last executing test programs:

3m56.883717616s ago: executing program 2 (id=221):
socket$netlink(0x10, 0x3, 0xa)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a80)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)=ANY=[@ANYBLOB='&\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000006a00000008000300", @ANYRES32=r3], 0x30}}, 0x0)
write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x147cc1, 0x0)

3m56.569481553s ago: executing program 2 (id=224):
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000009c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000a00)=0x1c, 0x800)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000a40)={0x0, 'lo\x00', {0x4}, 0x8001})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
sendmsg$qrtr(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="f58871c4bce26b921d1c4431ee2ecafe3281f9bd62a794c19f031af79276e89afc1c7a8aa40202aaf34dccecdebffabf90947b7092ca0b8ecb0bc9c1f559617fb998b41d26304b991241b8efef44739cb63871fbff5f0184c59b653d8a3ec5add3bc48c38a7c7f0f7061966b374bf31543c1157c11eba44c02b995e669e1eb8f79634886b2fdc25bdca7dc0da5ebe17e0ace634d8882ea9f12ce9f5a63fd561bedee0fbb789eb87864649866b3a6a528487508e8f4338ee85d", 0xb9}, {&(0x7f0000000140)="ae19cac6a8415fbc533eb4e4280633b108d0ec090d020bba4b611213aa2bef", 0x1f}, {&(0x7f0000000240)="fa18d4b70854574c99764194aaed3e825cdf84f777ba3cdfb2524ab61a270511c5e491a7647e184f38c4bbb8fb4f5d457c971a2c212a5709ef3e10c2eef31a6df5b41b5a01d6a9186175a75a02e47ef17643b50749d26e8f2458144a0beaa9653bff595ada54d579d13e507541b5d4ca53029ca42b83cadf6a8ea0a752ac32c7ae6541f13020f2e62dcce0d159d73e37a475f408eda12a7cb497b61515c6d62f72b91c0718cb2bb5677ee82edc36420d0db2ad32b0fc754b6c2d578bec1088dae37fe183db0b206e68e22ac7dc16a96d7eed73a901739f3704c8f7", 0xdb}], 0x3, &(0x7f0000000480)=[{0xe0, 0x10a, 0x3, "e83ec3bd0c0316e266dbe8748f158d5869308e1fd9bbd1e92ecd80db9a0061775e8041b1dae032fc56d2b565635343049160d7257f180ff44bc4e40230963483b14af57fbfe33bb6d50b43b23a5f44a86abe5929a35fa4e522f2c3f58159d12eaf7443f06a014fb77e22eb9249a42aa6a49f1788153407f8ea7a827dbac07763038ba36d4c263f7fff15254b201f90a0a8e748b49b83488b0d68e765367287abe5d940dafdc6e0e63baf93c786a7cccffbc9ec4e26d2a1926f9391a32d26a7e48302f386d1ef024d9878ab96"}, {0xa0, 0x10f, 0x0, "c64b624fd62dc1e57f6f0f7bdb54fc7799b8527eda6a21f32d7e900566546f1b52aabc6d8bef1f4774298e606fdc431992543fe4ec1f5a44b4b161cea7a5a89c7c7a2aed8de536eaf2343577d67a0057c6a04d7c5503c539122f16b9e43f08f5cd210b114a531edbb7a89cf8137ecaa76185fc33b8189018f3e75ad1f90f49868c7d15915e81661f874bdb1b"}, {0x38, 0x109, 0x9, "089503fd1e5e5c1feb82d606bfd279372cbfe5be5191dd99e4f5b8ff6fa4b7622f0d0b2d7d"}, {0x98, 0xff, 0x401, "e5db489bf8448e31329e74ac37c0f15574834999d8f4aecfb2e13be81158ab29fc4e27d2e048ddc56a87a9dc420121c8853bf1f06dac59c2d0485c27ec4d24677595a8cc67c39de2a7296b76e51ab6974f8627c1bbaea20362b98be97371c098edd4ffd868439ef9e4105a975d9707a3b6fd8a3f55379e4efc359a6c0b10a287d92de2"}, {0xf0, 0x114, 0xf, "5264417d214500b15d8038497b589cc46ca863da0b2d6352bdf56977227fb18157e6d3ace02e4917cd5dd0c96030e9b1c988e4dc261e8e05126068f258fe05ee96f477f17c6a3aa0e4e7969b7371b8d725690c627e5f1037ff1d7e2cd87538dc8a70c4771e28b65db2f3e903c353a6e7f96490bd7873aa51986ee78df2273068d4c88d4506f422e8edd517c066702d414a27a332bdddc85eb01e69605dd3a4a24f54a3f3c6e9685d11cc6271235fbfbce240e83f7d93dbf880015048714d386e44f7153e90151c5e212b3236d35d4a50281ffa6c000296ab69"}, {0xd0, 0x10d, 0x4, "cfc8c4b66a709a7780ed2901c42e4a9b818d33db088e504ace1217a147e7ba64dfd16127b6417aa5abfe025424bfd1d351f8fc99fc29f7388bc856c3beb89a27f4e07282d26e0f9f25e4ad6ed0c8cc10610c4f0a8d315fb10fae4d5044f57d3a46abcec336a28fdb93e0e6e43cd88828ac6952e43bf8ab87e418c9757d113899231b639e182dcd3f8a3e23c856b84218616f32a781041378e6367c6b3700ed4ceb8e7182f4d824ebfd1f51a896885c136960cd1e3895597c089da49535"}, {0x98, 0x3a, 0x9, "252933d60ad0623512f585a4834d52caccd116dac1eec9ee6e666a0e480f2939e934c6a0c2bc531f40b136d4a34d91bf9fdf6e944ea0c4ab689444f5b1655e4b1f3106932865f4b78c90af10a27bd4f84353c2ef4aca496a3c8bef398d9dd9d7ac71ba5f3c08bc7d63304795fe0a5d6be51b9018b8ec7346f9950da79f9c5ee28221fe39175bac"}], 0x4a8, 0x80}, 0x38)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r3=>0x0})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000000980)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0x1a, &(0x7f0000000400)={&(0x7f00000003c0)=@newneigh={0x1c, 0x1c, 0x8, 0x70bd2b, 0x25d7dbfe, {0xa, 0x0, 0x0, r3, 0x8, 0x80, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c842}, 0x4000)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
accept4$inet6(0xffffffffffffffff, &(0x7f00000009c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000a00)=0x1c, 0x800) (async)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000a40)={0x0, 'lo\x00', {0x4}, 0x8001}) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async)
socket$qrtr(0x2a, 0x2, 0x0) (async)
sendmsg$qrtr(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="f58871c4bce26b921d1c4431ee2ecafe3281f9bd62a794c19f031af79276e89afc1c7a8aa40202aaf34dccecdebffabf90947b7092ca0b8ecb0bc9c1f559617fb998b41d26304b991241b8efef44739cb63871fbff5f0184c59b653d8a3ec5add3bc48c38a7c7f0f7061966b374bf31543c1157c11eba44c02b995e669e1eb8f79634886b2fdc25bdca7dc0da5ebe17e0ace634d8882ea9f12ce9f5a63fd561bedee0fbb789eb87864649866b3a6a528487508e8f4338ee85d", 0xb9}, {&(0x7f0000000140)="ae19cac6a8415fbc533eb4e4280633b108d0ec090d020bba4b611213aa2bef", 0x1f}, {&(0x7f0000000240)="fa18d4b70854574c99764194aaed3e825cdf84f777ba3cdfb2524ab61a270511c5e491a7647e184f38c4bbb8fb4f5d457c971a2c212a5709ef3e10c2eef31a6df5b41b5a01d6a9186175a75a02e47ef17643b50749d26e8f2458144a0beaa9653bff595ada54d579d13e507541b5d4ca53029ca42b83cadf6a8ea0a752ac32c7ae6541f13020f2e62dcce0d159d73e37a475f408eda12a7cb497b61515c6d62f72b91c0718cb2bb5677ee82edc36420d0db2ad32b0fc754b6c2d578bec1088dae37fe183db0b206e68e22ac7dc16a96d7eed73a901739f3704c8f7", 0xdb}], 0x3, &(0x7f0000000480)=[{0xe0, 0x10a, 0x3, "e83ec3bd0c0316e266dbe8748f158d5869308e1fd9bbd1e92ecd80db9a0061775e8041b1dae032fc56d2b565635343049160d7257f180ff44bc4e40230963483b14af57fbfe33bb6d50b43b23a5f44a86abe5929a35fa4e522f2c3f58159d12eaf7443f06a014fb77e22eb9249a42aa6a49f1788153407f8ea7a827dbac07763038ba36d4c263f7fff15254b201f90a0a8e748b49b83488b0d68e765367287abe5d940dafdc6e0e63baf93c786a7cccffbc9ec4e26d2a1926f9391a32d26a7e48302f386d1ef024d9878ab96"}, {0xa0, 0x10f, 0x0, "c64b624fd62dc1e57f6f0f7bdb54fc7799b8527eda6a21f32d7e900566546f1b52aabc6d8bef1f4774298e606fdc431992543fe4ec1f5a44b4b161cea7a5a89c7c7a2aed8de536eaf2343577d67a0057c6a04d7c5503c539122f16b9e43f08f5cd210b114a531edbb7a89cf8137ecaa76185fc33b8189018f3e75ad1f90f49868c7d15915e81661f874bdb1b"}, {0x38, 0x109, 0x9, "089503fd1e5e5c1feb82d606bfd279372cbfe5be5191dd99e4f5b8ff6fa4b7622f0d0b2d7d"}, {0x98, 0xff, 0x401, "e5db489bf8448e31329e74ac37c0f15574834999d8f4aecfb2e13be81158ab29fc4e27d2e048ddc56a87a9dc420121c8853bf1f06dac59c2d0485c27ec4d24677595a8cc67c39de2a7296b76e51ab6974f8627c1bbaea20362b98be97371c098edd4ffd868439ef9e4105a975d9707a3b6fd8a3f55379e4efc359a6c0b10a287d92de2"}, {0xf0, 0x114, 0xf, "5264417d214500b15d8038497b589cc46ca863da0b2d6352bdf56977227fb18157e6d3ace02e4917cd5dd0c96030e9b1c988e4dc261e8e05126068f258fe05ee96f477f17c6a3aa0e4e7969b7371b8d725690c627e5f1037ff1d7e2cd87538dc8a70c4771e28b65db2f3e903c353a6e7f96490bd7873aa51986ee78df2273068d4c88d4506f422e8edd517c066702d414a27a332bdddc85eb01e69605dd3a4a24f54a3f3c6e9685d11cc6271235fbfbce240e83f7d93dbf880015048714d386e44f7153e90151c5e212b3236d35d4a50281ffa6c000296ab69"}, {0xd0, 0x10d, 0x4, "cfc8c4b66a709a7780ed2901c42e4a9b818d33db088e504ace1217a147e7ba64dfd16127b6417aa5abfe025424bfd1d351f8fc99fc29f7388bc856c3beb89a27f4e07282d26e0f9f25e4ad6ed0c8cc10610c4f0a8d315fb10fae4d5044f57d3a46abcec336a28fdb93e0e6e43cd88828ac6952e43bf8ab87e418c9757d113899231b639e182dcd3f8a3e23c856b84218616f32a781041378e6367c6b3700ed4ceb8e7182f4d824ebfd1f51a896885c136960cd1e3895597c089da49535"}, {0x98, 0x3a, 0x9, "252933d60ad0623512f585a4834d52caccd116dac1eec9ee6e666a0e480f2939e934c6a0c2bc531f40b136d4a34d91bf9fdf6e944ea0c4ab689444f5b1655e4b1f3106932865f4b78c90af10a27bd4f84353c2ef4aca496a3c8bef398d9dd9d7ac71ba5f3c08bc7d63304795fe0a5d6be51b9018b8ec7346f9950da79f9c5ee28221fe39175bac"}], 0x4a8, 0x80}, 0x38) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bind$netlink(r4, &(0x7f0000000980)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0x1a, &(0x7f0000000400)={&(0x7f00000003c0)=@newneigh={0x1c, 0x1c, 0x8, 0x70bd2b, 0x25d7dbfe, {0xa, 0x0, 0x0, r3, 0x8, 0x80, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c842}, 0x4000) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) (async)

3m56.302148708s ago: executing program 2 (id=227):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYRESHEX=r2, @ANYRES32=<r3=>r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES16=r4, @ANYBLOB="010828bd7000fcdbdf250b00000008000300", @ANYRES16=r3, @ANYBLOB="280050801c000880040002000400020004000200080002"], 0x44}, 0x1, 0x0, 0x0, 0x8041}, 0x1040)
r6 = socket(0x25, 0x3, 0x1)
r7 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xb}, {0xf, 0x4}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x800)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=@newtfilter={0x34, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r8, {0x4, 0x9}, {}, {0x1fff2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x48c0)

3m55.986022252s ago: executing program 2 (id=230):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160009000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async)
setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) (async)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 32)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async, rerun: 32)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x2000000000000032) (async)
r2 = accept(r0, &(0x7f00000002c0)=@hci, &(0x7f0000000000)=0x80) (async)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={<r3=>0x0, 0x1, 0xfff8}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000200)={r3, 0x8, 0x0, 0xc60f, 0x10000}, &(0x7f0000000380)=0x18)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async)
sendto$inet(r0, &(0x7f0000000c40)="3ce2de4d8d957a8de4e4904e17c36b1f885a99911eef7f1426e998ede6f203e249a009ad189d558e443a1d2659baf07e80097797c3fb0b4d107f35191cf05c6b28dddeed30fccb8231f5715e4c1d163f06dea64e06df5bccf8ff22fc192722ce441ff37db2a028c3a6483b6ed1740680f1e6f8f80e032d369e4bd1999c58643a0d9cba7825f03be9fa5b92436cb3898ccb8514d0b251645610cf965fff4f382a132adce0d4720e9d4063c8f4155d33a735ae32d6fe13347899803499320b6e49c9de5d4a6c1ac3c076c216ddc1bc3a1fa4a59a7a54ec9447c4978b8d488b338407c3234d6f4487efedf9c103e221a306a6a5499bebe7204fa9abbb3135cc25fc12d88a6242864eb0e2e63cbf184d19735f1eef68a9e841f04a4034d54623e8124576b6053ac0a60cae47c46cfb39eb0c90c81700c910d55e598c1326bbadf9f6da9147ef039fb8a1fb052f0000000000000000000000aefc39fcd43a14a2", 0x15e, 0x805, 0x0, 0x0)

3m55.728456679s ago: executing program 2 (id=233):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000))
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000000206010100000000000000000000000005000500a80000000500040800000000050001006500000004000780"], 0x30}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848370000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414"], 0x528}}, 0xc000)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@getnexthop={0x20, 0x6a, 0x501, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xa, 0xfffffff0}]}, 0x20}}, 0x0)
r7 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r7, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @loopback=0x7f000008}, 0x10)
listen(r7, 0x0)
r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x13, r8, 0xa773a000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5, 0x0, 0x20007fffffff}, 0x18)
r9 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f0000000380)={0x1d, r10, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18)
sendmmsg$sock(r9, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r9)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf25000000000000000008000a00010000003304cbb515855fc42b42a05bf80300c7538bc36cbcf81ad6e51ed9e91d95d155618a2781ce3739"], 0x20}, 0x1, 0x0, 0x0, 0x71}, 0x50)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x0, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xac3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xbd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xd5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffff9}, {}, {}, {}, {}, {}, {}, {}, {0x8}], [{}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)

3m53.906033829s ago: executing program 2 (id=253):
socket$packet(0x11, 0x2, 0x300)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) (async)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190)
syz_emit_ethernet(0x19a, &(0x7f00000002c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x164, 0x3a, 0x0, @remote, @mcast2, {[@srh={0xc, 0x6, 0x4, 0x3, 0x9, 0x58, 0x0, [@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x35}, @loopback]}, @hopopts={0x21, 0x3, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private1}]}, @routing={0x2, 0x2, 0x2, 0x3, 0x0, [@private2]}, @srh={0x2, 0xe, 0x4, 0x7, 0x2, 0x68, 0xf, [@private2, @mcast2, @rand_addr=' \x01\x00', @local, @empty, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0x67, 0x8, 0x2, 0x9, 0x0, [@rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @local, @private2={0xfc, 0x2, '\x00', 0x1}]}], @mlv2_query={0x82, 0x0, 0x0, 0x1, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x1, 0x4, 0x7, 0x1, [@local]}}}}}}, 0x0) (async)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='pmap_register\x00', r1, 0x0, 0x1}, 0x18)

3m38.655914879s ago: executing program 32 (id=253):
socket$packet(0x11, 0x2, 0x300)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) (async)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190)
syz_emit_ethernet(0x19a, &(0x7f00000002c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x164, 0x3a, 0x0, @remote, @mcast2, {[@srh={0xc, 0x6, 0x4, 0x3, 0x9, 0x58, 0x0, [@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x35}, @loopback]}, @hopopts={0x21, 0x3, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private1}]}, @routing={0x2, 0x2, 0x2, 0x3, 0x0, [@private2]}, @srh={0x2, 0xe, 0x4, 0x7, 0x2, 0x68, 0xf, [@private2, @mcast2, @rand_addr=' \x01\x00', @local, @empty, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0x67, 0x8, 0x2, 0x9, 0x0, [@rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @local, @private2={0xfc, 0x2, '\x00', 0x1}]}], @mlv2_query={0x82, 0x0, 0x0, 0x1, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x1, 0x4, 0x7, 0x1, [@local]}}}}}}, 0x0) (async)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='pmap_register\x00', r1, 0x0, 0x1}, 0x18)

2m39.151244384s ago: executing program 1 (id=798):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @remote, {[@noop, @timestamp_prespec={0x44, 0x0, 0xf4, 0x3, 0x7, [{@multicast2, 0xb61d}, {@local, 0x400}, {@multicast1, 0x6}, {@remote, 0x9}, {@broadcast, 0xfffffc01}, {@multicast1}, {@empty, 0x9}]}]}}}}}}}, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000180)=""/84, &(0x7f0000000080)=0x54)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "0600", "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "75503e2e6b028a30", "38a2bbc0905837e3dfcbf0c4c1bb92da5cd2135ec0bcbb820200", "1be57745"}, 0x38)
r2 = socket(0x8, 0x2, 0x1)
ioctl$IMGETDEVINFO(r2, 0x80044944, 0x0)
getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x10)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
syz_emit_ethernet(0x86, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @remote, {[@noop, @timestamp_prespec={0x44, 0x0, 0xf4, 0x3, 0x7, [{@multicast2, 0xb61d}, {@local, 0x400}, {@multicast1, 0x6}, {@remote, 0x9}, {@broadcast, 0xfffffc01}, {@multicast1}, {@empty, 0x9}]}]}}}}}}}, 0x0) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x100000001, 0x4) (async)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000180)=""/84, &(0x7f0000000080)=0x54) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "0600", "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "75503e2e6b028a30", "38a2bbc0905837e3dfcbf0c4c1bb92da5cd2135ec0bcbb820200", "1be57745"}, 0x38) (async)
socket(0x8, 0x2, 0x1) (async)
ioctl$IMGETDEVINFO(r2, 0x80044944, 0x0) (async)
getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async)

2m38.995501615s ago: executing program 1 (id=800):
r0 = socket(0xa, 0x3, 0x3a)
r1 = socket(0x28, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b000100627269646765"], 0x6c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0)
recvmsg(r0, &(0x7f0000000600)={&(0x7f0000000080)=@ll={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/206, 0xce}, {&(0x7f00000002c0)=""/226, 0xe2}, {&(0x7f00000003c0)=""/204, 0xcc}, {&(0x7f00000004c0)=""/182, 0xb6}, {}], 0x5, &(0x7f0000000100)=""/57, 0x39}, 0x40)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @link_local}, 0x10)
syz_emit_ethernet(0x6e, &(0x7f00000007c0)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0xf, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@cipso={0x86, 0x16, 0x2, [{0x1, 0x10, "bcabeb41f5310900652c56cfff0e"}]}, @noop, @lsrr={0x83, 0xf, 0xa1, [@rand_addr=0x64010101, @broadcast, @multicast1]}]}}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x7, 0x4, 0x0, 0x0, 0x401, 0x2, 0x0, 0x0, 0x33, 0x0, @remote, @dev, {[@timestamp={0x44, 0x8, 0x64, 0x0, 0x9, [0x8]}]}}}}}}}, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x3, 0x5}, 0x8)
setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140), 0xc)

2m38.749440739s ago: executing program 1 (id=802):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SECURITY(r0, 0x11, 0x4, 0x0, 0x1000000000000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet(0xa, 0x801, 0x84)
sendto$inet(r4, &(0x7f0000000240)='M', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)
listen(r4, 0x8)
r5 = accept4(r4, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x0, 0x10}, &(0x7f0000000080)=0x18)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000008c0)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc044}, 0x10)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000008, 0x8032, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x0)

2m38.519020802s ago: executing program 1 (id=804):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'team_slave_0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, [0x0, 0x2, 0x1]}})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)

2m38.378449515s ago: executing program 1 (id=806):
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1c)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000100070000000c0007800800120000000000120003006269746d61703a69702c6d6163000000050005005500000005000400000000000900020073797a3000000000"], 0x58}}, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="f599d3e8ee9de362d67ebfec7fe72a86007e4aa91f97730dce90f80518b6c3958688e7fdc210daa9000000cdaf0d833b04b049e75b7fc795d704", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fedbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100))

2m38.260722842s ago: executing program 1 (id=807):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100)
r3 = socket(0x10, 0x803, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)=0x1)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$inet(r5, &(0x7f0000005d40)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="34000000000000000000000007000000442420f9"], 0x38}}], 0x1, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newrule={0x4c, 0x20, 0x20, 0x70bd25, 0x25dfdbfd, {0x2, 0x10, 0x14, 0xb6, 0xa0, 0x0, 0x0, 0x6, 0x7}, [@FRA_SRC={0x8, 0x2, @broadcast}, @FRA_SRC={0x8, 0x2, @rand_addr=0x64010101}, @FRA_FLOW={0x8, 0xb, 0x7}, @FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_SRC={0x8, 0x2, @empty}]}, 0x4c}}, 0x800)

2m23.164310516s ago: executing program 33 (id=807):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100)
r3 = socket(0x10, 0x803, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)=0x1)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$inet(r5, &(0x7f0000005d40)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="34000000000000000000000007000000442420f9"], 0x38}}], 0x1, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv4_newrule={0x4c, 0x20, 0x20, 0x70bd25, 0x25dfdbfd, {0x2, 0x10, 0x14, 0xb6, 0xa0, 0x0, 0x0, 0x6, 0x7}, [@FRA_SRC={0x8, 0x2, @broadcast}, @FRA_SRC={0x8, 0x2, @rand_addr=0x64010101}, @FRA_FLOW={0x8, 0xb, 0x7}, @FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_SRC={0x8, 0x2, @empty}]}, 0x4c}}, 0x800)

1m12.575260058s ago: executing program 0 (id=654):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0}) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r3=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x40018000, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x7c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1m9.00128232s ago: executing program 4 (id=251):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x3f, 0xfffffffffffffffd, &(0x7f0000000040)=0x60)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffffbb, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="00010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008003117"], 0x1c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000580), &(0x7f0000000180)=0x1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38)
r5 = socket$kcm(0x21, 0x2, 0x2)
ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x5)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab0785e34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r7)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r7)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r8, @ANYBLOB="050c1924d588962bbd7000ffdbdf25150000000c0006000100000001000000050029"], 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r10 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r10, 0x0, 0xd0, &(0x7f0000000600), 0x4)
sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x68, r8, 0x906, 0x6, 0x25dfdbfe, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x40c0}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x147cc1, 0x0)

1m2.394940698s ago: executing program 0 (id=654):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0}) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r3=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x40018000, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x7c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

57.224154119s ago: executing program 4 (id=251):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x3f, 0xfffffffffffffffd, &(0x7f0000000040)=0x60)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffffbb, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="00010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008003117"], 0x1c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000580), &(0x7f0000000180)=0x1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38)
r5 = socket$kcm(0x21, 0x2, 0x2)
ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x5)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab0785e34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r7)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r7)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r8, @ANYBLOB="050c1924d588962bbd7000ffdbdf25150000000c0006000100000001000000050029"], 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r10 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r10, 0x0, 0xd0, &(0x7f0000000600), 0x4)
sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x68, r8, 0x906, 0x6, 0x25dfdbfe, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x40c0}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x147cc1, 0x0)

48.685169443s ago: executing program 0 (id=654):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0}) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r3=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x40018000, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x7c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

46.84382792s ago: executing program 4 (id=251):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x3f, 0xfffffffffffffffd, &(0x7f0000000040)=0x60)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffffbb, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="00010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008003117"], 0x1c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000580), &(0x7f0000000180)=0x1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38)
r5 = socket$kcm(0x21, 0x2, 0x2)
ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x5)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab0785e34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r7)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r7)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r8, @ANYBLOB="050c1924d588962bbd7000ffdbdf25150000000c0006000100000001000000050029"], 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r10 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r10, 0x0, 0xd0, &(0x7f0000000600), 0x4)
sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x68, r8, 0x906, 0x6, 0x25dfdbfe, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x40c0}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x147cc1, 0x0)

37.120771932s ago: executing program 0 (id=654):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0}) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r3=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x40018000, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x7c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

35.427235187s ago: executing program 4 (id=251):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x3f, 0xfffffffffffffffd, &(0x7f0000000040)=0x60)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffffbb, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="00010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008003117"], 0x1c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000580), &(0x7f0000000180)=0x1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38)
r5 = socket$kcm(0x21, 0x2, 0x2)
ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x5)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab0785e34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r7)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r7)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r8, @ANYBLOB="050c1924d588962bbd7000ffdbdf25150000000c0006000100000001000000050029"], 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r10 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r10, 0x0, 0xd0, &(0x7f0000000600), 0x4)
sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x68, r8, 0x906, 0x6, 0x25dfdbfe, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x40c0}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x147cc1, 0x0)

23.963108642s ago: executing program 0 (id=654):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0}) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r3=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x40018000, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x7c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

19.361347971s ago: executing program 4 (id=251):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x3f, 0xfffffffffffffffd, &(0x7f0000000040)=0x60)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffffbb, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="00010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008003117"], 0x1c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000580), &(0x7f0000000180)=0x1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38)
r5 = socket$kcm(0x21, 0x2, 0x2)
ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x5)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab0785e34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r7)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r7)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r8, @ANYBLOB="050c1924d588962bbd7000ffdbdf25150000000c0006000100000001000000050029"], 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r10 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r10, 0x0, 0xd0, &(0x7f0000000600), 0x4)
sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x68, r8, 0x906, 0x6, 0x25dfdbfe, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x40c0}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x147cc1, 0x0)

6.746889255s ago: executing program 0 (id=654):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0}) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r3=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x40018000, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x7c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

5.674998384s ago: executing program 4 (id=251):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x3f, 0xfffffffffffffffd, &(0x7f0000000040)=0x60)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffffbb, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="00010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008003117"], 0x1c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000580), &(0x7f0000000180)=0x1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38)
r5 = socket$kcm(0x21, 0x2, 0x2)
ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x5)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab0785e34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r7)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r7)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r8, @ANYBLOB="050c1924d588962bbd7000ffdbdf25150000000c0006000100000001000000050029"], 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r10 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r10, 0x0, 0xd0, &(0x7f0000000600), 0x4)
sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x68, r8, 0x906, 0x6, 0x25dfdbfe, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x40c0}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x147cc1, 0x0)

1.912101782s ago: executing program 5 (id=1762):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="0d000000010001", 0x7)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000fddbdf255500000008000300", @ANYRES32=r5], 0x1c}}, 0x0)
close(0x3)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.611066338s ago: executing program 5 (id=1766):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
read(r2, &(0x7f0000005f40)=""/175, 0xaf)

1.43386765s ago: executing program 5 (id=1768):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1, 0x0, 0x20007fffffff}, 0x18)
sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x241}, 0x44080)
sendmmsg$inet(r0, 0x0, 0x0, 0x20004050)

1.279410826s ago: executing program 5 (id=1769):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x11, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010446ca9e1a4a2baae728dd5800", @ANYRES32=r4, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001f"], 0x3c}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800060000001001a8000b00a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x11, 0x800, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010446ca9e1a4a2baae728dd5800", @ANYRES32=r4, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001f"], 0x3c}}, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800060000001001a8000b00a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async)

1.251783204s ago: executing program 6 (id=1770):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0xedff)

1.172325035s ago: executing program 6 (id=1771):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x1d}, {&(0x7f0000000080)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7d37bcf9e433c29", 0x28}], 0x2}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b34, &(0x7f0000000000)={'wlan0\x00'})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_POWER_SAVE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x200408c4)
sendmsg$nl_xfrm(r3, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=@migrate={0x25c, 0x21, 0x800, 0x70bd2d, 0x25dfdbfb, {{@in6=@rand_addr=' \x01\x00', @in6=@remote, 0x4e22, 0xb, 0x4e24, 0x2, 0x8, 0xa0, 0x0, 0x45, r2, r4}, 0x6e6bbd, 0x1}, [@algo_auth_trunc={0x14a, 0x14, {{'sha1\x00'}, 0x7f0, 0x40, "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"}}, @algo_auth={0xbe, 0x1, {{'sha224-neon\x00'}, 0x3b0, "ea57a53aead2446fbe4766e96b7c4ac8ac2b119eddd7aacc1092f6d5831cd5665aa06060b937009af6fa0bcc4d89d3f09abeb055a204e497a23c1912a3a98ba6df56bd890488a3bcadc582af870fddca7424aa57b29daa60e75e289a955679ed625ed792d062570d1854b3d9353adbffdc2e15d42bfc"}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x40d0}, 0x8080)

772.792442ms ago: executing program 3 (id=1772):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b14010000000000000000000800030001fc0000080001000000000008003f"], 0x28}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}}, 0x0)

606.994202ms ago: executing program 3 (id=1773):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x28}}, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)
write(r0, &(0x7f0000000040)="05000000010001", 0x7)

533.391649ms ago: executing program 3 (id=1774):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x100, 0x0) (fail_nth: 9)
close(r0)

470.117378ms ago: executing program 6 (id=1775):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000010c0)={{0x1}, &(0x7f0000001040), &(0x7f0000001080)=r0}, 0x20)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @private=0xa010101}, {0x2, 0x4e23, @remote}, {0x2, 0x4e22, @multicast1}, 0x40, 0x0, 0x0, 0x0, 0xd28e, 0x0, 0x5, 0xa, 0xe})
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
syz_emit_ethernet(0x86, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "c678f5f51bbce35015ce70e27725156603f2d3560b617b2106a43d0ff372c2ea", "39fe5728cf8ceb86c96a35df5764eb6b", {"ea3dae90c277e9e21d505517930c4285", "ca42d917352f96bd20b9feae4b21add4"}}}}}}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001200))
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000011c0)={@map=r1, 0x3c, 0x0, 0x2007, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0, 0x0], &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0], <r4=>0x0}, 0x40)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'ip_vti0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f0000000180)="0b03f6ffe0ff64000200475400f6a13bb1000000080008004803", 0xffffffffffffffd4, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001240)=ANY=[@ANYRES32=r7, @ANYRES32=r0, @ANYBLOB="150000001c00000000000000a38029c847ce6fd9d3321c858252740f0c8f46b9a51bdef376dc9056f60e94cf14d243f3ad35d9b07042486596f9f81190250c116b421b9008f5d718c662a1aa0231d574ef3287d6388259db923ee0f140c9", @ANYRES32=r0, @ANYBLOB, @ANYRES64=r4], 0x20)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001500)={0x0, 0x5f2960f, 0x10}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1f, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004c6ce6b18987f7c57ee005000000000002", 0x0, 0xff7ffffd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

387.378538ms ago: executing program 5 (id=1776):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
socket$rds(0x15, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x2a, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000e4ff000000000000000000630100000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0x0)
ioctl$PPPIOCGMRU(r6, 0x80047453, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x18, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="2400000000000000290000003200000002"], 0x28}}], 0x1, 0x0)

360.357462ms ago: executing program 3 (id=1777):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001f40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fcdbdf25010000000800010000ffeb000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4044054}, 0x4040)
sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x80)

285.621733ms ago: executing program 6 (id=1778):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x40000)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=<r3=>0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=<r4=>0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = getpid()
sendmsg$unix(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003140)="fa", 0x1}], 0x1, &(0x7f00000046c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="0000000010"], 0x30}, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x3c, r1, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5c}, @NL80211_ATTR_PID={0x8, 0x52, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x40)

231.34337ms ago: executing program 3 (id=1779):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)={0x4}, 0x8)
sendto$inet6(r2, &(0x7f0000000180)="fe54cd09", 0x4, 0x4000014, &(0x7f0000000200)={0xa, 0x4e22, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x25}, 0x5}, 0x1c) (async)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r6, r5, 0x7, 0x0, 0x0, @void, @value}, 0x10) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0}) (async, rerun: 64)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4)
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x40, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3c}, @val={0x8, 0x3, r7}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x40}}, 0x0) (async)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 64)
r10 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001214010000000000fedbdf25f30703001d00000108001500020000000800024d49a25eda66f04f00040000000800010000000000d760f8400ff9e0d03f1bf8bf579c0a713f7d3008a672b618bdf1aecf3aa1485393ecfe4d96d75459089154e36db451512826c76d5fcd8951260769da105f07993b6a7794309a81aab2536b4b92c6edd62c3efa51da2ccfa001"], 0x38}}, 0x0) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r11, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r12}, &(0x7f0000000840), &(0x7f0000000880)=r11}, 0x20) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x44, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 32)
ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000000c80)={0x0, 0x3f8000000, @status={[0x7, 0xae3f, 0x2, 0x9, 0x1, 0xe6c]}, [0x5, 0x3, 0xfffffffffffffffe, 0x8000000000000001, 0x4426, 0x3, 0x3, 0x6, 0x3ff, 0x6, 0xdc49, 0x4, 0x7716c42f, 0x6, 0xb421, 0x3, 0x2, 0x75, 0xa, 0x6, 0x8000000000000001, 0x9, 0x5, 0xc0000000000000, 0xffff, 0xc7f8, 0xe3f, 0xfffffffffffffffa, 0x3, 0x7, 0x2, 0x7fffffff, 0x5, 0x8, 0x1a, 0x0, 0x4, 0x7, 0xffffffff, 0x400, 0x0, 0x7, 0x200, 0x8, 0x81, 0x1000000000000000, 0xa1, 0x200000, 0x3, 0x9, 0x8, 0x0, 0x6, 0x83, 0x5, 0x9, 0x80000001, 0x9, 0x2, 0x7, 0xffffffff, 0x401, 0x2, 0x6]}) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=@delchain={0x24, 0x64, 0xf31, 0x1000000, 0x0, {0x0, 0x0, 0x0, r9, {0x9}, {0x10, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x40840dd}, 0x1000000)

123.52052ms ago: executing program 5 (id=1780):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x240540c3, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x10, 0x9, 0x4, 0xc, 0x6, 0x10, 0x7, 0x9, 0xad, 0xe, 0x5, 0xe5, 0x6}, 0xe)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x120, 0x9, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xfffffffffffffc01}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x190}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349f7f2})
writev(r5, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c98864", 0xffbf}], 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000b000014000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090500000000019400000000070000b7020000000000006b9af0ff000000007609000000000000dbaaf0fff1000000bf86000000000000070800000d000000bfa400000000000007040000f0ffffff560000000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000019000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$inet_mptcp(0x2, 0x1, 0x106)
getpeername$inet6(r0, 0x0, 0x0)

111.044714ms ago: executing program 6 (id=1781):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000140)=0xb2, 0x4)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
socket$inet(0x2, 0x3, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah\x00', 0x44)
shutdown(r0, 0x1)

90.988687ms ago: executing program 3 (id=1782):
r0 = socket(0x18, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000001340), &(0x7f00000001c0)=0x8)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}]}, 0x44}}, 0x0)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c805}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x51a0a, 0x2459}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r9=>0x0})
connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {}, {0x77359400}}, 0x48}}, 0x0)
sendmsg$can_bcm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02"], 0x48}}, 0x24040041)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x700, 0xc, 0xff, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @empty, @empty}}}})
socket$inet6_sctp(0xa, 0x1, 0x84)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'geneve1\x00'}}, 0x1e)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x200000f, @media='udp\x00'}}}}, 0xfffffc30}, 0x1, 0x0, 0x0, 0x2}, 0x48040)

0s ago: executing program 6 (id=1783):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x27, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x2}, @alu={0x4, 0x0, 0x8, 0x5, 0x9, 0x8, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @jmp={0x5, 0x1, 0x2, 0x5, 0x4, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @generic={0x66, 0xe, 0x0, 0x2e4d, 0x400}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xf, 0xfffffff7, 0xa5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x0, 0x10, 0x5, @void, @value}, 0x94)
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000003c0)=r5)
close(r3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe8", 0x10}, {&(0x7f0000000440)="9c74dfbf77", 0x5}, {&(0x7f0000000480)="f25264932a7e13c75e90aae911631b60a3444cd6b4581a0f7ef357d8a4c589f8f0fe3dcfc5efc3730a41349e6750cda2a58d9d72626e60a2c50b", 0x3a}], 0x3)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x100, 0x0)
close(r0)

kernel console output (not intermixed with test programs):

eftover after parsing attributes in process `syz.5.1293'.
[  244.391778][T10617] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  244.428200][T10583] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.497960][T10583] veth0_vlan: entered promiscuous mode
[  244.526289][T10583] veth1_vlan: entered promiscuous mode
[  244.571735][T10820] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1294'.
[  244.609736][T10822] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1295'.
[  244.612439][T10617] 8021q: adding VLAN 0 to HW filter on device bond0
[  244.640731][T10822] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1295'.
[  244.655620][T10583] veth0_macvtap: entered promiscuous mode
[  244.684244][T10583] veth1_macvtap: entered promiscuous mode
[  244.705744][T10617] 8021q: adding VLAN 0 to HW filter on device team0
[  244.738393][T10583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.752283][T10583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.793773][T10583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.812620][T10583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.823393][T10583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.835265][T10583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.846705][T10583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.860016][T10583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.872120][T10583] batman_adv: batadv0: Interface activated: batadv_slave_0
[  244.882218][ T6692] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.889371][ T6692] bridge0: port 1(bridge_slave_0) entered forwarding state
[  244.910541][T10583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.925748][T10583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.936887][T10583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.948510][T10583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.959080][T10583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.970228][T10583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.981156][T10583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.992614][T10583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.004320][T10583] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.028038][ T6692] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.035206][ T6692] bridge0: port 2(bridge_slave_1) entered forwarding state
[  245.049311][T10583] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.058861][T10583] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.068536][T10583] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.078213][T10583] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.410330][T10841] Bluetooth: MGMT ver 1.23
[  245.490445][T10832] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  245.500109][T10844] netlink: 'syz.5.1302': attribute type 1 has an invalid length.
[  245.515835][T10832] syzkaller0: entered promiscuous mode
[  245.532003][T10832] syzkaller0: entered allmulticast mode
[  245.542001][T10844] netlink: 'syz.5.1302': attribute type 1 has an invalid length.
[  245.555785][T10832] tipc: Resetting bearer <eth:syzkaller0>
[  245.571435][ T6693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.577666][T10847] batadv_slave_1: entered promiscuous mode
[  245.587169][T10831] tipc: Resetting bearer <eth:syzkaller0>
[  245.615262][ T6693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.470600][ T5149] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  247.679263][T10831] tipc: Disabling bearer <eth:syzkaller0>
[  247.710764][T10850] batadv_slave_1: left promiscuous mode
[  247.763324][ T6698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.804925][ T6698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.838039][T10617] 8021q: adding VLAN 0 to HW filter on device batadv0
[  247.859888][T10859] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1306'.
[  248.038956][T10863] xt_CT: No such helper "pptp"
[  248.389947][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1312'.
[  248.476597][T10617] veth0_vlan: entered promiscuous mode
[  248.499387][T10617] veth1_vlan: entered promiscuous mode
[  248.612711][ T6697] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.682871][T10891] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  248.752411][ T6697] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.781157][T10617] veth0_macvtap: entered promiscuous mode
[  248.791594][T10891] mac80211_hwsim hwsim21 syzkaller0: entered promiscuous mode
[  248.802599][T10891] mac80211_hwsim hwsim21 syzkaller0: entered allmulticast mode
[  248.820482][T10617] veth1_macvtap: entered promiscuous mode
[  248.846936][ T6697] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.884233][T10617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.897056][T10617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.907527][T10617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.918689][T10617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.928589][T10617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.940498][T10617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.951561][T10617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.962594][T10617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.972831][T10617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.983777][T10617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.997361][T10617] batman_adv: batadv0: Interface activated: batadv_slave_0
[  249.024263][ T6697] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.042699][T10617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.055392][T10617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.066305][T10617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.078134][T10617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.088432][T10617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.099908][T10617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.110371][T10617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.121865][T10617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.132715][T10617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.144330][T10617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.160307][T10617] batman_adv: batadv0: Interface activated: batadv_slave_1
[  249.172182][T10617] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.181161][T10617] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.190625][T10617] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.200001][T10617] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  249.367270][ T6697] bridge_slave_1: left allmulticast mode
[  249.373450][ T6697] bridge_slave_1: left promiscuous mode
[  249.379730][ T6697] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.397317][ T6697] bridge_slave_0: left allmulticast mode
[  249.402991][ T6697] bridge_slave_0: left promiscuous mode
[  249.408911][ T6697] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.903791][T10908] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1320'.
[  249.952998][T10908] ip6t_srh: unknown srh invflags 5F00
[  250.002717][ T6697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  250.043241][ T6697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  250.071797][ T6697] bond0 (unregistering): Released all slaves
[  250.100418][ T6692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.101197][T10903] ip6gretap0: left promiscuous mode
[  250.120042][ T6692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.122217][T10903] ip6gretap0: left allmulticast mode
[  250.152060][T10903] batadv_slave_1: left promiscuous mode
[  250.218912][T10903] bond4: left promiscuous mode
[  250.227744][T10903] bond4: left allmulticast mode
[  250.233369][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  250.245030][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  250.262702][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  250.277332][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  250.292806][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  250.303535][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  250.507839][ T6705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.534156][T10913] xfrm0 speed is unknown, defaulting to 1000
[  250.543337][ T6705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.802493][ T6697] hsr_slave_0: left promiscuous mode
[  250.833452][ T6697] hsr_slave_1: left promiscuous mode
[  250.847308][ T6697] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  250.874654][ T6697] batman_adv: batadv0: Removing interface: batadv_slave_0
[  250.902902][ T6697] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  250.914916][ T6697] batman_adv: batadv0: Removing interface: batadv_slave_1
[  250.961943][ T6697] veth1_macvtap: left promiscuous mode
[  250.974923][ T6697] veth0_macvtap: left promiscuous mode
[  250.994229][ T6697] veth1_vlan: left promiscuous mode
[  251.022768][ T6697] veth0_vlan: left promiscuous mode
[  251.037296][T10941] set match dimension is over the limit!
[  251.724231][ T6697] team0 (unregistering): Port device team_slave_1 removed
[  251.778341][ T6697] team0 (unregistering): Port device team_slave_0 removed
[  252.253803][T10940] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  252.363846][ T5847] Bluetooth: hci0: command tx timeout
[  252.559791][T10913] chnl_net:caif_netlink_parms(): no params data found
[  252.853101][T10913] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.862043][T10913] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.872425][T10913] bridge_slave_0: entered allmulticast mode
[  252.880874][T10913] bridge_slave_0: entered promiscuous mode
[  252.891740][T10913] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.899857][T10913] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.907521][T10913] bridge_slave_1: entered allmulticast mode
[  252.914302][T10913] bridge_slave_1: entered promiscuous mode
[  252.940396][T10913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  252.952754][T10913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  252.987401][T10913] team0: Port device team_slave_0 added
[  252.998352][T10913] team0: Port device team_slave_1 added
[  253.037365][ T6697] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.063937][T10913] batman_adv: batadv0: Adding interface: batadv_slave_0
[  253.071118][T10913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.097860][T10913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  253.114177][T10913] batman_adv: batadv0: Adding interface: batadv_slave_1
[  253.121871][T10913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.148950][T10913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  253.173452][ T6697] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.209648][T10913] hsr_slave_0: entered promiscuous mode
[  253.216863][T10913] hsr_slave_1: entered promiscuous mode
[  253.251702][ T6697] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.330351][ T6697] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.488595][ T6697] bridge_slave_1: left allmulticast mode
[  253.494282][ T6697] bridge_slave_1: left promiscuous mode
[  253.500341][ T6697] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.509098][ T6697] bridge_slave_0: left allmulticast mode
[  253.515287][ T6697] bridge_slave_0: left promiscuous mode
[  253.521045][ T6697] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.872355][ T6697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  253.891060][ T6697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  253.901383][ T6697] bond0 (unregistering): Released all slaves
[  254.298025][T10913] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  254.303539][T10983] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1335'.
[  254.331889][T10986] netlink: 26844 bytes leftover after parsing attributes in process `syz.5.1339'.
[  254.361324][T10985] netlink: 'syz.3.1338': attribute type 21 has an invalid length.
[  254.372043][T10985] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1338'.
[  254.382000][T10985] netlink: 'syz.3.1338': attribute type 4 has an invalid length.
[  254.391516][T10985] netlink: 'syz.3.1338': attribute type 5 has an invalid length.
[  254.408191][T10985] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1338'.
[  254.425425][ T5847] Bluetooth: hci0: command tx timeout
[  254.487416][ T6697] hsr_slave_0: left promiscuous mode
[  254.493627][ T6697] hsr_slave_1: left promiscuous mode
[  254.500823][ T6697] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  254.515033][ T6697] batman_adv: batadv0: Removing interface: batadv_slave_0
[  254.529215][ T6697] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  254.546212][ T6697] batman_adv: batadv0: Removing interface: batadv_slave_1
[  254.546219][ T5149] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  254.566345][ T5149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  254.577206][ T5149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  254.591637][ T5149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  254.599896][ T5149] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  254.607994][ T5149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  254.633187][ T6697] veth1_macvtap: left promiscuous mode
[  254.651817][ T6697] veth0_macvtap: left promiscuous mode
[  254.658115][ T6697] veth1_vlan: left promiscuous mode
[  254.663463][ T6697] veth0_vlan: left promiscuous mode
[  255.128493][ T6697] team0 (unregistering): Port device team_slave_1 removed
[  255.178673][ T6697] team0 (unregistering): Port device team_slave_0 removed
[  255.652132][T10913] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  255.661400][T10981] netlink: 'syz.3.1338': attribute type 21 has an invalid length.
[  255.680248][T10981] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1338'.
[  255.691663][T10981] netlink: 'syz.3.1338': attribute type 4 has an invalid length.
[  255.700769][T10981] netlink: 'syz.3.1338': attribute type 5 has an invalid length.
[  255.709050][T10981] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1338'.
[  255.742431][T10994] bridge: RTM_NEWNEIGH with invalid ether address
[  255.780727][T10913] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  255.799437][T10913] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  255.927192][T10991] xfrm0 speed is unknown, defaulting to 1000
[  256.029403][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  256.136918][T10913] 8021q: adding VLAN 0 to HW filter on device bond0
[  256.263790][T10913] 8021q: adding VLAN 0 to HW filter on device team0
[  256.299343][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.306584][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.329836][ T6706] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.337061][ T6706] bridge0: port 2(bridge_slave_1) entered forwarding state
[  256.368859][T10991] chnl_net:caif_netlink_parms(): no params data found
[  256.451429][T10991] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.460849][T10991] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.468798][T10991] bridge_slave_0: entered allmulticast mode
[  256.477283][T10991] bridge_slave_0: entered promiscuous mode
[  256.487246][T10991] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.495412][T10991] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.502712][T10991] bridge_slave_1: entered allmulticast mode
[  256.505183][ T5847] Bluetooth: hci0: command tx timeout
[  256.510726][T10991] bridge_slave_1: entered promiscuous mode
[  256.549777][T10991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  256.568984][T10991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  256.626999][T10991] team0: Port device team_slave_0 added
[  256.646833][T10991] team0: Port device team_slave_1 added
[  256.664967][ T5847] Bluetooth: hci4: command tx timeout
[  256.711279][T10991] batman_adv: batadv0: Adding interface: batadv_slave_0
[  256.727651][T10991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.760068][T10991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  256.774021][T10991] batman_adv: batadv0: Adding interface: batadv_slave_1
[  256.788241][T10991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.821278][T10991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  256.870811][T10913] 8021q: adding VLAN 0 to HW filter on device batadv0
[  256.906390][T10991] hsr_slave_0: entered promiscuous mode
[  256.912611][T10991] hsr_slave_1: entered promiscuous mode
[  256.953694][T10991] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  256.961213][T11027] FAULT_INJECTION: forcing a failure.
[  256.961213][T11027] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  256.964599][T10991] Cannot create hsr debugfs directory
[  256.980489][T11027] CPU: 1 UID: 0 PID: 11027 Comm: syz.5.1349 Not tainted 6.14.0-rc1-syzkaller-00102-g9dfedb8dc78b #0
[  256.980511][T11027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  256.980521][T11027] Call Trace:
[  256.980527][T11027]  <TASK>
[  256.980534][T11027]  dump_stack_lvl+0x241/0x360
[  256.980560][T11027]  ? __pfx_dump_stack_lvl+0x10/0x10
[  256.980577][T11027]  ? __pfx__printk+0x10/0x10
[  256.980603][T11027]  ? __pfx_lock_release+0x10/0x10
[  256.980636][T11027]  ? vfs_write+0x7fa/0xd10
[  256.980661][T11027]  should_fail_ex+0x40a/0x550
[  256.980685][T11027]  _copy_from_user+0x2d/0xb0
[  256.980702][T11027]  move_addr_to_kernel+0x82/0x150
[  256.980724][T11027]  __sys_connect+0xb6/0x2d0
[  256.980746][T11027]  ? __fget_files+0x2a/0x410
[  256.980763][T11027]  ? __pfx___sys_connect+0x10/0x10
[  256.980796][T11027]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  256.980819][T11027]  ? do_syscall_64+0x100/0x230
[  256.980845][T11027]  __x64_sys_connect+0x7a/0x90
[  256.980868][T11027]  do_syscall_64+0xf3/0x230
[  256.980889][T11027]  ? clear_bhb_loop+0x35/0x90
[  256.980913][T11027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  256.980933][T11027] RIP: 0033:0x7f357f38cde9
[  256.980948][T11027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  256.980962][T11027] RSP: 002b:00007f35801cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  256.980981][T11027] RAX: ffffffffffffffda RBX: 00007f357f5a5fa0 RCX: 00007f357f38cde9
[  256.980993][T11027] RDX: 0000000000000010 RSI: 0000400000000240 RDI: 0000000000000003
[  256.981004][T11027] RBP: 00007f35801cf090 R08: 0000000000000000 R09: 0000000000000000
[  256.981014][T11027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  256.981024][T11027] R13: 0000000000000000 R14: 00007f357f5a5fa0 R15: 00007ffd78becd38
[  256.981051][T11027]  </TASK>
[  257.283617][T11033] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1350'.
[  257.314170][T10913] veth0_vlan: entered promiscuous mode
[  257.362259][T10913] veth1_vlan: entered promiscuous mode
[  257.516296][T10913] veth0_macvtap: entered promiscuous mode
[  257.527950][T10913] veth1_macvtap: entered promiscuous mode
[  257.578687][T10913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  257.590629][T10913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.601097][T10913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  257.612345][T10913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.622829][T10913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  257.634429][T10913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.650708][T10913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  257.661640][T10913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.674808][T11045] netlink: 'syz.5.1354': attribute type 10 has an invalid length.
[  257.683765][T10913] batman_adv: batadv0: Interface activated: batadv_slave_0
[  257.694380][T10913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  257.710027][T10913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.722053][T10913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  257.733054][T10913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.743863][T10913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  257.754740][T10913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.764692][T10913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  257.775731][T10913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.787942][T10913] batman_adv: batadv0: Interface activated: batadv_slave_1
[  257.801188][T11045] 8021q: adding VLAN 0 to HW filter on device batadv0
[  257.810646][T11045] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  257.859526][T10913] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  257.877043][T10913] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  257.895912][T10913] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  257.921932][T10913] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  258.120913][ T3596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.132882][ T3596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.232122][ T6697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.266381][T10991] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  258.277052][ T6697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.320325][T10991] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  258.356928][T10991] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  258.408038][T11062] macvlan3: entered promiscuous mode
[  258.423142][T11062] macvlan3: entered allmulticast mode
[  258.449906][T10991] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  258.456337][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1362'.
[  258.607599][T11061] netlink: 'syz.6.1360': attribute type 10 has an invalid length.
[  258.623027][T11061] bridge0: port 3(team0) entered blocking state
[  258.644934][T11061] bridge0: port 3(team0) entered disabled state
[  258.658233][T11061] team0: entered allmulticast mode
[  258.663781][T11061] team_slave_0: entered allmulticast mode
[  258.687210][T11061] team_slave_1: entered allmulticast mode
[  258.696258][T11061] team0: entered promiscuous mode
[  258.701541][T11061] team_slave_0: entered promiscuous mode
[  258.709103][T11061] team_slave_1: entered promiscuous mode
[  258.716625][T11061] bridge0: port 3(team0) entered blocking state
[  258.722983][T11061] bridge0: port 3(team0) entered forwarding state
[  258.754726][ T5847] Bluetooth: hci4: command tx timeout
[  258.811991][T11080] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1364'.
[  258.887652][T10991] 8021q: adding VLAN 0 to HW filter on device bond0
[  258.916191][T10991] 8021q: adding VLAN 0 to HW filter on device team0
[  258.932671][ T6705] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.939887][ T6705] bridge0: port 1(bridge_slave_0) entered forwarding state
[  258.974452][ T6697] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.981618][ T6697] bridge0: port 2(bridge_slave_1) entered forwarding state
[  259.039215][T11085] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  259.063937][T11085] batadv_slave_1: entered promiscuous mode
[  259.076855][T11085] batadv_slave_1: entered allmulticast mode
[  259.191211][ T6706] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.245165][T10991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  259.329741][ T6706] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.446360][ T6706] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.487495][T10991] 8021q: adding VLAN 0 to HW filter on device batadv0
[  259.633744][ T6706] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.673174][T10991] veth0_vlan: entered promiscuous mode
[  259.686739][T10991] veth1_vlan: entered promiscuous mode
[  259.716964][T10991] veth0_macvtap: entered promiscuous mode
[  259.728767][T10991] veth1_macvtap: entered promiscuous mode
[  259.778516][T10991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  259.807443][T10991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.818022][T10991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  259.829026][T10991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.839398][T10991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  259.850505][T10991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.860849][T10991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  259.872498][T10991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.883292][T10991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  259.894840][T10991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.908806][T10991] batman_adv: batadv0: Interface activated: batadv_slave_0
[  259.930428][ T6706] bridge_slave_1: left allmulticast mode
[  259.941590][ T6706] bridge_slave_1: left promiscuous mode
[  259.948325][ T6706] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.959267][ T6706] bridge_slave_0: left allmulticast mode
[  259.966242][ T6706] bridge_slave_0: left promiscuous mode
[  259.971931][ T6706] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.311006][ T6706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  260.321980][ T6706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  260.333363][ T6706] bond0 (unregistering): Released all slaves
[  260.352841][T10991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.364046][T10991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.374426][T10991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.385520][T10991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.423336][T10991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.452172][T10991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.484094][T11112] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1370'.
[  260.493403][T10991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.493428][T10991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.538223][T10991] batman_adv: batadv0: Interface activated: batadv_slave_1
[  260.608258][T10991] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.664149][T10991] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.678698][T10991] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.688391][T10991] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.825614][ T5847] Bluetooth: hci4: command tx timeout
[  260.921557][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1374'.
[  261.050441][ T5149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  261.067453][ T5149] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  261.077530][ T5149] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  261.091474][ T5149] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  261.115342][ T5149] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  261.125738][ T5149] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  261.636420][ T6706] hsr_slave_0: left promiscuous mode
[  261.665290][ T6706] hsr_slave_1: left promiscuous mode
[  261.671274][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  261.705438][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_0
[  261.725992][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  261.733467][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_1
[  261.842458][ T6706] veth1_macvtap: left promiscuous mode
[  261.886545][ T6706] veth0_macvtap: left promiscuous mode
[  261.892322][ T6706] veth1_vlan: left promiscuous mode
[  261.906417][ T6706] veth0_vlan: left promiscuous mode
[  262.703419][ T6706] team0 (unregistering): Port device team_slave_1 removed
[  262.754232][ T6706] team0 (unregistering): Port device team_slave_0 removed
[  262.915967][ T5149] Bluetooth: hci4: command tx timeout
[  263.228135][ T5149] Bluetooth: hci0: command tx timeout
[  263.272312][ T6695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.306429][ T6695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.330955][T11132] xfrm0 speed is unknown, defaulting to 1000
[  263.459119][ T6695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.491197][ T6695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.605078][T11177] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1388'.
[  263.676869][T11178] mac80211_hwsim hwsim21 syzkaller0: left promiscuous mode
[  263.706778][T11178] mac80211_hwsim hwsim21 syzkaller0: left allmulticast mode
[  263.865340][T11188] netlink: 'syz.5.1387': attribute type 10 has an invalid length.
[  263.882642][T11186] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1387'.
[  263.922335][T11188] team0: Cannot enslave team device to itself
[  264.061593][T11132] chnl_net:caif_netlink_parms(): no params data found
[  264.233379][T11132] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.243499][T11132] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.256890][T11132] bridge_slave_0: entered allmulticast mode
[  264.264147][T11132] bridge_slave_0: entered promiscuous mode
[  264.328456][T11132] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.344961][T11132] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.356017][T11132] bridge_slave_1: entered allmulticast mode
[  264.372216][T11132] bridge_slave_1: entered promiscuous mode
[  264.378852][T11207] FAULT_INJECTION: forcing a failure.
[  264.378852][T11207] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  264.402339][T11207] CPU: 0 UID: 0 PID: 11207 Comm: syz.3.1394 Not tainted 6.14.0-rc1-syzkaller-00102-g9dfedb8dc78b #0
[  264.402364][T11207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  264.402374][T11207] Call Trace:
[  264.402380][T11207]  <TASK>
[  264.402388][T11207]  dump_stack_lvl+0x241/0x360
[  264.402414][T11207]  ? __pfx_dump_stack_lvl+0x10/0x10
[  264.402432][T11207]  ? __pfx__printk+0x10/0x10
[  264.402457][T11207]  ? __pfx_lock_release+0x10/0x10
[  264.402487][T11207]  should_fail_ex+0x40a/0x550
[  264.402510][T11207]  _copy_from_iter+0x1e9/0x1c20
[  264.402533][T11207]  ? __virt_addr_valid+0x183/0x530
[  264.402565][T11207]  ? __alloc_skb+0x28f/0x440
[  264.402587][T11207]  ? __pfx__copy_from_iter+0x10/0x10
[  264.402612][T11207]  ? __virt_addr_valid+0x183/0x530
[  264.402632][T11207]  ? __virt_addr_valid+0x183/0x530
[  264.402652][T11207]  ? __virt_addr_valid+0x45f/0x530
[  264.402675][T11207]  ? __phys_addr_symbol+0x2f/0x70
[  264.402696][T11207]  ? __check_object_size+0x47a/0x730
[  264.402715][T11207]  netlink_sendmsg+0x73d/0xcb0
[  264.402744][T11207]  ? __pfx_netlink_sendmsg+0x10/0x10
[  264.402764][T11207]  ? aa_sock_msg_perm+0x91/0x160
[  264.402791][T11207]  ? __pfx_netlink_sendmsg+0x10/0x10
[  264.402805][T11207]  __sock_sendmsg+0x221/0x270
[  264.402832][T11207]  ____sys_sendmsg+0x52a/0x7e0
[  264.402857][T11207]  ? __pfx_____sys_sendmsg+0x10/0x10
[  264.402872][T11207]  ? __fget_files+0x2a/0x410
[  264.402892][T11207]  ? __fget_files+0x2a/0x410
[  264.402918][T11207]  __sys_sendmsg+0x269/0x350
[  264.402940][T11207]  ? __pfx___sys_sendmsg+0x10/0x10
[  264.402987][T11207]  ? do_sys_openat2+0x17a/0x1d0
[  264.403030][T11207]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  264.403053][T11207]  ? do_syscall_64+0x100/0x230
[  264.403077][T11207]  ? do_syscall_64+0xb6/0x230
[  264.403101][T11207]  do_syscall_64+0xf3/0x230
[  264.403121][T11207]  ? clear_bhb_loop+0x35/0x90
[  264.403146][T11207]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.403166][T11207] RIP: 0033:0x7fb26478cde9
[  264.403181][T11207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  264.403195][T11207] RSP: 002b:00007fb26552f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  264.403214][T11207] RAX: ffffffffffffffda RBX: 00007fb2649a5fa0 RCX: 00007fb26478cde9
[  264.403226][T11207] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000003
[  264.403236][T11207] RBP: 00007fb26552f090 R08: 0000000000000000 R09: 0000000000000000
[  264.403247][T11207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  264.403256][T11207] R13: 0000000000000000 R14: 00007fb2649a5fa0 R15: 00007ffd37aa2068
[  264.403283][T11207]  </TASK>
[  264.753791][ T6695] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.832453][ T6695] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.854069][T11132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  264.868207][T11132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  264.904230][ T6695] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.932698][T11132] team0: Port device team_slave_0 added
[  264.947157][T11132] team0: Port device team_slave_1 added
[  264.993817][ T6695] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.014366][T11132] batman_adv: batadv0: Adding interface: batadv_slave_0
[  265.021811][T11132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.050929][T11132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  265.064176][T11132] batman_adv: batadv0: Adding interface: batadv_slave_1
[  265.076706][T11132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.103031][T11132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  265.144361][T11132] hsr_slave_0: entered promiscuous mode
[  265.153744][T11132] hsr_slave_1: entered promiscuous mode
[  265.240528][ T6695] bridge_slave_1: left allmulticast mode
[  265.247153][ T6695] bridge_slave_1: left promiscuous mode
[  265.252882][ T6695] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.263549][ T6695] bridge_slave_0: left allmulticast mode
[  265.269692][ T6695] bridge_slave_0: left promiscuous mode
[  265.276097][ T6695] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.304772][ T5149] Bluetooth: hci0: command tx timeout
[  265.640286][ T6695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  265.650796][ T6695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  265.662943][ T6695] bond0 (unregistering): Released all slaves
[  265.954157][ T6695] hsr_slave_0: left promiscuous mode
[  265.960913][ T6695] hsr_slave_1: left promiscuous mode
[  265.967790][ T6695] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  265.977467][ T6695] batman_adv: batadv0: Removing interface: batadv_slave_0
[  265.986127][ T6695] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  265.993561][ T6695] batman_adv: batadv0: Removing interface: batadv_slave_1
[  266.016255][ T6695] veth1_macvtap: left promiscuous mode
[  266.021811][ T6695] veth0_macvtap: left promiscuous mode
[  266.028015][ T6695] veth1_vlan: left promiscuous mode
[  266.033424][ T6695] veth0_vlan: left promiscuous mode
[  266.411637][T11213] netlink: 'syz.3.1397': attribute type 1 has an invalid length.
[  266.447386][T11213] netlink: 'syz.3.1397': attribute type 3 has an invalid length.
[  266.472236][T11213] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1397'.
[  266.489430][T11213] NCSI netlink: No device for ifindex 813332851
[  266.563898][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  266.589685][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  266.599064][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  266.628643][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  266.663540][ T5847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  266.671728][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  266.930262][ T6695] team0 (unregistering): Port device team_slave_1 removed
[  266.983957][ T6695] team0 (unregistering): Port device team_slave_0 removed
[  267.122978][T11235] xt_CT: No such helper "snmp"
[  267.390275][ T5149] Bluetooth: hci0: command tx timeout
[  267.572341][T11227] xfrm0 speed is unknown, defaulting to 1000
[  267.878389][T11253] FAULT_INJECTION: forcing a failure.
[  267.878389][T11253] name failslab, interval 1, probability 0, space 0, times 0
[  267.892946][T11253] CPU: 1 UID: 0 PID: 11253 Comm: syz.5.1407 Not tainted 6.14.0-rc1-syzkaller-00102-g9dfedb8dc78b #0
[  267.892968][T11253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  267.892978][T11253] Call Trace:
[  267.892984][T11253]  <TASK>
[  267.892990][T11253]  dump_stack_lvl+0x241/0x360
[  267.893015][T11253]  ? __pfx_dump_stack_lvl+0x10/0x10
[  267.893030][T11253]  ? __pfx__printk+0x10/0x10
[  267.893061][T11253]  should_fail_ex+0x40a/0x550
[  267.893084][T11253]  should_failslab+0xac/0x100
[  267.893099][T11253]  ? skb_clone+0x20c/0x390
[  267.893114][T11253]  kmem_cache_alloc_noprof+0x70/0x380
[  267.893135][T11253]  skb_clone+0x20c/0x390
[  267.893153][T11253]  __netlink_deliver_tap+0x3cc/0x7f0
[  267.893178][T11253]  ? netlink_deliver_tap+0x2e/0x1b0
[  267.893192][T11253]  netlink_deliver_tap+0x19d/0x1b0
[  267.893206][T11253]  netlink_unicast+0x7c4/0x990
[  267.893234][T11253]  ? __pfx_netlink_unicast+0x10/0x10
[  267.893252][T11253]  ? __virt_addr_valid+0x45f/0x530
[  267.893274][T11253]  ? __phys_addr_symbol+0x2f/0x70
[  267.893292][T11253]  ? __check_object_size+0x47a/0x730
[  267.893314][T11253]  netlink_sendmsg+0x8e4/0xcb0
[  267.893340][T11253]  ? __pfx_netlink_sendmsg+0x10/0x10
[  267.893357][T11253]  ? aa_sock_msg_perm+0x91/0x160
[  267.893392][T11253]  ? __pfx_netlink_sendmsg+0x10/0x10
[  267.893410][T11253]  __sock_sendmsg+0x221/0x270
[  267.893431][T11253]  ____sys_sendmsg+0x52a/0x7e0
[  267.893453][T11253]  ? __pfx_____sys_sendmsg+0x10/0x10
[  267.893467][T11253]  ? __fget_files+0x2a/0x410
[  267.893486][T11253]  ? __fget_files+0x2a/0x410
[  267.893510][T11253]  __sys_sendmsg+0x269/0x350
[  267.893531][T11253]  ? __pfx___sys_sendmsg+0x10/0x10
[  267.893561][T11253]  ? do_sys_openat2+0x17a/0x1d0
[  267.893602][T11253]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  267.893623][T11253]  ? do_syscall_64+0x100/0x230
[  267.893646][T11253]  ? do_syscall_64+0xb6/0x230
[  267.893670][T11253]  do_syscall_64+0xf3/0x230
[  267.893700][T11253]  ? clear_bhb_loop+0x35/0x90
[  267.893724][T11253]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.893742][T11253] RIP: 0033:0x7f357f38cde9
[  267.893757][T11253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  267.893770][T11253] RSP: 002b:00007f35801cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  267.893788][T11253] RAX: ffffffffffffffda RBX: 00007f357f5a5fa0 RCX: 00007f357f38cde9
[  267.893800][T11253] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000003
[  267.893810][T11253] RBP: 00007f35801cf090 R08: 0000000000000000 R09: 0000000000000000
[  267.893820][T11253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  267.893830][T11253] R13: 0000000000000000 R14: 00007f357f5a5fa0 R15: 00007ffd78becd38
[  267.893858][T11253]  </TASK>
[  268.197186][T11255] IPVS: lc: FWM 4 0x00000004 - no destination available
[  268.208116][T11227] chnl_net:caif_netlink_parms(): no params data found
[  268.234095][T11253] netlink: zone id is out of range
[  268.244210][T11253] netlink: zone id is out of range
[  268.251851][T11253] netlink: del zone limit has 4 unknown bytes
[  268.311783][T11258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1408'.
[  268.400426][T11261] 8021q: VLANs not supported on ipvlan0
[  268.421874][T11263] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1410'.
[  268.453566][T11132] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  268.540333][T11132] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  268.574272][T11132] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  268.636834][T11132] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  268.656335][T11227] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.671315][T11227] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.682081][T11227] bridge_slave_0: entered allmulticast mode
[  268.696527][T11227] bridge_slave_0: entered promiscuous mode
[  268.732887][T11227] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.742511][T11227] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.749748][ T5149] Bluetooth: hci4: command tx timeout
[  268.760236][T11227] bridge_slave_1: entered allmulticast mode
[  268.767309][T11227] bridge_slave_1: entered promiscuous mode
[  268.858070][T11227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  268.877609][T11227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  268.980033][T11227] team0: Port device team_slave_0 added
[  268.983446][T11284] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1418'.
[  269.019013][T11227] team0: Port device team_slave_1 added
[  269.024789][T11288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1419'.
[  269.098013][T11227] batman_adv: batadv0: Adding interface: batadv_slave_0
[  269.110994][T11227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  269.162676][T11227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  269.188350][T11227] batman_adv: batadv0: Adding interface: batadv_slave_1
[  269.202090][T11227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  269.229496][T11227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  269.280002][T11132] 8021q: adding VLAN 0 to HW filter on device bond0
[  269.389446][T11227] hsr_slave_0: entered promiscuous mode
[  269.412894][T11227] hsr_slave_1: entered promiscuous mode
[  269.420575][T11227] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  269.444709][T11227] Cannot create hsr debugfs directory
[  269.466400][ T5149] Bluetooth: hci0: command tx timeout
[  269.508380][T11132] 8021q: adding VLAN 0 to HW filter on device team0
[  269.577445][T11307] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1424'.
[  269.621082][T11310] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1424'.
[  269.635828][T11310] netlink: 'syz.3.1424': attribute type 1 has an invalid length.
[  269.643594][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1424'.
[  269.691580][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.698751][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state
[  269.727563][T11310] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1424'.
[  269.758157][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.765337][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state
[  269.818987][T11315] openvswitch: netlink: Duplicate key (type 32).
[  269.963741][T11327] netlink: 'syz.6.1429': attribute type 3 has an invalid length.
[  270.454255][T11347] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.1435'.
[  270.519322][T11132] 8021q: adding VLAN 0 to HW filter on device batadv0
[  270.728664][T11132] veth0_vlan: entered promiscuous mode
[  270.806639][T11227] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  270.832795][ T5149] Bluetooth: hci4: command tx timeout
[  270.842783][T11227] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  270.875415][T11227] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  270.886972][T11227] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  270.916767][T11132] veth1_vlan: entered promiscuous mode
[  270.963349][T11364] netlink: 'syz.5.1442': attribute type 21 has an invalid length.
[  270.975254][T11364] netlink: 'syz.5.1442': attribute type 11 has an invalid length.
[  271.073868][T11132] veth0_macvtap: entered promiscuous mode
[  271.102272][T11132] veth1_macvtap: entered promiscuous mode
[  271.172329][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  271.217524][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.252026][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  271.275774][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.294240][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  271.315563][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.326533][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  271.333615][T11373] netlink: zone id is out of range
[  271.343931][T11373] netlink: zone id is out of range
[  271.347070][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.354743][T11373] netlink: del zone limit has 4 unknown bytes
[  271.389399][T11132] batman_adv: batadv0: Interface activated: batadv_slave_0
[  271.430481][T11227] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.563841][T11375] dccp_v4_rcv: dropped packet with invalid checksum
[  271.597670][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.614983][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.635086][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.646537][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.672574][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.705206][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.717886][T11132] batman_adv: batadv0: Interface activated: batadv_slave_1
[  271.738051][T11132] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  271.756350][T11132] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  271.779483][T11132] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  271.790276][T11132] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  271.838008][T11381] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  271.856746][T11227] 8021q: adding VLAN 0 to HW filter on device team0
[  271.892588][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.899774][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state
[  271.936043][ T6698] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.943157][ T6698] bridge0: port 2(bridge_slave_1) entered forwarding state
[  272.164005][T11398] netlink: 'syz.3.1449': attribute type 1 has an invalid length.
[  272.170481][ T6706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.175519][T11227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  272.191939][ T6706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.201988][T11398] netlink: 'syz.3.1449': attribute type 1 has an invalid length.
[  272.279480][T11398] IPv6: NLM_F_CREATE should be specified when creating new route
[  272.347155][T11409] netlink: zone id is out of range
[  272.352718][ T6692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.382828][ T6692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.702120][T11425] __nla_validate_parse: 2 callbacks suppressed
[  272.702144][T11425] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1457'.
[  272.732951][T11227] 8021q: adding VLAN 0 to HW filter on device batadv0
[  272.886139][T11430] netlink: 'syz.6.1458': attribute type 1 has an invalid length.
[  272.905376][ T5149] Bluetooth: hci4: command tx timeout
[  272.928654][T11430] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1458'.
[  272.977138][ T6692] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.154119][ T6692] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.326105][T11227] veth0_vlan: entered promiscuous mode
[  273.337625][T11227] veth1_vlan: entered promiscuous mode
[  273.363931][T11227] veth0_macvtap: entered promiscuous mode
[  273.372515][T11227] veth1_macvtap: entered promiscuous mode
[  273.391269][T11227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.402843][T11227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.414932][T11227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.426099][T11227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.436345][T11227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.446848][T11227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.457451][T11227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.468833][T11227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.480020][T11227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.491146][T11227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.503613][T11227] batman_adv: batadv0: Interface activated: batadv_slave_0
[  273.527640][ T6692] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.544046][T11227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.556298][T11227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.567710][T11227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.578682][T11227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.589359][T11227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.600496][T11227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.611407][T11227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.623921][T11227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.635664][T11227] batman_adv: batadv0: Interface activated: batadv_slave_1
[  273.649263][T11227] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  273.659258][T11227] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  273.668252][T11227] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  273.678014][T11227] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  273.709975][ T6692] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.800309][ T6706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.815250][ T6706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.874144][ T3596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.883197][ T3596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.913363][ T6692] bridge_slave_1: left allmulticast mode
[  273.928376][ T6692] bridge_slave_1: left promiscuous mode
[  273.934156][ T6692] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.954040][ T6692] bridge_slave_0: left allmulticast mode
[  273.960996][ T6692] bridge_slave_0: left promiscuous mode
[  273.972738][ T6692] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.350993][ T6692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  274.385968][ T6692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  274.424069][ T6692] bond0 (unregistering): Released all slaves
[  274.536864][T11453] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1461'.
[  274.778159][T11457] net_ratelimit: 2 callbacks suppressed
[  274.778181][T11457] netlink: zone id is out of range
[  274.821029][T11457] netlink: zone id is out of range
[  274.828671][T11457] netlink: del zone limit has 4 unknown bytes
[  275.002075][ T6692] hsr_slave_0: left promiscuous mode
[  275.008902][ T6692] hsr_slave_1: left promiscuous mode
[  275.027186][ T6692] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  275.033311][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  275.040409][ T6692] batman_adv: batadv0: Removing interface: batadv_slave_0
[  275.046952][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  275.057634][ T6692] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  275.058041][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  275.074937][ T6692] batman_adv: batadv0: Removing interface: batadv_slave_1
[  275.075561][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  275.092398][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  275.099901][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  275.129761][ T6692] veth1_macvtap: left promiscuous mode
[  275.135447][ T6692] veth0_macvtap: left promiscuous mode
[  275.140995][ T6692] veth1_vlan: left promiscuous mode
[  275.147112][ T6692] veth0_vlan: left promiscuous mode
[  275.583155][ T6692] team0 (unregistering): Port device team_slave_1 removed
[  275.633767][ T6692] team0 (unregistering): Port device team_slave_0 removed
[  276.117164][T11458] xfrm0 speed is unknown, defaulting to 1000
[  276.246829][T11458] chnl_net:caif_netlink_parms(): no params data found
[  276.333473][T11458] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.341212][T11458] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.349331][T11458] bridge_slave_0: entered allmulticast mode
[  276.357454][T11458] bridge_slave_0: entered promiscuous mode
[  276.366791][T11458] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.373865][T11458] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.388070][T11458] bridge_slave_1: entered allmulticast mode
[  276.397080][T11458] bridge_slave_1: entered promiscuous mode
[  276.428714][T11458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  276.441935][T11458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  276.652653][T11458] team0: Port device team_slave_0 added
[  276.708034][T11458] team0: Port device team_slave_1 added
[  276.800381][T11484] IPv6: sit2: Disabled Multicast RS
[  276.822658][T11458] batman_adv: batadv0: Adding interface: batadv_slave_0
[  276.844689][T11458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.882796][T11458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  277.046751][T11491] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1472'.
[  277.066207][T11495] x_tables: duplicate underflow at hook 1
[  277.068974][ T6692] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.107803][T11458] batman_adv: batadv0: Adding interface: batadv_slave_1
[  277.117141][T11458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  277.146387][ T5847] Bluetooth: hci0: command tx timeout
[  277.161500][ T5149] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  277.171996][ T5149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  277.180539][ T5149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  277.188649][ T5149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  277.198076][ T5149] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  277.206013][ T5149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  277.229799][T11458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  277.280597][ T6692] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.309760][T11501] netlink: zone id is out of range
[  277.323731][T11503] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1476'.
[  277.333359][T11501] netlink: zone id is out of range
[  277.347255][T11501] netlink: del zone limit has 4 unknown bytes
[  277.422261][ T6692] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.479610][T11458] hsr_slave_0: entered promiscuous mode
[  277.490944][T11458] hsr_slave_1: entered promiscuous mode
[  277.543963][T11507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1477'.
[  277.555356][T11507] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1477'.
[  277.576456][ T6692] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.598867][T11498] xfrm0 speed is unknown, defaulting to 1000
[  277.946155][ T6692] bridge_slave_1: left allmulticast mode
[  277.951852][ T6692] bridge_slave_1: left promiscuous mode
[  277.960298][T11525] can: request_module (can-proto-4) failed.
[  277.967572][ T6692] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.999694][ T6692] bridge_slave_0: left allmulticast mode
[  278.005763][ T6692] bridge_slave_0: left promiscuous mode
[  278.011594][ T6692] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.427490][ T6692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  278.440278][ T6692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  278.450798][ T6692] bond0 (unregistering): Released all slaves
[  278.481805][T11530] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10
[  278.494263][T11530] tipc: Bearer <udp:syz2>: trying with adjusted priority
[  278.506683][T11530] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  278.696025][T11546] netlink: zone id is out of range
[  278.701301][T11546] netlink: zone id is out of range
[  278.711778][T11498] chnl_net:caif_netlink_parms(): no params data found
[  278.742527][T11546] netlink: del zone limit has 4 unknown bytes
[  279.014681][ T6692] hsr_slave_0: left promiscuous mode
[  279.031283][ T6692] hsr_slave_1: left promiscuous mode
[  279.039246][ T6692] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  279.055656][ T6692] batman_adv: batadv0: Removing interface: batadv_slave_0
[  279.089986][ T6692] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  279.105983][ T6692] batman_adv: batadv0: Removing interface: batadv_slave_1
[  279.148459][T11568] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  279.150364][ T6692] veth1_macvtap: left promiscuous mode
[  279.186081][ T6692] veth0_macvtap: left promiscuous mode
[  279.191745][ T6692] veth1_vlan: left promiscuous mode
[  279.201321][ T6692] veth0_vlan: left promiscuous mode
[  279.225944][ T5149] Bluetooth: hci4: command tx timeout
[  279.701364][ T6692] team0 (unregistering): Port device team_slave_1 removed
[  279.751017][ T6692] team0 (unregistering): Port device team_slave_0 removed
[  280.425459][T11498] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.446410][T11498] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.471798][T11498] bridge_slave_0: entered allmulticast mode
[  280.480371][T11498] bridge_slave_0: entered promiscuous mode
[  280.541521][T11498] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.560612][T11498] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.580713][T11498] bridge_slave_1: entered allmulticast mode
[  280.598282][T11498] bridge_slave_1: entered promiscuous mode
[  280.721312][T11498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  280.749451][T11498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  280.813540][T11458] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  280.819431][T11599] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1506'.
[  280.834092][T11599] netlink: 'syz.6.1506': attribute type 3 has an invalid length.
[  280.867225][T11458] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  280.893448][T11458] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  280.937419][T11458] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  280.973818][T11498] team0: Port device team_slave_0 added
[  281.033105][T11498] team0: Port device team_slave_1 added
[  281.100794][T11498] batman_adv: batadv0: Adding interface: batadv_slave_0
[  281.109396][T11498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.138686][T11498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  281.213657][T11498] batman_adv: batadv0: Adding interface: batadv_slave_1
[  281.235285][T11498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.299783][T11498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  281.310654][ T5149] Bluetooth: hci4: command tx timeout
[  281.483945][T11498] hsr_slave_0: entered promiscuous mode
[  281.501832][T11498] hsr_slave_1: entered promiscuous mode
[  281.519056][T11498] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  281.532613][T11498] Cannot create hsr debugfs directory
[  281.620910][T11458] 8021q: adding VLAN 0 to HW filter on device bond0
[  281.697424][T11630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1515'.
[  281.755410][T11458] 8021q: adding VLAN 0 to HW filter on device team0
[  281.846373][ T6706] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.853535][ T6706] bridge0: port 1(bridge_slave_0) entered forwarding state
[  281.951674][ T6695] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.958882][ T6695] bridge0: port 2(bridge_slave_1) entered forwarding state
[  282.431345][T11458] 8021q: adding VLAN 0 to HW filter on device batadv0
[  282.524265][T11657] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1524'.
[  282.646974][T11498] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  282.667394][T11498] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  282.690952][T11498] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  282.747767][T11498] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  282.772578][T11458] veth0_vlan: entered promiscuous mode
[  282.790242][T11670] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1527'.
[  282.817009][T11458] veth1_vlan: entered promiscuous mode
[  282.918617][T11458] veth0_macvtap: entered promiscuous mode
[  282.958839][T11458] veth1_macvtap: entered promiscuous mode
[  283.018677][T11458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.038879][T11458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.054290][T11458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.066044][T11458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.076346][T11458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.086987][T11458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.097681][T11458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  283.109157][T11458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.122519][T11458] batman_adv: batadv0: Interface activated: batadv_slave_0
[  283.135681][T11498] 8021q: adding VLAN 0 to HW filter on device bond0
[  283.163782][T11458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.181969][T11458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.201831][T11458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.213157][T11458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.233009][T11458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  283.244885][T11458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.266946][T11458] batman_adv: batadv0: Interface activated: batadv_slave_1
[  283.287278][T11498] 8021q: adding VLAN 0 to HW filter on device team0
[  283.298517][T11690] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  283.308862][T11691] netlink: 'syz.5.1531': attribute type 2 has an invalid length.
[  283.312310][T11458] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  283.318325][T11691] netlink: 'syz.5.1531': attribute type 9 has an invalid length.
[  283.333279][T11458] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  283.344790][T11691] netlink: 210620 bytes leftover after parsing attributes in process `syz.5.1531'.
[  283.351268][T11458] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  283.363157][T11458] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.383772][T11690] mac80211_hwsim hwsim21 syzkaller0: entered promiscuous mode
[  283.393826][T11690] mac80211_hwsim hwsim21 syzkaller0: entered allmulticast mode
[  283.401594][ T5847] Bluetooth: hci4: command tx timeout
[  283.427034][ T6706] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.434170][ T6706] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.478342][ T6706] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.485513][ T6706] bridge0: port 2(bridge_slave_1) entered forwarding state
[  283.601808][ T3596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.634081][ T3596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.708612][T11700] netlink: 'syz.5.1535': attribute type 1 has an invalid length.
[  283.726409][T11703] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  283.746215][ T3596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.754438][ T3596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.794999][T11703] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  284.004152][T11717] netlink: zone id is out of range
[  284.036215][T11717] netlink: zone id is out of range
[  284.041439][T11717] netlink: del zone limit has 4 unknown bytes
[  284.223436][T11498] 8021q: adding VLAN 0 to HW filter on device batadv0
[  284.285082][T11726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1540'.
[  284.568497][ T6706] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.703347][ T6706] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.749322][T11498] veth0_vlan: entered promiscuous mode
[  284.763143][T11498] veth1_vlan: entered promiscuous mode
[  284.790092][T11498] veth0_macvtap: entered promiscuous mode
[  284.798557][T11498] veth1_macvtap: entered promiscuous mode
[  284.819472][T11498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  284.830962][T11498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.841089][T11498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  284.851614][T11498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.861758][T11498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  284.872364][T11498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.883008][T11498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  284.893686][T11498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.903704][T11498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  284.918923][T11498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.930398][T11498] batman_adv: batadv0: Interface activated: batadv_slave_0
[  284.944782][T11498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  284.955996][T11498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.966853][T11498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  284.977571][T11498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.988260][T11498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  284.999221][T11498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.009203][T11498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  285.019871][T11498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.030832][T11498] batman_adv: batadv0: Interface activated: batadv_slave_1
[  285.041419][T11498] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  285.050291][T11498] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  285.059550][T11498] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  285.068732][T11498] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  285.093603][ T6706] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.170174][ T6706] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.199777][ T6692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.214792][ T6692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.241393][ T6692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.249747][ T6692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.343732][ T6706] bridge_slave_1: left allmulticast mode
[  285.351084][ T6706] bridge_slave_1: left promiscuous mode
[  285.357534][ T6706] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.368281][ T6706] bridge_slave_0: left allmulticast mode
[  285.373946][ T6706] bridge_slave_0: left promiscuous mode
[  285.380126][ T6706] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.464993][ T5847] Bluetooth: hci4: command 0x0419 tx timeout
[  285.761581][ T6706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  285.772109][ T6706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  285.782936][ T6706] bond0 (unregistering): Released all slaves
[  285.971233][T11749] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1547'.
[  286.186400][T11759] netlink: 192 bytes leftover after parsing attributes in process `syz.6.1548'.
[  286.215932][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1548'.
[  286.243767][T11759] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1548'.
[  286.261784][T11759] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1548'.
[  286.299196][ T6706] hsr_slave_0: left promiscuous mode
[  286.333997][ T6706] hsr_slave_1: left promiscuous mode
[  286.345884][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.363647][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.395909][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.403393][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.451179][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  286.461047][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  286.469626][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  286.478884][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  286.488638][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  286.496103][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  286.517728][ T6706] veth1_macvtap: left promiscuous mode
[  286.534994][ T6706] veth0_macvtap: left promiscuous mode
[  286.540644][ T6706] veth1_vlan: left promiscuous mode
[  286.553076][ T6706] veth0_vlan: left promiscuous mode
[  287.023961][ T6706] team0 (unregistering): Port device team_slave_1 removed
[  287.071336][ T6706] team0 (unregistering): Port device team_slave_0 removed
[  287.573696][T11762] xfrm0 speed is unknown, defaulting to 1000
[  287.745615][T11762] chnl_net:caif_netlink_parms(): no params data found
[  287.809794][T11762] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.817817][T11762] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.826504][T11762] bridge_slave_0: entered allmulticast mode
[  287.833151][T11762] bridge_slave_0: entered promiscuous mode
[  287.841265][T11762] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.850844][T11762] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.858169][T11762] bridge_slave_1: entered allmulticast mode
[  287.865048][T11762] bridge_slave_1: entered promiscuous mode
[  287.891815][T11762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  287.904016][T11762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  287.941403][T11762] team0: Port device team_slave_0 added
[  287.988780][T11762] team0: Port device team_slave_1 added
[  288.087759][T11783] netlink: 'syz.3.1551': attribute type 10 has an invalid length.
[  288.107194][T11784] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1550'.
[  288.119503][ T6706] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.217867][T11762] batman_adv: batadv0: Adding interface: batadv_slave_0
[  288.245226][T11762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.291116][T11762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  288.358625][ T6706] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.391895][T11762] batman_adv: batadv0: Adding interface: batadv_slave_1
[  288.402637][T11762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.460596][ T5149] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  288.472002][ T5149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  288.480496][ T5149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  288.489960][ T5149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  288.499878][ T5149] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  288.508284][ T5149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  288.530770][T11762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  288.650147][ T6706] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.754243][T11762] hsr_slave_0: entered promiscuous mode
[  288.776330][T11762] hsr_slave_1: entered promiscuous mode
[  288.841516][ T6706] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.880682][T11794] xfrm0 speed is unknown, defaulting to 1000
[  289.285595][ T6706] bridge_slave_1: left allmulticast mode
[  289.295347][ T6706] bridge_slave_1: left promiscuous mode
[  289.301126][ T6706] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.312411][ T6706] bridge_slave_0: left allmulticast mode
[  289.334929][ T6706] bridge_slave_0: left promiscuous mode
[  289.341434][ T6706] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.472220][T11832] netlink: 'syz.6.1563': attribute type 10 has an invalid length.
[  289.960852][ T6706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  289.974168][ T6706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  289.984257][ T6706] bond0 (unregistering): Released all slaves
[  290.010653][T11832] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.027109][T11832] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  290.225847][T11846] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1567'.
[  290.342578][T11794] chnl_net:caif_netlink_parms(): no params data found
[  290.428264][ T6706] hsr_slave_0: left promiscuous mode
[  290.439915][ T6706] hsr_slave_1: left promiscuous mode
[  290.456339][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  290.463820][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_0
[  290.473622][T11858] netlink: zone id is out of range
[  290.479550][T11858] netlink: zone id is out of range
[  290.486677][T11858] netlink: del zone limit has 4 unknown bytes
[  290.487415][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  290.508276][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_1
[  290.550206][ T6706] veth1_macvtap: left promiscuous mode
[  290.559535][ T6706] veth0_macvtap: left promiscuous mode
[  290.566951][ T6706] veth1_vlan: left promiscuous mode
[  290.572287][ T6706] veth0_vlan: left promiscuous mode
[  290.585461][ T5149] Bluetooth: hci4: command tx timeout
[  290.797208][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1572'.
[  290.820798][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1572'.
[  292.117238][ T6706] team0 (unregistering): Port device team_slave_1 removed
[  292.167961][ T6706] team0 (unregistering): Port device team_slave_0 removed
[  292.633707][T11856] IPv6: NLM_F_CREATE should be specified when creating new route
[  292.642991][T11867] mac80211_hwsim hwsim21 syzkaller0: left promiscuous mode
[  292.654694][T11867] mac80211_hwsim hwsim21 syzkaller0: left allmulticast mode
[  292.672109][T11870] netlink: 'syz.5.1571': attribute type 29 has an invalid length.
[  292.674714][ T5149] Bluetooth: hci4: command tx timeout
[  292.996726][T11890] syz.3.1578 (11890) used obsolete PPPIOCDETACH ioctl
[  293.018862][T11794] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.039051][T11794] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.058310][T11794] bridge_slave_0: entered allmulticast mode
[  293.066089][T11794] bridge_slave_0: entered promiscuous mode
[  293.115768][T11794] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.123615][T11794] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.132721][T11794] bridge_slave_1: entered allmulticast mode
[  293.137602][T11897] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1580'.
[  293.140533][T11794] bridge_slave_1: entered promiscuous mode
[  293.268472][T11794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  293.294102][T11762] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  293.317176][T11762] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  293.333069][T11794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  293.380134][T11762] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  293.422008][T11762] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  293.465222][T11794] team0: Port device team_slave_0 added
[  293.492908][T11794] team0: Port device team_slave_1 added
[  293.595585][T11918] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1587'.
[  293.609229][T11794] batman_adv: batadv0: Adding interface: batadv_slave_0
[  293.628133][T11794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.715110][T11794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  293.761430][T11794] batman_adv: batadv0: Adding interface: batadv_slave_1
[  293.786197][T11794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.830668][T11794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  293.866533][T11928] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1590'.
[  294.744806][ T5149] Bluetooth: hci4: command tx timeout
[  294.837996][T11794] hsr_slave_0: entered promiscuous mode
[  294.846219][T11794] hsr_slave_1: entered promiscuous mode
[  294.853105][T11794] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  294.862444][T11794] Cannot create hsr debugfs directory
[  295.071578][T11762] 8021q: adding VLAN 0 to HW filter on device bond0
[  295.147919][T11949] bond6 (unregistering): Released all slaves
[  295.165047][T11955] x_tables: duplicate underflow at hook 1
[  295.191140][T11959] Bluetooth: MGMT ver 1.23
[  295.217113][T11961] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  295.238985][T11961] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  295.256386][T11762] 8021q: adding VLAN 0 to HW filter on device team0
[  295.304226][ T6706] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.311432][ T6706] bridge0: port 1(bridge_slave_0) entered forwarding state
[  295.330676][ T6706] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.337887][ T6706] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.761940][T11762] 8021q: adding VLAN 0 to HW filter on device batadv0
[  295.796184][T11794] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  295.810682][T11794] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  295.821735][T11794] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  295.848445][T11794] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  295.912698][T11762] veth0_vlan: entered promiscuous mode
[  295.943403][T11762] veth1_vlan: entered promiscuous mode
[  296.002497][T11762] veth0_macvtap: entered promiscuous mode
[  296.032236][T11762] veth1_macvtap: entered promiscuous mode
[  296.046740][T11986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1606'.
[  296.072013][T11794] 8021q: adding VLAN 0 to HW filter on device bond0
[  296.126477][T11762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.146627][T11762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.162293][T11762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.179205][T11762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.193025][T11762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.209660][T11762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.218854][T11994] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1608'.
[  296.228942][T11762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.228965][T11762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.245069][T11762] batman_adv: batadv0: Interface activated: batadv_slave_0
[  296.260712][T11794] 8021q: adding VLAN 0 to HW filter on device team0
[  296.280151][T11762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.299841][T11762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.321704][T11762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.341228][T11762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.370127][T11762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.388856][T11762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.406022][T11762] batman_adv: batadv0: Interface activated: batadv_slave_1
[  296.443064][ T6705] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.450253][ T6705] bridge0: port 1(bridge_slave_0) entered forwarding state
[  296.472485][T11762] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  296.489952][T11762] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  296.503509][T11762] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  296.514772][T11762] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  296.560156][ T6695] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.567343][ T6695] bridge0: port 2(bridge_slave_1) entered forwarding state
[  296.789613][ T6697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.823036][ T6697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.833420][ T5149] Bluetooth: hci4: command tx timeout
[  296.900300][ T6695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.941832][ T6695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.013324][T11794] 8021q: adding VLAN 0 to HW filter on device batadv0
[  297.308455][T12022] xfrm0 speed is unknown, defaulting to 1000
[  297.420392][T11794] veth0_vlan: entered promiscuous mode
[  297.499117][T11794] veth1_vlan: entered promiscuous mode
[  297.527561][T11794] veth0_macvtap: entered promiscuous mode
[  297.568983][T11794] veth1_macvtap: entered promiscuous mode
[  297.587190][T12034] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1617'.
[  297.658998][T11794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  297.696486][T11794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.720414][T11794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  297.737481][T11794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.753433][T11794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  297.774462][T11794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.795066][T11794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  297.806169][T11794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.817657][T11794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  297.829613][T11794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.870629][T11794] batman_adv: batadv0: Interface activated: batadv_slave_0
[  297.895475][T12040] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1619'.
[  297.904468][T12040] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1619'.
[  297.929815][T12041] smc: net device bond0 applied user defined pnetid SYZ0
[  297.965734][T12045] syzkaller0: entered promiscuous mode
[  297.971261][T12045] syzkaller0: entered allmulticast mode
[  298.003219][T11794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  298.013817][T11794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.024027][T11794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  298.035178][T11794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.045201][T11794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  298.055822][T11794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.065796][T11794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  298.076438][T11794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  298.087773][T11794] batman_adv: batadv0: Interface activated: batadv_slave_1
[  298.099114][T11794] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  298.108868][T11794] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  298.119690][T11794] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  298.129475][T11794] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  299.508877][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  299.529266][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  299.539821][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  299.556130][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  299.565241][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  299.572749][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  300.469405][T12054] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  300.530817][T12059] xfrm0 speed is unknown, defaulting to 1000
[  300.749343][ T6705] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.819043][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1625'.
[  300.867336][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1625'.
[  300.885558][T12074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1625'.
[  300.904319][T12074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1625'.
[  300.929392][ T6705] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.958728][T12081] netlink: 'syz.6.1627': attribute type 15 has an invalid length.
[  301.068164][ T6705] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.089555][T12085] netlink: zone id is out of range
[  301.102306][T12085] netlink: zone id is out of range
[  301.108873][T12085] netlink: del zone limit has 4 unknown bytes
[  301.115686][ T6693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.123626][ T6693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.234369][ T6705] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.353520][T12100] netlink: 'syz.3.1632': attribute type 1 has an invalid length.
[  301.385013][ T3596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.395287][T12093] netlink: 'syz.6.1631': attribute type 10 has an invalid length.
[  301.396403][T12100] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1632'.
[  301.413142][ T3596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.515272][T12106] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1634'.
[  301.626760][ T5847] Bluetooth: hci0: command tx timeout
[  301.658774][T12059] chnl_net:caif_netlink_parms(): no params data found
[  301.920236][T12127] Bluetooth: MGMT ver 1.23
[  301.956552][ T6705] bridge_slave_1: left allmulticast mode
[  301.968963][ T6705] bridge_slave_1: left promiscuous mode
[  301.975943][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.999269][ T6705] bridge_slave_0: left allmulticast mode
[  302.007601][ T6705] bridge_slave_0: left promiscuous mode
[  302.013895][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.635728][ T6705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  302.646927][ T6705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  302.657088][ T6705] bond0 (unregistering): Released all slaves
[  302.806783][T12059] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.813942][T12059] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.824286][T12059] bridge_slave_0: entered allmulticast mode
[  302.832214][T12059] bridge_slave_0: entered promiscuous mode
[  302.839992][T12059] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.847790][T12059] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.855626][T12059] bridge_slave_1: entered allmulticast mode
[  302.862365][T12059] bridge_slave_1: entered promiscuous mode
[  302.924188][T12059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  302.937492][T12059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  302.977517][T12059] team0: Port device team_slave_0 added
[  302.987462][ T6705] hsr_slave_0: left promiscuous mode
[  302.993235][ T6705] hsr_slave_1: left promiscuous mode
[  303.005816][ T6705] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  303.013260][ T6705] batman_adv: batadv0: Removing interface: batadv_slave_0
[  303.025811][ T6705] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  303.033252][ T6705] batman_adv: batadv0: Removing interface: batadv_slave_1
[  303.061389][ T6705] veth1_macvtap: left promiscuous mode
[  303.067738][ T6705] veth0_macvtap: left promiscuous mode
[  303.073323][ T6705] veth1_vlan: left promiscuous mode
[  303.079246][ T6705] veth0_vlan: left promiscuous mode
[  303.561143][ T6705] team0 (unregistering): Port device team_slave_1 removed
[  303.610034][ T6705] team0 (unregistering): Port device team_slave_0 removed
[  303.708892][   T53] Bluetooth: hci0: command tx timeout
[  304.185090][   T53] Bluetooth: hci6: command 0x0406 tx timeout
[  304.361250][   T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  304.381968][   T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  304.391465][   T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  304.399977][   T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  304.439423][   T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  304.447559][   T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  304.601499][T12059] team0: Port device team_slave_1 added
[  304.631571][T12143] xfrm0 speed is unknown, defaulting to 1000
[  304.697319][T12059] batman_adv: batadv0: Adding interface: batadv_slave_0
[  304.704332][T12059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.747558][T12059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  304.769303][T12059] batman_adv: batadv0: Adding interface: batadv_slave_1
[  304.801964][T12059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.839125][T12059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  304.980738][T12150] xfrm0 speed is unknown, defaulting to 1000
[  305.038291][T12163] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1650'.
[  305.071518][T12059] hsr_slave_0: entered promiscuous mode
[  305.080079][T12163] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1650'.
[  305.090788][T12059] hsr_slave_1: entered promiscuous mode
[  305.211181][T12163] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1650'.
[  305.286663][T12170] netlink: 'syz.5.1653': attribute type 4 has an invalid length.
[  305.469436][ T6705] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.597254][ T6705] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.673361][ T6705] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.795399][ T5847] Bluetooth: hci0: command 0x040f tx timeout
[  305.935864][ T6705] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.968788][T12185] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  306.001271][T12150] chnl_net:caif_netlink_parms(): no params data found
[  306.020546][T12195] netlink: 'syz.5.1661': attribute type 10 has an invalid length.
[  306.030054][T12195] team0: Cannot enslave team device to itself
[  306.233277][T12202] netlink: 'syz.6.1663': attribute type 16 has an invalid length.
[  306.252308][T12150] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.259902][T12202] netlink: 'syz.6.1663': attribute type 17 has an invalid length.
[  306.268670][T12150] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.281585][T12150] bridge_slave_0: entered allmulticast mode
[  306.289713][T12150] bridge_slave_0: entered promiscuous mode
[  306.302235][T12150] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.310223][T12150] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.323171][T12150] bridge_slave_1: entered allmulticast mode
[  306.331904][T12150] bridge_slave_1: entered promiscuous mode
[  306.505406][ T5149] Bluetooth: hci4: command tx timeout
[  307.195641][T12213] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  307.390813][ T6705] bridge_slave_1: left allmulticast mode
[  307.412616][ T6705] bridge_slave_1: left promiscuous mode
[  307.420066][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.434111][ T6705] bridge_slave_0: left allmulticast mode
[  307.446867][ T6705] bridge_slave_0: left promiscuous mode
[  307.452609][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.652085][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1668'.
[  307.740324][T12231] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1670'.
[  307.762456][T12231] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1670'.
[  307.772334][T12231] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1670'.
[  307.943743][ T6705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  307.955036][ T6705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  307.966020][ T6705] bond0 (unregistering): Released all slaves
[  307.982296][ T9432] xfrm0 speed is unknown, defaulting to 1000
[  308.008245][T12150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  308.076236][T12150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  308.233711][T12235] netlink: 4552 bytes leftover after parsing attributes in process `syz.5.1672'.
[  308.252269][T12235] netlink: 4552 bytes leftover after parsing attributes in process `syz.5.1672'.
[  308.288431][T12059] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  308.313966][T12150] team0: Port device team_slave_0 added
[  308.328528][T12243] netlink: 23 bytes leftover after parsing attributes in process `syz.3.1674'.
[  308.329788][T12150] team0: Port device team_slave_1 added
[  308.350645][T12059] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  308.376041][T12243] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1674'.
[  308.383506][T12059] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  308.418730][T12059] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  308.496477][T12246] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1675'.
[  308.594754][ T5149] Bluetooth: hci4: command tx timeout
[  308.637798][T12150] batman_adv: batadv0: Adding interface: batadv_slave_0
[  308.655123][T12150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.721394][T12150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  308.841407][ T6705] hsr_slave_0: left promiscuous mode
[  308.871182][ T6705] hsr_slave_1: left promiscuous mode
[  308.880362][ T6705] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  308.926859][ T6705] batman_adv: batadv0: Removing interface: batadv_slave_0
[  308.955682][ T6705] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  308.959484][T12269] netlink: del zone limit has 4 unknown bytes
[  308.963141][ T6705] batman_adv: batadv0: Removing interface: batadv_slave_1
[  309.031242][ T6705] veth1_macvtap: left promiscuous mode
[  309.047447][ T6705] veth0_macvtap: left promiscuous mode
[  309.053228][ T6705] veth1_vlan: left promiscuous mode
[  309.059324][ T6705] veth0_vlan: left promiscuous mode
[  309.579989][ T6705] team0 (unregistering): Port device team_slave_1 removed
[  309.643766][ T6705] team0 (unregistering): Port device team_slave_0 removed
[  310.147470][T12150] batman_adv: batadv0: Adding interface: batadv_slave_1
[  310.154471][T12150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.203411][T12150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  310.312654][T12150] hsr_slave_0: entered promiscuous mode
[  310.330422][T12150] hsr_slave_1: entered promiscuous mode
[  310.345926][T12150] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  310.358879][T12150] Cannot create hsr debugfs directory
[  310.664865][ T5149] Bluetooth: hci4: command tx timeout
[  310.815761][T12059] 8021q: adding VLAN 0 to HW filter on device bond0
[  310.879368][T12293] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1693'.
[  310.890430][T12293] tc_dump_action: action bad kind
[  310.921767][T12059] 8021q: adding VLAN 0 to HW filter on device team0
[  310.979354][ T6706] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.986543][ T6706] bridge0: port 1(bridge_slave_0) entered forwarding state
[  311.062640][ T6693] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.069880][ T6693] bridge0: port 2(bridge_slave_1) entered forwarding state
[  311.329352][T12283] syz.5.1688 (12283) used greatest stack depth: 18592 bytes left
[  311.525305][T12150] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  311.561705][T12150] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  311.616716][T12150] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  311.638792][T12150] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  311.683906][T12059] 8021q: adding VLAN 0 to HW filter on device batadv0
[  311.732913][T12318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  311.886755][T12059] veth0_vlan: entered promiscuous mode
[  311.930911][T12059] veth1_vlan: entered promiscuous mode
[  312.044233][T12059] veth0_macvtap: entered promiscuous mode
[  312.056008][T12334] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  312.079361][T12150] 8021q: adding VLAN 0 to HW filter on device bond0
[  312.097324][T12059] veth1_macvtap: entered promiscuous mode
[  312.122858][T12150] 8021q: adding VLAN 0 to HW filter on device team0
[  312.142719][ T6693] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.149862][ T6693] bridge0: port 1(bridge_slave_0) entered forwarding state
[  312.262661][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.305416][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.324550][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.337005][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.358215][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.373772][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.384960][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.396069][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.409806][T12059] batman_adv: batadv0: Interface activated: batadv_slave_0
[  312.428967][ T6693] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.436151][ T6693] bridge0: port 2(bridge_slave_1) entered forwarding state
[  312.488452][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  312.500576][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.521397][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  312.533106][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.543560][T12059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  312.582857][T12059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.607682][T12059] batman_adv: batadv0: Interface activated: batadv_slave_1
[  312.615884][T12355] team0: No ports can be present during mode change
[  312.631275][T12150] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  312.651716][T12150] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  312.704112][T12059] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  312.743056][T12059] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  312.744817][ T5149] Bluetooth: hci4: command tx timeout
[  312.782046][T12059] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  312.845584][T12059] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  312.865926][T12372] __nla_validate_parse: 2 callbacks suppressed
[  312.865946][T12372] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1713'.
[  313.166324][T12385] netlink: 504 bytes leftover after parsing attributes in process `syz.5.1720'.
[  313.189264][T12150] 8021q: adding VLAN 0 to HW filter on device batadv0
[  313.206325][T12385] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  313.215334][T12385] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  313.278206][ T3596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  313.308134][ T3596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  313.382752][ T6706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  313.393180][ T6706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  313.739049][T12150] veth0_vlan: entered promiscuous mode
[  313.782141][T12150] veth1_vlan: entered promiscuous mode
[  313.856469][T12150] veth0_macvtap: entered promiscuous mode
[  313.871739][T12150] veth1_macvtap: entered promiscuous mode
[  313.890221][T12150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  313.925474][T12150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.945768][T12150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  313.974758][T12150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.007562][T12150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  314.022683][T12150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.046567][T12150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  314.057744][T12150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.081898][T12150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  314.110985][T12150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.145987][T12150] batman_adv: batadv0: Interface activated: batadv_slave_0
[  314.171952][T12150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  314.193505][T12150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.213804][T12150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  314.246960][T12150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.274122][T12150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  314.320641][T12150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.361333][T12150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  314.395330][T12150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  314.434317][T12150] batman_adv: batadv0: Interface activated: batadv_slave_1
[  314.561507][T12150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  314.581599][T12150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  314.606142][T12150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  314.622584][T12150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  314.673885][T12438] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1733'.
[  314.877628][ T6697] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.052802][ T6697] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.070791][ T6706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.087754][ T6706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.113450][ T6692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.121674][ T6692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.148061][ T6697] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.318004][ T6697] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.421485][ T6697] bridge_slave_1: left allmulticast mode
[  315.429093][ T6697] bridge_slave_1: left promiscuous mode
[  315.435415][ T6697] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.446610][ T6697] bridge_slave_0: left allmulticast mode
[  315.452299][ T6697] bridge_slave_0: left promiscuous mode
[  315.459093][ T6697] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.906625][T12453] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1736'.
[  316.145605][ T6697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  316.160823][ T6697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  316.179355][ T6697] bond0 (unregistering): Released all slaves
[  316.241826][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  316.262931][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  316.273579][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  316.285257][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  316.295838][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  316.305275][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  316.388976][T12461] xfrm0 speed is unknown, defaulting to 1000
[  316.480020][ T6697] hsr_slave_0: left promiscuous mode
[  316.486366][ T6697] hsr_slave_1: left promiscuous mode
[  316.492080][ T6697] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  316.500827][ T6697] batman_adv: batadv0: Removing interface: batadv_slave_0
[  316.510357][ T6697] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  316.518752][ T6697] batman_adv: batadv0: Removing interface: batadv_slave_1
[  316.540974][ T6697] veth1_macvtap: left promiscuous mode
[  316.547026][ T6697] veth0_macvtap: left promiscuous mode
[  316.552654][ T6697] veth1_vlan: left promiscuous mode
[  316.558545][ T6697] veth0_vlan: left promiscuous mode
[  317.033827][ T6697] team0 (unregistering): Port device team_slave_1 removed
[  317.081589][ T6697] team0 (unregistering): Port device team_slave_0 removed
[  317.476892][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  317.882521][T12478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1744'.
[  317.906564][T12478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1744'.
[  317.936365][T12478] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1744'.
[  317.991224][T12461] chnl_net:caif_netlink_parms(): no params data found
[  318.307809][ T5149] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  318.335601][ T5149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  318.349742][ T5149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  318.363782][T12461] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.371914][ T5149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  318.381765][ T5149] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  318.390310][ T5149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  318.408962][T12461] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.416587][T12461] bridge_slave_0: entered allmulticast mode
[  318.423819][T12461] bridge_slave_0: entered promiscuous mode
[  318.431909][T12461] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.440638][T12461] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.448682][T12461] bridge_slave_1: entered allmulticast mode
[  318.456242][T12461] bridge_slave_1: entered promiscuous mode
[  318.578167][T12508] xt_TPROXY: Can be used only with -p tcp or -p udp
[  318.587541][T12461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  318.622949][T12496] xfrm0 speed is unknown, defaulting to 1000
[  318.632202][T12461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  318.789692][T12514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1753'.
[  318.807136][T12461] team0: Port device team_slave_0 added
[  318.828645][T12461] team0: Port device team_slave_1 added
[  318.878426][T12522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1756'.
[  318.950130][ T6697] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.170451][T12530] xt_ecn: cannot match TCP bits for non-tcp packets
[  319.345097][ T6697] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.374113][T12529] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1758'.
[  319.394904][T12461] batman_adv: batadv0: Adding interface: batadv_slave_0
[  319.420676][T12461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.457498][T12534] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  319.485220][T12461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  319.519196][T12461] batman_adv: batadv0: Adding interface: batadv_slave_1
[  319.536349][T12461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.578605][T12461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  319.600293][T12538] Bluetooth: MGMT ver 1.23
[  319.663220][ T6697] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.899977][ T6697] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.997732][T12461] hsr_slave_0: entered promiscuous mode
[  320.018581][T12461] hsr_slave_1: entered promiscuous mode
[  320.051471][T12496] chnl_net:caif_netlink_parms(): no params data found
[  320.072245][T12557] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1767'.
[  320.277662][ T6697] bridge_slave_1: left allmulticast mode
[  320.284175][ T6697] bridge_slave_1: left promiscuous mode
[  320.313294][ T6697] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.332229][ T6697] bridge_slave_0: left allmulticast mode
[  320.343091][ T6697] bridge_slave_0: left promiscuous mode
[  320.350320][ T6697] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.425142][ T5149] Bluetooth: hci4: command tx timeout
[  320.817891][ T6697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  320.845357][ T6697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  320.854201][T12578] netlink: 'syz.3.1773': attribute type 1 has an invalid length.
[  320.863244][T12578] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1773'.
[  320.868717][ T6697] bond0 (unregistering): Released all slaves
[  320.904165][T12496] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.911939][T12496] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.926060][T12496] bridge_slave_0: entered allmulticast mode
[  320.933436][T12496] bridge_slave_0: entered promiscuous mode
[  320.963916][T12568] netlink: 'syz.5.1769': attribute type 21 has an invalid length.
[  320.974753][T12568] netlink: 'syz.5.1769': attribute type 11 has an invalid length.
[  321.131281][T12496] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.145336][T12496] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.152628][T12496] bridge_slave_1: entered allmulticast mode
[  321.161466][T12496] bridge_slave_1: entered promiscuous mode
[  321.288401][T12496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  321.337005][T12496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  321.431979][T12595] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1780'.
[  321.561690][T12496] team0: Port device team_slave_0 added
[  321.585321][ T6697] hsr_slave_0: left promiscuous mode
[  321.591202][ T6697] hsr_slave_1: left promiscuous mode
[  321.598822][ T6697] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  321.607715][ T6697] batman_adv: batadv0: Removing interface: batadv_slave_0
[  321.636126][ T6697] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  321.643871][ T6697] batman_adv: batadv0: Removing interface: batadv_slave_1
[  321.681529][ T6697] veth1_macvtap: left promiscuous mode
[  321.689219][ T6697] veth0_macvtap: left promiscuous mode
[  321.695024][ T6697] veth1_vlan: left promiscuous mode
[  321.700468][ T6697] veth0_vlan: left promiscuous mode
[  321.951454][   T30] INFO: task syz.1.807:9014 blocked for more than 143 seconds.
[  321.965438][   T30]       Not tainted 6.14.0-rc1-syzkaller-00102-g9dfedb8dc78b #0
[  321.973226][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  321.982223][   T30] task:syz.1.807       state:D stack:26256 pid:9014  tgid:9013  ppid:5837   task_flags:0x400040 flags:0x00004004
[  321.994393][   T30] Call Trace:
[  321.997925][   T30]  <TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  322.000882][   T30]  __schedule+0x190e/0x4c90
[  322.014650][   T30]  ? preempt_schedule_notrace_thunk+0x1a/0x30
[  322.020814][   T30]  ? __pfx___schedule+0x10/0x10
[  322.058105][   T30]  ? __pfx_lock_release+0x10/0x10
[  322.084589][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  322.124222][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  322.140348][   T30]  ? schedule+0x90/0x320
[  322.149159][   T30]  schedule+0x14b/0x320
[  322.153589][   T30]  schedule_preempt_disabled+0x13/0x30
[  322.159186][   T30]  __mutex_lock+0x817/0x1010
[  322.163805][   T30]  ? __mutex_lock+0x602/0x1010
[  322.168748][   T30]  ? nfsd_nl_listener_get_doit+0x115/0x5e0
[  322.174660][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  322.179888][   T30]  ? __asan_memset+0x23/0x50
[  322.185370][   T30]  nfsd_nl_listener_get_doit+0x115/0x5e0
[  322.191067][   T30]  ? genl_get_cmd+0x65d/0xbe0
[  322.196058][   T30]  ? genl_family_rcv_msg_attrs_parse+0x140/0x290
[  322.202422][   T30]  genl_rcv_msg+0xb14/0xec0
[  322.207329][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  322.212413][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  322.217800][   T30]  ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10
[  322.224089][   T30]  ? __pfx___might_resched+0x10/0x10
[  322.229838][   T30]  netlink_rcv_skb+0x1e3/0x430
[  322.234896][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  322.239959][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  322.245710][   T30]  ? __netlink_deliver_tap+0x7aa/0x7f0
[  322.251199][   T30]  genl_rcv+0x28/0x40
[  322.255576][   T30]  netlink_unicast+0x7f6/0x990
[  322.260378][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  322.266054][   T30]  ? __virt_addr_valid+0x45f/0x530
[  322.271194][   T30]  ? __phys_addr_symbol+0x2f/0x70
[  322.276330][   T30]  ? __check_object_size+0x47a/0x730
[  322.281645][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  322.286600][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  322.291908][   T30]  ? aa_sock_msg_perm+0x91/0x160
[  322.296958][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  322.302259][   T30]  __sock_sendmsg+0x221/0x270
[  322.307128][   T30]  ____sys_sendmsg+0x52a/0x7e0
[  322.312022][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  322.317462][   T30]  ? __fget_files+0x2a/0x410
[  322.322089][   T30]  ? __fget_files+0x2a/0x410
[  322.326966][   T30]  __sys_sendmsg+0x269/0x350
[  322.331600][   T30]  ? __pfx___sys_sendmsg+0x10/0x10
[  322.336984][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  322.343362][   T30]  ? do_syscall_64+0x100/0x230
[  322.348640][   T30]  ? do_syscall_64+0xb6/0x230
[  322.353353][   T30]  do_syscall_64+0xf3/0x230
[  322.358204][   T30]  ? clear_bhb_loop+0x35/0x90
[  322.362914][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.368971][   T30] RIP: 0033:0x7ff3ab58cde9
[  322.373405][   T30] RSP: 002b:00007ff3ac459038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  322.381973][   T30] RAX: ffffffffffffffda RBX: 00007ff3ab7a5fa0 RCX: 00007ff3ab58cde9
[  322.390251][   T30] RDX: 0000000024000100 RSI: 0000400000001740 RDI: 0000000000000005
[  322.398372][   T30] RBP: 00007ff3ab60e2a0 R08: 0000000000000000 R09: 0000000000000000
[  322.406495][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  322.414627][   T30] R13: 0000000000000000 R14: 00007ff3ab7a5fa0 R15: 00007ffec9457fd8
[  322.422634][   T30]  </TASK>
[  322.426097][   T30] 
[  322.426097][   T30] Showing all locks held in the system:
[  322.434120][   T30] 1 lock held by khungtaskd/30:
[  322.439232][   T30]  #0: ffffffff8e9387e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0
[  322.449370][   T30] 2 locks held by getty/5593:
[  322.454072][   T30]  #0: ffff8880353ba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  322.464802][   T30]  #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00
[  322.475170][   T30] 3 locks held by kworker/u8:11/6692:
[  322.480553][   T30]  #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840
[  322.492381][   T30]  #1: ffffc9001029fc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840
[  322.503539][   T30]  #2: ffffffff8fcc03c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  322.512916][   T30] 5 locks held by kworker/u8:16/6697:
[  322.514614][   T53] Bluetooth: hci4: command tx timeout
[  322.525093][   T30]  #0: ffff88801baf5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840
[  322.542415][   T30]  #1: ffffc90010317c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840
[  322.553437][   T30]  #2: ffffffff8fcb3dd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60
[  322.564448][   T30]  #3: ffffffff8fcc03c8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xe9/0xaa0
[  322.575266][   T30]  #4: ffffffff8e93dcb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830
[  322.604685][   T30] 2 locks held by kworker/u8:22/6706:
[  322.610138][   T30] 2 locks held by syz.2.253/6857:
[  322.624629][   T30]  #0: ffffffff8fd24070 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  322.632903][   T30]  #1: ffffffff8ec04688 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90
[  322.646076][   T30] 2 locks held by syz.1.807/9014:
[  322.651127][   T30]  #0: ffffffff8fd24070 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  322.659940][   T30]  #1: ffffffff8ec04688 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x115/0x5e0
[  322.672787][   T30] 2 locks held by kworker/0:7/9499:
[  322.679009][   T30] 7 locks held by syz-executor/12461:
[  322.685869][   T30]  #0: ffff88802d464420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x225/0xd10
[  322.695641][   T30]  #1: ffff88805fab0088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1ea/0x500
[  322.706055][   T30]  #2: ffff888144b00878 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500
[  322.716643][   T30]  #3: ffffffff8f56fca8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfc/0x480
[  322.734255][   T30]  #4: ffff8880470510e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xce/0x7c0
[  322.748659][   T30]  #5: ffff888047052250 (&devlink->lock_key#34){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160
[  322.759364][   T30]  #6: ffffffff8fcc03c8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xa4/0x620
[  322.769221][   T30] 1 lock held by syz-executor/12496:
[  322.775035][   T30]  #0: ffffffff8fcc03c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc22/0x1c40
[  322.784161][   T30] 1 lock held by syz.5.1780/12594:
[  322.789988][   T30]  #0: ffffffff8fcc03c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0
[  322.800453][   T30] 2 locks held by syz.3.1782/12603:
[  322.806105][   T30]  #0: ffffffff901cfa48 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250
[  322.816076][   T30]  #1: ffffffff8fcc03c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc22/0x1c40
[  322.826693][   T30] 1 lock held by syz.3.1782/12607:
[  322.831941][   T30]  #0: ffffffff8fcc03c8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x86e/0x1340
[  322.850343][   T30] 1 lock held by syz.6.1783/12602:
[  322.859470][   T30]  #0: ffffffff8fcc03c8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x48c/0x2400
[  322.870521][   T30] 1 lock held by syz.6.1783/12604:
[  322.876287][   T30]  #0: ffffffff8fcc03c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0
[  322.885778][   T30] 3 locks held by syz.6.1783/12608:
[  322.890990][   T30]  #0: ffffffff8fd24070 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  322.899733][   T30]  #1: ffffffff8fd23f28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0
[  322.909339][   T30]  #2: ffffffff8fcc03c8 (rtnl_mutex){+.+.}-{4:4}, at: tipc_nl_compat_doit+0x21e/0x610
[  322.919442][   T30] 1 lock held by syz.6.1783/12609:
[  322.925036][   T30]  #0: ffffffff8fcc03c8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x706/0x1340
[  322.933966][   T30] 
[  322.936822][   T30] =============================================
[  322.936822][   T30] 
[  322.960637][   T30] NMI backtrace for cpu 1
[  322.960655][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc1-syzkaller-00102-g9dfedb8dc78b #0
[  322.960675][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  322.960684][   T30] Call Trace:
[  322.960691][   T30]  <TASK>
[  322.960699][   T30]  dump_stack_lvl+0x241/0x360
[  322.960724][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  322.960741][   T30]  ? __pfx__printk+0x10/0x10
[  322.960776][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  322.960800][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  322.960816][   T30]  ? _printk+0xd5/0x120
[  322.960837][   T30]  ? __pfx__printk+0x10/0x10
[  322.960859][   T30]  ? __wake_up_klogd+0xcc/0x110
[  322.960878][   T30]  ? __pfx__printk+0x10/0x10
[  322.960901][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  322.960922][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  322.960942][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  322.960964][   T30]  watchdog+0x1058/0x10a0
[  322.960986][   T30]  ? watchdog+0x1ea/0x10a0
[  322.961010][   T30]  ? __pfx_watchdog+0x10/0x10
[  322.961030][   T30]  kthread+0x7a9/0x920
[  322.961049][   T30]  ? __pfx_kthread+0x10/0x10
[  322.961071][   T30]  ? __pfx_watchdog+0x10/0x10
[  322.961090][   T30]  ? __pfx_kthread+0x10/0x10
[  322.961109][   T30]  ? __pfx_kthread+0x10/0x10
[  322.961132][   T30]  ? __pfx_kthread+0x10/0x10
[  322.961150][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  322.961168][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  322.961188][   T30]  ? __pfx_kthread+0x10/0x10
[  322.961209][   T30]  ret_from_fork+0x4b/0x80
[  322.961227][   T30]  ? __pfx_kthread+0x10/0x10
[  322.961248][   T30]  ret_from_fork_asm+0x1a/0x30
[  322.961285][   T30]  </TASK>
[  322.961291][   T30] Sending NMI from CPU 1 to CPUs 0:
[  323.132464][    C0] NMI backtrace for cpu 0
[  323.132479][    C0] CPU: 0 UID: 0 PID: 9499 Comm: kworker/0:7 Not tainted 6.14.0-rc1-syzkaller-00102-g9dfedb8dc78b #0
[  323.132497][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  323.132508][    C0] Workqueue: events_power_efficient gc_worker
[  323.132532][    C0] RIP: 0010:__kasan_check_read+0x0/0x20
[  323.132554][    C0] Code: 8e 4c 89 fe e8 e1 0b 01 ff 31 db eb d0 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 89 f6 48 8b 0c 24 31 d2 e9 af e6 ff ff 66 2e 0f 1f 84
[  323.132567][    C0] RSP: 0018:ffffc90003147878 EFLAGS: 00000246
[  323.132579][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88802fbada00
[  323.132590][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901b5970
[  323.132600][    C0] RBP: ffffc900031479b0 R08: ffffffff8a0a4aee R09: 1ffffffff285f51c
[  323.132611][    C0] R10: dffffc0000000000 R11: fffffbfff285f51d R12: 1ffff92000628f1c
[  323.132623][    C0] R13: ffffffff8a0a4152 R14: ffffffff9a7e0b20 R15: dffffc0000000000
[  323.132635][    C0] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  323.132647][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  323.132658][    C0] CR2: 00005629e0af2088 CR3: 0000000032c44000 CR4: 00000000003526f0
[  323.132672][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  323.132681][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  323.132690][    C0] Call Trace:
[  323.132697][    C0]  <NMI>
[  323.132704][    C0]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  323.132722][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  323.132745][    C0]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  323.132761][    C0]  ? nmi_handle+0x2a/0x5a0
[  323.132790][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  323.132808][    C0]  ? nmi_handle+0x14f/0x5a0
[  323.132830][    C0]  ? nmi_handle+0x2a/0x5a0
[  323.132851][    C0]  ? __pfx___kasan_check_read+0x10/0x10
[  323.132870][    C0]  ? default_do_nmi+0x63/0x160
[  323.132887][    C0]  ? exc_nmi+0x123/0x1f0
[  323.132902][    C0]  ? end_repeat_nmi+0xf/0x53
[  323.132922][    C0]  ? gc_worker+0x272/0x1400
[  323.132940][    C0]  ? gc_worker+0xc0e/0x1400
[  323.132958][    C0]  ? __pfx___kasan_check_read+0x10/0x10
[  323.132978][    C0]  ? __pfx___kasan_check_read+0x10/0x10
[  323.132997][    C0]  ? __pfx___kasan_check_read+0x10/0x10
[  323.133017][    C0]  </NMI>
[  323.133021][    C0]  <TASK>
[  323.133026][    C0]  lock_release+0xb0/0xa30
[  323.133047][    C0]  ? gc_worker+0x316/0x1400
[  323.133062][    C0]  ? seqcount_lockdep_reader_access+0x157/0x220
[  323.133078][    C0]  ? lockdep_hardirqs_on+0x99/0x150
[  323.133097][    C0]  ? __pfx_lock_release+0x10/0x10
[  323.133116][    C0]  ? seqcount_lockdep_reader_access+0x1d7/0x220
[  323.133131][    C0]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  323.133149][    C0]  ? gc_worker+0x3ca/0x1400
[  323.133166][    C0]  ? gc_worker+0x272/0x1400
[  323.133183][    C0]  gc_worker+0xca8/0x1400
[  323.133200][    C0]  ? gc_worker+0x272/0x1400
[  323.133220][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  323.133242][    C0]  ? __pfx_gc_worker+0x10/0x10
[  323.133263][    C0]  ? process_scheduled_works+0x976/0x1840
[  323.133287][    C0]  process_scheduled_works+0xa66/0x1840
[  323.133318][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  323.133340][    C0]  ? assign_work+0x364/0x3d0
[  323.133360][    C0]  worker_thread+0x870/0xd30
[  323.133381][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  323.133402][    C0]  ? __kthread_parkme+0x169/0x1d0
[  323.133422][    C0]  ? __pfx_worker_thread+0x10/0x10
[  323.133439][    C0]  kthread+0x7a9/0x920
[  323.133459][    C0]  ? __pfx_kthread+0x10/0x10
[  323.133480][    C0]  ? __pfx_worker_thread+0x10/0x10
[  323.133497][    C0]  ? __pfx_kthread+0x10/0x10
[  323.133516][    C0]  ? __pfx_kthread+0x10/0x10
[  323.133537][    C0]  ? __pfx_kthread+0x10/0x10
[  323.133556][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  323.133573][    C0]  ? lockdep_hardirqs_on+0x99/0x150
[  323.133591][    C0]  ? __pfx_kthread+0x10/0x10
[  323.133611][    C0]  ret_from_fork+0x4b/0x80
[  323.133630][    C0]  ? __pfx_kthread+0x10/0x10
[  323.133650][    C0]  ret_from_fork_asm+0x1a/0x30
[  323.133675][    C0]  </TASK>
[  323.134892][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  323.134907][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc1-syzkaller-00102-g9dfedb8dc78b #0
[  323.134926][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  323.134936][   T30] Call Trace:
[  323.134943][   T30]  <TASK>
[  323.134951][   T30]  dump_stack_lvl+0x241/0x360
[  323.134975][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  323.134993][   T30]  ? __pfx__printk+0x10/0x10
[  323.135014][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  323.135042][   T30]  ? vscnprintf+0x5d/0x90
[  323.135062][   T30]  panic+0x349/0x880
[  323.135087][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  323.135106][   T30]  ? __pfx_panic+0x10/0x10
[  323.135133][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  323.135155][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  323.135174][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  323.135194][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  323.135214][   T30]  watchdog+0x1097/0x10a0
[  323.135237][   T30]  ? watchdog+0x1ea/0x10a0
[  323.135261][   T30]  ? __pfx_watchdog+0x10/0x10
[  323.135281][   T30]  kthread+0x7a9/0x920
[  323.135301][   T30]  ? __pfx_kthread+0x10/0x10
[  323.135322][   T30]  ? __pfx_watchdog+0x10/0x10
[  323.135342][   T30]  ? __pfx_kthread+0x10/0x10
[  323.135362][   T30]  ? __pfx_kthread+0x10/0x10
[  323.135386][   T30]  ? __pfx_kthread+0x10/0x10
[  323.135404][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  323.135423][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  323.135443][   T30]  ? __pfx_kthread+0x10/0x10
[  323.135465][   T30]  ret_from_fork+0x4b/0x80
[  323.135484][   T30]  ? __pfx_kthread+0x10/0x10
[  323.135505][   T30]  ret_from_fork_asm+0x1a/0x30
[  323.135545][   T30]  </TASK>
[  323.702921][   T30] Kernel Offset: disabled
[  323.707231][   T30] Rebooting in 86400 seconds..