_finish\x00', r5}, 0x10)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r10, &(0x7f00000000c0)=0x1, 0x12)
ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000600)=0x4)
r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
r12 = socket$inet(0xa, 0x801, 0x84)
getsockname(r6, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000540)=0x80)
socket$packet(0x11, 0x3, 0x300)
connect$inet(r12, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt(r12, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
listen(r12, 0x8)
accept4$inet(r12, 0x0, 0x0, 0x80800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x1e, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

416.771778ms ago: executing program 0 (id=998):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000680)=@delchain={0xf4, 0x2d, 0x1, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_ACT={0x78, 0x9, 0x0, 0x1, [@m_tunnel_key={0x74, 0x0, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, {0x1c, 0x6, "eb25946ddf95959b7f8d829c69274ff122e320ac9e1cd272"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_RSHIFT={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6}]}, 0xf4}}, 0x0)

369.876584ms ago: executing program 3 (id=999):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111770000000000850000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000631108000000000007000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff7b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

337.169573ms ago: executing program 1 (id=1000):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$l2tp6(0xa, 0x2, 0x73) (async)
socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ipvlan1\x00'}]}, 0x58}}, 0x8000)
socket(0x1, 0x800, 0x0) (async)
r2 = socket(0x1, 0x800, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0), 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000800000000b70500000800009500"/32], &(0x7f0000000300)='GPL\x00', 0x3, 0x408, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000800000000b70500000800009500"/32], &(0x7f0000000300)='GPL\x00', 0x3, 0x408, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)={[{0x60fabf85fb216f42, 'freezer'}, {0x2d, 'net_cls'}, {0x2b, 'pids'}, {0x2d, 'cpuacct'}, {0x2b, 'hugetlb'}, {0x2d, 'memory'}]}, 0x32) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)={[{0x60fabf85fb216f42, 'freezer'}, {0x2d, 'net_cls'}, {0x2b, 'pids'}, {0x2d, 'cpuacct'}, {0x2b, 'hugetlb'}, {0x2d, 'memory'}]}, 0x32)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fedbdf25a8000300b0000000", @ANYRES32=r9, @ANYBLOB="05001e0006000000"], 0x24}}, 0x80) (async)
sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fedbdf25a8000300b0000000", @ANYRES32=r9, @ANYBLOB="05001e0006000000"], 0x24}}, 0x80)
r10 = socket(0x1, 0x803, 0x200000)
getsockopt$SO_BINDTODEVICE(r10, 0x1, 0x4a, &(0x7f0000000000), 0x20000000)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e74657200340002800c0002400000000000001e3c0c00014000000000000000500c00024000000000000100000c000140000000000000000018"], 0x130}, 0x1, 0x0, 0x0, 0x8024}, 0x8810)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000f500", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES16=r6, @ANYRES32=0x0, @ANYBLOB="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"], 0x50) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000f500", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES16=r6, @ANYRES32=0x0, @ANYBLOB="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"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r11 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8)
socket(0x1e, 0x1, 0x0) (async)
r12 = socket(0x1e, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r12, 0x6, 0x23, 0x0, &(0x7f0000000200))
getsockopt$inet_buf(r11, 0x0, 0x26, &(0x7f0000000000)=""/34, &(0x7f0000000080)=0x22)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r13 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r13, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)

134.17847ms ago: executing program 3 (id=1001):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x45, &(0x7f0000000500)=[{&(0x7f0000000680)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000441a800090004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x45, &(0x7f0000000500)=[{&(0x7f0000000680)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000441a800090004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)

131.431258ms ago: executing program 0 (id=1002):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r1, &(0x7f0000000540)=[{&(0x7f00000002c0)="f839362c4f6392d54872c259244f04bb5d650eb026519dad11c8f50a00d50c82518c9fc5c4f3f82baf67f5447162830250dfa0c1c429e244bf59c04cc9cd2dd4700ec61c174d4bd9e33db447ee4aeadadd1ac3edad0100c1b5fce6787e2d831114f95963c2dedeb1ef2ee3c6f4322163ac0e688bb895", 0x76}, {&(0x7f0000000380)="2f2f74d352bf7355e39d9c4a55295d4cabed60dcea54ddad1f3962124b50ed22cec6209b22017e40", 0x28}, {&(0x7f00000003c0)="cf429cce048c63d96c963c3fb009c1611725fd138c1cfffdf6a9dfe9e6031eb37270d855615abcee", 0x28}, {&(0x7f0000000400)="8c4572f9ef43de7a80f9e437b0d3c8f1e072db8a4c3b8d632ba0398999122c76f15dec482d9195f4e8a84323372050ece4894f1d193cf77bc7599cbf1a8ae47d6c4a705a9d98462563fb2dde184700743f595d6bf29a60baf8c5c405964fac8ade4ef2a89d5e7264afb039bd02cacbcdaabb0444", 0x74}, {&(0x7f0000000480)="fe49959c5cda1cbc37a3751f40036a8da777f25bed9d97cfe664a316909223d97105dcb395dd1e3d64d55d39c626616082d537c1ee0d6dab33f342c9", 0x3c}], 0x5)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000004030a020000000900010073797a30000000000900030073797a3200000000140000001100016f041afe98f7", @ANYBLOB="859efa7e4a536a9cd05056d109aaf6f0ffab2575d31629d78be7d295612a50c1c399cc4e35f9da1084d47821676cf7c2d026e56b55eddc243b9dff05e3e93a685a18b33ca145acb5d2cba11bfd98ae70b7858a560d86596a27b8b464f5ac78d46751dc021a", @ANYRESOCT], 0x7c}}, 0x4000040)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xe, 'wlan1\x00'})
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340000000011400000011000100"], 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40884}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r3], 0x54}}, 0x800)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async)
writev(r1, &(0x7f0000000540)=[{&(0x7f00000002c0)="f839362c4f6392d54872c259244f04bb5d650eb026519dad11c8f50a00d50c82518c9fc5c4f3f82baf67f5447162830250dfa0c1c429e244bf59c04cc9cd2dd4700ec61c174d4bd9e33db447ee4aeadadd1ac3edad0100c1b5fce6787e2d831114f95963c2dedeb1ef2ee3c6f4322163ac0e688bb895", 0x76}, {&(0x7f0000000380)="2f2f74d352bf7355e39d9c4a55295d4cabed60dcea54ddad1f3962124b50ed22cec6209b22017e40", 0x28}, {&(0x7f00000003c0)="cf429cce048c63d96c963c3fb009c1611725fd138c1cfffdf6a9dfe9e6031eb37270d855615abcee", 0x28}, {&(0x7f0000000400)="8c4572f9ef43de7a80f9e437b0d3c8f1e072db8a4c3b8d632ba0398999122c76f15dec482d9195f4e8a84323372050ece4894f1d193cf77bc7599cbf1a8ae47d6c4a705a9d98462563fb2dde184700743f595d6bf29a60baf8c5c405964fac8ade4ef2a89d5e7264afb039bd02cacbcdaabb0444", 0x74}, {&(0x7f0000000480)="fe49959c5cda1cbc37a3751f40036a8da777f25bed9d97cfe664a316909223d97105dcb395dd1e3d64d55d39c626616082d537c1ee0d6dab33f342c9", 0x3c}], 0x5) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00'}) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000004030a020000000900010073797a30000000000900030073797a3200000000140000001100016f041afe98f7", @ANYBLOB="859efa7e4a536a9cd05056d109aaf6f0ffab2575d31629d78be7d295612a50c1c399cc4e35f9da1084d47821676cf7c2d026e56b55eddc243b9dff05e3e93a685a18b33ca145acb5d2cba11bfd98ae70b7858a560d86596a27b8b464f5ac78d46751dc021a", @ANYRESOCT], 0x7c}}, 0x4000040) (async)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
ioctl$sock_x25_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xe, 'wlan1\x00'}) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340000000011400000011000100"], 0x64}}, 0x0) (async)
sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40884}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r3], 0x54}}, 0x800) (async)

20.548125ms ago: executing program 1 (id=1003):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) (async)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)='v', 0x1fb5b, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
sendmsg$inet6(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {0x0}, {&(0x7f0000000140)}, {&(0x7f0000000540)="be9dab5f0ab8ccbe4ba4826888c4abb050e4fcd665a303cbb15e4f3562cda1346b72d2c99d109905c5d736828a7c4dd5ede5b12f1acb0604e18968a4e35db98ea31af949d9b022b011cd3cf8c8d35a6585d7f8d76601dbced121775596fa24231078c4c261b18c125c5463253ed8d2cdece902231b75eff072dd2d05a5c72679a3d5052fcfde4fa8e0bf5cad7eaaeb2b794618cf7c40e410bb97f3a43e2599f297397ebf8baaa155a6322960d7fc20da0a8cd0dd638190dd57f6479cfc67fc455f5d61b8ad3d4cdfad50e69e987c9cb8eb2099a6b4a1df94c5", 0xd9}], 0x4}, 0x40005)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_VERSION={0x5, 0x6, 0xc}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_PROTOCOL={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x50}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10)
shutdown(r0, 0x1) (async)
r5 = socket$pppoe(0x18, 0x1, 0x0)
r6 = socket$pppoe(0x18, 0x1, 0x0) (async)
connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0xad, 0x10}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000280)={'syztnl0\x00', <r8=>0x0, 0x0, 0xa, 0x3, 0x8, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x59, 0x0}, 0x80, 0x40, 0xee2, 0x1}})
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x10, 0xfffffff9, 0x101, 0x46c4a, r7, 0x401, '\x00', r8, 0xffffffffffffffff, 0x1, 0x4, 0x1, 0x7, @void, @value, @void, @value}, 0x50)
connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, 'hsr0\x00'}}, 0x1e) (async)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r10, 0x400448de, &(0x7f0000000440)="7f1368fccb065ae78472ef68c3f4486ac4cb297de68f9e19aacbaf219e66ae4caff14d8d98f0a02df6941988e9f28f0c4f0fc26002578430464b47554c2d013d7ccdd36c2983d5298b5c7a3e058afe189713cbc1614e06c2bc8e7405c9a1212997e9ae9cc51d5514f3d890b59837bb7d2dd266") (async)
sendmsg$nl_xfrm(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, 0x0, 0x33}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef, 0x3}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x4}, 0x4}, 0x2, 0x1a0b1}}, 0xf8}}, 0x0) (async)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)
ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'veth1_to_bridge\x00'}})

0s ago: executing program 3 (id=1004):
r0 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000001c0)=ANY=[@ANYRES8, @ANYRES8=r0], 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000004000000040000000700020000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000c8966e8f5fa371202e7f839f8b16e654000000000000000000"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={<r3=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2d, r3})
r5 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4)
ioctl(r5, 0x8916, &(0x7f0000000000))
ioctl(r5, 0x8936, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.96' (ED25519) to the list of known hosts.
[   82.020425][ T5822] cgroup: Unknown subsys name 'net'
[   82.188190][ T5822] cgroup: Unknown subsys name 'cpuset'
[   82.197001][ T5822] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   83.950884][ T5822] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   86.641110][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   86.649829][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   86.658349][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   86.667090][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   86.675051][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   86.680727][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   86.682673][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   86.691522][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   86.697752][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   86.711624][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   86.714844][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.719547][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   86.734826][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   86.742882][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   86.743546][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.760215][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   86.767819][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.783059][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   86.784640][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   86.790577][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   86.806115][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   86.817618][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   86.827021][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.832696][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.844798][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.754488][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   87.784186][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   87.842450][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   87.930393][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   87.991600][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   88.155295][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.162560][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.170591][ T5832] bridge_slave_0: entered allmulticast mode
[   88.178538][ T5832] bridge_slave_0: entered promiscuous mode
[   88.237243][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.244727][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.251892][ T5832] bridge_slave_1: entered allmulticast mode
[   88.259344][ T5832] bridge_slave_1: entered promiscuous mode
[   88.283640][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.291077][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.298521][ T5843] bridge_slave_0: entered allmulticast mode
[   88.306270][ T5843] bridge_slave_0: entered promiscuous mode
[   88.355767][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.362960][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.370408][ T5835] bridge_slave_0: entered allmulticast mode
[   88.378816][ T5835] bridge_slave_0: entered promiscuous mode
[   88.386133][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.393281][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.400722][ T5843] bridge_slave_1: entered allmulticast mode
[   88.407952][ T5843] bridge_slave_1: entered promiscuous mode
[   88.414747][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.421894][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.429468][ T5848] bridge_slave_0: entered allmulticast mode
[   88.437071][ T5848] bridge_slave_0: entered promiscuous mode
[   88.445804][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.452962][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.460341][ T5848] bridge_slave_1: entered allmulticast mode
[   88.467979][ T5848] bridge_slave_1: entered promiscuous mode
[   88.500468][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.507923][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.515299][ T5835] bridge_slave_1: entered allmulticast mode
[   88.522426][ T5835] bridge_slave_1: entered promiscuous mode
[   88.557781][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.571557][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.581350][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.591382][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.598755][ T5833] bridge_slave_0: entered allmulticast mode
[   88.605944][ T5833] bridge_slave_0: entered promiscuous mode
[   88.615031][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.622190][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.629698][ T5833] bridge_slave_1: entered allmulticast mode
[   88.638262][ T5833] bridge_slave_1: entered promiscuous mode
[   88.690206][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.746803][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.760707][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.772938][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.814920][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.855811][ T5832] team0: Port device team_slave_0 added
[   88.865557][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.878618][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.890296][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.899941][ T5838] Bluetooth: hci0: command tx timeout
[   88.906375][   T51] Bluetooth: hci2: command tx timeout
[   88.912473][   T51] Bluetooth: hci3: command tx timeout
[   88.918769][ T5847] Bluetooth: hci4: command tx timeout
[   88.918849][ T5852] Bluetooth: hci1: command tx timeout
[   88.959096][ T5832] team0: Port device team_slave_1 added
[   89.022953][ T5843] team0: Port device team_slave_0 added
[   89.032680][ T5843] team0: Port device team_slave_1 added
[   89.042801][ T5848] team0: Port device team_slave_0 added
[   89.051820][ T5848] team0: Port device team_slave_1 added
[   89.076157][ T5833] team0: Port device team_slave_0 added
[   89.086140][ T5835] team0: Port device team_slave_0 added
[   89.118065][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.126012][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.152731][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.167495][ T5833] team0: Port device team_slave_1 added
[   89.175982][ T5835] team0: Port device team_slave_1 added
[   89.210902][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.218237][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.244526][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.258909][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.266757][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.293033][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.339888][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.347010][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.373388][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.386531][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.393514][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.419628][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.432810][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.440379][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.467540][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.580047][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.587444][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.613568][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.627288][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.634488][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.660474][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.675663][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.682731][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.708784][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.728977][ T5848] hsr_slave_0: entered promiscuous mode
[   89.735788][ T5848] hsr_slave_1: entered promiscuous mode
[   89.749039][ T5832] hsr_slave_0: entered promiscuous mode
[   89.755540][ T5832] hsr_slave_1: entered promiscuous mode
[   89.761662][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.769545][ T5832] Cannot create hsr debugfs directory
[   89.776186][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.783156][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.809450][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.875030][ T5843] hsr_slave_0: entered promiscuous mode
[   89.881562][ T5843] hsr_slave_1: entered promiscuous mode
[   89.889092][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.896898][ T5843] Cannot create hsr debugfs directory
[   90.079098][ T5835] hsr_slave_0: entered promiscuous mode
[   90.086141][ T5835] hsr_slave_1: entered promiscuous mode
[   90.092235][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.100109][ T5835] Cannot create hsr debugfs directory
[   90.238306][ T5833] hsr_slave_0: entered promiscuous mode
[   90.245833][ T5833] hsr_slave_1: entered promiscuous mode
[   90.251857][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.259652][ T5833] Cannot create hsr debugfs directory
[   90.719693][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   90.732313][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   90.750872][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   90.771221][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   90.876795][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   90.901635][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   90.943577][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   90.975548][ T5852] Bluetooth: hci1: command tx timeout
[   90.978638][ T5838] Bluetooth: hci2: command tx timeout
[   90.980990][ T5852] Bluetooth: hci0: command tx timeout
[   90.986458][   T51] Bluetooth: hci3: command tx timeout
[   90.991895][ T5852] Bluetooth: hci4: command tx timeout
[   91.005189][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   91.051592][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   91.085120][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   91.124981][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   91.139545][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   91.161594][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.271326][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   91.285919][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   91.299593][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   91.316943][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.324294][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.337905][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   91.359574][ T3517] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.366851][ T3517] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.380505][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   91.519954][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   91.550489][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   91.561762][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   91.600084][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   91.633055][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.770703][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.791268][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   91.829547][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.836800][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.876681][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   91.891916][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.899193][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.949509][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.983326][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.990647][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.009180][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   92.030924][ T1211] cfg80211: failed to load regulatory.db
[   92.041579][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.048851][ T1318] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.061044][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.068349][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.093074][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.100282][ T1318] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.152528][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.266687][ T5835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   92.279321][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   92.297459][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.358112][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   92.399319][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   92.450283][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.457756][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.542039][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.549299][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.620918][ T5848] veth0_vlan: entered promiscuous mode
[   92.726412][ T5848] veth1_vlan: entered promiscuous mode
[   92.891444][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.947063][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.032437][ T5848] veth0_macvtap: entered promiscuous mode
[   93.054532][ T5845] Bluetooth: hci3: command tx timeout
[   93.056364][ T5838] Bluetooth: hci0: command tx timeout
[   93.059975][ T5845] Bluetooth: hci1: command tx timeout
[   93.068747][   T51] Bluetooth: hci2: command tx timeout
[   93.071543][ T5852] Bluetooth: hci4: command tx timeout
[   93.101165][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.133137][ T5848] veth1_macvtap: entered promiscuous mode
[   93.168419][ T5835] veth0_vlan: entered promiscuous mode
[   93.206111][ T5835] veth1_vlan: entered promiscuous mode
[   93.286863][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.329600][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.371940][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.385244][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.394246][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.403145][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.430519][ T5832] veth0_vlan: entered promiscuous mode
[   93.456432][ T5835] veth0_macvtap: entered promiscuous mode
[   93.477388][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.496921][ T5832] veth1_vlan: entered promiscuous mode
[   93.506662][ T5835] veth1_macvtap: entered promiscuous mode
[   93.675104][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.711164][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.730700][ T5832] veth0_macvtap: entered promiscuous mode
[   93.753492][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.763268][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.772370][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.781979][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.808476][ T5832] veth1_macvtap: entered promiscuous mode
[   93.825638][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.832253][ T5833] veth0_vlan: entered promiscuous mode
[   93.840179][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.892325][ T5833] veth1_vlan: entered promiscuous mode
[   93.952998][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.957021][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.971308][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.981384][ T5843] veth0_vlan: entered promiscuous mode
[   94.021771][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.067371][ T5843] veth1_vlan: entered promiscuous mode
[   94.090107][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   94.117662][ T3483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.119711][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.130900][ T3483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.143358][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.154573][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.163380][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.178191][ T5833] veth0_macvtap: entered promiscuous mode
[   94.250622][ T5833] veth1_macvtap: entered promiscuous mode
[   94.300547][ T3483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.309564][ T3483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.381718][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.395343][ T5843] veth0_macvtap: entered promiscuous mode
[   94.481277][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.502735][ T5843] veth1_macvtap: entered promiscuous mode
[   94.530903][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.562201][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.586839][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.603613][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.642687][ T5961] Bluetooth: MGMT ver 1.23
[   94.688373][ T5961] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   94.725741][ T5961] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3'.
[   94.733722][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.767387][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.785903][ T5961] Zero length message leads to an empty skb
[   94.830088][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.902833][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.927379][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.940664][ T5843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.951234][ T5843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.951874][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.961355][ T5843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.981479][ T5843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.134650][ T5845] Bluetooth: hci2: command tx timeout
[   95.134735][   T51] Bluetooth: hci3: command tx timeout
[   95.140100][ T5845] Bluetooth: hci1: command tx timeout
[   95.145728][ T5838] Bluetooth: hci4: command tx timeout
[   95.159693][ T5852] Bluetooth: hci0: command tx timeout
[   95.190325][ T5974] netlink: 'syz.0.9': attribute type 11 has an invalid length.
[   95.200030][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.212452][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.242304][ T5976] netlink: 'syz.2.10': attribute type 8 has an invalid length.
[   95.251343][ T5974] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9'.
[   95.588299][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.621973][ T5989] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   95.648868][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.762463][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.813772][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.909969][ T1318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.946910][ T1318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.004590][ T5999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16'.
[   96.476805][ T6019] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[   96.482817][ T6013] netlink: 96 bytes leftover after parsing attributes in process `syz.1.19'.
[   96.601978][ T6013] 8021q: VLANs not supported on sit0
[   96.790769][ T6027] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:0
[   97.008028][ T6034] netlink: 16 bytes leftover after parsing attributes in process `syz.0.26'.
[   97.192711][ T6045] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   97.358817][ T6048] dvmrp0: entered allmulticast mode
[   97.369257][ T6039] syz.1.28 (6039) used greatest stack depth: 19000 bytes left
[   97.645383][ T6057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.33'.
[   97.684010][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'.
[   97.878841][ T6063] netlink: 24 bytes leftover after parsing attributes in process `syz.4.35'.
[   97.964391][ T6072] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   98.003917][ T6067] sctp: failed to load transform for md5: -2
[   98.012335][ T6065] sctp: failed to load transform for md5: -2
[   98.044641][ T6074] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[   98.343971][ T6087] sctp: failed to load transform for md5: -4
[   98.962554][ T6118] netlink: 260 bytes leftover after parsing attributes in process `syz.2.51'.
[   99.187276][ T6122] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.240911][ T6128] syz.0.54: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   99.275397][ T6122] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.295474][ T5852] Bluetooth: hci4: command 0x0405 tx timeout
[   99.312259][ T6128] CPU: 0 UID: 0 PID: 6128 Comm: syz.0.54 Not tainted 6.15.0-syzkaller-12425-g82cbd06f327f #0 PREEMPT(full) 
[   99.312286][ T6128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   99.312297][ T6128] Call Trace:
[   99.312304][ T6128]  <TASK>
[   99.312312][ T6128]  dump_stack_lvl+0x189/0x250
[   99.312352][ T6128]  ? __pfx_dump_stack_lvl+0x10/0x10
[   99.312381][ T6128]  ? __pfx__printk+0x10/0x10
[   99.312402][ T6128]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   99.312424][ T6128]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   99.312446][ T6128]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   99.312470][ T6128]  warn_alloc+0x214/0x310
[   99.312500][ T6128]  ? __pfx_warn_alloc+0x10/0x10
[   99.312530][ T6128]  ? __get_vm_area_node+0x28f/0x300
[   99.312552][ T6128]  ? packet_set_ring+0x6f4/0x2380
[   99.312581][ T6128]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   99.312634][ T6128]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   99.312659][ T6128]  ? alloc_pages_mpol+0x3cd/0x4a0
[   99.312682][ T6128]  ? packet_set_ring+0x6f4/0x2380
[   99.312703][ T6128]  vzalloc_noprof+0xb2/0xf0
[   99.312724][ T6128]  ? packet_set_ring+0x6f4/0x2380
[   99.312746][ T6128]  packet_set_ring+0x6f4/0x2380
[   99.312792][ T6128]  ? __pfx_packet_set_ring+0x10/0x10
[   99.312834][ T6128]  ? _copy_from_user+0x94/0xb0
[   99.312861][ T6128]  packet_setsockopt+0xc5a/0x12c0
[   99.312896][ T6128]  ? __pfx_packet_setsockopt+0x10/0x10
[   99.312914][ T6128]  ? futex_wake+0x4b2/0x560
[   99.312953][ T6128]  ? aa_sk_perm+0x81e/0x950
[   99.312981][ T6128]  ? __pfx_aa_sk_perm+0x10/0x10
[   99.313001][ T6128]  ? __lock_acquire+0xab9/0xd20
[   99.313032][ T6128]  ? aa_sock_opt_perm+0x74/0x110
[   99.313059][ T6128]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   99.313081][ T6128]  ? __pfx_packet_setsockopt+0x10/0x10
[   99.313102][ T6128]  do_sock_setsockopt+0x25a/0x3e0
[   99.313125][ T6128]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   99.313148][ T6128]  ? __fget_files+0x2a/0x420
[   99.313176][ T6128]  __x64_sys_setsockopt+0x18b/0x220
[   99.313207][ T6128]  do_syscall_64+0xfa/0x3b0
[   99.313230][ T6128]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.313250][ T6128]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.313266][ T6128]  ? clear_bhb_loop+0x60/0xb0
[   99.313288][ T6128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.313304][ T6128] RIP: 0033:0x7fcdd2b8e929
[   99.313322][ T6128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   99.313336][ T6128] RSP: 002b:00007fcdd3a30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   99.313357][ T6128] RAX: ffffffffffffffda RBX: 00007fcdd2db5fa0 RCX: 00007fcdd2b8e929
[   99.313370][ T6128] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000004
[   99.313380][ T6128] RBP: 00007fcdd2c10b39 R08: 000000000000001c R09: 0000000000000000
[   99.313391][ T6128] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[   99.313401][ T6128] R13: 0000000000000000 R14: 00007fcdd2db5fa0 R15: 00007ffd69869178
[   99.313433][ T6128]  </TASK>
[   99.612174][ T6128] Mem-Info:
[   99.623967][ T6128] active_anon:5844 inactive_anon:0 isolated_anon:0
[   99.623967][ T6128]  active_file:1109 inactive_file:39823 isolated_file:0
[   99.623967][ T6128]  unevictable:768 dirty:1420 writeback:0
[   99.623967][ T6128]  slab_reclaimable:10270 slab_unreclaimable:96583
[   99.623967][ T6128]  mapped:29031 shmem:1780 pagetables:1093
[   99.623967][ T6128]  sec_pagetables:0 bounce:0
[   99.623967][ T6128]  kernel_misc_reclaimable:0
[   99.623967][ T6128]  free:1327460 free_pcp:20904 free_cma:0
[   99.704737][ T6128] Node 0 active_anon:28276kB inactive_anon:0kB active_file:4436kB inactive_file:159088kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116124kB dirty:5664kB writeback:0kB shmem:10384kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11900kB pagetables:4208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   99.810625][ T6128] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   99.811839][ T6122] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.863164][ T6128] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   99.873576][ T6122] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.902325][ T6128] lowmem_reserve[]: 0 2501 2502 2502 2502
[   99.908360][ T6128] Node 0 DMA32 free:1390792kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33928kB inactive_anon:0kB active_file:4436kB inactive_file:157268kB unevictable:1536kB writepending:5656kB present:3129332kB managed:2561080kB mlocked:0kB bounce:0kB free_pcp:54320kB local_pcp:39128kB free_cma:0kB
[   99.957784][ T6128] lowmem_reserve[]: 0 0 1 1 1
[   99.969482][ T6128] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:8kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[   99.999168][ T6128] lowmem_reserve[]: 0 0 0 0 0
[  100.004815][ T6128] Node 1 Normal free:3902988kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:16kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19256kB local_pcp:7672kB free_cma:0kB
[  100.041554][ T6128] lowmem_reserve[]: 0 0 0 0 0
[  100.123994][ T6128] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  100.174487][ T6128] Node 0 DMA32: 2*4kB (UE) 2*8kB (U) 37*16kB (U) 3*32kB (UME) 2*64kB (UE) 1*128kB (E) 9*256kB (UM) 9*512kB (UME) 6*1024kB (M) 6*2048kB (ME) 333*4096kB (M) = 1390280kB
[  100.233880][ T6128] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB
[  100.298371][ T6128] Node 1 Normal: 185*4kB (UME) 44*8kB (UME) 37*16kB (UME) 81*32kB (UME) 31*64kB (UME) 4*128kB (UME) 5*256kB (UME) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 949*4096kB (M) = 3903348kB
[  100.337920][ T6128] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  100.355582][ T6128] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  100.393819][ T6128] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  100.403519][ T6128] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  100.444677][ T6128] 43632 total pagecache pages
[  100.449607][ T6128] 0 pages in swap cache
[  100.456732][ T6151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'.
[  100.523801][ T6128] Free swap  = 124996kB
[  100.528042][ T6128] Total swap = 124996kB
[  100.532229][ T6128] 2097051 pages RAM
[  100.583737][ T6128] 0 pages HighMem/MovableOnly
[  100.588489][ T6128] 424675 pages reserved
[  100.592724][ T6128] 0 pages cma reserved
[  100.665314][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'.
[  100.824650][   T30] audit: type=1107 audit(1749361107.795:2): pid=6161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  100.893322][ T6163] team0: Device vti0 is of different type
[  101.524912][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.72'.
[  101.881588][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'.
[  101.968447][ T6213] macsec0: entered promiscuous mode
[  102.477630][ T6243] syz.2.88 uses obsolete (PF_INET,SOCK_PACKET)
[  102.627988][ T6249] netlink: 'syz.3.89': attribute type 2 has an invalid length.
[  102.807689][ T6239] IPVS: Error connecting to the multicast addr
[  103.103508][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'.
[  103.509537][ T6298] netlink: 108 bytes leftover after parsing attributes in process `syz.4.104'.
[  103.926435][ T6313] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  104.057888][ T6320] veth1_to_hsr: entered promiscuous mode
[  104.077071][ T6320] macvtap1: entered promiscuous mode
[  104.082646][ T6320] macvtap1: entered allmulticast mode
[  104.090314][ T6320] veth1_to_hsr: entered allmulticast mode
[  104.237968][ T6320] veth1_to_hsr: left allmulticast mode
[  104.253143][ T6320] veth1_to_hsr: left promiscuous mode
[  104.375172][ T6330] netlink: 32 bytes leftover after parsing attributes in process `syz.4.115'.
[  104.710593][ T6346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.122'.
[  104.731564][ T6343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.121'.
[  104.841123][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'.
[  105.010447][ T6365] 8021q: VLANs not supported on vcan0
[  106.289608][ T6403] __nla_validate_parse: 1 callbacks suppressed
[  106.289628][ T6403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.138'.
[  106.389121][ T6415] netlink: 88 bytes leftover after parsing attributes in process `syz.4.139'.
[  106.413738][ T6409] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  106.426300][ T5943] IPVS: starting estimator thread 0...
[  106.436149][ T6411] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  106.441301][ T6415] netlink: 24 bytes leftover after parsing attributes in process `syz.4.139'.
[  106.489576][ T6415] netlink: 24 bytes leftover after parsing attributes in process `syz.4.139'.
[  106.525028][ T6417] IPVS: using max 25 ests per chain, 60000 per kthread
[  106.541124][ T6406] netlink: 'syz.4.139': attribute type 9 has an invalid length.
[  106.563292][ T6406] netlink: 32 bytes leftover after parsing attributes in process `syz.4.139'.
[  106.759759][ T6428] netlink: 28 bytes leftover after parsing attributes in process `syz.3.145'.
[  106.792219][ T6428] netlink: 28 bytes leftover after parsing attributes in process `syz.3.145'.
[  106.902981][ T6427] syzkaller0: entered promiscuous mode
[  106.910858][ T6427] syzkaller0: entered allmulticast mode
[  107.372240][ T6455] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  107.419038][ T6457] trusted_key: syz.3.151 sent an empty control message without MSG_MORE.
[  107.517927][ T6459] netlink: 32 bytes leftover after parsing attributes in process `syz.4.155'.
[  108.834356][ T6462] batadv0: entered promiscuous mode
[  108.851502][ T6462] team0: entered promiscuous mode
[  108.897332][ T6462] team_slave_0: entered promiscuous mode
[  108.937449][ T6462] team_slave_1: entered promiscuous mode
[  108.966517][ T6462] hsr1: entered promiscuous mode
[  108.997560][ T6462] hsr1: entered allmulticast mode
[  109.002751][ T6462] batadv0: entered allmulticast mode
[  109.035788][ T6462] team0: entered allmulticast mode
[  109.040980][ T6462] team_slave_0: entered allmulticast mode
[  109.084695][ T6475] netlink: 256 bytes leftover after parsing attributes in process `syz.4.159'.
[  109.097355][ T6462] team_slave_1: entered allmulticast mode
[  109.121570][ T6474] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  109.169828][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.160'.
[  109.324290][ T6483] netlink: 'syz.3.162': attribute type 1 has an invalid length.
[  109.457775][ T6488] xt_hashlimit: overflow, try lower: 4294967295/0
[  109.652414][ T6494] macvlan0: entered promiscuous mode
[  109.659355][ T6494] macvlan0: entered allmulticast mode
[  109.701739][ T6500] lo: entered promiscuous mode
[  109.729530][ T6500] netlink: 'syz.1.171': attribute type 2 has an invalid length.
[  109.817412][ T6500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  109.918736][ T6507] netlink: 'syz.2.170': attribute type 21 has an invalid length.
[  110.208848][ T6527] netlink: 'syz.1.175': attribute type 1 has an invalid length.
[  110.663529][ T6549] vlan2: entered promiscuous mode
[  110.669451][ T6549] vlan2: entered allmulticast mode
[  110.675880][ T6549] hsr_slave_1: entered allmulticast mode
[  111.407364][ T6575] net veth1_virt_wifi .: renamed from virt_wifi0
[  111.569530][ T6587] __nla_validate_parse: 6 callbacks suppressed
[  111.569550][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.197'.
[  111.808394][ T6599] netdevsim netdevsim4: Direct firmware load for /.€ failed with error -2
[  111.845995][ T6599] netdevsim netdevsim4: Falling back to sysfs fallback for: /.€
[  111.919539][ T6603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  111.927062][ T6603] IPv6: NLM_F_CREATE should be set when creating new route
[  111.967171][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.203'.
[  112.438391][ T6626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.210'.
[  112.469240][ T6626] netlink: 120 bytes leftover after parsing attributes in process `syz.1.210'.
[  112.478933][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'.
[  112.581538][ T6626] netlink: 'syz.1.210': attribute type 1 has an invalid length.
[  112.595423][ T6600] netdevsim netdevsim4: Direct firmware load for /.€ failed with error -2
[  112.629835][ T6600] netdevsim netdevsim4: Falling back to sysfs fallback for: /.€
[  112.746746][ T6642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.210'.
[  112.940838][ T6633] bond1: (slave gretap1): making interface the new active one
[  112.951318][ T6633] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  113.166062][ T6642] 8021q: adding VLAN 0 to HW filter on device bond1
[  113.764087][ T6668] netlink: 'syz.3.226': attribute type 1 has an invalid length.
[  115.034653][ T6668] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  115.174726][ T6672] veth3: entered promiscuous mode
[  115.268416][ T6675] syzkaller1: entered promiscuous mode
[  115.287928][ T6675] syzkaller1: entered allmulticast mode
[  115.977587][ T6727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.242'.
[  116.076286][ T6728] netlink: 'syz.3.243': attribute type 13 has an invalid length.
[  116.554918][ T6732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.245'.
[  117.292920][ T6765] x_tables: duplicate underflow at hook 1
[  117.336720][ T6765] x_tables: duplicate underflow at hook 1
[  117.364124][ T6769] netlink: 39 bytes leftover after parsing attributes in process `syz.4.256'.
[  117.628986][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'.
[  117.855346][ T6800] netlink: 72 bytes leftover after parsing attributes in process `syz.4.264'.
[  117.947096][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.265'.
[  117.971846][ T6803] netlink: 48 bytes leftover after parsing attributes in process `syz.2.265'.
[  119.039370][ T6857] netlink: 'syz.0.280': attribute type 11 has an invalid length.
[  119.924146][ T6857] sit0: entered promiscuous mode
[  119.961084][ T6857] netlink: 'syz.0.280': attribute type 1 has an invalid length.
[  119.971255][ T6857] netlink: 1 bytes leftover after parsing attributes in process `syz.0.280'.
[  120.119485][ T6866] netlink: 'syz.2.282': attribute type 11 has an invalid length.
[  120.153882][ T6865] netlink: 'syz.2.282': attribute type 11 has an invalid length.
[  120.209098][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'.
[  120.380283][ T6878] netlink: 696 bytes leftover after parsing attributes in process `syz.4.287'.
[  120.490641][ T6887] openvswitch: netlink: Missing key (keys=40, expected=100)
[  120.528742][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.290'.
[  120.807513][ T6900] netlink: 'syz.1.294': attribute type 1 has an invalid length.
[  120.916742][ T6900] gretap2: entered promiscuous mode
[  121.080075][ T6904] syzkaller0: entered promiscuous mode
[  121.090282][ T6904] syzkaller0: entered allmulticast mode
[  121.205177][ T6925] netlink: 56 bytes leftover after parsing attributes in process `syz.1.301'.
[  121.275752][ T6929] netlink: 'syz.0.303': attribute type 1 has an invalid length.
[  122.381689][ T6930] __nla_validate_parse: 4 callbacks suppressed
[  122.381708][ T6930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'.
[  122.628483][ T6950] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  123.130771][ T6970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.311'.
[  123.187282][ T6970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.311'.
[  123.233506][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.312'.
[  123.684135][ T6998] netlink: 288 bytes leftover after parsing attributes in process `syz.1.318'.
[  123.698387][ T6998] Cannot find set identified by id 752 to match
[  123.918712][ T7005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.323'.
[  124.079036][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.327'.
[  124.341182][ T7036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'.
[  124.354048][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.330'.
[  124.367631][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.330'.
[  125.646096][ T7099] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  126.331465][ T7135] bond1: entered allmulticast mode
[  126.477786][ T7107] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  126.680106][ T7153] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  126.720323][ T7156] netlink: 'syz.0.370': attribute type 2 has an invalid length.
[  126.729165][ T7153] gretap0: entered promiscuous mode
[  126.748093][ T7156] nbd: must specify a device to reconfigure
[  126.820158][ T7159] netem: change failed
[  126.839812][ T7153] netlink: 'syz.4.368': attribute type 10 has an invalid length.
[  126.976926][ T7153] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.026202][ T7153] team0: Port device bond0 added
[  127.197904][ T7179] netlink: 'syz.2.375': attribute type 12 has an invalid length.
[  127.514518][ T7191] __nla_validate_parse: 10 callbacks suppressed
[  127.514538][ T7191] netlink: 64 bytes leftover after parsing attributes in process `syz.4.376'.
[  127.583111][ T7194] netlink: 388 bytes leftover after parsing attributes in process `syz.1.377'.
[  127.654856][ T7197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'.
[  127.697102][ T7197] netlink: 20 bytes leftover after parsing attributes in process `syz.2.378'.
[  127.991352][ T7213] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.382'.
[  128.082542][ T7211] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  128.161183][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'.
[  128.176423][ T7211] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[  128.196418][ T7221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.384'.
[  128.411969][ T7226] bridge0: entered promiscuous mode
[  128.466005][ T7226] bond0: entered promiscuous mode
[  128.481099][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'.
[  128.492774][ T7226] bond_slave_0: entered promiscuous mode
[  128.519897][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.388'.
[  128.528132][ T7226] bond_slave_1: entered promiscuous mode
[  128.558616][ T7226] bond0: left promiscuous mode
[  128.583929][ T7226] bond_slave_0: left promiscuous mode
[  128.589632][ T7226] bond_slave_1: left promiscuous mode
[  128.672618][ T7226] bridge0: left promiscuous mode
[  128.988576][ T7247] netlink: 40 bytes leftover after parsing attributes in process `syz.3.394'.
[  129.024925][ T7249] netlink: 'syz.3.394': attribute type 1 has an invalid length.
[  129.063123][ T7249] netlink: 'syz.3.394': attribute type 4 has an invalid length.
[  129.130095][ T7247] netlink: 'syz.3.394': attribute type 1 has an invalid length.
[  129.134473][ T7258] netlink: 'syz.3.394': attribute type 1 has an invalid length.
[  129.169010][ T7256] netlink: 'syz.1.396': attribute type 9 has an invalid length.
[  129.220605][ T7247] netlink: 'syz.3.394': attribute type 4 has an invalid length.
[  129.240126][ T7258] netlink: 'syz.3.394': attribute type 4 has an invalid length.
[  129.539405][ T7266] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.566453][ T7275] raw_sendmsg: syz.3.402 forgot to set AF_INET. Fix it!
[  129.585882][ T7266] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.681423][ T7269] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.688745][ T7269] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.705893][ T7269] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.713844][ T7269] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.418643][ T7354] ip6t_srh: unknown srh match flags  536B
[  131.692425][ T7353] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4)
[  131.706599][ T7364] : renamed from hsr0 (while UP)
[  132.034873][ T7373] vlan2: entered promiscuous mode
[  132.058602][ T7373] bridge0: entered promiscuous mode
[  132.502831][ T7395] bridge_slave_0: left allmulticast mode
[  132.586706][ T7395] bridge_slave_0: left promiscuous mode
[  132.592604][ T7395] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.665904][ T7395] bridge_slave_1: left allmulticast mode
[  132.671715][ T7395] bridge_slave_1: left promiscuous mode
[  132.690542][ T7395] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.721724][ T7395] bond0: (slave bond_slave_0): Releasing backup interface
[  132.759714][ T7414] __nla_validate_parse: 10 callbacks suppressed
[  132.759734][ T7414] netlink: 48 bytes leftover after parsing attributes in process `syz.1.445'.
[  132.806635][ T7395] bond0: (slave bond_slave_1): Releasing backup interface
[  132.850758][ T7395] team0: Port device team_slave_0 removed
[  132.880708][ T7395] team0: Port device team_slave_1 removed
[  132.899383][ T7395] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.907601][ T7395] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.916385][ T7395] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.924550][ T7395] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.945803][ T7411] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[  132.978263][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  132.989914][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  133.003630][ T7411] bond1: entered promiscuous mode
[  133.013812][ T7411] bond1: entered allmulticast mode
[  133.020505][ T7411] 8021q: adding VLAN 0 to HW filter on device bond1
[  133.058069][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.442'.
[  133.089531][ T1211] srz1: Port: 1 Link DOWN
[  133.209701][ T7426] validate_nla: 6 callbacks suppressed
[  133.209720][ T7426] netlink: 'syz.0.447': attribute type 1 has an invalid length.
[  133.286633][ T7431] netlink: 'syz.1.448': attribute type 10 has an invalid length.
[  133.327764][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'.
[  133.358198][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'.
[  133.375675][ T7431] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.432983][ T7431] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  133.469258][ T7435] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  133.514665][ T7435] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  133.547613][ T7435] gretap1: entered promiscuous mode
[  133.608017][ T7435] gretap1: entered allmulticast mode
[  133.672049][ T7451] netlink: 'syz.1.457': attribute type 3 has an invalid length.
[  133.816708][ T7450] bridge2: entered promiscuous mode
[  133.844920][ T7461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.460'.
[  133.865855][ T7450] bridge2: entered allmulticast mode
[  133.873059][ T7462] xt_policy: too many policy elements
[  134.097733][ T7465] bond_slave_0: entered promiscuous mode
[  134.103576][ T7465] bond_slave_1: entered promiscuous mode
[  134.109404][ T7465] batadv0: entered promiscuous mode
[  134.147572][ T7465] vlan4: entered promiscuous mode
[  134.168362][ T7465] bond0: entered promiscuous mode
[  134.481901][ T7480] sit0: left promiscuous mode
[  134.515624][ T7498] netlink: 'syz.2.468': attribute type 1 has an invalid length.
[  134.540820][ T7498] netlink: 224 bytes leftover after parsing attributes in process `syz.2.468'.
[  134.840090][ T7480] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.851107][ T7480] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.860492][ T7480] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.872688][ T7480] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.990705][ T7480] bridge2: left promiscuous mode
[  134.999295][ T7480] bridge2: left allmulticast mode
[  135.009696][ T7483] netlink: 'syz.3.466': attribute type 12 has an invalid length.
[  135.017822][ T7483] netlink: 'syz.3.466': attribute type 29 has an invalid length.
[  135.028818][ T7483] netlink: 148 bytes leftover after parsing attributes in process `syz.3.466'.
[  135.040156][ T7483] netlink: 'syz.3.466': attribute type 1 has an invalid length.
[  135.051038][ T7483] netlink: 47 bytes leftover after parsing attributes in process `syz.3.466'.
[  135.278452][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.472'.
[  135.707438][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.476'.
[  135.739009][ T7536] netlink: 'syz.4.476': attribute type 7 has an invalid length.
[  136.154162][ T7553] netlink: 'syz.2.483': attribute type 1 has an invalid length.
[  136.162061][ T7553] netlink: 'syz.2.483': attribute type 1 has an invalid length.
[  136.857405][ T7553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.954496][ T7553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.005715][ T7553] bond0 (unregistering): Released all slaves
[  137.089278][ T7571] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  137.481321][   T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.652585][   T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.680646][ T7600] syzkaller1: entered promiscuous mode
[  137.687048][ T7600] syzkaller1: entered allmulticast mode
[  137.771534][   T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.908985][   T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.237409][ T7614] __nla_validate_parse: 8 callbacks suppressed
[  138.237428][ T7614] netlink: 20 bytes leftover after parsing attributes in process `syz.3.501'.
[  138.291510][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'.
[  138.347726][ T7620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.501'.
[  138.485879][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  138.495725][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  138.504803][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  138.524248][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  138.532388][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  138.632607][   T49] bridge_slave_1: left allmulticast mode
[  138.639107][   T49] bridge_slave_1: left promiscuous mode
[  138.646308][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.669763][   T49] bridge_slave_0: left allmulticast mode
[  138.675931][   T49] bridge_slave_0: left promiscuous mode
[  138.683239][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.887504][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'.
[  139.301620][   T49] team0: Port device bond0 removed
[  139.316006][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  139.334607][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  139.348949][   T49] bond0 (unregistering): Released all slaves
[  139.480265][   T49] bond1 (unregistering): Released all slaves
[  139.502667][ T7627] netlink: 132 bytes leftover after parsing attributes in process `syz.1.504'.
[  139.530442][ T7633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.506'.
[  139.870929][ T7647] netlink: 156 bytes leftover after parsing attributes in process `syz.0.510'.
[  140.130279][ T7663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.513'.
[  140.394342][ T7679] xt_TPROXY: Can be used only with -p tcp or -p udp
[  140.579646][ T5852] Bluetooth: hci3: command tx timeout
[  140.638692][ T7692] openvswitch: netlink: Actions may not be safe on all matching packets
[  140.678180][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.519'.
[  140.738580][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.519'.
[  141.265082][   T49] hsr_slave_0: left promiscuous mode
[  141.296830][   T49] hsr_slave_1: left promiscuous mode
[  141.316298][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.325402][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.347139][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.373902][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.439364][   T49] veth1_macvtap: left promiscuous mode
[  141.448788][   T49] veth0_macvtap: left promiscuous mode
[  141.462565][   T49] veth1_vlan: left promiscuous mode
[  141.468966][   T49] veth0_vlan: left promiscuous mode
[  142.012783][   T49] team0 (unregistering): Port device team_slave_1 removed
[  142.058797][   T49] team0 (unregistering): Port device team_slave_0 removed
[  142.333106][ T7734] validate_nla: 2 callbacks suppressed
[  142.333126][ T7734] netlink: 'syz.1.531': attribute type 1 has an invalid length.
[  142.599911][ T7622] chnl_net:caif_netlink_parms(): no params data found
[  142.654579][ T5852] Bluetooth: hci3: command tx timeout
[  142.675748][ T7727] netlink: 'syz.0.529': attribute type 13 has an invalid length.
[  142.930827][ T7743] bridge3: entered promiscuous mode
[  142.939627][ T7743] bridge3: entered allmulticast mode
[  143.055238][ T7755] netlink: 'syz.1.537': attribute type 3 has an invalid length.
[  143.252626][ T7764] __nla_validate_parse: 2 callbacks suppressed
[  143.252646][ T7764] netlink: 36 bytes leftover after parsing attributes in process `syz.1.537'.
[  143.512144][ T7776] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.536163][ T7622] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.557946][ T7622] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.588710][ T7622] bridge_slave_0: entered allmulticast mode
[  143.628219][ T7622] bridge_slave_0: entered promiscuous mode
[  143.636109][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.543'.
[  143.645152][ T7622] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.645276][ T7622] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.687037][ T7622] bridge_slave_1: entered allmulticast mode
[  143.712134][ T7622] bridge_slave_1: entered promiscuous mode
[  143.843449][ T7785] netlink: 28 bytes leftover after parsing attributes in process `syz.0.543'.
[  144.138364][ T7622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.186942][ T7622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.285355][ T7804] netlink: 'syz.1.547': attribute type 10 has an invalid length.
[  144.391769][ T7622] team0: Port device team_slave_0 added
[  144.440616][ T7622] team0: Port device team_slave_1 added
[  144.457727][ T7806] netlink: 156 bytes leftover after parsing attributes in process `syz.0.548'.
[  144.734144][ T5852] Bluetooth: hci3: command tx timeout
[  144.795640][ T7622] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.837715][ T7622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.879964][ T7622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.910604][ T7622] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.933445][ T7622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.965899][ T7622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.036668][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.553'.
[  145.209321][ T7622] hsr_slave_0: entered promiscuous mode
[  145.218109][ T7622] hsr_slave_1: entered promiscuous mode
[  145.231723][ T7622] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  145.242392][ T7622] Cannot create hsr debugfs directory
[  145.587353][ T7845] netlink: 172 bytes leftover after parsing attributes in process `syz.3.557'.
[  145.689187][ T7845] netlink: 36 bytes leftover after parsing attributes in process `syz.3.557'.
[  145.740266][ T7849] netlink: 16 bytes leftover after parsing attributes in process `syz.3.557'.
[  145.870551][ T7850] vlan4: entered allmulticast mode
[  145.876087][ T7850] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  146.135668][ T7861] netlink: 'syz.0.562': attribute type 4 has an invalid length.
[  146.814395][ T5852] Bluetooth: hci3: command tx timeout
[  147.156922][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'.
[  147.321288][ T7622] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  147.339830][ T7911] netlink: 16 bytes leftover after parsing attributes in process `syz.3.575'.
[  147.359611][ T7622] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  147.400211][ T7622] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  147.437100][ T7622] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  147.439356][ T7911] xt_TCPMSS: Only works on TCP SYN packets
[  147.789743][ T7622] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.153271][ T7622] 8021q: adding VLAN 0 to HW filter on device team0
[  148.211000][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.218269][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.261803][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.269129][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.544072][ T7622] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  148.620775][ T7622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  148.866664][ T7974] netlink: 'syz.1.587': attribute type 13 has an invalid length.
[  148.940651][ T7974] veth0_macvtap: left promiscuous mode
[  149.007997][ T7974] macvtap0: entered allmulticast mode
[  149.080616][ T7974] macvtap0: refused to change device tx_queue_len
[  149.142199][ T7982] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  149.552560][ T7622] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.240753][ T8025] IPVS: ip_vs_edit_dest(): server weight less than zero
[  150.249545][ T8021] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96
[  150.272525][ T7503] IPVS: starting estimator thread 0...
[  150.299578][ T8025] __nla_validate_parse: 1 callbacks suppressed
[  150.299597][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'.
[  150.317049][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.598'.
[  150.383937][ T8029] IPVS: using max 24 ests per chain, 57600 per kthread
[  150.822101][ T7622] veth0_vlan: entered promiscuous mode
[  150.871472][ T7622] veth1_vlan: entered promiscuous mode
[  150.944132][ T8053] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  151.047554][ T7622] veth0_macvtap: entered promiscuous mode
[  151.089450][ T7622] veth1_macvtap: entered promiscuous mode
[  151.186714][ T7622] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.237224][ T7622] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.279053][ T7622] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.324149][ T7622] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.343147][ T7622] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.372078][ T8065] netlink: 80 bytes leftover after parsing attributes in process `syz.0.608'.
[  151.394437][ T7622] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.440654][ T8068] GUP no longer grows the stack in syz.1.609 (8068): 200000006000-20000000a000 (200000005000)
[  151.464056][ T8070] netlink: 'syz.3.607': attribute type 1 has an invalid length.
[  151.472660][ T8070] netlink: 224 bytes leftover after parsing attributes in process `syz.3.607'.
[  151.525124][ T8068] CPU: 1 UID: 0 PID: 8068 Comm: syz.1.609 Not tainted 6.15.0-syzkaller-12425-g82cbd06f327f #0 PREEMPT(full) 
[  151.525155][ T8068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  151.525166][ T8068] Call Trace:
[  151.525174][ T8068]  <TASK>
[  151.525183][ T8068]  dump_stack_lvl+0x189/0x250
[  151.525224][ T8068]  ? __pfx_dump_stack_lvl+0x10/0x10
[  151.525255][ T8068]  ? __pfx__printk+0x10/0x10
[  151.525273][ T8068]  ? find_vma+0xe7/0x160
[  151.525311][ T8068]  __get_user_pages+0x2a60/0x30b0
[  151.525385][ T8068]  ? __pfx___get_user_pages+0x10/0x10
[  151.525413][ T8068]  ? __gup_longterm_locked+0xbf7/0x15b0
[  151.525443][ T8068]  ? down_read_killable+0x1d1/0x350
[  151.525469][ T8068]  ? try_get_folio+0x633/0x660
[  151.525491][ T8068]  __gup_longterm_locked+0xd66/0x15b0
[  151.525525][ T8068]  ? try_grab_folio_fast+0x1be/0x4f0
[  151.525557][ T8068]  ? gup_fast_fallback+0x1afc/0x2260
[  151.525590][ T8068]  gup_fast_fallback+0x1cd4/0x2260
[  151.525664][ T8068]  ? __pfx_gup_fast_fallback+0x10/0x10
[  151.525691][ T8068]  ? trace_contention_end+0x39/0x120
[  151.525713][ T8068]  ? __mutex_lock+0x330/0xe80
[  151.525746][ T8068]  ? is_valid_gup_args+0x11f/0x200
[  151.525779][ T8068]  ? get_user_pages_fast+0x4d/0xb0
[  151.525811][ T8068]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  151.525842][ T8068]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  151.525864][ T8068]  ? wait_for_space+0x24d/0x2d0
[  151.525888][ T8068]  iov_iter_get_pages2+0x5e/0xa0
[  151.525914][ T8068]  __se_sys_vmsplice+0x548/0x10d0
[  151.525960][ T8068]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  151.525981][ T8068]  ? __lock_acquire+0xab9/0xd20
[  151.526010][ T8068]  ? __pfx_futex_wake+0x10/0x10
[  151.526048][ T8068]  ? __lock_acquire+0xab9/0xd20
[  151.526134][ T8068]  ? rcu_is_watching+0x15/0xb0
[  151.526159][ T8068]  ? do_syscall_64+0xbe/0x3b0
[  151.526192][ T8068]  do_syscall_64+0xfa/0x3b0
[  151.526216][ T8068]  ? lockdep_hardirqs_on+0x9c/0x150
[  151.526240][ T8068]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.526260][ T8068]  ? clear_bhb_loop+0x60/0xb0
[  151.526285][ T8068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.526303][ T8068] RIP: 0033:0x7f2238b8e929
[  151.526321][ T8068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  151.526336][ T8068] RSP: 002b:00007f22399ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  151.526359][ T8068] RAX: ffffffffffffffda RBX: 00007f2238db5fa0 RCX: 00007f2238b8e929
[  151.526372][ T8068] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009
[  151.526384][ T8068] RBP: 00007f2238c10b39 R08: 0000000000000000 R09: 0000000000000000
[  151.526396][ T8068] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  151.526407][ T8068] R13: 0000000000000000 R14: 00007f2238db5fa0 R15: 00007fff36de0588
[  151.526441][ T8068]  </TASK>
[  152.325517][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.333411][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.876580][ T8117] netlink: 'syz.3.617': attribute type 1 has an invalid length.
[  152.986596][ T6041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.036260][ T6041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.401153][ T8134] netlink: 'syz.2.620': attribute type 1 has an invalid length.
[  153.456095][   T51] Bluetooth: hci3: command 0x0405 tx timeout
[  153.551032][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.620'.
[  153.680192][ T8134] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.761985][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'.
[  153.785672][ T8146] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  153.997614][ T8162] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.625'.
[  154.041665][ T8165] tipc: Can't bind to reserved service type 0
[  154.109726][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.622'.
[  154.225415][   T65] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.328814][   T65] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.452589][   T65] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.611111][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.628'.
[  154.741553][   T65] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.239104][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'.
[  155.437835][   T65] bridge_slave_1: left allmulticast mode
[  155.443571][   T65] bridge_slave_1: left promiscuous mode
[  155.512889][   T65] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.548132][   T65] bridge_slave_0: left allmulticast mode
[  155.573735][   T65] bridge_slave_0: left promiscuous mode
[  155.579611][   T65] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.697860][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  155.708148][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  155.718524][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  155.735149][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  155.748245][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  155.770735][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.637'.
[  156.172272][ T8244] xt_hashlimit: overflow, try lower: 1125899906842624/8
[  156.195154][ T8244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.642'.
[  156.508661][   T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  156.526705][   T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  156.539643][   T65] bond0 (unregistering): Released all slaves
[  156.561874][ T8227] netlink: 44 bytes leftover after parsing attributes in process `syz.2.637'.
[  156.941592][ T8270] netlink: 'syz.2.649': attribute type 21 has an invalid length.
[  156.974915][ T8270] netlink: 156 bytes leftover after parsing attributes in process `syz.2.649'.
[  157.476536][ T8292] bridge_slave_1: mtu less than device minimum
[  157.712943][   T65] hsr_slave_0: left promiscuous mode
[  157.747967][   T65] hsr_slave_1: left promiscuous mode
[  157.766805][   T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.848602][   T65] batman_adv: batadv0: Removing interface: batadv_slave_0
[  157.856539][ T5852] Bluetooth: hci3: command tx timeout
[  157.895564][   T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.913370][   T65] batman_adv: batadv0: Removing interface: batadv_slave_1
[  158.051621][   T65] veth1_macvtap: left promiscuous mode
[  158.072357][   T65] veth0_macvtap: left promiscuous mode
[  158.100736][   T65] veth1_vlan: left promiscuous mode
[  158.117675][   T65] veth0_vlan: left promiscuous mode
[  159.944094][ T5852] Bluetooth: hci3: command tx timeout
[  160.114675][   T65] team0 (unregistering): Port device team_slave_1 removed
[  160.304371][   T65] team0 (unregistering): Port device team_slave_0 removed
[  162.014003][ T5852] Bluetooth: hci3: command tx timeout
[  162.385412][ T8332] netlink: 'syz.2.664': attribute type 11 has an invalid length.
[  162.393314][ T8332] netlink: 224 bytes leftover after parsing attributes in process `syz.2.664'.
[  162.632503][ T8226] chnl_net:caif_netlink_parms(): no params data found
[  162.675065][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'.
[  162.948213][ T8226] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.959640][ T8226] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.969316][ T8226] bridge_slave_0: entered allmulticast mode
[  162.991279][ T8226] bridge_slave_0: entered promiscuous mode
[  163.032951][ T8226] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.071224][ T8226] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.116288][ T8226] bridge_slave_1: entered allmulticast mode
[  163.164129][ T8226] bridge_slave_1: entered promiscuous mode
[  163.283195][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'.
[  163.350047][ T8367] x_tables: ip_tables: udp match: only valid for protocol 17
[  163.356212][ T8226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.460609][ T8226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.644213][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.677'.
[  163.670478][ T8226] team0: Port device team_slave_0 added
[  163.811416][ T8226] team0: Port device team_slave_1 added
[  163.939307][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'.
[  163.948726][ T8392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.679'.
[  164.052030][ T8226] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.071974][ T8226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.113835][ T5852] Bluetooth: hci3: command tx timeout
[  164.151179][ T8226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.172845][ T8226] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.192095][ T8226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.219152][ T8226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.326620][ T8404] openvswitch: netlink: Tunnel attr 16355 out of range max 16
[  164.448164][ T8226] hsr_slave_0: entered promiscuous mode
[  164.460957][ T8226] hsr_slave_1: entered promiscuous mode
[  164.469575][ T8226] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  164.483439][ T8226] Cannot create hsr debugfs directory
[  164.492502][ T8408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.684'.
[  164.875617][ T8429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.692'.
[  165.080195][ T8435] netlink: 96 bytes leftover after parsing attributes in process `syz.1.693'.
[  165.115231][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.694'.
[  165.418708][ T8448] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  165.732000][ T8459] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  165.766340][ T8459] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  165.789367][ T8459] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  165.795997][ T8226] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  165.816280][ T8226] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  165.872159][ T8226] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  165.923393][ T8226] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  166.241419][ T8495] netlink: 'syz.0.707': attribute type 1 has an invalid length.
[  166.452570][ T8226] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.597155][ T8226] 8021q: adding VLAN 0 to HW filter on device team0
[  166.660122][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.667387][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.745133][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.752725][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.834088][ T8511] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma?
[  166.995425][ T8226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  167.676850][ T8226] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.075583][ T8561] __nla_validate_parse: 3 callbacks suppressed
[  168.075602][ T8561] netlink: 72 bytes leftover after parsing attributes in process `syz.1.723'.
[  168.165905][ T8565] netlink: 'syz.2.724': attribute type 1 has an invalid length.
[  168.182140][ T8568] netlink: 'syz.0.726': attribute type 18 has an invalid length.
[  168.198786][ T8565] netlink: 228 bytes leftover after parsing attributes in process `syz.2.724'.
[  168.387612][ T8574] tunl0: entered promiscuous mode
[  168.435631][ T8574] netlink: 'syz.1.728': attribute type 3 has an invalid length.
[  168.464138][ T8574] netlink: 9 bytes leftover after parsing attributes in process `syz.1.728'.
[  168.526624][ T8582] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  168.778659][ T8226] veth0_vlan: entered promiscuous mode
[  168.807256][ T8226] veth1_vlan: entered promiscuous mode
[  168.918612][ T8226] veth0_macvtap: entered promiscuous mode
[  168.998434][ T8226] veth1_macvtap: entered promiscuous mode
[  169.081325][ T8226] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.099721][ T8605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.738'.
[  169.109449][ T8605] netlink: 'syz.0.738': attribute type 2 has an invalid length.
[  169.123486][ T8226] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.132787][ T8605] netlink: 'syz.0.738': attribute type 1 has an invalid length.
[  169.155549][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.738'.
[  169.180130][ T8226] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.198438][ T8226] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.219450][ T8226] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.231901][ T8226] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.584397][ T8632] netlink: 'syz.0.744': attribute type 33 has an invalid length.
[  169.634062][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.642057][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.713474][ T8635] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  169.744885][ T8639] xt_l2tp: v2 doesn't support IP mode
[  169.776812][ T8494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.794880][ T8494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.359879][ T8660] netlink: 'syz.3.756': attribute type 1 has an invalid length.
[  170.368779][ T8660] netlink: 224 bytes leftover after parsing attributes in process `syz.3.756'.
[  170.437302][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'.
[  170.585732][ T8654] sit3: entered promiscuous mode
[  170.590764][ T8654] sit3: entered allmulticast mode
[  170.783417][   T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.907482][   T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.228767][   T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.296852][ T8696] netlink: 28 bytes leftover after parsing attributes in process `syz.3.764'.
[  171.325480][ T8696] netlink: 28 bytes leftover after parsing attributes in process `syz.3.764'.
[  171.588814][ T8704] netlink: 'syz.1.766': attribute type 1 has an invalid length.
[  171.638109][ T8704] netlink: 224 bytes leftover after parsing attributes in process `syz.1.766'.
[  171.667513][   T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.884973][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  171.894192][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  171.902612][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  171.911733][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  171.920092][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  172.113533][ T8732] nbd: device at index 0 is going down
[  172.152747][ T8731] nbd: device at index 0 is going down
[  172.162019][ T8732] nbd: device at index 0 is going down
[  172.263505][ T8732] 8021q: adding VLAN 0 to HW filter on device team0
[  172.293260][ T8732] team0: Cannot enslave team device to itself
[  172.566598][   T36] bridge_slave_1: left allmulticast mode
[  172.572494][   T36] bridge_slave_1: left promiscuous mode
[  172.588987][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.612105][   T36] bridge_slave_0: left allmulticast mode
[  172.620082][   T36] bridge_slave_0: left promiscuous mode
[  172.630960][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.116308][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.129306][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.142080][   T36] bond0 (unregistering): Released all slaves
[  173.792467][ T8778] tipc: Started in network mode
[  173.809451][ T8778] tipc: Node identity f258954fca9, cluster identity 4711
[  173.835267][ T8778] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.878049][ T8793] __nla_validate_parse: 1 callbacks suppressed
[  173.878069][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.789'.
[  173.879177][ T8784] tipc: Resetting bearer <eth:syzkaller0>
[  173.903533][ T8794] netlink: 'syz.3.789': attribute type 1 has an invalid length.
[  173.913049][ T8794] netlink: 'syz.3.789': attribute type 1 has an invalid length.
[  173.935505][ T8781] syzkaller0: entered promiscuous mode
[  173.941299][ T8781] syzkaller0: entered allmulticast mode
[  173.988234][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.789'.
[  173.994536][ T8720] chnl_net:caif_netlink_parms(): no params data found
[  174.014425][   T51] Bluetooth: hci3: command tx timeout
[  174.056956][ T8767] tipc: Resetting bearer <eth:syzkaller0>
[  174.092947][ T8767] tipc: Disabling bearer <eth:syzkaller0>
[  174.109856][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.789'.
[  174.128012][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.789'.
[  174.172915][   T36] hsr_slave_0: left promiscuous mode
[  174.194072][   T36] hsr_slave_1: left promiscuous mode
[  174.201492][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.211250][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  174.232209][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.246520][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  174.300070][ T8799] xt_TPROXY: Can be used only with -p tcp or -p udp
[  174.312667][   T36] veth1_macvtap: left promiscuous mode
[  174.321781][ T8799] xt_TPROXY: Can be used only with -p tcp or -p udp
[  174.331175][   T36] veth0_macvtap: left promiscuous mode
[  174.340713][   T36] veth1_vlan: left promiscuous mode
[  174.346592][   T36] veth0_vlan: left promiscuous mode
[  174.586000][ T8809] netlink: 'syz.2.793': attribute type 1 has an invalid length.
[  174.599905][ T8809] netlink: 224 bytes leftover after parsing attributes in process `syz.2.793'.
[  174.848376][   T36] team0 (unregistering): Port device team_slave_1 removed
[  174.887881][   T36] team0 (unregistering): Port device team_slave_0 removed
[  175.390497][ T8804] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[  175.412746][ T8804] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  175.663423][ T8720] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.721644][ T8720] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.748283][ T8720] bridge_slave_0: entered allmulticast mode
[  175.796193][ T8720] bridge_slave_0: entered promiscuous mode
[  175.824416][ T8720] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.837727][ T8720] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.874006][ T8720] bridge_slave_1: entered allmulticast mode
[  175.892756][ T8720] bridge_slave_1: entered promiscuous mode
[  175.904439][ T8840] netlink: 76 bytes leftover after parsing attributes in process `syz.1.802'.
[  176.004628][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.802'.
[  176.031940][ T8843] netlink: 'syz.2.804': attribute type 1 has an invalid length.
[  176.094085][   T51] Bluetooth: hci3: command tx timeout
[  176.212260][ T8720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  176.261036][ T8843] 8021q: adding VLAN 0 to HW filter on device bond2
[  176.277168][ T8847] bond2: entered promiscuous mode
[  176.290057][ T8720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  176.437697][ T8720] team0: Port device team_slave_0 added
[  176.552250][ T8720] team0: Port device team_slave_1 added
[  176.584056][ T8871] netlink: 'syz.1.809': attribute type 10 has an invalid length.
[  176.647780][ T8877] netlink: 14 bytes leftover after parsing attributes in process `syz.1.809'.
[  176.907826][ T8877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.917241][ T8877] bond_slave_0: left promiscuous mode
[  176.932248][ T8877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.941743][ T8877] bond_slave_1: left promiscuous mode
[  176.957865][ T8877] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  176.968666][ T8877] batadv0: left promiscuous mode
[  176.995454][ T8877] bond0 (unregistering): Released all slaves
[  177.056077][ T8871] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.080772][ T8871] bridge_slave_1: left allmulticast mode
[  177.086693][ T8871] bridge_slave_1: left promiscuous mode
[  177.093251][ T8871] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.192605][ T8720] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.201584][ T8720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.241912][ T8720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.345147][ T8720] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.352161][ T8720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.396413][ T8720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.615746][ T8903] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  177.662372][ T8720] hsr_slave_0: entered promiscuous mode
[  177.710241][ T8720] hsr_slave_1: entered promiscuous mode
[  177.725785][ T8720] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  177.744278][ T8720] Cannot create hsr debugfs directory
[  177.776554][ T8913] sctp: [Deprecated]: syz.2.821 (pid 8913) Use of struct sctp_assoc_value in delayed_ack socket option.
[  177.776554][ T8913] Use struct sctp_sack_info instead
[  177.787675][ T8917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.823'.
[  177.829683][ T8918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  178.015148][ T8921] sch_tbf: burst 0 is lower than device bridge3 mtu (1514) !
[  178.102980][ T8933] netlink: 404 bytes leftover after parsing attributes in process `syz.2.827'.
[  178.131042][ T8932] netlink: 'syz.2.827': attribute type 2 has an invalid length.
[  178.179026][   T51] Bluetooth: hci3: command tx timeout
[  178.760704][ T8957] gretap0: entered promiscuous mode
[  178.778531][ T8957] gretap0: left promiscuous mode
[  179.021801][ T8962] vxcan0: entered allmulticast mode
[  179.045525][ T8720] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  179.086742][ T8720] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  179.117167][ T8720] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  179.150186][ T8720] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  179.499174][ T8990] __nla_validate_parse: 8 callbacks suppressed
[  179.499197][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'.
[  179.535689][ T8720] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.553996][ T8990] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  179.561302][ T8990] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.609211][ T8720] 8021q: adding VLAN 0 to HW filter on device team0
[  179.625093][ T8992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.847'.
[  179.656716][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.848'.
[  179.709725][ T9001] netlink: 44 bytes leftover after parsing attributes in process `syz.2.848'.
[  179.710187][ T8994] 8021q: adding VLAN 0 to HW filter on device bond3
[  179.750709][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.757984][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.784624][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.791886][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.965580][ T9010] netlink: 'syz.0.852': attribute type 13 has an invalid length.
[  180.242092][   T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  180.253850][   T51] Bluetooth: hci3: command tx timeout
[  180.271790][   T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  180.280185][ T7503] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  180.376809][ T9022] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.854'.
[  180.587691][ T9032] pim6reg: entered allmulticast mode
[  180.736146][ T7503] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  180.737950][ T8720] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.770223][ T9039] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  180.807901][ T9039] team0: Device ipvlan2 is already an upper device of the team interface
[  181.071065][ T9051] IPVS: Unknown mcast interface: pimreg
[  181.224734][  T917] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  181.252836][ T9065] netlink: 666 bytes leftover after parsing attributes in process `syz.2.866'.
[  181.279635][ T9066] netlink: 666 bytes leftover after parsing attributes in process `syz.2.866'.
[  181.672201][ T8720] veth0_vlan: entered promiscuous mode
[  181.716296][ T9085] netlink: 20 bytes leftover after parsing attributes in process `syz.3.873'.
[  181.723677][ T8720] veth1_vlan: entered promiscuous mode
[  181.731178][ T9085] netlink: 20 bytes leftover after parsing attributes in process `syz.3.873'.
[  181.736200][ T9086] nbd: must specify a device to reconfigure
[  181.759981][ T9085] netlink: 'syz.3.873': attribute type 1 has an invalid length.
[  181.860782][ T8720] veth0_macvtap: entered promiscuous mode
[  181.861731][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.876'.
[  181.885134][ T9091] netlink: 'syz.0.875': attribute type 4 has an invalid length.
[  181.899750][ T8720] veth1_macvtap: entered promiscuous mode
[  182.001594][ T8720] batman_adv: batadv0: Interface activated: batadv_slave_0
[  182.048268][ T8720] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.122197][ T8720] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.181877][ T8720] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.192935][ T8720] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.202141][ T8720] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.400083][ T5972] IPVS: starting estimator thread 0...
[  182.523843][ T9113] IPVS: using max 30 ests per chain, 72000 per kthread
[  182.856668][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.875835][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.950359][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.960540][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.193213][ T9142] xt_policy: neither incoming nor outgoing policy selected
[  183.392609][ T9150] netlink: 'syz.0.892': attribute type 11 has an invalid length.
[  183.442386][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.477268][ T9150] Cannot find set identified by id 752 to match
[  183.640886][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.721187][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.809429][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.921344][   T13] bridge_slave_1: left allmulticast mode
[  183.931579][   T13] bridge_slave_1: left promiscuous mode
[  183.938599][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.949378][   T13] bridge_slave_0: left allmulticast mode
[  183.955420][   T13] bridge_slave_0: left promiscuous mode
[  183.961279][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.254131][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  184.564406][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  184.587203][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.616670][   T13] bond0 (unregistering): Released all slaves
[  184.648771][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  184.661586][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  184.670541][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  184.678521][    C0] vcan0: j1939_tp_rxtimer: 0xffff888023e64c00: rx timeout, send abort
[  184.690456][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  184.695099][    C1] Illegal XDP return value 16128 on prog  (id 345) dev veth0_to_bridge, expect packet loss!
[  184.699030][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  184.716093][ T9161] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  184.970148][ T9180] syz.0.903 uses old SIOCAX25GETINFO
[  185.441935][   T13] hsr_slave_0: left promiscuous mode
[  185.463326][   T13] hsr_slave_1: left promiscuous mode
[  185.494647][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.502115][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.561809][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.585913][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.598602][ T9204] Unsupported ieee802154 address type: 0
[  185.625402][   T13] veth1_macvtap: left promiscuous mode
[  185.639221][   T13] veth0_macvtap: left promiscuous mode
[  185.647620][   T13] veth1_vlan: left promiscuous mode
[  185.653054][   T13] veth0_vlan: left promiscuous mode
[  186.028515][ T9214] Cannot find del_set index 5 as target
[  186.705012][   T13] team0 (unregistering): Port device team_slave_1 removed
[  186.746005][   T13] team0 (unregistering): Port device team_slave_0 removed
[  186.814199][ T5852] Bluetooth: hci3: command tx timeout
[  187.323717][ T9220] bridge0: port 3(vlan2) entered blocking state
[  187.351322][ T9220] bridge0: port 3(vlan2) entered disabled state
[  187.365029][ T9220] vlan2: entered allmulticast mode
[  187.371462][ T9220] bridge0: entered allmulticast mode
[  187.385240][ T9220] vlan2: left allmulticast mode
[  187.390161][ T9220] bridge0: left allmulticast mode
[  187.454160][ T9229] __nla_validate_parse: 8 callbacks suppressed
[  187.454179][ T9229] netlink: 48 bytes leftover after parsing attributes in process `syz.0.919'.
[  187.609631][ T9173] chnl_net:caif_netlink_parms(): no params data found
[  187.614146][ T9233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.920'.
[  187.654370][ T9232] netlink: 20 bytes leftover after parsing attributes in process `syz.1.920'.
[  187.718272][ T9232] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  187.743412][ T9238] netlink: 'syz.3.921': attribute type 11 has an invalid length.
[  187.763579][ T9238] netlink: 'syz.3.921': attribute type 11 has an invalid length.
[  187.774065][ T9238] netlink: 224 bytes leftover after parsing attributes in process `syz.3.921'.
[  187.935721][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'.
[  187.989902][ T9173] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.002194][ T9173] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.012050][ T9173] bridge_slave_0: entered allmulticast mode
[  188.031857][ T9173] bridge_slave_0: entered promiscuous mode
[  188.044362][ T9173] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.052046][ T9173] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.072107][ T9173] bridge_slave_1: entered allmulticast mode
[  188.091924][ T9173] bridge_slave_1: entered promiscuous mode
[  188.180352][ T9173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.190421][ T9256] netlink: 'syz.1.927': attribute type 5 has an invalid length.
[  188.212281][ T9173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.365179][ T9173] team0: Port device team_slave_0 added
[  188.385253][ T9173] team0: Port device team_slave_1 added
[  188.407334][ T9268] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter
[  188.410271][ T9270] netlink: 16 bytes leftover after parsing attributes in process `syz.3.930'.
[  188.431031][ T9264] macsec1: entered allmulticast mode
[  188.437168][ T9264] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  188.447974][ T9264] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  188.674540][ T9173] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.691721][ T9173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.720169][ T9173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.732829][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'.
[  188.735731][ T9173] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.749641][ T9283] netlink: 16 bytes leftover after parsing attributes in process `syz.1.933'.
[  188.787246][ T9173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.815125][ T9173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.893950][ T5852] Bluetooth: hci3: command tx timeout
[  188.928938][ T9173] hsr_slave_0: entered promiscuous mode
[  188.936146][ T9173] hsr_slave_1: entered promiscuous mode
[  188.941642][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.938'.
[  188.942545][ T9173] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  188.958926][ T9173] Cannot create hsr debugfs directory
[  189.113454][ T9297] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  189.155772][ T9300] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  189.210251][ T9304] netlink: 'syz.0.942': attribute type 1 has an invalid length.
[  189.314526][ T9306] xt_ecn: cannot match TCP bits for non-tcp packets
[  189.525095][ T9314] netlink: 'syz.3.947': attribute type 4 has an invalid length.
[  189.681758][ T9173] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  189.741389][ T9173] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  189.792774][ T9173] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  189.822746][ T9173] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  190.058981][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.947'.
[  190.122670][ T9173] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.180525][ T9173] 8021q: adding VLAN 0 to HW filter on device team0
[  190.241171][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.248554][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state
[  190.309068][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.316298][ T1318] bridge0: port 2(bridge_slave_1) entered forwarding state
[  190.426495][ T9344] bridge0: entered allmulticast mode
[  190.471209][ T9173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  190.687126][ T7511] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  190.876584][ T7511] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  190.974022][ T5852] Bluetooth: hci3: command tx timeout
[  190.989936][ T9173] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.379991][ T9378] macvtap1: entered promiscuous mode
[  191.392014][ T9378] vlan0: entered promiscuous mode
[  191.411789][ T9378] macvtap1: entered allmulticast mode
[  191.433993][ T9378] vlan0: entered allmulticast mode
[  191.439314][ T9378] veth0_vlan: entered allmulticast mode
[  191.549941][ T9395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  191.682594][ T9173] veth0_vlan: entered promiscuous mode
[  191.737014][ T9173] veth1_vlan: entered promiscuous mode
[  191.798117][ T9400] xt_recent: Unsupported userspace flags (00000061)
[  191.830132][ T9173] veth0_macvtap: entered promiscuous mode
[  191.872488][ T9173] veth1_macvtap: entered promiscuous mode
[  191.953008][ T9173] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.989521][ T9173] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.036323][ T9173] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.066956][ T9173] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.086009][ T9173] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.097124][ T9173] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.371180][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.384313][ T3483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.392304][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.399839][ T3483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.493915][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  192.531707][ T9431] __nla_validate_parse: 7 callbacks suppressed
[  192.531727][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.979'.
[  192.641856][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.979'.
[  192.764079][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.980'.
[  193.449459][   T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.522365][ T9456] netlink: 186448 bytes leftover after parsing attributes in process `syz.0.987'.
[  193.650746][   T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.861960][   T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.088900][   T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.276300][   T36] bridge_slave_1: left allmulticast mode
[  194.292538][   T36] bridge_slave_1: left promiscuous mode
[  194.306387][ T9477] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.348326][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.359411][ T9481] netlink: 'syz.0.990': attribute type 11 has an invalid length.
[  194.370060][ T9481] netlink: 224 bytes leftover after parsing attributes in process `syz.0.990'.
[  194.389778][   T36] bridge_slave_0: left allmulticast mode
[  194.397379][   T36] bridge_slave_0: left promiscuous mode
[  194.409979][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.419698][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  194.753456][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  194.771126][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  194.779775][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  194.793221][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  194.807026][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  194.959609][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  194.970937][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  194.982046][   T36] bond0 (unregistering): Released all slaves
[  195.220547][ T9495] netlink: 'syz.0.995': attribute type 1 has an invalid length.
[  195.240707][ T9495] netlink: 224 bytes leftover after parsing attributes in process `syz.0.995'.
[  195.257396][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.995'.
[  195.493387][ T9501] netlink: 128 bytes leftover after parsing attributes in process `syz.0.998'.
[  195.565259][ T9504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1000'.
[  195.596537][ T9504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1000'.
[  195.680765][ T9510] netlink: 'syz.3.1001': attribute type 21 has an invalid length.
[  195.704048][   T36] hsr_slave_0: left promiscuous mode
[  195.713851][   T36] hsr_slave_1: left promiscuous mode
[  195.720064][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  195.728238][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.740588][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  195.761435][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.812354][   T36] veth1_macvtap: left promiscuous mode
[  195.841225][   T36] veth0_macvtap: left promiscuous mode
[  195.849198][   T36] veth1_vlan: left promiscuous mode
[  195.860701][   T36] veth0_vlan: left promiscuous mode
[  196.420663][   T36] team0 (unregistering): Port device team_slave_1 removed
[  196.462316][   T36] team0 (unregistering): Port device team_slave_0 removed
[  196.882033][ T9524] macsec0: entered promiscuous mode
[  196.887413][ T9524] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:579
[  196.894925][   T51] Bluetooth: hci3: command tx timeout
[  196.896763][ T9524] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 9524, name: syz.0.1002
[  196.911288][ T9524] preempt_count: 201, expected: 0
[  196.916359][ T9524] RCU nest depth: 0, expected: 0
[  196.921316][ T9524] 3 locks held by syz.0.1002/9524:
[  196.926507][ T9524]  #0: ffffffff8fa13eb8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  196.936306][ T9524]  #1: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  196.945641][ T9524]  #2: ffff888026c84368 (&macsec_netdev_addr_lock_key/1){+...}-{3:3}, at: dev_uc_add+0x67/0x120
[  196.956219][ T9524] Preemption disabled at:
[  196.956234][ T9524] [<ffffffff89512dc6>] dev_uc_add+0x56/0x120
[  196.966801][ T9524] CPU: 1 UID: 0 PID: 9524 Comm: syz.0.1002 Not tainted 6.15.0-syzkaller-12425-g82cbd06f327f #0 PREEMPT(full) 
[  196.966817][ T9524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  196.966824][ T9524] Call Trace:
[  196.966829][ T9524]  <TASK>
[  196.966834][ T9524]  dump_stack_lvl+0x189/0x250
[  196.966857][ T9524]  ? __pfx_dump_stack_lvl+0x10/0x10
[  196.966879][ T9524]  ? __pfx__printk+0x10/0x10
[  196.966893][ T9524]  ? print_lock_name+0xde/0x100
[  196.966904][ T9524]  ? dev_uc_add+0x56/0x120
[  196.966918][ T9524]  __might_resched+0x495/0x610
[  196.966928][ T9524]  ? stack_depot_save_flags+0x40/0x900
[  196.966945][ T9524]  ? dev_uc_add+0x56/0x120
[  196.966956][ T9524]  ? __pfx___might_resched+0x10/0x10
[  196.966967][ T9524]  ? kasan_save_track+0x4f/0x80
[  196.966986][ T9524]  __mutex_lock+0x106/0xe80
[  196.967008][ T9524]  ? dev_set_promiscuity+0x10e/0x260
[  196.967021][ T9524]  ? __pfx___mutex_lock+0x10/0x10
[  196.967033][ T9524]  ? netdev_info+0x10a/0x160
[  196.967050][ T9524]  ? __pfx_netdev_info+0x10/0x10
[  196.967069][ T9524]  dev_set_promiscuity+0x10e/0x260
[  196.967082][ T9524]  ? __pfx_macsec_dev_change_rx_flags+0x10/0x10
[  196.967093][ T9524]  __dev_set_promiscuity+0x531/0x740
[  196.967107][ T9524]  ? __hw_addr_add_ex+0x3c5/0x770
[  196.967120][ T9524]  __dev_set_rx_mode+0x17c/0x260
[  196.967133][ T9524]  dev_uc_add+0xc8/0x120
[  196.967147][ T9524]  macsec_dev_open+0xd9/0x530
[  196.967158][ T9524]  ? ib_device_get_by_netdev+0x46b/0x4d0
[  196.967172][ T9524]  ? __pfx_macsec_dev_open+0x10/0x10
[  196.967182][ T9524]  ? ib_device_get_by_netdev+0x84/0x4d0
[  196.967194][ T9524]  ? hsr_netdev_notify+0x29e/0xcf0
[  196.967206][ T9524]  ? __pfx_ib_device_get_by_netdev+0x10/0x10
[  196.967221][ T9524]  ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500
[  196.967241][ T9524]  ? ip6_route_dev_notify+0x9a/0x5b0
[  196.967260][ T9524]  ? notifier_call_chain+0x3bf/0x3e0
[  196.967275][ T9524]  __dev_open+0x46d/0x880
[  196.967294][ T9524]  ? __pfx___dev_open+0x10/0x10
[  196.967315][ T9524]  __dev_change_flags+0x1ea/0x6d0
[  196.967327][ T9524]  ? validate_linkmsg+0x765/0x950
[  196.967342][ T9524]  ? __pfx___dev_change_flags+0x10/0x10
[  196.967359][ T9524]  rtnl_newlink_create+0x555/0xb00
[  196.967380][ T9524]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  196.967390][ T9524]  ? rtnl_newlink+0x8db/0x1c70
[  196.967407][ T9524]  ? __pfx___mutex_lock+0x10/0x10
[  196.967427][ T9524]  ? ns_capable+0x8a/0xf0
[  196.967445][ T9524]  rtnl_newlink+0x16d6/0x1c70
[  196.967470][ T9524]  ? __pfx_rtnl_newlink+0x10/0x10
[  196.967490][ T9524]  ? __lock_acquire+0xab9/0xd20
[  196.967520][ T9524]  ? __lock_acquire+0xab9/0xd20
[  196.967546][ T9524]  ? is_bpf_text_address+0x26/0x2b0
[  196.967559][ T9524]  ? is_bpf_text_address+0x292/0x2b0
[  196.967569][ T9524]  ? is_bpf_text_address+0x26/0x2b0
[  196.967580][ T9524]  ? kernel_text_address+0xa5/0xe0
[  196.967601][ T9524]  ? __lock_acquire+0xab9/0xd20
[  196.967630][ T9524]  ? __pfx_rtnl_newlink+0x10/0x10
[  196.967646][ T9524]  rtnetlink_rcv_msg+0x7cf/0xb70
[  196.967665][ T9524]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  196.967680][ T9524]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  196.967705][ T9524]  netlink_rcv_skb+0x205/0x470
[  196.967718][ T9524]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  196.967734][ T9524]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  196.967752][ T9524]  ? netlink_deliver_tap+0x2e/0x1b0
[  196.967763][ T9524]  ? netlink_deliver_tap+0x2e/0x1b0
[  196.967777][ T9524]  netlink_unicast+0x758/0x8d0
[  196.967799][ T9524]  netlink_sendmsg+0x805/0xb30
[  196.967822][ T9524]  ? __pfx_netlink_sendmsg+0x10/0x10
[  196.967836][ T9524]  ? aa_sock_msg_perm+0x94/0x160
[  196.967852][ T9524]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  196.967865][ T9524]  ? __pfx_netlink_sendmsg+0x10/0x10
[  196.967877][ T9524]  __sock_sendmsg+0x21c/0x270
[  196.967894][ T9524]  ____sys_sendmsg+0x505/0x830
[  196.967910][ T9524]  ? __pfx_____sys_sendmsg+0x10/0x10
[  196.967927][ T9524]  ? import_iovec+0x74/0xa0
[  196.967942][ T9524]  ___sys_sendmsg+0x21f/0x2a0
[  196.967955][ T9524]  ? __pfx____sys_sendmsg+0x10/0x10
[  196.967989][ T9524]  ? __fget_files+0x2a/0x420
[  196.968001][ T9524]  ? __fget_files+0x3a0/0x420
[  196.968020][ T9524]  __x64_sys_sendmsg+0x19b/0x260
[  196.968034][ T9524]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  196.968052][ T9524]  ? rcu_is_watching+0x15/0xb0
[  196.968066][ T9524]  ? do_syscall_64+0xbe/0x3b0
[  196.968083][ T9524]  do_syscall_64+0xfa/0x3b0
[  196.968097][ T9524]  ? lockdep_hardirqs_on+0x9c/0x150
[  196.968110][ T9524]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.968121][ T9524]  ? clear_bhb_loop+0x60/0xb0
[  196.968134][ T9524]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.968150][ T9524] RIP: 0033:0x7fcdd2b8e929
[  196.968162][ T9524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  196.968172][ T9524] RSP: 002b:00007fcdd39ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  196.968184][ T9524] RAX: ffffffffffffffda RBX: 00007fcdd2db6160 RCX: 00007fcdd2b8e929
[  196.968192][ T9524] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000006
[  196.968199][ T9524] RBP: 00007fcdd2c10b39 R08: 0000000000000000 R09: 0000000000000000
[  196.968206][ T9524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  196.968212][ T9524] R13: 0000000000000000 R14: 00007fcdd2db6160 R15: 00007ffd69869178
[  196.968230][ T9524]  </TASK>
[  196.968235][ T9524] 
[  197.484747][ T9524] =============================
[  197.489594][ T9524] [ BUG: Invalid wait context ]
[  197.496440][ T9524] 6.15.0-syzkaller-12425-g82cbd06f327f #0 Tainted: G        W          
[  197.504859][ T9524] -----------------------------
[  197.509701][ T9524] syz.0.1002/9524 is trying to lock:
[  197.516123][ T9524] ffff888059988d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260
[  197.526580][ T9524] other info that might help us debug this:
[  197.532499][ T9524] context-{5:5}
[  197.535972][ T9524] 3 locks held by syz.0.1002/9524:
[  197.541099][ T9524]  #0: ffffffff8fa13eb8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  197.550795][ T9524]  #1: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  197.559869][ T9524]  #2: ffff888026c84368 (&macsec_netdev_addr_lock_key/1){+...}-{3:3}, at: dev_uc_add+0x67/0x120
[  197.570522][ T9524] stack backtrace:
[  197.574258][ T9524] CPU: 1 UID: 0 PID: 9524 Comm: syz.0.1002 Tainted: G        W           6.15.0-syzkaller-12425-g82cbd06f327f #0 PREEMPT(full) 
[  197.574281][ T9524] Tainted: [W]=WARN
[  197.574286][ T9524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  197.574295][ T9524] Call Trace:
[  197.574304][ T9524]  <TASK>
[  197.574312][ T9524]  dump_stack_lvl+0x189/0x250
[  197.574338][ T9524]  ? __pfx_dump_stack_lvl+0x10/0x10
[  197.574359][ T9524]  ? __pfx__printk+0x10/0x10
[  197.574375][ T9524]  ? print_lock_name+0xde/0x100
[  197.574390][ T9524]  __lock_acquire+0xbcb/0xd20
[  197.574412][ T9524]  ? dev_set_promiscuity+0x10e/0x260
[  197.574426][ T9524]  lock_acquire+0x120/0x360
[  197.574443][ T9524]  ? dev_set_promiscuity+0x10e/0x260
[  197.574461][ T9524]  __mutex_lock+0x182/0xe80
[  197.574486][ T9524]  ? dev_set_promiscuity+0x10e/0x260
[  197.574502][ T9524]  ? dev_set_promiscuity+0x10e/0x260
[  197.574516][ T9524]  ? __pfx___mutex_lock+0x10/0x10
[  197.574532][ T9524]  ? netdev_info+0x10a/0x160
[  197.574550][ T9524]  ? __pfx_netdev_info+0x10/0x10
[  197.574570][ T9524]  dev_set_promiscuity+0x10e/0x260
[  197.574584][ T9524]  ? __pfx_macsec_dev_change_rx_flags+0x10/0x10
[  197.574599][ T9524]  __dev_set_promiscuity+0x531/0x740
[  197.574614][ T9524]  ? __hw_addr_add_ex+0x3c5/0x770
[  197.574629][ T9524]  __dev_set_rx_mode+0x17c/0x260
[  197.574643][ T9524]  dev_uc_add+0xc8/0x120
[  197.574658][ T9524]  macsec_dev_open+0xd9/0x530
[  197.574671][ T9524]  ? ib_device_get_by_netdev+0x46b/0x4d0
[  197.574689][ T9524]  ? __pfx_macsec_dev_open+0x10/0x10
[  197.574701][ T9524]  ? ib_device_get_by_netdev+0x84/0x4d0
[  197.574717][ T9524]  ? hsr_netdev_notify+0x29e/0xcf0
[  197.574729][ T9524]  ? __pfx_ib_device_get_by_netdev+0x10/0x10
[  197.574747][ T9524]  ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500
[  197.574771][ T9524]  ? ip6_route_dev_notify+0x9a/0x5b0
[  197.574792][ T9524]  ? notifier_call_chain+0x3bf/0x3e0
[  197.574808][ T9524]  __dev_open+0x46d/0x880
[  197.574829][ T9524]  ? __pfx___dev_open+0x10/0x10
[  197.574850][ T9524]  __dev_change_flags+0x1ea/0x6d0
[  197.574865][ T9524]  ? validate_linkmsg+0x765/0x950
[  197.574882][ T9524]  ? __pfx___dev_change_flags+0x10/0x10
[  197.574899][ T9524]  rtnl_newlink_create+0x555/0xb00
[  197.574917][ T9524]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  197.574930][ T9524]  ? rtnl_newlink+0x8db/0x1c70
[  197.574950][ T9524]  ? __pfx___mutex_lock+0x10/0x10
[  197.574971][ T9524]  ? ns_capable+0x8a/0xf0
[  197.574992][ T9524]  rtnl_newlink+0x16d6/0x1c70
[  197.575017][ T9524]  ? __pfx_rtnl_newlink+0x10/0x10
[  197.575039][ T9524]  ? __lock_acquire+0xab9/0xd20
[  197.575061][ T9524]  ? __lock_acquire+0xab9/0xd20
[  197.575085][ T9524]  ? is_bpf_text_address+0x26/0x2b0
[  197.575099][ T9524]  ? is_bpf_text_address+0x292/0x2b0
[  197.575111][ T9524]  ? is_bpf_text_address+0x26/0x2b0
[  197.575124][ T9524]  ? kernel_text_address+0xa5/0xe0
[  197.575146][ T9524]  ? __lock_acquire+0xab9/0xd20
[  197.575172][ T9524]  ? __pfx_rtnl_newlink+0x10/0x10
[  197.575191][ T9524]  rtnetlink_rcv_msg+0x7cf/0xb70
[  197.575212][ T9524]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  197.575231][ T9524]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  197.575256][ T9524]  netlink_rcv_skb+0x205/0x470
[  197.575270][ T9524]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  197.575290][ T9524]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  197.575307][ T9524]  ? netlink_deliver_tap+0x2e/0x1b0
[  197.575320][ T9524]  ? netlink_deliver_tap+0x2e/0x1b0
[  197.575334][ T9524]  netlink_unicast+0x758/0x8d0
[  197.575357][ T9524]  netlink_sendmsg+0x805/0xb30
[  197.575374][ T9524]  ? __pfx_netlink_sendmsg+0x10/0x10
[  197.575388][ T9524]  ? aa_sock_msg_perm+0x94/0x160
[  197.575406][ T9524]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  197.575424][ T9524]  ? __pfx_netlink_sendmsg+0x10/0x10
[  197.575437][ T9524]  __sock_sendmsg+0x21c/0x270
[  197.575456][ T9524]  ____sys_sendmsg+0x505/0x830
[  197.575479][ T9524]  ? __pfx_____sys_sendmsg+0x10/0x10
[  197.575496][ T9524]  ? import_iovec+0x74/0xa0
[  197.575511][ T9524]  ___sys_sendmsg+0x21f/0x2a0
[  197.575526][ T9524]  ? __pfx____sys_sendmsg+0x10/0x10
[  197.575552][ T9524]  ? __fget_files+0x2a/0x420
[  197.575567][ T9524]  ? __fget_files+0x3a0/0x420
[  197.575586][ T9524]  __x64_sys_sendmsg+0x19b/0x260
[  197.575601][ T9524]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  197.575619][ T9524]  ? rcu_is_watching+0x15/0xb0
[  197.575633][ T9524]  ? do_syscall_64+0xbe/0x3b0
[  197.575653][ T9524]  do_syscall_64+0xfa/0x3b0
[  197.575670][ T9524]  ? lockdep_hardirqs_on+0x9c/0x150
[  197.575687][ T9524]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.575700][ T9524]  ? clear_bhb_loop+0x60/0xb0
[  197.575716][ T9524]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.575729][ T9524] RIP: 0033:0x7fcdd2b8e929
[  197.575744][ T9524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  197.575755][ T9524] RSP: 002b:00007fcdd39ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  197.575772][ T9524] RAX: ffffffffffffffda RBX: 00007fcdd2db6160 RCX: 00007fcdd2b8e929
[  197.575782][ T9524] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000006
[  197.575791][ T9524] RBP: 00007fcdd2c10b39 R08: 0000000000000000 R09: 0000000000000000
[  197.575799][ T9524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  197.575808][ T9524] R13: 0000000000000000 R14: 00007fcdd2db6160 R15: 00007ffd69869178
[  197.575823][ T9524]  </TASK>
[  198.092500][ T9524] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  198.150816][ T9487] chnl_net:caif_netlink_parms(): no params data found
[  198.244036][ T9487] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.251225][ T9487] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.258688][ T9487] bridge_slave_0: entered allmulticast mode
[  198.267033][ T9487] bridge_slave_0: entered promiscuous mode
[  198.274652][ T9487] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.281822][ T9487] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.289105][ T9487] bridge_slave_1: entered allmulticast mode
[  198.295992][ T9487] bridge_slave_1: entered promiscuous mode
[  198.314501][ T9487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.335727][ T9487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.369344][ T9487] team0: Port device team_slave_0 added
[  198.378135][ T9487] team0: Port device team_slave_1 added
[  198.395351][ T9487] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.402327][ T9487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.428597][ T9487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.440839][ T9487] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.448093][ T9487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.474500][ T9487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.503032][ T9487] hsr_slave_0: entered promiscuous mode
[  198.510354][ T9487] hsr_slave_1: entered promiscuous mode
[  198.516658][ T9487] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.524479][ T9487] Cannot create hsr debugfs directory
[  198.807601][ T9487] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  198.816979][ T9487] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  198.834344][ T9487] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  198.842885][ T9487] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  198.862209][ T9487] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.869365][ T9487] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.877286][ T9487] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.884460][ T9487] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.919864][ T9487] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.933092][ T3483] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.942295][ T3483] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.955524][ T9487] 8021q: adding VLAN 0 to HW filter on device team0
[  198.966012][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.973310][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.974126][   T51] Bluetooth: hci3: command tx timeout
[  198.989756][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.996856][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.118465][ T9487] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.264803][ T9487] veth0_vlan: entered promiscuous mode
[  199.273465][ T9487] veth1_vlan: entered promiscuous mode
[  199.296543][ T9487] veth0_macvtap: entered promiscuous mode
[  199.305015][ T9487] veth1_macvtap: entered promiscuous mode
[  199.318040][ T9487] batman_adv: batadv0: Interface activated: batadv_slave_0
[  199.329522][ T9487] batman_adv: batadv0: Interface activated: batadv_slave_1
[  199.341632][ T9487] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.351106][ T9487] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.360041][ T9487] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.369836][ T9487] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.398321][ T9487] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht'
[  199.419008][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.420423][ T9487] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht'
[  199.435211][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.457592][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.465944][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.087808][ T3483] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.628143][ T3483] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.689359][ T3483] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.748818][ T3483] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.865793][ T3483] bridge_slave_1: left allmulticast mode
[  202.872015][ T3483] bridge_slave_1: left promiscuous mode
[  202.877936][ T3483] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.886984][ T3483] bridge_slave_0: left allmulticast mode
[  202.892662][ T3483] bridge_slave_0: left promiscuous mode
[  202.899582][ T3483] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.996580][ T3483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  203.006841][ T3483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  203.016541][ T3483] bond0 (unregistering): Released all slaves
[  203.210514][ T3483] hsr_slave_0: left promiscuous mode
[  203.217538][ T3483] hsr_slave_1: left promiscuous mode
[  203.223377][ T3483] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.234093][ T3483] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.241920][ T3483] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.252561][ T3483] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.266024][ T3483] veth1_macvtap: left promiscuous mode
[  203.271571][ T3483] veth0_macvtap: left promiscuous mode
[  203.277799][ T3483] veth1_vlan: left promiscuous mode
[  203.284947][ T3483] veth0_vlan: left promiscuous mode
[  203.446074][ T3483] team0 (unregistering): Port device team_slave_1 removed
[  203.462564][ T3483] team0 (unregistering): Port device team_slave_0 removed