last executing test programs:

55.819814165s ago: executing program 4 (id=635):
r0 = socket(0x2, 0x80805, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000340)={r0})
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x203, 0xfffffffc, 0x9}}], 0x20, 0x20000000}], 0x1, 0x0)
r1 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10)
r2 = accept4(r1, &(0x7f0000000140)=@ieee802154, &(0x7f0000000000)=0x80, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xfffffffffffffcb7, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x32}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000003)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000002c0)=0x2, 0x4)
sendto$inet(r1, &(0x7f0000000300)="99", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10)

45.453634455s ago: executing program 4 (id=635):
r0 = socket(0x2, 0x80805, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000340)={r0})
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x203, 0xfffffffc, 0x9}}], 0x20, 0x20000000}], 0x1, 0x0)
r1 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10)
r2 = accept4(r1, &(0x7f0000000140)=@ieee802154, &(0x7f0000000000)=0x80, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xfffffffffffffcb7, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x32}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000003)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000002c0)=0x2, 0x4)
sendto$inet(r1, &(0x7f0000000300)="99", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10)

34.33140023s ago: executing program 4 (id=635):
r0 = socket(0x2, 0x80805, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000340)={r0})
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x203, 0xfffffffc, 0x9}}], 0x20, 0x20000000}], 0x1, 0x0)
r1 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10)
r2 = accept4(r1, &(0x7f0000000140)=@ieee802154, &(0x7f0000000000)=0x80, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xfffffffffffffcb7, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x32}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000003)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000002c0)=0x2, 0x4)
sendto$inet(r1, &(0x7f0000000300)="99", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10)

25.227521327s ago: executing program 4 (id=635):
r0 = socket(0x2, 0x80805, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000340)={r0})
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x203, 0xfffffffc, 0x9}}], 0x20, 0x20000000}], 0x1, 0x0)
r1 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10)
r2 = accept4(r1, &(0x7f0000000140)=@ieee802154, &(0x7f0000000000)=0x80, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xfffffffffffffcb7, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x32}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000003)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000002c0)=0x2, 0x4)
sendto$inet(r1, &(0x7f0000000300)="99", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10)

18.794730933s ago: executing program 2 (id=1130):
r0 = socket$kcm(0x10, 0x1, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600053582c137153e37080c188002ac0f000300", 0x33fe0}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/152, 0x98}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/45, 0x2d}, {&(0x7f0000000200)=""/90, 0x5a}], 0x4, &(0x7f00000002c0)=""/86, 0x56}, 0x10000)

18.687108866s ago: executing program 2 (id=1132):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8)

18.455843887s ago: executing program 2 (id=1135):
socket$l2tp(0x2, 0x2, 0x73) (async)
socket$l2tp(0x2, 0x2, 0x73)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @void, @value}, 0x10)
socket$l2tp6(0x2, 0x2, 0x73)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r3}]}}}, @IFLA_MTU={0x8, 0x3}]}, 0x40}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r3}]}}}, @IFLA_MTU={0x8, 0x3}]}, 0x40}}, 0x0)
ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000000))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000380000007000000030000ca75ffffff00000000000000002e"], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6, 0x0, 0x0, @void, @value}, 0x28)
r4 = socket$alg(0x26, 0x5, 0x0)
ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000100)={0x81, 0x1ff, 0x9, 0x0, 0x0, [{{r3}, 0x10000}, {{r2}, 0x40}, {{r3}, 0x1}, {{r3}}, {{r4}, 0xfff}, {{r2}, 0x8}, {{r3}, 0x514f}, {{r3}, 0xc}, {{r3}, 0x6}]})

18.336657154s ago: executing program 2 (id=1138):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
epoll_create1(0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000400)={@dev, <r1=>0x0}, &(0x7f0000000440)=0x14)
sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="252e6cdc2a0e037156a3a6b2df7b8f54af9c482663bcc50ae25e3cc93eeb4230fc6283241ac2bc52dd502a7cc8346c4aa9afc8687aba0365952f6f30cc23c2953fdb8808d828e75fdac8187780bf4db6a747695a3299cb4703ba1a54f4aa257b16b07a5908cae50669c78541cb3b281d8b7530b5efcbc1a1469eff45b708d48c4a6ae39dabb5a9ae7e2d48af63b24bb29bd6cdfbb8f8ce94f43f8560809ce5eee4950c1e9e8f111f0480b662b80c3d81af97f486aa7d14aef13202919b9897a044b5995f2699dfad884a05ca6e62d8f4a61ececec1dd", 0xd6}, {&(0x7f0000000180)="8faa261ca480739d50b70ecc63f8c437550adabda796b6669b9a84cdee1d2d2310252a815b48037dfc9f6cf84a095f73a101c08768eff80020d1496fd6d0782f997311c46b79ab3ed82f771fe16776dacedfa086bed1d1c6bd", 0x59}, {&(0x7f0000000280)="dda4177735f5e85d119f4b0f8be9a2e3e0efa6f7fed18f5a45d9d23983218e28a74eee9600bf67fc02249d0ea982ddfaf5d81e27d650eb16b5765f8f35e6121a97dc72c6e618e2669cf187963e12ca16e4597f733d338f374ef3836245051a07b1d0b5492321943097ff277433d9562e0dc5fd7ea1176c72da43ab31b05e2d259f5782fb8fecb5b07bbf6fd8b9c94fd0dc75b68d6e95b1d9f47cca5a464935ff55ef8686796df825b495", 0xaa}, {&(0x7f0000000340)="85acdea07b6db450370b78548d86729e36c8c6ce52e1bfc39ee499dc6559a8a18a956cc881e60cc3c2f75b0382bfa79504d6eec5f5d0ad543da84840b3b6cd68b4d640", 0x43}], 0x4, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @remote}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)="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", 0xfa}], 0x1, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x617}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @multicast1}}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0xcd, 0x3, 0x9, [{@loopback, 0x80000001}, {@rand_addr=0x64010101, 0x6}, {@multicast1}, {@private=0xa010100, 0x5}]}, @timestamp_addr={0x44, 0x14, 0x4e, 0x1, 0x2, [{@remote, 0x7}, {@multicast2, 0x2}]}, @timestamp_prespec={0x44, 0x44, 0x26, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x15}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x386a2d6}, {@loopback, 0x4}, {@rand_addr=0x64010101, 0x9}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x7}, {@rand_addr=0x64010100, 0xd6}, {@remote, 0x2}]}]}}}, @ip_retopts={{0x80, 0x0, 0x7, {[@rr={0x7, 0x7, 0x90, [@private=0xa010102]}, @timestamp={0x44, 0xc, 0xc, 0x0, 0xf, [0x7, 0x2a]}, @ssrr={0x89, 0x7, 0x25, [@dev={0xac, 0x14, 0x14, 0x2a}]}, @noop, @timestamp_addr={0x44, 0x54, 0x7c, 0x1, 0x5, [{@empty, 0x6f5}, {@private=0xa010101, 0x800}, {@multicast1, 0x7fffffff}, {@empty}, {@multicast2, 0x2a3}, {@rand_addr=0x64010101, 0x7}, {@remote, 0xd8}, {@rand_addr=0x64010102, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@remote, 0xffffffff}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x178}}], 0x4, 0x0)

17.886389232s ago: executing program 2 (id=1145):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r0, 0x8b20, &(0x7f0000000040))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000)
mmap(&(0x7f0000724000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) (async)
ioctl(r0, 0x8b20, &(0x7f0000000040)) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) (async)
mmap(&(0x7f0000724000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)

15.019631019s ago: executing program 4 (id=635):
r0 = socket(0x2, 0x80805, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000340)={r0})
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x203, 0xfffffffc, 0x9}}], 0x20, 0x20000000}], 0x1, 0x0)
r1 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10)
r2 = accept4(r1, &(0x7f0000000140)=@ieee802154, &(0x7f0000000000)=0x80, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xfffffffffffffcb7, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x32}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000003)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000002c0)=0x2, 0x4)
sendto$inet(r1, &(0x7f0000000300)="99", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10)

9.64890947s ago: executing program 2 (id=1145):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r0, 0x8b20, &(0x7f0000000040))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000)
mmap(&(0x7f0000724000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) (async)
ioctl(r0, 0x8b20, &(0x7f0000000040)) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) (async)
mmap(&(0x7f0000724000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)

2.795765661s ago: executing program 3 (id=1245):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) (async)
socket(0x40000000002, 0x3, 0x2) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)={0x114, 0x31, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @u64}, @typed={0x14, 0x8, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6)
ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000000)) (async)
r3 = socket$inet6(0xa, 0x3, 0x88)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8905, &(0x7f0000000340)={'syzkaller1\x00', @remote}) (async)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff020000000000000000000000000001"], 0x0) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async)
listen(r6, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async)
syz_emit_ethernet(0x52, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60ff40f5001c0600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0000000000170000000000000004000074ad5d56b40b890fa85a966e8f49e517391d3f7159d0ca9ff69faebc0fb3eb6eb9bf3f450fedcc782b7adb645a8d9c44ba8a1342ed8c81009f3ee8c0a87ba374e3f8fa6c0da5d0fbaa83688f670e7f82b55d851ad5ca58381a7eca24cc89070c4e1bdd07c376"], 0x0) (async)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async)
recvfrom(0xffffffffffffffff, &(0x7f0000002f40)=""/4063, 0xfdf, 0x0, 0x0, 0x0) (async)
r7 = accept4(r0, 0x0, 0x0, 0x80000)
sendmmsg$sock(r0, &(0x7f0000000dc0)=[{{&(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e21, @broadcast}, 0x3, 0x3, 0x2, 0x3}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000340)="831d0491578585f45d1fb2b70f9ee16f32cfa68fbab6b5da5472c2a6518ba360e76a1897eaf5be9d49ef8e64839302535c1c496d0ff41a4bc871b351e9d73c4ae496febb05629a9c9445fa", 0x4b}, {&(0x7f00000004c0)="eec1bebbf57dc2142e6343f3c0704cfb1b46a141f5f25181e111a962c4aa9409a791d9ba09c7b94bf4b13dd694e7b3c8e33ea83a6c15c87281296eee17954e51d0142c281a2decfba3a2f189b635c3be0428068cb3c0bde4a7639674c2193328f0235edf0308a3eb0f6836194fb1416d62f1f15c48cadb2993f0a83c1c1b73edb604db42f210ade8eeb187644ff406dc51a97ab531233a8c21c580ce7e3c93895724293ed54a1073f689a25dfad07bb6067f649f7a1e82", 0xb7}, {&(0x7f0000000180)="57236c5e456fcde7e979c647eaaaed6755736986ea3c87", 0x17}, {&(0x7f0000000680)="4f3757d1fc8cf4a497cb3ced0ead8eaf72c97ec422a7eb7740fe581283316133844cf3b224d73add8015a0909d1eb5f78d8979f9c02eaf9919ac5780e0e6756d78a643af83bee77332b7b95db5743799aa5f4373ef5f7fc7971bad77708cb71f1ffb0e3d86688a7bbfc4c5c529626bcc59ec4f8310ebb6acc644a2b406c85eb1e6ba7c8554aa44c2d73cb4130e9cd2bf297b2841be1bb6d5b9", 0x99}, {&(0x7f0000000100)="5a0a205fb595e334923f5758deb9cf28e53116a85fa0d5cec85194de1118219b7932469288", 0x25}, {&(0x7f0000000640)="27914513c6edd36d07233b7076307952310f0fdd0656a0eb42875b8c284e265a6ac75e59", 0x24}, {&(0x7f0000000b80)="11dac50c670b440b10b83bbcdcba2c02663ef51091b5df395319b1ee628f0edf69bca7fdc0afd4893084e87318a5afa4a6fcc5b80937f28355f7595715f974f8cf5205d778b0adfdca06ca412585f25ba05cf350e2855a4210a67e8b17b4348d77cc0a37ef8456dcab75e93e3d759d4e862a7b0407ffdaf992ca5b0bd9413d64e00a3cdcf31fb9727b1757ab965da4c6873678171339a7163d824d3f164e5148ff03000050000000000000", 0xab}, {&(0x7f0000000580)="95f8a991d0b000236c6fe8b10a16d11b5ba43917ac8c21715ff8a7df2648ffe9b773d8ef9f7c0a599d776ab57c1a771dba528db042a5c7bbf6d65cba76e31627f215ee9af41fdf1267b93087f5ce13060ce254ac006c03efbfc3e8749ef04e7d4427af197eb11cd0425d5bc1f9a81ecdac884b301a1fa3815e1b566e8d9fa5666a51d17a", 0x84}, {&(0x7f0000000800)="713706000000c5c5c22065d6c93752d9ceb7c001918be2af3922b3d5156379ce02520bf89b818147a5ea91d5bedf7a70faddfff9ee9cf414422c896dc575c2a29be3ea3590222c0c48ae39c521960f7229422bc24740f40e8887423c25899d78e550584b3b3505a3ead4af9ba49e48817c0164b78ecc0ac7308f37427ceeaf67fda0db6b833ebedad8c8457b677844e3b8dcca245de9a3c1315ece94999774231c1ed66834964568fbf7f5fa407a1a3bce1e62a1cc214873636c3d637966ee6b0c5e7c2b06fe39ba52db05238a6cb3485b3aa9776b3dca87764b313d5fcc602298d2f35528ccf6ce084c6c", 0xeb}, {&(0x7f0000000900)="2610bca51026ac56d7b4a065933ad758f5b6da061ceb896be83469cb1b620ca75e00"/47, 0x2f}], 0xa, &(0x7f0000000a00)=[@txtime={{0x18, 0x1, 0x3d, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0x78e}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x1bf}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000740)="f43b6dd7b5ca235a82610fe6e21b8549eaebced181917ad37c71ccdf867b245cac5c3980ad340fc6a2c7cef574897df744223e689e62223cb9cbcac857a828724c1495ec6ed51b1060b6486fd7feb6b8a8ca28b23aebde87c9b83f630d1e944d0b443e9bc7706824bcdc762be8fcf280eaea72f38e6b8a9fa6498265ed73f310b0a5aea7a9b0fe39fae3c9fcf221c31f6ddcb36fff25", 0x96}, {&(0x7f0000000c40)="fe4e8f10354e69f7bbca03a031dbb6e097c4ff75271b32ec09657cac5c027f5830e9687a6244d3381dd2bf21c9ff3b368714dd49c014d41bc84f3ed696a4a00f216b4c259638df630c67ba295b7396e862f63a8c93aff43fd91e9ae228bc2545bfcdf9ede829376b292fb5d8a1027d853a440a8696c5ed0e391e25b37fef804326234044b1af1ee05e0eebf058f9ae6ac2dac7d77b7665d6c797089e0fd6dce8ea3a3262b2edf65e338e4bc61a8d29", 0xaf}], 0x2, &(0x7f0000000d00)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xfffffffb}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0xa8}}], 0x2, 0x20004000) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002000000085000000c800000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7)

2.5967969s ago: executing program 3 (id=1247):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg(r1, &(0x7f000000a0c0)=[{{0x0, 0x0, &(0x7f0000006e00)=[{&(0x7f0000006bc0)="2fc41f03e2e6cb3f453c1de2dab1ea", 0xf}, {&(0x7f0000004100)="bf", 0x1}], 0x2}}], 0x1, 0x4)
r2 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
listen(r2, 0xc)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSCAUSE(r3, 0x89e1, &(0x7f0000000980)=0x1)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x0, 0x82011, r5, 0x0)
mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0x0)
setsockopt(r4, 0x10d, 0xa, &(0x7f00001c9fff)="03", 0x19)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000071122a000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

2.290506471s ago: executing program 0 (id=1249):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f9, &(0x7f0000000480)={'ip6_vti0\x00', 0x0})
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x7ff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x24040014)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3, r3}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r3, r3}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x10, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

2.077059633s ago: executing program 0 (id=1250):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x339)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x2, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0xffffffffffffff17}}}]}, 0x58}}, 0x0)
listen(r0, 0x1)

1.839781449s ago: executing program 1 (id=1252):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000001c000100"/20, @ANYRES32=r2, @ANYBLOB="000000000a00e8ffa9aaaaaaaaaa00000a000100aaaaaaaaaaaa00009ac545588f9d72c1776649f765caaec47db383900f3700342df2cb421b9efc8468b30ececad68d90ec2935c32a58f38f04dd3329f57a1dee08"], 0x34}}, 0x0) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000e2ffff0000f8f0ba683ea3d8d64d63540a47a38ba4162f6f0de607228ed412f2ee4ec7cdac71339833a0f8571e373da98138900249f5d4ffae4b2984b0c1cc2e8c1101603c63c0ddee35006b99954497c5a91b6fbe595b60d57d1d10ea48e89e6c0c87918cc9dc4c000000007140e0221e43dce76b91edefd3eb073a27f098d40d5bac01740ca6e6f10ca1c48309a02c167efa22cab0df4a7721dc3b58312c6243d568db4d817e9c8a31c77923a60ca570076dc4b7ae140964dec9727e4a0c6401d053313ebefcad3a822ccee785b6824d9fd82618c9c4848fc4405f301a886f3fdcff5a88ffda7f436c466406ecc46434ef720c9841dae2b065d43a7f653912a429670359cc6357a125052ffe97ca9ba17fec78f37cb9be293810902b1d8374159bf2e4a3878ad35ecbe7b636a4e3f919e087f98948d5fc52213a0b2afdc77bd3bf3cb0d7e12f4ba124e63de5a4f1fd6d398b", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000020000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509020000d44affe5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000002fc0)={0x0, 0x2b, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x400c049}, 0x44000015) (async, rerun: 64)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) (async, rerun: 64)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r9 = socket$can_j1939(0x1d, 0x2, 0x7) (async)
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r12=>0x0})
bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r12, 0x3}, 0x18)
bind$can_j1939(r10, &(0x7f0000000240)={0x1d, r12, 0xffffffffffffffff}, 0x18) (async, rerun: 32)
sendmsg$can_j1939(r10, &(0x7f0000000500)={&(0x7f00000001c0)={0x1d, r12, 0x20000000002, {0x0, 0xf0, 0x2}}, 0x18, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4018080}, 0x40) (async, rerun: 32)
sendmsg$nl_route(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@newneigh={0x7c, 0x1c, 0x20, 0x70bd2c, 0x25dfdbfe, {0x2, 0x0, 0x0, r12, 0x0, 0x88, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @multicast1}, @NDA_FDB_EXT_ATTRS={0x20, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x3}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x9}]}, @NDA_FLAGS_EXT={0x8}, @NDA_VNI={0x8, 0x7, 0x9}, @NDA_LINK_NETNSID={0x8, 0xa, 0x1}, @NDA_PORT={0x6, 0x6, 0x4e22}, @NDA_LINK_NETNSID={0x8, 0xa, 0x5}, @NDA_NH_ID={0x8, 0xd, 0x6}, @NDA_MASTER={0x8, 0x9, 0xf}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8050}, 0x0)
r13 = accept(r6, &(0x7f00000002c0)=@alg, &(0x7f0000000340)=0x80) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$smc(&(0x7f0000000480), r13)
sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB, @ANYRES16=r14, @ANYBLOB="01000000000002000000020202000900010073797a3200000000140002007465616d5f736c6176655f3000000000"], 0x34}, 0x1, 0x40030000000000}, 0x48094) (async)
r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r15)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r16, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (async)
sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r16, 0x20, 0x70bd26, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x20044015) (async)
sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB], 0x14}}, 0x0)

1.786160842s ago: executing program 0 (id=1253):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x22020600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events.local\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="e3", 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv(r3, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300))
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001540)={{{@in=@initdev, @in=@private}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000001640)=0xe8)
sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@ipmr_newroute={0x103c, 0x18, 0x8, 0x70bd2c, 0x25dfdbfd, {0x80, 0x80, 0x80, 0x4, 0x0, 0x0, 0xff, 0x8, 0x2000}, [@RTA_METRICS={0x1004, 0x8, 0x0, 0x1, "93ccb958785e9adf5c8b1dcf17d2075e4d9bf117e032228b82a4e70eb7af18a39e7789c5daf89e16ba6ad5bc32dbf6e4621c981c99fe013f741ce2ca1234a10fd61ba4fb60da23de4d03496e9ea50a4b7539155026d29415bf35d349e682f56868056aac3cac995746ab3fd6d720010f3872c6ec75c1ac58b4a7dcd4bccf65d9ced33311b24d6fe363b57c7552e13c5beb76d2e7234d621ef23a23b84dabce1ad660412533287380c28416455c34857bc58cba26102921be30895d67ead7b77aa2f45835dbd3b65b7c1a2f41089bbe4603465800993db62eab9b7b59832cbd8999ba2551737f146d8615771e0a5790dadf0a009e6a9e733b1a57e30fcc264739f360e4400afbe51fa41bf1b174db48bf3753964057c59d9618636175f854050b7911f7664a55e3e226d7c60d7e46f8ff3a4940813b785369b4eb2b6b164b05c515c5cef92c6d43ea08eea14bfaaffa497eafb727466a274fef1b3c6dfeae0baa63302e30edebec57eaca69e932c6e6085949655020177fdc0b2d7932a4b106188c1a2e4031ea06d266575ac53e9065852c2637e74d49a9c3db821c0fa2a60f326e4bee4512a96fa1b3a061748b485b8f55b1d6ab68531d175dd26b884c752afa041c4fa365243cdd0b085abe2b7ae6e4718d726b5a6f7df58e90c9a4d6d17c26d0894c501cd8061f5c9eb714d2ee67ed20b95a646591456b021db61c7c507f10020b68820e01771d560f36d0ed9083d3056f625d476b825c09afedd02f3406f2c43c131e259ed816ff4343f98085743bac5145455f1fcd791096ecae21228e6baddcd2ef7055fea4a5783a515f6183cca77fc07b9ac314c2ff8b03dbcfe9c98d1638072f86e14a83db0ceb5340050c594554470f620f776efbd1d921984b6a8480e20e4048bf2d3a47e1e9ac0d9b9568352436c73e322a7bef49226dfadf9f3ba1d12198c27127f6c725f1bab4adf1846b839c1418a6be2fd687e948f680b1c395c05d125802aa64c29da843a84e84636cca08c464117cf184e8dc178e9153b5b8a59e25b8ca53e0aa0a061b86132d679ca271709d7ff6f959805604c0a0093e4d61df8d8dd81208f01862135002cb449cbc3278ab30bfa8a6b37621a8a40a26c75ea43d30fec7ff7739f0f66cee7b0a381d3cad5cdccd83b17b9dc7263d0f0df6d1a2b8c5748d538f87b5f605b1fc6d76ae7b3c8de39118fb88870778a69b762c8bc0cb767fe3b9ddf13d77b718a901e1ac785ff4247862e73d82e4a74511866b3dbb926446f19e46c1de5768904aa5cec0644ab89b28e226734cfff71360ab2e041e6334811c336a91951d1df4281deb58f96802e9c017120393ef69c05754b49ab3890004fda8fa40701c0edd890a0dfa107d29d8dfb6913bcf4df4ae66117e9b0a3aae6be4e348dfae1aa7f41680dcef8ceb6e618e2f63c719a9c295459bb38ae783190d20aa99bbf4e24d1c305eef240d47e1aaef70da5ca0af887bfccf61eb5f979de80ecbb00172a29b8f897cb33ac9ffadadf4558f40ddc7c8e8144b94856d598663fb2a22699070b68e2a2fc6513608490be08f7045a4324684c2fe79de30893e0501e72732597598fc7aa1e58ee90836f8dbec68cbc26dabbd0b6d3df5cb9efecd3a77a62a3602691c81bdd7b0831ab131c00235326f0079f6fcf882a1afd4a0b640cd5a60c5ab617adf072aee7fb82749441cbf6d6c6407e6823e56f3877f4a4c6d9b23fe57d3f5761a9da9fca916987773f97ad3610868796209ed1c3a593c571227987be8dde88a169b36b563496cd9e6d42d6b4da9fa472fb752fe884f5c955855545482ce56b319b11e4f9f0029d83cf6318203eb63fee0c61e4d3665498c0fb20d839f49fd0dde699a6aafc4a81ad992b48d190133ef454121525f81c9018e9e60965c64dbf550b0ee05f50ad97d5c55ab786d5011bfcc7891a5dfc3e05c13d0a8d358f43412c85fbbab57dcbafeada89b9e53021aa32241ff8acc1907fef8532659c22e5b27c7438a7aa2277acc50ebf344f25d407929778f7a68488f3e854f8aea2974b1766473a6fddd3cb832ce3b55e2683d52fcf10c93ebb9f6380a02210efde4237db0e863ebce527ca3c2af55d9a6e3ff1906fc85db648e0e5c8a16babb582bc999b21f30ca5267f3f56439389ae47adff0493545a0541898ca890c5165c2896a9d23641b104b678a391dad6b59e744eb8fae08ce4bd2d99f0427813636a19f12c9ec09edc12fca603d2942a0eeddd194f7641f5c05a5a45e2f8dfe227263a7c0f549702131ad3dcde35830f1667a3f1ef92190043bd6880e17f927f510a05bbb6d421ebc9c9eedc06ed0ccee2d4882e16f31e22a4a1a43f5c5c8ca5eaa0d40ef91a31fd67cc8897ac7fb53889304218a1770725bc8f7d4298a76f6725483b4a8eb6ba8f0c9c583b25370cef6942e1d6ff97475dd51d7871c42ba19f66daf57003acc9dd79a7cf3f0ef14f76bedd06a90e1881d2558b76c5149dd3a568010a94d1b9bc3d4365e7f40401c8d4bec2a58a4bf96aba1d2792707a9353294996090db59d05160331f0d40e10ea6ccbed12790512062bb0e97cbb1d7a7b9d06ab1bb3a61aa4cb2cbf5e872177821fb0a98a9078b2bf6f709fc8807b75050db1cd6baba1e0e00551268ee113816612b8ebf0ca1072501c21fb9fd9a633cad8446e84996d213d2af54dad6b1e754ef5878138bbeb94d083c09d204374c7d82d971cd917fef4e9a7c94fadfeb0f9f5a7eebc30e73ded7e54028db4a537b559ab41ef068fd8067206160bd02ada7e7cca2ebc2d3c667b8e33a96a889630e664176c9ed225182c2d33089a9b4411bef62b494c1b171a35d0e9c616796fbeee7671dc5afffc6b7a9cca89ffbdee71d9ac92d9a726de9c64512524e9ea60f7ec66b1736159f0a1b2309529eb0b6e03978708876029ee3d84adce54bed15454ae430b4c9a2f5a44039844d8961146e7486fc92774db0d5415d2f2816590445fd2d32dc54356143baab5cc04970ef7d6cf189ebbf97b5ab045453a0aa2a00b89a4567c7ed1729aac46c40110e864436b710a8076c8bd3d845dbe11e822d79dad9688b26fa182655abc23bc96cd43341608f1e71b7436189e40eaba02139590e790dc2cde2938303bd4ff816ee66a92eabab47002e5e0f611e116b5c37e9cc1aa6cedcdc42477d4108867580d88469f834da556ebf4cce928264ec1e4bcc9e7909e54e0dc2d5b04315c2338a65ebe15df6426ffb21e63a16362a0494a07425695d130d1eb04f1b59546f36dc18d150fa7f4dbc00465385997f90015b2a25ccf89a536fde37ce03d8af752177613fdd055a424f1e843432d62d5e5edc05f5b25d4caedd7ca2209acc7004316686969a45628a791e07adda21d9654c2e3a707898b29e85234b50730f7b55b487bfb76be2c74111259814a77bca26274ea9d9381cdd70e112b827c53583928dac146b9f9152fa6496bfa41fb280a1b944c6f4dcea92b16a3b4771fd8098e463bd08104a9125da38508cee348b28bf1118d0eb000d6a59308ee878f5e274f1c1bf360d9ab46e962755f0ce05378e10c37f53dcbbb576b7b4c63b51ccbde01de081182ab8ae1864643ad0d0498f1afa035c66af3e5cb390f68deb89e3ba7e578b6552a221cc502ab6f9e18415831138a9cc85a2355f61c1c386ee68a4075b52c08a05de67e7e8fd0804a0e840a736be1283def83bcbecc16014cd83faea7ffa06fed8e3ddcff716dc77ef10096011835780042da5190bcda2af34a7b8f545e2b8eadef150b1112326fc25ea334b59573a0074d5fdb5c6f8f5dac88eb9e8b44e74b0afbd48aca3d903595f68fc0692b3baa40618b09dbe85d7b9cb21e7d95ddc6203b5b57248dc1c9c2ad2fc1c01d4eb840de809c9e5d78ca12568b698f9f768d1209f1521b71e12609c19bc513bbd560f43edb0e8741dfabd226d1623b0fac9da2f53861e1c4595286b0a9ddab0cb8bbd02ba723831bbda3146cd54d306de1311f1c210dde908fb9025ecfbeb02cceab3c24e1fbcc89b2d06f8405fc51d0987b88151ee9a6a39b62f83d2bcfb276b47700b56a35770cd370acad9502b55696949776ec056310e5bbd81fb089a3114848ea773fd4d3be305358dc60a695ecf475f705255272566c8cee803ba403785473ee210abeaeb0580025ecb28c2e3c07bce9c4051da57f815167a0ffb65e747132b79a6611b955b8056a579f9346c0bc419413aa05d122738a4de66a542c13fa90b9c742e4e25e7623fe87b450b9757897344c553eb9026e8b23a3a103162201fb77af9d831ff28002518c3dff1d4cd4a0323ae8d413b6f81907cc68cc8a352b40ea0242f71b1cdb0d06fdd071d72942f48c61204045d0cf32bbd3401dffcc6f02ce2dcc21e48433889799de1dd60f38daae9cfe9d32b5ec382f7c64596542dcc060b5e0ca41121ee7d6bd49e7adb444cc889360e5270d43171db9a22df46506dc5b027ad1d0ac205e9a80bdfc31889a0eae14994ca9d6599fe1611db8d7b967814e41387b488e62a4fbc51a8c29b8946d143c07892d2e80d84a2460bcff8a2d3ffad947b1dc719582ae4fd0ae5e5e14e12035d843113ac38f745b5835946ef63441e6ee0ba69e0c9e8d9851e9b88a4f794e98ec4e05f480d5e65d2af9065ef918ae71ac209b2891bc37ac9f3f8e5b194d067384185d5d82b598481c0e6848788ee0a3c5f2a00c0463a5c9dae662580b4b7c45596784dcd6adaa26cfa09f25e183d30cfdbe9dbeaae199373ccfbd7659710cbf7fe7a3d5ba3d4a335ee1c9ab602d19799b85ef0261be5f00deaf6901e08fb5a927d29e9a649598708af4e4667024f83fc6e400d4b05773e2f6e29be59615e88c005972505532ad5a4f7e18f023c623900065d66ca6b913e75d7f996024ffa66d2adf1ee3f16ad21794cd02ee3f95228e718e85f0af2d75ef372613962eb4a6d6eebad2c22d6da26ec973bfa6970f58501aabf1418e1c5be501fe2298e4fd4967395062031afb2eb93c55521d0e2d9a59478b0e5e04b6b2a8d959351e1be2ecb39f51a01c8a095d2752eda3ff9dc0e76c953d7e0552fd1d37db62df248a0c929ab997252386424a102e06fa5ce8b512bf2a4bc5faf0c5355e87892607cd15d0283bb6c10c49ce953a3a52f1bf61c120aa429fda23d80bc988327c3eae5ba267f24dbf3cd72b698ac7dd68e49452da81f89032ef79976b9378f2522e375afc8618700cc4c0176c3ab400f6befae85443b4adf4dda5d8fccc8b78157d51dad263223d431bb294d6358840c2c2663085a587276bf13dcbc8181c0f328147bac8388373988bd917ccd7281d2b8b1a6289b711b8bf56f310c7fe505b0b0c49b54513e1acc4824ae16f7d699de9a78a1a333e71e281eed4a816b03945661df67a125991d274b98f265eeb2355d8e3524e06cc34757bc3359f28493dc5b13bb8e0be06cfafa6783194d758656d7fd1d568dbe370a6503531b203daabf9d69139d6375dff0d203056d0e72260578dd81f207b977c48d6df52c8716b2479c8ae0b0c6834b4c29ffd6ce97053e586aab4a72d4c462df4fdbb314ad13355ae3fc0efefcf2feb60250fc6174192531981881fcb3e0983d71dcb7fa1b0937783be6d087bf513b39c51ca97e313302b7d41c0ed7ee44c0ea81c558d70e3d70437a9d4a2f5e63edd69c60655c354389310f3a8f17ca2f7ff77746d3c208bafde1aa91121305b05c76b2b0fac35ce223dde73fb301fe8d52447732129040546dae92759dc79c09069510165e03f8a2e54f648444d8b9ca0c"}, @RTA_DPORT={0x6, 0x1d, 0x4e20}, @RTA_PREFSRC={0x8, 0x7, @local}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_TTL={0x5, 0x2, 0x33}}]}, 0x103c}, 0x1, 0x0, 0x0, 0x44}, 0x20000001)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0xa0}, 0x1, 0x7}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000001780)="131b67b754e60cacfdaeafeee8362d192bec155ce04d24189894efad5b4c2af31ad30635b5d9e33534d832f08749666b672051c6b9df6cb4907ae1f01a038adf4c5c8ffc1f0c614c2f4a59e0dcd35d4317beff7f43ea3cbd4e3d8a4122061e1f20508586077254a651f6341a92758fb459243837884a005d957579a2ddfe5cc05ea4c8bf2c94921c5d989bf306c7fa8be609ff213bf6ef8ed9da0796eae541d1a0448cd1339d85d3552765ea6001b779fa39abc903bf5586ac837245fe86ac8bb262e64a12d51370550894ee3c43e44c61")
r4 = socket$rxrpc(0x21, 0x2, 0xa)
close(r4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
pipe(&(0x7f0000001440)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket(0x10, 0x3, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001, 0x4000010, r0, 0x83651000)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000180)={0x80, 0x626, 0x1, 0x5}, 0x10)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000001400))
r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x1)
ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f00000013c0)=0xffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100))
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1.588052401s ago: executing program 1 (id=1254):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
listen(r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000100000000000000eb00100001000000000000007ebe0d19ed3bcc8b000000000000"], 0x28}}, 0x40080c0)

1.58767513s ago: executing program 3 (id=1255):
r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket(0x2a, 0x2, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x148, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x270, 0x20a, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'veth0_to_team\x00', {}, {}, 0x6}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@unspec=@limit={{0x48}, {0x4c5c, 0x40, 0x0, 0x0, 0x0, 0x10000}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@private2, @private1, [], [], 'wg0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
socket$netlink(0x10, 0x3, 0x9)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x1, 0xfff3}, {0x0, 0x4}, {0x5, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "d20ac15f3801f670266d04c1ef6a9b00"}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xd3}]}]}]}}]}, 0x58}}, 0xc0084)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_GET(r5, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010029bd7000fedbdf2503000000060001004e2100004b29b509f9ec6d9493e212ce9f5d82144da0726cd9c2d35ddaa11d66ab476a687c0300c1169e40e82093d52693cd9e0867fe5c"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000)

1.536737913s ago: executing program 1 (id=1256):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01022dbd7000fedbdf256400000008000300", @ANYRES32=r3, @ANYBLOB="0c0099008100000026000000"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x4040000)

1.532977976s ago: executing program 0 (id=1257):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_opts(r0, 0x0, 0xb, &(0x7f0000000040)=""/202, &(0x7f0000000400)=0xca)
r1 = socket$kcm(0x10, 0x2, 0x10)
r2 = accept4(r1, 0x0, &(0x7f00000002c0), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c30000004f0000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)}, 0x4)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x7001, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000031000000760000000000000027000000000004009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23)
sendto$inet(r3, &(0x7f0000000080)="765caccd969ba71cd6fb78979d9db2fe0a43ac2f73485c38d72d4b632f2be90307c056eeb42678dc6784de833f3acc6015ef223dd3", 0x35, 0x4000000, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="40000000010800000000000000000065d8235f67650c24c400000000002c0004620800024000d90000000800014000000800080002400000000008000240f4ffff060c9e2149d5581694eaf6708f07bf0591067337ffd739a467e4352099d0659ec53719ffa9644ab934fd18d4418d0aaad2fddbd8991c1a8234403c8552e182970d1cefda52009ed1ec076dd55b4579b7187f0de208db4553e8f1b540891578a193758eb1a33628ec1a2ed14e946567d85b2e3d2bf222d115182cb097e7a00e"], 0x40}}, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000340)=0x30)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)=<r7=>0x0)
sendmsg$AUDIT_SET(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x3c, 0x3e9, 0x2, 0x70bd2b, 0x25dfdbfd, {0x25, 0x0, 0x1, r7, 0x4673, 0x9, 0x1, 0x936a, 0x0, 0x5, 0xf}, [""]}, 0x3c}}, 0x1)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x30, r9, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x30}}, 0x4)

1.436849454s ago: executing program 0 (id=1258):
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfffe, 0x0) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xf0, r1, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x45}}}}, [@NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x1a, 0x24, [{}, {0x48}, {0x9, 0x1}, {0x2, 0x1}, {0xb}, {0x30, 0x1}, {0x16, 0x1}, {0x30, 0x1}, {0x30}, {0x48}, {0x60, 0x1}, {0x9, 0x1}, {0x36}, {0x4}, {0x69}, {0xb, 0x1}, {0x36, 0x1}, {0x16}, {0x4, 0x1}, {0xc, 0x1}, {0x30}, {0xb}]}, @NL80211_ATTR_TX_RATES={0x30, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x6}, {0x2}, {0x2, 0x8}, {}, {0x4, 0x5}, {0x6, 0x3}, {0x2, 0x9}, {0x6, 0x3}, {0x6, 0x5}, {}, {0x1, 0x2}, {}, {0x3, 0x7}, {0x3, 0x3}, {0x1, 0x7}, {0x7, 0x7}, {0x0, 0x2}, {0x0, 0x8}, {0x5, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x80000000}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x9}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff7c}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x1}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x8}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x9}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xb8}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20}, 0x4000) (async)
r3 = socket$kcm(0x2, 0xa, 0x2)
getpeername(r3, 0x0, 0x0)
unshare(0x22020600) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x67, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r5}]}, 0x3c}}, 0x0)

1.363351752s ago: executing program 1 (id=1259):
r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r0, &(0x7f00000006c0), 0x0}, 0x20)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r1])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000)='.'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r0, &(0x7f00000006c0), 0x0}, 0x20) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async)
ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r1]) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
connect$pppl2tp(r3, 0x0, 0x0) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000)='.'}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) (async)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
syz_init_net_socket$ax25(0x3, 0x2, 0xc4) (async)

1.361950016s ago: executing program 3 (id=1260):
r0 = socket(0x840000000002, 0x3, 0x100)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000580)=@delpolicy={0x5c, 0x14, 0x1, 0x70bd2b, 0x25dfdbfd, {{@in=@empty, @in6=@remote, 0x4e24, 0x2, 0x4e22, 0x0, 0xa}, 0x0, 0x426d722e34e63eff}, [@policy_type={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x21, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

1.307647024s ago: executing program 4 (id=635):
r0 = socket(0x2, 0x80805, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000340)={r0})
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x203, 0xfffffffc, 0x9}}], 0x20, 0x20000000}], 0x1, 0x0)
r1 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10)
r2 = accept4(r1, &(0x7f0000000140)=@ieee802154, &(0x7f0000000000)=0x80, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xfffffffffffffcb7, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x32}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000003)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000002c0)=0x2, 0x4)
sendto$inet(r1, &(0x7f0000000300)="99", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10)

288.274117ms ago: executing program 0 (id=1261):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'veth0_virt_wifi\x00', @local})
writev(r0, &(0x7f0000000800)=[{&(0x7f0000000080)="a33a2aac06f700ada691aaeac3faed628a053d888c1190fd832c47", 0x1b}, {&(0x7f00000000c0)="5bc62bdf6c25ef6f0e40d3b2ef3dfed02430235b45a940ab3c3fb413e6b1c5128aa6d277d1b7c857ee520f01ab0ba177ee0b5e9b31c8638b2c7c649643a7c65fc49a8356a479f0e099228dadfc11f26024ff67ff85c57987d588a2209beba69a1c81a901da4f4e83713edb9fb86247694095557ba6b9dc3ea21d8701ddf2b17f382cbdec6ad9dfe8de6bcff602d6fbc0bccaa68a71549a0b363c9ab382205a9052627d9f49d98e20b9123222260da1746192834989ab20bb7ab0d8efba4bb0a9bee27835321150d0ce2d332e0bd74cbc145ffe341c9308eea8a807607277f400da9842c33ffafb61e87468e28869d32a", 0xf0}, {&(0x7f00000001c0)="4aa3baadbb4f268a1ce502", 0xb}, {&(0x7f0000000200)="a79dc3ec07f388f10b9538c3cc27c67d89ce46ca953e4eabe0972dcbc76c82c952c2d2508ef00c768c31ed94863bfa8377bea8461b4c225bd98470d929bbf2c4f8011abc25d7005c663cd91ecc3a5520db041e787623839c4462f5e1cf323183ca56d6253d507697082f96bd4a8cf8c7e4a9f9623b041b7cd70adfea4326ddc1b6772080556706ceffe9e48c3a55679b0568e21eaad5d8a0af9551fdda4e1f9c3ae656704df18ba554a0877b3ace006b2d8ad9a241c3213f18342af8a7b38a3906d05911e75179cbacd1c755d12d32174df0052014808ff4736634fc659f7fe3", 0xe0}, {&(0x7f0000000300)="3fc8b4aa06e33115a767541bc8d78c7eb6d3d73e5aab41415a2e7d744ab346f4aa01289cdd8671efcc064fb0534496f41fb40433ad7fe3160f01ee894bf53adbf6ec8cd7b9751e09d36f0ee73245b38c284aa99c9e6fd843b789f7421527b1e8554d134dd0026b2f5b9d24a8544efd3ea3483768fddf928415b0bd961b4cbb704467e531c36ff6", 0x87}, {&(0x7f00000003c0)="9f5762a7269c7f65e88db64b1b1647835c169e995b7ab02b93f26e8cd9b5eb8cba14e81f52a9e8e3e0948333962d8c52991a021f5b0c5c0f8a6efb2d5c9163f03b721f033a6c1cead5c71347743c7222d4eb82152f6429f1c434601bb8ed8c4011f31f8e817612ed25f39753adaeb90651655fd5395bdffffd5efbc36a680af7255c4a8a49b3dbdad3ebe6a197b33602f7a77e4577d65845f491518dce684efca2df07cdfdcf9fcabda24db5762c3b7caf0d93cc79c8056f84d260e0aeeeed5bbd02e94a29576efeda357fc1d69181c870e9807509f38624ab9111065260ad", 0xdf}, {&(0x7f00000004c0)="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", 0xfe}, {&(0x7f00000005c0)="0cf3c0c75e63053c5247ac8f2a00feb2f2151c57ca9fe5e9e54aeb5780f83548e5e6319f4bca7ea957a927573fc6c2305ac48972925a700631647032288794af5db1a1c1d30c10cef22bf13994c592083f4597efa94a1ef13721584f044fd2cd0b28dd570728e11c8c432165b75dc305b077823c68b05697a9b0561e01ec8365631258c591fa17b9ec5926b5e315b9352ba7bebd341f7bcde520e62feac706f2fb4198e5ac0e772789aec38c8128700cc6d414679022d3cb6a2279587dcb37c6d1", 0xc1}, {&(0x7f00000006c0)="d69579c1b4c39b35c2f08579046d480add50c74f6272440821f5a56a684e39fcdde4dbdcfdce35d14fce0e9c94dfb19adae5fa3db02e1fa279e9262b0bdead43f20e8f82b0640c7ff07d627e38e24c05bbefb4920bba96a8310a07ccafc2b4e6146ded9a5f118667078d8b01c2adeca1231d2a5f584697821541b00d5ab133874dc8d931dcc2e539a211070ab85138c66c641d172053d87cee9271b37a95e89af80cbd79", 0xa4}, {&(0x7f0000000780)="a030089ec4dff56f7428309c7534e2945ddcf27cac98367d05f2f9c3b1346cc9f5806a96a8dfda3dc837f014fff29df5aa33c4a31677cd3dbb0b23eb6dca97008dad69d5f02d0a1158c9e90837343ea78a34", 0x52}], 0xa)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000940)=@generic={&(0x7f0000000900)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a80)={@ifindex=<r2=>0x0, 0xd, 0x1, 0x7, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000009c0)=[0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0], <r3=>0x0}, 0x40)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000b00)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ac0)={@fallback=r0, r1, 0x3ed9d7a359ace6d2, 0x2004, 0x0, @value=r4, @void, @void, @void, r3}, 0x20)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x50, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4040)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x48, r5, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008894}, 0x4000)
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, r5, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x7c}}}}, ["", "", "", ""]}, 0x28}}, 0x2)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001200)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000011c0)={&(0x7f0000000f80)={0x208, r5, 0x0, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x56}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @NL80211_ATTR_FRAME={0x12b, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x7}, @device_a, @broadcast, @initial, {0x2}, @value=@ver_80211n={0x0, 0x2, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x2, 0x1f, @random=0x8, @val={0x1, 0x6, [{}, {0x60}, {0x16}, {0x5}, {0x6c, 0x1}, {0x36, 0x1}]}, @void, [{0xdd, 0x7d, "bd0953553c5b7a35d4db3c0518af8b4158fbda25b9c29d3671b6fc1cd5981d4c5e2970791762bfac3b05ddb2614542dc66f7e393e86667228db55b7c5d00ef276a44bf3224103f96b2e2d71e753b16fbaf7b322dbafc1629899db85d0a860002e20f9677857e46d2c695e196be367b1a767e07897aa58fd8bf599b612e"}, {0xdd, 0x6a, "07a98bc3b7601983421148f0b55a146172c3429c7edd5a78cfb7d6e7cdb9609b7910d78cf7c9f59486538f5007ac149b4026f307e157b8ba34de462dc8c991431210a41222c16c63b4cafdebe4f8a62abb4a73b020a9d4f99f80515152e0cef63d5018d25db6b1a34d54"}, {0xdd, 0x10, "e1c3dfb9c86b1e031cc3df59e21e7898"}]}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37b}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, [0x3, 0x2, 0x401, 0x1ff, 0x7fff, 0xfff, 0x9, 0x100]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x41}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x208}, 0x1, 0x0, 0x0, 0xc}, 0x8050)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000001240)={0x0, 'gretap0\x00', {0x3}})
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000012c0), r7)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, r8, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x1c}}, 0x0)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001400), r7)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f0000001700)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001440)={0x24c, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c00}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9b3f}]}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6b0ec0d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "7f986714ffc758afec85ef90e22911a8c57d6ff654e3"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x95}, @TIPC_NLA_NODE_ID={0x6c, 0x3, "843fbd5aadd0db8f309bcfe9abf5b51b7deb35f1bbefaa7207f12ba8380a7d7fbc7034e69ec77ed46bfa5a810dedf20a2bd58d24080658880a3c13f728b0c8338632b18c1c9cbdc714f1e7f3bfd33c3152cc8b15109e31062a0cdea13e340dc134c98e76822b8cd7"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x101}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3882eaef}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf362}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffc00}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x10}, 0xff4b5e014badd160)
r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001780)=@o_path={&(0x7f0000001740)='./file0\x00', 0x0, 0x4018}, 0x18)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000017c0)=r10)
bind$inet6(0xffffffffffffffff, &(0x7f0000001800)={0xa, 0x4e20, 0x8, @mcast2, 0x4}, 0x1c)
sendmsg$NL80211_CMD_GET_REG(r7, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x20, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x20}}, 0x4000084)
r11 = accept$inet(r4, 0x0, &(0x7f0000001940))
getsockopt$inet_mptcp_buf(r11, 0x11c, 0x3, &(0x7f0000001980)=""/23, &(0x7f00000019c0)=0x17)
sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x50, r5, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x488}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xb, 0x4}}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000810}, 0x10000804)
r12 = accept4$rose(0xffffffffffffffff, &(0x7f0000001b40)=@short={0xb, @dev, @default, 0x1, @rose}, &(0x7f0000001b80)=0x1c, 0x800)
ioctl$SIOCRSSCAUSE(r12, 0x89e1, &(0x7f0000001bc0)=0x3)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000001c80)={'tunl0\x00', &(0x7f0000001c00)={'gretap0\x00', 0x0, 0x8, 0x80, 0x81, 0x9, {{0x12, 0x4, 0x1, 0x5, 0x48, 0x64, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@ssrr={0x89, 0x1f, 0xb9, [@multicast2, @multicast1, @rand_addr=0x64010100, @loopback, @rand_addr=0x64010102, @multicast1, @local]}, @timestamp={0x44, 0x10, 0x3e, 0x0, 0x8, [0xc4, 0x2, 0xf]}, @generic={0x7, 0x3, '_'}, @noop]}}}}})

287.953634ms ago: executing program 1 (id=1262):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}, {&(0x7f00000002c0)}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000380000000000020000003c0004803800018007000100637400002c000280080002400000000f08000240000000060800014000000014080001400000000d05000300000000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x557081, 0x100408)

286.242461ms ago: executing program 3 (id=1263):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="d88fb769bff2e262fe836a6663d386bc", 0x10)
getsockopt$inet_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000300))
bind$unix(r3, 0x0, 0x0)
close(r2)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x1, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
sendto$inet(r1, &(0x7f0000000580)="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", 0x126, 0xc051, 0x0, 0x0)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x211, &(0x7f00000003c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x3d, 0x4, 0x3, 0x0, 0x203, 0x68, 0x0, 0x8, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @empty, {[@rr={0x7, 0x2b, 0xc7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @loopback, @private=0xa010001, @broadcast, @rand_addr=0x64010100, @rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0x43}]}, @generic={0x7, 0x4, "42b2"}, @timestamp_prespec={0x44, 0xc, 0xa3, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x83, 0xfffffffffffffd48, "92c2fcd5a2"}, @lsrr={0x83, 0x23, 0x47, [@rand_addr=0x64010100, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr=0x64010101]}, @cipso={0x86, 0x35, 0x1, [{0x2, 0xb, "6b9439ceeb9883bb40"}, {0x5, 0xf, "1797085011282d27ec8d5c1e40"}, {0x7, 0xa, "bb735ac28652be21"}, {0x6, 0xb, "b58bd07b217097b843"}]}, @rr={0x7, 0x1b, 0x2f, [@remote, @rand_addr=0x64010101, @loopback, @multicast2, @local, @empty]}, @timestamp_addr={0x44, 0x24, 0x5, 0x1, 0x3, [{@multicast1, 0x800}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x1000006}, {@remote, 0x6}]}]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x41, 0x4, 0x0, 0x9, 0x9, 0x66, 0xfffc, 0x8, 0x67, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp={0x44, 0x14, 0xa2, 0x0, 0x4, [0x74f9f446, 0x1, 0x890, 0x45]}, @generic={0x89, 0xe, "e365cf69a34de071e27c5ec7"}, @lsrr={0x83, 0x3, 0x9d}, @timestamp_prespec={0x44, 0x4c, 0x90, 0x3, 0xa, [{@empty, 0x8}, {@loopback, 0x7}, {@remote, 0xf1400000}, {@multicast2, 0x5b3}, {@private=0xa010100, 0x1}, {@rand_addr=0x64010100, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x97c2}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x9}, {@broadcast, 0x2}]}, @timestamp={0x44, 0x18, 0xea, 0x0, 0xc, [0x1c0000, 0x9, 0x4fc, 0x80000000, 0x3]}, @lsrr={0x83, 0x7, 0x61, [@broadcast]}, @lsrr={0x83, 0x1f, 0xab, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x11}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x38}]}, @timestamp_prespec={0x44, 0x34, 0x11, 0x3, 0x6, [{@multicast1, 0x7}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x5}, {@local, 0xe04}, {@multicast2, 0x9}, {@multicast2, 0x5}, {@multicast1, 0x7}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xba, [@local]}]}}, "dd8201"}}}}}, 0x0)

113.484644ms ago: executing program 3 (id=1264):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000008000008000f", 0x1f)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33)

0s ago: executing program 1 (id=1265):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@cgroup, 0xffffffffffffffff, 0x17, 0x0, 0x0, @void, @value}, 0x20)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff)
r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00')
sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@getqdisc={0x30, 0x26, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xf, 0xe}, {0x5, 0xb}, {0x4}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x44080)
r7 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xfff2, 0xa}, {0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
r9 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$int_in(r9, 0x5421, &(0x7f0000000000)=0x514)
listen(r9, 0x0)
accept$ax25(r9, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4008, 0x3, 0x340, 0x1d0, 0x32, 0x148, 0x1d0, 0x148, 0x2a8, 0x240, 0x240, 0x2a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'nr0\x00'}, 0x0, 0x190, 0x1d0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@inet=@ecn={{0x28}, {0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'team_slave_1\x00', 'macvlan0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0)

kernel console output (not intermixed with test programs):

ave_0 removed
[   95.363628][ T6712] openvswitch: netlink: Missing key (keys=40, expected=80)
[   95.372272][ T5898] hid-generic 0005:046D:FFF9.0001: item fetching failed at offset 0/1
[   95.384491][ T5898] hid-generic 0005:046D:FFF9.0001: probe with driver hid-generic failed with error -22
[   95.726491][ T6732] sctp: [Deprecated]: syz.4.230 (pid 6732) Use of struct sctp_assoc_value in delayed_ack socket option.
[   95.726491][ T6732] Use struct sctp_sack_info instead
[   95.792224][ T6730] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.824782][ T6730] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.051135][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[   96.126509][ T6738] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.133843][ T6738] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.193663][ T6738] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.201826][ T6738] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.629100][ T6772] validate_nla: 1 callbacks suppressed
[   96.629123][ T6772] netlink: 'syz.3.239': attribute type 2 has an invalid length.
[   96.716287][ T6772] __nla_validate_parse: 10 callbacks suppressed
[   96.716308][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'.
[   96.817837][ T6780] netlink: 'syz.2.241': attribute type 1 has an invalid length.
[   96.865915][ T6780] netlink: 9352 bytes leftover after parsing attributes in process `syz.2.241'.
[   96.904693][ T5898] IPVS: starting estimator thread 0...
[   96.920184][ T6780] netlink: 'syz.2.241': attribute type 1 has an invalid length.
[   96.933958][ T6780] netlink: 'syz.2.241': attribute type 2 has an invalid length.
[   96.946659][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'.
[   96.955851][ T6779] netlink: 'syz.2.241': attribute type 1 has an invalid length.
[   96.964337][ T6779] netlink: 9352 bytes leftover after parsing attributes in process `syz.2.241'.
[   96.974351][ T6779] netlink: 'syz.2.241': attribute type 1 has an invalid length.
[   96.982271][ T6779] netlink: 'syz.2.241': attribute type 2 has an invalid length.
[   96.990225][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'.
[   97.002305][ T6787] IPVS: using max 18 ests per chain, 43200 per kthread
[   97.178892][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'.
[   97.312189][ T6808] netlink: 36 bytes leftover after parsing attributes in process `syz.3.249'.
[   97.554732][ T6825] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.253'.
[   97.601629][ T6825] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes.
[   97.729507][ T6836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.257'.
[   98.107916][ T6861] openvswitch: netlink: Message has 4 unknown bytes.
[   98.149199][ T6866] openvswitch: netlink: Message has 4 unknown bytes.
[   98.246379][ T6870] xt_TCPMSS: Only works on TCP SYN packets
[   98.761103][ T6900] sch_fq: defrate 0 ignored.
[   98.771063][ T6893] netlink: 199484 bytes leftover after parsing attributes in process `syz.3.273'.
[   98.785657][ T6897] openvswitch: netlink: Message has 3074 unknown bytes.
[   98.807855][ T6907] netlink: 'syz.3.273': attribute type 11 has an invalid length.
[   98.825066][ T6893] openvswitch: netlink: Message has 3074 unknown bytes.
[   98.994106][ T6913] netlink: 'syz.4.277': attribute type 1 has an invalid length.
[   99.096521][ T6923] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   99.164075][ T6923] team0: Device ipvlan2 is already an upper device of the team interface
[   99.262264][ T6936] sctp: [Deprecated]: syz.4.283 (pid 6936) Use of struct sctp_assoc_value in delayed_ack socket option.
[   99.262264][ T6936] Use struct sctp_sack_info instead
[   99.290751][ T6936] sctp: [Deprecated]: syz.4.283 (pid 6936) Use of struct sctp_assoc_value in delayed_ack socket option.
[   99.290751][ T6936] Use struct sctp_sack_info instead
[   99.341904][ T6941] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes.
[   99.358596][ T6937] syz_tun: entered allmulticast mode
[   99.645707][    T9] IPVS: starting estimator thread 0...
[   99.736978][ T6960] IPVS: using max 16 ests per chain, 38400 per kthread
[   99.983976][ T6973] sctp: [Deprecated]: syz.2.293 (pid 6973) Use of struct sctp_assoc_value in delayed_ack socket option.
[   99.983976][ T6973] Use struct sctp_sack_info instead
[  100.005644][ T6929] syz_tun: left allmulticast mode
[  100.340643][ T6988] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  101.398377][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.468148][ T7050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.502771][ T7055] netlink: 'syz.1.321': attribute type 1 has an invalid length.
[  101.510677][ T7050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.853368][ T7077] __nla_validate_parse: 11 callbacks suppressed
[  101.853390][ T7077] netlink: 16 bytes leftover after parsing attributes in process `syz.3.327'.
[  102.054720][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.331'.
[  102.254052][ T7100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.334'.
[  102.285588][ T7105] ieee802154 phy0 wpan0: encryption failed: -22
[  102.298938][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'.
[  102.373905][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.337'.
[  102.452471][ T7114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.338'.
[  102.837807][ T7129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.344'.
[  103.130468][ T7147] netlink: 4272 bytes leftover after parsing attributes in process `syz.4.348'.
[  103.147221][ T7147] validate_nla: 3 callbacks suppressed
[  103.147242][ T7147] netlink: 'syz.4.348': attribute type 3 has an invalid length.
[  103.167204][ T7147] netlink: 105 bytes leftover after parsing attributes in process `syz.4.348'.
[  103.181660][ T7148] gtp0: entered promiscuous mode
[  103.190553][ T7148] gtp0: entered allmulticast mode
[  103.206986][ T7147] netlink: 20 bytes leftover after parsing attributes in process `syz.4.348'.
[  103.528615][ T7163] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64)
[  104.135651][ T7203] tipc: Failed to remove unknown binding: 66,1,1/0:3909896992/3909896994
[  104.655458][ T7237] syzkaller0: entered allmulticast mode
[  104.704913][ T7241] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present
[  104.731903][ T7241] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1)
[  104.809677][ T7241] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  104.824402][ T7241] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  105.159046][ T7270] netem: change failed
[  105.351889][ T7279] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes.
[  105.459151][ T7285] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.467510][ T7285] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.015631][ T7323] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  106.109486][ T7330] openvswitch: netlink: Actions may not be safe on all matching packets
[  106.870507][ T7378] sock: sock_set_timeout: `syz.1.423' (pid 7378) tries to set negative timeout
[  107.087519][ T7395] netlink: 'syz.2.429': attribute type 4 has an invalid length.
[  107.431982][ T7393] __nla_validate_parse: 16 callbacks suppressed
[  107.432004][ T7393] netlink: 116 bytes leftover after parsing attributes in process `syz.0.428'.
[  107.474796][ T7413] warning: `syz.3.433' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  107.904027][    T9] IPVS: starting estimator thread 0...
[  107.982481][ T7455] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  108.014496][ T7454] IPVS: using max 15 ests per chain, 36000 per kthread
[  108.031591][ T7456] netlink: 148 bytes leftover after parsing attributes in process `syz.3.443'.
[  108.058388][ T7455] netlink: 148 bytes leftover after parsing attributes in process `syz.3.443'.
[  108.342768][ T7483] netlink: 244 bytes leftover after parsing attributes in process `syz.1.450'.
[  108.393771][ T7485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.453'.
[  108.403331][ T7485] openvswitch: netlink: Actions may not be safe on all matching packets
[  108.500365][ T7493] netlink: 'syz.4.456': attribute type 3 has an invalid length.
[  108.704523][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.457'.
[  108.721880][ T7503] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  108.742366][ T7503] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (2579)
[  108.888450][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.461'.
[  109.364860][ T7518] netlink: 'syz.3.464': attribute type 1 has an invalid length.
[  109.408153][ T7518] netlink: 224 bytes leftover after parsing attributes in process `syz.3.464'.
[  109.431127][ T7518] netlink: 'syz.3.464': attribute type 1 has an invalid length.
[  109.449464][ T7518] netlink: 224 bytes leftover after parsing attributes in process `syz.3.464'.
[  109.877687][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'.
[  109.924580][ T7554] Bluetooth: MGMT ver 1.23
[  109.966407][ T7546] netlink: 'syz.1.472': attribute type 10 has an invalid length.
[  110.066617][ T7546] team0: Port device netdevsim0 added
[  110.218114][ T7573] hsr0: entered promiscuous mode
[  110.328889][ T7580] netlink: 'syz.1.478': attribute type 1 has an invalid length.
[  110.379181][ T7582] xt_time: invalid argument - start or stop time greater than 23:59:59
[  110.453224][ T7585] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  110.463542][ T7585] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  110.641507][ T7594] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes.
[  110.705502][ T7598] netlink: 'syz.4.484': attribute type 1 has an invalid length.
[  110.726084][ T7598] netlink: 'syz.4.484': attribute type 1 has an invalid length.
[  110.737227][ T7598] netlink: 'syz.4.484': attribute type 2 has an invalid length.
[  110.900108][    C0] Unknown status report in ack skb
[  111.270931][ T7622] xt_CT: You must specify a L4 protocol and not use inversions on it
[  111.288485][ T7622] netlink: 'syz.4.492': attribute type 1 has an invalid length.
[  111.569436][ T7635] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  111.675258][ T7630] syzkaller0: entered allmulticast mode
[  111.689899][ T7629] netlink: 'syz.2.497': attribute type 39 has an invalid length.
[  113.229188][ T7651] __nla_validate_parse: 9 callbacks suppressed
[  113.229203][ T7651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.502'.
[  113.422260][ T7660] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20000
[  113.480073][ T7672] netlink: 44 bytes leftover after parsing attributes in process `syz.1.507'.
[  113.581199][ T7676] netlink: 52 bytes leftover after parsing attributes in process `syz.0.509'.
[  113.676217][ T7684] validate_nla: 1 callbacks suppressed
[  113.676238][ T7684] netlink: 'syz.3.512': attribute type 24 has an invalid length.
[  113.707070][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.512'.
[  114.114963][ T7714] netlink: 'syz.2.519': attribute type 1 has an invalid length.
[  114.134864][ T7716] bridge0: port 3(vlan2) entered blocking state
[  114.142102][ T7714] netlink: 9384 bytes leftover after parsing attributes in process `syz.2.519'.
[  114.165169][ T7716] bridge0: port 3(vlan2) entered disabled state
[  114.172967][ T7716] vlan2: entered allmulticast mode
[  114.186610][ T7716] vlan2: left allmulticast mode
[  114.272893][ T7726] netlink: 'syz.3.524': attribute type 1 has an invalid length.
[  114.286302][ T7726] netlink: 9276 bytes leftover after parsing attributes in process `syz.3.524'.
[  114.307260][ T7726] netlink: 'syz.3.524': attribute type 1 has an invalid length.
[  114.784549][ T7758] vlan2: entered promiscuous mode
[  114.837825][ T7757] netlink: 36 bytes leftover after parsing attributes in process `syz.4.533'.
[  114.898335][ T7766] netlink: 'syz.0.535': attribute type 4 has an invalid length.
[  115.144754][ T7783] netlink: 76 bytes leftover after parsing attributes in process `syz.2.540'.
[  115.404140][ T7797] netlink: zone id is out of range
[  115.409653][ T7797] netlink: zone id is out of range
[  115.415001][ T7797] netlink: zone id is out of range
[  115.420372][ T7797] netlink: zone id is out of range
[  115.425523][ T7797] netlink: zone id is out of range
[  115.431444][ T7797] netlink: del zone limit has 4 unknown bytes
[  115.439287][ T7797] netlink: 16 bytes leftover after parsing attributes in process `syz.3.547'.
[  115.534987][ T7808] ipt_rpfilter: unknown options
[  115.720236][ T7817] smc: net device bond0 applied user defined pnetid SYZ1
[  115.734853][ T7817] smc: net device bond0 erased user defined pnetid SYZ1
[  115.746646][ T7819] netlink: 'syz.3.553': attribute type 4 has an invalid length.
[  115.803195][ T7817] bond3: entered promiscuous mode
[  115.854715][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'.
[  116.468436][ T7864] ip6t_srh: unknown srh invflags A757
[  116.909080][ T7892] nbd: socks must be embedded in a SOCK_ITEM attr
[  117.406585][ T7920] netlink: 'syz.0.586': attribute type 41 has an invalid length.
[  117.435644][ T7922] netlink: 'syz.4.587': attribute type 8 has an invalid length.
[  117.479181][ T7920] IPv6: NLM_F_REPLACE set, but no existing node found!
[  117.861614][ T7952] x_tables: duplicate underflow at hook 3
[  118.005367][ T7959] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies.
[  118.102015][ T7969] netlink: 'syz.2.602': attribute type 2 has an invalid length.
[  118.289578][ T7980] __nla_validate_parse: 11 callbacks suppressed
[  118.289599][ T7980] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.606'.
[  118.338635][ T7980] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes.
[  118.971263][ T8020] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  119.093364][ T8028] netlink: 32 bytes leftover after parsing attributes in process `syz.3.619'.
[  119.189389][ T8043] netlink: 'syz.1.622': attribute type 12 has an invalid length.
[  119.205561][ T8043] netlink: 'syz.1.622': attribute type 11 has an invalid length.
[  119.234397][ T8043] netlink: 190580 bytes leftover after parsing attributes in process `syz.1.622'.
[  119.303092][ T8048] netlink: 'syz.2.624': attribute type 3 has an invalid length.
[  119.324215][ T8048] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.624'.
[  119.328788][ T8050] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  119.411814][ T8048] netlink: 16 bytes leftover after parsing attributes in process `syz.2.624'.
[  119.573772][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.628'.
[  119.587915][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.628'.
[  119.595487][ T8060] SET target dimension over the limit!
[  120.022749][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.634'.
[  120.091070][ T8077] vxcan1: entered allmulticast mode
[  120.101313][ T5848] syz-executor (5848) used greatest stack depth: 18096 bytes left
[  120.260000][ T3430] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.349083][ T3430] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.460391][ T3430] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.605712][ T3430] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.647782][ T8091] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  120.667609][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  120.696008][ T8088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.637'.
[  120.724172][ T8091] netlink: 40 bytes leftover after parsing attributes in process `syz.3.639'.
[  120.747511][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  120.756720][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  120.764652][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  120.773732][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  120.787089][   T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  120.794491][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  121.114167][ T3430] bridge_slave_1: left allmulticast mode
[  121.133822][ T3430] bridge_slave_1: left promiscuous mode
[  121.152904][ T3430] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.229870][ T3430] bridge_slave_0: left allmulticast mode
[  121.241921][ T3430] bridge_slave_0: left promiscuous mode
[  121.248628][ T3430] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.507851][ T8146] FAULT_INJECTION: forcing a failure.
[  121.507851][ T8146] name failslab, interval 1, probability 0, space 0, times 1
[  121.521167][ T8146] CPU: 0 UID: 0 PID: 8146 Comm: syz.2.651 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0
[  121.532013][ T8146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  121.542119][ T8146] Call Trace:
[  121.545433][ T8146]  <TASK>
[  121.548412][ T8146]  dump_stack_lvl+0x241/0x360
[  121.553246][ T8146]  ? __pfx_dump_stack_lvl+0x10/0x10
[  121.558493][ T8146]  ? __pfx__printk+0x10/0x10
[  121.563137][ T8146]  ? fs_reclaim_acquire+0x93/0x130
[  121.568289][ T8146]  ? __pfx___might_resched+0x10/0x10
[  121.573641][ T8146]  should_fail_ex+0x3b0/0x4e0
[  121.578414][ T8146]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  121.584184][ T8146]  should_failslab+0xac/0x100
[  121.588915][ T8146]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  121.594678][ T8146]  __kmalloc_noprof+0xd8/0x400
[  121.599482][ T8146]  tomoyo_realpath_from_path+0xcf/0x5e0
[  121.605075][ T8146]  tomoyo_path_number_perm+0x23a/0x880
[  121.610593][ T8146]  ? tomoyo_path_number_perm+0x208/0x880
[  121.616246][ T8146]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  121.622283][ T8146]  ? __fget_files+0x29/0x470
[  121.626908][ T8146]  ? __fget_files+0x3f3/0x470
[  121.631639][ T8146]  security_file_ioctl+0xc6/0x2a0
[  121.636709][ T8146]  __se_sys_ioctl+0x47/0x170
[  121.641341][ T8146]  do_syscall_64+0xf3/0x230
[  121.645877][ T8146]  ? clear_bhb_loop+0x35/0x90
[  121.650627][ T8146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.656550][ T8146] RIP: 0033:0x7f189957e819
[  121.661009][ T8146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  121.680657][ T8146] RSP: 002b:00007f189a40d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  121.689136][ T8146] RAX: ffffffffffffffda RBX: 00007f1899735fa0 RCX: 00007f189957e819
[  121.697119][ T8146] RDX: 0000000020000240 RSI: 00000000000089f3 RDI: 0000000000000003
[  121.705108][ T8146] RBP: 00007f189a40d090 R08: 0000000000000000 R09: 0000000000000000
[  121.713103][ T8146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  121.721091][ T8146] R13: 0000000000000000 R14: 00007f1899735fa0 R15: 00007ffc3aad5f58
[  121.729102][ T8146]  </TASK>
[  121.738333][ T8146] ERROR: Out of memory at tomoyo_realpath_from_path.
[  122.228892][ T3430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.241905][ T3430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  122.252784][ T3430] bond0 (unregistering): Released all slaves
[  122.581330][ T3430] tipc: Disabling bearer <udp:s>
[  122.588104][ T3430] tipc: Left network mode
[  122.647603][ T8167] openvswitch: netlink: Actions may not be safe on all matching packets
[  122.756537][ T8097] chnl_net:caif_netlink_parms(): no params data found
[  122.870575][ T5856] Bluetooth: hci1: command tx timeout
[  122.891813][ T8179] netlink: 'syz.0.657': attribute type 8 has an invalid length.
[  122.927878][ T8181] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  123.118454][ T8195] FAULT_INJECTION: forcing a failure.
[  123.118454][ T8195] name failslab, interval 1, probability 0, space 0, times 0
[  123.172018][ T8195] CPU: 1 UID: 0 PID: 8195 Comm: syz.2.663 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0
[  123.182790][ T8195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  123.192964][ T8195] Call Trace:
[  123.196282][ T8195]  <TASK>
[  123.199231][ T8195]  dump_stack_lvl+0x241/0x360
[  123.203920][ T8195]  ? __pfx_dump_stack_lvl+0x10/0x10
[  123.209128][ T8195]  ? __pfx__printk+0x10/0x10
[  123.213724][ T8195]  ? fs_reclaim_acquire+0x93/0x130
[  123.218861][ T8195]  ? __pfx___might_resched+0x10/0x10
[  123.224151][ T8195]  ? dynamic_dname+0x141/0x1b0
[  123.228949][ T8195]  should_fail_ex+0x3b0/0x4e0
[  123.233636][ T8195]  ? tomoyo_encode+0x26f/0x540
[  123.238425][ T8195]  should_failslab+0xac/0x100
[  123.243139][ T8195]  ? tomoyo_encode+0x26f/0x540
[  123.247936][ T8195]  __kmalloc_noprof+0xd8/0x400
[  123.252721][ T8195]  tomoyo_encode+0x26f/0x540
[  123.257326][ T8195]  ? __pfx_sockfs_dname+0x10/0x10
[  123.262357][ T8195]  tomoyo_realpath_from_path+0x59e/0x5e0
[  123.268021][ T8195]  tomoyo_path_number_perm+0x23a/0x880
[  123.273490][ T8195]  ? tomoyo_path_number_perm+0x208/0x880
[  123.279130][ T8195]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  123.285143][ T8195]  ? __fget_files+0x29/0x470
[  123.289746][ T8195]  ? __fget_files+0x3f3/0x470
[  123.294470][ T8195]  security_file_ioctl+0xc6/0x2a0
[  123.299508][ T8195]  __se_sys_ioctl+0x47/0x170
[  123.304103][ T8195]  do_syscall_64+0xf3/0x230
[  123.308621][ T8195]  ? clear_bhb_loop+0x35/0x90
[  123.313312][ T8195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.319226][ T8195] RIP: 0033:0x7f189957e819
[  123.323661][ T8195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  123.343299][ T8195] RSP: 002b:00007f189a40d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  123.351748][ T8195] RAX: ffffffffffffffda RBX: 00007f1899735fa0 RCX: 00007f189957e819
[  123.359746][ T8195] RDX: 0000000020000240 RSI: 00000000000089f3 RDI: 0000000000000003
[  123.367743][ T8195] RBP: 00007f189a40d090 R08: 0000000000000000 R09: 0000000000000000
[  123.375719][ T8195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  123.383699][ T8195] R13: 0000000000000000 R14: 00007f1899735fa0 R15: 00007ffc3aad5f58
[  123.391702][ T8195]  </TASK>
[  123.396375][ T8195] ERROR: Out of memory at tomoyo_realpath_from_path.
[  123.547996][ T8199] __nla_validate_parse: 4 callbacks suppressed
[  123.548021][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.664'.
[  123.623318][ T8097] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.632223][ T8097] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.657651][ T8097] bridge_slave_0: entered allmulticast mode
[  123.673247][ T8097] bridge_slave_0: entered promiscuous mode
[  123.718065][ T8097] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.736007][ T8097] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.764305][ T8097] bridge_slave_1: entered allmulticast mode
[  123.788117][ T8097] bridge_slave_1: entered promiscuous mode
[  123.838153][ T8212] netlink: 16 bytes leftover after parsing attributes in process `syz.0.667'.
[  123.857368][ T8212] netlink: 92 bytes leftover after parsing attributes in process `syz.0.667'.
[  124.104482][ T3430] hsr_slave_0: left promiscuous mode
[  124.116428][ T3430] hsr_slave_1: left promiscuous mode
[  124.146326][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.182734][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.206957][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.256262][ T3430] veth1_macvtap: left promiscuous mode
[  124.262722][ T3430] veth0_macvtap: left promiscuous mode
[  124.268795][ T3430] veth1_vlan: left promiscuous mode
[  124.274507][ T3430] veth0_vlan: left promiscuous mode
[  124.947548][ T5856] Bluetooth: hci1: command tx timeout
[  125.120461][ T3430] team0 (unregistering): Port device team_slave_1 removed
[  125.161308][ T3430] team0 (unregistering): Port device team_slave_0 removed
[  125.360705][  T969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.369696][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.533213][ T8097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.548666][ T8097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.550912][ T8246] workqueue: name exceeds WQ_NAME_LEN. Truncating to: †<)Ù2¼”›U7‘Åä‹¡ô¾ÐËÝ;&!éi‡¼
[  125.568015][ T8250] netlink: 'syz.2.676': attribute type 8 has an invalid length.
[  125.656871][ T8097] team0: Port device team_slave_0 added
[  125.715724][ T8097] team0: Port device team_slave_1 added
[  125.885515][ T8285] trusted_key: syz.2.679 sent an empty control message without MSG_MORE.
[  125.887605][ T8097] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.918230][ T8293] FAULT_INJECTION: forcing a failure.
[  125.918230][ T8293] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  125.927230][ T8097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.937667][ T8293] CPU: 1 UID: 0 PID: 8293 Comm: syz.3.681 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0
[  125.967941][ T8293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  125.978016][ T8293] Call Trace:
[  125.981311][ T8293]  <TASK>
[  125.984250][ T8293]  dump_stack_lvl+0x241/0x360
[  125.988956][ T8293]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.994167][ T8293]  ? __pfx__printk+0x10/0x10
[  125.998769][ T8293]  ? __pfx_lock_release+0x10/0x10
[  126.003813][ T8293]  should_fail_ex+0x3b0/0x4e0
[  126.008518][ T8293]  _copy_from_user+0x2f/0xc0
[  126.013167][ T8293]  get_user_ifreq+0xc3/0x200
[  126.017775][ T8293]  sock_ioctl+0x793/0x8e0
[  126.022118][ T8293]  ? __pfx_sock_ioctl+0x10/0x10
[  126.027001][ T8293]  ? __fget_files+0x3f3/0x470
[  126.031711][ T8293]  ? __pfx_sock_ioctl+0x10/0x10
[  126.036577][ T8293]  __se_sys_ioctl+0xf9/0x170
[  126.041180][ T8293]  do_syscall_64+0xf3/0x230
[  126.045702][ T8293]  ? clear_bhb_loop+0x35/0x90
[  126.050427][ T8293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.056347][ T8293] RIP: 0033:0x7f5cd477e819
[  126.060772][ T8293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  126.080564][ T8293] RSP: 002b:00007f5cd5514038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  126.089075][ T8293] RAX: ffffffffffffffda RBX: 00007f5cd4935fa0 RCX: 00007f5cd477e819
[  126.097055][ T8293] RDX: 0000000020000240 RSI: 00000000000089f3 RDI: 0000000000000003
[  126.105038][ T8293] RBP: 00007f5cd5514090 R08: 0000000000000000 R09: 0000000000000000
[  126.113019][ T8293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  126.121345][ T8293] R13: 0000000000000000 R14: 00007f5cd4935fa0 R15: 00007ffe5f49ada8
[  126.129346][ T8293]  </TASK>
[  126.156857][ T8097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.172402][ T8097] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.179450][ T8097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.205528][ T8097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.359738][ T8097] hsr_slave_0: entered promiscuous mode
[  126.375776][ T8097] hsr_slave_1: entered promiscuous mode
[  126.382542][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.683'.
[  126.501504][ T8305] team1: Mode "" not found
[  126.595925][ T8315] tipc: Started in network mode
[  126.614210][ T8315] tipc: Node identity , cluster identity 4711
[  126.643860][ T8319] netlink: 'syz.3.688': attribute type 7 has an invalid length.
[  126.653701][ T8315] tipc: Failed to obtain node identity
[  126.659439][ T8315] tipc: Enabling of bearer <eth:ip6gre0> rejected, failed to enable media
[  126.687430][ T8316] tipc: Started in network mode
[  126.701667][ T8316] tipc: Node identity , cluster identity 4711
[  126.743721][ T8316] tipc: Failed to obtain node identity
[  126.751624][ T8316] tipc: Enabling of bearer <eth:ip6gre0> rejected, failed to enable media
[  126.845771][ T8323] veth0_vlan: entered allmulticast mode
[  126.892952][ T8327] netlink: 'syz.0.690': attribute type 1 has an invalid length.
[  126.912392][ T8327] netlink: 244 bytes leftover after parsing attributes in process `syz.0.690'.
[  126.976590][ T8324] ªªªªªª: renamed from vlan0
[  127.027359][ T5856] Bluetooth: hci1: command tx timeout
[  127.142192][ T8341] netlink: 72 bytes leftover after parsing attributes in process `syz.0.695'.
[  127.154969][ T8329] netlink: 'syz.1.691': attribute type 2 has an invalid length.
[  127.163477][ T8329] netlink: 132 bytes leftover after parsing attributes in process `syz.1.691'.
[  127.257289][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.695'.
[  127.277163][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.303567][ T8341] netlink: 'syz.0.695': attribute type 1 has an invalid length.
[  127.326857][ T8341] netlink: 9116 bytes leftover after parsing attributes in process `syz.0.695'.
[  127.346174][ T8341] netlink: 217 bytes leftover after parsing attributes in process `syz.0.695'.
[  127.395533][ T8349] netlink: 'syz.1.697': attribute type 1 has an invalid length.
[  127.428547][ T8349] netlink: 'syz.1.697': attribute type 2 has an invalid length.
[  127.738685][ T8097] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  127.792587][ T8097] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  127.858628][ T8097] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  127.886341][ T8097] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  127.907674][ T8135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.987457][ T8377] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  128.136708][ T8097] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.162546][ T8097] 8021q: adding VLAN 0 to HW filter on device team0
[  128.193573][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.201639][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.250313][ T3459] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.257504][ T3459] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.352536][ T8097] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  128.374002][ T8097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  128.511090][ T8396] IPVS: Unknown mcast interface: syzkaller0
[  128.719284][ T8410] netlink: 56 bytes leftover after parsing attributes in process `syz.3.717'.
[  128.753777][ T8410] netlink: 48 bytes leftover after parsing attributes in process `syz.3.717'.
[  128.770119][ T8410] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.862763][ T8097] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.003452][ T8428] Driver unsupported XDP return value 0 on prog  (id 155) dev N/A, expect packet loss!
[  129.099421][ T8435] bridge0: port 3(batadv1) entered blocking state
[  129.106948][ T5856] Bluetooth: hci1: command tx timeout
[  129.134304][ T8435] bridge0: port 3(batadv1) entered disabled state
[  129.141431][ T8435] batadv1: entered allmulticast mode
[  129.159408][ T8435] batadv1: entered promiscuous mode
[  129.182730][ T8439] netem: change failed
[  129.393039][ T8450] netlink: 'syz.3.725': attribute type 6 has an invalid length.
[  129.483850][ T8097] veth0_vlan: entered promiscuous mode
[  129.514771][ T8097] veth1_vlan: entered promiscuous mode
[  129.591563][ T8097] veth0_macvtap: entered promiscuous mode
[  129.602906][ T3483] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  129.612704][ T3483] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  129.636549][ T8097] veth1_macvtap: entered promiscuous mode
[  129.666646][ T8097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.683871][ T8097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.694352][ T8097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.712624][ T8097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.724264][ T8097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.744614][ T8097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.755648][ T8097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.766720][ T8097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.779634][ T8097] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.802234][ T8097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.856938][ T8097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.874031][ T8097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.889853][ T8097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.904307][ T8097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.915028][ T8097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.925717][ T8097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.936619][ T8097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.948593][ T8097] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.999794][ T8097] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.023963][ T8097] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.046809][ T8097] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.055567][ T8097] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.083153][ T8476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.734'.
[  130.097073][ T8476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.734'.
[  130.150606][ T8478] netlink: 24 bytes leftover after parsing attributes in process `syz.2.735'.
[  130.239361][ T3430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.256210][ T3430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.303260][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.330334][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.367715][ T8485] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.736'.
[  130.562878][ T8496] netlink: 248 bytes leftover after parsing attributes in process `syz.0.739'.
[  130.601774][ T8498] netlink: 'syz.1.741': attribute type 10 has an invalid length.
[  130.693118][ T8498] bridge_slave_1: left allmulticast mode
[  130.706536][ T8498] bridge_slave_1: left promiscuous mode
[  130.714960][ T8498] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.725356][ T8498] bridge_slave_0: left allmulticast mode
[  130.731692][ T8498] bridge_slave_0: left promiscuous mode
[  130.738045][ T8498] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.832859][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.742'.
[  130.845392][ T8503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.742'.
[  131.111544][ T3506] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.180042][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'.
[  131.376638][ T3506] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.524354][ T3506] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.751214][ T3506] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.763028][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.771724][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.777626][ T8548] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  131.943158][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  131.953292][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  131.961612][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  131.971888][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  131.987514][   T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  131.996943][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  131.997809][ T8552] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.082377][ T8552] bridge_slave_0 (unregistering): left allmulticast mode
[  132.094465][ T8552] bridge_slave_0 (unregistering): left promiscuous mode
[  132.109135][ T8552] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.398703][  T969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.407148][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.417369][ T3506] bridge_slave_1: left allmulticast mode
[  132.440324][ T3506] bridge_slave_1: left promiscuous mode
[  132.446604][ T3506] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.475818][ T3506] bridge_slave_0: left allmulticast mode
[  132.487083][ T3506] bridge_slave_0: left promiscuous mode
[  132.494583][ T3506] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.011674][ T3506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  133.032494][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  133.039116][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  133.045909][ T8597] syz.0.766: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  133.049300][ T3506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  133.067315][ T8597] CPU: 1 UID: 0 PID: 8597 Comm: syz.0.766 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0
[  133.083165][ T8597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  133.093245][ T8597] Call Trace:
[  133.096535][ T8597]  <TASK>
[  133.099481][ T8597]  dump_stack_lvl+0x241/0x360
[  133.104180][ T8597]  ? __pfx_dump_stack_lvl+0x10/0x10
[  133.109396][ T8597]  ? __pfx__printk+0x10/0x10
[  133.114002][ T8597]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  133.120438][ T8597]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  133.126972][ T8597]  warn_alloc+0x278/0x410
[  133.131322][ T8597]  ? __pfx_warn_alloc+0x10/0x10
[  133.136187][ T8597]  ? packet_set_ring+0x6da/0x2450
[  133.141245][ T8597]  ? __get_vm_area_node+0x23d/0x270
[  133.146467][ T8597]  __vmalloc_node_range_noprof+0x691/0x13f0
[  133.152403][ T8597]  ? alloc_pages_mpol_noprof+0x417/0x680
[  133.158046][ T8597]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  133.164391][ T8597]  ? __pfx_alloc_pages_mpol_noprof+0x10/0x10
[  133.170379][ T8597]  ? packet_set_ring+0x62b/0x2450
[  133.175408][ T8597]  ? rcu_is_watching+0x15/0xb0
[  133.180197][ T8597]  ? packet_set_ring+0x6da/0x2450
[  133.185227][ T8597]  vzalloc_noprof+0x79/0x90
[  133.189742][ T8597]  ? packet_set_ring+0x6da/0x2450
[  133.194776][ T8597]  packet_set_ring+0x6da/0x2450
[  133.199651][ T8597]  ? __pfx_packet_set_ring+0x10/0x10
[  133.204965][ T8597]  ? __might_fault+0xaa/0x120
[  133.209659][ T8597]  ? __might_fault+0xc6/0x120
[  133.214361][ T8597]  packet_setsockopt+0x1140/0x1970
[  133.219491][ T8597]  ? __pfx_packet_setsockopt+0x10/0x10
[  133.224966][ T8597]  ? aa_sk_perm+0x96d/0xab0
[  133.229515][ T8597]  ? __pfx_aa_sk_perm+0x10/0x10
[  133.234465][ T8597]  ? __pfx_lock_acquire+0x10/0x10
[  133.239516][ T8597]  ? __fget_files+0x29/0x470
[  133.244116][ T8597]  ? aa_sock_opt_perm+0x79/0x120
[  133.249067][ T8597]  ? __pfx_packet_setsockopt+0x10/0x10
[  133.254530][ T8597]  do_sock_setsockopt+0x3af/0x720
[  133.259609][ T8597]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  133.265163][ T8597]  ? __fget_files+0x29/0x470
[  133.269769][ T8597]  ? __fget_files+0x3f3/0x470
[  133.274458][ T8597]  ? __fget_files+0x29/0x470
[  133.279066][ T8597]  __sys_setsockopt+0x1a2/0x250
[  133.283929][ T8597]  __x64_sys_setsockopt+0xb5/0xd0
[  133.288967][ T8597]  do_syscall_64+0xf3/0x230
[  133.293488][ T8597]  ? clear_bhb_loop+0x35/0x90
[  133.298180][ T8597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.304084][ T8597] RIP: 0033:0x7f659337e819
[  133.308507][ T8597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.328121][ T8597] RSP: 002b:00007f65940cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  133.336550][ T8597] RAX: ffffffffffffffda RBX: 00007f6593535fa0 RCX: 00007f659337e819
[  133.344535][ T8597] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000003
[  133.352514][ T8597] RBP: 00007f65933f175e R08: 000000000000001c R09: 0000000000000000
[  133.360495][ T8597] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000
[  133.368475][ T8597] R13: 0000000000000000 R14: 00007f6593535fa0 R15: 00007ffdf34c8ca8
[  133.376506][ T8597]  </TASK>
[  133.387006][ T8597] Mem-Info:
[  133.390163][ T8597] active_anon:3451 inactive_anon:0 isolated_anon:0
[  133.390163][ T8597]  active_file:1284 inactive_file:38206 isolated_file:0
[  133.390163][ T8597]  unevictable:768 dirty:153 writeback:0
[  133.390163][ T8597]  slab_reclaimable:10489 slab_unreclaimable:98950
[  133.390163][ T8597]  mapped:28263 shmem:1425 pagetables:681
[  133.390163][ T8597]  sec_pagetables:0 bounce:0
[  133.390163][ T8597]  kernel_misc_reclaimable:0
[  133.390163][ T8597]  free:1345769 free_pcp:207 free_cma:0
[  133.437355][ T8597] Node 0 active_anon:13804kB inactive_anon:0kB active_file:5136kB inactive_file:152748kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113052kB dirty:608kB writeback:0kB shmem:4164kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11544kB pagetables:2724kB sec_pagetables:0kB all_unreclaimable? no
[  133.471595][ T8597] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  133.492574][ T3506] bond0 (unregistering): Released all slaves
[  133.502699][ T8597] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  133.544298][ T8597] lowmem_reserve[]: 0 2463 2464 0 0
[  133.550177][ T8597] Node 0 DMA32 free:1465116kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:13768kB inactive_anon:0kB active_file:5136kB inactive_file:152172kB unevictable:1536kB writepending:604kB present:3129332kB managed:2550460kB mlocked:0kB bounce:0kB free_pcp:288kB local_pcp:64kB free_cma:0kB
[  133.550392][ T8576] netlink: 'syz.1.761': attribute type 2 has an invalid length.
[  133.588691][ T8574] netlink: 'syz.2.759': attribute type 10 has an invalid length.
[  133.595875][ T8597] lowmem_reserve[]: 0 0 0 0 0
[  133.604901][ T8597] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:576kB unevictable:0kB writepending:4kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  133.633894][ T8597] lowmem_reserve[]: 0 0 0 0 0
[  133.644878][ T8597] Node 1 Normal free:3904216kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  133.662617][ T8574] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  133.675997][ T8597] lowmem_reserve[]: 0 0 0 0 0
[  133.687969][ T8597] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  133.742138][ T8597] Node 0 DMA32: 130*4kB (UM) 115*8kB (UME) 59*16kB (UME) 104*32kB (UME) 41*64kB (UME) 29*128kB (UME) 9*256kB (UME) 10*512kB (UME) 4*1024kB (UM) 8*2048kB (UM) 348*4096kB (M) = 1465360kB
[  133.794555][ T8597] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  133.809347][ T8597] Node 1 Normal: 244*4kB (UE) 81*8kB (UME) 44*16kB (UME) 204*32kB (UME) 95*64kB (UME) 29*128kB (UME) 14*256kB (UME) 14*512kB (UM) 6*1024kB (UME) 5*2048kB (UE) 942*4096kB (M) = 3904216kB
[  133.829577][ T8597] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  133.841088][ T8597] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  133.870450][ T8597] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  133.880738][ T8597] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  133.912097][ T8597] 40915 total pagecache pages
[  133.921763][ T8597] 0 pages in swap cache
[  133.926121][ T8597] Free swap  = 124996kB
[  133.936091][ T8597] Total swap = 124996kB
[  133.941180][ T8597] 2097051 pages RAM
[  133.945031][ T8597] 0 pages HighMem/MovableOnly
[  133.949871][ T8597] 427650 pages reserved
[  133.954163][ T8597] 0 pages cma reserved
[  134.070200][ T5856] Bluetooth: hci1: command tx timeout
[  134.140891][ T8555] chnl_net:caif_netlink_parms(): no params data found
[  134.421075][ T3506] hsr_slave_0: left promiscuous mode
[  134.429143][ T3506] hsr_slave_1: left promiscuous mode
[  134.436710][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.454229][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.462337][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.479140][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.501979][ T3506] veth1_macvtap: left promiscuous mode
[  134.507841][ T3506] veth0_macvtap: left promiscuous mode
[  134.513522][ T3506] veth1_vlan: left promiscuous mode
[  134.521629][ T3506] veth0_vlan: left promiscuous mode
[  135.016725][ T3506] team0 (unregistering): Port device team_slave_1 removed
[  135.062821][ T3506] team0 (unregistering): Port device team_slave_0 removed
[  135.201180][ T8648] __nla_validate_parse: 4 callbacks suppressed
[  135.201201][ T8648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.778'.
[  135.223636][ T8648] netlink: 32 bytes leftover after parsing attributes in process `syz.2.778'.
[  135.450154][ T8652] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  135.627071][ T8555] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.634227][ T8555] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.658348][ T8555] bridge_slave_0: entered allmulticast mode
[  135.668639][ T8555] bridge_slave_0: entered promiscuous mode
[  135.686004][ T8555] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.693799][ T8555] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.701119][ T8555] bridge_slave_1: entered allmulticast mode
[  135.709742][ T8555] bridge_slave_1: entered promiscuous mode
[  135.722573][ T8640] dvmrp0: entered allmulticast mode
[  135.806058][ T8661] netlink: 256 bytes leftover after parsing attributes in process `syz.1.783'.
[  135.827783][ T8659] netlink: 'syz.3.781': attribute type 2 has an invalid length.
[  135.848947][ T8555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.899827][ T8555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.005982][ T3430] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.053105][ T8555] team0: Port device team_slave_0 added
[  136.068653][ T8669] dvmrp0: entered allmulticast mode
[  136.076497][ T8555] team0: Port device team_slave_1 added
[  136.081740][ T8669] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20001
[  136.104882][ T8668] netlink: 'syz.1.785': attribute type 1 has an invalid length.
[  136.124532][ T8668] netlink: 616 bytes leftover after parsing attributes in process `syz.1.785'.
[  136.147268][ T5856] Bluetooth: hci1: command tx timeout
[  136.152839][ T8664] tap0: tun_chr_ioctl cmd 1074025675
[  136.159990][ T8664] tap0: persist disabled
[  136.165147][ T8666] netlink: 'syz.0.784': attribute type 2 has an invalid length.
[  136.208085][ T8671] netlink: 'syz.2.787': attribute type 1 has an invalid length.
[  136.238166][ T8671] netlink: 'syz.2.787': attribute type 2 has an invalid length.
[  136.281568][ T8555] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.304485][ T8555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.364657][ T8555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.371673][ T8688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.790'.
[  136.388102][ T8686] netlink: 64 bytes leftover after parsing attributes in process `syz.2.791'.
[  136.392041][ T8688] netlink: 'syz.3.790': attribute type 1 has an invalid length.
[  136.474766][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.790'.
[  136.494206][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'.
[  136.513621][ T8555] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.541256][ T8555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.598572][ T8555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.676690][ T8700] netlink: 'syz.1.793': attribute type 8 has an invalid length.
[  136.684759][ T8700] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  136.702228][ T8701] netlink: 'syz.1.793': attribute type 8 has an invalid length.
[  136.715179][ T8701] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  136.919717][ T8555] hsr_slave_0: entered promiscuous mode
[  136.926066][ T8555] hsr_slave_1: entered promiscuous mode
[  136.963818][ T8711] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.796'.
[  137.141950][ T8715] netlink: 80 bytes leftover after parsing attributes in process `syz.1.798'.
[  137.300413][ T8726] netlink: 'syz.0.800': attribute type 1 has an invalid length.
[  137.317222][ T8726] netlink: 'syz.0.800': attribute type 1 has an invalid length.
[  137.631856][ T8555] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  137.641964][ T8555] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  137.660670][ T8555] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  137.680141][ T8555] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  137.935449][ T8555] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.952423][ T8555] 8021q: adding VLAN 0 to HW filter on device team0
[  137.987789][ T8555] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  137.998257][ T8555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  138.019895][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.027071][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.055071][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.062270][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.178726][ T8757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  138.204645][ T8757] syzkaller0: entered allmulticast mode
[  138.267223][ T5856] Bluetooth: hci1: command tx timeout
[  138.331071][ T8769] dvmrp0: entered allmulticast mode
[  138.389812][ T8555] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.073790][ T8555] veth0_vlan: entered promiscuous mode
[  139.116482][ T8555] veth1_vlan: entered promiscuous mode
[  139.229275][ T8555] veth0_macvtap: entered promiscuous mode
[  139.239351][ T8555] veth1_macvtap: entered promiscuous mode
[  139.305477][ T8555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.356986][ T8555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.386941][ T8555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.416863][ T8555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.438456][ T8555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.484084][ T8555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.516905][ T8555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.548619][ T8555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.584704][ T8555] batman_adv: batadv0: Interface activated: batadv_slave_0
[  139.639562][ T8555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.655609][ T8555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.665614][ T8555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.687925][ T8818] ieee802154 phy0 wpan0: encryption failed: -22
[  139.706843][ T8555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.716705][ T8555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.736828][ T8555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.754725][ T8555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.772689][ T8555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.785371][ T8555] batman_adv: batadv0: Interface activated: batadv_slave_1
[  139.859892][ T8555] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.896807][ T8555] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.916833][ T8555] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.935052][ T8555] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.084748][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.106697][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.165529][ T3483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.191003][ T3483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.307728][ T5856] Bluetooth: hci1: command tx timeout
[  140.425645][ T8845] __nla_validate_parse: 21 callbacks suppressed
[  140.425668][ T8845] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.837'.
[  140.768878][ T8865] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  140.861433][ T8870] debugfs: Directory '†<)Ù2¼”›U7‘Åä‹¡ô¾ÐËÝ;&!éi‡¼‹' with parent 'ieee80211' already present!
[  141.295369][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.852'.
[  141.319008][ T8895] pimreg: entered allmulticast mode
[  141.324410][ T8895] dvmrp0: left allmulticast mode
[  141.329786][ T8895] pimreg: left allmulticast mode
[  141.451689][ T3483] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.767246][ T8902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.855'.
[  141.786418][ T8902] openvswitch: netlink: Flow key attr not present in new flow.
[  141.789087][ T8903] openvswitch: netlink: Invalid VLAN frame
[  141.984370][ T3483] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.022908][ T8910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.857'.
[  142.152554][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  142.162129][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  142.179503][ T3483] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.181583][ T8918] netlink: 40 bytes leftover after parsing attributes in process `syz.0.860'.
[  142.200277][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  142.227272][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  142.235676][   T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  142.243435][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  142.412773][ T3483] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.965034][ T8969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.873'.
[  143.039429][ T8962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.054283][ T8962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.065172][ T8962] bond0 (unregistering): Released all slaves
[  143.082495][ T3483] bridge_slave_1: left allmulticast mode
[  143.088481][ T3483] bridge_slave_1: left promiscuous mode
[  143.094978][ T3483] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.111616][ T3483] bridge_slave_0: left allmulticast mode
[  143.117791][ T3483] bridge_slave_0: left promiscuous mode
[  143.130999][ T3483] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.673216][ T3483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.693239][ T3483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.732296][ T3483] bond0 (unregistering): Released all slaves
[  143.761803][ T8914] chnl_net:caif_netlink_parms(): no params data found
[  144.071202][ T8985] netlink: 32 bytes leftover after parsing attributes in process `syz.2.877'.
[  144.240145][ T9003] validate_nla: 5 callbacks suppressed
[  144.240166][ T9003] netlink: 'syz.1.880': attribute type 8 has an invalid length.
[  144.263029][ T9003] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.880'.
[  144.307014][   T55] Bluetooth: hci1: command tx timeout
[  144.366634][ T8914] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.401888][ T8914] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.427075][ T8914] bridge_slave_0: entered allmulticast mode
[  144.448296][ T8914] bridge_slave_0: entered promiscuous mode
[  144.520892][ T3483] hsr_slave_0: left promiscuous mode
[  144.544528][ T3483] hsr_slave_1: left promiscuous mode
[  144.568453][ T3483] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.589118][ T3483] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.604582][ T3483] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.613597][ T3483] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.639883][ T3483] veth1_macvtap: left promiscuous mode
[  144.645956][ T3483] veth0_macvtap: left promiscuous mode
[  144.652323][ T3483] veth1_vlan: left promiscuous mode
[  144.658204][ T3483] veth0_vlan: left promiscuous mode
[  145.291863][ T3483] team0 (unregistering): Port device team_slave_1 removed
[  145.332358][ T3483] team0 (unregistering): Port device team_slave_0 removed
[  145.694957][ T8914] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.704246][ T8914] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.712132][ T8914] bridge_slave_1: entered allmulticast mode
[  145.719718][ T8914] bridge_slave_1: entered promiscuous mode
[  145.735521][ T9012] ɶƣ0GC¦: entered promiscuous mode
[  145.760252][ T9020] netlink: 'syz.3.888': attribute type 8 has an invalid length.
[  145.768559][ T9020] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  145.797027][ T9024] IPv6: Can't replace route, no match found
[  145.963437][ T8914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.972961][ T9049] netlink: 'syz.2.892': attribute type 9 has an invalid length.
[  145.972985][ T9049] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.892'.
[  146.020040][ T8914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  146.107058][ T8914] team0: Port device team_slave_0 added
[  146.115234][ T8914] team0: Port device team_slave_1 added
[  146.272669][ T8914] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.297116][ T8914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.390917][ T8914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.401494][   T55] Bluetooth: hci1: command tx timeout
[  146.451031][ T8914] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.467391][ T8914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.495412][ T8914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.647192][ T9080] netlink: 'syz.1.902': attribute type 10 has an invalid length.
[  146.657464][ T9080] macvlan0: entered promiscuous mode
[  146.662808][ T9080] macvlan0: entered allmulticast mode
[  146.724705][ T9080] veth1_vlan: entered allmulticast mode
[  146.744678][ T9080] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  146.781478][ T8914] hsr_slave_0: entered promiscuous mode
[  146.798171][ T9085] openvswitch: netlink: Actions may not be safe on all matching packets
[  146.814721][ T8914] hsr_slave_1: entered promiscuous mode
[  147.177554][ T9105] netlink: 96 bytes leftover after parsing attributes in process `syz.1.909'.
[  147.355313][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.910'.
[  147.372330][ T9109] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64)
[  147.656962][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.914'.
[  147.683043][ T9119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.914'.
[  147.699540][ T9119] netlink: 'syz.1.914': attribute type 11 has an invalid length.
[  147.793659][ T9128] netlink: 'syz.2.916': attribute type 1 has an invalid length.
[  147.834866][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.919'.
[  148.479363][ T8914] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  148.488243][   T55] Bluetooth: hci1: command tx timeout
[  148.509848][ T8914] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  148.540279][ T8914] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  148.600080][ T8914] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  148.727619][ T9161] netlink: 'syz.3.927': attribute type 5 has an invalid length.
[  148.742396][ T9158] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.926'.
[  148.744321][ T8914] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.773817][ T8914] 8021q: adding VLAN 0 to HW filter on device team0
[  148.791704][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.798895][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.821665][ T9165] netlink: 44 bytes leftover after parsing attributes in process `syz.3.927'.
[  148.829135][ T9158] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.856582][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.863784][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.881630][ T9165] netlink: 43 bytes leftover after parsing attributes in process `syz.3.927'.
[  148.891504][ T9158] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.926'.
[  148.921184][ T9165] netlink: 'syz.3.927': attribute type 5 has an invalid length.
[  148.921619][ T9158] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.945975][ T9158] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.981955][ T9158] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.986229][ T9165] netlink: 'syz.3.927': attribute type 5 has an invalid length.
[  148.995166][ T9158] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.018508][ T9158] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.034901][ T9158] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.045747][ T9158] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.118234][ T9165] netlink: 'syz.3.927': attribute type 5 has an invalid length.
[  149.431582][ T8914] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.817342][ T9198] validate_nla: 62 callbacks suppressed
[  149.817364][ T9198] netlink: 'syz.3.936': attribute type 10 has an invalid length.
[  149.875465][ T9201] : renamed from ipvlan1
[  149.945790][ T9204] netlink: 'syz.1.938': attribute type 2 has an invalid length.
[  150.054951][ T9211] netlink: 'syz.2.940': attribute type 13 has an invalid length.
[  150.063772][ T9211] netlink: 'syz.2.940': attribute type 58 has an invalid length.
[  150.173801][ T8914] veth0_vlan: entered promiscuous mode
[  150.205503][ T8914] veth1_vlan: entered promiscuous mode
[  150.281661][ T8914] veth0_macvtap: entered promiscuous mode
[  150.314690][ T8914] veth1_macvtap: entered promiscuous mode
[  150.357160][ T8914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.376441][ T8914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.403755][ T8914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.415818][ T8914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.432814][ T8914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.459874][ T8914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.473636][ T8914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.491408][ T8914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.505578][ T8914] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.522646][ T8914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.548077][   T55] Bluetooth: hci1: command tx timeout
[  150.564549][ T8914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.596875][ T8914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.631615][ T8914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.652555][ T8914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.683652][ T8914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.707279][ T8914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  150.718227][ T8914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.730550][ T8914] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.756048][ T8914] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.767669][ T8914] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.776629][ T8914] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.794415][ T8914] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.805483][ T9243] netlink: 'syz.1.951': attribute type 1 has an invalid length.
[  150.917134][ T9247] xt_bpf: check failed: parse error
[  150.948341][ T9248] xt_bpf: check failed: parse error
[  151.037816][ T9255] batman_adv: batadv0: Adding interface: dummy0
[  151.044127][ T9255] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.072046][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.080518][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.088311][ T9255] batman_adv: batadv0: Interface activated: dummy0
[  151.131531][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.147205][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.251343][ T9263] __nla_validate_parse: 230 callbacks suppressed
[  151.251361][ T9263] netlink: 40 bytes leftover after parsing attributes in process `syz.2.957'.
[  151.383592][ T9269] netlink: 224 bytes leftover after parsing attributes in process `syz.1.959'.
[  151.560814][ T9278] netlink: 'syz.2.963': attribute type 26 has an invalid length.
[  151.604759][ T9281] xt_hashlimit: size too large, truncated to 1048576
[  151.615883][ T9281] xt_hashlimit: size too large, truncated to 1048576
[  151.722052][ T9286] netlink: 'syz.3.965': attribute type 4 has an invalid length.
[  151.819099][ T9290] netlink: 'syz.2.968': attribute type 2 has an invalid length.
[  151.830009][ T9290] xt_hashlimit: invalid interval
[  152.030023][ T9298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.971'.
[  152.044911][ T9298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.971'.
[  152.325975][ T9312] ip6tnl2: entered promiscuous mode
[  152.331883][ T9312] ip6tnl2: entered allmulticast mode
[  152.347135][ T9314] ip6t_srh: unknown srh match flags  4001
[  152.353057][ T9315] bridge0: port 1(gretap0) entered blocking state
[  152.371210][ T9315] bridge0: port 1(gretap0) entered disabled state
[  152.387462][ T9315] gretap0: entered allmulticast mode
[  152.395951][ T9315] gretap0: entered promiscuous mode
[  152.409700][ T9315] bridge0: port 1(gretap0) entered blocking state
[  152.416307][ T9315] bridge0: port 1(gretap0) entered forwarding state
[  152.583482][   T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.872660][   T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.953961][   T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.022575][   T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.088384][   T35] bridge_slave_1: left allmulticast mode
[  153.094060][   T35] bridge_slave_1: left promiscuous mode
[  153.099990][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.109112][   T35] bridge_slave_0: left allmulticast mode
[  153.114781][   T35] bridge_slave_0: left promiscuous mode
[  153.120962][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.336031][ T9339] nft_compat: unsupported protocol 0
[  153.800249][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  153.847533][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  153.857592][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  153.883678][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  153.892026][ T5856] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  153.899850][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.913830][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  153.938704][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.950928][   T35] bond0 (unregistering): Released all slaves
[  154.195613][ T9366] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.989'.
[  154.215528][ T9366] net_ratelimit: 25 callbacks suppressed
[  154.215549][ T9366] openvswitch: netlink: Actions may not be safe on all matching packets
[  154.429845][ T9358] chnl_net:caif_netlink_parms(): no params data found
[  154.718417][   T35] hsr_slave_0: left promiscuous mode
[  154.724828][   T35] hsr_slave_1: left promiscuous mode
[  154.731227][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.739363][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.747902][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.755658][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.815925][   T35] veth1_macvtap: left promiscuous mode
[  154.828678][   T35] veth0_macvtap: left promiscuous mode
[  154.839004][   T35] veth1_vlan: left promiscuous mode
[  154.849027][   T35] veth0_vlan: left promiscuous mode
[  155.786128][   T35] team0 (unregistering): Port device team_slave_1 removed
[  155.837499][   T35] team0 (unregistering): Port device team_slave_0 removed
[  155.997101][   T55] Bluetooth: hci1: command tx timeout
[  156.388899][ T9358] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.396048][ T9358] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.437448][ T9358] bridge_slave_0: entered allmulticast mode
[  156.449651][ T9358] bridge_slave_0: entered promiscuous mode
[  156.478889][ T9358] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.486201][ T9358] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.494336][ T9358] bridge_slave_1: entered allmulticast mode
[  156.501930][ T9358] bridge_slave_1: entered promiscuous mode
[  156.627933][ T9423] netlink: 'syz.0.1004': attribute type 11 has an invalid length.
[  156.636669][ T5936] hid-generic 0005:046D:FFF9.0002: item fetching failed at offset 0/1
[  156.649326][ T9358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  156.659016][ T5936] hid-generic 0005:046D:FFF9.0002: probe with driver hid-generic failed with error -22
[  156.671695][ T9358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  156.870976][ T9358] team0: Port device team_slave_0 added
[  156.914086][ T9358] team0: Port device team_slave_1 added
[  156.996410][ T9446] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  157.043552][ T9358] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.056022][ T9358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.090845][ T9358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.115636][ T9358] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.134869][ T9358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.197781][ T9358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.298878][ T9358] hsr_slave_0: entered promiscuous mode
[  157.321487][ T9358] hsr_slave_1: entered promiscuous mode
[  157.951732][ T9475] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  158.025266][ T9358] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  158.045666][ T9358] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  158.067120][   T55] Bluetooth: hci1: command tx timeout
[  158.095211][ T9358] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  158.114190][ T9358] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  158.213090][ T9358] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.225832][ T9487] tap0: tun_chr_ioctl cmd 1074025676
[  158.239607][ T9487] tap0: owner set to 0
[  158.279875][ T9358] 8021q: adding VLAN 0 to HW filter on device team0
[  158.304709][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.311937][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.345115][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.352334][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.436110][ T9494] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.1024'.
[  158.701074][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1026'.
[  158.768783][ T9358] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.873017][ T9511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1028'.
[  159.596159][ T9525] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1031'.
[  159.623969][ T9526] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1031'.
[  159.818323][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1036'.
[  159.887240][ T9535] netlink: 'syz.0.1034': attribute type 6 has an invalid length.
[  159.942823][ T9358] veth0_vlan: entered promiscuous mode
[  159.984621][ T9358] veth1_vlan: entered promiscuous mode
[  160.009964][ T9543] netlink: 'syz.2.1038': attribute type 1 has an invalid length.
[  160.035924][ T9358] veth0_macvtap: entered promiscuous mode
[  160.037527][ T9543] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1038'.
[  160.055307][ T9545] netlink: 'syz.1.1037': attribute type 4 has an invalid length.
[  160.057568][ T9547] netlink: 209676 bytes leftover after parsing attributes in process `syz.0.1039'.
[  160.082726][ T9358] veth1_macvtap: entered promiscuous mode
[  160.101422][ T9543] bridge0: port 1(gretap0) entered disabled state
[  160.109557][ T9543] bridge0: entered allmulticast mode
[  160.146230][ T9358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.157680][   T55] Bluetooth: hci1: command tx timeout
[  160.163413][ T9358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.173716][ T9358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.190446][ T9358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.203303][ T9358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.220877][ T9358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.246990][ T9358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.266907][ T9358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.283010][ T9358] batman_adv: batadv0: Interface activated: batadv_slave_0
[  160.301002][ T9358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  160.325836][ T9358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.327709][ T9551] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1040'.
[  160.336290][ T9358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  160.355678][ T9358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.381260][ T9551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1040'.
[  160.391290][ T9358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  160.402124][ T9551] netlink: 'syz.1.1040': attribute type 2 has an invalid length.
[  160.410008][ T9358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.420558][ T9358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  160.432900][ T9560] sctp: [Deprecated]: syz.0.1042 (pid 9560) Use of int in max_burst socket option deprecated.
[  160.432900][ T9560] Use struct sctp_assoc_value instead
[  160.434421][ T9358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.463740][ T9358] batman_adv: batadv0: Interface activated: batadv_slave_1
[  160.513010][ T9358] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.529999][ T9358] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.547761][ T9358] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.563884][ T9358] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.815947][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.841590][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.878701][ T3430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.894981][ T3430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.330564][ T9591] bridge0: port 1(bridge_slave_0) entered learning state
[  161.369002][ T9591] wlan1: mtu greater than device maximum
[  161.720585][ T3430] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.920550][ T3430] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.079818][ T3430] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.404330][ T3430] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.654569][ T9646] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  162.857346][ T3430] bridge_slave_1: left allmulticast mode
[  162.867146][ T3430] bridge_slave_1: left promiscuous mode
[  162.873297][ T3430] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.893663][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  162.903242][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  162.911962][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  162.926244][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  162.940688][ T5856] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  162.941156][ T3430] bridge_slave_0: left allmulticast mode
[  162.954320][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  162.993888][ T3430] bridge_slave_0: left promiscuous mode
[  163.004398][ T3430] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.612240][ T3430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.642423][ T3430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.657231][ T3430] bond0 (unregistering): Released all slaves
[  163.687483][ T9681] netlink: 'syz.0.1081': attribute type 4 has an invalid length.
[  163.704686][ T9659] __nla_validate_parse: 9 callbacks suppressed
[  163.704709][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'.
[  163.735082][ T9659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1073'.
[  163.776862][ T9659] netlink: 'syz.1.1073': attribute type 11 has an invalid length.
[  163.821519][ T9681] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1081'.
[  163.958207][ T9684] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1082'.
[  164.052023][ T9686] openvswitch: netlink: Actions may not be safe on all matching packets
[  164.234238][ T9701] netlink: 201400 bytes leftover after parsing attributes in process `syz.2.1086'.
[  164.260846][ T9651] chnl_net:caif_netlink_parms(): no params data found
[  164.275678][ T9703] netlink: 201400 bytes leftover after parsing attributes in process `syz.2.1086'.
[  164.292045][ T9698] netlink: 'syz.1.1085': attribute type 12 has an invalid length.
[  164.300460][ T9698] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1085'.
[  164.463623][ T3430] hsr_slave_0: left promiscuous mode
[  164.484061][ T3430] hsr_slave_1: left promiscuous mode
[  164.512567][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.537263][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.551009][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  164.574929][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.601832][ T9718] netlink: 'syz.1.1092': attribute type 11 has an invalid length.
[  164.617616][ T9718] netlink: 211132 bytes leftover after parsing attributes in process `syz.1.1092'.
[  164.639156][ T9721] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1092'.
[  164.663033][ T3430] veth1_macvtap: left promiscuous mode
[  164.668727][ T3430] veth0_macvtap: left promiscuous mode
[  164.674340][ T3430] veth1_vlan: left promiscuous mode
[  164.679776][ T3430] veth0_vlan: left promiscuous mode
[  164.709543][ T9727] netlink: 3084 bytes leftover after parsing attributes in process `syz.2.1088'.
[  165.028261][   T55] Bluetooth: hci1: command tx timeout
[  165.364432][ T3430] team0 (unregistering): Port device team_slave_1 removed
[  165.406364][ T3430] team0 (unregistering): Port device team_slave_0 removed
[  165.861244][ T9739] netlink: 'syz.0.1095': attribute type 21 has an invalid length.
[  165.873829][ T9739] netlink: 'syz.0.1095': attribute type 4 has an invalid length.
[  165.882744][ T9739] netlink: 'syz.0.1095': attribute type 5 has an invalid length.
[  165.917572][ T9745] netlink: 'syz.2.1096': attribute type 1 has an invalid length.
[  165.939941][ T9740] netlink: 'syz.1.1094': attribute type 4 has an invalid length.
[  165.965769][ T9741] netlink: 'syz.1.1094': attribute type 4 has an invalid length.
[  166.005875][ T9651] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.014552][ T9651] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.028284][ T9651] bridge_slave_0: entered allmulticast mode
[  166.038348][ T9651] bridge_slave_0: entered promiscuous mode
[  166.079220][ T9651] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.086374][ T9651] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.102923][ T9651] bridge_slave_1: entered allmulticast mode
[  166.118090][ T9651] bridge_slave_1: entered promiscuous mode
[  166.223155][ T9651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.375170][ T9651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.514492][ T9651] team0: Port device team_slave_0 added
[  166.531719][ T9651] team0: Port device team_slave_1 added
[  166.620432][ T9651] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.634557][ T9651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.663283][ T9651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.681910][ T9775] netlink: 'syz.0.1105': attribute type 1 has an invalid length.
[  166.714431][ T9651] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.729182][ T9651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.764297][ T9651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  167.040937][ T9651] hsr_slave_0: entered promiscuous mode
[  167.057824][ T9803] openvswitch: netlink: ufid size 2296 bytes exceeds the range (1, 16)
[  167.117764][   T55] Bluetooth: hci1: command tx timeout
[  167.199505][ T9651] hsr_slave_1: entered promiscuous mode
[  167.346340][ T9817] netlink: 'syz.3.1118': attribute type 11 has an invalid length.
[  167.909614][ T9651] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  167.951000][ T9651] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  167.971985][ T9651] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  167.989488][ T9651] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  168.155522][ T9651] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.199880][ T9651] 8021q: adding VLAN 0 to HW filter on device team0
[  168.218338][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.225506][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.261753][ T9867] ebt_limit: overflow, try lower: 0/0
[  168.263916][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.274392][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.662532][ T9651] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.843724][ T9902] C: renamed from team_slave_0 (while UP)
[  168.857038][ T9902] netlink: 'syz.0.1143': attribute type 1 has an invalid length.
[  168.864953][ T9902] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  168.884292][ T9901] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  169.124888][ T9651] veth0_vlan: entered promiscuous mode
[  169.138210][ T9651] veth1_vlan: entered promiscuous mode
[  169.172614][ T9651] veth0_macvtap: entered promiscuous mode
[  169.182804][ T9651] veth1_macvtap: entered promiscuous mode
[  169.197476][   T55] Bluetooth: hci1: command tx timeout
[  169.205191][ T9651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.223609][ T9651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.260202][ T9651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.305293][ T9651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.322560][ T9651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.335131][ T9651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.372647][ T9651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.396857][ T9651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.419329][ T9651] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.458834][ T9651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.486771][ T9651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.507723][ T9651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.537015][ T9651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.566504][ T9651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.587196][ T9651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.603895][ T9651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.614502][ T9651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.641219][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  169.642013][ T9651] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.656179][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  169.667012][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  169.674866][ T9651] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.677379][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  169.692032][ T5856] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  169.699681][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  169.707620][ T9651] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.716533][ T9651] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.725902][ T9651] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.754716][ T9923] __nla_validate_parse: 13 callbacks suppressed
[  169.754736][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1148'.
[  169.777688][ T9923] 8021q: adding VLAN 0 to HW filter on device batadv1
[  169.882241][ T9932] lo speed is unknown, defaulting to 1000
[  169.889585][ T9932] lo speed is unknown, defaulting to 1000
[  169.898341][ T9932] lo speed is unknown, defaulting to 1000
[  169.990886][ T9932] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  170.116311][ T9932] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  170.177479][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.212332][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.224320][ T9927] chnl_net:caif_netlink_parms(): no params data found
[  170.253768][ T9932] lo speed is unknown, defaulting to 1000
[  170.284213][ T9932] lo speed is unknown, defaulting to 1000
[  170.326716][ T3483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.328500][ T9932] lo speed is unknown, defaulting to 1000
[  170.336004][ T3483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.386661][ T9932] lo speed is unknown, defaulting to 1000
[  170.440299][ T9932] lo speed is unknown, defaulting to 1000
[  170.453608][ T9932] lo speed is unknown, defaulting to 1000
[  170.484349][ T9927] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.502204][ T9927] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.509758][ T9927] bridge_slave_0: entered allmulticast mode
[  170.517042][ T9927] bridge_slave_0: entered promiscuous mode
[  170.525198][ T9927] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.532589][ T9927] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.539892][ T9927] bridge_slave_1: entered allmulticast mode
[  170.547099][ T9927] bridge_slave_1: entered promiscuous mode
[  170.704158][ T9927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.730387][ T9927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.873023][ T9927] team0: Port device team_slave_0 added
[  170.901318][ T9927] team0: Port device team_slave_1 added
[  170.988534][ T9927] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.997451][ T9927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.038046][ T9927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.060740][ T9970] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1158'.
[  171.071358][ T9970] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1158'.
[  171.081737][ T9970] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1158'.
[  171.100879][ T9972] batadv0: mtu less than device minimum
[  171.109318][ T9972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  171.122069][ T9972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  171.134485][ T9972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  171.146913][ T9972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  171.159296][ T9972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  171.171691][ T9972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  171.184148][ T9972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  171.225499][ T9971] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1158'.
[  171.243118][ T9971] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1158'.
[  171.253781][ T9971] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1158'.
[  171.270814][ T9927] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.283211][ T9927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.319981][ T9927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  171.480523][ T9927] hsr_slave_0: entered promiscuous mode
[  171.497442][ T9927] hsr_slave_1: entered promiscuous mode
[  171.505526][ T9927] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  171.514434][ T9927] Cannot create hsr debugfs directory
[  171.676245][ T9988] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20000
[  171.748944][   T55] Bluetooth: hci2: command tx timeout
[  171.880487][ T9927] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.968916][ T3547] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.013933][ T9992] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1164'.
[  172.062735][ T9927] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.180081][ T9927] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.268857][ T9927] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.326241][ T3547] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.479968][ T3547] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.493294][ T9927] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  172.510382][ T9927] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  172.520733][ T9927] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  172.559559][ T3547] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.581199][ T9927] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  172.738261][ T9927] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.756589][ T9927] 8021q: adding VLAN 0 to HW filter on device team0
[  172.865075][ T9999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1166'.
[  172.907621][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.914762][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.948230][ T3492] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.955420][ T3492] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.020218][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  173.086307][ T3547] bridge_slave_1: left allmulticast mode
[  173.092276][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  173.102197][ T3547] bridge_slave_1: left promiscuous mode
[  173.108471][ T3547] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.118574][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  173.125582][T10004] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1166'.
[  173.135792][ T3547] bridge_slave_0: left allmulticast mode
[  173.142017][ T3547] bridge_slave_0: left promiscuous mode
[  173.147944][ T3547] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.174801][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  173.215091][ T5856] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  173.226503][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  173.605628][ T3547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.619832][ T3547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.636174][ T3547] bond0 (unregistering): Released all slaves
[  173.761879][T10000] lo speed is unknown, defaulting to 1000
[  173.834369][ T5856] Bluetooth: hci2: command tx timeout
[  173.929104][T10026] veth0: entered promiscuous mode
[  173.965374][T10022] veth0: left promiscuous mode
[  174.124677][ T9927] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.221593][T10048] ieee802154 phy0 wpan0: encryption failed: -90
[  174.318181][ T3547] hsr_slave_0: left promiscuous mode
[  174.324322][ T3547] hsr_slave_1: left promiscuous mode
[  174.333609][ T3547] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.347063][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_0
[  174.354906][ T3547] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.362685][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_1
[  174.384882][ T3547] veth1_macvtap: left promiscuous mode
[  174.391989][ T3547] veth0_macvtap: left promiscuous mode
[  174.398250][ T3547] veth1_vlan: left promiscuous mode
[  174.404715][ T3547] veth0_vlan: left promiscuous mode
[  174.826325][ T3547] team0 (unregistering): Port device team_slave_1 removed
[  174.862840][ T3547] team0 (unregistering): Port device team_slave_0 removed
[  175.267906][ T5856] Bluetooth: hci1: command tx timeout
[  175.291553][ T9927] veth0_vlan: entered promiscuous mode
[  175.331293][ T9927] veth1_vlan: entered promiscuous mode
[  175.358064][ T9927] veth0_macvtap: entered promiscuous mode
[  175.367194][ T9927] veth1_macvtap: entered promiscuous mode
[  175.430420][T10000] chnl_net:caif_netlink_parms(): no params data found
[  175.483011][ T9927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.496963][ T9927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.529230][ T9927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.556936][ T9927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.577133][ T9927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.589592][ T9927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.608363][ T9927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.626036][ T9927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.638711][ T9927] batman_adv: batadv0: Interface activated: batadv_slave_0
[  175.735199][ T9927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.746113][ T9927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.756486][ T9927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.768606][ T9927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.778662][ T9927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.789480][ T9927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.805291][ T9927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.826205][ T9927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.848714][ T9927] batman_adv: batadv0: Interface activated: batadv_slave_1
[  175.907483][ T5856] Bluetooth: hci2: command tx timeout
[  175.963116][ T9927] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.980339][ T9927] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.993772][ T9927] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.002900][ T9927] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.028659][T10000] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.049564][T10000] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.064633][T10000] bridge_slave_0: entered allmulticast mode
[  176.078159][T10000] bridge_slave_0: entered promiscuous mode
[  176.112134][T10000] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.120186][T10000] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.128180][T10000] bridge_slave_1: entered allmulticast mode
[  176.135502][T10000] bridge_slave_1: entered promiscuous mode
[  176.247701][T10000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  176.269562][T10000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  176.317216][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.325082][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.364449][T10096] __nla_validate_parse: 5 callbacks suppressed
[  176.364491][T10096] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1192'.
[  176.433082][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.441394][T10000] team0: Port device team_slave_0 added
[  176.449647][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.460324][T10000] team0: Port device team_slave_1 added
[  176.504245][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1194'.
[  176.559717][T10000] batman_adv: batadv0: Adding interface: batadv_slave_0
[  176.567069][T10000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.593325][T10000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.692788][T10000] batman_adv: batadv0: Adding interface: batadv_slave_1
[  176.700381][T10000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.726968][T10000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  176.831444][T10000] hsr_slave_0: entered promiscuous mode
[  176.839030][T10000] hsr_slave_1: entered promiscuous mode
[  176.882738][T10112] 8021q: adding VLAN 0 to HW filter on device bond6
[  177.258763][ T3430] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.348146][ T5856] Bluetooth: hci1: command tx timeout
[  177.362842][ T3430] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.455968][ T3430] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.487593][T10134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1205'.
[  177.765992][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  177.775618][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  177.783946][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  177.800358][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  177.809583][   T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  177.820947][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  177.821206][ T3430] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.829697][T10141] net_ratelimit: 12 callbacks suppressed
[  177.829715][T10141] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  178.017713][T10155] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  178.026352][T10155] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  178.036624][T10145] lo speed is unknown, defaulting to 1000
[  178.185037][T10000] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  178.201810][T10000] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  178.217177][T10000] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  178.235253][T10000] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  178.301757][ T3430] bridge_slave_1: left allmulticast mode
[  178.307826][ T3430] bridge_slave_1: left promiscuous mode
[  178.317677][ T3430] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.339613][ T3430] bridge_slave_0: left allmulticast mode
[  178.345290][ T3430] bridge_slave_0: left promiscuous mode
[  178.362946][ T3430] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.733193][ T3430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  178.744888][ T3430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  178.757814][ T3430] bond0 (unregistering): Released all slaves
[  179.178407][T10185] netlink: 'syz.3.1218': attribute type 9 has an invalid length.
[  179.186330][T10185] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.1218'.
[  179.427104][ T5856] Bluetooth: hci1: command tx timeout
[  179.908960][ T5856] Bluetooth: hci2: command tx timeout
[  180.597397][T10174] bridge0: port 1(veth0_to_bridge) entered blocking state
[  180.605661][T10174] bridge0: port 1(veth0_to_bridge) entered disabled state
[  180.618214][T10174] veth0_to_bridge: entered allmulticast mode
[  180.625412][T10174] veth0_to_bridge: entered promiscuous mode
[  180.644415][T10174] bridge0: port 1(veth0_to_bridge) entered blocking state
[  180.651780][T10174] bridge0: port 1(veth0_to_bridge) entered forwarding state
[  180.673826][T10145] chnl_net:caif_netlink_parms(): no params data found
[  180.834500][T10191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1220'.
[  180.895159][ T3430] hsr_slave_0: left promiscuous mode
[  180.901757][ T3430] hsr_slave_1: left promiscuous mode
[  180.908374][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.916550][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.924923][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.932854][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.954400][ T3430] veth1_macvtap: left promiscuous mode
[  180.964719][ T3430] veth0_macvtap: left promiscuous mode
[  180.970423][ T3430] veth1_vlan: left promiscuous mode
[  180.975724][ T3430] veth0_vlan: left promiscuous mode
[  181.389592][ T3430] team0 (unregistering): Port device team_slave_1 removed
[  181.436206][ T3430] team0 (unregistering): Port device team_slave_0 removed
[  181.510124][ T5856] Bluetooth: hci1: command tx timeout
[  181.901343][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1221'.
[  181.915546][T10201] netlink: 'syz.3.1223': attribute type 4 has an invalid length.
[  181.939281][T10145] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.946387][T10145] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.967445][T10145] bridge_slave_0: entered allmulticast mode
[  181.974828][T10145] bridge_slave_0: entered promiscuous mode
[  181.985137][T10145] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.992758][ T5856] Bluetooth: hci2: command tx timeout
[  181.998781][T10145] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.006116][T10145] bridge_slave_1: entered allmulticast mode
[  182.030416][T10145] bridge_slave_1: entered promiscuous mode
[  182.055593][T10000] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.072896][T10000] 8021q: adding VLAN 0 to HW filter on device team0
[  182.168124][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.175328][ T3459] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.210296][ T3459] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.217493][ T3459] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.244301][T10145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  182.269090][T10145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  182.386000][T10145] team0: Port device team_slave_0 added
[  182.432323][T10217] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.476147][T10217] batadv0: mtu less than device minimum
[  182.485096][T10217] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  182.497475][T10217] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  182.509884][T10217] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  182.522354][T10217] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  182.534722][T10217] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  182.546187][T10217] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  182.558443][T10217] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  182.669192][T10217] batman_adv: batadv0: Removing interface: batadv_slave_0
[  182.704881][T10145] team0: Port device team_slave_1 added
[  182.811542][T10145] batman_adv: batadv0: Adding interface: batadv_slave_0
[  182.828639][T10145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.863568][T10145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  182.877659][T10145] batman_adv: batadv0: Adding interface: batadv_slave_1
[  182.884780][T10145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.911480][T10145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  182.924309][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'.
[  182.939522][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'.
[  183.029942][T10145] hsr_slave_0: entered promiscuous mode
[  183.054802][T10145] hsr_slave_1: entered promiscuous mode
[  183.098171][T10145] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  183.105792][T10145] Cannot create hsr debugfs directory
[  183.319911][T10000] 8021q: adding VLAN 0 to HW filter on device batadv0
[  183.469496][T10259] netlink: 'syz.0.1239': attribute type 4 has an invalid length.
[  183.475022][T10261] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1240'.
[  183.514839][T10262] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1240'.
[  183.820714][T10145] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  183.846087][T10145] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  183.858372][T10145] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  183.921404][T10000] veth0_vlan: entered promiscuous mode
[  183.937269][T10000] veth1_vlan: entered promiscuous mode
[  183.944672][T10274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1243'.
[  183.954936][T10274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1243'.
[  183.994351][T10145] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  184.016320][T10274] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode
[  184.033215][T10274] mac80211_hwsim hwsim7 wlan0: left promiscuous mode
[  184.057531][T10284] netlink: 'syz.3.1245': attribute type 8 has an invalid length.
[  184.067151][ T5856] Bluetooth: hci2: command tx timeout
[  184.093969][T10284] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1245'.
[  184.170527][T10000] veth0_macvtap: entered promiscuous mode
[  184.193008][T10000] veth1_macvtap: entered promiscuous mode
[  184.262888][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.274648][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.284767][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.295670][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.305678][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.316223][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.329080][T10000] batman_adv: batadv0: Interface activated: batadv_slave_0
[  184.338711][T10293] IPVS: length: 78 != 24
[  184.358887][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.369795][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.387447][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.403683][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.426698][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.445809][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.457680][T10000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.470550][T10000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.482123][T10000] batman_adv: batadv0: Interface activated: batadv_slave_1
[  184.505933][T10301] pim6reg1: entered promiscuous mode
[  184.516039][T10301] pim6reg1: entered allmulticast mode
[  184.530754][T10145] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.550142][T10000] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.575660][T10000] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.587547][T10000] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.596413][T10000] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.651243][T10145] 8021q: adding VLAN 0 to HW filter on device team0
[  184.694686][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.702500][ T3459] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.802800][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.809976][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.844969][T10145] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  184.855644][T10145] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  184.868625][T10315] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1250'.
[  184.915374][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.947296][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.036597][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.056798][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.236149][T10145] 8021q: adding VLAN 0 to HW filter on device batadv0
[  185.346492][T10333] xt_TCPMSS: Only works on TCP SYN packets
[  185.485336][T10145] veth0_vlan: entered promiscuous mode
[  185.523043][T10145] veth1_vlan: entered promiscuous mode
[  185.702480][   T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.849595][   T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.881222][T10145] veth0_macvtap: entered promiscuous mode
[  185.920842][   T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.948021][T10145] veth1_macvtap: entered promiscuous mode
[  185.975837][T10145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.000693][T10145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.016828][T10145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.031829][T10145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.042386][T10145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.061729][T10145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.082791][T10145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.094691][T10145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.116336][T10145] batman_adv: batadv0: Interface activated: batadv_slave_0
[  186.144324][T10145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.147695][ T5856] Bluetooth: hci2: command tx timeout
[  186.163679][T10145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.174943][T10145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.185896][T10145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.196596][T10145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.209400][T10145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.219561][T10145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.230588][T10145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.241026][T10145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.251496][T10145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.263011][T10145] batman_adv: batadv0: Interface activated: batadv_slave_1
[  186.293140][   T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.312505][T10145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.325984][T10145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.335405][T10145] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.345212][T10145] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.419615][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.436609][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.465223][ T3430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.476348][ T3430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.503327][   T53] bridge_slave_1: left allmulticast mode
[  186.516687][   T53] bridge_slave_1: left promiscuous mode
[  186.522687][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.541212][   T53] bridge_slave_0: left allmulticast mode
[  186.587041][   T53] bridge_slave_0: left promiscuous mode
[  186.592815][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.055552][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  187.074640][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  187.083888][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  187.093448][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  187.106190][   T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  187.114131][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  187.242503][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  187.260104][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  187.275651][   T53] bond0 (unregistering): Released all slaves
[  187.297699][T10350] ==================================================================
[  187.305779][T10350] BUG: KASAN: slab-use-after-free in device_for_each_child+0xbb/0x1b0
[  187.313953][T10350] Read of size 8 at addr ffff88805ef51308 by task kbnepd bnep0/10350
[  187.322042][T10350] 
[  187.324362][T10350] CPU: 0 UID: 0 PID: 10350 Comm: kbnepd bnep0 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0
[  187.335322][T10350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  187.345400][T10350] Call Trace:
[  187.348686][T10350]  <TASK>
[  187.351634][T10350]  dump_stack_lvl+0x241/0x360
[  187.356330][T10350]  ? __pfx_dump_stack_lvl+0x10/0x10
[  187.361532][T10350]  ? __pfx__printk+0x10/0x10
[  187.366124][T10350]  ? _printk+0xd5/0x120
[  187.370290][T10350]  ? __virt_addr_valid+0x183/0x530
[  187.375407][T10350]  ? __virt_addr_valid+0x183/0x530
[  187.380524][T10350]  print_report+0x169/0x550
[  187.385034][T10350]  ? __virt_addr_valid+0x183/0x530
[  187.390155][T10350]  ? __virt_addr_valid+0x183/0x530
[  187.395273][T10350]  ? __virt_addr_valid+0x45f/0x530
[  187.400397][T10350]  ? __phys_addr+0xba/0x170
[  187.404910][T10350]  ? device_for_each_child+0xbb/0x1b0
[  187.410298][T10350]  kasan_report+0x143/0x180
[  187.414829][T10350]  ? device_for_each_child+0xbb/0x1b0
[  187.420214][T10350]  ? __pfx_dev_memalloc_noio+0x10/0x10
[  187.425679][T10350]  device_for_each_child+0xbb/0x1b0
[  187.430887][T10350]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  187.437262][T10350]  ? __pfx_device_for_each_child+0x10/0x10
[  187.443096][T10350]  ? _raw_spin_unlock_irq+0x23/0x50
[  187.448309][T10350]  ? lockdep_hardirqs_on+0x99/0x150
[  187.453518][T10350]  pm_runtime_set_memalloc_noio+0x114/0x260
[  187.459421][T10350]  netdev_unregister_kobject+0x178/0x250
[  187.465059][T10350]  unregister_netdevice_many_notify+0x1851/0x1da0
[  187.471492][T10350]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  187.478270][T10350]  ? do_raw_spin_unlock+0x13c/0x8b0
[  187.483515][T10350]  ? __mutex_lock+0x52a/0xd70
[  187.488198][T10350]  unregister_netdevice_queue+0x303/0x370
[  187.493959][T10350]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  187.500235][T10350]  ? down_write+0x18c/0x220
[  187.504756][T10350]  ? __pfx_down_write+0x10/0x10
[  187.509627][T10350]  unregister_netdev+0x1c/0x30
[  187.514404][T10350]  bnep_session+0x2e0e/0x3000
[  187.519130][T10350]  ? __pfx_bnep_session+0x10/0x10
[  187.524162][T10350]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  187.530061][T10350]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  187.536397][T10350]  ? __pfx_woken_wake_function+0x10/0x10
[  187.542047][T10350]  ? __kthread_parkme+0x169/0x1d0
[  187.547092][T10350]  ? __pfx_bnep_session+0x10/0x10
[  187.552143][T10350]  kthread+0x2f0/0x390
[  187.556216][T10350]  ? __pfx_bnep_session+0x10/0x10
[  187.561248][T10350]  ? __pfx_kthread+0x10/0x10
[  187.565836][T10350]  ret_from_fork+0x4b/0x80
[  187.570261][T10350]  ? __pfx_kthread+0x10/0x10
[  187.574857][T10350]  ret_from_fork_asm+0x1a/0x30
[  187.579638][T10350]  </TASK>
[  187.582657][T10350] 
[  187.584983][T10350] Allocated by task 10145:
[  187.589394][T10350]  kasan_save_track+0x3f/0x80
[  187.594078][T10350]  __kasan_kmalloc+0x98/0xb0
[  187.598680][T10350]  __kmalloc_noprof+0x1fc/0x400
[  187.603543][T10350]  hci_alloc_dev_priv+0x27/0x2030
[  187.608594][T10350]  vhci_create_device+0x116/0x6a0
[  187.613625][T10350]  vhci_write+0x3cf/0x490
[  187.617964][T10350]  vfs_write+0xaeb/0xd30
[  187.622220][T10350]  ksys_write+0x183/0x2b0
[  187.626549][T10350]  do_syscall_64+0xf3/0x230
[  187.631249][T10350]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.637171][T10350] 
[  187.639625][T10350] Freed by task 10145:
[  187.643698][T10350]  kasan_save_track+0x3f/0x80
[  187.648400][T10350]  kasan_save_free_info+0x40/0x50
[  187.653441][T10350]  __kasan_slab_free+0x59/0x70
[  187.658215][T10350]  kfree+0x1a0/0x440
[  187.662119][T10350]  hci_release_dev+0x1525/0x16b0
[  187.667057][T10350]  bt_host_release+0x83/0x90
[  187.671654][T10350]  device_release+0x99/0x1c0
[  187.676249][T10350]  kobject_put+0x22f/0x480
[  187.680670][T10350]  vhci_release+0x88/0xd0
[  187.685006][T10350]  __fput+0x23f/0x880
[  187.689006][T10350]  task_work_run+0x24f/0x310
[  187.693604][T10350]  do_exit+0xa2f/0x28e0
[  187.697770][T10350]  do_group_exit+0x207/0x2c0
[  187.702369][T10350]  __x64_sys_exit_group+0x3f/0x40
[  187.707397][T10350]  x64_sys_call+0x2634/0x2640
[  187.712086][T10350]  do_syscall_64+0xf3/0x230
[  187.716600][T10350]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.722503][T10350] 
[  187.724828][T10350] Last potentially related work creation:
[  187.730541][T10350]  kasan_save_stack+0x3f/0x60
[  187.735224][T10350]  __kasan_record_aux_stack+0xac/0xc0
[  187.740608][T10350]  insert_work+0x3e/0x330
[  187.744947][T10350]  __queue_work+0xb66/0xf50
[  187.749472][T10350]  queue_work_on+0x1c2/0x380
[  187.754075][T10350]  process_scheduled_works+0xa63/0x1850
[  187.759639][T10350]  worker_thread+0x870/0xd30
[  187.764253][T10350]  kthread+0x2f0/0x390
[  187.768322][T10350]  ret_from_fork+0x4b/0x80
[  187.772748][T10350]  ret_from_fork_asm+0x1a/0x30
[  187.777524][T10350] 
[  187.779847][T10350] Second to last potentially related work creation:
[  187.786428][T10350]  kasan_save_stack+0x3f/0x60
[  187.791111][T10350]  __kasan_record_aux_stack+0xac/0xc0
[  187.796494][T10350]  insert_work+0x3e/0x330
[  187.800832][T10350]  __queue_work+0xc8b/0xf50
[  187.805347][T10350]  call_timer_fn+0x18e/0x650
[  187.809952][T10350]  __run_timer_base+0x695/0x8e0
[  187.814814][T10350]  run_timer_softirq+0xb7/0x170
[  187.819673][T10350]  handle_softirqs+0x2c5/0x980
[  187.824448][T10350]  do_softirq+0x11b/0x1e0
[  187.828787][T10350]  __local_bh_enable_ip+0x1bb/0x200
[  187.833994][T10350]  tcp_close+0x28/0x110
[  187.838167][T10350]  inet_release+0x17d/0x200
[  187.842688][T10350]  sock_close+0xbc/0x240
[  187.846952][T10350]  __fput+0x23f/0x880
[  187.850957][T10350]  __x64_sys_close+0x7f/0x110
[  187.855643][T10350]  do_syscall_64+0xf3/0x230
[  187.860156][T10350]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.866062][T10350] 
[  187.868392][T10350] The buggy address belongs to the object at ffff88805ef50000
[  187.868392][T10350]  which belongs to the cache kmalloc-8k of size 8192
[  187.882448][T10350] The buggy address is located 4872 bytes inside of
[  187.882448][T10350]  freed 8192-byte region [ffff88805ef50000, ffff88805ef52000)
[  187.896421][T10350] 
[  187.898746][T10350] The buggy address belongs to the physical page:
[  187.905184][T10350] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5ef50
[  187.913957][T10350] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  187.922462][T10350] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  187.930009][T10350] page_type: f5(slab)
[  187.933998][T10350] raw: 00fff00000000040 ffff88801ac42280 dead000000000100 dead000000000122
[  187.942583][T10350] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000
[  187.951176][T10350] head: 00fff00000000040 ffff88801ac42280 dead000000000100 dead000000000122
[  187.959849][T10350] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000
[  187.968524][T10350] head: 00fff00000000003 ffffea00017bd401 ffffffffffffffff 0000000000000000
[  187.977200][T10350] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  187.985865][T10350] page dumped because: kasan: bad access detected
[  187.992281][T10350] page_owner tracks the page as allocated
[  187.998000][T10350] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7125, tgid 7124 (syz.0.342), ts 102631293179, free_ts 102546060031
[  188.019123][T10350]  post_alloc_hook+0x1f3/0x230
[  188.023911][T10350]  get_page_from_freelist+0x3649/0x3790
[  188.029464][T10350]  __alloc_pages_noprof+0x292/0x710
[  188.034665][T10350]  alloc_pages_mpol_noprof+0x3e8/0x680
[  188.040128][T10350]  alloc_slab_page+0x6a/0x140
[  188.044807][T10350]  allocate_slab+0x5a/0x2f0
[  188.049304][T10350]  ___slab_alloc+0xcd1/0x14b0
[  188.053986][T10350]  __slab_alloc+0x58/0xa0
[  188.058324][T10350]  __kmalloc_node_track_caller_noprof+0x281/0x440
[  188.064747][T10350]  kmalloc_reserve+0x111/0x2a0
[  188.069513][T10350]  __alloc_skb+0x1f3/0x440
[  188.073934][T10350]  netlink_dump+0x1f7/0xd80
[  188.078442][T10350]  netlink_recvmsg+0x6bb/0x11d0
[  188.083293][T10350]  sock_recvmsg_nosec+0x18e/0x1d0
[  188.088318][T10350]  ____sys_recvmsg+0x3cd/0x480
[  188.093088][T10350]  do_recvmmsg+0x45e/0xad0
[  188.097513][T10350] page last free pid 5857 tgid 5857 stack trace:
[  188.103838][T10350]  free_unref_page+0xdf9/0x1140
[  188.108704][T10350]  __put_partials+0xeb/0x130
[  188.113304][T10350]  put_cpu_partial+0x17c/0x250
[  188.118068][T10350]  __slab_free+0x2ea/0x3d0
[  188.122483][T10350]  qlist_free_all+0x9a/0x140
[  188.127078][T10350]  kasan_quarantine_reduce+0x14f/0x170
[  188.132538][T10350]  __kasan_slab_alloc+0x23/0x80
[  188.137390][T10350]  kmem_cache_alloc_noprof+0x135/0x2a0
[  188.142864][T10350]  getname_flags+0xb7/0x540
[  188.147380][T10350]  user_path_at+0x24/0x60
[  188.151723][T10350]  __x64_sys_umount+0xf1/0x170
[  188.156490][T10350]  do_syscall_64+0xf3/0x230
[  188.161010][T10350]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.166918][T10350] 
[  188.169249][T10350] Memory state around the buggy address:
[  188.174876][T10350]  ffff88805ef51200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  188.182937][T10350]  ffff88805ef51280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  188.190998][T10350] >ffff88805ef51300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  188.199057][T10350]                       ^
[  188.203382][T10350]  ffff88805ef51380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  188.211451][T10350]  ffff88805ef51400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  188.219519][T10350] ==================================================================
[  188.234071][T10350] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  188.241301][T10350] CPU: 0 UID: 0 PID: 10350 Comm: kbnepd bnep0 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0
[  188.252254][T10350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  188.262316][T10350] Call Trace:
[  188.266383][T10350]  <TASK>
[  188.269315][T10350]  dump_stack_lvl+0x241/0x360
[  188.274006][T10350]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.279213][T10350]  ? __pfx__printk+0x10/0x10
[  188.283817][T10350]  ? preempt_schedule+0xe1/0xf0
[  188.288676][T10350]  ? vscnprintf+0x5d/0x90
[  188.293017][T10350]  panic+0x349/0x880
[  188.296923][T10350]  ? check_panic_on_warn+0x21/0xb0
[  188.302039][T10350]  ? __pfx_panic+0x10/0x10
[  188.306463][T10350]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[  188.312454][T10350]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  188.318800][T10350]  ? print_report+0x502/0x550
[  188.323491][T10350]  check_panic_on_warn+0x86/0xb0
[  188.328445][T10350]  ? device_for_each_child+0xbb/0x1b0
[  188.333826][T10350]  end_report+0x77/0x160
[  188.338081][T10350]  kasan_report+0x154/0x180
[  188.342603][T10350]  ? device_for_each_child+0xbb/0x1b0
[  188.347986][T10350]  ? __pfx_dev_memalloc_noio+0x10/0x10
[  188.353451][T10350]  device_for_each_child+0xbb/0x1b0
[  188.358657][T10350]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  188.364998][T10350]  ? __pfx_device_for_each_child+0x10/0x10
[  188.370814][T10350]  ? _raw_spin_unlock_irq+0x23/0x50
[  188.376017][T10350]  ? lockdep_hardirqs_on+0x99/0x150
[  188.381226][T10350]  pm_runtime_set_memalloc_noio+0x114/0x260
[  188.387141][T10350]  netdev_unregister_kobject+0x178/0x250
[  188.392786][T10350]  unregister_netdevice_many_notify+0x1851/0x1da0
[  188.399220][T10350]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  188.405995][T10350]  ? do_raw_spin_unlock+0x13c/0x8b0
[  188.411210][T10350]  ? __mutex_lock+0x52a/0xd70
[  188.415902][T10350]  unregister_netdevice_queue+0x303/0x370
[  188.421638][T10350]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  188.427900][T10350]  ? down_write+0x18c/0x220
[  188.432433][T10350]  ? __pfx_down_write+0x10/0x10
[  188.437294][T10350]  unregister_netdev+0x1c/0x30
[  188.442070][T10350]  bnep_session+0x2e0e/0x3000
[  188.446764][T10350]  ? __pfx_bnep_session+0x10/0x10
[  188.451792][T10350]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  188.457688][T10350]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  188.464237][T10350]  ? __pfx_woken_wake_function+0x10/0x10
[  188.469922][T10350]  ? __kthread_parkme+0x169/0x1d0
[  188.474961][T10350]  ? __pfx_bnep_session+0x10/0x10
[  188.479996][T10350]  kthread+0x2f0/0x390
[  188.484075][T10350]  ? __pfx_bnep_session+0x10/0x10
[  188.489109][T10350]  ? __pfx_kthread+0x10/0x10
[  188.493722][T10350]  ret_from_fork+0x4b/0x80
[  188.498165][T10350]  ? __pfx_kthread+0x10/0x10
[  188.502752][T10350]  ret_from_fork_asm+0x1a/0x30
[  188.507525][T10350]  </TASK>
[  188.510791][T10350] Kernel Offset: disabled
[  188.515113][T10350] Rebooting in 86400 seconds..