last executing test programs:

38.137271762s ago: executing program 1 (id=269):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000004c0)=@routing={0x3b, 0x8, 0x0, 0x78, 0x0, [@remote, @empty, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}]}, 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000300000000000004000000080002000500000006000b0002"], 0x24}}, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="24000000000000002900000032000015ff050000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000000b0f2496cd00d33dd098e2da89f6be11489a64df6dc22e39dcb69f18459784f0b123cafed003568316fdab99735d0b1f729673d798481cdac0f4915d0f491295872a7a6b4d251e64873dc0eb79c87cb55a2dea110d5a1548485441630ddb0684a222b9716e2eb906318576260fc651d882a0d0068a582d247d060382adff231f0394ff063daf256d8242fb24935b93177df89e1569693ea6c3c79c725e88b58f62153b13bdd2780"], 0x40, 0x7ffffff7}}], 0x1, 0x24004084)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007060000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x8, [@func={0x2, 0x0, 0x0, 0xc, 0x4}, @struct={0x3, 0x5, 0x0, 0x4, 0x1, 0xa38, [{0x2, 0x5, 0x85}, {0x5, 0x1, 0x7}, {0xf, 0x2, 0x3}, {0x3, 0x4}, {0xd, 0x2, 0x9}]}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x3}, @volatile={0x9, 0x0, 0x0, 0x9, 0x3}, @datasec={0x6, 0x2, 0x0, 0xf, 0x2, [{0x5, 0x80000001, 0x2}, {0x1, 0x9, 0x1}], "b62f"}]}, {0x0, [0x0, 0x83, 0x5f, 0x0, 0x30, 0x0]}}, &(0x7f0000000600)=""/150, 0xb4, 0x96, 0x0, 0x4, 0x0, @void, @value}, 0x28)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r5}, 0x4)
mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x2022)
ioctl$SIOCSIFHWADDR(r8, 0xff04, 0x0)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000280)={<r9=>0x0, @loopback, @dev}, &(0x7f0000000380)=0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x3, 0x10001, 0xe, 0x8000ff, 0x92, 0x1, 0x5f, '\x00', r9, r6, 0x3, 0x2, 0x1000, 0x0, @void, @value, @void, @value}, 0x50)

38.137124975s ago: executing program 1 (id=269):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000004c0)=@routing={0x3b, 0x8, 0x0, 0x78, 0x0, [@remote, @empty, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}]}, 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000300000000000004000000080002000500000006000b0002"], 0x24}}, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="24000000000000002900000032000015ff050000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000000b0f2496cd00d33dd098e2da89f6be11489a64df6dc22e39dcb69f18459784f0b123cafed003568316fdab99735d0b1f729673d798481cdac0f4915d0f491295872a7a6b4d251e64873dc0eb79c87cb55a2dea110d5a1548485441630ddb0684a222b9716e2eb906318576260fc651d882a0d0068a582d247d060382adff231f0394ff063daf256d8242fb24935b93177df89e1569693ea6c3c79c725e88b58f62153b13bdd2780"], 0x40, 0x7ffffff7}}], 0x1, 0x24004084)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007060000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x8, [@func={0x2, 0x0, 0x0, 0xc, 0x4}, @struct={0x3, 0x5, 0x0, 0x4, 0x1, 0xa38, [{0x2, 0x5, 0x85}, {0x5, 0x1, 0x7}, {0xf, 0x2, 0x3}, {0x3, 0x4}, {0xd, 0x2, 0x9}]}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x3}, @volatile={0x9, 0x0, 0x0, 0x9, 0x3}, @datasec={0x6, 0x2, 0x0, 0xf, 0x2, [{0x5, 0x80000001, 0x2}, {0x1, 0x9, 0x1}], "b62f"}]}, {0x0, [0x0, 0x83, 0x5f, 0x0, 0x30, 0x0]}}, &(0x7f0000000600)=""/150, 0xb4, 0x96, 0x0, 0x4, 0x0, @void, @value}, 0x28)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r5}, 0x4)
mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x2022)
ioctl$SIOCSIFHWADDR(r8, 0xff04, 0x0)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000280)={<r9=>0x0, @loopback, @dev}, &(0x7f0000000380)=0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x3, 0x10001, 0xe, 0x8000ff, 0x92, 0x1, 0x5f, '\x00', r9, r6, 0x3, 0x2, 0x1000, 0x0, @void, @value, @void, @value}, 0x50)

38.136989447s ago: executing program 1 (id=269):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000004c0)=@routing={0x3b, 0x8, 0x0, 0x78, 0x0, [@remote, @empty, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}]}, 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000300000000000004000000080002000500000006000b0002"], 0x24}}, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="24000000000000002900000032000015ff050000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000000b0f2496cd00d33dd098e2da89f6be11489a64df6dc22e39dcb69f18459784f0b123cafed003568316fdab99735d0b1f729673d798481cdac0f4915d0f491295872a7a6b4d251e64873dc0eb79c87cb55a2dea110d5a1548485441630ddb0684a222b9716e2eb906318576260fc651d882a0d0068a582d247d060382adff231f0394ff063daf256d8242fb24935b93177df89e1569693ea6c3c79c725e88b58f62153b13bdd2780"], 0x40, 0x7ffffff7}}], 0x1, 0x24004084)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007060000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x8, [@func={0x2, 0x0, 0x0, 0xc, 0x4}, @struct={0x3, 0x5, 0x0, 0x4, 0x1, 0xa38, [{0x2, 0x5, 0x85}, {0x5, 0x1, 0x7}, {0xf, 0x2, 0x3}, {0x3, 0x4}, {0xd, 0x2, 0x9}]}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x3}, @volatile={0x9, 0x0, 0x0, 0x9, 0x3}, @datasec={0x6, 0x2, 0x0, 0xf, 0x2, [{0x5, 0x80000001, 0x2}, {0x1, 0x9, 0x1}], "b62f"}]}, {0x0, [0x0, 0x83, 0x5f, 0x0, 0x30, 0x0]}}, &(0x7f0000000600)=""/150, 0xb4, 0x96, 0x0, 0x4, 0x0, @void, @value}, 0x28)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r5}, 0x4)
mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x2022)
ioctl$SIOCSIFHWADDR(r8, 0xff04, 0x0)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000280)={<r9=>0x0, @loopback, @dev}, &(0x7f0000000380)=0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x3, 0x10001, 0xe, 0x8000ff, 0x92, 0x1, 0x5f, '\x00', r9, r6, 0x3, 0x2, 0x1000, 0x0, @void, @value, @void, @value}, 0x50)

32.283822696s ago: executing program 1 (id=269):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000004c0)=@routing={0x3b, 0x8, 0x0, 0x78, 0x0, [@remote, @empty, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}]}, 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000300000000000004000000080002000500000006000b0002"], 0x24}}, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="24000000000000002900000032000015ff050000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000000b0f2496cd00d33dd098e2da89f6be11489a64df6dc22e39dcb69f18459784f0b123cafed003568316fdab99735d0b1f729673d798481cdac0f4915d0f491295872a7a6b4d251e64873dc0eb79c87cb55a2dea110d5a1548485441630ddb0684a222b9716e2eb906318576260fc651d882a0d0068a582d247d060382adff231f0394ff063daf256d8242fb24935b93177df89e1569693ea6c3c79c725e88b58f62153b13bdd2780"], 0x40, 0x7ffffff7}}], 0x1, 0x24004084)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007060000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x8, [@func={0x2, 0x0, 0x0, 0xc, 0x4}, @struct={0x3, 0x5, 0x0, 0x4, 0x1, 0xa38, [{0x2, 0x5, 0x85}, {0x5, 0x1, 0x7}, {0xf, 0x2, 0x3}, {0x3, 0x4}, {0xd, 0x2, 0x9}]}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x3}, @volatile={0x9, 0x0, 0x0, 0x9, 0x3}, @datasec={0x6, 0x2, 0x0, 0xf, 0x2, [{0x5, 0x80000001, 0x2}, {0x1, 0x9, 0x1}], "b62f"}]}, {0x0, [0x0, 0x83, 0x5f, 0x0, 0x30, 0x0]}}, &(0x7f0000000600)=""/150, 0xb4, 0x96, 0x0, 0x4, 0x0, @void, @value}, 0x28)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r5}, 0x4)
mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x2022)
ioctl$SIOCSIFHWADDR(r8, 0xff04, 0x0)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000280)={<r9=>0x0, @loopback, @dev}, &(0x7f0000000380)=0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x3, 0x10001, 0xe, 0x8000ff, 0x92, 0x1, 0x5f, '\x00', r9, r6, 0x3, 0x2, 0x1000, 0x0, @void, @value, @void, @value}, 0x50)

21.183908668s ago: executing program 1 (id=269):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000004c0)=@routing={0x3b, 0x8, 0x0, 0x78, 0x0, [@remote, @empty, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}]}, 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000300000000000004000000080002000500000006000b0002"], 0x24}}, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="24000000000000002900000032000015ff050000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000000b0f2496cd00d33dd098e2da89f6be11489a64df6dc22e39dcb69f18459784f0b123cafed003568316fdab99735d0b1f729673d798481cdac0f4915d0f491295872a7a6b4d251e64873dc0eb79c87cb55a2dea110d5a1548485441630ddb0684a222b9716e2eb906318576260fc651d882a0d0068a582d247d060382adff231f0394ff063daf256d8242fb24935b93177df89e1569693ea6c3c79c725e88b58f62153b13bdd2780"], 0x40, 0x7ffffff7}}], 0x1, 0x24004084)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007060000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x8, [@func={0x2, 0x0, 0x0, 0xc, 0x4}, @struct={0x3, 0x5, 0x0, 0x4, 0x1, 0xa38, [{0x2, 0x5, 0x85}, {0x5, 0x1, 0x7}, {0xf, 0x2, 0x3}, {0x3, 0x4}, {0xd, 0x2, 0x9}]}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x3}, @volatile={0x9, 0x0, 0x0, 0x9, 0x3}, @datasec={0x6, 0x2, 0x0, 0xf, 0x2, [{0x5, 0x80000001, 0x2}, {0x1, 0x9, 0x1}], "b62f"}]}, {0x0, [0x0, 0x83, 0x5f, 0x0, 0x30, 0x0]}}, &(0x7f0000000600)=""/150, 0xb4, 0x96, 0x0, 0x4, 0x0, @void, @value}, 0x28)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r5}, 0x4)
mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x2022)
ioctl$SIOCSIFHWADDR(r8, 0xff04, 0x0)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000280)={<r9=>0x0, @loopback, @dev}, &(0x7f0000000380)=0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x3, 0x10001, 0xe, 0x8000ff, 0x92, 0x1, 0x5f, '\x00', r9, r6, 0x3, 0x2, 0x1000, 0x0, @void, @value, @void, @value}, 0x50)

9.293498305s ago: executing program 1 (id=269):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000004c0)=@routing={0x3b, 0x8, 0x0, 0x78, 0x0, [@remote, @empty, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}]}, 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000300000000000004000000080002000500000006000b0002"], 0x24}}, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="24000000000000002900000032000015ff050000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000000b0f2496cd00d33dd098e2da89f6be11489a64df6dc22e39dcb69f18459784f0b123cafed003568316fdab99735d0b1f729673d798481cdac0f4915d0f491295872a7a6b4d251e64873dc0eb79c87cb55a2dea110d5a1548485441630ddb0684a222b9716e2eb906318576260fc651d882a0d0068a582d247d060382adff231f0394ff063daf256d8242fb24935b93177df89e1569693ea6c3c79c725e88b58f62153b13bdd2780"], 0x40, 0x7ffffff7}}], 0x1, 0x24004084)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007060000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x8, [@func={0x2, 0x0, 0x0, 0xc, 0x4}, @struct={0x3, 0x5, 0x0, 0x4, 0x1, 0xa38, [{0x2, 0x5, 0x85}, {0x5, 0x1, 0x7}, {0xf, 0x2, 0x3}, {0x3, 0x4}, {0xd, 0x2, 0x9}]}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x3}, @volatile={0x9, 0x0, 0x0, 0x9, 0x3}, @datasec={0x6, 0x2, 0x0, 0xf, 0x2, [{0x5, 0x80000001, 0x2}, {0x1, 0x9, 0x1}], "b62f"}]}, {0x0, [0x0, 0x83, 0x5f, 0x0, 0x30, 0x0]}}, &(0x7f0000000600)=""/150, 0xb4, 0x96, 0x0, 0x4, 0x0, @void, @value}, 0x28)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r5}, 0x4)
mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x2022)
ioctl$SIOCSIFHWADDR(r8, 0xff04, 0x0)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000280)={<r9=>0x0, @loopback, @dev}, &(0x7f0000000380)=0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x3, 0x10001, 0xe, 0x8000ff, 0x92, 0x1, 0x5f, '\x00', r9, r6, 0x3, 0x2, 0x1000, 0x0, @void, @value, @void, @value}, 0x50)

2.68568571s ago: executing program 2 (id=1415):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085f309000000000095000000008582b46337664205ff88c239000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

2.596097242s ago: executing program 2 (id=1417):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4)
sendmsg$unix(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="826d87688c04", 0x6}, {&(0x7f0000001a40)="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", 0xebb}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000"], 0x18}, 0x0)
ioctl$SIOCX25SCUDMATCHLEN(r6, 0x89e7, &(0x7f0000000400)={0x2c})
recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x120)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='xdp_bulk_tx\x00', r6, 0x0, 0x7}, 0x18)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf256200000008000300", @ANYRES32=r3, @ANYBLOB="f0687d66d3ffcd4acdbb05fa39be211ea19c5f34fbe42f1a4bf56270048c1145b2b98da039c573b1c26d84ae6e4bc616f7eb6d9188150025abe7d5c7e1bb7d964428e73d96c5946341ac737a2dac95d25d3aa2d1963c2632eced3bc962756bbee4a7241e893177fe590fe32407837a9852afa031eb9dbde2384cb4daa8e664c3f5e722f54e5191536f948b73446d70acdee6e427d4ac3695236835a71d20493629e146c367ce28e89d23b3382731a2bf0b544bed4690"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10800)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000", 0x28}, {&(0x7f00000006c0)="e622a80a2b88a271cd340500000000000000a9546e4fdaeb374e6cf2a7dbdf1910a2abc1bb", 0x25}], 0x2}, 0x0)
sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)={0x224, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4c8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1e1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5a4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xd}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x10}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4e}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1f}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x10000, 0x8, 0x8, 0x7, 0x5325]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3ff}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x11c}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x401}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1a8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x468}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x7e, 0x7, 0x1ff, 0x9, 0xffff, 0x1ff, 0x5]}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6c2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x130}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x7, 0xf2dfd9d8, 0xe37, 0x40, 0x0, 0x1000]}]}, @NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x3, 0xffff0001, 0xe06d, 0x0, 0x4d60, 0xfb, 0x5]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0xfffffff0, 0x0, 0x9, 0x3, 0xfffffff9]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x2, 0x7]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x10}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x10}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4c3}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffff7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x17}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x36}]}]}, 0x224}}, 0x20000000)

2.3614924s ago: executing program 2 (id=1421):
socket$inet6(0xa, 0x40000080806, 0x0)
socket$kcm(0xa, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20000010)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040), 0x10)
listen(r1, 0x0)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080), 0x10)
sendmmsg(r2, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)='|', 0x1}], 0x1}}], 0x1, 0x4008014)
r3 = accept4$unix(r1, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0)
recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x107, 0x12, 0x0, 0x0)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})

2.24263671s ago: executing program 4 (id=1422):
r0 = socket$kcm(0x29, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffff"], 0x6f4}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getpeername$inet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000040), &(0x7f00000001c0)='%pS    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xf, 0x6, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x63, 0xa, 0xff00}, [@call={0x55}, @exit, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x8, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003})
ioctl$TUNSETLINK(r4, 0x400454cd, 0x306)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_bt_hci(r3, 0x400448cb, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r5, &(0x7f0000000040)="05000000010000", 0x7)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000000)="3f000000010000", 0x7)
sendmmsg$inet(r0, &(0x7f00000089c0)=[{{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000001ac0)="15ac", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000004000)="23be5f", 0x3}], 0x1}}], 0x2, 0x8c1)
close(r0)

1.852927768s ago: executing program 4 (id=1425):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x1, @rand_addr=' \x01\x00', @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @mcast2, [@fragment={0x2f, 0x0, 0xf, 0x0, 0x0, 0x0, 0x65}, @hopopts={0x2e}]}}}}}}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x4b, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r0, 0x0, 0x7}, 0x38)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x20040000)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet6(0xa, 0x800000000000002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000003c0)={'bond0\x00', &(0x7f0000000340)=@ethtool_coalesce={0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80001, 0x0, 0xfffffffc, 0x0, 0x4, 0x8000}})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0)
mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x100000b, 0x1010, r3, 0x80b8c000)
r5 = socket$netlink(0x10, 0x3, 0x12)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r5, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0)

1.617206503s ago: executing program 4 (id=1428):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839}, 0x24}}, 0x0)

1.456962607s ago: executing program 4 (id=1429):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132})
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000020000", 0x39}], 0x1)

1.232323916s ago: executing program 4 (id=1431):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000040000000a000000010c0200f2c0827fb15843aca789c594ff8eab3759d6777314349cb1b6736acac770899eb08a6cc54ef1da81872eac3039f5de33e5a86b2e218714b6f7a5ecc9091127f93553aa4c7012302791561ed4b5af2f9d7f061ab60b013bde6055bb835caeabbfca738e2d82046d162df918067bb2d165bb6d43f71e30759acfb41bd6cf1cdd416e6e7088016021da822d58eb57745adbbb04543532c2b0fc2ba3d3ee9e94f29ab4a1d8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x40000062)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x3000000, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.210927428s ago: executing program 0 (id=1432):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, 0x0, 0xc800)

1.091531262s ago: executing program 3 (id=1433):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, r0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x61]}}, 0x0, 0x1c, 0x0, 0x0, 0x1, 0x0, @void, @value}, 0x28)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x12)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0)

1.001219708s ago: executing program 0 (id=1434):
r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @netrom}, [@netrom, @bcast, @null, @rose, @bcast, @rose, @rose, @netrom]}, &(0x7f0000000140)=0x48)
close(r0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x6, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xaf)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000180), &(0x7f0000000280), 0x8}, 0x20)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000004480)=ANY=[@ANYBLOB="a01300001900010026bd7000000000001d010900381212803112d88023006200b440027209e07c9b346694bef4b5e4ec123fb99aa0440d8c9b6abc2633e0af00ed1099805cfaffe3ab8f2f08d5280e6b3547ec3909fc66ba8b1aefad2c59167356"], 0x13a0}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000340)={0x4, 0x5, 0x1, 0x2, 0x4, 0x0, [{0x0, 0xbbb, 0x1, '\x00', 0x280}, {0x6, 0x7, 0x902, '\x00', 0x800}, {0x80000000, 0x7, 0x10, '\x00', 0x800}, {0xce, 0x8, 0x7fff, '\x00', 0x900}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r5, &(0x7f0000000180)=ANY=[@ANYRESDEC=r5], 0x38)
syz_emit_ethernet(0x56, &(0x7f0000001440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004d00004810000000000690780a210104ac1414aa44140a01ac1414bb00000000e000000100000000070b04030e00012b05fc0f00000000fc", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="52200000907800007041d046e11daec7ac4f848ccbab0f3465279512cb2461f7672888b6ac8bd1ceff5e41e1bdbf2daa200d716ceb272239eda73e82c56877c84300cb83ed6fdb28910e4d5fe25cba670d9fa0d430984f2b57f2725482b95ec91c5f7afd097c3d3a3804ad598ae733e72ea225d562158fc6fd655a1eac37bf9bc13d815a494a0ed1347666613ba1fd25c81520dca4"], 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@RTM_DELMDB={0x38, 0x55, 0x211, 0x70bd2a, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x1, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0xd}, 0x18367}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x20)
accept$netrom(r5, 0x0, &(0x7f0000000440))
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in=@local, 0x100, 0x0, 0x2, 0x0, 0xa, 0x10}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, {0x0, 0x40000000, 0x0, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in6=@empty, 0xfffffffe, 0x4}}, 0xe8)
readv(r3, &(0x7f0000001740)=[{&(0x7f0000001540)=""/13, 0xd}, {&(0x7f0000001580)=""/248, 0xf8}, {&(0x7f0000001680)=""/3, 0x3}, {&(0x7f00000016c0)=""/84, 0x54}], 0x4)
sendmmsg$inet6(r7, &(0x7f0000000380)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0)
clock_gettime(0x0, &(0x7f00000004c0))
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', "bcbd13b603e0f7b3bfa8909ef43c0aeb", "0000fd9f", "b08068ebce17ab00"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, 0x0)
bind$can_j1939(r9, &(0x7f00000000c0), 0x18)

972.772129ms ago: executing program 4 (id=1435):
r0 = socket$kcm(0x29, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffff"], 0x6f4}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getpeername$inet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000040), &(0x7f00000001c0)='%pS    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xf, 0x6, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x63, 0xa, 0xff00}, [@call={0x55}, @exit, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x8, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003})
ioctl$TUNSETLINK(r4, 0x400454cd, 0x306)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_bt_hci(r3, 0x400448cb, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r5, &(0x7f0000000040)="05000000010000", 0x7)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000000)="3f000000010000", 0x7)
sendmmsg$inet(r0, &(0x7f00000089c0)=[{{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000001ac0)="15ac", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000004000)="23be5f", 0x3}], 0x1}}], 0x2, 0x8c1)
close(r0)

920.074208ms ago: executing program 3 (id=1436):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1d00000000000000000000000000000085680000", @ANYRES32, @ANYBLOB="0000000000f2488cf6d58c0d0f00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000)
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0x1000})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x0, 0x53, 0x0, 0x0, 0x2000, 0x0, @void, @value}, 0x28)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r8, 0x1, 0x0, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7)
sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x2c, r9, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x69d04b0f8018158)
write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0x280)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="20000000ffffffffffffaaaaaaaaaaaa86dd60721910001011ff20010000000000000000000000000000ff02"], 0x4a)

787.460091ms ago: executing program 0 (id=1437):
r0 = getpid()
syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00')
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000011c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x3, 0x10, 0x1, 0x2, 0xfffffffd, 0x4}})
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x34, r4, 0x1, 0x3, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001300), 0xffffffffffffffff)
r6 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x2c, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000000)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000000000000dc0000004000cd8c950000000000000009fc28b1482b936bea2775ff91a44de632176d77d61341cfc22a0495e249d25a6dde2dbafde21ff66cd143f0e7ab4d980205adbaea3bba507996ad3d6e4965b56879d122e534246fc902a51f828874c896c788c7483a4be000f900b3820074e813fa8e0000000000000000000014ef3b812f"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001180)={r7, 0x0, 0x19, 0x1005, &(0x7f00000000c0)="101b46513919eb2330b7fc87ae7de17d4e87e05dd79653904d", &(0x7f0000001b00)=""/4101, 0xb0, 0x0, 0x13, 0xb6, &(0x7f0000001080)="302fde71bebc728148fae5183e824c085d2db6", &(0x7f00000010c0)="65f3eae4eb4c2db4873b2dcdfe9752be01333434fc7731ca1e317390aa359f64996fcd634e1742b5b7a451b5d9fb7b96646f859cc8bae16878014a449811b53d8cf6214ffbf59e3a0eddb2171cd944e3b73d7862e5c9775fd2b91d48349002a2d9d4c76ff1361b113d45fa24a6bca281490a5cdb8a0d2b49416e18cb32f63e2e4575d458772b2f5904c6e03f8301ba8249b157600456587889ff36ee4311b66a2d7cb1dfd34c4a609900e003b940842150c37a9d1c37", 0x7, 0x0, 0x100}, 0x50)

502.416421ms ago: executing program 3 (id=1438):
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008084}, 0x20000080)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100020e00000029bd70000000000005000600000000000a0000000000000000000000000000002300000000000000004000000000000005000500000000000a000080ff000000000000000000000000000000000000000000000000000000020013"], 0x70}}, 0x0)

476.369311ms ago: executing program 0 (id=1439):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x0)

340.215871ms ago: executing program 3 (id=1440):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
close(r0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRES64=0x0], 0x20) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x775c9000) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000003100030000000000000000e2d5938e5310c3dcfffaa7a13d4f85077a0ad4cc0ed62e334a28167ebfc09bc27c337166030178a4fe57b4c870e8e72564c80d641f0cd9f2dc3599e005ff00000000000000000000000000d6c564739287cd9f169ba29339a7d0fc400758519c7e87b314ded0d378f592c86095a348eefd0de882ea0e61c0520fe2a6c04285b7ba4c0e30ef77e73eeffb9a7554898f4aade77079cfd66e606647bbc8c677721362af86f999eb23d66eb09fea266d9b009ba454967e46276e5d7a3750ce5a4cd5e791b493e88f3242bb48adc74c2ad7a5f864c05d017ff994b348c5efd5ca31561026930754d1492eca8866f75025579b7148e3dbd0e4e53a53a4963bc76890d274125fd1c6082e110db23c0baab3d8308e33d5989f8b2b4d5ef4504afb054c7744126e4f18f58ad0b804b56379bfc3cc491c9daf0fabdc26"], 0x1c}}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2dbe25bd7000fbdb3a254400000008000300", @ANYRES32=r6, @ANYBLOB="0c00990008000000110000000400a9b7c2cc000c002380080014003affffff0400bf00040008010a00180003030303030300000b0024004896a4e085800400140070e40300070005000800081318b421bd"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="055e0e7006f89e68924c9d0382d567e2", 0x10) (async)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2f, 0x3, 0x0, 0x0, 0x4, 0x5, 0xc8, 0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x45, [0x67, 0xffff0001]}}) (async)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000)=<r7=>0x0, &(0x7f00000000c0)=0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611000000000000095000000004c9ebc000000c481542c18a2174b9226eb03bd1be2d685c3194888ac15a53994414a525fdaf7a71887520614e4a6bf08641322246145a55c1334ba38af793cd38b38e6735f78a7a0e0859907"], &(0x7f0000000980)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x4, '\x00', r7, 0xb, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

248.411844ms ago: executing program 0 (id=1441):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132})
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000030000", 0x39}], 0x1)

188.997807ms ago: executing program 2 (id=1442):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000001000000000a38000000000a01010000000000000000050000000900010073797a30000000000c00044000000000000000040c0004400000000000000005bc000000030a01030000000000000000050000000900010073797a300000000008000540000000004c0008800c00014000000000000000010c0002400000000000f6ff000c00024000000000000016cc0c21014000000000000100010c00024000000000000000140c00014000000000000000090900030073797a32000000000b00070066696c746572000030000480080002406b10a61d140003007465616d5f736c6176655f3000000000080002404e73b858080001"], 0x130}}, 0x0)

104.230284ms ago: executing program 3 (id=1443):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000400f0000001c0007800c000400002e3a2d000000400c0003"], 0x30}}, 0x0)

89.659227ms ago: executing program 2 (id=1444):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x150, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @TCA_RATE={0x6, 0x5, {0x0, 0xfd}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0xf8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0x7}}, @TCA_ROUTE4_ACT={0xdc, 0x6, [@m_nat={0xd8, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0xad, 0x6, "3eaed48f5023f5c36bc9d8619f3e2af20800000000000000a40bc384135c74eb813bf1cf69dbeaddd76b564e92dc41f8de6392fb42903838dda4a8bcd9ea2a7ef200b02fb961cc3dddbb717e88bb314bbce94391f87d06a838a9957ccce7feaaf32e9d14398b60f4b34967f32f57c2d3d6939ab4bb4f2ac96daa3247403e773d7b7b15514a5fdc891227676c981222abfb6fffff71541e4446e5f84c25e6f1726ead4d745a9f287323"}, {0xc}, {0xc}}}]}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x413, 0x70bd28, 0x0, {0x0, 0x0, 0x63}, [@IFLA_LINK={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x30}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000000)="0a000000010001", 0x7)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x188}}, 0x0)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="40000000530400022dbd7000fbdbdf25b1836a8cb9e98cdd018307ef6b19452cf6a66a3361847d6eca39b09ef672d77d686c77eed7c5655626d474e70f34b3cf8985dfcb2b39fc99f5e385e6e61d57bbc2fb690ca2210b8f228d243b3d818c0babe7912af31ef281"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={<r4=>r1, 0x3, 0x80000001, 0x6})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x82, &(0x7f00000001c0)={r7}, 0x8)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={r7, 0x5, 0x27, 0x1, 0x4}, 0x14)
r8 = socket(0x10, 0x803, 0x0)
sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

87.326289ms ago: executing program 0 (id=1445):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000040000000a000000010c0200f2c0827fb15843aca789c594ff8eab3759d6777314349cb1b6736acac770899eb08a6cc54ef1da81872eac3039f5de33e5a86b2e218714b6f7a5ecc9091127f93553aa4c7012302791561ed4b5af2f9d7f061ab60b013bde6055bb835caeabbfca738e2d82046d162df918067bb2d165bb6d43f71e30759acfb41bd6cf1cdd416e6e7088016021da822d58eb57745adbbb04543532c2b0fc2ba3d3ee9e94f29ab4a1d8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x40000062)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x3000000, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

732.263µs ago: executing program 3 (id=1446):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$packet(0x11, 0x3, 0x300) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1805}, 0x4)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r3, 0x913e0000)
setsockopt$MRT6_TABLE(r3, 0x29, 0xcf, &(0x7f0000000080)=0xffffffff, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000150a54000000060a0104801c0001800900010068617384000000000c00028008000740000000010900010073797a30000000000900020073797a320000000005000740df000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}}, 0x0)

0s ago: executing program 2 (id=1447):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(0x0, r0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x1e)
r2 = socket$netlink(0x10, 0x3, 0x12)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r2, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x8d40, 0x0)
write$tun(r3, &(0x7f00000002c0)={@void, @void, @llc={@llc={0xbc, 0x7e, "86", "f7c678f982a17c4d9af3039ccdbc198edc244cdba4f4df953b88e4a58077223eeebd73f5b3da0851131242fb7d9f0cd26398591c3eb294901bf824640856726ecb3cf5d6f93187e16e71bbaa8f466e3849de75a97907d78be3521448a35caa18e2d0ba6544cd4751973f60eb825f9fd8f927b308cf0ef191658e1eea72976d0c26b58dc2463b68"}}}, 0x8a)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, r1, 0x24, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0xc020)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r4, 0x0)
mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r4, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000004100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x167c, 0xc, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1610, 0x3, 0x0, 0x1, [{0x1b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x164, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb4, 0x1, "292e39bc6a69b1dd72b914e38eff2bda9f85cfd0d97aa381edfef15e5fec8521745d5338ff47b9c6840d6bf2fb4162bc66170fae5e28277775cd25ea2bbe87fecabe0d14498fbb8d91c82f5989313485df8a08cc1e44047142ddeeed2a45c5ff656aae095ca8884089e2338217fab5d9411ee88f2e57babc009a9f66ef6bda79260fb42ce5ed6ded2e5d1ed1910a41b67d6a39130183b2c026367ae3805474789a1833803f9c4331885cbd6e400a5e57"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x13, 0x1, "505e191b0497c224e697e396656e7b"}, @NFTA_DATA_VALUE={0x34, 0x1, "1736e2122d481e458622f36fd73295d86af5b8b392784fee33ea0471d2f4c287561cc43a66461ae28cdfb925e25f5b3a"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, {0x1454, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x144, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x69, 0x1, "9b096e4113c86b6edfec3b5b81f32d35cceea5d35d440945c6216e53a421e97be5cb237f902df7de3197c764b3fa24f93d559b7f31695500473842f6cb15692a4d64ea80ca576e94cf2c2c5bd823f8c10a99d3f4c833141c2e1d73ea76786751712e5e0413"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x23, 0x1, "0ad00009d9f95cc5dfb525d88c093a4254f8a32e6713b5faec641f6a247a51"}]}, @NFTA_SET_ELEM_DATA={0x130c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb4, 0x1, "67f858ce21ce1c96207888620453636e9a598cea21df9969fecc072b88c8b9443f375519c8ee5baf00f7c88db07e459d3871986ee0ef28851d6b40bfa9a2c2c81cbb02af650ac0c3c1b6549c9fd8d1c20bbf6ff40a7f2ce2ed26a3dc95998b741e87dbe2f7bf85a71fbf43846e756eb961633c6c9713800eed190992cf23339ca4e72732bb2d5dcabbde0d904f71cc45ac62e54043f4d231f59e6220de9f8eef722dee866084a1a27aacaee3585408d1"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xe1, 0x1, "ceb1d8222b8d168fcbb591cade9427746af56d1f288122320578743b4599adcbba1ce98de66384d77e2e4ec6bef250917260b3503f2069d98b42f6a87906dc594917c3f03aad2d91c2bf8c03eb4f7c9b4a1d5d2c9692fad5888003fb52caaabe8d202b0370455107c3c60da517336dfd234a41d8ce366aa59b365007046ded4d360b176c5d5b6fe1925a1efb4b0e635807ad0aae8fa2be1ad04d9341870057b4a3d0be0f3bd61938cc6c71c294d625b76439fb73ebead4674e125d9cdd69b1ffeb52d27a0de3de5c1aabab0ba045797ec0324dd1faffca3e84ba9efb5a"}, @NFTA_DATA_VALUE={0x59, 0x1, "6cdc2d4fa4dd55d7e55e157cc0c236a170d690d0709669ef02608b82ba81e745f998e6b2afb4cf82f2c6fe4a88c244173c6fe1cb9fcbb8714fcac3e7567a776f74b9135a1c0d30744f0fe194f0a97fb7ffbb7e6c42"}, @NFTA_DATA_VALUE={0xb8, 0x1, "f4cc9f7deb274ac8a075a022b16c133022e08c6cf25c5c08a25794ebaf2e1ec7fd7769f12755419f2969c9037b52f2aa1caafa3b3beea626eeb5e4e5d6d423e850f63e574d8eaaf932c08562c0c8b58c676098c3b319da5afaa4cba78816a3dbfd284ea97f0dbe30810da3f0df513cd3729160f73b8c19112bfa111a5200e847025768fc24e1b132a3828d6516ad0c0b5765f0b1cb61be35b010f5f85ed5745b5b27b0c6f03d82095145655799cad76852a6d055"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x84, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5fa22a93}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4fcfdb20}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x180, 0x16, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x118, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg1\x00'}, {0x14}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'lo\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x18a8}, 0x1, 0x0, 0x0, 0x200488d0}, 0x14)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0xfe}]}}}]}, 0x3c}}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x480, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r7, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r8)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740))
socket(0x10, 0x803, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x18, 0x2a, 0xb, 0x0, 0x25dfdbff, {0x1}, [@nested={0x4, 0x1}]}, 0x18}}, 0x800)
r12 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)

kernel console output (not intermixed with test programs):

netlink: 28 bytes leftover after parsing attributes in process `syz.3.534'.
[  127.513589][ T7872] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  128.679277][ T7915] netlink: 'syz.2.547': attribute type 3 has an invalid length.
[  128.725785][ T7929] Cannot find set identified by id 0 to match
[  129.022528][ T7944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  129.517681][ T7972] Cannot find set identified by id 0 to match
[  129.535336][ T7967] netlink: 'syz.0.560': attribute type 1 has an invalid length.
[  129.549235][ T7974] pimreg: entered allmulticast mode
[  129.581852][ T7974] pimreg: left allmulticast mode
[  129.655821][ T7977] __nla_validate_parse: 11 callbacks suppressed
[  129.655840][ T7977] netlink: 36 bytes leftover after parsing attributes in process `syz.0.565'.
[  129.783562][ T7982] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.567'.
[  129.825821][ T7982] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.431860][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.575'.
[  130.443018][ T8009] netlink: 'syz.4.576': attribute type 1 has an invalid length.
[  130.448789][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.575'.
[  130.500572][ T8015] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  130.513857][ T8016] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  130.554543][ T8009] bond2: entered promiscuous mode
[  130.560172][ T8009] 8021q: adding VLAN 0 to HW filter on device bond2
[  130.591048][ T8015] netlink: 3 bytes leftover after parsing attributes in process `syz.4.576'.
[  130.711696][ T8015] batadv1: entered allmulticast mode
[  130.821714][ T8022] RDS: rds_bind could not find a transport for ::ffff:0.0.0.2, load rds_tcp or rds_rdma?
[  130.852488][ T8024] netlink: 36 bytes leftover after parsing attributes in process `syz.3.579'.
[  130.925430][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.581'.
[  131.154503][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.585'.
[  131.176772][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'.
[  131.307889][ T8048] pimreg: entered allmulticast mode
[  131.325065][ T8048] pimreg: left allmulticast mode
[  131.474177][ T8055] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  131.619712][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'.
[  131.670272][ T8066] Cannot find set identified by id 0 to match
[  132.094076][ T8088] openvswitch: netlink: Duplicate or invalid key (type 0).
[  132.107850][ T8088] openvswitch: netlink: Actions may not be safe on all matching packets
[  132.546405][ T8110] netlink: 'syz.3.603': attribute type 6 has an invalid length.
[  132.583621][ T8112] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  133.092446][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  133.099150][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  133.866011][ T8159] netlink: 'syz.3.619': attribute type 1 has an invalid length.
[  134.390392][ T8192] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  134.498852][ T8197] bridge_slave_0: left allmulticast mode
[  134.505804][ T8197] bridge_slave_0: left promiscuous mode
[  134.512027][ T8197] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.556625][ T8197] bond0: (slave bond_slave_0): Releasing backup interface
[  134.575764][ T8197] bond0: (slave bond_slave_1): Releasing backup interface
[  134.603309][ T8197] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.621956][ T8197] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.631383][ T8197] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.639075][ T8197] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.656978][ T8197] vlan2: left allmulticast mode
[  134.662011][ T8197] vlan2: left promiscuous mode
[  134.667189][ T8197] 0�X��D: left promiscuous mode
[  134.673629][ T8197] bridge0: port 2(vlan2) entered disabled state
[  134.766661][ T8197] bond0: (slave bond1): Releasing backup interface
[  134.832180][ T8210] syzkaller1: entered promiscuous mode
[  134.861963][ T8210] syzkaller1: entered allmulticast mode
[  134.907991][ T8208] __nla_validate_parse: 13 callbacks suppressed
[  134.908008][ T8208] netlink: 70 bytes leftover after parsing attributes in process `syz.4.636'.
[  135.041832][ T8218] pim6reg1: entered promiscuous mode
[  135.057133][ T8218] pim6reg1: entered allmulticast mode
[  135.319904][ T8224] netlink: 332 bytes leftover after parsing attributes in process `syz.0.641'.
[  135.591725][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'.
[  135.659153][ T8237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  135.690627][ T8237] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  135.874966][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'.
[  135.990805][ T8252] netlink: 'syz.0.649': attribute type 3 has an invalid length.
[  136.460482][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'.
[  136.469911][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'.
[  137.316863][ T8320] netlink: 'syz.0.670': attribute type 3 has an invalid length.
[  137.340271][ T8320] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.670'.
[  137.422437][ T8310] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  138.757563][ T8338] netlink: 'syz.3.676': attribute type 1 has an invalid length.
[  140.126556][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'.
[  140.373861][ T8423] ip6gretap0: entered promiscuous mode
[  140.388480][ T8423] batadv_slave_0: entered promiscuous mode
[  140.593422][ T8433] netlink: 36 bytes leftover after parsing attributes in process `syz.0.711'.
[  140.811770][ T8448] FAULT_INJECTION: forcing a failure.
[  140.811770][ T8448] name failslab, interval 1, probability 0, space 0, times 1
[  140.826861][ T8448] CPU: 1 UID: 0 PID: 8448 Comm: syz.0.716 Not tainted 6.14.0-rc1-syzkaller-00197-gacdefab0dcbc #0
[  140.826888][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  140.826902][ T8448] Call Trace:
[  140.826908][ T8448]  <TASK>
[  140.826915][ T8448]  dump_stack_lvl+0x241/0x360
[  140.826950][ T8448]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.826967][ T8448]  ? __pfx__printk+0x10/0x10
[  140.826991][ T8448]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  140.827011][ T8448]  ? __pfx___might_resched+0x10/0x10
[  140.827034][ T8448]  should_fail_ex+0x40a/0x550
[  140.827057][ T8448]  should_failslab+0xac/0x100
[  140.827075][ T8448]  kmem_cache_alloc_node_noprof+0x77/0x380
[  140.827092][ T8448]  ? __alloc_skb+0x1c3/0x440
[  140.827117][ T8448]  __alloc_skb+0x1c3/0x440
[  140.827143][ T8448]  ? __pfx___alloc_skb+0x10/0x10
[  140.827166][ T8448]  ? netlink_autobind+0xd6/0x2f0
[  140.827182][ T8448]  ? netlink_autobind+0x2b0/0x2f0
[  140.827203][ T8448]  netlink_sendmsg+0x638/0xcb0
[  140.827231][ T8448]  ? __pfx_netlink_sendmsg+0x10/0x10
[  140.827257][ T8448]  ? aa_sock_msg_perm+0x91/0x160
[  140.827283][ T8448]  ? __pfx_netlink_sendmsg+0x10/0x10
[  140.827297][ T8448]  __sock_sendmsg+0x221/0x270
[  140.827320][ T8448]  ____sys_sendmsg+0x52a/0x7e0
[  140.827344][ T8448]  ? __pfx_____sys_sendmsg+0x10/0x10
[  140.827358][ T8448]  ? __fget_files+0x2a/0x410
[  140.827378][ T8448]  ? __fget_files+0x2a/0x410
[  140.827403][ T8448]  __sys_sendmmsg+0x36a/0x720
[  140.827430][ T8448]  ? __pfx___sys_sendmmsg+0x10/0x10
[  140.827457][ T8448]  ? __pfx_lock_release+0x10/0x10
[  140.827476][ T8448]  ? kstrtouint_from_user+0x128/0x190
[  140.827518][ T8448]  ? ksys_write+0x22a/0x2b0
[  140.827538][ T8448]  ? __pfx_lock_release+0x10/0x10
[  140.827564][ T8448]  ? sb_end_write+0xe9/0x1c0
[  140.827582][ T8448]  ? vfs_write+0x7fa/0xd10
[  140.827604][ T8448]  ? __mutex_unlock_slowpath+0x227/0x800
[  140.827652][ T8448]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  140.827674][ T8448]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  140.827696][ T8448]  ? do_syscall_64+0x100/0x230
[  140.827720][ T8448]  __x64_sys_sendmmsg+0xa0/0xb0
[  140.827738][ T8448]  do_syscall_64+0xf3/0x230
[  140.827759][ T8448]  ? clear_bhb_loop+0x35/0x90
[  140.827782][ T8448]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.827802][ T8448] RIP: 0033:0x7f907f98cde9
[  140.827821][ T8448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.827833][ T8448] RSP: 002b:00007f9080893038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  140.827857][ T8448] RAX: ffffffffffffffda RBX: 00007f907fba5fa0 RCX: 00007f907f98cde9
[  140.827869][ T8448] RDX: 0000000004924b68 RSI: 0000400000000140 RDI: 0000000000000005
[  140.827879][ T8448] RBP: 00007f9080893090 R08: 0000000000000000 R09: 0000000000000000
[  140.827889][ T8448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  140.827899][ T8448] R13: 0000000000000000 R14: 00007f907fba5fa0 R15: 00007ffd3d79c748
[  140.827927][ T8448]  </TASK>
[  141.301302][ T8458] netlink: 'syz.3.720': attribute type 3 has an invalid length.
[  141.310417][ T8458] netlink: 666 bytes leftover after parsing attributes in process `syz.3.720'.
[  141.361231][ T8460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.723'.
[  141.384182][ T8463] netlink: 'syz.2.722': attribute type 2 has an invalid length.
[  141.643225][ T8480] netlink: 36 bytes leftover after parsing attributes in process `syz.3.727'.
[  141.875145][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.730'.
[  141.974009][ T8491] IPVS: sync thread started: state = BACKUP, mcast_ifn = xfrm0, syncid = 1, id = 0
[  141.979342][ T8490] x_tables: duplicate underflow at hook 2
[  142.404883][ T8509] FAULT_INJECTION: forcing a failure.
[  142.404883][ T8509] name failslab, interval 1, probability 0, space 0, times 0
[  142.427321][ T8509] CPU: 1 UID: 0 PID: 8509 Comm: syz.0.737 Not tainted 6.14.0-rc1-syzkaller-00197-gacdefab0dcbc #0
[  142.427346][ T8509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  142.427354][ T8509] Call Trace:
[  142.427359][ T8509]  <TASK>
[  142.427366][ T8509]  dump_stack_lvl+0x241/0x360
[  142.427388][ T8509]  ? __pfx_dump_stack_lvl+0x10/0x10
[  142.427402][ T8509]  ? __pfx__printk+0x10/0x10
[  142.427424][ T8509]  ? fs_reclaim_acquire+0x93/0x130
[  142.427441][ T8509]  ? __pfx___might_resched+0x10/0x10
[  142.427462][ T8509]  should_fail_ex+0x40a/0x550
[  142.427487][ T8509]  should_failslab+0xac/0x100
[  142.427502][ T8509]  __kmalloc_noprof+0xdd/0x4c0
[  142.427518][ T8509]  ? kobject_get_path+0xb8/0x230
[  142.427543][ T8509]  kobject_get_path+0xb8/0x230
[  142.427569][ T8509]  kobject_uevent_env+0x2a5/0x8e0
[  142.427593][ T8509]  device_del+0x7db/0x9b0
[  142.427618][ T8509]  ? __pfx_device_del+0x10/0x10
[  142.427634][ T8509]  ? read_tsc+0x9/0x20
[  142.427650][ T8509]  ? ktime_get_mono_fast_ns+0x303/0x320
[  142.427676][ T8509]  device_unregister+0x20/0xc0
[  142.427694][ T8509]  wakeup_source_unregister+0x171/0x190
[  142.427718][ T8509]  ep_modify+0x255/0xa80
[  142.427747][ T8509]  ? __pfx_ep_modify+0x10/0x10
[  142.427767][ T8509]  ? __fget_files+0x2a/0x410
[  142.427785][ T8509]  ? __fget_files+0x395/0x410
[  142.427799][ T8509]  ? __fget_files+0x2a/0x410
[  142.427823][ T8509]  do_epoll_ctl+0x761/0xf80
[  142.427853][ T8509]  __x64_sys_epoll_ctl+0x161/0x1a0
[  142.427885][ T8509]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  142.427907][ T8509]  ? do_syscall_64+0x100/0x230
[  142.427931][ T8509]  ? do_syscall_64+0xb6/0x230
[  142.427954][ T8509]  do_syscall_64+0xf3/0x230
[  142.427974][ T8509]  ? clear_bhb_loop+0x35/0x90
[  142.427999][ T8509]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.428019][ T8509] RIP: 0033:0x7f907f98cde9
[  142.428034][ T8509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.428047][ T8509] RSP: 002b:00007f9080893038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  142.428066][ T8509] RAX: ffffffffffffffda RBX: 00007f907fba5fa0 RCX: 00007f907f98cde9
[  142.428077][ T8509] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 0000000000000004
[  142.428087][ T8509] RBP: 00007f9080893090 R08: 0000000000000000 R09: 0000000000000000
[  142.428096][ T8509] R10: 0000400000000080 R11: 0000000000000246 R12: 0000000000000001
[  142.428106][ T8509] R13: 0000000000000000 R14: 00007f907fba5fa0 R15: 00007ffd3d79c748
[  142.428132][ T8509]  </TASK>
[  142.546299][ T8511] netlink: 'syz.2.736': attribute type 10 has an invalid length.
[  142.706784][ T8511] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up
[  142.954667][ T8516] netlink: 'syz.0.739': attribute type 1 has an invalid length.
[  142.973411][ T8516] netlink: 'syz.0.739': attribute type 30 has an invalid length.
[  143.005632][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.739'.
[  143.069612][ T8518] netlink: 36 bytes leftover after parsing attributes in process `syz.3.740'.
[  143.459621][ T8530] netlink: 'syz.3.744': attribute type 322 has an invalid length.
[  143.819922][ T8535] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  143.827486][ T8535] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.837795][ T8536] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  143.845422][ T8536] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.866249][ T8535] rdma_op ffff888060c3f1f0 conn xmit_rdma 0000000000000000
[  143.881356][ T8536] rdma_op ffff88802438f1f0 conn xmit_rdma 0000000000000000
[  143.968982][ T8538] syzkaller0: create flow: hash 3000917310 index 2
[  144.044788][ T8540] netlink: 'syz.4.747': attribute type 3 has an invalid length.
[  144.052750][ T8542] bridge3: entered promiscuous mode
[  144.062872][ T8542] bridge3: entered allmulticast mode
[  144.072071][ T8544] netlink: 'syz.3.748': attribute type 10 has an invalid length.
[  144.095309][ T8542] team0: Port device bridge3 added
[  144.111187][ T8543] syzkaller0: delete flow: hash 3000917310 index 2
[  146.150302][ T8544] bridge0: port 1(ip6gretap0) entered blocking state
[  146.161602][ T8544] bridge0: port 1(ip6gretap0) entered disabled state
[  146.169752][ T8544] ip6gretap0: entered allmulticast mode
[  146.177333][ T8544] ip6gretap0: entered promiscuous mode
[  146.444616][ T8570] netlink: 28 bytes leftover after parsing attributes in process `syz.0.756'.
[  146.731446][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.761'.
[  146.752564][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.761'.
[  146.803489][ T8588] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  147.159429][ T8612] netlink: 28 bytes leftover after parsing attributes in process `syz.4.771'.
[  147.348496][ T8620] IPv6: Can't replace route, no match found
[  147.684565][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.781'.
[  147.717462][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.781'.
[  147.888556][ T8625] netlink: 36 bytes leftover after parsing attributes in process `syz.3.777'.
[  147.908475][ T8649] FAULT_INJECTION: forcing a failure.
[  147.908475][ T8649] name failslab, interval 1, probability 0, space 0, times 0
[  147.940977][ T8649] CPU: 0 UID: 0 PID: 8649 Comm: syz.2.784 Not tainted 6.14.0-rc1-syzkaller-00197-gacdefab0dcbc #0
[  147.941004][ T8649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  147.941014][ T8649] Call Trace:
[  147.941021][ T8649]  <TASK>
[  147.941028][ T8649]  dump_stack_lvl+0x241/0x360
[  147.941053][ T8649]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.941069][ T8649]  ? __pfx__printk+0x10/0x10
[  147.941093][ T8649]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  147.941113][ T8649]  ? __pfx___might_resched+0x10/0x10
[  147.941135][ T8649]  should_fail_ex+0x40a/0x550
[  147.941161][ T8649]  should_failslab+0xac/0x100
[  147.941179][ T8649]  kmem_cache_alloc_node_noprof+0x77/0x380
[  147.941196][ T8649]  ? __alloc_skb+0x1c3/0x440
[  147.941221][ T8649]  __alloc_skb+0x1c3/0x440
[  147.941248][ T8649]  ? __pfx___alloc_skb+0x10/0x10
[  147.941273][ T8649]  ? netlink_ack_tlv_len+0x6e/0x200
[  147.941299][ T8649]  netlink_ack+0x145/0xa50
[  147.941336][ T8649]  netlink_rcv_skb+0x262/0x430
[  147.941352][ T8649]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  147.941373][ T8649]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  147.941414][ T8649]  ? netlink_deliver_tap+0x2e/0x1b0
[  147.941433][ T8649]  netlink_unicast+0x7f6/0x990
[  147.941462][ T8649]  ? __pfx_netlink_unicast+0x10/0x10
[  147.941482][ T8649]  ? __virt_addr_valid+0x45f/0x530
[  147.941506][ T8649]  ? __phys_addr_symbol+0x2f/0x70
[  147.941526][ T8649]  ? __check_object_size+0x47a/0x730
[  147.941546][ T8649]  netlink_sendmsg+0x8e4/0xcb0
[  147.941574][ T8649]  ? __pfx_netlink_sendmsg+0x10/0x10
[  147.941594][ T8649]  ? aa_sock_msg_perm+0x91/0x160
[  147.941620][ T8649]  ? __pfx_netlink_sendmsg+0x10/0x10
[  147.941634][ T8649]  __sock_sendmsg+0x221/0x270
[  147.941656][ T8649]  ____sys_sendmsg+0x52a/0x7e0
[  147.941680][ T8649]  ? __pfx_____sys_sendmsg+0x10/0x10
[  147.941694][ T8649]  ? __fget_files+0x2a/0x410
[  147.941714][ T8649]  ? __fget_files+0x2a/0x410
[  147.941739][ T8649]  __sys_sendmmsg+0x36a/0x720
[  147.941766][ T8649]  ? __pfx___sys_sendmmsg+0x10/0x10
[  147.941793][ T8649]  ? __pfx_lock_release+0x10/0x10
[  147.941812][ T8649]  ? kstrtouint_from_user+0x128/0x190
[  147.941855][ T8649]  ? ksys_write+0x22a/0x2b0
[  147.941875][ T8649]  ? __pfx_lock_release+0x10/0x10
[  147.941901][ T8649]  ? sb_end_write+0xe9/0x1c0
[  147.941919][ T8649]  ? vfs_write+0x7fa/0xd10
[  147.941941][ T8649]  ? __mutex_unlock_slowpath+0x227/0x800
[  147.941988][ T8649]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  147.942011][ T8649]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  147.942032][ T8649]  ? do_syscall_64+0x100/0x230
[  147.942056][ T8649]  __x64_sys_sendmmsg+0xa0/0xb0
[  147.942074][ T8649]  do_syscall_64+0xf3/0x230
[  147.942094][ T8649]  ? clear_bhb_loop+0x35/0x90
[  147.942118][ T8649]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.942138][ T8649] RIP: 0033:0x7f696418cde9
[  147.942153][ T8649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  147.942166][ T8649] RSP: 002b:00007f6965019038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  147.942184][ T8649] RAX: ffffffffffffffda RBX: 00007f69643a5fa0 RCX: 00007f696418cde9
[  147.942196][ T8649] RDX: 0000000004924b68 RSI: 0000400000000140 RDI: 0000000000000005
[  147.942206][ T8649] RBP: 00007f6965019090 R08: 0000000000000000 R09: 0000000000000000
[  147.942217][ T8649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  147.942226][ T8649] R13: 0000000000000000 R14: 00007f69643a5fa0 R15: 00007ffe32f90c48
[  147.942251][ T8649]  </TASK>
[  148.522721][ T8654] netlink: 256 bytes leftover after parsing attributes in process `syz.0.785'.
[  148.735892][ T8675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.791'.
[  149.358449][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.804'.
[  149.605486][ T8710] bridge0: entered promiscuous mode
[  149.615781][ T8710] bridge0: left promiscuous mode
[  150.095967][ T8714] bond_slave_0: left promiscuous mode
[  150.102623][ T8714] bond_slave_1: left promiscuous mode
[  150.405819][ T8714] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.448952][ T8714] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.674555][ T8714] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.682974][ T8714] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.701043][ T8714] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.709804][ T8714] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.825493][ T8720] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.833200][ T8720] 8021q: adding VLAN 0 to HW filter on device team0
[  150.850797][ T8720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  150.923337][ T8720] syz.4.809 (8720) used greatest stack depth: 17648 bytes left
[  151.067664][ T8747] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.101395][ T8747] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.495592][ T8767] __nla_validate_parse: 11 callbacks suppressed
[  151.495610][ T8767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.824'.
[  151.523503][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.825'.
[  151.567172][ T8767] bridge0: entered promiscuous mode
[  151.596592][ T8767] bridge0: left promiscuous mode
[  151.711357][ T8771] vlan3: entered allmulticast mode
[  151.727937][ T8771] bridge0: entered allmulticast mode
[  151.762757][ T8771] bridge0: left allmulticast mode
[  151.824721][ T8773] tipc: Started in network mode
[  151.829707][ T8773] tipc: Node identity , cluster identity 4711
[  152.165404][ T8792] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.283863][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.835'.
[  152.353467][ T8802] netlink: 28 bytes leftover after parsing attributes in process `syz.4.837'.
[  152.503874][ T8809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.838'.
[  152.579167][ T8812] tipc: Started in network mode
[  152.584635][ T8812] tipc: Node identity , cluster identity 4711
[  152.644243][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.841'.
[  152.867484][ T8822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.843'.
[  152.961088][ T8826] netlink: 'syz.2.845': attribute type 4 has an invalid length.
[  153.437631][ T8842] Bluetooth: MGMT ver 1.23
[  153.752992][ T8856] netlink: 'syz.3.857': attribute type 4 has an invalid length.
[  153.928695][ T8864] netlink: 6084 bytes leftover after parsing attributes in process `syz.4.862'.
[  153.940070][ T8864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.862'.
[  153.972092][ T8864] netlink: 6084 bytes leftover after parsing attributes in process `syz.4.862'.
[  154.016069][ T8869] openvswitch: netlink: ERSPAN option length err (len 4096, max 255).
[  154.130424][ T8873] xt_TCPMSS: Only works on TCP SYN packets
[  154.311609][ T8878] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$���UL�vy��آ�D��UD�w�}�z
[  154.431302][ T8882] xt_CT: No such helper "snmp"
[  154.752691][ T8906] netlink: 'syz.4.874': attribute type 1 has an invalid length.
[  155.624923][ T8935] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20004
[  155.814426][ T8943] netlink: 'syz.0.885': attribute type 4 has an invalid length.
[  156.083172][ T8959] bridge0: entered promiscuous mode
[  156.105670][ T8959] bridge0: left promiscuous mode
[  156.636343][ T8978] __nla_validate_parse: 8 callbacks suppressed
[  156.636362][ T8978] netlink: 280 bytes leftover after parsing attributes in process `syz.4.899'.
[  156.929971][ T8991] openvswitch: netlink: Actions may not be safe on all matching packets
[  156.980553][ T8995] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  157.093312][ T9004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.909'.
[  157.119079][ T9004] bridge0: entered promiscuous mode
[  157.132349][ T9004] bridge0: left promiscuous mode
[  157.245423][ T9005] netlink: 24 bytes leftover after parsing attributes in process `syz.4.908'.
[  157.280131][ T9012] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  157.289191][ T9012] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  157.298195][ T9012] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  157.307059][ T9012] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  157.449775][ T9022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.916'.
[  157.484761][ T9022] netlink: 'syz.2.916': attribute type 1 has an invalid length.
[  157.559616][ T9027] dvmrp0: entered allmulticast mode
[  157.604432][ T9031] dvmrp0: left allmulticast mode
[  157.691066][ T9038] netlink: 'syz.4.920': attribute type 1 has an invalid length.
[  157.728351][ T9039] netlink: 3 bytes leftover after parsing attributes in process `syz.4.920'.
[  157.739368][ T9038] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  157.752130][ T9039] batadv2: entered promiscuous mode
[  157.773854][ T9039] batadv2: entered allmulticast mode
[  157.781070][ T9046] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  157.786496][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.922'.
[  157.801029][ T9044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.922'.
[  157.847951][ T9044] netlink: 'syz.3.922': attribute type 4 has an invalid length.
[  157.876748][ T9044] netlink: 'syz.3.922': attribute type 4 has an invalid length.
[  157.906592][ T9044] xt_TCPMSS: Only works on TCP SYN packets
[  157.991712][ T9057] netlink: 24 bytes leftover after parsing attributes in process `syz.4.924'.
[  158.124055][ T9062] netlink: 28 bytes leftover after parsing attributes in process `syz.0.926'.
[  158.190055][ T9062] bridge0: entered promiscuous mode
[  158.219548][ T9062] bridge0: left promiscuous mode
[  158.334559][ T9073] syz.3.930 (9073) used obsolete PPPIOCDETACH ioctl
[  158.365642][ T9070] xt_bpf: check failed: parse error
[  158.378327][ T9073] xt_bpf: check failed: parse error
[  158.491565][ T9080] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  158.515703][ T9082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.934'.
[  158.641984][ T9091] set match dimension is over the limit!
[  158.985584][ T9112] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  159.003849][ T9112] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.066273][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.180973][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.289154][ T9123] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.348436][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.504632][ T9130] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  159.553997][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.621870][ T9135] netlink: 'syz.0.946': attribute type 3 has an invalid length.
[  159.773408][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  159.804855][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  159.820768][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  159.829936][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  159.846741][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  159.860703][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  159.951963][   T11] bridge_slave_1: left allmulticast mode
[  159.965820][   T11] bridge_slave_1: left promiscuous mode
[  159.971596][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.984651][ T9151] netlink: 'syz.3.954': attribute type 3 has an invalid length.
[  160.026176][   T11] bridge_slave_0: left allmulticast mode
[  160.031874][   T11] bridge_slave_0: left promiscuous mode
[  160.055922][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.610856][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  160.634827][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  160.655428][   T11] bond0 (unregistering): Released all slaves
[  160.934482][ T9184] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  161.186429][ T9141] chnl_net:caif_netlink_parms(): no params data found
[  161.241882][ T9201] netlink: 'syz.3.967': attribute type 20 has an invalid length.
[  161.393843][   T11] hsr_slave_0: left promiscuous mode
[  161.411387][   T11] hsr_slave_1: left promiscuous mode
[  161.423844][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.448991][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.460582][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.468608][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.520830][ T9217] Bluetooth: MGMT ver 1.23
[  161.527451][   T11] veth1_macvtap: left promiscuous mode
[  161.532991][   T11] veth0_macvtap: left promiscuous mode
[  161.549376][   T11] veth1_vlan: left promiscuous mode
[  161.560364][   T11] veth0_vlan: left promiscuous mode
[  161.889094][   T54] Bluetooth: hci0: command tx timeout
[  162.013865][   T11] team0 (unregistering): Port device team_slave_1 removed
[  162.061161][   T11] team0 (unregistering): Port device team_slave_0 removed
[  162.635541][ T9234] netlink: 'syz.4.973': attribute type 1 has an invalid length.
[  162.656552][ T9141] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.671443][ T9141] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.682895][ T9234] netlink: 'syz.4.973': attribute type 4 has an invalid length.
[  162.694903][ T9234] __nla_validate_parse: 17 callbacks suppressed
[  162.694922][ T9234] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.973'.
[  162.714510][ T9141] bridge_slave_0: entered allmulticast mode
[  162.728921][ T9141] bridge_slave_0: entered promiscuous mode
[  162.738755][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.975'.
[  162.774790][ T9236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.975'.
[  162.787472][ T9141] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.797264][ T9141] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.805744][ T9141] bridge_slave_1: entered allmulticast mode
[  162.806760][ T9239] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  162.813876][ T9141] bridge_slave_1: entered promiscuous mode
[  162.844933][ T9239] netlink: 'syz.3.976': attribute type 1 has an invalid length.
[  162.855224][ T9242] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  162.942752][ T9239] bond2: entered promiscuous mode
[  162.972734][ T9239] 8021q: adding VLAN 0 to HW filter on device bond2
[  163.047020][ T9141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.064125][ T9141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.081100][ T9246] 8021q: adding VLAN 0 to HW filter on device bond2
[  163.094879][ T9246] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  163.113190][ T9246] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  163.126102][ T9246] bond2: (slave ip6gre1): making interface the new active one
[  163.133915][ T9246] ip6gre1: entered promiscuous mode
[  163.141770][ T9246] bond2: (slave ip6gre1): Enslaving as an active interface with an up link
[  163.158960][ T9253] tipc: Started in network mode
[  163.166010][ T9253] tipc: Node identity , cluster identity 4711
[  163.308787][ T9141] team0: Port device team_slave_0 added
[  163.338798][ T9141] team0: Port device team_slave_1 added
[  163.470918][ T9141] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.480223][ T9141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.508878][ T9141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.580941][ T9141] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.605091][ T9141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.639287][ T9141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.713018][ T9141] hsr_slave_0: entered promiscuous mode
[  163.720275][ T9141] hsr_slave_1: entered promiscuous mode
[  163.726582][ T9141] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  163.735528][ T9141] Cannot create hsr debugfs directory
[  163.965938][   T54] Bluetooth: hci0: command tx timeout
[  163.997718][ T9287] tipc: Started in network mode
[  164.002723][ T9287] tipc: Node identity , cluster identity 4711
[  164.210695][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'.
[  164.227337][ T9299] pim6reg: entered allmulticast mode
[  164.299792][ T9299] pim6reg: left allmulticast mode
[  164.864166][ T9141] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  164.924801][ T9328] tipc: Started in network mode
[  164.929833][ T9328] tipc: Node identity , cluster identity 4711
[  164.944354][ T9141] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  165.001536][ T9141] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  165.037489][ T9141] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  165.097249][ T9336] ipvlan2: entered promiscuous mode
[  165.102517][ T9336] ipvlan2: entered allmulticast mode
[  165.120645][ T9336] bridge0: entered allmulticast mode
[  165.128506][ T9336] bridge0: port 1(ipvlan2) entered blocking state
[  165.135651][ T9336] bridge0: port 1(ipvlan2) entered disabled state
[  165.173489][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1006'.
[  165.207000][ T9342] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1007'.
[  165.357547][ T9141] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.392776][ T9141] 8021q: adding VLAN 0 to HW filter on device team0
[  165.431132][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.438363][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.472140][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.479360][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.826637][ T9141] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.932939][ T9141] veth0_vlan: entered promiscuous mode
[  165.960816][ T9141] veth1_vlan: entered promiscuous mode
[  166.005314][ T9141] veth0_macvtap: entered promiscuous mode
[  166.020401][ T9364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1010'.
[  166.031726][ T9141] veth1_macvtap: entered promiscuous mode
[  166.037429][ T9367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1010'.
[  166.047442][   T54] Bluetooth: hci0: command tx timeout
[  166.091049][ T9141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.109928][ T9141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.121990][ T9141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.141731][ T9141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.153456][ T9141] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.177832][ T9141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.189795][ T9141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.203639][ T9141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.216313][ T9141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.227618][ T9141] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.257205][ T9141] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.266455][ T9141] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.275959][ T9141] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.285284][ T9141] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.449054][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1014'.
[  166.470172][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1014'.
[  166.484951][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.503117][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.526956][ T9377] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  166.574868][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.591767][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.735005][ T9384] openvswitch: netlink: IP tunnel dst address not specified
[  166.760301][ T9386] netlink: 'syz.3.1018': attribute type 5 has an invalid length.
[  166.962709][ T9389] ip6gretap0: entered promiscuous mode
[  167.000417][ T9389] ip6gretap0: left promiscuous mode
[  167.701060][ T9411] Cannot find set identified by id 0 to match
[  168.106249][ T9423] __nla_validate_parse: 5 callbacks suppressed
[  168.106268][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1030'.
[  168.170816][   T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.992330][ T9440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1038'.
[  169.017346][ T9440] ip6gretap0: left allmulticast mode
[  169.022708][ T9440] ip6gretap0: left promiscuous mode
[  169.055981][ T9440] bridge0: port 1(ip6gretap0) entered disabled state
[  169.089210][ T9445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1039'.
[  169.178354][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  169.191450][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  169.200422][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  169.208658][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  169.222844][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  169.231497][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  169.389402][ T9462] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1043'.
[  169.413280][ T9448] chnl_net:caif_netlink_parms(): no params data found
[  169.419595][ T9462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1043'.
[  169.448038][ T9462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1043'.
[  169.474775][ T9462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1043'.
[  169.590388][ T9473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1042'.
[  169.718169][   T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.745151][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1047'.
[  169.784695][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1047'.
[  169.836591][ T9487] Cannot find set identified by id 0 to match
[  169.884934][ T9448] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.896648][ T9448] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.911802][ T9448] bridge_slave_0: entered allmulticast mode
[  169.926995][ T9448] bridge_slave_0: entered promiscuous mode
[  170.005925][   T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.021018][ T9448] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.033990][ T9448] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.042247][ T9448] bridge_slave_1: entered allmulticast mode
[  170.054085][ T9448] bridge_slave_1: entered promiscuous mode
[  170.150655][   T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.244494][ T9501] tipc: Started in network mode
[  170.249414][ T9501] tipc: Node identity , cluster identity 4711
[  170.353871][ T9448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.396157][ T9448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.636667][ T9448] team0: Port device team_slave_0 added
[  170.684984][ T9448] team0: Port device team_slave_1 added
[  170.742533][ T9448] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.751131][ T9448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.779104][ T9448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  170.797044][   T35] bridge_slave_1: left allmulticast mode
[  170.803940][   T35] bridge_slave_1: left promiscuous mode
[  170.809944][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.819454][   T35] bridge_slave_0: left allmulticast mode
[  170.825542][   T35] bridge_slave_0: left promiscuous mode
[  170.831854][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.261862][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.272611][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.297708][   T35] bond0 (unregistering): Released all slaves
[  171.312929][ T9448] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.320731][ T9448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.348026][ T9448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  171.354807][ T5838] Bluetooth: hci0: command tx timeout
[  171.466856][ T9519] netdevsim netdevsim2: Direct firmware load for � failed with error -2
[  171.476525][ T9519] netdevsim netdevsim2: Falling back to sysfs fallback for: �
[  171.683572][ T9448] hsr_slave_0: entered promiscuous mode
[  171.701163][ T9448] hsr_slave_1: entered promiscuous mode
[  171.714764][ T9448] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  171.722376][ T9448] Cannot create hsr debugfs directory
[  171.981881][ T9547] tipc: Cannot configure node identity twice
[  172.081117][   T35] hsr_slave_0: left promiscuous mode
[  172.099932][   T35] hsr_slave_1: left promiscuous mode
[  172.120572][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.141418][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.172972][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.181133][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.260157][   T35] veth1_macvtap: left promiscuous mode
[  172.280253][   T35] veth0_macvtap: left promiscuous mode
[  172.290811][   T35] veth1_vlan: left promiscuous mode
[  172.303902][   T35] veth0_vlan: left promiscuous mode
[  172.304228][ T9565] Bluetooth: MGMT ver 1.23
[  172.792455][   T35] team0 (unregistering): Port device team_slave_1 removed
[  172.838456][   T35] team0 (unregistering): Port device team_slave_0 removed
[  173.414628][ T5838] Bluetooth: hci0: command tx timeout
[  173.444056][ T9569] netlink: 'syz.0.1074': attribute type 9 has an invalid length.
[  173.506305][ T9569] __nla_validate_parse: 4 callbacks suppressed
[  173.506324][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'.
[  173.679786][ T9575] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1073'.
[  173.804020][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1077'.
[  174.207186][ T9448] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  174.229616][ T9587] openvswitch: netlink: IPv4 tunnel dst address is zero
[  174.233752][ T9448] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  174.257952][ T9599] netlink: 'syz.2.1083': attribute type 10 has an invalid length.
[  174.286021][ T9448] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  174.317184][ T9599] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  174.362323][ T9448] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  174.476932][ T9606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1084'.
[  174.494970][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1087'.
[  174.613485][ T9617] Bluetooth: MGMT ver 1.23
[  174.668143][ T9614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1089'.
[  174.708074][ T9448] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.753781][ T9448] 8021q: adding VLAN 0 to HW filter on device team0
[  174.790535][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.797752][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.859898][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.867079][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.013286][ T9448] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.050668][ T9448] veth0_vlan: entered promiscuous mode
[  175.060497][ T9448] veth1_vlan: entered promiscuous mode
[  175.086541][ T9448] veth0_macvtap: entered promiscuous mode
[  175.096519][ T9448] veth1_macvtap: entered promiscuous mode
[  175.112631][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.131081][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.141680][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.152646][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.164044][ T9448] batman_adv: batadv0: Interface activated: batadv_slave_0
[  175.176956][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.193436][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.203553][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.214765][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.225911][ T9448] batman_adv: batadv0: Interface activated: batadv_slave_1
[  175.246162][ T9448] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.263156][ T9448] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.272079][ T9448] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.281140][ T9448] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.343276][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.354320][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.379533][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.387563][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.810594][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.563173][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  177.572137][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  177.582397][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  177.592083][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  177.599872][   T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  177.608170][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  177.727950][ T9628] chnl_net:caif_netlink_parms(): no params data found
[  177.808177][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.833029][ T9628] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.840373][ T9628] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.847846][ T9628] bridge_slave_0: entered allmulticast mode
[  177.854588][ T9628] bridge_slave_0: entered promiscuous mode
[  177.861841][ T9628] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.869405][ T9628] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.876890][ T9628] bridge_slave_1: entered allmulticast mode
[  177.883553][ T9628] bridge_slave_1: entered promiscuous mode
[  177.911028][ T9628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.923768][ T9628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.952585][ T9628] team0: Port device team_slave_0 added
[  177.961398][ T9628] team0: Port device team_slave_1 added
[  177.981924][ T9628] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.989401][ T9628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.016099][ T9628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  178.029597][ T9628] batman_adv: batadv0: Adding interface: batadv_slave_1
[  178.038301][ T9628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.064939][ T9628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  178.096800][ T9628] hsr_slave_0: entered promiscuous mode
[  178.103935][ T9628] hsr_slave_1: entered promiscuous mode
[  178.110157][ T9628] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  178.117935][ T9628] Cannot create hsr debugfs directory
[  178.469946][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.521245][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.623767][   T12] bridge_slave_1: left allmulticast mode
[  178.629736][   T12] bridge_slave_1: left promiscuous mode
[  178.635611][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.644221][   T12] bridge_slave_0: left allmulticast mode
[  178.650109][   T12] bridge_slave_0: left promiscuous mode
[  178.662148][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.972342][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  178.983020][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  178.993083][   T12] bond0 (unregistering): Released all slaves
[  179.219564][   T12] hsr_slave_0: left promiscuous mode
[  179.225733][   T12] hsr_slave_1: left promiscuous mode
[  179.231707][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.241071][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  179.249457][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.257088][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.279233][   T12] veth1_macvtap: left promiscuous mode
[  179.285109][   T12] veth0_macvtap: left promiscuous mode
[  179.291303][   T12] veth1_vlan: left promiscuous mode
[  179.296704][   T12] veth0_vlan: left promiscuous mode
[  179.659414][ T5838] Bluetooth: hci0: command tx timeout
[  179.714189][   T12] team0 (unregistering): Port device team_slave_1 removed
[  179.758331][   T12] team0 (unregistering): Port device team_slave_0 removed
[  180.196215][ T9628] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  180.206113][ T9628] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  180.220078][ T9628] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  180.236644][ T9628] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  180.320228][ T9628] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.366395][ T9628] 8021q: adding VLAN 0 to HW filter on device team0
[  180.382766][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.389898][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.405874][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.412947][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.462338][ T9628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  180.566992][ T9628] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.601362][ T9628] veth0_vlan: entered promiscuous mode
[  180.616164][ T9628] veth1_vlan: entered promiscuous mode
[  180.641287][ T9628] veth0_macvtap: entered promiscuous mode
[  180.650898][ T9628] veth1_macvtap: entered promiscuous mode
[  180.668362][ T9628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.679832][ T9628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.690760][ T9628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.701384][ T9628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.712632][ T9628] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.728011][ T9628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.738999][ T9628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.749354][ T9628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.759938][ T9628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.771241][ T9628] batman_adv: batadv0: Interface activated: batadv_slave_1
[  180.782243][ T9628] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.791783][ T9628] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.800784][ T9628] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.809655][ T9628] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.869964][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.882834][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.904437][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.912371][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.779384][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.666246][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  183.675628][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  183.684906][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  183.693709][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  183.701544][   T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  183.713938][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  183.830253][ T9642] chnl_net:caif_netlink_parms(): no params data found
[  183.891260][ T9642] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.900434][ T9642] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.907845][ T9642] bridge_slave_0: entered allmulticast mode
[  183.914808][ T9642] bridge_slave_0: entered promiscuous mode
[  183.923679][ T9642] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.930917][ T9642] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.944085][ T9642] bridge_slave_1: entered allmulticast mode
[  183.951213][ T9642] bridge_slave_1: entered promiscuous mode
[  183.977938][ T9642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.989186][ T9642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  184.017247][ T9642] team0: Port device team_slave_0 added
[  184.024874][ T9642] team0: Port device team_slave_1 added
[  184.053685][ T9642] batman_adv: batadv0: Adding interface: batadv_slave_0
[  184.061012][ T9642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.087277][ T9642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  184.100451][ T9642] batman_adv: batadv0: Adding interface: batadv_slave_1
[  184.107469][ T9642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.134072][ T9642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.168099][ T9642] hsr_slave_0: entered promiscuous mode
[  184.174875][ T9642] hsr_slave_1: entered promiscuous mode
[  184.181089][ T9642] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  184.188745][ T9642] Cannot create hsr debugfs directory
[  184.281333][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.354043][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.409883][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.499845][   T11] bridge_slave_1: left allmulticast mode
[  184.505841][   T11] bridge_slave_1: left promiscuous mode
[  184.511580][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.520103][   T11] bridge_slave_0: left allmulticast mode
[  184.526159][   T11] bridge_slave_0: left promiscuous mode
[  184.531916][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.866579][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  184.877321][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.888577][   T11] bond0 (unregistering): Released all slaves
[  185.160061][   T11] hsr_slave_0: left promiscuous mode
[  185.166793][   T11] hsr_slave_1: left promiscuous mode
[  185.173802][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.181720][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.191533][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.199229][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.229155][   T11] veth1_macvtap: left promiscuous mode
[  185.234995][   T11] veth0_macvtap: left promiscuous mode
[  185.240600][   T11] veth1_vlan: left promiscuous mode
[  185.246482][   T11] veth0_vlan: left promiscuous mode
[  185.662276][   T11] team0 (unregistering): Port device team_slave_1 removed
[  185.710123][   T11] team0 (unregistering): Port device team_slave_0 removed
[  185.805654][ T5841] Bluetooth: hci0: command tx timeout
[  186.189986][ T9642] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  186.200504][ T9642] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  186.210625][ T9642] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  186.240843][ T9642] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  186.313140][ T9642] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.342835][ T9642] 8021q: adding VLAN 0 to HW filter on device team0
[  186.355897][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.363028][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.370015][ T5841] Bluetooth: hci2: command 0x0406 tx timeout
[  186.375557][ T5147] Bluetooth: hci3: command 0x0406 tx timeout
[  186.376461][ T5841] Bluetooth: hci1: command 0x0406 tx timeout
[  186.415925][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.423031][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.553920][ T9642] 8021q: adding VLAN 0 to HW filter on device batadv0
[  186.590408][ T9642] veth0_vlan: entered promiscuous mode
[  186.600293][ T9642] veth1_vlan: entered promiscuous mode
[  186.627926][ T9642] veth0_macvtap: entered promiscuous mode
[  186.637637][ T9642] veth1_macvtap: entered promiscuous mode
[  186.653229][ T9642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.665059][ T9642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.675206][ T9642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.685802][ T9642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.697024][ T9642] batman_adv: batadv0: Interface activated: batadv_slave_0
[  186.707561][ T9642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.718837][ T9642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.729037][ T9642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.739571][ T9642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.750697][ T9642] batman_adv: batadv0: Interface activated: batadv_slave_1
[  186.763816][ T9642] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.773649][ T9642] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.783589][ T9642] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.793228][ T9642] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.845785][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.853652][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.876224][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.884206][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.563647][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.532114][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  189.541835][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  189.550163][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  189.558969][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  189.568462][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  189.576355][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  189.691065][ T9656] chnl_net:caif_netlink_parms(): no params data found
[  189.741652][ T9656] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.749747][ T9656] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.757059][ T9656] bridge_slave_0: entered allmulticast mode
[  189.763865][ T9656] bridge_slave_0: entered promiscuous mode
[  189.772960][ T9656] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.780399][ T9656] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.788184][ T9656] bridge_slave_1: entered allmulticast mode
[  189.795139][ T9656] bridge_slave_1: entered promiscuous mode
[  189.820113][ T9656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  189.833256][ T9656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  189.863963][ T9656] team0: Port device team_slave_0 added
[  189.873579][ T9656] team0: Port device team_slave_1 added
[  189.898515][ T9656] batman_adv: batadv0: Adding interface: batadv_slave_0
[  189.905633][ T9656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.932041][ T9656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  189.946120][ T9656] batman_adv: batadv0: Adding interface: batadv_slave_1
[  189.953113][ T9656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.979471][ T9656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.013593][ T9656] hsr_slave_0: entered promiscuous mode
[  190.019923][ T9656] hsr_slave_1: entered promiscuous mode
[  190.026434][ T9656] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  190.034001][ T9656] Cannot create hsr debugfs directory
[  190.162809][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.233875][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.306264][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.389363][   T12] bridge_slave_1: left allmulticast mode
[  190.395824][   T12] bridge_slave_1: left promiscuous mode
[  190.401529][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.410860][   T12] bridge_slave_0: left allmulticast mode
[  190.416925][   T12] bridge_slave_0: left promiscuous mode
[  190.422690][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.798099][ T9669] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1095'.
[  190.841347][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  190.857718][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  190.872131][   T12] bond0 (unregistering): Released all slaves
[  190.908768][ T9678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1093'.
[  191.031678][ T9683] netlink: 304 bytes leftover after parsing attributes in process `syz.3.1096'.
[  191.068852][ T9668] netlink: 'syz.2.1093': attribute type 1 has an invalid length.
[  191.085305][ T9668] netlink: 'syz.2.1093': attribute type 2 has an invalid length.
[  191.120436][ T9671] delete_channel: no stack
[  191.135425][ T9675] vlan4: entered promiscuous mode
[  191.140640][ T9675] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  191.153724][ T9675] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  191.227549][ T9671] delete_channel: no stack
[  191.232153][ T9671] delete_channel: no stack
[  191.240576][ T9687] Bluetooth: MGMT ver 1.23
[  191.462867][ T9695] netlink: 700 bytes leftover after parsing attributes in process `syz.4.1099'.
[  191.528946][   T12] hsr_slave_0: left promiscuous mode
[  191.537244][   T12] hsr_slave_1: left promiscuous mode
[  191.547768][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.562959][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.575954][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.583898][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.630168][   T12] veth1_macvtap: left promiscuous mode
[  191.636568][   T12] veth0_macvtap: left promiscuous mode
[  191.642590][   T12] veth1_vlan: left promiscuous mode
[  191.648148][   T54] Bluetooth: hci0: command tx timeout
[  191.649587][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1102'.
[  191.663199][   T12] veth0_vlan: left promiscuous mode
[  192.247812][   T12] team0 (unregistering): Port device team_slave_1 removed
[  192.310949][   T12] team0 (unregistering): Port device team_slave_0 removed
[  193.019323][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1104'.
[  193.155240][ T9717] dvmrp0: entered allmulticast mode
[  193.199465][ T9717] pimreg: entered allmulticast mode
[  193.263955][ T9717] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  193.285888][ T9717] batadv_slave_1: entered promiscuous mode
[  193.487130][ T9656] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  193.512548][ T9656] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  193.582436][ T9656] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  193.619776][ T9725] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  193.674108][ T9656] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  193.719573][ T9721] lo speed is unknown, defaulting to 1000
[  193.736255][ T9734] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1113'.
[  193.774055][ T9721] lo speed is unknown, defaulting to 1000
[  193.792334][ T9736] netlink: 304 bytes leftover after parsing attributes in process `syz.0.1114'.
[  193.813195][ T9721] lo speed is unknown, defaulting to 1000
[  193.832754][ T9721] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  193.856968][ T9721] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  193.912063][ T9656] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.950605][ T9656] 8021q: adding VLAN 0 to HW filter on device team0
[  193.980290][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.987477][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.997582][ T9721] lo speed is unknown, defaulting to 1000
[  194.020978][ T9721] lo speed is unknown, defaulting to 1000
[  194.027922][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.035071][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.047432][ T9721] lo speed is unknown, defaulting to 1000
[  194.056504][ T9721] lo speed is unknown, defaulting to 1000
[  194.071109][ T9721] lo speed is unknown, defaulting to 1000
[  194.082596][ T9721] lo speed is unknown, defaulting to 1000
[  194.122442][ T9721] lo speed is unknown, defaulting to 1000
[  194.283004][ T9751] netlink: 'syz.4.1116': attribute type 1 has an invalid length.
[  194.302350][ T9751] netlink: 'syz.4.1116': attribute type 2 has an invalid length.
[  194.350185][ T9751] vlan4: entered promiscuous mode
[  194.396276][ T9656] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.406553][ T9755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1116'.
[  194.480492][ T9656] veth0_vlan: entered promiscuous mode
[  194.499948][ T9656] veth1_vlan: entered promiscuous mode
[  194.533211][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  194.540601][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  194.568076][ T9656] veth0_macvtap: entered promiscuous mode
[  194.578816][ T9656] veth1_macvtap: entered promiscuous mode
[  194.598255][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.626121][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.654934][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  194.667418][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.678916][ T9656] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.698688][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  194.747076][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.795755][ T9656] batman_adv: batadv0: Interface activated: batadv_slave_1
[  194.814989][ T9763] dvmrp0: entered allmulticast mode
[  194.822935][ T9656] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.861323][ T9656] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.881925][ T9656] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.904776][ T9656] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.938116][ T9763] pimreg: entered allmulticast mode
[  195.008404][ T9763] batadv_slave_1: entered promiscuous mode
[  195.135313][   T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.162153][   T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.196598][ T9783] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1126'.
[  195.221399][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.239613][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.315667][ T9788] bridge0: entered promiscuous mode
[  195.323450][ T9788] bridge0: left promiscuous mode
[  195.601684][ T9801] netlink: 'syz.4.1133': attribute type 13 has an invalid length.
[  195.646047][   T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  196.168306][ T9814] __nla_validate_parse: 4 callbacks suppressed
[  196.168326][ T9814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1135'.
[  196.239381][ T9826] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1138'.
[  196.254029][ T9824] IPVS: length: 78 != 422621984
[  196.259613][ T9826] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1138'.
[  196.307836][ T9826] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1138'.
[  196.337234][ T9826] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1138'.
[  196.373260][ T9826] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1138'.
[  196.736636][ T1122] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.858255][ T9844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1141'.
[  197.470088][ T1122] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.612206][ T1122] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.660720][ T1122] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.733556][ T1122] bridge_slave_1: left allmulticast mode
[  197.739384][ T1122] bridge_slave_1: left promiscuous mode
[  197.745157][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.841260][ T9849] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1145'.
[  197.851208][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1143'.
[  197.874526][ T1122] bridge_slave_0: left allmulticast mode
[  197.880228][ T1122] bridge_slave_0: left promiscuous mode
[  197.911765][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.007083][ T9864] netlink: 'syz.0.1142': attribute type 4 has an invalid length.
[  198.267111][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  198.288994][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  198.302208][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  198.313253][ T9869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1147'.
[  198.313465][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  198.331521][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  198.339197][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  198.690865][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  198.702931][ T9883] IPVS: length: 78 != 422621984
[  198.708498][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  198.720182][ T1122] bond0 (unregistering): Released all slaves
[  198.750789][ T9868] macsec1: entered promiscuous mode
[  198.764523][ T9868] team0: entered promiscuous mode
[  198.769673][ T9868] team_slave_0: entered promiscuous mode
[  198.787545][ T9868] team_slave_1: entered promiscuous mode
[  198.793592][ T9868] macsec1: entered allmulticast mode
[  198.811537][ T9868] team0: entered allmulticast mode
[  198.817058][ T9868] team_slave_0: entered allmulticast mode
[  198.822806][ T9868] team_slave_1: entered allmulticast mode
[  199.045921][ T9872] lo speed is unknown, defaulting to 1000
[  199.472179][ T9908] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  199.506581][ T9908] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.531383][ T9908] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  199.551037][ T9923] netlink: 'syz.2.1161': attribute type 4 has an invalid length.
[  199.858211][ T1122] hsr_slave_0: left promiscuous mode
[  199.871711][ T1122] hsr_slave_1: left promiscuous mode
[  199.890909][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.908223][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.945435][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.974136][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.016215][ T1122] veth1_macvtap: left promiscuous mode
[  200.021960][ T1122] veth0_macvtap: left promiscuous mode
[  200.028695][ T1122] veth1_vlan: left promiscuous mode
[  200.034152][ T1122] veth0_vlan: left promiscuous mode
[  200.373538][   T54] Bluetooth: hci0: command tx timeout
[  200.651351][ T1122] team0 (unregistering): Port device team_slave_1 removed
[  200.706391][ T1122] team0 (unregistering): Port device team_slave_0 removed
[  201.165245][ T9908] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  201.183647][ T9908] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.194654][ T9908] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  201.211634][ T9936] __nla_validate_parse: 4 callbacks suppressed
[  201.211651][ T9936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1165'.
[  201.244654][ T9943] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$���UL�vy��آ�D��UD�w�}�zR'
[  201.267432][ T9943] CPU: 1 UID: 0 PID: 9943 Comm: syz.3.1166 Not tainted 6.14.0-rc1-syzkaller-00197-gacdefab0dcbc #0
[  201.267461][ T9943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  201.267477][ T9943] Call Trace:
[  201.267484][ T9943]  <TASK>
[  201.267492][ T9943]  dump_stack_lvl+0x241/0x360
[  201.267520][ T9943]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.267539][ T9943]  ? __pfx__printk+0x10/0x10
[  201.267580][ T9943]  ? __kmalloc_cache_noprof+0x243/0x390
[  201.267598][ T9943]  ? sysfs_warn_dup+0x51/0xa0
[  201.267625][ T9943]  sysfs_warn_dup+0x8e/0xa0
[  201.267648][ T9943]  sysfs_do_create_link_sd+0xbe/0x110
[  201.267673][ T9943]  device_add_class_symlinks+0x1c5/0x250
[  201.267694][ T9943]  device_add+0x553/0xbf0
[  201.267718][ T9943]  wiphy_register+0x1a58/0x27b0
[  201.267753][ T9943]  ? __pfx_wiphy_register+0x10/0x10
[  201.267771][ T9943]  ? minstrel_ht_alloc+0x72b/0x860
[  201.267798][ T9943]  ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620
[  201.267825][ T9943]  ieee80211_register_hw+0x354e/0x4240
[  201.267861][ T9943]  ? ieee80211_register_hw+0x15b1/0x4240
[  201.267892][ T9943]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  201.267927][ T9943]  ? __asan_memset+0x23/0x50
[  201.267949][ T9943]  ? __hrtimer_init+0x170/0x250
[  201.267979][ T9943]  mac80211_hwsim_new_radio+0x2a9f/0x4aa0
[  201.268034][ T9943]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  201.268057][ T9943]  ? kstrndup+0x5c/0xb0
[  201.268078][ T9943]  ? __asan_memcpy+0x40/0x70
[  201.268104][ T9943]  hwsim_new_radio_nl+0xece/0x2290
[  201.268141][ T9943]  ? __pfx___nla_validate_parse+0x10/0x10
[  201.268168][ T9943]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  201.268227][ T9943]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  201.268255][ T9943]  genl_rcv_msg+0xb14/0xec0
[  201.268284][ T9943]  ? __pfx_genl_rcv_msg+0x10/0x10
[  201.268334][ T9943]  ? __pfx_lock_acquire+0x10/0x10
[  201.268356][ T9943]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  201.268380][ T9943]  ? __pfx___might_resched+0x10/0x10
[  201.268407][ T9943]  netlink_rcv_skb+0x1e3/0x430
[  201.268423][ T9943]  ? __pfx_genl_rcv_msg+0x10/0x10
[  201.268444][ T9943]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  201.268492][ T9943]  genl_rcv+0x28/0x40
[  201.268509][ T9943]  netlink_unicast+0x7f6/0x990
[  201.268539][ T9943]  ? __pfx_netlink_unicast+0x10/0x10
[  201.268570][ T9943]  ? __virt_addr_valid+0x45f/0x530
[  201.268595][ T9943]  ? __phys_addr_symbol+0x2f/0x70
[  201.268617][ T9943]  ? __check_object_size+0x47a/0x730
[  201.268638][ T9943]  netlink_sendmsg+0x8e4/0xcb0
[  201.268667][ T9943]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.268688][ T9943]  ? aa_sock_msg_perm+0x91/0x160
[  201.268714][ T9943]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.268729][ T9943]  __sock_sendmsg+0x221/0x270
[  201.268752][ T9943]  ____sys_sendmsg+0x52a/0x7e0
[  201.268778][ T9943]  ? __pfx_____sys_sendmsg+0x10/0x10
[  201.268792][ T9943]  ? __fget_files+0x2a/0x410
[  201.268811][ T9943]  ? __fget_files+0x2a/0x410
[  201.268840][ T9943]  __sys_sendmsg+0x269/0x350
[  201.268855][ T9943]  ? __pfx_futex_wake+0x10/0x10
[  201.268881][ T9943]  ? __pfx___sys_sendmsg+0x10/0x10
[  201.268945][ T9943]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  201.268969][ T9943]  ? do_syscall_64+0x100/0x230
[  201.268994][ T9943]  ? do_syscall_64+0xb6/0x230
[  201.269019][ T9943]  do_syscall_64+0xf3/0x230
[  201.269041][ T9943]  ? clear_bhb_loop+0x35/0x90
[  201.269066][ T9943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.269086][ T9943] RIP: 0033:0x7f883d98cde9
[  201.269102][ T9943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.269117][ T9943] RSP: 002b:00007f883b7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  201.269136][ T9943] RAX: ffffffffffffffda RBX: 00007f883dba6080 RCX: 00007f883d98cde9
[  201.269148][ T9943] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000009
[  201.269159][ T9943] RBP: 00007f883da0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  201.269169][ T9943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.269179][ T9943] R13: 0000000000000000 R14: 00007f883dba6080 R15: 00007ffcd97bd8b8
[  201.269209][ T9943]  </TASK>
[  201.739091][ T9908] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  201.750583][ T9908] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.762206][ T9908] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  201.890049][ T9961] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  201.913302][ T9908] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  201.924062][ T9908] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.934931][ T9908] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  201.957182][ T9872] chnl_net:caif_netlink_parms(): no params data found
[  202.043602][ T9967] netlink: 'syz.4.1172': attribute type 8 has an invalid length.
[  202.146720][ T9974] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1171'.
[  202.214078][ T9872] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.248817][ T9872] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.269724][ T9872] bridge_slave_0: entered allmulticast mode
[  202.290345][ T9872] bridge_slave_0: entered promiscuous mode
[  202.335498][ T9908] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  202.358007][ T9908] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  202.361876][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1175'.
[  202.377405][ T9908] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  202.397784][ T9872] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.414459][ T9872] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.432583][ T9872] bridge_slave_1: entered allmulticast mode
[  202.441539][ T9872] bridge_slave_1: entered promiscuous mode
[  202.447963][   T54] Bluetooth: hci0: command tx timeout
[  202.530168][ T9908] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  202.554440][ T9908] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  202.562998][ T9908] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  202.580569][ T9908] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  202.589317][ T9908] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  202.598729][ T9908] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  202.644571][ T9994] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1177'.
[  202.666970][ T9994] bridge0: entered promiscuous mode
[  202.677192][ T9994] bridge0: left promiscuous mode
[  202.738583][ T9908] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  202.755882][ T9908] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  202.764198][ T9908] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  202.806474][ T9872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.860705][ T9872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.871056][ T9995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1178'.
[  202.972098][ T9872] team0: Port device team_slave_0 added
[  203.119230][ T9872] team0: Port device team_slave_1 added
[  203.209572][ T9872] batman_adv: batadv0: Adding interface: batadv_slave_0
[  203.225704][ T9872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.253047][ T9872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  203.281070][T10021] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1187'.
[  203.301555][ T9872] batman_adv: batadv0: Adding interface: batadv_slave_1
[  203.334421][ T9872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.378741][ T9872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  203.429415][T10027] netlink: 'syz.4.1187': attribute type 4 has an invalid length.
[  203.440287][T10032] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1188'.
[  203.552201][   T46] lo speed is unknown, defaulting to 1000
[  203.583439][T10034] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  203.625432][ T9872] hsr_slave_0: entered promiscuous mode
[  203.672767][ T9872] hsr_slave_1: entered promiscuous mode
[  203.686207][ T9872] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  203.705379][ T9872] Cannot create hsr debugfs directory
[  203.710989][T10041] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1192'.
[  204.029723][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1199'.
[  204.062435][T10060] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  204.074062][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1199'.
[  204.091761][T10061] Cannot find add_set index 32768 as target
[  204.106925][T10064] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  204.400984][T10073] syzkaller1: entered promiscuous mode
[  204.409927][T10073] syzkaller1: entered allmulticast mode
[  204.431244][T10073] netlink: 'syz.0.1202': attribute type 4 has an invalid length.
[  204.525255][   T54] Bluetooth: hci0: command tx timeout
[  204.670053][ T9872] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  204.680231][ T9872] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  204.699795][ T9872] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  204.713320][ T9872] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  204.722488][T10084] Bluetooth: MGMT ver 1.23
[  204.872614][ T9872] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.908139][ T9872] 8021q: adding VLAN 0 to HW filter on device team0
[  204.921773][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.928991][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.966272][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.973437][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.120071][T10102] vlan3: left allmulticast mode
[  205.165556][T10102] team0: left allmulticast mode
[  205.183775][T10102] team_slave_0: left allmulticast mode
[  205.194011][T10102] team_slave_1: left allmulticast mode
[  205.200899][T10102] vlan3: left promiscuous mode
[  205.206115][T10102] team0: left promiscuous mode
[  205.211093][T10102] team_slave_0: left promiscuous mode
[  205.221383][T10102] team_slave_1: left promiscuous mode
[  205.234788][T10102] bridge0: port 4(vlan3) entered disabled state
[  205.243088][T10102] vlan2: left allmulticast mode
[  205.258593][T10102] gretap0: left allmulticast mode
[  205.263779][T10102] vlan2: left promiscuous mode
[  205.270031][T10102] gretap0: left promiscuous mode
[  205.275567][T10102] bridge0: port 3(vlan2) entered disabled state
[  205.295923][T10102] bridge_slave_1: left allmulticast mode
[  205.301614][T10102] bridge_slave_1: left promiscuous mode
[  205.308016][T10102] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.317897][T10102] bridge_slave_0: left allmulticast mode
[  205.323712][T10102] bridge_slave_0: left promiscuous mode
[  205.333197][T10102] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.618852][ T9872] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.765839][ T9872] veth0_vlan: entered promiscuous mode
[  205.791147][ T9872] veth1_vlan: entered promiscuous mode
[  205.849266][T10128] netlink: 'syz.2.1222': attribute type 4 has an invalid length.
[  205.855669][ T9872] veth0_macvtap: entered promiscuous mode
[  205.877692][ T9872] veth1_macvtap: entered promiscuous mode
[  205.936179][ T9872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.953483][ T9872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.992229][ T9872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.009689][ T9872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.023958][ T9872] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.053969][ T9872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.086242][ T9872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.097613][ T9872] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.118269][ T9872] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.137687][ T9872] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.155284][ T9872] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.178395][ T9872] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.334246][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.362827][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.382720][T10143] __nla_validate_parse: 9 callbacks suppressed
[  206.382739][T10143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1227'.
[  206.465930][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.474071][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.604733][   T54] Bluetooth: hci0: command tx timeout
[  206.706487][T10156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1231'.
[  206.801050][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1234'.
[  206.815777][T10161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1234'.
[  206.829831][T10162] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1234'.
[  207.000921][T10168] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1236'.
[  207.032306][T10170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1237'.
[  207.199999][T10178] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1240'.
[  207.301401][T10180] lo speed is unknown, defaulting to 1000
[  207.426067][T10188] netlink: 'syz.4.1244': attribute type 2 has an invalid length.
[  207.434121][T10188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1244'.
[  207.736748][T10198] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1246'.
[  207.854064][ T1163] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.702984][ T1163] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.786311][ T1163] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.849778][ T1163] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.166464][ T1163] bridge_slave_1: left allmulticast mode
[  209.172539][ T1163] bridge_slave_1: left promiscuous mode
[  209.204559][ T1163] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.274803][ T1163] bridge_slave_0: left allmulticast mode
[  209.280517][ T1163] bridge_slave_0: left promiscuous mode
[  209.305036][ T1163] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.443111][T10234] Cannot find add_set index 32768 as target
[  209.582657][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  209.594235][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  209.607077][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  209.617051][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  209.633940][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  209.642263][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  209.996914][ T1163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  210.008830][ T1163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  210.019304][ T1163] bond0 (unregistering): Released all slaves
[  210.081119][T10240] lo speed is unknown, defaulting to 1000
[  210.738063][T10240] chnl_net:caif_netlink_parms(): no params data found
[  210.767737][T10275] x_tables: duplicate underflow at hook 1
[  210.998831][ T1163] hsr_slave_0: left promiscuous mode
[  211.008349][ T1163] hsr_slave_1: left promiscuous mode
[  211.044484][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  211.051965][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_0
[  211.079898][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  211.103259][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_1
[  211.153536][ T1163] veth1_macvtap: left promiscuous mode
[  211.167225][ T1163] veth0_macvtap: left promiscuous mode
[  211.180468][ T1163] veth1_vlan: left promiscuous mode
[  211.186384][ T1163] veth0_vlan: left promiscuous mode
[  211.665860][ T1163] team0 (unregistering): Port device team_slave_1 removed
[  211.715030][ T1163] team0 (unregistering): Port device team_slave_0 removed
[  211.739799][ T5838] Bluetooth: hci0: command tx timeout
[  212.175313][T10296] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  212.204442][T10299] __nla_validate_parse: 8 callbacks suppressed
[  212.204461][T10299] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1280'.
[  212.310147][T10322] Bluetooth: MGMT ver 1.23
[  212.452344][T10325] lo speed is unknown, defaulting to 1000
[  212.458287][T10329] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1287'.
[  212.530909][T10334] FAULT_INJECTION: forcing a failure.
[  212.530909][T10334] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  212.545754][T10334] CPU: 1 UID: 0 PID: 10334 Comm: syz.2.1289 Not tainted 6.14.0-rc1-syzkaller-00197-gacdefab0dcbc #0
[  212.545779][T10334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  212.545790][T10334] Call Trace:
[  212.545797][T10334]  <TASK>
[  212.545803][T10334]  dump_stack_lvl+0x241/0x360
[  212.545828][T10334]  ? __pfx_dump_stack_lvl+0x10/0x10
[  212.545845][T10334]  ? __pfx__printk+0x10/0x10
[  212.545871][T10334]  ? __pfx_lock_release+0x10/0x10
[  212.545900][T10334]  should_fail_ex+0x40a/0x550
[  212.545922][T10334]  _copy_from_user+0x2d/0xb0
[  212.545938][T10334]  copy_msghdr_from_user+0xae/0x680
[  212.545961][T10334]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  212.545974][T10334]  ? __fget_files+0x2a/0x410
[  212.545991][T10334]  ? __fget_files+0x2a/0x410
[  212.546010][T10334]  __sys_sendmmsg+0x32b/0x720
[  212.546029][T10334]  ? __pfx___sys_sendmmsg+0x10/0x10
[  212.546048][T10334]  ? __pfx_lock_release+0x10/0x10
[  212.546065][T10334]  ? kstrtouint_from_user+0x128/0x190
[  212.546103][T10334]  ? ksys_write+0x22a/0x2b0
[  212.546122][T10334]  ? __pfx_lock_release+0x10/0x10
[  212.546146][T10334]  ? sb_end_write+0xe9/0x1c0
[  212.546163][T10334]  ? vfs_write+0x7fa/0xd10
[  212.546183][T10334]  ? __mutex_unlock_slowpath+0x227/0x800
[  212.546226][T10334]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  212.546248][T10334]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  212.546269][T10334]  ? do_syscall_64+0x100/0x230
[  212.546291][T10334]  __x64_sys_sendmmsg+0xa0/0xb0
[  212.546309][T10334]  do_syscall_64+0xf3/0x230
[  212.546329][T10334]  ? clear_bhb_loop+0x35/0x90
[  212.546352][T10334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.546370][T10334] RIP: 0033:0x7f696418cde9
[  212.546385][T10334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  212.546397][T10334] RSP: 002b:00007f6965019038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  212.546414][T10334] RAX: ffffffffffffffda RBX: 00007f69643a5fa0 RCX: 00007f696418cde9
[  212.546424][T10334] RDX: 0000000004924b68 RSI: 0000400000000140 RDI: 0000000000000005
[  212.546434][T10334] RBP: 00007f6965019090 R08: 0000000000000000 R09: 0000000000000000
[  212.546444][T10334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  212.546452][T10334] R13: 0000000000000000 R14: 00007f69643a5fa0 R15: 00007ffe32f90c48
[  212.546474][T10334]  </TASK>
[  212.547082][T10240] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.791319][T10240] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.800023][T10240] bridge_slave_0: entered allmulticast mode
[  212.807164][T10343] trusted_key: syz.2.1290 sent an empty control message without MSG_MORE.
[  212.810813][T10240] bridge_slave_0: entered promiscuous mode
[  212.871660][T10240] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.882147][T10240] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.934625][T10240] bridge_slave_1: entered allmulticast mode
[  212.941929][T10240] bridge_slave_1: entered promiscuous mode
[  213.066823][T10347] 8021q: adding VLAN 0 to HW filter on device bond3
[  213.067957][T10352] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1295'.
[  213.107038][T10240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  213.129462][T10240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  213.136486][T10353] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1295'.
[  213.156047][T10353] openvswitch: netlink: Message has 44053 unknown bytes.
[  213.253669][T10240] team0: Port device team_slave_0 added
[  213.286295][T10240] team0: Port device team_slave_1 added
[  213.325183][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1296'.
[  213.416326][T10240] batman_adv: batadv0: Adding interface: batadv_slave_0
[  213.440423][T10240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.486529][T10240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  213.510063][T10240] batman_adv: batadv0: Adding interface: batadv_slave_1
[  213.517289][T10240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.543738][T10240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  213.612194][T10366] bond4: entered promiscuous mode
[  213.623297][T10366] 8021q: adding VLAN 0 to HW filter on device bond4
[  213.633858][T10240] hsr_slave_0: entered promiscuous mode
[  213.641788][T10240] hsr_slave_1: entered promiscuous mode
[  213.648300][T10240] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  213.656195][T10240] Cannot create hsr debugfs directory
[  213.742395][T10374] FAULT_INJECTION: forcing a failure.
[  213.742395][T10374] name failslab, interval 1, probability 0, space 0, times 0
[  213.764868][T10374] CPU: 0 UID: 0 PID: 10374 Comm: syz.3.1301 Not tainted 6.14.0-rc1-syzkaller-00197-gacdefab0dcbc #0
[  213.764894][T10374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  213.764911][T10374] Call Trace:
[  213.764917][T10374]  <TASK>
[  213.764924][T10374]  dump_stack_lvl+0x241/0x360
[  213.764949][T10374]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.764967][T10374]  ? __pfx__printk+0x10/0x10
[  213.764991][T10374]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  213.765011][T10374]  ? __pfx___might_resched+0x10/0x10
[  213.765034][T10374]  should_fail_ex+0x40a/0x550
[  213.765057][T10374]  should_failslab+0xac/0x100
[  213.765076][T10374]  kmem_cache_alloc_node_noprof+0x77/0x380
[  213.765093][T10374]  ? __alloc_skb+0x1c3/0x440
[  213.765117][T10374]  __alloc_skb+0x1c3/0x440
[  213.765143][T10374]  ? __pfx___alloc_skb+0x10/0x10
[  213.765167][T10374]  ? netlink_autobind+0xd6/0x2f0
[  213.765182][T10374]  ? netlink_autobind+0x2b0/0x2f0
[  213.765202][T10374]  netlink_sendmsg+0x638/0xcb0
[  213.765229][T10374]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.765249][T10374]  ? aa_sock_msg_perm+0x91/0x160
[  213.765273][T10374]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.765286][T10374]  __sock_sendmsg+0x221/0x270
[  213.765305][T10374]  ____sys_sendmsg+0x52a/0x7e0
[  213.765328][T10374]  ? __pfx_____sys_sendmsg+0x10/0x10
[  213.765342][T10374]  ? __fget_files+0x2a/0x410
[  213.765362][T10374]  ? __fget_files+0x2a/0x410
[  213.765386][T10374]  __sys_sendmmsg+0x36a/0x720
[  213.765412][T10374]  ? __pfx___sys_sendmmsg+0x10/0x10
[  213.765441][T10374]  ? __pfx_lock_release+0x10/0x10
[  213.765458][T10374]  ? kstrtouint_from_user+0x128/0x190
[  213.765498][T10374]  ? ksys_write+0x22a/0x2b0
[  213.765519][T10374]  ? __pfx_lock_release+0x10/0x10
[  213.765544][T10374]  ? sb_end_write+0xe9/0x1c0
[  213.765561][T10374]  ? vfs_write+0x7fa/0xd10
[  213.765583][T10374]  ? __mutex_unlock_slowpath+0x227/0x800
[  213.765629][T10374]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  213.765650][T10374]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  213.765672][T10374]  ? do_syscall_64+0x100/0x230
[  213.765695][T10374]  __x64_sys_sendmmsg+0xa0/0xb0
[  213.765712][T10374]  do_syscall_64+0xf3/0x230
[  213.765731][T10374]  ? clear_bhb_loop+0x35/0x90
[  213.765755][T10374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.765774][T10374] RIP: 0033:0x7f883d98cde9
[  213.765790][T10374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.765804][T10374] RSP: 002b:00007f883e70e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  213.765822][T10374] RAX: ffffffffffffffda RBX: 00007f883dba5fa0 RCX: 00007f883d98cde9
[  213.765833][T10374] RDX: 0000000004924b68 RSI: 0000400000000140 RDI: 0000000000000005
[  213.765847][T10374] RBP: 00007f883e70e090 R08: 0000000000000000 R09: 0000000000000000
[  213.765856][T10374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  213.765865][T10374] R13: 0000000000000000 R14: 00007f883dba5fa0 R15: 00007ffcd97bd8b8
[  213.765890][T10374]  </TASK>
[  213.770739][T10376] netlink: 'syz.0.1302': attribute type 4 has an invalid length.
[  214.138702][T10350] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  214.198509][T10382] netlink: 'syz.3.1305': attribute type 4 has an invalid length.
[  214.279608][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'.
[  214.300607][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1308'.
[  214.340874][T10390] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  214.409689][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1309'.
[  214.557141][T10401] lo speed is unknown, defaulting to 1000
[  214.716421][T10413] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1311'.
[  215.382406][T10406] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  215.415025][T10406] batadv_slave_1: left promiscuous mode
[  215.731834][T10406] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.740831][T10406] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.749771][T10406] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.758725][T10406] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.802110][T10406] ip6erspan0: left promiscuous mode
[  215.849138][T10412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1315'.
[  216.041090][T10240] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  216.057245][T10240] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  216.080528][T10433] netlink: 'syz.2.1319': attribute type 4 has an invalid length.
[  216.092606][T10240] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  216.111191][T10240] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  216.206665][ T5838] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  216.243364][T10442] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  216.334066][T10240] 8021q: adding VLAN 0 to HW filter on device bond0
[  216.351476][T10240] 8021q: adding VLAN 0 to HW filter on device team0
[  216.367121][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.374352][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  216.411494][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.418796][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  216.803465][T10457] lo speed is unknown, defaulting to 1000
[  216.926606][T10240] 8021q: adding VLAN 0 to HW filter on device batadv0
[  216.976412][T10240] veth0_vlan: entered promiscuous mode
[  216.989618][T10240] veth1_vlan: entered promiscuous mode
[  217.033708][T10240] veth0_macvtap: entered promiscuous mode
[  217.053833][T10240] veth1_macvtap: entered promiscuous mode
[  217.099350][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.114735][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.128783][T10240] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.159178][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.178456][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.199495][T10240] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.217778][T10240] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.241446][T10240] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.254572][T10240] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.270005][T10240] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.371841][T10470] netlink: 'syz.4.1331': attribute type 2 has an invalid length.
[  217.382607][T10470] netlink: 'syz.4.1331': attribute type 9 has an invalid length.
[  217.393595][T10470] __nla_validate_parse: 6 callbacks suppressed
[  217.393614][T10470] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1331'.
[  217.510667][T10472] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1331'.
[  217.532676][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'.
[  217.545623][T10474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1332'.
[  217.581135][T10470] netlink: 'syz.4.1331': attribute type 1 has an invalid length.
[  217.616960][T10474] netlink: 'syz.0.1332': attribute type 4 has an invalid length.
[  217.629992][T10474] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1332'.
[  217.732303][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.773614][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.838776][T10479] macvlan4: entered promiscuous mode
[  217.849545][T10479] vlan0: entered promiscuous mode
[  217.914501][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.922425][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.953275][T10486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1337'.
[  218.014707][T10488] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1338'.
[  218.078413][T10492] tipc: Started in network mode
[  218.083341][T10492] tipc: Node identity c2acf649de13, cluster identity 4711
[  218.098836][T10492] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.148500][T10492] netlink: 1024 bytes leftover after parsing attributes in process `syz.4.1339'.
[  218.186428][T10492] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  218.281976][T10492] tipc: Disabling bearer <eth:syzkaller0>
[  218.381769][T10512] netlink: 'syz.3.1344': attribute type 4 has an invalid length.
[  218.486567][T10516] bond0: Unable to set peer notification delay as MII monitoring is disabled
[  218.574873][T10521] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1349'.
[  218.615119][T10526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1350'.
[  218.881571][T10543] netlink: 'syz.3.1356': attribute type 10 has an invalid length.
[  218.936190][T10543] dummy0: entered promiscuous mode
[  218.956674][T10543] dummy0: entered allmulticast mode
[  218.980099][T10543] team0: Port device dummy0 added
[  219.023718][T10551] bridge0: entered promiscuous mode
[  219.042204][T10551] bridge0: entered allmulticast mode
[  219.122652][T10553] bridge0: entered promiscuous mode
[  219.142877][T10553] bridge0: entered allmulticast mode
[  219.143226][T10560] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  219.182333][T10563] netlink: 'syz.2.1359': attribute type 4 has an invalid length.
[  219.233858][T10565] macsec2: entered allmulticast mode
[  219.254731][T10565] macvlan0: entered allmulticast mode
[  219.300245][T10565] macvlan0: left allmulticast mode
[  219.339853][T10567] macsec2: entered allmulticast mode
[  219.345324][T10567] macvlan0: entered allmulticast mode
[  219.352751][T10567] macvlan0: left allmulticast mode
[  219.508979][T10581] sctp: [Deprecated]: syz.4.1364 (pid 10581) Use of int in max_burst socket option deprecated.
[  219.508979][T10581] Use struct sctp_assoc_value instead
[  220.066998][   T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.923826][   T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.004707][   T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.056851][   T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.136724][   T35] bridge_slave_1: left allmulticast mode
[  221.142409][   T35] bridge_slave_1: left promiscuous mode
[  221.148953][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.157678][   T35] bridge_slave_0: left allmulticast mode
[  221.163410][   T35] bridge_slave_0: left promiscuous mode
[  221.169703][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.263712][ T5838] Bluetooth: hci4: link tx timeout
[  221.270252][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  221.281086][ T5838] Bluetooth: hci4: link tx timeout
[  221.286353][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  221.670932][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  221.685579][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  221.695239][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  221.709283][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  221.733662][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  221.742849][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  221.891670][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  221.904611][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  221.916525][   T35] bond0 (unregistering): Released all slaves
[  221.930855][T10611] veth0_to_bridge: entered promiscuous mode
[  221.951662][T10610] veth0_to_bridge: left promiscuous mode
[  222.011605][T10614] lo speed is unknown, defaulting to 1000
[  222.582559][T10614] chnl_net:caif_netlink_parms(): no params data found
[  222.700547][T10646] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  222.723050][T10647] sctp: [Deprecated]: syz.3.1383 (pid 10647) Use of struct sctp_assoc_value in delayed_ack socket option.
[  222.723050][T10647] Use struct sctp_sack_info instead
[  222.780539][   T35] hsr_slave_0: left promiscuous mode
[  222.790259][   T35] hsr_slave_1: left promiscuous mode
[  222.796303][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.814682][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.830958][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.839644][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.891321][   T35] veth1_macvtap: left promiscuous mode
[  222.900949][   T35] veth0_macvtap: left promiscuous mode
[  222.910055][   T35] veth1_vlan: left promiscuous mode
[  222.918906][   T35] veth0_vlan: left promiscuous mode
[  223.079505][T10655] __nla_validate_parse: 6 callbacks suppressed
[  223.079527][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1384'.
[  223.325378][ T5837] Bluetooth: hci4: command 0x0405 tx timeout
[  223.515118][   T35] team0 (unregistering): Port device team_slave_1 removed
[  223.563073][   T35] team0 (unregistering): Port device team_slave_0 removed
[  223.809028][   T54] Bluetooth: hci0: command tx timeout
[  224.241369][T10671] netlink: 'syz.4.1389': attribute type 32 has an invalid length.
[  224.248310][T10673] netlink: 'syz.3.1387': attribute type 4 has an invalid length.
[  224.265658][T10614] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.286745][T10614] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.295129][T10677] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1388'.
[  224.309318][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1389'.
[  224.324819][T10614] bridge_slave_0: entered allmulticast mode
[  224.331877][T10614] bridge_slave_0: entered promiscuous mode
[  224.348060][T10614] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.364966][T10680] FAULT_INJECTION: forcing a failure.
[  224.364966][T10680] name failslab, interval 1, probability 0, space 0, times 0
[  224.393588][T10680] CPU: 1 UID: 0 PID: 10680 Comm: syz.3.1391 Not tainted 6.14.0-rc1-syzkaller-00197-gacdefab0dcbc #0
[  224.393617][T10680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  224.393626][T10680] Call Trace:
[  224.393632][T10680]  <TASK>
[  224.393639][T10680]  dump_stack_lvl+0x241/0x360
[  224.393665][T10680]  ? __pfx_dump_stack_lvl+0x10/0x10
[  224.393682][T10680]  ? __pfx__printk+0x10/0x10
[  224.393732][T10680]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  224.393752][T10680]  ? __pfx___might_resched+0x10/0x10
[  224.393773][T10680]  should_fail_ex+0x40a/0x550
[  224.393796][T10680]  should_failslab+0xac/0x100
[  224.393812][T10680]  kmem_cache_alloc_node_noprof+0x77/0x380
[  224.393829][T10680]  ? __alloc_skb+0x1c3/0x440
[  224.393854][T10680]  __alloc_skb+0x1c3/0x440
[  224.393879][T10680]  ? __pfx___alloc_skb+0x10/0x10
[  224.393903][T10680]  ? netlink_autobind+0xd6/0x2f0
[  224.393919][T10680]  ? netlink_autobind+0x2b0/0x2f0
[  224.393939][T10680]  netlink_sendmsg+0x638/0xcb0
[  224.393966][T10680]  ? __pfx_netlink_sendmsg+0x10/0x10
[  224.393987][T10680]  ? aa_sock_msg_perm+0x91/0x160
[  224.394013][T10680]  ? __pfx_netlink_sendmsg+0x10/0x10
[  224.394028][T10680]  __sock_sendmsg+0x221/0x270
[  224.394050][T10680]  ____sys_sendmsg+0x52a/0x7e0
[  224.394075][T10680]  ? __pfx_____sys_sendmsg+0x10/0x10
[  224.394090][T10680]  ? __fget_files+0x2a/0x410
[  224.394116][T10680]  ? __fget_files+0x2a/0x410
[  224.394142][T10680]  __sys_sendmmsg+0x36a/0x720
[  224.394169][T10680]  ? __pfx___sys_sendmmsg+0x10/0x10
[  224.394197][T10680]  ? __pfx_lock_release+0x10/0x10
[  224.394216][T10680]  ? kstrtouint_from_user+0x128/0x190
[  224.394261][T10680]  ? ksys_write+0x22a/0x2b0
[  224.394279][T10680]  ? __pfx_lock_release+0x10/0x10
[  224.394303][T10680]  ? sb_end_write+0xe9/0x1c0
[  224.394320][T10680]  ? vfs_write+0x7fa/0xd10
[  224.394341][T10680]  ? __mutex_unlock_slowpath+0x227/0x800
[  224.394386][T10680]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  224.394409][T10680]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  224.394428][T10680]  ? do_syscall_64+0x100/0x230
[  224.394451][T10680]  __x64_sys_sendmmsg+0xa0/0xb0
[  224.394469][T10680]  do_syscall_64+0xf3/0x230
[  224.394489][T10680]  ? clear_bhb_loop+0x35/0x90
[  224.394513][T10680]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.394532][T10680] RIP: 0033:0x7f883d98cde9
[  224.394546][T10680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  224.394559][T10680] RSP: 002b:00007f883e70e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  224.394578][T10680] RAX: ffffffffffffffda RBX: 00007f883dba5fa0 RCX: 00007f883d98cde9
[  224.394590][T10680] RDX: 0000000004924b68 RSI: 0000400000000140 RDI: 0000000000000009
[  224.394600][T10680] RBP: 00007f883e70e090 R08: 0000000000000000 R09: 0000000000000000
[  224.394610][T10680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  224.394619][T10680] R13: 0000000000000000 R14: 00007f883dba5fa0 R15: 00007ffcd97bd8b8
[  224.394645][T10680]  </TASK>
[  224.401879][T10614] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.718426][T10614] bridge_slave_1: entered allmulticast mode
[  224.730399][T10614] bridge_slave_1: entered promiscuous mode
[  224.768435][T10671] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  224.939227][T10614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  224.993441][T10614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  225.086516][T10614] team0: Port device team_slave_0 added
[  225.169531][T10614] team0: Port device team_slave_1 added
[  225.204540][T10706] IPv6: sit4: Disabled Multicast RS
[  225.235725][T10614] batman_adv: batadv0: Adding interface: batadv_slave_0
[  225.254426][T10614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.314316][T10614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  225.335959][T10614] batman_adv: batadv0: Adding interface: batadv_slave_1
[  225.343666][T10614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.385468][T10614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  225.415389][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1400'.
[  225.454443][T10718] netlink: 'syz.0.1401': attribute type 4 has an invalid length.
[  225.461716][T10614] hsr_slave_0: entered promiscuous mode
[  225.477116][T10614] hsr_slave_1: entered promiscuous mode
[  225.483565][T10614] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  225.492086][T10614] Cannot create hsr debugfs directory
[  225.630500][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1403'.
[  225.756105][T10730] netlink: 'syz.0.1406': attribute type 6 has an invalid length.
[  225.776614][T10730] netlink: 'syz.0.1406': attribute type 7 has an invalid length.
[  225.789474][T10730] netlink: 'syz.0.1406': attribute type 8 has an invalid length.
[  225.800604][T10730] netlink: 'syz.0.1406': attribute type 13 has an invalid length.
[  225.884401][   T54] Bluetooth: hci0: command tx timeout
[  226.042211][T10749] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1411'.
[  226.066124][T10747] netlink: 356 bytes leftover after parsing attributes in process `syz.2.1410'.
[  226.194162][T10754] netlink: 'syz.0.1413': attribute type 4 has an invalid length.
[  226.239891][T10760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1416'.
[  226.381071][T10762] netlink: 'syz.2.1417': attribute type 10 has an invalid length.
[  226.392634][T10767] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1419'.
[  226.396344][T10762] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  226.482704][T10771] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1420'.
[  226.519867][T10614] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  226.539423][T10614] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  226.644345][T10614] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  226.692294][T10614] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  226.828368][T10787] Bluetooth: MGMT ver 1.23
[  226.848392][T10783] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  226.911387][T10614] 8021q: adding VLAN 0 to HW filter on device bond0
[  226.942577][T10614] 8021q: adding VLAN 0 to HW filter on device team0
[  226.984475][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.991640][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.032534][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.039702][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.458952][T10804] netlink: 'syz.4.1429': attribute type 4 has an invalid length.
[  227.512765][T10614] 8021q: adding VLAN 0 to HW filter on device batadv0
[  227.623885][T10614] veth0_vlan: entered promiscuous mode
[  227.675514][T10614] veth1_vlan: entered promiscuous mode
[  227.731743][T10614] veth0_macvtap: entered promiscuous mode
[  227.768449][T10614] veth1_macvtap: entered promiscuous mode
[  227.817032][T10614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.864169][T10614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.876629][T10614] batman_adv: batadv0: Interface activated: batadv_slave_0
[  227.917949][T10614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.949022][T10614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.979747][T10614] batman_adv: batadv0: Interface activated: batadv_slave_1
[  228.006442][T10614] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.023878][T10614] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.032951][T10614] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.056443][T10614] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.146865][T10826] __nla_validate_parse: 4 callbacks suppressed
[  228.146885][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1437'.
[  228.169090][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1437'.
[  228.335377][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.364705][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.418192][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.433825][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.561581][T10839] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1440'.
[  228.681271][T10845] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1442'.
[  228.760351][T10847] tipc: Cannot configure node identity twice
[  228.919917][T10856] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  228.928819][   T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  228.956289][T10816] ==================================================================
[  228.964402][T10816] BUG: KASAN: slab-use-after-free in skb_queue_purge_reason+0xb9/0x500
[  228.972673][T10816] Read of size 8 at addr ffff88801294a858 by task syz.4.1435/10816
[  228.980581][T10816] 
[  228.982918][T10816] CPU: 1 UID: 0 PID: 10816 Comm: syz.4.1435 Not tainted 6.14.0-rc1-syzkaller-00197-gacdefab0dcbc #0
[  228.982943][T10816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  228.982955][T10816] Call Trace:
[  228.982961][T10816]  <TASK>
[  228.982969][T10816]  dump_stack_lvl+0x241/0x360
[  228.982993][T10816]  ? __pfx_dump_stack_lvl+0x10/0x10
[  228.983010][T10816]  ? __pfx__printk+0x10/0x10
[  228.983036][T10816]  ? _printk+0xd5/0x120
[  228.983059][T10816]  ? __virt_addr_valid+0x183/0x530
[  228.983082][T10816]  ? __virt_addr_valid+0x183/0x530
[  228.983106][T10816]  print_report+0x169/0x550
[  228.983130][T10816]  ? __virt_addr_valid+0x183/0x530
[  228.983152][T10816]  ? __virt_addr_valid+0x183/0x530
[  228.983171][T10816]  ? __virt_addr_valid+0x45f/0x530
[  228.983192][T10816]  ? __phys_addr+0xba/0x170
[  228.983211][T10816]  ? skb_queue_purge_reason+0xb9/0x500
[  228.983230][T10816]  kasan_report+0x143/0x180
[  228.983254][T10816]  ? skb_queue_purge_reason+0xb9/0x500
[  228.983277][T10816]  skb_queue_purge_reason+0xb9/0x500
[  228.983299][T10816]  ? __mutex_unlock_slowpath+0x227/0x800
[  228.983321][T10816]  ? __pfx_skb_queue_purge_reason+0x10/0x10
[  228.983346][T10816]  ? __pfx_hci_conn_hash_flush+0x10/0x10
[  228.983367][T10816]  ? drain_workqueue+0x2d3/0x3a0
[  228.983398][T10816]  vhci_flush+0x44/0x50
[  228.983416][T10816]  ? __pfx_vhci_flush+0x10/0x10
[  228.983431][T10816]  hci_dev_reset+0x42a/0x5d0
[  228.983454][T10816]  sock_do_ioctl+0x158/0x460
[  228.983476][T10816]  ? __pfx_sock_do_ioctl+0x10/0x10
[  228.983517][T10816]  sock_ioctl+0x626/0x8e0
[  228.983537][T10816]  ? __pfx_sock_ioctl+0x10/0x10
[  228.983555][T10816]  ? __fget_files+0x2a/0x410
[  228.983574][T10816]  ? __fget_files+0x2a/0x410
[  228.983592][T10816]  ? __pfx_sock_ioctl+0x10/0x10
[  228.983609][T10816]  __se_sys_ioctl+0xf5/0x170
[  228.983630][T10816]  do_syscall_64+0xf3/0x230
[  228.983651][T10816]  ? clear_bhb_loop+0x35/0x90
[  228.983674][T10816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.983695][T10816] RIP: 0033:0x7f3c1bf8cde9
[  228.983710][T10816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  228.983724][T10816] RSP: 002b:00007f3c1cdc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  228.983744][T10816] RAX: ffffffffffffffda RBX: 00007f3c1c1a5fa0 RCX: 00007f3c1bf8cde9
[  228.983757][T10816] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000009
[  228.983768][T10816] RBP: 00007f3c1c00e2a0 R08: 0000000000000000 R09: 0000000000000000
[  228.983780][T10816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  228.983791][T10816] R13: 0000000000000000 R14: 00007f3c1c1a5fa0 R15: 00007fffb2cace38
[  228.983809][T10816]  </TASK>
[  228.983816][T10816] 
[  229.249530][T10816] Allocated by task 10614:
[  229.253943][T10816]  kasan_save_track+0x3f/0x80
[  229.258619][T10816]  __kasan_kmalloc+0x98/0xb0
[  229.263209][T10816]  __kmalloc_cache_noprof+0x243/0x390
[  229.268571][T10816]  vhci_open+0x57/0x360
[  229.272716][T10816]  misc_open+0x2cc/0x340
[  229.276943][T10816]  chrdev_open+0x521/0x600
[  229.281345][T10816]  do_dentry_open+0xdec/0x1960
[  229.286093][T10816]  vfs_open+0x3b/0x370
[  229.290148][T10816]  path_openat+0x2c81/0x3590
[  229.294729][T10816]  do_filp_open+0x27f/0x4e0
[  229.299221][T10816]  do_sys_openat2+0x13e/0x1d0
[  229.303885][T10816]  __x64_sys_openat+0x247/0x2a0
[  229.308730][T10816]  do_syscall_64+0xf3/0x230
[  229.313246][T10816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.319149][T10816] 
[  229.321462][T10816] Freed by task 10614:
[  229.325511][T10816]  kasan_save_track+0x3f/0x80
[  229.330184][T10816]  kasan_save_free_info+0x40/0x50
[  229.335200][T10816]  __kasan_slab_free+0x59/0x70
[  229.339960][T10816]  kfree+0x196/0x430
[  229.343843][T10816]  vhci_release+0xbc/0xd0
[  229.348166][T10816]  __fput+0x3e9/0x9f0
[  229.352140][T10816]  task_work_run+0x24f/0x310
[  229.356727][T10816]  do_exit+0xa2a/0x28e0
[  229.360873][T10816]  do_group_exit+0x207/0x2c0
[  229.365462][T10816]  __x64_sys_exit_group+0x3f/0x40
[  229.370497][T10816]  x64_sys_call+0x26a8/0x26b0
[  229.375169][T10816]  do_syscall_64+0xf3/0x230
[  229.379664][T10816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.385637][T10816] 
[  229.387947][T10816] The buggy address belongs to the object at ffff88801294a800
[  229.387947][T10816]  which belongs to the cache kmalloc-1k of size 1024
[  229.401991][T10816] The buggy address is located 88 bytes inside of
[  229.401991][T10816]  freed 1024-byte region [ffff88801294a800, ffff88801294ac00)
[  229.415784][T10816] 
[  229.418098][T10816] The buggy address belongs to the physical page:
[  229.424509][T10816] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12948
[  229.433259][T10816] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  229.441750][T10816] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  229.449730][T10816] page_type: f5(slab)
[  229.453712][T10816] raw: 00fff00000000040 ffff88801ac41dc0 0000000000000000 dead000000000001
[  229.462282][T10816] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  229.470853][T10816] head: 00fff00000000040 ffff88801ac41dc0 0000000000000000 dead000000000001
[  229.479509][T10816] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  229.488263][T10816] head: 00fff00000000003 ffffea00004a5201 ffffffffffffffff 0000000000000000
[  229.496922][T10816] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  229.505573][T10816] page dumped because: kasan: bad access detected
[  229.511981][T10816] page_owner tracks the page as allocated
[  229.517684][T10816] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1163, tgid 1163 (kworker/u8:8), ts 70403999856, free_ts 70299936732
[  229.536949][T10816]  post_alloc_hook+0x1f4/0x240
[  229.541796][T10816]  get_page_from_freelist+0x365c/0x37a0
[  229.547348][T10816]  __alloc_frozen_pages_noprof+0x292/0x710
[  229.553144][T10816]  alloc_pages_mpol+0x311/0x660
[  229.557978][T10816]  allocate_slab+0x8f/0x3a0
[  229.562479][T10816]  ___slab_alloc+0xc27/0x14a0
[  229.567154][T10816]  __slab_alloc+0x58/0xa0
[  229.571473][T10816]  __kmalloc_noprof+0x2e6/0x4c0
[  229.576331][T10816]  ___neigh_create+0x72b/0x2320
[  229.581200][T10816]  ip6_finish_output2+0xb48/0x1780
[  229.586323][T10816]  ip6_finish_output+0x41e/0x840
[  229.591267][T10816]  ndisc_send_skb+0xb30/0x1450
[  229.596027][T10816]  addrconf_dad_completed+0x76c/0xcd0
[  229.601385][T10816]  addrconf_dad_work+0xdbc/0x16a0
[  229.606394][T10816]  process_scheduled_works+0xa66/0x1840
[  229.611931][T10816]  worker_thread+0x870/0xd30
[  229.616516][T10816] page last free pid 5830 tgid 5830 stack trace:
[  229.622824][T10816]  free_frozen_pages+0xe0d/0x10e0
[  229.627839][T10816]  __put_partials+0x160/0x1c0
[  229.632505][T10816]  put_cpu_partial+0x17c/0x250
[  229.637257][T10816]  __slab_free+0x290/0x380
[  229.641670][T10816]  qlist_free_all+0x9a/0x140
[  229.646256][T10816]  kasan_quarantine_reduce+0x14f/0x170
[  229.651703][T10816]  __kasan_slab_alloc+0x23/0x80
[  229.656605][T10816]  kmem_cache_alloc_node_noprof+0x1d9/0x380
[  229.662488][T10816]  __alloc_skb+0x1c3/0x440
[  229.666897][T10816]  rtnl_getlink+0x673/0xc50
[  229.671393][T10816]  rtnetlink_rcv_msg+0x73f/0xcf0
[  229.676322][T10816]  netlink_rcv_skb+0x1e3/0x430
[  229.681073][T10816]  netlink_unicast+0x7f6/0x990
[  229.685826][T10816]  netlink_sendmsg+0x8e4/0xcb0
[  229.690577][T10816]  __sock_sendmsg+0x221/0x270
[  229.695243][T10816]  __sys_sendto+0x363/0x4c0
[  229.699744][T10816] 
[  229.702055][T10816] Memory state around the buggy address:
[  229.707671][T10816]  ffff88801294a700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  229.715731][T10816]  ffff88801294a780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  229.723782][T10816] >ffff88801294a800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  229.731829][T10816]                                                     ^
[  229.738758][T10816]  ffff88801294a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  229.746808][T10816]  ffff88801294a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  229.754853][T10816] ==================================================================
[  229.783045][T10862] validate_nla: 1 callbacks suppressed
[  229.783066][T10862] netlink: 'syz.2.1447': attribute type 1 has an invalid length.
[  229.788982][T10816] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  229.789002][T10816] CPU: 0 UID: 0 PID: 10816 Comm: syz.4.1435 Not tainted 6.14.0-rc1-syzkaller-00197-gacdefab0dcbc #0
[  229.789022][T10816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  229.789034][T10816] Call Trace:
[  229.789041][T10816]  <TASK>
[  229.789049][T10816]  dump_stack_lvl+0x241/0x360
[  229.789074][T10816]  ? __pfx_dump_stack_lvl+0x10/0x10
[  229.789090][T10816]  ? __pfx__printk+0x10/0x10
[  229.789116][T10816]  ? preempt_schedule+0xe1/0xf0
[  229.789138][T10816]  ? vscnprintf+0x5d/0x90
[  229.789157][T10816]  panic+0x349/0x880
[  229.789180][T10816]  ? check_panic_on_warn+0x21/0xb0
[  229.789203][T10816]  ? __pfx_panic+0x10/0x10
[  229.789229][T10816]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[  229.789250][T10816]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  229.789269][T10816]  ? print_report+0x502/0x550
[  229.789296][T10816]  check_panic_on_warn+0x86/0xb0
[  229.789318][T10816]  ? skb_queue_purge_reason+0xb9/0x500
[  229.789340][T10816]  end_report+0x77/0x160
[  229.789363][T10816]  kasan_report+0x154/0x180
[  229.789388][T10816]  ? skb_queue_purge_reason+0xb9/0x500
[  229.789413][T10816]  skb_queue_purge_reason+0xb9/0x500
[  229.789436][T10816]  ? __mutex_unlock_slowpath+0x227/0x800
[  229.789458][T10816]  ? __pfx_skb_queue_purge_reason+0x10/0x10
[  229.789482][T10816]  ? __pfx_hci_conn_hash_flush+0x10/0x10
[  229.789516][T10816]  ? drain_workqueue+0x2d3/0x3a0
[  229.789540][T10816]  vhci_flush+0x44/0x50
[  229.789559][T10816]  ? __pfx_vhci_flush+0x10/0x10
[  229.789576][T10816]  hci_dev_reset+0x42a/0x5d0
[  229.789601][T10816]  sock_do_ioctl+0x158/0x460
[  229.789624][T10816]  ? __pfx_sock_do_ioctl+0x10/0x10
[  229.789652][T10816]  sock_ioctl+0x626/0x8e0
[  229.789672][T10816]  ? __pfx_sock_ioctl+0x10/0x10
[  229.789690][T10816]  ? __fget_files+0x2a/0x410
[  229.789709][T10816]  ? __fget_files+0x2a/0x410
[  229.789729][T10816]  ? __pfx_sock_ioctl+0x10/0x10
[  229.789747][T10816]  __se_sys_ioctl+0xf5/0x170
[  229.789769][T10816]  do_syscall_64+0xf3/0x230
[  229.789791][T10816]  ? clear_bhb_loop+0x35/0x90
[  229.789815][T10816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.789835][T10816] RIP: 0033:0x7f3c1bf8cde9
[  230.007888][T10816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  230.027500][T10816] RSP: 002b:00007f3c1cdc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  230.035911][T10816] RAX: ffffffffffffffda RBX: 00007f3c1c1a5fa0 RCX: 00007f3c1bf8cde9
[  230.043878][T10816] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000009
[  230.051835][T10816] RBP: 00007f3c1c00e2a0 R08: 0000000000000000 R09: 0000000000000000
[  230.059803][T10816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  230.067786][T10816] R13: 0000000000000000 R14: 00007f3c1c1a5fa0 R15: 00007fffb2cace38
[  230.075756][T10816]  </TASK>
[  230.079053][T10816] Kernel Offset: disabled
[  230.083366][T10816] Rebooting in 86400 seconds..