last executing test programs:

2m12.781930293s ago: executing program 3 (id=288):
syz_emit_ethernet(0x4e, &(0x7f0000000400)={@multicast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, 'h{-', 0x18, 0x0, 0x1, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x1c}, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}]}]}}}}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4)
r3 = socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x29, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_netdev_private(r4, 0x8946, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a")
unshare(0x28000600)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r6 = socket(0x10, 0x800000000080002, 0x6)
setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000000c0)=r5, 0x4)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x3, &(0x7f0000000240), 0x4)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', <r9=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4)
socket$packet(0x11, 0x1, 0x300)

2m4.037912632s ago: executing program 3 (id=288):
syz_emit_ethernet(0x4e, &(0x7f0000000400)={@multicast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, 'h{-', 0x18, 0x0, 0x1, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x1c}, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}]}]}}}}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4)
r3 = socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x29, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_netdev_private(r4, 0x8946, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a")
unshare(0x28000600)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r6 = socket(0x10, 0x800000000080002, 0x6)
setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000000c0)=r5, 0x4)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x3, &(0x7f0000000240), 0x4)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', <r9=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4)
socket$packet(0x11, 0x1, 0x300)

1m52.650415352s ago: executing program 3 (id=288):
syz_emit_ethernet(0x4e, &(0x7f0000000400)={@multicast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, 'h{-', 0x18, 0x0, 0x1, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x1c}, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}]}]}}}}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4)
r3 = socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x29, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_netdev_private(r4, 0x8946, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a")
unshare(0x28000600)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000005b1953e7203b3833b487e3c4bd4540e4b6e87b7891e0f159182f542be18de00d9d95e1c4a6b62a3c065fc1a7b4c144cc2508eba2540e3425abc138dbaf9f6da59d9c77cbe2a8a9666a08ed1704c6bb2e422f01d64cae3050d7bd3c10b0e80d9483a2e36568cf0c6a1b78d9ca2f8065a1d7b4b0eeeecaa3c865de68042c9ab36e8a43b97955b04e5351f99c682a939832582c0dfd64028580c33fca4ca652f4c4e116c16e0f76fd9379599b54e06a8662f81fe375751e06007efabbd87b82d35367257d1bc15f92370261aace269013bc00b86daae71e253200000000b1467c86aff0ee8ff6c53939acb3866e8247eff7c10f000200000e6bd59e5b4dbc12ce8f0a5f816382fc66bcf14bb83ce2336b93b90594b78301e696503eea3404fe7dc3a8a5f9fde10f53e458e9efbe57fb52e85ea5346ed9f42418aefc6052afd588f8ae73eaab3af38936bfdadc91cda3983de6513ef3c2e58a54ffb1921aab1df971cdc2b2ab17bc9e421b5991b6036f845313a4a5f9d8a36472d7d758d73e9be967ca3fdae7d7ba03a8d9e5962c67ca30e5b6eb3c524c22632e47f18c879f0564361ef35aba5ed3f2d1b0bc6954e7e2dc49106ce8a49b48812ad3f5f8391c14ecde831be42d15bdc797c2b9ab30a8e90d7d53784e7add8e5bd5b6797a63e48efa0eb4d1df88ea8b388e94c6a15ac4e22447dad331244a38a5a2e294905611bfeadcac35f6ccf6af94191954c6b840a3092ef94d1e0e23019fbbdcd5b47e4a565ce42d0bbd7b14f9df1139c15ee4d687fe0861a8210071ebeb63606d28dcb5404e077400bd04453c49d0e2e0bb2700000046a4e564ba31c3d62f2d0fb6b7630f66f086e36885c3634a522888f1c4049361cfb8914f59073ba6a8a6ea283acfa3d3bc40e7a70f71b27686ac5307918ac06f1a396fe1accc74e9eabfea"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r6 = socket(0x10, 0x800000000080002, 0x6)
setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000000c0)=r5, 0x4)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x3, &(0x7f0000000240), 0x4)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', <r9=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4)
socket$packet(0x11, 0x1, 0x300)

1m44.464187318s ago: executing program 3 (id=288):
syz_emit_ethernet(0x4e, &(0x7f0000000400)={@multicast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, 'h{-', 0x18, 0x0, 0x1, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x1c}, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}]}]}}}}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4)
r3 = socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x29, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_netdev_private(r4, 0x8946, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a")
unshare(0x28000600)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000005b1953e7203b3833b487e3c4bd4540e4b6e87b7891e0f159182f542be18de00d9d95e1c4a6b62a3c065fc1a7b4c144cc2508eba2540e3425abc138dbaf9f6da59d9c77cbe2a8a9666a08ed1704c6bb2e422f01d64cae3050d7bd3c10b0e80d9483a2e36568cf0c6a1b78d9ca2f8065a1d7b4b0eeeecaa3c865de68042c9ab36e8a43b97955b04e5351f99c682a939832582c0dfd64028580c33fca4ca652f4c4e116c16e0f76fd9379599b54e06a8662f81fe375751e06007efabbd87b82d35367257d1bc15f92370261aace269013bc00b86daae71e253200000000b1467c86aff0ee8ff6c53939acb3866e8247eff7c10f000200000e6bd59e5b4dbc12ce8f0a5f816382fc66bcf14bb83ce2336b93b90594b78301e696503eea3404fe7dc3a8a5f9fde10f53e458e9efbe57fb52e85ea5346ed9f42418aefc6052afd588f8ae73eaab3af38936bfdadc91cda3983de6513ef3c2e58a54ffb1921aab1df971cdc2b2ab17bc9e421b5991b6036f845313a4a5f9d8a36472d7d758d73e9be967ca3fdae7d7ba03a8d9e5962c67ca30e5b6eb3c524c22632e47f18c879f0564361ef35aba5ed3f2d1b0bc6954e7e2dc49106ce8a49b48812ad3f5f8391c14ecde831be42d15bdc797c2b9ab30a8e90d7d53784e7add8e5bd5b6797a63e48efa0eb4d1df88ea8b388e94c6a15ac4e22447dad331244a38a5a2e294905611bfeadcac35f6ccf6af94191954c6b840a3092ef94d1e0e23019fbbdcd5b47e4a565ce42d0bbd7b14f9df1139c15ee4d687fe0861a8210071ebeb63606d28dcb5404e077400bd04453c49d0e2e0bb2700000046a4e564ba31c3d62f2d0fb6b7630f66f086e36885c3634a522888f1c4049361cfb8914f59073ba6a8a6ea283acfa3d3bc40e7a70f71b27686ac5307918ac06f1a396fe1accc74e9eabfea"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r6 = socket(0x10, 0x800000000080002, 0x6)
setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000000c0)=r5, 0x4)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x3, &(0x7f0000000240), 0x4)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', <r9=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4)
socket$packet(0x11, 0x1, 0x300)

1m35.310661904s ago: executing program 3 (id=288):
syz_emit_ethernet(0x4e, &(0x7f0000000400)={@multicast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, 'h{-', 0x18, 0x0, 0x1, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x1c}, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}]}]}}}}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404000000c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e46968eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000000000000005335000000143ea70c2ab40c7cb70c943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a33e680846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2200af6c7784a1975fa807de38a3a61e44a9ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf652e28e700000000000000b24478a78a0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c450503009688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0000f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b4cbaf5a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf8a3334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13e434aae9df81ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a384002421d898913c45a9ac091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c045a17e9a61c3b064e679508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd911e0e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4218cea744b332ab232a09cf1ec375627074ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d522946727024de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df00000000000000000000dfa4c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5d00f26126d4cf2c73e5f94030000000000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481c55e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62fc9dfffeb13b4858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1ef90ed4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1af45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d78429d358aa54b4b49926c4be9ee4659153d9f9f5d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000d0267ac40d1130a9000000000045f50812a1a0530b02baed19f4c977ac0d397ed6371ec589bf5943690250bdfa5b676d5d53d2ab3aeee1a6910c1a33b6c06c93386768f8b1bb27ec31cffbd4f5c7b0c2e14e4fc6c2f089ab08567254e93780afdddefb3f0d2143ad73c0bf2467859049d46dc5aa91f918a307e7dcaaccd6cbe66e8a04d201392a487f681f82528a800e27d65200ae10e1b5d39a29d8a2c8ed2dfa77e21249b45806733e674a9e8e72ad1cb0d3bfadb00a18a5008ea1e4c8fb93d311f52a476c576a3f65c9bdd4e4b870aed4cb9906a8aa25986e6e30be249d9911114b42b2fb51168e56000a62b794c193f7797ebeb7f8b91c70b6e720af06ecfcfb89a2d5a25f"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4)
r3 = socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x29, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_netdev_private(r4, 0x8946, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a")
unshare(0x28000600)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r6 = socket(0x10, 0x800000000080002, 0x6)
setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000000c0)=r5, 0x4)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x3, &(0x7f0000000240), 0x4)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', <r9=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4)
socket$packet(0x11, 0x1, 0x300)

1m25.475859311s ago: executing program 3 (id=288):
syz_emit_ethernet(0x4e, &(0x7f0000000400)={@multicast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, 'h{-', 0x18, 0x0, 0x1, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x1c}, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}]}]}}}}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4)
r3 = socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x29, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_netdev_private(r4, 0x8946, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a")
unshare(0x28000600)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r6 = socket(0x10, 0x800000000080002, 0x6)
setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000000c0)=r5, 0x4)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x3, &(0x7f0000000240), 0x4)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', <r9=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4)
socket$packet(0x11, 0x1, 0x300)

58.421710987s ago: executing program 1 (id=2411):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)

58.29734668s ago: executing program 2 (id=2414):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f00000000c0)=r0}, 0x20)
shutdown(r0, 0x0)

58.133652333s ago: executing program 1 (id=2415):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local}, 0x1c)

57.928993386s ago: executing program 4 (id=2416):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000380)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x5, 0x3, 0xe}]}}}], 0x18}, 0x0)

57.913472185s ago: executing program 1 (id=2417):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendmmsg$inet(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001d80)="29cacd605845094a3ecda7d8df885dca689c3c44a9749e9ac821c8f1e60c7279713c3b76b13d4b865bec2f52313bd07bd1f2ddced765f91c43c92c83f22031f7c32f946f66ef61fabff64198c4faf80b6d0269079e99ab5750e298639db737d64aa57278e2a7f37c2cd666178eb172cbff1a42f95a13d9459eb07f67a2c1ef6a49b407a77ac874528e5276a5b8ec8615da752a2f2c970b925a6bd08f6bdebd9c0f7da9d6ec4292e35326b663b1f4afbc726a3b319d6653749986755ff6444a157b8b3427ef9d1ef678eff6dcd889d36c75118e3068c0200714b42a6e23ff15399fe3620da7abea20f0d52ab288f530d316f5c685bf55b950a4c0fc658dba9bc1d869ecb92aab7ba7314783b616b16dca96c2fc03ea3757887eda19ce7ee6f97d35bcdc844d33f928dc837ddeec90864dfe8ad4701aec9fe9648f0dfb56a94d247f8b93610b22067b8f9c5b6158cc6d8754836895af037baadb050c199f9ed2971d46670c8ea8eec8a9eb845770c0c5e2b966a01be39606459bd5adaf7983be36ad20abb4c8be0a41859a1e7f2a51d3d26962757356232e082b22cdf8926441849fdf30baaa6fe780dba7a1bf9942333cc8b9931bb66a542f3942d5aeeaa0080046a1d5f045ef41deff5e28fc1d9df75feedeee65f610c7191ac990ee59d70f8cce648c79c543f5230eccbd7a96d366b0be73b8a1c976ca3fe4d345f69d32810b0aea0d422cb0d0aa78ddd780e3a1b7ffe37f9d1705b53d0ba0c0f95554c25caaea28eca500d51eaa514e96cab211b7dc8d464b029284296eb980b829d12eea3d3c66150b4852840e177c68f1a9a74da64ef125fc61ff2bfd522dbbc7fd553e975121e3c1dbb94dba7882deeba2fc683b34598b11812d43b6e971dc6b63e33a371ef4dc51592f1d6231ca27dfeb4aff8f298bef831ac2da4e0bb11d109f5b499601fed2db62b81eeefe6cbb92f28a70ae8609e7cf5455c63862740b3e76d0197de23a3275c2a9e680059f5a64605d6c071b889a2f041f34df8f7fc6cbbd0d084114f586682d6a62556c916e49dadfece901f994b811d1d54f8ede5c29585370752d6749a5e45b5a1e659b37f6eb4ceff475451caaa97f256931ed3dcdc52eb6328b18a78db423acb5fa979cd2df282fd2bc7959546520dc335f7bbcb9cac74b56bfef53f3ae7da51a44e432401f0201003303ebd46102a329ce14e2f5ac4468250f3baa4fa8dca65c44d6e4d1786b20d4594e25cef83241cc9592505cd29b7a9ef811ded8447b551f396650c8fcea3138c1f264f73ef91982f13fc67e88396f7f1bbcedfaa5203d6aea661375dd0de39d196a9482dfde62f9f30a865a30c5228df5ee167678421d6f23e7cb7bff3cb3d2e38256160cc8ef8255b34fd3e81f941a27c63c63ee0f61ba79adfef01c91df72a48a69dc8c5c728e78398a00ad1c648cc932b43e27f851b1f6309ef56b8b90392fc083ff0f388a94603b492297f34d35964b36629aea5e24c859ea5b6bbc8ea410797d9d9d7c3dc77f8a85f5a9efb4fd3648f21e975a43ebff1df6538d317709ca78911d6979bd8aed8adbd073a00d0beb4045188531ac1b07a595c69663444ca5ad52af05e5e7471d3e2c3994d5160afd46f325a317dd921b2b5d036e8a7707e54413715d6ee90f9ff18f22f7e6276e9fd7fead4ac30731fe5a306f26d6dfbd7140b94efad11e9098a52e11cb1ca534bffd2b6f3b2d99db7bd1f62857990156e7810097a3bbf807e100532f5f3973d1c7c0d3af45292b204c7d923b1de7aebda516495626c95d6c6c96be9e4c6527e1717666cc94aa4a71fb34cb7d8b1dcbea95b1010894ee30b425016f14c685087273623546a9f6b99033ba9faa7f04fb68bd307b3b81cec9eea38e24a86973fea29a96e1aa0700d2a958eed460d596d9b6f7ca0103ef6da9d2ca5b464ea6fda6a571131d7578c39722252480c61c6395835107ebef98aa9bdd0944725af54d95cf644c3a07d3b19be2deb9100c61c3a7d383579a5846804a3d0dd8e527cbb9e037f73937c1ef03882ef4d232ae24f8e75a718aac5fafedecd545e14fdcb38efbeff81b90612ba02e63677c77a77decf1fe82e4cb24a27cfa2e6dcc2ec9c4d138fa67c55a4412f9db326d31c84f19917235c42bb811a85eab1d6013fc1b748c66ca7a9311ef776433", 0x607}], 0x1}}], 0x1, 0x8000)
sendto$inet(r0, &(0x7f0000000700)="09c9bf017286230ab34ef412171957cf7c8039a1f645109595b96336f45abb6addf0517101026f3710edaad4e4e51f0771b742e362ad83c11cf14e37093c74962988a7afaeaacee880d567ed1ba154964dbfe45ab21adc3fc29c9a572dcc1714dd8a818e105ae6bea0cde90217a832cbf5eb52a29e4a6cc5130e05b927c47acda8dbae5c3e31f9bf54ddca8416c317d66e98da7ec39dd11b37d5baa0d97786cf60112586c2115b27e7c7aee0154122453000fb4f028866120f8fcb6523940d161fb859eda4f81654bb8de57704730827990908fee9792f5c44dae79e8939110f2a42e8fe6066ea1d44f6c346ca0a071f20304414f10faec4fe", 0xf9, 0x1, 0x0, 0x0)

57.756437769s ago: executing program 0 (id=2418):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

57.756122722s ago: executing program 2 (id=2419):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x7e9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000", 0x23)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

57.425438216s ago: executing program 4 (id=2420):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000043c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa6c"], 0x0)

55.661901601s ago: executing program 1 (id=2421):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, 0x0, &(0x7f00000003c0)=""/129}, 0x20)

52.689455851s ago: executing program 2 (id=2422):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendto$inet6(r0, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c)

51.001530988s ago: executing program 0 (id=2423):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

49.300891823s ago: executing program 4 (id=2424):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c80)="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", 0x2eb}], 0x1}, 0x44080)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

46.709571491s ago: executing program 1 (id=2425):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280"], 0x48}}, 0x0)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0)

42.757816403s ago: executing program 2 (id=2426):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x18)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0)

41.065153799s ago: executing program 0 (id=2427):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x24}}, 0x0)

40.749802266s ago: executing program 4 (id=2428):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet(r0, &(0x7f00000014c0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10, 0x0}}, {{&(0x7f0000000d80)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000e40)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @empty}}}], 0x30}}], 0x2, 0x0)

37.000609617s ago: executing program 2 (id=2429):
syz_emit_ethernet(0x46, &(0x7f0000000400)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cca", 0x10, 0x3c, 0x0, @dev, @mcast2, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x300}}}}}}}}, 0x0)

36.707419195s ago: executing program 1 (id=2430):
r0 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB='|'], 0x1)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={<r1=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private2, 0x0, r1})
socket$inet6(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f00000020c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}}})

35.421613638s ago: executing program 0 (id=2431):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7535}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r2)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x30, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x20}}]}, 0x30}}, 0x0)

35.420155554s ago: executing program 4 (id=2432):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'ip6gre0\x00'}}, 0x1e)

31.607019731s ago: executing program 2 (id=2433):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x4, 0x4, 0x324, 0xffffffff, 0x194, 0xc8, 0x194, 0xfeffffff, 0xffffffff, 0x25c, 0x25c, 0x25c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private2, [], [], 'batadv_slave_0\x00', 'team_slave_1\x00', {}, {}, 0x1c, 0x0, 0x1, 0x1a}, 0x2f2, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x2, 0x8, 0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, [], [], 'hsr0\x00', 'veth0_macvtap\x00', {}, {}, 0x89}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x380)

30.813408618s ago: executing program 4 (id=2434):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x4, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc004884}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0x4, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc004884}, 0x0)

28.4415629s ago: executing program 0 (id=2435):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x80002, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf252800000005002e000f0000000c002d000200aaaaaaaaaaaa05002b000300000008000200", @ANYRES32=r1], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40850)

15.955528351s ago: executing program 0 (id=2436):
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0x9d, &(0x7f00000002c0), &(0x7f0000000080)=0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00"/20, @ANYRES32=0x1], 0x48)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33)

15.184195533s ago: executing program 32 (id=2430):
r0 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB='|'], 0x1)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={<r1=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private2, 0x0, r1})
socket$inet6(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f00000020c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}}})

14.521436739s ago: executing program 33 (id=2433):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x4, 0x4, 0x324, 0xffffffff, 0x194, 0xc8, 0x194, 0xfeffffff, 0xffffffff, 0x25c, 0x25c, 0x25c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private2, [], [], 'batadv_slave_0\x00', 'team_slave_1\x00', {}, {}, 0x1c, 0x0, 0x1, 0x1a}, 0x2f2, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x2, 0x8, 0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, [], [], 'hsr0\x00', 'veth0_macvtap\x00', {}, {}, 0x89}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x380)

13.772517008s ago: executing program 34 (id=2434):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x4, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc004884}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0x4, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc004884}, 0x0)

0s ago: executing program 35 (id=2436):
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0x9d, &(0x7f00000002c0), &(0x7f0000000080)=0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00"/20, @ANYRES32=0x1], 0x48)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33)

kernel console output (not intermixed with test programs):

lper "pptp"
[  159.672563][T10151] vlan1: entered promiscuous mode
[  159.693600][T10151] vlan1: entered allmulticast mode
[  159.964051][ T5834] Bluetooth: hci4: command tx timeout
[  160.560320][T10171] netlink: 'syz.0.1249': attribute type 1 has an invalid length.
[  160.568690][T10171] netlink: 'syz.0.1249': attribute type 2 has an invalid length.
[  160.594093][T10171] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  160.999728][T10006] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  161.025483][T10006] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  161.050003][T10205] vlan1: entered promiscuous mode
[  161.063451][T10205] vlan1: entered allmulticast mode
[  161.078341][T10006] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  161.105449][T10006] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  161.268661][T10006] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.327283][T10006] 8021q: adding VLAN 0 to HW filter on device team0
[  161.359174][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.366393][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.438271][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.445460][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.919546][T10006] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.022645][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1268'.
[  162.039290][T10006] veth0_vlan: entered promiscuous mode
[  162.046445][ T5834] Bluetooth: hci4: command tx timeout
[  162.077098][T10006] veth1_vlan: entered promiscuous mode
[  162.136400][T10006] veth0_macvtap: entered promiscuous mode
[  162.156128][T10006] veth1_macvtap: entered promiscuous mode
[  162.183072][T10006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.207141][T10006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.229827][T10006] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.255020][T10006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.266438][T10006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.277718][T10006] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.292007][T10006] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.301052][T10006] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.309985][T10006] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.319069][T10006] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.402617][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.419503][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.460302][ T3623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.469114][ T3623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.630996][T10254] ieee802154 phy0 wpan0: encryption failed: -90
[  162.790648][T10261] netlink: 'syz.0.1275': attribute type 16 has an invalid length.
[  162.798852][T10261] netlink: 'syz.0.1275': attribute type 3 has an invalid length.
[  162.823931][T10261] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1275'.
[  162.933546][T10271] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  163.038997][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1279'.
[  163.048312][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1279'.
[  163.128950][T10279] netlink: 'syz.2.1281': attribute type 1 has an invalid length.
[  163.207804][T10279] netlink: 209800 bytes leftover after parsing attributes in process `syz.2.1281'.
[  163.355221][T10295] netlink: 'syz.1.1286': attribute type 1 has an invalid length.
[  163.520108][    T8] hid-generic 0005:0B57:0001.0001: item fetching failed at offset 0/1
[  163.540070][T10303] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1288'.
[  163.554621][    T8] hid-generic 0005:0B57:0001.0001: probe with driver hid-generic failed with error -22
[  163.654743][T10315] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms
[  163.896892][T10333] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.945149][ T1098] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.978624][T10338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1299'.
[  165.315924][ T1098] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.419375][T10366] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1306'.
[  165.454659][T10367] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1306'.
[  165.523009][ T1098] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.674565][T10378] netlink: 187320 bytes leftover after parsing attributes in process `syz.4.1309'.
[  165.723027][T10378] netlink: zone id is out of range
[  165.744817][ T1098] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.755489][T10378] netlink: zone id is out of range
[  165.762884][T10383] netlink: 576 bytes leftover after parsing attributes in process `syz.1.1310'.
[  165.771211][T10378] netlink: zone id is out of range
[  165.785708][T10378] netlink: zone id is out of range
[  165.801964][T10378] netlink: zone id is out of range
[  165.805489][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  165.807660][T10378] netlink: zone id is out of range
[  165.818168][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  165.826628][T10378] netlink: zone id is out of range
[  165.826643][T10378] netlink: zone id is out of range
[  165.826653][T10378] netlink: zone id is out of range
[  165.844818][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  165.853414][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  165.861214][ T5852] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  165.862437][T10385] netlink: 'syz.2.1312': attribute type 33 has an invalid length.
[  165.877246][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  166.208190][T10402] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1316'.
[  166.222203][ T1098] bridge_slave_1: left allmulticast mode
[  166.241300][ T1098] bridge_slave_1: left promiscuous mode
[  166.247294][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.273576][ T1098] bridge_slave_0: left allmulticast mode
[  166.283938][ T1098] bridge_slave_0: left promiscuous mode
[  166.289705][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.787099][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.799471][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  166.811517][ T1098] bond0 (unregistering): Released all slaves
[  166.890403][T10427] vlan1: entered promiscuous mode
[  166.906289][T10427] vlan1: entered allmulticast mode
[  166.925671][T10436] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 1, id = 0
[  167.113342][T10386] chnl_net:caif_netlink_parms(): no params data found
[  167.354695][T10386] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.362011][T10386] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.369510][T10386] bridge_slave_0: entered allmulticast mode
[  167.377835][T10386] bridge_slave_0: entered promiscuous mode
[  167.391103][ T1098] hsr_slave_0: left promiscuous mode
[  167.403839][ T1098] hsr_slave_1: left promiscuous mode
[  167.409633][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.422144][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.430316][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.438472][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.467087][ T1098] veth1_macvtap: left promiscuous mode
[  167.472653][ T1098] veth0_macvtap: left promiscuous mode
[  167.478862][ T1098] veth1_vlan: left promiscuous mode
[  167.484363][ T1098] veth0_vlan: left promiscuous mode
[  167.963813][ T5834] Bluetooth: hci4: command tx timeout
[  168.012942][ T1098] team0 (unregistering): Port device team_slave_1 removed
[  168.101567][ T1098] team0 (unregistering): Port device team_slave_0 removed
[  168.483589][T10386] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.506878][T10386] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.524033][T10386] bridge_slave_1: entered allmulticast mode
[  168.531046][T10386] bridge_slave_1: entered promiscuous mode
[  168.694981][T10386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.729409][T10386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.850095][T10386] team0: Port device team_slave_0 added
[  168.860248][T10386] team0: Port device team_slave_1 added
[  168.990802][T10386] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.999776][T10386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.052297][T10493] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1340'.
[  169.063112][T10493] net_ratelimit: 1473 callbacks suppressed
[  169.063130][T10493] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.071501][T10386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  169.111174][T10490] vlan1: entered allmulticast mode
[  169.122338][T10496] veth1_macvtap: left promiscuous mode
[  169.135368][T10498] openvswitch: netlink: Actions may not be safe on all matching packets
[  169.164954][T10386] batman_adv: batadv0: Adding interface: batadv_slave_1
[  169.171946][T10386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.210725][T10386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  169.356494][T10386] hsr_slave_0: entered promiscuous mode
[  169.372373][T10386] hsr_slave_1: entered promiscuous mode
[  169.380781][T10386] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  169.394902][T10386] Cannot create hsr debugfs directory
[  169.407058][T10505] veth0: entered promiscuous mode
[  169.420596][T10502] veth0: left promiscuous mode
[  169.570979][T10514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1348'.
[  169.635041][T10518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1349'.
[  169.962062][T10386] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  169.993044][T10386] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  170.009637][T10386] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  170.029624][T10386] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  170.031765][T10539] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1356'.
[  170.046248][T10539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1356'.
[  170.054055][ T5834] Bluetooth: hci4: command tx timeout
[  170.156162][T10541] lo: entered allmulticast mode
[  170.174931][T10386] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.200678][T10543] netlink: 'syz.1.1358': attribute type 39 has an invalid length.
[  170.263478][T10544] netlink: 'syz.1.1358': attribute type 3 has an invalid length.
[  170.308298][T10386] 8021q: adding VLAN 0 to HW filter on device team0
[  170.329648][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.336826][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.356774][ T1330] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.363992][ T1330] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.514531][T10552] vlan1: entered promiscuous mode
[  170.519634][T10552] vlan1: entered allmulticast mode
[  170.578130][T10559] __nla_validate_parse: 4 callbacks suppressed
[  170.578148][T10559] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1363'.
[  170.626873][T10563] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1363'.
[  170.727812][T10386] 8021q: adding VLAN 0 to HW filter on device batadv0
[  170.845934][T10566] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1364'.
[  170.852737][T10386] veth0_vlan: entered promiscuous mode
[  170.898108][T10386] veth1_vlan: entered promiscuous mode
[  170.933279][T10386] veth0_macvtap: entered promiscuous mode
[  170.944251][T10386] veth1_macvtap: entered promiscuous mode
[  170.959534][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.970828][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.983603][T10386] batman_adv: batadv0: Interface activated: batadv_slave_0
[  170.994592][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.029778][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.058962][T10386] batman_adv: batadv0: Interface activated: batadv_slave_1
[  171.095068][T10386] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.111769][T10386] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.136055][T10386] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.158399][T10386] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.325256][T10587] netlink: 'syz.1.1372': attribute type 10 has an invalid length.
[  171.380055][T10585] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1373'.
[  171.397326][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.413434][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.445815][T10593] vlan1: entered promiscuous mode
[  171.451121][T10593] vlan1: entered allmulticast mode
[  171.464882][T10595] netlink: 'syz.1.1377': attribute type 10 has an invalid length.
[  171.504033][T10595] macvlan0: entered promiscuous mode
[  171.509574][T10595] macvlan0: entered allmulticast mode
[  171.521429][T10595] veth1_vlan: entered allmulticast mode
[  171.531874][T10595] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  171.568421][ T3623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.588702][ T3623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.762700][T10613] xt_CT: You must specify a L4 protocol and not use inversions on it
[  171.791302][T10610] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1380'.
[  171.925695][T10622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1382'.
[  171.939302][T10622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1382'.
[  171.948729][T10622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1382'.
[  171.958384][T10622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1382'.
[  171.969521][T10622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1382'.
[  172.266792][T10639] 8021q: adding VLAN 0 to HW filter on device team0
[  172.284546][T10639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  172.546271][T10660] bond3: entered promiscuous mode
[  172.552693][T10660] bond3: entered allmulticast mode
[  172.586383][T10660] 8021q: adding VLAN 0 to HW filter on device bond3
[  172.607385][T10665] netlink: 'syz.4.1398': attribute type 11 has an invalid length.
[  173.002812][ T1098] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.265259][ T1098] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.408704][ T1098] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.460776][T10699] netlink: 'syz.4.1410': attribute type 5 has an invalid length.
[  174.598358][ T1098] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.823401][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  174.833577][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  174.843437][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  174.863307][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  174.874139][ T5852] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  174.882000][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  175.089887][ T1098] bridge_slave_1: left allmulticast mode
[  175.100622][ T1098] bridge_slave_1: left promiscuous mode
[  175.114003][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.127722][ T1098] bridge_slave_0: left allmulticast mode
[  175.133410][ T1098] bridge_slave_0: left promiscuous mode
[  175.152706][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.570990][T10739] netlink: 'syz.0.1420': attribute type 27 has an invalid length.
[  175.686296][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  175.697514][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  175.708154][ T1098] bond0 (unregistering): Released all slaves
[  175.862504][T10759] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20003
[  176.059967][T10711] chnl_net:caif_netlink_parms(): no params data found
[  176.318921][T10776] sock: sock_set_timeout: `syz.0.1426' (pid 10776) tries to set negative timeout
[  176.442665][T10799] __nla_validate_parse: 33 callbacks suppressed
[  176.442684][T10799] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1432'.
[  176.481891][ T1098] hsr_slave_0: left promiscuous mode
[  176.507466][ T1098] hsr_slave_1: left promiscuous mode
[  176.516839][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.530541][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.538674][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.546383][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.557655][T10805] netlink: 'syz.2.1434': attribute type 4 has an invalid length.
[  176.587207][ T1098] veth1_macvtap: left promiscuous mode
[  176.592846][ T1098] veth0_macvtap: left promiscuous mode
[  176.598668][ T1098] veth1_vlan: left promiscuous mode
[  176.604587][ T1098] veth0_vlan: left promiscuous mode
[  176.611622][T10808] netlink: 'syz.2.1434': attribute type 4 has an invalid length.
[  176.941926][ T5852] Bluetooth: hci4: command tx timeout
[  177.061549][ T1098] team0 (unregistering): Port device team_slave_1 removed
[  177.103362][ T1098] team0 (unregistering): Port device team_slave_0 removed
[  177.493457][T10711] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.501116][T10711] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.522281][T10711] bridge_slave_0: entered allmulticast mode
[  177.530980][T10711] bridge_slave_0: entered promiscuous mode
[  177.548510][T10711] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.564028][T10711] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.574301][T10711] bridge_slave_1: entered allmulticast mode
[  177.582098][T10711] bridge_slave_1: entered promiscuous mode
[  177.690851][T10711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.742751][T10711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.897451][T10711] team0: Port device team_slave_0 added
[  177.926570][T10711] team0: Port device team_slave_1 added
[  178.063932][T10711] batman_adv: batadv0: Adding interface: batadv_slave_0
[  178.070931][T10711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.109845][T10711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  178.159885][T10711] batman_adv: batadv0: Adding interface: batadv_slave_1
[  178.191257][T10711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.244879][T10711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  178.312130][T10841] vlan1: entered promiscuous mode
[  178.317689][T10841] vlan1: entered allmulticast mode
[  178.329205][T10842] netlink: 1275 bytes leftover after parsing attributes in process `syz.0.1448'.
[  178.374562][T10842] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.378096][T10711] hsr_slave_0: entered promiscuous mode
[  178.414945][T10711] hsr_slave_1: entered promiscuous mode
[  178.421046][T10711] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  178.471546][T10711] Cannot create hsr debugfs directory
[  178.900954][T10864] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1455'.
[  179.004962][ T5852] Bluetooth: hci4: command tx timeout
[  179.094949][T10872] netlink: 'syz.0.1457': attribute type 24 has an invalid length.
[  179.172693][T10875] netlink: 'syz.2.1459': attribute type 1 has an invalid length.
[  179.255688][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1459'.
[  179.430158][T10885] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1460'.
[  179.434298][T10711] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  179.476606][T10711] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  179.493159][T10711] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  179.502317][T10892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1462'.
[  179.531840][T10711] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  179.749353][T10711] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.803302][T10711] 8021q: adding VLAN 0 to HW filter on device team0
[  179.844930][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.852058][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.881750][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.888929][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.161523][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1474'.
[  180.177987][T10934] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  180.205547][T10930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1474'.
[  180.270988][T10711] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.347027][T10941] netlink: 'syz.4.1477': attribute type 24 has an invalid length.
[  180.357007][T10711] veth0_vlan: entered promiscuous mode
[  180.375770][T10711] veth1_vlan: entered promiscuous mode
[  180.437957][T10711] veth0_macvtap: entered promiscuous mode
[  180.471694][T10711] veth1_macvtap: entered promiscuous mode
[  180.509649][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.534780][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.561201][T10711] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.583604][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.613745][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.655333][T10711] batman_adv: batadv0: Interface activated: batadv_slave_1
[  180.716169][T10711] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.738087][T10711] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.762686][T10711] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.763900][T10953] netlink: 'syz.2.1482': attribute type 4 has an invalid length.
[  180.784735][T10711] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.803058][T10950] netlink: 'syz.0.1480': attribute type 1 has an invalid length.
[  180.818611][T10954] netlink: 'syz.2.1482': attribute type 4 has an invalid length.
[  180.982512][T10956] bond4: entered promiscuous mode
[  180.992392][T10956] bond4: entered allmulticast mode
[  181.002637][T10956] 8021q: adding VLAN 0 to HW filter on device bond4
[  181.084137][ T5852] Bluetooth: hci4: command tx timeout
[  181.183350][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.218230][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.276178][T10976] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1490'.
[  181.284840][T10763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.307674][T10763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.413842][T10983] bridge0: entered promiscuous mode
[  181.440593][T10984] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1492'.
[  181.484425][T10984] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1492'.
[  181.535338][T10983] netlink: 'syz.0.1492': attribute type 1 has an invalid length.
[  181.544673][T10994] netlink: 'syz.1.1494': attribute type 10 has an invalid length.
[  181.583358][T10990] netlink: 'syz.4.1495': attribute type 2 has an invalid length.
[  181.621104][T10994] team0: Device veth1_macvtap failed to register rx_handler
[  181.691539][T10996] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1497'.
[  181.900134][T11005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1499'.
[  181.994369][T11009] openvswitch: netlink: Multiple metadata blocks provided
[  182.215013][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1502'.
[  182.234636][T10980] bridge0: left promiscuous mode
[  182.488744][T11039] netlink: 'syz.4.1507': attribute type 4 has an invalid length.
[  182.491093][T11037] netlink: 'syz.2.1508': attribute type 11 has an invalid length.
[  182.675693][T11048] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1512'.
[  182.764920][T11050] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  182.898591][T10764] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.840794][T10764] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.899782][T10764] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.958640][T10764] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.033494][T10764] bridge_slave_1: left allmulticast mode
[  184.039384][T10764] bridge_slave_1: left promiscuous mode
[  184.046983][T10764] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.056938][T10764] bridge_slave_0: left allmulticast mode
[  184.062597][T10764] bridge_slave_0: left promiscuous mode
[  184.068495][T10764] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.504010][T11077] openvswitch: netlink: Key type 14607 is out of range max 32
[  184.794540][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  184.809935][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  184.823573][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  184.843387][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  184.854309][T10764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  184.863309][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  184.872288][T10764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.872763][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  184.900502][T10764] bond0 (unregistering): Released all slaves
[  185.453391][T10764] hsr_slave_0: left promiscuous mode
[  185.463965][T10764] hsr_slave_1: left promiscuous mode
[  185.469861][T10764] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.493527][T10764] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.503233][T10764] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.513812][T10764] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.533085][T11129] netlink: 'syz.2.1532': attribute type 1 has an invalid length.
[  185.583323][T10764] veth1_macvtap: left promiscuous mode
[  185.594497][T10764] veth0_macvtap: left promiscuous mode
[  185.603895][T10764] veth1_vlan: left promiscuous mode
[  185.617445][T10764] veth0_vlan: left promiscuous mode
[  186.079966][T10764] team0 (unregistering): Port device team_slave_1 removed
[  186.120776][T10764] team0 (unregistering): Port device team_slave_0 removed
[  186.370702][ T5846] Bluetooth: hci3: command 0x0406 tx timeout
[  186.371662][ T5843] Bluetooth: hci1: command 0x0406 tx timeout
[  186.771365][T11153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1541'.
[  186.796859][T11154] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1541'.
[  186.813863][T11092] chnl_net:caif_netlink_parms(): no params data found
[  186.857529][T11158] netlink: 'syz.1.1542': attribute type 10 has an invalid length.
[  186.867027][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1541'.
[  186.924640][ T5834] Bluetooth: hci4: command tx timeout
[  186.963536][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1541'.
[  187.163754][T11092] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.178915][T11092] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.197337][T11092] bridge_slave_0: entered allmulticast mode
[  187.212033][T11092] bridge_slave_0: entered promiscuous mode
[  187.219507][T11186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1548'.
[  187.240624][T11092] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.248194][T11092] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.255581][T11092] bridge_slave_1: entered allmulticast mode
[  187.264850][T11092] bridge_slave_1: entered promiscuous mode
[  187.307521][T11191] netlink: 1260 bytes leftover after parsing attributes in process `syz.0.1549'.
[  187.325486][T11191] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.339672][T11092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.370283][T11092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.393215][T11191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1549'.
[  187.402770][T11192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1549'.
[  187.412457][T11191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1549'.
[  187.449335][T11092] team0: Port device team_slave_0 added
[  187.466148][T11092] team0: Port device team_slave_1 added
[  187.556026][T11198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1551'.
[  187.629770][T11092] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.653109][T11092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.689613][T11092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.703077][T11092] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.726059][T11092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.766706][T11092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.866771][T11092] hsr_slave_0: entered promiscuous mode
[  187.875483][T11092] hsr_slave_1: entered promiscuous mode
[  187.881656][T11092] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  187.895308][T11092] Cannot create hsr debugfs directory
[  188.330400][T11252] netlink: 'syz.1.1562': attribute type 10 has an invalid length.
[  188.643807][T11092] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  188.662366][T11092] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  188.684270][T11273] netlink: 'syz.0.1568': attribute type 39 has an invalid length.
[  188.756726][T11092] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  188.799878][T11092] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  188.981964][T11092] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.004365][ T5834] Bluetooth: hci4: command tx timeout
[  189.029959][T11092] 8021q: adding VLAN 0 to HW filter on device team0
[  189.044526][T10764] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.051691][T10764] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.087787][T11297] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  189.099893][T11296] bridge1: entered promiscuous mode
[  189.107695][T11296] bridge1: entered allmulticast mode
[  189.117581][T10764] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.124743][T10764] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.390396][T11313] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  189.492040][T11314] can: request_module (can-proto-0) failed.
[  189.536713][T11092] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.643265][T11092] veth0_vlan: entered promiscuous mode
[  189.665361][T11092] veth1_vlan: entered promiscuous mode
[  189.728033][T11092] veth0_macvtap: entered promiscuous mode
[  189.745809][T11335] netlink: 'syz.2.1582': attribute type 3 has an invalid length.
[  189.749625][T11092] veth1_macvtap: entered promiscuous mode
[  189.800485][T11092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.849679][T11092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.867404][T11092] batman_adv: batadv0: Interface activated: batadv_slave_0
[  189.889770][T11092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.903590][T11092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.915668][T11092] batman_adv: batadv0: Interface activated: batadv_slave_1
[  189.940250][T11092] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.948911][T11342] netlink: 'syz.2.1586': attribute type 10 has an invalid length.
[  189.950478][T11092] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.966009][T11092] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.975311][T11092] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.997664][T11342] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  190.017802][T11341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  190.122062][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.142734][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.187529][T10764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.201929][T10764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.644749][T11380] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  190.676725][T11380] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  190.694020][T11379] xt_CT: No such helper "pptp"
[  191.015905][T11401] vlan1: entered promiscuous mode
[  191.021069][T11401] vlan1: entered allmulticast mode
[  191.412658][T11424] netlink: 'syz.2.1610': attribute type 3 has an invalid length.
[  191.683423][   T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.921520][   T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.072256][T11432] vlan3: entered promiscuous mode
[  193.079798][T11432] vlan3: entered allmulticast mode
[  193.103459][T11436] __nla_validate_parse: 12 callbacks suppressed
[  193.103477][T11436] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1613'.
[  193.262467][   T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.335819][T11444] dccp_invalid_packet: P.Data Offset(0) too small
[  193.486766][   T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.579934][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  193.590916][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  193.604576][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  193.615084][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  193.628871][ T5852] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  193.630387][T11454] netlink: 'syz.4.1623': attribute type 2 has an invalid length.
[  193.644835][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  194.077511][T11474] nbd: must specify an index to disconnect
[  194.135106][   T67] bridge_slave_1: left allmulticast mode
[  194.140809][   T67] bridge_slave_1: left promiscuous mode
[  194.146892][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.160207][   T67] bridge_slave_0: left allmulticast mode
[  194.182039][   T67] bridge_slave_0: left promiscuous mode
[  194.195069][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.359060][T11490] netlink: 'syz.2.1633': attribute type 1 has an invalid length.
[  194.371939][T11490] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1633'.
[  194.386634][T11490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1633'.
[  194.536156][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  194.633838][   T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  194.649589][   T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  194.659809][   T67] bond0 (unregistering): Released all slaves
[  194.682821][T11479] vlan3: entered promiscuous mode
[  194.688456][T11479] vlan3: entered allmulticast mode
[  194.827855][T11455] chnl_net:caif_netlink_parms(): no params data found
[  194.906042][T11498] netlink: 'syz.4.1635': attribute type 4 has an invalid length.
[  194.946436][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1635'.
[  194.956971][T11501] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1636'.
[  195.065227][T11512] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.1638'.
[  195.114066][T11512] openvswitch: netlink: Flow actions attr not present in new flow.
[  195.249598][T11455] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.267825][T11455] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.288831][T11455] bridge_slave_0: entered allmulticast mode
[  195.314001][T11455] bridge_slave_0: entered promiscuous mode
[  195.333101][T11455] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.355227][T11455] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.362516][T11455] bridge_slave_1: entered allmulticast mode
[  195.405778][T11455] bridge_slave_1: entered promiscuous mode
[  195.487523][   T67] hsr_slave_0: left promiscuous mode
[  195.497169][   T67] hsr_slave_1: left promiscuous mode
[  195.503147][   T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  195.524305][   T67] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.532491][   T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  195.540404][   T67] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.580839][   T67] veth1_macvtap: left promiscuous mode
[  195.587034][   T67] veth0_macvtap: left promiscuous mode
[  195.592749][   T67] veth1_vlan: left promiscuous mode
[  195.598452][   T67] veth0_vlan: left promiscuous mode
[  195.723880][ T5834] Bluetooth: hci4: command tx timeout
[  196.034832][T11545] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1651'.
[  196.211058][   T67] team0 (unregistering): Port device team_slave_1 removed
[  196.256385][   T67] team0 (unregistering): Port device team_slave_0 removed
[  196.682650][T11533] vlan3: entered promiscuous mode
[  196.700139][T11533] vlan3: entered allmulticast mode
[  196.755644][T11455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.796178][T11455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.892616][T11556] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1655'.
[  196.904664][T11556] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.018315][T11455] team0: Port device team_slave_0 added
[  197.051823][T11455] team0: Port device team_slave_1 added
[  197.147176][T11455] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.166206][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1657'.
[  197.184616][T11455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.185080][T11572] netlink: 1275 bytes leftover after parsing attributes in process `syz.0.1658'.
[  197.210823][T11455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.233200][T11455] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.245005][T11455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.253927][T11572] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.280244][T11455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.483755][T11455] hsr_slave_0: entered promiscuous mode
[  197.490164][T11455] hsr_slave_1: entered promiscuous mode
[  197.512388][T11455] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  197.524150][T11455] Cannot create hsr debugfs directory
[  197.626615][T11593] netlink: 'syz.2.1664': attribute type 29 has an invalid length.
[  197.643579][T11593] netlink: 'syz.2.1664': attribute type 29 has an invalid length.
[  197.740714][T11598] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  197.761948][T11598] macvlan2: entered allmulticast mode
[  197.772741][T11598] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  197.790716][T11598] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  197.791230][T11601] xt_policy: too many policy elements
[  197.810007][ T5834] Bluetooth: hci4: command tx timeout
[  197.941158][   T29] audit: type=1107 audit(1740753942.281:4): pid=11609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  198.107815][T11619] __nla_validate_parse: 1 callbacks suppressed
[  198.107832][T11619] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1673'.
[  198.319800][T11636] netlink: 'syz.1.1676': attribute type 4 has an invalid length.
[  198.329166][T11636] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1676'.
[  198.613553][T11642] vlan3: entered promiscuous mode
[  198.644139][T11642] vlan3: entered allmulticast mode
[  198.892605][T11658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  198.965052][T11455] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  199.007027][T11455] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  199.036820][T11455] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  199.045001][T11667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1685'.
[  199.056522][T11455] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  199.077592][T11669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1686'.
[  199.126926][T11669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1686'.
[  199.209437][T11455] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.289859][T11455] 8021q: adding VLAN 0 to HW filter on device team0
[  199.323123][T10763] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.330300][T10763] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.435980][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.443144][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.551974][T11455] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  199.583250][T11455] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  199.617020][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1694'.
[  199.850982][T11455] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.883860][ T5852] Bluetooth: hci4: command tx timeout
[  199.992560][T11455] veth0_vlan: entered promiscuous mode
[  200.035923][T11455] veth1_vlan: entered promiscuous mode
[  200.123027][T11455] veth0_macvtap: entered promiscuous mode
[  200.155733][T11455] veth1_macvtap: entered promiscuous mode
[  200.190681][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  200.213844][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.253754][T11455] batman_adv: batadv0: Interface activated: batadv_slave_0
[  200.268898][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  200.290657][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  200.303505][T11455] batman_adv: batadv0: Interface activated: batadv_slave_1
[  200.328877][T11455] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.349468][T11455] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.375463][T11455] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.392864][T11455] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.635260][T10763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.643143][T10763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.735707][T10760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.754384][T10760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.038976][T11750] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1713'.
[  201.371743][T11774] netlink: 'syz.4.1716': attribute type 21 has an invalid length.
[  201.400138][T11774] netlink: 'syz.4.1716': attribute type 6 has an invalid length.
[  201.431905][T11774] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1716'.
[  201.735240][T11796] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9
[  201.878374][T11802] ieee802154 phy1 wpan1: encryption failed: -22
[  201.884948][T11801] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  201.905587][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1726'.
[  201.930845][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1726'.
[  201.974203][ T5852] Bluetooth: hci4: command 0x0419 tx timeout
[  202.743060][T11855] �
: renamed from xfrm0
[  202.942146][T11865] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  203.009763][T10763] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.027436][T11869] netlink: 'syz.0.1749': attribute type 1 has an invalid length.
[  203.135708][T10763] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.218415][T10763] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.293436][T10763] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.366194][T10763] bridge_slave_1: left allmulticast mode
[  203.371866][T10763] bridge_slave_1: left promiscuous mode
[  203.378971][T10763] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.387946][T10763] bridge_slave_0: left allmulticast mode
[  203.393973][T10763] bridge_slave_0: left promiscuous mode
[  203.400131][T10763] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.716638][T10763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  203.728675][T10763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  203.739783][T10763] bond0 (unregistering): Released all slaves
[  203.990519][T10763] hsr_slave_0: left promiscuous mode
[  203.997279][T10763] hsr_slave_1: left promiscuous mode
[  204.002977][T10763] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.010549][T10763] batman_adv: batadv0: Removing interface: batadv_slave_0
[  204.018755][T10763] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  204.026943][T10763] batman_adv: batadv0: Removing interface: batadv_slave_1
[  204.051879][T10763] veth1_macvtap: left promiscuous mode
[  204.057479][T10763] veth0_macvtap: left promiscuous mode
[  204.063012][T10763] veth1_vlan: left promiscuous mode
[  204.068390][T10763] veth0_vlan: left promiscuous mode
[  204.461744][T10763] team0 (unregistering): Port device team_slave_1 removed
[  204.507378][T10763] team0 (unregistering): Port device team_slave_0 removed
[  204.964161][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  204.980007][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  204.988128][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  205.012558][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  205.020655][ T5852] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  205.029972][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  205.307324][T11883] netlink: 'syz.4.1753': attribute type 2 has an invalid length.
[  205.481753][T11895] netlink: 'syz.2.1757': attribute type 10 has an invalid length.
[  205.677657][T11907] __nla_validate_parse: 2 callbacks suppressed
[  205.677677][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'.
[  205.754325][T11889] chnl_net:caif_netlink_parms(): no params data found
[  205.818158][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  205.959648][T11922] netlink: 'syz.1.1767': attribute type 4 has an invalid length.
[  206.098642][T11930] vlan1: entered promiscuous mode
[  206.110626][T11930] vlan1: entered allmulticast mode
[  206.128467][T11889] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.136072][T11889] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.150590][T11889] bridge_slave_0: entered allmulticast mode
[  206.163373][T11889] bridge_slave_0: entered promiscuous mode
[  206.172184][T11889] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.179488][T11889] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.186881][T11889] bridge_slave_1: entered allmulticast mode
[  206.204248][T11889] bridge_slave_1: entered promiscuous mode
[  206.340776][T11889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.383338][T11889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.394895][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1772'.
[  206.487954][T11889] team0: Port device team_slave_0 added
[  206.500208][T11889] team0: Port device team_slave_1 added
[  206.519529][T11943] ksmbd: Unknown IPC event: 4, ignore.
[  206.545733][T11889] batman_adv: batadv0: Adding interface: batadv_slave_0
[  206.554017][T11943] IPVS: set_ctl: invalid protocol: 113 0.0.0.0:20004
[  206.562686][T11943] xt_cgroup: path and classid specified
[  206.563916][T11889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.595341][T11889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  206.609315][T11889] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.643024][T11889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.679207][T11889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  206.761988][T11889] hsr_slave_0: entered promiscuous mode
[  206.772548][T11889] hsr_slave_1: entered promiscuous mode
[  206.779122][T11889] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  206.814000][T11889] Cannot create hsr debugfs directory
[  206.965146][T11953] netlink: 'syz.4.1777': attribute type 1 has an invalid length.
[  206.980666][T11953] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1777'.
[  207.001175][T11953] netlink: 'syz.4.1777': attribute type 1 has an invalid length.
[  207.085011][ T5834] Bluetooth: hci4: command tx timeout
[  207.138701][T11955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1778'.
[  207.239972][T11962] vlan1: entered promiscuous mode
[  207.245375][T11962] vlan1: entered allmulticast mode
[  207.276610][T11967] netlink: 'syz.0.1783': attribute type 1 has an invalid length.
[  207.321459][T11967] bond4: entered promiscuous mode
[  207.327776][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1783'.
[  207.353590][T11967] bond4: entered allmulticast mode
[  207.414619][T11970] bond5: entered allmulticast mode
[  207.436976][T11970] 8021q: adding VLAN 0 to HW filter on device bond5
[  207.456752][T11970] bond4: (slave bond5): Enslaving as an active interface with a down link
[  207.612809][T11889] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  207.635268][T11889] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  207.666972][T11889] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  207.697419][T11889] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  207.916703][T11889] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.944998][T12003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1791'.
[  207.960263][T11889] 8021q: adding VLAN 0 to HW filter on device team0
[  207.986519][T10760] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.993744][T10760] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.026655][T12003] nbd: socks must be embedded in a SOCK_ITEM attr
[  208.046275][T10757] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.053428][T10757] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.075138][T12009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1791'.
[  208.087629][T12009] nbd: device at index 64 is going down
[  208.168562][T12011] vlan1: entered promiscuous mode
[  208.174000][T12011] vlan1: entered allmulticast mode
[  208.588618][T12035] netlink: 'syz.4.1802': attribute type 1 has an invalid length.
[  208.597283][T12035] netlink: 'syz.4.1802': attribute type 2 has an invalid length.
[  208.602398][T11889] 8021q: adding VLAN 0 to HW filter on device batadv0
[  208.632572][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1801'.
[  208.653008][T12036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1801'.
[  208.746213][T11889] veth0_vlan: entered promiscuous mode
[  208.779930][T11889] veth1_vlan: entered promiscuous mode
[  208.838854][T11889] veth0_macvtap: entered promiscuous mode
[  208.885840][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1803'.
[  208.897058][T11889] veth1_macvtap: entered promiscuous mode
[  208.941518][T11889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  208.983808][T11889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.015711][T11889] batman_adv: batadv0: Interface activated: batadv_slave_0
[  209.042772][T11889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.062217][T11889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.076095][T11889] batman_adv: batadv0: Interface activated: batadv_slave_1
[  209.097712][T11889] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.110138][T11889] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.127098][T11889] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.142038][T11889] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.165097][ T5834] Bluetooth: hci4: command tx timeout
[  209.182119][T12057] vlan3: entered promiscuous mode
[  209.191993][T12057] vlan3: entered allmulticast mode
[  209.209532][T12059] netlink: 'syz.2.1809': attribute type 3 has an invalid length.
[  209.399630][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.430421][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.524482][T10755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.539667][T12071] xt_hashlimit: invalid rate
[  209.552726][T10755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.895752][T12083] netlink: 'syz.0.1818': attribute type 1 has an invalid length.
[  209.915251][T12083] netlink: 'syz.0.1818': attribute type 1 has an invalid length.
[  210.896974][T12134] __nla_validate_parse: 5 callbacks suppressed
[  210.896993][T12134] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1832'.
[  210.927043][T12136] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1833'.
[  211.013480][T12138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1834'.
[  211.037501][T12138] xfrm2: entered promiscuous mode
[  211.043355][T12138] xfrm2: entered allmulticast mode
[  211.059011][T12138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1834'.
[  211.184147][T10755] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.090425][T10755] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.158957][T10755] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.228257][T10755] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.319382][T10755] bridge_slave_1: left allmulticast mode
[  212.325373][T10755] bridge_slave_1: left promiscuous mode
[  212.331044][T10755] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.340717][T10755] bridge_slave_0: left allmulticast mode
[  212.346670][T10755] bridge_slave_0: left promiscuous mode
[  212.352335][T10755] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.669128][T10755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  212.680526][T10755] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  212.692366][T10755] bond0 (unregistering): Released all slaves
[  212.858154][T12149] netlink: 'syz.4.1839': attribute type 3 has an invalid length.
[  212.892172][T12149] netlink: 'syz.4.1839': attribute type 3 has an invalid length.
[  213.254901][T10755] hsr_slave_0: left promiscuous mode
[  213.262122][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  213.276144][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  213.285846][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  213.294699][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  213.302347][ T5852] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  213.309901][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  213.328512][T10755] hsr_slave_1: left promiscuous mode
[  213.334889][T10755] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.342414][T10755] batman_adv: batadv0: Removing interface: batadv_slave_0
[  213.358172][T10755] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.366467][T10755] batman_adv: batadv0: Removing interface: batadv_slave_1
[  213.376859][T12169] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1845'.
[  213.410580][T12171] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1846'.
[  213.461910][T10755] veth1_macvtap: left promiscuous mode
[  213.467492][T10755] veth0_macvtap: left promiscuous mode
[  213.473029][T10755] veth1_vlan: left promiscuous mode
[  213.478427][T10755] veth0_vlan: left promiscuous mode
[  213.510816][T12178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1846'.
[  213.566227][T12179] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1846'.
[  213.996380][T10755] team0 (unregistering): Port device team_slave_1 removed
[  214.060104][T10755] team0 (unregistering): Port device team_slave_0 removed
[  214.344306][T12193] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1852'.
[  214.662892][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1855'.
[  214.992979][T12165] chnl_net:caif_netlink_parms(): no params data found
[  215.192461][T12165] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.208186][T12165] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.215852][T12165] bridge_slave_0: entered allmulticast mode
[  215.223033][T12165] bridge_slave_0: entered promiscuous mode
[  215.234334][T12165] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.242042][T12165] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.249553][T12165] bridge_slave_1: entered allmulticast mode
[  215.256878][T12165] bridge_slave_1: entered promiscuous mode
[  215.330433][T12165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.356916][T12165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.404962][ T5834] Bluetooth: hci4: command tx timeout
[  215.452341][T12165] team0: Port device team_slave_0 added
[  215.465637][T12165] team0: Port device team_slave_1 added
[  215.510036][T12165] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.533899][T12165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.574319][T12165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.587593][T12165] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.595002][T12165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.623142][T12165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.731958][T12245] vxcan0 (unregistering): left allmulticast mode
[  215.803075][T12255] netlink: 'syz.1.1874': attribute type 11 has an invalid length.
[  215.885362][T12165] hsr_slave_0: entered promiscuous mode
[  215.906521][T12165] hsr_slave_1: entered promiscuous mode
[  215.924900][T12165] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  215.950834][T12165] Cannot create hsr debugfs directory
[  216.069040][T12268] netlink: 'syz.4.1878': attribute type 21 has an invalid length.
[  216.097627][T12268] __nla_validate_parse: 12 callbacks suppressed
[  216.097647][T12268] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1878'.
[  216.137827][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1880'.
[  216.173586][T12274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1880'.
[  216.475903][T12297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1885'.
[  216.626719][T12305] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  216.809640][T12165] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  216.859288][T12165] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  216.878718][T12317] netlink: 'syz.2.1890': attribute type 10 has an invalid length.
[  216.890233][T12165] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  216.893504][T12317] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1890'.
[  216.911065][T12165] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  216.938515][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1892'.
[  216.950309][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1892'.
[  216.976088][T12317] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.1890'.
[  216.985848][T12317] openvswitch: netlink: Missing key (keys=40, expected=80)
[  217.031848][T12328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1894'.
[  217.034146][T12326] FAULT_INJECTION: forcing a failure.
[  217.034146][T12326] name failslab, interval 1, probability 0, space 0, times 0
[  217.054715][T12326] CPU: 1 UID: 0 PID: 12326 Comm: syz.4.1893 Not tainted 6.14.0-rc4-syzkaller-00171-g00371a3f4877 #0
[  217.054739][T12326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  217.054753][T12326] Call Trace:
[  217.054762][T12326]  <TASK>
[  217.054769][T12326]  dump_stack_lvl+0x241/0x360
[  217.054803][T12326]  ? __pfx_dump_stack_lvl+0x10/0x10
[  217.054818][T12326]  ? __pfx__printk+0x10/0x10
[  217.054832][T12326]  ? fs_reclaim_acquire+0x93/0x130
[  217.054848][T12326]  ? __pfx___might_resched+0x10/0x10
[  217.054872][T12326]  should_fail_ex+0x40a/0x550
[  217.054897][T12326]  should_failslab+0xac/0x100
[  217.054920][T12326]  __kmalloc_noprof+0xdd/0x4c0
[  217.054938][T12326]  ? kstrtouint_from_user+0x128/0x190
[  217.054953][T12326]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  217.054973][T12326]  tomoyo_realpath_from_path+0xcf/0x5e0
[  217.054998][T12326]  tomoyo_path_number_perm+0x239/0x770
[  217.055017][T12326]  ? __lock_acquire+0x1397/0x2100
[  217.055041][T12326]  ? tomoyo_path_number_perm+0x209/0x770
[  217.055062][T12326]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  217.055116][T12326]  ? __fget_files+0x2a/0x410
[  217.055141][T12326]  ? __fget_files+0x2a/0x410
[  217.055167][T12326]  security_file_ioctl+0xc6/0x2a0
[  217.055188][T12326]  __se_sys_ioctl+0x46/0x170
[  217.055208][T12326]  do_syscall_64+0xf3/0x230
[  217.055229][T12326]  ? clear_bhb_loop+0x35/0x90
[  217.055253][T12326]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.055273][T12326] RIP: 0033:0x7f57e518d169
[  217.055294][T12326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  217.055308][T12326] RSP: 002b:00007f57e5f9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  217.055333][T12326] RAX: ffffffffffffffda RBX: 00007f57e53a5fa0 RCX: 00007f57e518d169
[  217.055345][T12326] RDX: 0000400000000040 RSI: 0000000000008b2a RDI: 0000000000000005
[  217.055355][T12326] RBP: 00007f57e5f9a090 R08: 0000000000000000 R09: 0000000000000000
[  217.055365][T12326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  217.055375][T12326] R13: 0000000000000000 R14: 00007f57e53a5fa0 R15: 00007ffedab05ac8
[  217.055403][T12326]  </TASK>
[  217.061334][T12326] ERROR: Out of memory at tomoyo_realpath_from_path.
[  217.121981][T12328] xfrm2: entered promiscuous mode
[  217.290721][T12328] xfrm2: entered allmulticast mode
[  217.329652][T12165] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.355997][T12165] 8021q: adding VLAN 0 to HW filter on device team0
[  217.390867][T10764] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.398064][T10764] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.445735][T10764] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.452915][T10764] bridge0: port 2(bridge_slave_1) entered forwarding state
[  217.489881][ T5834] Bluetooth: hci4: command tx timeout
[  217.571636][T12339] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  217.618531][T12340] netlink: 'syz.4.1898': attribute type 4 has an invalid length.
[  217.681989][T12343] netlink: 'syz.4.1898': attribute type 4 has an invalid length.
[  217.698343][T12344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1899'.
[  217.750942][T12340] x_tables: duplicate underflow at hook 2
[  217.875283][T12352] xt_TCPMSS: Only works on TCP SYN packets
[  217.936850][T12165] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.077486][T12165] veth0_vlan: entered promiscuous mode
[  218.119388][T12165] veth1_vlan: entered promiscuous mode
[  218.148127][T12365] netlink: 'syz.4.1904': attribute type 39 has an invalid length.
[  218.222318][T12165] veth0_macvtap: entered promiscuous mode
[  218.265536][T12165] veth1_macvtap: entered promiscuous mode
[  218.323520][T12165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.347526][T12165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.359361][T12165] batman_adv: batadv0: Interface activated: batadv_slave_0
[  218.371844][T12165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.382613][T12165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.395306][T12165] batman_adv: batadv0: Interface activated: batadv_slave_1
[  218.407262][   T29] audit: type=1800 audit(1740753962.751:5): pid=12380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1907" name="memory.events" dev="tmpfs" ino=2323 res=0 errno=0
[  218.440278][T12382] openvswitch: netlink: Missing valid actions attribute.
[  218.469004][T12382] openvswitch: netlink: Actions may not be safe on all matching packets
[  218.475987][T12165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.486488][   T29] audit: type=1804 audit(1740753962.811:6): pid=12376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1907" name="/newroot/452/memory.events" dev="tmpfs" ino=2323 res=1 errno=0
[  218.524792][T12165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.536494][T12165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.545502][T12165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.690958][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.711085][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.790863][T12395] erspan0: vlans aren't supported yet for dev_uc|mc_add()
[  218.862630][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.882278][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.442146][T12420] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  219.530267][T12426] batadv_slave_0: entered promiscuous mode
[  219.537038][T12426] batadv_slave_0: left promiscuous mode
[  220.374170][T10763] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.768722][T10763] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.841479][T10763] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.916929][T10763] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.992711][T10763] bridge_slave_1: left allmulticast mode
[  220.998572][T10763] bridge_slave_1: left promiscuous mode
[  221.006794][T10763] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.016675][T10763] bridge_slave_0: left allmulticast mode
[  221.022458][T10763] bridge_slave_0: left promiscuous mode
[  221.028262][T10763] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.333533][T10763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  221.347058][T10763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  221.357777][T10763] bond0 (unregistering): Released all slaves
[  221.586673][T10763] hsr_slave_0: left promiscuous mode
[  221.592534][T10763] hsr_slave_1: left promiscuous mode
[  221.598291][T10763] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.606961][T10763] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.615374][T10763] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  221.622772][T10763] batman_adv: batadv0: Removing interface: batadv_slave_1
[  221.644250][T10763] veth1_macvtap: left promiscuous mode
[  221.649805][T10763] veth0_macvtap: left promiscuous mode
[  221.655460][T10763] veth1_vlan: left promiscuous mode
[  221.660697][T10763] veth0_vlan: left promiscuous mode
[  222.040421][T10763] team0 (unregistering): Port device team_slave_1 removed
[  222.080481][T10763] team0 (unregistering): Port device team_slave_0 removed
[  222.232299][T12470] __nla_validate_parse: 7 callbacks suppressed
[  222.232317][T12470] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1940'.
[  222.677012][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  222.687038][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  222.697621][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  222.712730][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  222.720741][ T5852] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  222.728378][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  223.079792][T12498] vlan3: entered promiscuous mode
[  223.089509][T12498] vlan3: entered allmulticast mode
[  223.190604][T12507] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  223.291975][T12507] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  223.499668][T12526] FAULT_INJECTION: forcing a failure.
[  223.499668][T12526] name failslab, interval 1, probability 0, space 0, times 0
[  223.549513][T12526] CPU: 0 UID: 0 PID: 12526 Comm: syz.0.1958 Not tainted 6.14.0-rc4-syzkaller-00171-g00371a3f4877 #0
[  223.549544][T12526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  223.549555][T12526] Call Trace:
[  223.549562][T12526]  <TASK>
[  223.549571][T12526]  dump_stack_lvl+0x241/0x360
[  223.549596][T12526]  ? __pfx_dump_stack_lvl+0x10/0x10
[  223.549613][T12526]  ? __pfx__printk+0x10/0x10
[  223.549632][T12526]  ? __kmalloc_noprof+0xb5/0x4c0
[  223.549654][T12526]  ? __pfx___might_resched+0x10/0x10
[  223.549679][T12526]  should_fail_ex+0x40a/0x550
[  223.549707][T12526]  should_failslab+0xac/0x100
[  223.549728][T12526]  __kmalloc_noprof+0xdd/0x4c0
[  223.549748][T12526]  ? ioctl_standard_iw_point+0x4af/0xcb0
[  223.549770][T12526]  ioctl_standard_iw_point+0x4af/0xcb0
[  223.549799][T12526]  ? __pfx_cfg80211_wext_siwencode+0x10/0x10
[  223.549822][T12526]  ? __pfx_ioctl_standard_iw_point+0x10/0x10
[  223.549839][T12526]  ? __pfx___mutex_lock+0x10/0x10
[  223.549861][T12526]  ? rcu_is_watching+0x15/0xb0
[  223.549882][T12526]  ? full_name_hash+0x93/0xe0
[  223.549908][T12526]  ioctl_standard_call+0xbd/0x190
[  223.549930][T12526]  ? __pfx_cfg80211_wext_siwencode+0x10/0x10
[  223.549950][T12526]  ? __pfx_cfg80211_wext_siwencode+0x10/0x10
[  223.549974][T12526]  wext_ioctl_dispatch+0xe4/0x410
[  223.550002][T12526]  ? __pfx_ioctl_standard_call+0x10/0x10
[  223.550028][T12526]  wext_handle_ioctl+0x166/0x280
[  223.550054][T12526]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  223.550093][T12526]  sock_ioctl+0x17c/0x8e0
[  223.550115][T12526]  ? __pfx_sock_ioctl+0x10/0x10
[  223.550132][T12526]  ? __fget_files+0x2a/0x410
[  223.550157][T12526]  ? __fget_files+0x2a/0x410
[  223.550182][T12526]  ? __pfx_sock_ioctl+0x10/0x10
[  223.550201][T12526]  __se_sys_ioctl+0xf5/0x170
[  223.550221][T12526]  do_syscall_64+0xf3/0x230
[  223.550242][T12526]  ? clear_bhb_loop+0x35/0x90
[  223.550267][T12526]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.550287][T12526] RIP: 0033:0x7f56e698d169
[  223.550302][T12526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  223.550317][T12526] RSP: 002b:00007f56e7780038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  223.550336][T12526] RAX: ffffffffffffffda RBX: 00007f56e6ba5fa0 RCX: 00007f56e698d169
[  223.550349][T12526] RDX: 0000400000000040 RSI: 0000000000008b2a RDI: 0000000000000005
[  223.550359][T12526] RBP: 00007f56e7780090 R08: 0000000000000000 R09: 0000000000000000
[  223.550369][T12526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  223.550379][T12526] R13: 0000000000000000 R14: 00007f56e6ba5fa0 R15: 00007ffca753ca48
[  223.550407][T12526]  </TASK>
[  223.839825][T12494] chnl_net:caif_netlink_parms(): no params data found
[  223.937091][T12529] netlink: 'syz.1.1960': attribute type 4 has an invalid length.
[  223.945812][T12532] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1961'.
[  223.954764][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1960'.
[  223.976983][T12532] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1961'.
[  224.083973][T12494] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.114100][T12494] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.121628][T12494] bridge_slave_0: entered allmulticast mode
[  224.144473][T12494] bridge_slave_0: entered promiscuous mode
[  224.215029][T12494] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.242636][T12494] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.251393][T12494] bridge_slave_1: entered allmulticast mode
[  224.266097][T12494] bridge_slave_1: entered promiscuous mode
[  224.307268][T12555] IPv6: NLM_F_CREATE should be specified when creating new route
[  224.315715][T12558] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1967'.
[  224.400869][T12494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  224.421099][T12494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  224.505323][T12570] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1972'.
[  224.508938][T12494] team0: Port device team_slave_0 added
[  224.535593][T12494] team0: Port device team_slave_1 added
[  224.575079][T12571] netlink: 'syz.1.1971': attribute type 10 has an invalid length.
[  224.614739][T12571] syz_tun: entered promiscuous mode
[  224.630703][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1971'.
[  224.633320][T12571] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  224.671259][T12584] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1976'.
[  224.691191][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1976'.
[  224.706581][T12494] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.714292][T12586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1976'.
[  224.730717][T12494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.761303][T12494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.781038][ T5852] Bluetooth: hci4: command tx timeout
[  224.843579][T12494] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.851011][T12494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.893772][T12494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  225.144874][T12494] hsr_slave_0: entered promiscuous mode
[  225.174030][T12494] hsr_slave_1: entered promiscuous mode
[  225.192649][T12494] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  225.204279][T12494] Cannot create hsr debugfs directory
[  226.250344][T12649] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.269823][T12649] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.314566][T12649] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.322792][T12649] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.353863][T12649] geneve2: entered promiscuous mode
[  226.378303][T12649] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.396276][T12649] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.415785][T12649] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.444045][T12649] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.839033][T12494] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  226.844938][ T5852] Bluetooth: hci4: command tx timeout
[  226.884301][T12494] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  226.945327][T12672] delete_channel: no stack
[  226.950387][T12494] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  226.989135][T12494] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  227.108677][T12699] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  227.133537][T12704] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  227.166636][T12494] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.252400][T12494] 8021q: adding VLAN 0 to HW filter on device team0
[  227.262661][T12708] sctp: [Deprecated]: syz.0.2010 (pid 12708) Use of int in max_burst socket option deprecated.
[  227.262661][T12708] Use struct sctp_assoc_value instead
[  227.309120][T10763] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.316288][T10763] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.335005][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.342160][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.370117][T12710] SET target dimension over the limit!
[  227.441267][T12494] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  227.471793][T12494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  227.487981][T12716] __nla_validate_parse: 5 callbacks suppressed
[  227.487999][T12716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2013'.
[  227.777695][T12731] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2018'.
[  227.842647][T12494] 8021q: adding VLAN 0 to HW filter on device batadv0
[  227.868996][T12736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2020'.
[  227.934948][T12494] veth0_vlan: entered promiscuous mode
[  227.952722][T12494] veth1_vlan: entered promiscuous mode
[  228.069316][T12494] veth0_macvtap: entered promiscuous mode
[  228.143861][T12494] veth1_macvtap: entered promiscuous mode
[  228.174110][T12494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.189184][T12494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.200750][T12494] batman_adv: batadv0: Interface activated: batadv_slave_0
[  228.251587][T12494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.295942][T12494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.334999][T12494] batman_adv: batadv0: Interface activated: batadv_slave_1
[  228.411861][T12755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  228.442796][T12494] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.481221][T12494] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.490373][T12494] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.499341][T12494] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.669637][T12773] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2034'.
[  228.737213][T12755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  228.755963][T10763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.771611][T10763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.816553][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.834506][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.926184][ T5852] Bluetooth: hci4: command tx timeout
[  229.102560][T12790] No such timeout policy "syz0"
[  229.132755][T12790] dvmrp1: entered allmulticast mode
[  229.145696][T12792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2041'.
[  229.147823][T12749] dccp_close: ABORT with 88 bytes unread
[  229.156442][T12792] netlink: 50 bytes leftover after parsing attributes in process `syz.0.2041'.
[  229.170486][T12792] netlink: 50 bytes leftover after parsing attributes in process `syz.0.2041'.
[  229.181571][T12793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2041'.
[  229.200537][T12793] netlink: 50 bytes leftover after parsing attributes in process `syz.0.2041'.
[  229.207680][T12792] netlink: 'syz.0.2041': attribute type 4 has an invalid length.
[  229.227881][T12793] netlink: 50 bytes leftover after parsing attributes in process `syz.0.2041'.
[  229.251494][T12792] netlink: 'syz.0.2041': attribute type 4 has an invalid length.
[  229.448396][T12799] netlink: 'syz.0.2043': attribute type 11 has an invalid length.
[  229.690370][T12814] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  229.951422][T12828] netlink: 'syz.4.2054': attribute type 1 has an invalid length.
[  230.101841][T12836] netlink: 'syz.1.2058': attribute type 11 has an invalid length.
[  230.128504][T10757] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.083598][T10757] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.337759][T10757] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.408293][T10757] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.490874][T10757] bridge_slave_1: left allmulticast mode
[  231.498488][T10757] bridge_slave_1: left promiscuous mode
[  231.504284][T10757] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.512743][T10757] bridge_slave_0: left allmulticast mode
[  231.518910][T10757] bridge_slave_0: left promiscuous mode
[  231.524711][T10757] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.852032][T10757] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  231.862695][T10757] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  231.873189][T10757] bond0 (unregistering): Released all slaves
[  232.116588][T12846] sctp: [Deprecated]: syz.0.2059 (pid 12846) Use of struct sctp_assoc_value in delayed_ack socket option.
[  232.116588][T12846] Use struct sctp_sack_info instead
[  232.248663][T12854] openvswitch: netlink: Missing key (keys=40, expected=80)
[  232.401389][T10757] hsr_slave_0: left promiscuous mode
[  232.417805][T10757] hsr_slave_1: left promiscuous mode
[  232.424946][T10757] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.432395][T10757] batman_adv: batadv0: Removing interface: batadv_slave_0
[  232.468120][T10757] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.476052][T10757] batman_adv: batadv0: Removing interface: batadv_slave_1
[  232.507698][T10757] veth1_macvtap: left promiscuous mode
[  232.513272][T10757] veth0_macvtap: left promiscuous mode
[  232.526009][T10757] veth1_vlan: left promiscuous mode
[  232.531387][T10757] veth0_vlan: left promiscuous mode
[  232.584352][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  232.594334][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  232.602623][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  232.611704][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  232.620593][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  232.635966][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  233.056541][T10757] team0 (unregistering): Port device team_slave_1 removed
[  233.102379][T10757] team0 (unregistering): Port device team_slave_0 removed
[  233.504373][T12865] __nla_validate_parse: 6 callbacks suppressed
[  233.504393][T12865] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2067'.
[  233.707486][T12875] macsec0: entered promiscuous mode
[  233.722859][T12875] macsec0: left promiscuous mode
[  233.899890][T12869] chnl_net:caif_netlink_parms(): no params data found
[  233.965476][T12895] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  233.989856][T12894] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  233.994861][T12897] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2075'.
[  234.114307][T12903] syz_tun: mtu less than device minimum
[  234.163546][T12909] netlink: 'syz.4.2077': attribute type 1 has an invalid length.
[  234.181369][T12869] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.199127][T12909] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2077'.
[  234.210144][T12869] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.246811][T12869] bridge_slave_0: entered allmulticast mode
[  234.269613][T12869] bridge_slave_0: entered promiscuous mode
[  234.313370][T12869] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.320765][T12869] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.328157][T12869] bridge_slave_1: entered allmulticast mode
[  234.335801][T12869] bridge_slave_1: entered promiscuous mode
[  234.406185][T12924] vlan1: entered promiscuous mode
[  234.411434][T12924] vlan1: entered allmulticast mode
[  234.446320][T12869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  234.469842][T12869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  234.530172][T12869] team0: Port device team_slave_0 added
[  234.554860][T12869] team0: Port device team_slave_1 added
[  234.636308][T12869] batman_adv: batadv0: Adding interface: batadv_slave_0
[  234.643300][T12869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.674406][T12869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  234.685481][ T5834] Bluetooth: hci4: command tx timeout
[  234.717859][T12869] batman_adv: batadv0: Adding interface: batadv_slave_1
[  234.740886][T12869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.776941][T12869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  234.786659][T12942] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  234.976349][T12869] hsr_slave_0: entered promiscuous mode
[  234.982775][T12869] hsr_slave_1: entered promiscuous mode
[  234.997059][T12950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2086'.
[  234.998337][T12869] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  235.024256][T12869] Cannot create hsr debugfs directory
[  235.053814][T12951] netlink: 'syz.2.2087': attribute type 1 has an invalid length.
[  235.208487][T12959] SET target dimension over the limit!
[  235.275404][T12964] vlan3: entered promiscuous mode
[  235.280500][T12964] vlan3: entered allmulticast mode
[  235.401035][T12974] netlink: 'syz.2.2094': attribute type 7 has an invalid length.
[  235.634389][T12985] vlan1: entered promiscuous mode
[  235.644716][T12985] vlan1: entered allmulticast mode
[  235.649893][T12985] hsr_slave_1: entered allmulticast mode
[  235.650513][T12990] netlink: 'syz.1.2098': attribute type 1 has an invalid length.
[  235.674057][T12988] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  235.676226][T12990] netlink: 'syz.1.2098': attribute type 1 has an invalid length.
[  235.718995][T12990] netlink: 134712 bytes leftover after parsing attributes in process `syz.1.2098'.
[  235.929900][T13004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2104'.
[  236.028972][T13003] IPv6: sit2: Disabled Multicast RS
[  236.040402][T12869] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  236.049046][T13003] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2103'.
[  236.071053][T12869] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  236.096148][T12869] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  236.130097][T12869] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  236.240048][T13015] team0: entered promiscuous mode
[  236.246327][T13015] C: entered promiscuous mode
[  236.252403][T13015] team_slave_1: entered promiscuous mode
[  236.260764][T13015] batadv_slave_1: entered promiscuous mode
[  236.268230][T13015] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  236.276224][T13015] Cannot create hsr debugfs directory
[  236.296279][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2109'.
[  236.417522][T12869] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.448513][T12869] 8021q: adding VLAN 0 to HW filter on device team0
[  236.462916][T10755] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.470119][T10755] bridge0: port 1(bridge_slave_0) entered forwarding state
[  236.531066][T10760] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.538269][T10760] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.587004][T13029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2113'.
[  236.771452][ T5834] Bluetooth: hci4: command tx timeout
[  236.868773][T13042] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2116'.
[  237.062224][T13051] netlink: 'syz.2.2117': attribute type 1 has an invalid length.
[  237.068876][T12869] 8021q: adding VLAN 0 to HW filter on device batadv0
[  237.205948][T12869] veth0_vlan: entered promiscuous mode
[  237.221587][T12869] veth1_vlan: entered promiscuous mode
[  237.284347][T12869] veth0_macvtap: entered promiscuous mode
[  237.318480][T12869] veth1_macvtap: entered promiscuous mode
[  237.368959][T12869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.390947][T12869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.415274][T13061] netlink: 'syz.4.2120': attribute type 10 has an invalid length.
[  237.415337][T12869] batman_adv: batadv0: Interface activated: batadv_slave_0
[  237.463582][T12869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.474936][T12869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.487721][T12869] batman_adv: batadv0: Interface activated: batadv_slave_1
[  237.500668][T13061] dummy0: entered promiscuous mode
[  237.508842][T13061] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  237.566665][T12869] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.613756][T12869] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.628356][T12869] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.642046][T12869] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.883034][T10757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.902286][T10757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.959107][T13082] netlink: 'syz.0.2126': attribute type 4 has an invalid length.
[  237.968248][T10760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.003001][T10760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.573526][T13110] __nla_validate_parse: 34 callbacks suppressed
[  238.573545][T13110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2134'.
[  238.843903][ T5852] Bluetooth: hci4: command tx timeout
[  239.248084][T13126] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2139'.
[  239.285603][T13126] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2139'.
[  239.335293][T13126] netlink: 'syz.0.2139': attribute type 6 has an invalid length.
[  239.357387][T13126] netlink: 'syz.0.2139': attribute type 5 has an invalid length.
[  239.368201][T13126] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2139'.
[  239.529951][T13146] netlink: 'syz.4.2145': attribute type 1 has an invalid length.
[  239.565635][T13143] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2145'.
[  239.614148][T13153] FAULT_INJECTION: forcing a failure.
[  239.614148][T13153] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  239.683875][T13153] CPU: 1 UID: 0 PID: 13153 Comm: syz.2.2147 Not tainted 6.14.0-rc4-syzkaller-00171-g00371a3f4877 #0
[  239.683902][T13153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  239.683913][T13153] Call Trace:
[  239.683919][T13153]  <TASK>
[  239.683926][T13153]  dump_stack_lvl+0x241/0x360
[  239.683952][T13153]  ? __pfx_dump_stack_lvl+0x10/0x10
[  239.683968][T13153]  ? __pfx__printk+0x10/0x10
[  239.683988][T13153]  ? snprintf+0xda/0x120
[  239.684008][T13153]  should_fail_ex+0x40a/0x550
[  239.684033][T13153]  _copy_to_user+0x31/0xb0
[  239.684054][T13153]  simple_read_from_buffer+0xca/0x150
[  239.684076][T13153]  proc_fail_nth_read+0x1e9/0x250
[  239.684099][T13153]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  239.684120][T13153]  ? rw_verify_area+0x243/0x630
[  239.684134][T13153]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  239.684155][T13153]  vfs_read+0x1f8/0xb40
[  239.684171][T13153]  ? fdget_pos+0x254/0x320
[  239.684191][T13153]  ? __pfx___mutex_lock+0x10/0x10
[  239.684211][T13153]  ? __pfx_vfs_read+0x10/0x10
[  239.684223][T13153]  ? do_sys_openat2+0x17a/0x1d0
[  239.684246][T13153]  ? __fget_files+0x2a/0x410
[  239.684267][T13153]  ? __fget_files+0x395/0x410
[  239.684285][T13153]  ? __fget_files+0x2a/0x410
[  239.684312][T13153]  ksys_read+0x18f/0x2b0
[  239.684330][T13153]  ? __pfx_ksys_read+0x10/0x10
[  239.684347][T13153]  ? do_syscall_64+0x100/0x230
[  239.684371][T13153]  ? do_syscall_64+0xb6/0x230
[  239.684392][T13153]  do_syscall_64+0xf3/0x230
[  239.684421][T13153]  ? clear_bhb_loop+0x35/0x90
[  239.684444][T13153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.684463][T13153] RIP: 0033:0x7f67e4d8bb7c
[  239.684478][T13153] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  239.684490][T13153] RSP: 002b:00007f67e5c5e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  239.684507][T13153] RAX: ffffffffffffffda RBX: 00007f67e4fa5fa0 RCX: 00007f67e4d8bb7c
[  239.684517][T13153] RDX: 000000000000000f RSI: 00007f67e5c5e0a0 RDI: 0000000000000004
[  239.684527][T13153] RBP: 00007f67e5c5e090 R08: 0000000000000000 R09: 0000000000000000
[  239.684537][T13153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  239.684546][T13153] R13: 0000000000000000 R14: 00007f67e4fa5fa0 R15: 00007ffe523caf58
[  239.684573][T13153]  </TASK>
[  239.738452][T13155] xt_CT: No such helper "snmp_trap"
[  239.960688][T13165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2151'.
[  240.301840][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2157'.
[  240.352913][T13187] vlan5: entered allmulticast mode
[  240.618191][T13201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2162'.
[  240.627427][T13201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2162'.
[  240.671437][T13207] netlink: 'syz.4.2162': attribute type 1 has an invalid length.
[  240.693909][T13205] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2164'.
[  240.718918][T13207] 8021q: adding VLAN 0 to HW filter on device bond6
[  240.738688][T13201] bond6: (slave gretap2): making interface the new active one
[  240.751593][T13201] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  240.965132][T13220] sctp: [Deprecated]: syz.1.2167 (pid 13220) Use of int in maxseg socket option.
[  240.965132][T13220] Use struct sctp_assoc_value instead
[  241.155538][T13230] netlink: 'syz.1.2172': attribute type 1 has an invalid length.
[  241.189313][T13233] netlink: 'syz.4.2175': attribute type 3 has an invalid length.
[  241.208480][T13234] netlink: 'syz.2.2174': attribute type 2 has an invalid length.
[  241.227335][T13234] netlink: 'syz.2.2174': attribute type 1 has an invalid length.
[  241.249983][T13234] : entered promiscuous mode
[  241.887354][T13276] x_tables: duplicate underflow at hook 1
[  242.335531][T13309] wg1 speed is unknown, defaulting to 1000
[  242.349192][T13309] wg1 speed is unknown, defaulting to 1000
[  242.374365][T13309] wg1 speed is unknown, defaulting to 1000
[  242.612829][T13318] netlink: 'syz.4.2202': attribute type 4 has an invalid length.
[  242.624548][    T8] wg1 speed is unknown, defaulting to 1000
[  242.636732][T13309] infiniband syz0: set active
[  242.648500][T13309] infiniband syz0: added wg1
[  242.766973][T13326] netlink: 'syz.4.2206': attribute type 1 has an invalid length.
[  242.775018][T13326] netlink: 'syz.4.2206': attribute type 4 has an invalid length.
[  242.786154][T13309] RDS/IB: syz0: added
[  242.787358][T13326] delete_channel: no stack
[  242.791126][T13309] smc: adding ib device syz0 with port count 1
[  242.817580][T13309] smc:    ib device syz0 port 1 has pnetid 
[  242.827637][T13309] wg1 speed is unknown, defaulting to 1000
[  242.875748][    T8] wg1 speed is unknown, defaulting to 1000
[  243.111165][T13309] wg1 speed is unknown, defaulting to 1000
[  243.236131][T13346] netlink: 'syz.0.2213': attribute type 4 has an invalid length.
[  243.362278][T13309] wg1 speed is unknown, defaulting to 1000
[  243.626284][T13309] wg1 speed is unknown, defaulting to 1000
[  243.891876][T13366] __nla_validate_parse: 48 callbacks suppressed
[  243.891894][T13366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2221'.
[  243.934604][T13309] wg1 speed is unknown, defaulting to 1000
[  244.156857][T13373] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2222'.
[  244.166534][T13309] wg1 speed is unknown, defaulting to 1000
[  244.336481][T13381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2227'.
[  244.465860][T13388] netlink: 'syz.4.2228': attribute type 6 has an invalid length.
[  244.822104][T13414] sctp: [Deprecated]: syz.4.2236 (pid 13414) Use of struct sctp_assoc_value in delayed_ack socket option.
[  244.822104][T13414] Use struct sctp_sack_info instead
[  244.904227][T13418] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2238'.
[  244.975175][T13421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2240'.
[  245.078370][T13427] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2241'.
[  245.281472][T13437] team0: Port device netdevsim0 added
[  245.321913][T13437] dvmrp1: left allmulticast mode
[  245.363577][T13439] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0
[  245.710426][T13446] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  245.760243][T13454] tipc: Started in network mode
[  245.783329][T13454] tipc: Node identity aaaaaaaaaa34, cluster identity 4711
[  245.817825][T13454] tipc: Enabled bearer <eth:macvlan0>, priority 10
[  245.844498][T13457] tipc: Resetting bearer <eth:macvlan0>
[  245.944310][T13459] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2253'.
[  245.966670][T13461] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  246.011167][T13466] x_tables: duplicate underflow at hook 2
[  246.029366][T13467] tunl0: entered promiscuous mode
[  246.118154][T13471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2256'.
[  246.245420][T13483] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2261'.
[  246.513323][T13503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2267'.
[  246.682049][T13517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.710368][T13519] sctp: [Deprecated]: syz.2.2272 (pid 13519) Use of int in max_burst socket option.
[  246.710368][T13519] Use struct sctp_assoc_value instead
[  246.733610][T13517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.843996][    T8] tipc: Node number set to 10398378
[  247.052819][T13540] validate_nla: 2 callbacks suppressed
[  247.052838][T13540] netlink: 'syz.4.2279': attribute type 10 has an invalid length.
[  247.067510][T13540] veth0_macvtap: left promiscuous mode
[  247.077796][T13540] team0: Device veth0_macvtap failed to register rx_handler
[  247.739322][T13584] vxcan0: tx drop: invalid sa for name 0x0000000000000005
[  247.930467][T13594] vlan3: entered promiscuous mode
[  247.935760][T13594] vlan3: entered allmulticast mode
[  247.981534][T13598] xt_ipcomp: unknown flags B
[  249.109621][T13655] __nla_validate_parse: 98 callbacks suppressed
[  249.109643][T13655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2311'.
[  249.200476][T13655] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present
[  249.223249][T13655] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1)
[  249.357965][T13667] pim6reg: entered allmulticast mode
[  249.488844][T13676] bond0: (slave syz_tun): Releasing backup interface
[  249.545718][T13680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.556979][T13680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.583208][T13680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.594653][T13680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.208373][T13713] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2334'.
[  250.218893][T13713] gretap0: entered promiscuous mode
[  250.389397][T13716] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2336'.
[  250.635887][T13738] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2341'.
[  250.790689][T13750] xt_cgroup: xt_cgroup: no path or classid specified
[  250.918153][T13763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2346'.
[  251.002401][T13763] openvswitch: netlink: IPv4 tunnel dst address is zero
[  251.030807][T13763] netlink: 'syz.2.2346': attribute type 21 has an invalid length.
[  251.077599][T13763] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2346'.
[  251.239679][T13784] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2349'.
[  251.250427][T13784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2349'.
[  251.763441][T13810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2354'.
[  252.005364][T13824] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2357'.
[  252.092906][T13828] netlink: 'syz.2.2359': attribute type 24 has an invalid length.
[  252.203835][ T5852] Bluetooth: hci2: command 0x0405 tx timeout
[  252.466094][T13849] vlan2: entered promiscuous mode
[  252.471957][T13849] vlan2: entered allmulticast mode
[  253.113002][T13883] delete_channel: no stack
[  253.163827][T13881] nbd0: detected capacity change from 0 to 256
[  253.219997][ T5852] block nbd0: Receive control failed (result -32)
[  254.892274][T13893] vlan3: entered promiscuous mode
[  254.897780][T13893] vlan3: entered allmulticast mode
[  255.212239][T13917] __nla_validate_parse: 9 callbacks suppressed
[  255.212259][T13917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2388'.
[  255.228136][T13917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2388'.
[  255.296190][T13920] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2389'.
[  255.310279][T13920] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2389'.
[  255.399313][T13925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2391'.
[  255.408987][T13925] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2391'.
[  255.689441][T13937] wg1 speed is unknown, defaulting to 1000
[  255.729316][T13940] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2397'.
[  255.743705][T13940] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2397'.
[  255.783541][T13940] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  255.799131][T13940] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  255.830646][T13940] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  255.862649][T13940] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.872199][T13940] geneve2: entered allmulticast mode
[  255.966150][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  256.042619][T13949] xt_hashlimit: size too large, truncated to 1048576
[  256.349715][T13963] dvmrp0: left allmulticast mode
[  256.375381][T13963] lo: left allmulticast mode
[  256.741698][T13968] netlink: 'syz.0.2406': attribute type 11 has an invalid length.
[  257.154965][T13978] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  257.426512][T13984] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 8472 - 0
[  257.435109][T13984] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  257.443935][T13984] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  257.452631][T13984] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  261.473644][    C1] sched: DL replenish lagged too much
[  273.637071][T14009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2425'.
[  274.793763][T14009] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  274.802513][T14009] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  274.811808][T14009] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  274.820876][T14009] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  300.733738][T14039] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2436'.
[  310.016838][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  310.034159][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  310.043510][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  310.090850][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  310.192628][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  310.203932][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  311.527212][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  311.707124][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  311.716283][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  311.727804][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  311.817443][ T5852] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  311.825246][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  312.827921][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  312.851131][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  312.859927][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  312.958732][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  312.994221][ T5843] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  313.001567][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  313.308565][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  313.324033][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  313.332377][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  313.344700][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  313.352260][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  313.473006][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  313.570537][ T5834] Bluetooth: hci4: command tx timeout
[  314.059857][ T5843] Bluetooth: hci5: command tx timeout
[  315.164214][ T5843] Bluetooth: hci6: command tx timeout
[  315.659678][ T5843] Bluetooth: hci4: command tx timeout
[  315.777012][ T5843] Bluetooth: hci0: command tx timeout
[  316.130349][ T5843] Bluetooth: hci5: command tx timeout
[  317.245287][ T5843] Bluetooth: hci6: command tx timeout
[  317.439496][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  317.731047][ T5843] Bluetooth: hci4: command tx timeout
[  317.804108][ T5843] Bluetooth: hci0: command tx timeout
[  318.078898][ T5852] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  318.209718][ T5834] Bluetooth: hci5: command tx timeout
[  318.223869][ T5852] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  318.233237][ T5852] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  318.241624][ T5852] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  318.434345][ T5852] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  318.443499][ T5852] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  319.384308][ T5843] Bluetooth: hci6: command tx timeout
[  319.809842][ T5843] Bluetooth: hci4: command tx timeout
[  319.887194][ T5843] Bluetooth: hci0: command tx timeout
[  319.914247][T10760] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.283884][ T5843] Bluetooth: hci5: command tx timeout
[  320.554637][ T5843] Bluetooth: hci7: command tx timeout
[  321.422798][ T5843] Bluetooth: hci6: command tx timeout
[  321.963842][ T5843] Bluetooth: hci0: command tx timeout
[  322.634138][ T5843] Bluetooth: hci7: command tx timeout
[  324.695254][ T5843] Bluetooth: hci7: command tx timeout
[  326.764102][ T5843] Bluetooth: hci7: command tx timeout
[  327.624173][T10760] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.010978][T10760] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.685805][T14044] wg1 speed is unknown, defaulting to 1000
[  347.023971][T10760] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.416766][T14046] wg1 speed is unknown, defaulting to 1000
[  349.974912][T14051] wg1 speed is unknown, defaulting to 1000
[  350.901732][T10760] bridge_slave_1: left allmulticast mode
[  351.062745][T10760] bridge_slave_1: left promiscuous mode
[  351.099694][T10760] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.256676][T10760] bridge_slave_0: left allmulticast mode
[  351.283799][T10760] bridge_slave_0: left promiscuous mode
[  351.420556][T10760] bridge0: port 1(bridge_slave_0) entered disabled state
[  378.986622][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  380.875662][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  380.988454][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  381.000476][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  381.008740][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  381.016701][ T5852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  381.024458][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  381.350741][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  381.361470][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  381.388298][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  381.396615][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  381.594009][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  381.637183][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  381.657752][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  381.737275][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  381.794440][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  381.904095][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  381.922375][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  381.939462][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  381.942819][T14075] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  382.324256][T14075] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  382.332902][T14075] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  382.410211][T14075] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  382.418404][T14075] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  382.551297][T14075] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  383.163832][ T5834] Bluetooth: hci1: command tx timeout
[  383.964389][ T5834] Bluetooth: hci2: command tx timeout
[  384.614179][ T5834] Bluetooth: hci3: command tx timeout
[  385.215284][ T5834] Bluetooth: hci8: command tx timeout
[  385.316835][ T5834] Bluetooth: hci1: command tx timeout
[  386.043812][ T5834] Bluetooth: hci2: command tx timeout
[  386.704236][ T5834] Bluetooth: hci3: command tx timeout
[  387.244170][ T5834] Bluetooth: hci8: command tx timeout
[  387.329554][ T5834] Bluetooth: hci1: command tx timeout
[  388.124201][ T5834] Bluetooth: hci2: command tx timeout
[  388.314455][T14075] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  388.327693][T14075] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  388.799452][ T5852] Bluetooth: hci3: command tx timeout
[  388.816945][ T5852] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  388.825223][ T5852] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  388.834952][ T5852] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  388.842356][ T5852] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  389.324306][ T5852] Bluetooth: hci8: command tx timeout
[  389.436871][ T5852] Bluetooth: hci1: command tx timeout
[  390.204467][ T5852] Bluetooth: hci2: command tx timeout
[  390.857059][ T5852] Bluetooth: hci3: command tx timeout
[  390.929756][ T5852] Bluetooth: hci9: command tx timeout
[  391.404351][ T5852] Bluetooth: hci8: command tx timeout
[  393.005199][ T5852] Bluetooth: hci9: command tx timeout
[  395.084385][ T5852] Bluetooth: hci9: command tx timeout
[  397.213718][ T5852] Bluetooth: hci9: command tx timeout
[  409.577149][T10760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  410.480411][T10760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  411.502689][T10760] bond0 (unregistering): Released all slaves
[  411.676620][T14048] wg1 speed is unknown, defaulting to 1000
[  422.676508][T14042] wg1 speed is unknown, defaulting to 1000
[  428.883780][T14071] wg1 speed is unknown, defaulting to 1000
[  432.452284][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  432.462635][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  432.474122][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  432.484637][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  432.492212][ T5834] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  432.500077][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  434.695247][ T5834] Bluetooth: hci5: command tx timeout
[  435.951217][T14076] wg1 speed is unknown, defaulting to 1000
[  436.365926][T14085] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  436.384000][T14085] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  436.392237][T14085] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  436.400639][T14085] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  436.409866][T14085] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  436.417712][T14085] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  436.985495][T14085] Bluetooth: hci5: command tx timeout
[  437.404252][ T5834] Bluetooth: hci4: command 0x0406 tx timeout
[  437.410402][ T5834] Bluetooth: hci6: command 0x0406 tx timeout
[  437.416870][ T5834] Bluetooth: hci0: command 0x0406 tx timeout
[  438.374652][ T5834] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  438.399705][ T5834] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  438.410057][ T5834] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  438.424951][ T5834] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  438.432614][ T5834] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  438.441520][ T5834] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  438.524045][ T5846] Bluetooth: hci10: command tx timeout
[  438.614705][T14075] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  438.699907][ T5834] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  438.716864][ T5834] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  438.725275][ T5834] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  438.732884][ T5834] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  438.740926][ T5834] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  439.004112][ T5834] Bluetooth: hci5: command tx timeout
[  440.329236][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  440.636554][ T5852] Bluetooth: hci10: command tx timeout
[  440.764092][ T5852] Bluetooth: hci11: command tx timeout
[  440.869820][T14067] wg1 speed is unknown, defaulting to 1000
[  441.126915][ T5852] Bluetooth: hci12: command tx timeout
[  441.133393][ T5852] Bluetooth: hci5: command tx timeout
[  442.364095][ T5843] Bluetooth: hci7: command 0x0406 tx timeout
[  442.684010][ T5834] Bluetooth: hci10: command tx timeout
[  442.989533][ T5834] Bluetooth: hci11: command tx timeout
[  443.164697][ T5834] Bluetooth: hci12: command tx timeout
[  444.105634][T14069] wg1 speed is unknown, defaulting to 1000
[  444.799815][ T5834] Bluetooth: hci10: command tx timeout
[  445.116920][ T5843] Bluetooth: hci11: command tx timeout
[  445.246924][ T5843] Bluetooth: hci12: command tx timeout
[  447.164305][ T5843] Bluetooth: hci11: command tx timeout
[  447.325084][ T5843] Bluetooth: hci12: command tx timeout
[  448.602515][T14073] wg1 speed is unknown, defaulting to 1000
[  449.620860][ T5834] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  449.631654][ T5834] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  449.640758][ T5834] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  449.650497][ T5834] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  449.658568][ T5834] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  449.666295][ T5834] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  452.130695][ T5834] Bluetooth: hci13: command tx timeout
[  454.223970][ T5834] Bluetooth: hci13: command tx timeout
[  456.373642][ T5834] Bluetooth: hci13: command tx timeout
[  458.444049][ T5834] Bluetooth: hci13: command tx timeout
[  460.799815][T14087] wg1 speed is unknown, defaulting to 1000
[  477.834767][T10760] hsr_slave_0: left promiscuous mode
[  477.845601][T10760] hsr_slave_1: left promiscuous mode
[  477.870604][T10760] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  477.886770][T10760] batman_adv: batadv0: Removing interface: batadv_slave_0
[  478.000537][T10760] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  478.014103][T10760] batman_adv: batadv0: Removing interface: batadv_slave_1
[  479.129562][T10760] veth1_macvtap: left promiscuous mode
[  479.219595][T10760] veth0_macvtap: left promiscuous mode
[  479.239482][T10760] veth1_vlan: left promiscuous mode
[  479.263871][T10760] veth0_vlan: left promiscuous mode
[  501.816508][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  503.822540][ T5843] Bluetooth: hci1: command 0x0406 tx timeout
[  509.082644][ T5846] Bluetooth: hci2: command 0x0406 tx timeout
[  509.122511][ T5846] Bluetooth: hci3: command 0x0406 tx timeout
[  509.129103][ T5846] Bluetooth: hci8: command 0x0406 tx timeout
[  514.142491][ T5834] Bluetooth: hci9: command 0x0406 tx timeout
[  555.012907][ T5834] Bluetooth: hci5: command 0x0406 tx timeout
[  560.589550][ T5834] Bluetooth: hci10: command 0x0406 tx timeout
[  563.263782][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  566.027228][T10760] team0 (unregistering): Port device team_slave_1 removed
[  566.044268][ T5852] Bluetooth: hci12: command 0x0406 tx timeout
[  566.050412][ T5852] Bluetooth: hci11: command 0x0406 tx timeout
[  568.673751][T10760] team0 (unregistering): Port device team_slave_0 removed
[  575.491307][ T5834] Bluetooth: hci13: command 0x0406 tx timeout
[  587.583836][   T30] INFO: task syz-executor:14042 blocked for more than 143 seconds.
[  587.591792][   T30]       Not tainted 6.14.0-rc4-syzkaller-00171-g00371a3f4877 #0
[  587.624142][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  587.646678][   T30] task:syz-executor    state:D stack:24864 pid:14042 tgid:14042 ppid:1      task_flags:0x400140 flags:0x00004006
[  587.764214][   T30] Call Trace:
[  587.767549][   T30]  <TASK>
[  587.770492][   T30]  __schedule+0x190e/0x4c90
[  587.793978][   T30]  ? __pfx___schedule+0x10/0x10
[  587.798886][   T30]  ? __pfx_lock_release+0x10/0x10
[  587.933989][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  587.940038][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  588.043722][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  588.073593][   T30]  ? schedule+0x90/0x320
[  588.077895][   T30]  schedule+0x14b/0x320
[  588.082070][   T30]  schedule_preempt_disabled+0x13/0x30
[  588.103529][   T30]  rwsem_down_write_slowpath+0xeee/0x13b0
[  588.109301][   T30]  ? rwsem_down_write_slowpath+0xa09/0x13b0
[  588.217714][   T30]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[  588.243584][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  588.248669][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  588.344477][   T30]  ? __pfx_lock_release+0x10/0x10
[  588.349571][   T30]  ? __mutex_lock+0x397/0x1010
[  588.383796][   T30]  down_write+0x1d7/0x220
[  588.393861][   T30]  ? __pfx_down_write+0x10/0x10
[  588.398751][   T30]  ? rdma_net_to_dev_net+0x23/0x240
[  588.503645][   T30]  rdma_dev_exit_net+0x8e/0x350
[  588.508564][   T30]  ? __pfx___might_resched+0x10/0x10
[  588.543757][   T30]  ? __pfx_ppp_exit_net+0x10/0x10
[  588.548839][   T30]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  588.633614][   T30]  ? mutex_is_locked+0x17/0x50
[  588.638437][   T30]  ? rtnl_is_locked+0x15/0x20
[  588.643134][   T30]  ? cfg80211_pernet_exit+0xf0/0x140
[  588.683942][   T30]  setup_net+0x794/0x9e0
[  588.688252][   T30]  ? __pfx_down_read_killable+0x10/0x10
[  588.792755][   T30]  ? __pfx_setup_net+0x10/0x10
[  588.803775][   T30]  ? debug_mutex_init+0x38/0x70
[  588.808674][   T30]  copy_net_ns+0x33f/0x570
[  588.813129][   T30]  create_new_namespaces+0x425/0x7b0
[  588.857002][   T30]  unshare_nsproxy_namespaces+0x124/0x180
[  588.862793][   T30]  ksys_unshare+0x57d/0xa70
[  588.993940][   T30]  ? __pfx_ksys_unshare+0x10/0x10
[  588.999039][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  589.103716][   T30]  ? do_syscall_64+0x100/0x230
[  589.108572][   T30]  __x64_sys_unshare+0x38/0x40
[  589.113353][   T30]  do_syscall_64+0xf3/0x230
[  589.163573][   T30]  ? clear_bhb_loop+0x35/0x90
[  589.168317][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.273766][   T30] RIP: 0033:0x7f703e98e967
[  589.278243][   T30] RSP: 002b:00007ffdb337d9a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  589.313956][   T30] RAX: ffffffffffffffda RBX: 00007f703eba5f40 RCX: 00007f703e98e967
[  589.321979][   T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  589.443597][   T30] RBP: 00007f703eba6738 R08: 0000000000000000 R09: 0000000000000000
[  589.474084][   T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
[  589.482104][   T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  589.593547][   T30]  </TASK>
[  589.596632][   T30] INFO: task syz-executor:14071 blocked for more than 145 seconds.
[  589.623538][   T30]       Not tainted 6.14.0-rc4-syzkaller-00171-g00371a3f4877 #0
[  589.631201][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  589.763671][   T30] task:syz-executor    state:D stack:24856 pid:14071 tgid:14071 ppid:1      task_flags:0x400140 flags:0x00004006
[  589.793547][   T30] Call Trace:
[  589.833865][   T30]  <TASK>
[  589.836850][   T30]  __schedule+0x190e/0x4c90
[  589.841393][   T30]  ? __pfx___schedule+0x10/0x10
[  589.913953][   T30]  ? __pfx_lock_release+0x10/0x10
[  589.919067][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  590.082588][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  590.129679][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  590.143650][   T30]  ? schedule+0x90/0x320
[  590.147937][   T30]  schedule+0x14b/0x320
[  590.152116][   T30]  schedule_preempt_disabled+0x13/0x30
[  590.263838][   T30]  rwsem_down_write_slowpath+0xeee/0x13b0
[  590.272643][   T30]  ? rwsem_down_write_slowpath+0xa09/0x13b0
[  590.303815][   T30]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[  590.310045][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  590.413965][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  590.419066][   T30]  ? __pfx_lock_release+0x10/0x10
[  590.463802][   T30]  ? __mutex_lock+0x397/0x1010
[  590.544004][   T30]  down_write+0x1d7/0x220
[  590.548492][   T30]  ? __pfx_down_write+0x10/0x10
[  590.553367][   T30]  ? rdma_net_to_dev_net+0x23/0x240
[  590.593974][   T30]  rdma_dev_exit_net+0x8e/0x350
[  590.598889][   T30]  ? __pfx___might_resched+0x10/0x10
[  590.694135][   T30]  ? __pfx_ppp_exit_net+0x10/0x10
[  590.699219][   T30]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  590.724273][   T30]  ? mutex_is_locked+0x17/0x50
[  590.729087][   T30]  ? rtnl_is_locked+0x15/0x20
[  590.753969][   T30]  ? cfg80211_pernet_exit+0xf0/0x140
[  590.759301][   T30]  setup_net+0x794/0x9e0
[  590.773586][   T30]  ? __pfx_down_read_killable+0x10/0x10
[  590.873564][   T30]  ? __pfx_setup_net+0x10/0x10
[  590.878393][   T30]  ? debug_mutex_init+0x38/0x70
[  590.904004][   T30]  copy_net_ns+0x33f/0x570
[  590.908479][   T30]  create_new_namespaces+0x425/0x7b0
[  590.996746][   T30]  unshare_nsproxy_namespaces+0x124/0x180
[  591.044219][   T30]  ksys_unshare+0x57d/0xa70
[  591.048797][   T30]  ? __pfx_ksys_unshare+0x10/0x10
[  591.069464][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  591.172391][   T30]  ? do_syscall_64+0x100/0x230
[  591.183797][   T30]  __x64_sys_unshare+0x38/0x40
[  591.213938][   T30]  do_syscall_64+0xf3/0x230
[  591.218513][   T30]  ? clear_bhb_loop+0x35/0x90
[  591.223215][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  591.342448][   T30] RIP: 0033:0x7f873f18e967
[  591.363970][   T30] RSP: 002b:00007ffd7e923c28 EFLAGS: 00000202 ORIG_RAX: 0000000000000110
[  591.372436][   T30] RAX: ffffffffffffffda RBX: 00007f873f3a5f40 RCX: 00007f873f18e967
[  591.483744][   T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  591.491790][   T30] RBP: 00007f873f3a6738 R08: 0000000000000000 R09: 0000000000000000
[  591.583609][   T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  591.591641][   T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  591.714043][   T30]  </TASK>
[  591.717126][   T30] 
[  591.717126][   T30] Showing all locks held in the system:
[  591.740293][   T30] 1 lock held by khungtaskd/30:
[  591.801882][   T30]  #0: ffffffff8eb38fa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0
[  591.863701][   T30] 3 locks held by kworker/u8:4/67:
[  591.868878][   T30]  #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0
[  591.993650][   T30]  #1: ffffc9000213fc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0
[  592.033980][   T30]  #2: ffffffff8fed5388 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  592.043045][   T30] 3 locks held by kworker/0:2/973:
[  592.174036][   T30] 4 locks held by kworker/u8:6/1098:
[  592.179398][   T30] 2 locks held by getty/5588:
[  592.283005][   T30]  #0: ffff8880362320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  592.313755][   T30]  #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770
[  592.353672][   T30] 1 lock held by syz-executor/5821:
[  592.358918][   T30] 3 locks held by kworker/0:7/7919:
[  592.463982][   T30]  #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0
[  592.494152][   T30]  #1: ffffc9000496fc60 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0
[  592.523714][   T30]  #2: ffffffff8fed5388 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  592.643579][   T30] 5 locks held by kworker/u8:29/10760:
[  592.649084][   T30]  #0: ffff88801bef5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0
[  592.782831][   T30]  #1: ffffc900048cfc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0
[  592.813934][   T30]  #2: ffffffff8fec8b50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60
[  592.823418][   T30]  #3: ffffffff8fed5388 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x880
[  592.953647][   T30]  #4: ffffffff8eb3e478 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x820
[  592.983988][   T30] 3 locks held by kworker/u8:30/10763:
[  592.989491][   T30]  #0: ffff88814d16a948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0
[  593.114206][   T30]  #1: ffffc90003de7c60 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0
[  593.153670][   T30]  #2: ffffffff8fed5388 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  593.163251][   T30] 2 locks held by syz-executor/14042:
[  593.303624][   T30]  #0: ffffffff8fec8b50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570
[  593.313116][   T30]  #1: ffffffff8fc4bfd0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x8e/0x350
[  593.440181][   T30] 2 locks held by syz-executor/14046:
[  593.463598][   T30]  #0: ffffffff8fec8b50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570
[  593.473077][   T30]  #1: ffffffff8fed5388 (rtnl_mutex){+.+.}-{4:4}, at: mpls_net_exit+0x7d/0x2a0
[  593.603592][   T30] 2 locks held by syz-executor/14048:
[  593.609016][   T30]  #0: ffffffff8fec8b50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570
[  593.714161][   T30]  #1: ffffffff8fed5388 (rtnl_mutex){+.+.}-{4:4}, at: mpls_net_exit+0x7d/0x2a0
[  593.723222][   T30] 2 locks held by syz-executor/14051:
[  593.763964][   T30]  #0: ffffffff8fec8b50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570
[  593.773454][   T30]  #1: ffffffff8fed5388 (rtnl_mutex){+.+.}-{4:4}, at: mpls_net_exit+0x7d/0x2a0
[  593.903920][   T30] 2 locks held by syz-executor/14067:
[  593.909337][   T30]  #0: ffffffff8fec8b50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570
[  593.943587][   T30]  #1: ffffffff8fed5388 (rtnl_mutex){+.+.}-{4:4}, at: ppp_exit_net+0xe3/0x3d0
[  594.214162][   T30] 2 locks held by syz-executor/14069:
[  594.219591][   T30]  #0: ffffffff8fec8b50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570
[  594.383952][   T30]  #1: ffffffff8fed5388 (rtnl_mutex){+.+.}-{4:4}, at: ppp_exit_net+0xe3/0x3d0
[  594.392924][   T30] 2 locks held by syz-executor/14071:
[  594.424223][   T30]  #0: ffffffff8fec8b50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570
[  594.533566][   T30]  #1: ffffffff8fc4bfd0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x8e/0x350
[  594.543411][   T30] 2 locks held by syz-executor/14073:
[  594.573845][   T30]  #0: ffffffff8fec8b50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570
[  594.583331][   T30]  #1: ffffffff8fed5388 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x29a/0x7e0
[  594.833839][   T30] 2 locks held by syz-executor/14076:
[  594.839259][   T30]  #0: ffffffff8fec8b50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570
[  594.893880][   T30]  #1: ffffffff8fc4bfd0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x8e/0x350
[  595.013887][   T30] 4 locks held by syz-executor/14082:
[  595.019302][   T30]  #0: ffffffff8fec8b50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570
[  595.153779][   T30]  #1: ffffffff8fc4be10 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x198/0x280
[  595.317255][   T30]  #2: ffffffff8fc4bfd0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1e6/0x280
[  595.444136][   T30]  #3: ffff88806f11cf48 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x10d/0x710
[  595.483954][   T30] 4 locks held by syz-executor/14084:
[  595.489369][   T30]  #0: ffffffff8fec8b50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570
[  595.596590][   T30]  #1: ffffffff8fc4be10 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x198/0x280
[  595.643612][   T30]  #2: ffffffff8fc4bfd0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1e6/0x280
[  595.753668][   T30]  #3: ffff88806f11cf48 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x10d/0x710
[  595.903073][   T30] 2 locks held by syz-executor/14087:
[  595.934104][   T30]  #0: ffffffff8fec8b50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570
[  596.047002][   T30]  #1: ffffffff8fed5388 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x29a/0x7e0
[  596.073575][   T30] 4 locks held by syz-executor/14089:
[  596.078989][   T30]  #0: ffffffff8fec8b50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570
[  596.196912][   T30]  #1: ffffffff8fc4be10 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x198/0x280
[  596.263742][   T30]  #2: ffffffff8fc4bfd0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1e6/0x280
[  596.363537][   T30]  #3: ffff88806f11cf48 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x10d/0x710
[  596.544054][   T30] 6 locks held by syz-executor/14094:
[  596.549480][   T30]  #0: ffffffff8fec8b50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570
[  596.663650][   T30]  #1: ffffffff8fc4be10 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x198/0x280
[  596.673403][   T30]  #2: ffffffff8fc4bfd0 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1e6/0x280
[  596.796886][   T30]  #3: ffff88806f11cf48 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x10d/0x710
[  596.833735][   T30]  #4: ffff88806f11d240 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x7e/0x3b0
[  596.863661][   T30]  #5: ffffffff8fed5388 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x153/0x800
[  596.973756][   T30] 
[  596.985802][   T30] =============================================
[  596.985802][   T30] 
[  597.163607][   T30] NMI backtrace for cpu 1
[  597.163630][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc4-syzkaller-00171-g00371a3f4877 #0
[  597.163648][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  597.163658][   T30] Call Trace:
[  597.163666][   T30]  <TASK>
[  597.163674][   T30]  dump_stack_lvl+0x241/0x360
[  597.163700][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  597.163718][   T30]  ? __pfx__printk+0x10/0x10
[  597.163745][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  597.163770][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  597.163785][   T30]  ? _printk+0xd5/0x120
[  597.163799][   T30]  ? __pfx__printk+0x10/0x10
[  597.163814][   T30]  ? __wake_up_klogd+0xcc/0x110
[  597.163835][   T30]  ? __pfx__printk+0x10/0x10
[  597.163851][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  597.163874][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  597.163895][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  597.163917][   T30]  watchdog+0x1058/0x10a0
[  597.163940][   T30]  ? watchdog+0x1ea/0x10a0
[  597.163966][   T30]  ? __pfx_watchdog+0x10/0x10
[  597.163988][   T30]  kthread+0x7a9/0x920
[  597.164009][   T30]  ? __pfx_kthread+0x10/0x10
[  597.164032][   T30]  ? __pfx_watchdog+0x10/0x10
[  597.164054][   T30]  ? __pfx_kthread+0x10/0x10
[  597.164074][   T30]  ? __pfx_kthread+0x10/0x10
[  597.164099][   T30]  ? __pfx_kthread+0x10/0x10
[  597.164119][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  597.164136][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  597.164156][   T30]  ? __pfx_kthread+0x10/0x10
[  597.164185][   T30]  ret_from_fork+0x4b/0x80
[  597.164205][   T30]  ? __pfx_kthread+0x10/0x10
[  597.164227][   T30]  ret_from_fork_asm+0x1a/0x30
[  597.164260][   T30]  </TASK>
[  597.164267][   T30] Sending NMI from CPU 1 to CPUs 0:
[  597.340668][    C0] NMI backtrace for cpu 0
[  597.340683][    C0] CPU: 0 UID: 0 PID: 10756 Comm: kworker/u8:27 Not tainted 6.14.0-rc4-syzkaller-00171-g00371a3f4877 #0
[  597.340700][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  597.340710][    C0] Workqueue: bat_events batadv_tt_purge
[  597.340733][    C0] RIP: 0010:check_preemption_disabled+0x4/0x120
[  597.340757][    C0] Code: 8c 48 c7 c6 60 ef 80 8c eb 1c 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 <41> 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 65
[  597.340770][    C0] RSP: 0000:ffffc90000007948 EFLAGS: 00000096
[  597.340782][    C0] RAX: 0000000000000001 RBX: ffffc900000079c0 RCX: ffff88802b3d0ae8
[  597.340793][    C0] RDX: dffffc0000000000 RSI: ffffffff8c2ab700 RDI: ffffffff8c80ef80
[  597.340804][    C0] RBP: ffffc90000007aa8 R08: ffffffff9454993f R09: 1ffffffff28a9327
[  597.340815][    C0] R10: dffffc0000000000 R11: fffffbfff28a9328 R12: 1ffff92000000f34
[  597.340826][    C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000246
[  597.340836][    C0] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  597.340848][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  597.340858][    C0] CR2: 00005569d6945c98 CR3: 000000000e938000 CR4: 00000000003526f0
[  597.340871][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  597.340880][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  597.340889][    C0] Call Trace:
[  597.340895][    C0]  <NMI>
[  597.340903][    C0]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  597.340925][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  597.340948][    C0]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  597.340969][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  597.340988][    C0]  ? nmi_handle+0x14f/0x5a0
[  597.341009][    C0]  ? nmi_handle+0x2a/0x5a0
[  597.341031][    C0]  ? check_preemption_disabled+0x4/0x120
[  597.341051][    C0]  ? default_do_nmi+0x63/0x160
[  597.341066][    C0]  ? exc_nmi+0x123/0x1f0
[  597.341079][    C0]  ? end_repeat_nmi+0xf/0x53
[  597.341104][    C0]  ? check_preemption_disabled+0x4/0x120
[  597.341125][    C0]  ? check_preemption_disabled+0x4/0x120
[  597.341146][    C0]  ? check_preemption_disabled+0x4/0x120
[  597.341167][    C0]  </NMI>
[  597.341171][    C0]  <IRQ>
[  597.341176][    C0]  lock_acquire+0x1fd/0x550
[  597.341199][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  597.341219][    C0]  ? process_backlog+0x33b/0x15b0
[  597.341238][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  597.341258][    C0]  ? __pfx_lock_release+0x10/0x10
[  597.341279][    C0]  ? _raw_spin_lock_irq+0xdf/0x120
[  597.341300][    C0]  process_backlog+0x824/0x15b0
[  597.341317][    C0]  ? process_backlog+0x33b/0x15b0
[  597.341336][    C0]  ? process_backlog+0x33b/0x15b0
[  597.341356][    C0]  ? __pfx_process_backlog+0x10/0x10