last executing test programs:

24.911427245s ago: executing program 0 (id=1099):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}}, &(0x7f0000000200)='syzkaller\x00', 0x5}, 0x90)

24.910894815s ago: executing program 0 (id=1100):
r0 = socket$kcm(0x2, 0xa, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000"], 0x48) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newroute={0x4c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x2}, [@loopback]}}}]}, 0x4c}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x25, 0x80000088, 0xc000067}, 0x2c)
ioctl$SIOCSIFHWADDR(r0, 0x8919, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbdf256a00000008000300", @ANYRES32=r5, @ANYBLOB="0500d2003ff80000d47ea34e1d108a95a2b8217ead155c7367eb3d13bac2370981c86875ec58b9fa609eae22a957dc90b4fb9f649e42e3118abcab5f6b058557e99e71f39fd6e070c7c9861960cb33e1af32a14a6f5f7fa11d3911a70a960f86f4b3b0c7c39f09ea76e291874f50990625bfbcbf6a7a9f5e133f004e46ff38f1ea7a3a89e22b2a1df528c0bbfbc7b351c8f6f2cb80c3a50dc09598dbafcec5b91d9f8ea4ea5c61d8d2e728df06a885b7c3fd2bbf2022a6a8ada22bcb10959f64afba3676bd27d115ccacc2d40efaec49f36fd8759d369f413ca3de"], 0x24}, 0x1, 0x0, 0x0, 0xc040}, 0x24004110)

24.841298186s ago: executing program 0 (id=1101):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000780)="0b032200ffff25000200475400f6a13bb1000000080086fd480342801a6e4c8f5c6162d101000000ba3800d48ac504f58537c3778c9164", 0x37, 0x24004004, &(0x7f0000000700)={0x11, 0xfb, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYRES8=r3], 0x6c}}, 0x0)
r4 = socket(0x2b, 0x1, 0x0)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x22, r2})

24.789788889s ago: executing program 0 (id=1102):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003500000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={r1, 0x20, &(0x7f00000007c0)={&(0x7f0000000600)=""/147, 0x93, 0x0, &(0x7f00000006c0)=""/215, 0xd7}}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000840)={0x4, 0xbe, 0x5, 0x6, 0x7, 0x3, 0x7fff, 0x7, <r4=>0x0}, &(0x7f0000000880)=0x20)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000008c0)={r4, @in={{0x2, 0x4e23, @private=0xa010102}}, 0x6, 0xf, 0x2, 0xc, 0x2, 0x7ff}, 0x9c)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000980)={0x3b8, 0x3e, 0x400, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x3a3, 0xd, 0x0, 0x1, [@generic="2e837cfeb6c154f3f4cd088d6ab42274d8e7dd4b59ad13984f39676426", @nested={0x0, 0xa1, 0x0, 0x1, [@nested={0x0, 0x9e, 0x0, 0x1, [@typed={0x0, 0x142, 0x0, 0x0, @u32=0x9}, @typed={0x0, 0x98, 0x0, 0x0, @u64=0x3}]}, @nested={0x0, 0xaa, 0x0, 0x1, [@typed={0x0, 0xdd, 0x0, 0x0, @u32=0x7}, @generic="3e4305a2aaf0187e95fe64791bfbf56bca689afc1e0243f537b7d606482299ca04e4188f409887218900d09b382fc70407f2dfe979fd91ebeb7611edd2262e9ac70b87ee7f53f5f1de75a267543ccbf0e8227e1ed94a449fd08b48dd23890a3740bc00f6a099efd850fbc5dd70df213db17056525890d6a08529f1cd6a68759743fbb217952fffd8ce9dd79f40c3bed61096946ee787f500e33fd7b42c470ea60a4e"]}, @generic="547634622d3ccd456fdf7adbb252ed5c75b3eae1f07263f80b6d2e9a583ac6de9b118a97ea23f64f03b1cf3d81e2532aa4196a296ca40f47d46f39b7b58b3a2526b8786846e7b486d43eb0f9416a59e68840ac0ef4103fa9a628206a", @generic="b1b905e61566111bf88e317a11468d1e1db47a9ffb41e1b1e1b6c3e9147432fb9780d6456da996eac8f052b63575fe8ecfadc7c2c85e9189c6fd5e47bcc767cc35927f72121aad5a8eb63a4fe17111d22a824659a868365c693f3ed3530ea5c0a9d276dd97be707b36b1bf2c9fe8090cf44e513f085803664f8b057b44ab83e3c5a84769b69ad3fa0e89b1"]}]}]}, 0xfffffffffffffedd}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

24.788636171s ago: executing program 0 (id=1103):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x7)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0xba01, 0x0, 0x60000800}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x17fd, 0x4)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x40)
r6 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000180)={0x2000200a})
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000140)={0x2000200b})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8, 0x5, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r11, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
recvmsg(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000002c0)=""/229, 0xe5}], 0x1}, 0x40000000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))

24.488425603s ago: executing program 2 (id=1106):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x8548d, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

24.401344389s ago: executing program 2 (id=1107):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100009800aef0400aaaaaaaaaa2e000008000500", @ANYRES32=r1], 0x84}}, 0x20008040)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100b11b700000feffff1a000000180001801400020064756d6d7930"], 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0xf0, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4810}, 0x40)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r5=>r0})
getsockopt$netrom_NETROM_T4(r5, 0x103, 0x6, &(0x7f0000000040)=0xfffffffb, &(0x7f0000000080)=0x4)

24.331545645s ago: executing program 2 (id=1108):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0xd1383000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in, @in6=@private0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000)
mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x4c}, {0x6}]}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)

24.331259895s ago: executing program 2 (id=1109):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
socket$alg(0x26, 0x5, 0x0) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)='}', 0x1}], 0x1}, 0x2404c011)
accept4(r2, 0x0, 0x0, 0x800) (async)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendto$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
sendto$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408048000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xc07, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

24.240753512s ago: executing program 2 (id=1110):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
listen(r2, 0xfffffffc)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
r5 = socket(0x15, 0x5, 0x0)
getsockopt(r5, 0x200000000114, 0x271e, 0x0, &(0x7f0000000100))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r9, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0)
recvfrom$inet6(r5, 0x0, 0x0, 0x2023, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0)

23.951582714s ago: executing program 1 (id=1115):
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$l2tp6(0xa, 0x2, 0x73)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xff12}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000002000000, 0xe, 0x0, &(0x7f0000000180)="a06ad876d56a0064d082778c3938", 0x0, 0x0, 0x4000000, 0x0, 0x38, 0x0, &(0x7f0000000140)="6e5fda715e9bcd5ff3f5da6f05c11711c4b387323c7785c3febf7a4b7bb25e88fb2236d8a1a84601561c0bef142319cce42d9da2aa36471b"}, 0x50)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x28}}, 0x802)

23.898732256s ago: executing program 1 (id=1116):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}]}, 0x30}}, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="08002600b409000008002700"], 0x34}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001000010000000000000000fc0000000a5c000000060a0b04000000000000390002000000300004802c0001800b0001006f626a72656600001c0002800900040073797a30000000000900020073797a32000000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0)

23.89812542s ago: executing program 0 (id=1117):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x248202, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x0, 0x0, 0x2}, 0x1}, 0x18)
connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x1e, 0x4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x5, 0xff}, 0x10)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000600000003000000010000130800000003000000080000002c1ca4fa62a59705000000de987a1aa740fe9d006161616100"], 0x0, 0x36, 0x0, 0x1, 0x9b2987a6}, 0x28)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@getchain={0x0, 0x66, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x3}, {0x2, 0xe}, {0x6, 0xd}}, [{0x0, 0xb, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c011}, 0x404c040)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
write(r10, &(0x7f0000000000)="fc", 0x1)
write$cgroup_subtree(r10, &(0x7f0000000500)={[{0x2d, 'net_cls'}, {0x2d, 'net_cls'}, {0x2d, 'cpuset'}]}, 0x1a)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, r1, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2b}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48081)
sendmsg$NL80211_CMD_SET_MPATH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100269e7000744b30f1165791ce00000300", @ANYRES32=r11, @ANYBLOB="0a000600ffffffffffff0000"], 0x28}, 0x1, 0x0, 0x0, 0x51}, 0x4044004)

23.897920858s ago: executing program 1 (id=1118):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000071120a000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x8001, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0xff87, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa6c01a8000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac1414bb000000000000000000000000fc02000000000000000000000000000064010102000000000000000000000000fe8000000000000000000000000000323c"], 0x184}}, 0x0)

23.703863142s ago: executing program 1 (id=1119):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000e40)=0x100000001, 0x4)
unshare(0x22020600)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xe, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014002000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)

20.645301627s ago: executing program 1 (id=1120):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)={'erspan0\x00', 0x200})
syz_emit_ethernet(0x109, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@x25={0x805, {0x3, 0xc, 0xa, "d277b2c4fdbea9a197bf1b8b5d7331164715e3b798b06d0240ca092975233488877aa93eddb31085e061d6a73295ae2bb32f501b49b52eb40486c552291ed337a9d1e655359ce3f3e3a1c211ea3460ef367baddbdf9b8e9f060c166258859e5cbd9e5fc44714db3a854b3d550753f0d0e730b43b30b1bcd812af4e106faf0f3c1944c3c6da48a0ab4c4faf57a5de3a566dc3d44f2d31cd04a30174930f531b544e6360b576f61d8fa718ca5c06f521b86dce45fe30ae0367bdd325e819e495f5ab918badf94808852e3b702e3e5b2743fbded04d8bfb1dbd26a927ccf52de26617a643ca14c171d946d0c429307431650dfc22c4837452b4"}}}}, &(0x7f00000001c0)={0x1, 0x1, [0x2bb, 0x72, 0xe81, 0x970]})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'team_slave_0\x00', 0x100})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x4, 0x3}, 0x6)
r2 = socket(0xb, 0x3, 0x3)
write$bt_hci(r2, &(0x7f0000000280)={0x1, @link_key_neg_reply={{0x40c, 0x6}}}, 0xa)
r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000300)={[{0x2b, 'cpu'}, {0x2d, 'net'}]}, 0xa)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x12801080}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r5, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x50)
write(r1, &(0x7f0000000480)="36ae", 0x2)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='cgroup.freeze\x00', 0x0, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x480800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r7, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfffffff1, 0x64}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x41c0}, 0x20)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000700)=@l2={0x1f, 0x859, @none, 0x6}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000780)="7e31c924d80cb319891baa8df068959c47410f55e5d13e94211e4bb3a19bed989b23603e6af381f9a198d149da34bf8ff27b5e2d08d46dc8e6a77ba5397266ccc374a3d84193e9a31d82e961a0978fc9885ba3ead9dda23328c4dd0dfb28269bc0d5342b9a66cfb3e46fc6cb3404e0f16bd2b7799979f1c93b0cf4bb6ab3bce286a1d74eb7a9b1a8e4b8108a17ec768f155c7deb6149168ddb3ac6cd29ff5adf61d1ecaaf564ac09881526c240c751e8d2a5efb07ca9", 0xb6}], 0x1, &(0x7f0000000880)=[{0x50, 0x104, 0xa6e, "79549b8cad099840d0fda908d414933858c3fa24c0f1efd55ee95452fa1ddc32919d03525b9025ebd438271d88e65de8bb9fcd55b5f38bae24cef26323"}, {0x40, 0x0, 0x7, "e6fb31685eddce0136568741c17eefb20afb5ae8d6ffb3cc592ec7455f85404c58ed882f4304f318e494db"}], 0x90}, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r7, 0x2, 0x70bd25, 0x6, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8045)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={r6, 0x58, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x34, 0x0, 0x26, 0x2}]}, {0x0, [0x2e, 0x30]}}, &(0x7f0000000b80)=""/165, 0x2c, 0xa5, 0x1, 0x6, 0x10000, @value=r6}, 0x28)
sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r7, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1e}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x44040}, 0x44000)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000d80)={'caif0\x00', 0x100})
r10 = syz_genetlink_get_family_id$team(&(0x7f0000000e00), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000e40)={'batadv0\x00', <r11=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001380)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000000f80)={0x3b8, r10, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r9}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffff800}}}]}}, {{0x8, 0x1, r9}, {0x1c4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1a, 0x8d, 0xfc, 0x81}, {0x5, 0x2, 0x6, 0x3}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r9}, {0x88, 0x2, 0x0, 0x1, [{0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x1ff, 0x1, 0xcb, 0x7fff}, {0x797, 0xff, 0x3, 0x9}, {0x5, 0x54, 0x88, 0x9}, {0x0, 0x9, 0xe4}, {0x3, 0x9, 0xa3, 0xfffff961}, {0xc, 0x2, 0x4, 0xfffff2ad}, {0xfe01, 0xfb, 0x5, 0x5}, {0x364, 0x0, 0x99, 0x7}, {0x3, 0x7, 0xc, 0x6}, {0x4, 0x0, 0xc8, 0x7}]}}}]}}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x4004091}, 0x40000)

20.062856861s ago: executing program 2 (id=1121):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff})
r1 = gettid()
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$ax25_int(r2, 0x101, 0x6, &(0x7f0000000040)=0x2, 0x4)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
unshare(0x6a040000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000004000000000a2c000000050a03000000000000000000020000000c0002400000000c24315499644184846b00010900010073797a300000000014000000020a030000000000000000000200000314000000110001000000000000"], 0x68}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r7, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r7, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)='e', 0x1}], 0x59}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x2400a880)
getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0)
connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x5, @mcast2}, 0x1c)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2)
sendmsg$sock(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
shutdown(r3, 0x1)
sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0x40}, 0x0)

14.874326094s ago: executing program 1 (id=1122):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6gre0\x00', 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, 0x0, 0x48040)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000280)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}]}, &(0x7f0000000180)=0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa73}}}]}, 0x38}}, 0x24000098)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d2, &(0x7f0000000100))

7.912186481s ago: executing program 32 (id=1117):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x248202, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x0, 0x0, 0x2}, 0x1}, 0x18)
connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x1e, 0x4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000061105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b426375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f645600cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e65440f12338ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af9d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074da00000000339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000000000000000004e46e25779540c8246e45a8a9e55b9214990fcf513e5893a0664baf35431a9ae5db2301f6aae78a841b704679015577abed7008c6208cce4ec400816eca719bb9e22c159dc414012c97cb515e447eba901c87f5c0d467d9d756000fff14823"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x5, 0xff}, 0x10)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000600000003000000010000130800000003000000080000002c1ca4fa62a59705000000de987a1aa740fe9d006161616100"], 0x0, 0x36, 0x0, 0x1, 0x9b2987a6}, 0x28)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@getchain={0x0, 0x66, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x3}, {0x2, 0xe}, {0x6, 0xd}}, [{0x0, 0xb, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c011}, 0x404c040)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
write(r10, &(0x7f0000000000)="fc", 0x1)
write$cgroup_subtree(r10, &(0x7f0000000500)={[{0x2d, 'net_cls'}, {0x2d, 'net_cls'}, {0x2d, 'cpuset'}]}, 0x1a)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, r1, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2b}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48081)
sendmsg$NL80211_CMD_SET_MPATH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100269e7000744b30f1165791ce00000300", @ANYRES32=r11, @ANYBLOB="0a000600ffffffffffff0000"], 0x28}, 0x1, 0x0, 0x0, 0x51}, 0x4044004)

5.123670299s ago: executing program 33 (id=1121):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff})
r1 = gettid()
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$ax25_int(r2, 0x101, 0x6, &(0x7f0000000040)=0x2, 0x4)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
unshare(0x6a040000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000004000000000a2c000000050a03000000000000000000020000000c0002400000000c24315499644184846b00010900010073797a300000000014000000020a030000000000000000000200000314000000110001000000000000"], 0x68}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r7, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r7, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)='e', 0x1}], 0x59}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x2400a880)
getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0)
connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x5, @mcast2}, 0x1c)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2)
sendmsg$sock(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
shutdown(r3, 0x1)
sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0x40}, 0x0)

0s ago: executing program 34 (id=1122):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6gre0\x00', 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, 0x0, 0x48040)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000280)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}]}, &(0x7f0000000180)=0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa73}}}]}, 0x38}}, 0x24000098)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d2, &(0x7f0000000100))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:55277' (ED25519) to the list of known hosts.
syzkaller login: [   48.523507][ T5739] cgroup: Unknown subsys name 'net'
[   48.631437][ T5739] cgroup: Unknown subsys name 'cpuset'
[   48.637314][ T5739] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.930341][ T5739] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.738210][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.742447][ T5810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.745307][ T5810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.750032][ T5202] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.753832][ T5202] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.757187][ T5202] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.779373][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.782393][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.785192][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.788203][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.815055][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.818593][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.822639][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.826509][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.829518][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.974403][ T5808] chnl_net:caif_netlink_parms(): no params data found
[   54.109175][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.111916][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.114329][ T5808] bridge_slave_0: entered allmulticast mode
[   54.117113][ T5808] bridge_slave_0: entered promiscuous mode
[   54.122192][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.124578][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.126985][ T5808] bridge_slave_1: entered allmulticast mode
[   54.130438][ T5808] bridge_slave_1: entered promiscuous mode
[   54.153245][ T5812] chnl_net:caif_netlink_parms(): no params data found
[   54.240167][ T5817] chnl_net:caif_netlink_parms(): no params data found
[   54.273403][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.306780][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.371106][ T5808] team0: Port device team_slave_0 added
[   54.374156][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.377634][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.382604][ T5812] bridge_slave_0: entered allmulticast mode
[   54.386545][ T5812] bridge_slave_0: entered promiscuous mode
[   54.392395][ T5808] team0: Port device team_slave_1 added
[   54.425528][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.428976][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.432083][ T5812] bridge_slave_1: entered allmulticast mode
[   54.436224][ T5812] bridge_slave_1: entered promiscuous mode
[   54.461951][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.464437][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.473609][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.488879][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.491526][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.501903][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.522819][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.532671][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.535160][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.537495][ T5817] bridge_slave_0: entered allmulticast mode
[   54.541740][ T5817] bridge_slave_0: entered promiscuous mode
[   54.545087][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.547452][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.550461][ T5817] bridge_slave_1: entered allmulticast mode
[   54.553206][ T5817] bridge_slave_1: entered promiscuous mode
[   54.557040][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.596661][ T5812] team0: Port device team_slave_0 added
[   54.616532][ T5812] team0: Port device team_slave_1 added
[   54.622055][ T5808] hsr_slave_0: entered promiscuous mode
[   54.624620][ T5808] hsr_slave_1: entered promiscuous mode
[   54.629108][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.648962][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.669642][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.672277][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.682097][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.703961][ T5817] team0: Port device team_slave_0 added
[   54.707766][ T5817] team0: Port device team_slave_1 added
[   54.710463][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.713142][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.721386][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.794364][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.796708][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.805822][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.828750][ T5812] hsr_slave_0: entered promiscuous mode
[   54.831156][ T5812] hsr_slave_1: entered promiscuous mode
[   54.833506][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.836228][ T5812] Cannot create hsr debugfs directory
[   54.838958][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.841938][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.852854][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.985204][ T5817] hsr_slave_0: entered promiscuous mode
[   54.987670][ T5817] hsr_slave_1: entered promiscuous mode
[   54.990552][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.993041][ T5817] Cannot create hsr debugfs directory
[   55.105247][ T5808] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.122306][ T5808] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.149566][ T5808] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.154909][ T5808] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.220165][ T5812] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.233250][ T5812] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.241664][ T5812] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.258037][ T5812] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.314401][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.320983][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.331778][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.336579][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.422196][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.452883][ T5808] 8021q: adding VLAN 0 to HW filter on device team0
[   55.464028][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.473468][ T3623] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.476041][ T3623] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.496581][ T3623] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.499798][ T3623] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.514940][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.526955][ T5812] 8021q: adding VLAN 0 to HW filter on device team0
[   55.553226][ T3623] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.556484][ T3623] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.564504][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[   55.581975][ T3623] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.585155][ T3623] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.606522][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.609614][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.627986][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.631227][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.771888][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.810525][ T5808] veth0_vlan: entered promiscuous mode
[   55.824219][ T5808] veth1_vlan: entered promiscuous mode
[   55.849058][ T5813] Bluetooth: hci0: command tx timeout
[   55.859197][ T5813] Bluetooth: hci2: command tx timeout
[   55.859737][ T5810] Bluetooth: hci1: command tx timeout
[   55.870108][ T5808] veth0_macvtap: entered promiscuous mode
[   55.876950][ T5808] veth1_macvtap: entered promiscuous mode
[   55.913624][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.920272][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.929118][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.938180][ T5808] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.942902][ T5808] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.945834][ T5808] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.949566][ T5808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.969116][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.031773][ T5812] veth0_vlan: entered promiscuous mode
[   56.032360][ T1263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.041063][ T1263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.044784][ T5812] veth1_vlan: entered promiscuous mode
[   56.072249][ T1263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.077464][ T5817] veth0_vlan: entered promiscuous mode
[   56.082132][ T1263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.096570][ T5817] veth1_vlan: entered promiscuous mode
[   56.106894][ T5812] veth0_macvtap: entered promiscuous mode
[   56.114381][ T5812] veth1_macvtap: entered promiscuous mode
[   56.140005][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.144715][ T5817] veth0_macvtap: entered promiscuous mode
[   56.154267][ T5817] veth1_macvtap: entered promiscuous mode
[   56.165136][ T5808] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.174064][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.182951][ T5812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.186625][ T5812] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.195111][ T5812] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.200854][ T5812] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.217545][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.233789][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.265944][ T5817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.270861][ T5817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.276355][ T5817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.284030][ T5817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.367649][ T1263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.372551][ T1263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.390843][ T5876] Zero length message leads to an empty skb
[   56.400422][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.402926][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.422895][ T3994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.427020][ T3994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.455042][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.458255][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.639785][ T5890] wg1 speed is unknown, defaulting to 1000
[   56.641919][ T5890] wg1 speed is unknown, defaulting to 1000
[   56.645222][ T5890] wg1 speed is unknown, defaulting to 1000
[   56.652123][ T5892] syz.1.9 uses obsolete (PF_INET,SOCK_PACKET)
[   56.656852][ T5890] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   56.667688][ T5890] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   56.699599][ T5890] wg1 speed is unknown, defaulting to 1000
[   56.704781][ T5890] wg1 speed is unknown, defaulting to 1000
[   56.707582][ T5890] wg1 speed is unknown, defaulting to 1000
[   56.925737][ T5900] netlink: 168 bytes leftover after parsing attributes in process `syz.2.12'.
[   57.144268][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'.
[   57.194712][ T5911] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.277990][ T5916] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14'.
[   57.732525][ T5945] netlink: 268 bytes leftover after parsing attributes in process `syz.2.21'.
[   57.736778][ T5945] unsupported nla_type 65024
[   57.872960][ T5950] wg1 speed is unknown, defaulting to 1000
[   57.928950][ T5810] Bluetooth: hci1: command tx timeout
[   57.930772][ T5810] Bluetooth: hci2: command tx timeout
[   57.932517][ T5810] Bluetooth: hci0: command tx timeout
[   58.012831][ T5965] netlink: 268 bytes leftover after parsing attributes in process `syz.1.29'.
[   58.076291][ T5969] netlink: 10 bytes leftover after parsing attributes in process `syz.1.30'.
[   58.225156][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'.
[   58.245579][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'.
[   58.264548][ T5979] netlink: 32 bytes leftover after parsing attributes in process `syz.0.34'.
[   58.273634][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'.
[   58.436852][ T5999] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   58.537214][ T6013] x_tables: duplicate underflow at hook 1
[   58.546970][ T6007] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   58.552956][ T5874] IPVS: starting estimator thread 0...
[   58.584925][ T6020] netlink: 'syz.0.47': attribute type 13 has an invalid length.
[   58.612777][ T6020] gretap0: refused to change device tx_queue_len
[   58.616112][ T6020] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   58.648718][ T6016] IPVS: using max 80 ests per chain, 192000 per kthread
[   58.685855][ T6026] warning: `syz.0.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.740843][ T6030] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[   58.784090][ T6040] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.305785][ T6069] netlink: 'syz.2.64': attribute type 21 has an invalid length.
[   59.459152][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.535443][ T6072] bridge_slave_1 (unregistering): left allmulticast mode
[   59.544354][ T6072] bridge_slave_1 (unregistering): left promiscuous mode
[   59.553840][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.680151][ T6079] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.008640][ T5813] Bluetooth: hci0: command tx timeout
[   60.009531][ T5810] Bluetooth: hci2: command tx timeout
[   60.011876][   T54] Bluetooth: hci1: command tx timeout
[   60.725709][ T6110] Bluetooth: MGMT ver 1.23
[   61.180414][ T6138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.436056][ T6154] x_tables: duplicate underflow at hook 2
[   61.524448][ T6164] xt_hashlimit: size too large, truncated to 1048576
[   61.555178][ T6166] netlink: 'syz.1.103': attribute type 1 has an invalid length.
[   61.576392][ T6166] bond1: entered promiscuous mode
[   61.581976][ T6166] 8021q: adding VLAN 0 to HW filter on device bond1
[   61.979565][ T6184] ieee802154 phy0 wpan0: encryption failed: -22
[   61.987241][ T6177] __nla_validate_parse: 16 callbacks suppressed
[   61.987282][ T6177] netlink: 168 bytes leftover after parsing attributes in process `syz.0.104'.
[   62.072302][ T6190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.088793][   T54] Bluetooth: hci1: command tx timeout
[   62.090223][ T5813] Bluetooth: hci0: command tx timeout
[   62.101218][ T5813] Bluetooth: hci2: command tx timeout
[   62.127593][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'.
[   62.132776][ T6194] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   62.140977][ T6194] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.173195][ T6194] wg1 speed is unknown, defaulting to 1000
[   62.196041][ T6197] netlink: 268 bytes leftover after parsing attributes in process `syz.2.110'.
[   63.341725][ T6187] Bluetooth: hci1: Opcode 0x0401 failed: -4
[   63.416846][ T6245] Bluetooth: MGMT ver 1.23
[   63.473655][ T6247] netlink: 168 bytes leftover after parsing attributes in process `syz.2.119'.
[   63.621714][ T6259] netlink: 268 bytes leftover after parsing attributes in process `syz.2.124'.
[   63.771889][ T6268] netlink: 168 bytes leftover after parsing attributes in process `syz.1.127'.
[   63.813668][ T6270] netlink: 'syz.1.128': attribute type 32 has an invalid length.
[   63.817407][ T6271] netlink: 'syz.1.128': attribute type 32 has an invalid length.
[   64.115141][ T6283] netlink: 268 bytes leftover after parsing attributes in process `syz.0.134'.
[   64.131643][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.133'.
[   64.169568][ T5813] Bluetooth: hci1: command 0x0401 tx timeout
[   64.193132][ T6288] netlink: 168 bytes leftover after parsing attributes in process `syz.0.136'.
[   64.320414][ T6294] netlink: 72 bytes leftover after parsing attributes in process `syz.0.139'.
[   64.632334][ T6311] xt_CT: You must specify a L4 protocol and not use inversions on it
[   64.864399][ T6333] Driver unsupported XDP return value 0 on prog  (id 38) dev N/A, expect packet loss!
[   65.186559][ T6354] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   65.317893][ T6367] xfrm1: entered promiscuous mode
[   65.321523][ T6367] xfrm1: entered allmulticast mode
[   65.360465][   T33] audit: type=1804 audit(1751724534.319:2): pid=6371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.169" name="/newroot/62/memory.events" dev="tmpfs" ino=332 res=1 errno=0
[   65.368510][   T33] audit: type=1800 audit(1751724534.319:3): pid=6371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.169" name="memory.events" dev="tmpfs" ino=332 res=0 errno=0
[   66.184588][ T6390] netlink: 'syz.2.175': attribute type 1 has an invalid length.
[   66.226128][ T6390] bond1: (slave bridge2): making interface the new active one
[   66.237541][ T6390] bond1: (slave bridge2): Enslaving as an active interface with an up link
[   67.167605][ T6418] wg1 speed is unknown, defaulting to 1000
[   67.435801][ T6437] wg1 speed is unknown, defaulting to 1000
[   67.535405][ T6437] __nla_validate_parse: 8 callbacks suppressed
[   67.535419][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'.
[   67.695014][ T6459] netlink: 268 bytes leftover after parsing attributes in process `syz.2.194'.
[   67.817930][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.196'.
[   67.912387][ T6478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'.
[   67.939292][ T6478] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   67.942285][ T6478] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   67.945219][ T6478] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   67.948942][ T6478] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   67.956119][ T6478] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   67.959548][ T6478] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   67.963238][ T6478] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   67.966361][ T6478] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   67.989178][ T6484] netlink: 268 bytes leftover after parsing attributes in process `syz.2.202'.
[   67.995641][ T6479] wg2: entered promiscuous mode
[   67.997729][ T6479] wg2: entered allmulticast mode
[   68.014049][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'.
[   68.325754][ T6509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.426905][ T6511] netlink: 60 bytes leftover after parsing attributes in process `syz.1.213'.
[   68.607150][ T6527] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000
[   68.614820][ T6527] netlink: 'syz.1.218': attribute type 1 has an invalid length.
[   68.619452][ T6527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.218'.
[   68.623174][ T6527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.218'.
[   68.626387][ T6527] netlink: 'syz.1.218': attribute type 1 has an invalid length.
[   68.661910][ T6530] netlink: 'syz.1.219': attribute type 1 has an invalid length.
[   68.677356][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.219'.
[   68.838132][ T6537] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   68.881049][ T6545] ipvlan2: entered promiscuous mode
[   68.884464][ T6545] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   69.064051][ T6565] pim6reg: entered allmulticast mode
[   69.067851][ T6565] macvlan0: entered allmulticast mode
[   69.072705][ T6565] veth1_vlan: entered allmulticast mode
[   69.167104][ T6572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.300640][ T6577] netlink: 'syz.1.234': attribute type 10 has an invalid length.
[   69.306282][ T6578] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[   69.310674][ T6577] batman_adv: batadv0: Adding interface: netdevsim0
[   69.313227][ T6577] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.313827][ T6578] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.322001][ T6577] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   69.515447][ T6591] : renamed from batadv_slave_1 (while UP)
[   69.735856][ T6603] tipc: Started in network mode
[   69.737643][ T6603] tipc: Node identity 62a8521b316, cluster identity 4711
[   69.744738][ T6603] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.750148][ T6603] syzkaller0: entered promiscuous mode
[   69.752105][ T6603] syzkaller0: entered allmulticast mode
[   69.763216][ T6603] tipc: Resetting bearer <eth:syzkaller0>
[   69.773884][ T6601] tipc: Resetting bearer <eth:syzkaller0>
[   69.782920][ T6601] tipc: Disabling bearer <eth:syzkaller0>
[   70.093657][ T6621] netlink: 'syz.2.251': attribute type 10 has an invalid length.
[   70.102012][ T6621] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.106068][ T6621] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   70.408649][   T54] Bluetooth: hci0: command 0x0401 tx timeout
[   70.418481][ T5813] Bluetooth: hci0: Opcode 0x0401 failed: -110
[   70.760223][ T6656] netlink: 'syz.0.265': attribute type 58 has an invalid length.
[   70.776585][ T6654] xt_CT: No such helper "snmp"
[   70.825948][ T6668] veth1_to_bond: entered allmulticast mode
[   70.833140][ T6668] netlink: 'syz.0.269': attribute type 21 has an invalid length.
[   70.837878][ T6666] veth1_to_bond: left allmulticast mode
[   70.938698][ T6676] tipc: Started in network mode
[   70.940615][ T6676] tipc: Node identity 9, cluster identity 4711
[   70.943312][ T6676] tipc: Node number set to 9
[   70.966735][ T6676] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.137537][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.155943][ T1269] IPVS: starting estimator thread 0...
[   71.187113][ T6695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.249111][ T6696] IPVS: using max 50 ests per chain, 120000 per kthread
[   71.347103][ T6706] netlink: 'syz.1.280': attribute type 2 has an invalid length.
[   71.434524][   T33] audit: type=1800 audit(1751724540.389:4): pid=6711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.282" name="memory.events" dev="tmpfs" ino=539 res=0 errno=0
[   72.093360][ T6758] netlink: 'syz.1.299': attribute type 1 has an invalid length.
[   72.126037][ T6758] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   72.131626][ T6758] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   72.134683][ T6758] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   72.137809][ T6758] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   72.143133][ T6758] bond2: (slave geneve2): making interface the new active one
[   72.148027][ T6758] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   72.182594][ T6758] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[   72.266174][ T6770] netlink: 'syz.1.303': attribute type 23 has an invalid length.
[   72.310696][ T6773] netlink: 'syz.0.304': attribute type 1 has an invalid length.
[   72.346588][ T6772] veth3: entered promiscuous mode
[   72.450087][ T6785] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   72.620488][ T6799] __nla_validate_parse: 16 callbacks suppressed
[   72.620503][ T6799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.312'.
[   72.627108][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'.
[   72.638452][ T6799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.312'.
[   72.740202][ T6806] netlink: 'syz.2.316': attribute type 5 has an invalid length.
[   72.752036][ T6808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.907885][ T6816] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   72.931462][ T6816] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   73.003847][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'.
[   73.033033][ T6823] netlink: 76 bytes leftover after parsing attributes in process `syz.2.322'.
[   73.034073][ T6820] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   73.922976][ T6829] netlink: 268 bytes leftover after parsing attributes in process `syz.0.324'.
[   73.999155][ T6834] netlink: 96 bytes leftover after parsing attributes in process `syz.2.326'.
[   74.012494][ T6803] Bluetooth: hci1: Opcode 0x0401 failed: -4
[   74.047911][ T6838] sctp: [Deprecated]: syz.0.325 (pid 6838) Use of struct sctp_assoc_value in delayed_ack socket option.
[   74.047911][ T6838] Use struct sctp_sack_info instead
[   74.055922][ T6838] sctp: [Deprecated]: syz.0.325 (pid 6838) Use of int in max_burst socket option deprecated.
[   74.055922][ T6838] Use struct sctp_assoc_value instead
[   74.258242][ T6857] netlink: 268 bytes leftover after parsing attributes in process `syz.1.333'.
[   74.360468][ T6864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.494220][ T6874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.337'.
[   74.502633][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.337'.
[   74.728845][ T5813] Bluetooth: hci1: command 0x0401 tx timeout
[   74.732169][ T6861] Bluetooth: hci1: Opcode 0x0401 failed: -110
[   75.172678][ T6916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.322170][ T6920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.786955][ T6931] batadv_slave_0: entered promiscuous mode
[   75.805511][ T6931] netlink: 'syz.0.356': attribute type 11 has an invalid length.
[   75.814535][ T6930] batadv_slave_0: left promiscuous mode
[   76.475353][ T6973] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[   76.559658][ T6977] SET target dimension over the limit!
[   76.661276][ T6980] syz.2.374 (6980) used obsolete PPPIOCDETACH ioctl
[   76.681869][ T6982] netlink: 'syz.1.375': attribute type 1 has an invalid length.
[   76.684547][ T6982] netlink: 'syz.1.375': attribute type 1 has an invalid length.
[   76.808568][ T5813] Bluetooth: hci1: command 0x0401 tx timeout
[   77.087763][ T7005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.635068][ T7008] __nla_validate_parse: 11 callbacks suppressed
[   77.635114][ T7008] netlink: 268 bytes leftover after parsing attributes in process `syz.2.383'.
[   77.823886][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'.
[   77.837002][ T7012] openvswitch: netlink: nsh attr 2560 is out of range max 3
[   77.843649][ T7012] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.980378][ T7029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.720573][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.963484][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'.
[   79.040995][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'.
[   79.144540][ T7133] netlink: 32 bytes leftover after parsing attributes in process `syz.0.425'.
[   79.246671][ T7140] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 11
[   79.364334][ T7148] netlink: 324 bytes leftover after parsing attributes in process `syz.0.431'.
[   79.531112][ T7156] vlan2: entered allmulticast mode
[   79.533810][ T7156] veth1: entered allmulticast mode
[   79.601704][ T7158] netlink: 20 bytes leftover after parsing attributes in process `syz.0.434'.
[   79.618201][ T7158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.434'.
[   79.862429][ T7167] netlink: 268 bytes leftover after parsing attributes in process `syz.0.437'.
[   80.068550][ T5858] IPVS: starting estimator thread 0...
[   80.160331][ T7176] IPVS: using max 81 ests per chain, 194400 per kthread
[   80.970698][ T7192] netlink: 48 bytes leftover after parsing attributes in process `syz.2.443'.
[   81.380905][   T10] cfg80211: failed to load regulatory.db
[   82.016595][ T7241] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   82.242551][ T7245] netlink: 'syz.1.464': attribute type 33 has an invalid length.
[   82.277675][ T7247] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.425367][ T7251] 8021q: adding VLAN 0 to HW filter on device bond3
[   82.536586][ T7258] xt_nat: multiple ranges no longer supported
[   82.910526][ T7287] syzkaller1: entered promiscuous mode
[   82.912949][ T7287] syzkaller1: entered allmulticast mode
[   83.102465][ T7299] __nla_validate_parse: 8 callbacks suppressed
[   83.102479][ T7299] netlink: 16 bytes leftover after parsing attributes in process `syz.2.484'.
[   83.266461][ T7305] netlink: 256 bytes leftover after parsing attributes in process `syz.2.485'.
[   83.884678][ T7311] macsec1: entered promiscuous mode
[   83.887083][ T7311] macsec1: entered allmulticast mode
[   83.944483][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.489'.
[   84.125891][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'.
[   84.128975][ T7328] wg1 speed is unknown, defaulting to 1000
[   84.353668][ T7328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.393877][ T7344] netlink: 268 bytes leftover after parsing attributes in process `syz.2.496'.
[   84.544251][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'.
[   84.552786][ T7347] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.617919][ T7350] IPVS: set_ctl: invalid protocol: 4 10.1.1.2:20000
[   84.624520][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.498'.
[   84.629327][ T7350] netlink: 108 bytes leftover after parsing attributes in process `syz.1.498'.
[   84.634217][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.498'.
[   84.807480][ T7366] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[   84.876875][ T7369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.504'.
[   84.881432][ T7369] vlan0: entered promiscuous mode
[   85.067830][ T7384] xt_bpf: check failed: parse error
[   85.186238][ T7390] batadv_slave_1: entered promiscuous mode
[   85.195207][ T7389] batadv_slave_1: left promiscuous mode
[   85.270143][ T7395] xt_ecn: cannot match TCP bits for non-tcp packets
[   85.347527][ T7399] pim6reg: left allmulticast mode
[   85.351820][ T7399] macvlan0: left allmulticast mode
[   85.353622][ T7399] veth1_vlan: left allmulticast mode
[   85.413112][ T7410] netlink: 'syz.1.517': attribute type 7 has an invalid length.
[   85.415844][ T7410] netlink: 'syz.1.517': attribute type 8 has an invalid length.
[   85.551242][ T7427] openvswitch: netlink: Flow key attr not present in new flow.
[   85.610541][ T7430] xt_CT: No such helper "syz0"
[   85.755778][   T33] audit: type=1800 audit(1751724554.709:5): pid=7447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.528" name=620AF8FF0C20 dev="tmpfs" ino=933 res=0 errno=0
[   86.282745][ T7475] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20000
[   86.442007][ T7489] netlink: 'syz.1.537': attribute type 23 has an invalid length.
[   86.701384][ T7504] wg1 speed is unknown, defaulting to 1000
[   86.981750][ T7534] netlink: 'syz.0.551': attribute type 1 has an invalid length.
[   87.339247][ T7544] wg1 speed is unknown, defaulting to 1000
[   87.354012][ T7545] raw_sendmsg: syz.1.554 forgot to set AF_INET. Fix it!
[   88.105686][ T7590] netlink: 'syz.1.562': attribute type 1 has an invalid length.
[   88.181860][ T7590] bond4: (slave bridge2): making interface the new active one
[   88.184622][ T7590] bond4: (slave bridge2): Enslaving as an active interface with an up link
[   88.196430][ T7601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.828058][ T7620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.842564][ T7622] __nla_validate_parse: 8 callbacks suppressed
[   88.842574][ T7622] netlink: 6 bytes leftover after parsing attributes in process `syz.2.572'.
[   89.022276][ T7622] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.038039][ T7622] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.202814][ T7622] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.206419][ T7622] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.211240][ T7622] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.214930][ T7622] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.292663][ T5872] wg1 speed is unknown, defaulting to 1000
[   89.297185][ T5872] syz0: Port: 1 Link DOWN
[   89.386832][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.576'.
[   89.735539][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.582'.
[   89.833438][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'.
[   89.844765][ T7671] dvmrp0: entered allmulticast mode
[   89.987572][ T7677] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[   89.993243][ T7677] CPU: 1 UID: 0 PID: 7677 Comm: syz.1.587 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   89.993256][ T7677] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   89.993260][ T7677] Call Trace:
[   89.993265][ T7677]  <TASK>
[   89.993269][ T7677]  dump_stack_lvl+0x189/0x250
[   89.993291][ T7677]  ? __pfx_dump_stack_lvl+0x10/0x10
[   89.993303][ T7677]  ? __pfx__printk+0x10/0x10
[   89.993312][ T7677]  ? kernfs_path_from_node+0x2c/0x260
[   89.993323][ T7677]  ? kernfs_path_from_node+0x2c/0x260
[   89.993331][ T7677]  ? kernfs_path_from_node+0x2c/0x260
[   89.993341][ T7677]  ? kernfs_path_from_node+0x22c/0x260
[   89.993349][ T7677]  ? kernfs_path_from_node+0x2c/0x260
[   89.993359][ T7677]  sysfs_warn_dup+0x8e/0xa0
[   89.993367][ T7677]  sysfs_do_create_link_sd+0xc0/0x110
[   89.993377][ T7677]  device_add_class_symlinks+0x1cf/0x240
[   89.993388][ T7677]  device_add+0x475/0xb50
[   89.993398][ T7677]  wiphy_register+0x199a/0x26b0
[   89.993414][ T7677]  ? __pfx_wiphy_register+0x10/0x10
[   89.993421][ T7677]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   89.993433][ T7677]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   89.993444][ T7677]  ieee80211_register_hw+0x33e1/0x4120
[   89.993460][ T7677]  ? ieee80211_register_hw+0x14b1/0x4120
[   89.993472][ T7677]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   89.993484][ T7677]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   89.993498][ T7677]  ? __hrtimer_setup+0x187/0x210
[   89.993509][ T7677]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   89.993519][ T7677]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   89.993542][ T7677]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   89.993553][ T7677]  ? trace_kmalloc+0x1f/0xd0
[   89.993558][ T7677]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   89.993565][ T7677]  ? kstrndup+0xbf/0x160
[   89.993578][ T7677]  hwsim_new_radio_nl+0xea4/0x1b10
[   89.993586][ T7677]  ? __pfx___nla_validate_parse+0x10/0x10
[   89.993603][ T7677]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   89.993615][ T7677]  ? __nla_parse+0x40/0x60
[   89.993627][ T7677]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   89.993642][ T7677]  genl_family_rcv_msg_doit+0x215/0x300
[   89.993655][ T7677]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   89.993670][ T7677]  ? bpf_lsm_capable+0x9/0x20
[   89.993676][ T7677]  ? security_capable+0x7e/0x2e0
[   89.993688][ T7677]  genl_rcv_msg+0x60e/0x790
[   89.993700][ T7677]  ? __pfx_genl_rcv_msg+0x10/0x10
[   89.993710][ T7677]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   89.993722][ T7677]  netlink_rcv_skb+0x208/0x470
[   89.993730][ T7677]  ? __pfx_genl_rcv_msg+0x10/0x10
[   89.993741][ T7677]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   89.993756][ T7677]  ? down_read+0x1ad/0x2e0
[   89.993764][ T7677]  genl_rcv+0x28/0x40
[   89.993773][ T7677]  netlink_unicast+0x75b/0x8d0
[   89.993784][ T7677]  netlink_sendmsg+0x805/0xb30
[   89.993796][ T7677]  ? __pfx_netlink_sendmsg+0x10/0x10
[   89.993806][ T7677]  ? aa_sock_msg_perm+0x94/0x160
[   89.993815][ T7677]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   89.993824][ T7677]  ? __pfx_netlink_sendmsg+0x10/0x10
[   89.993832][ T7677]  __sock_sendmsg+0x21c/0x270
[   89.993844][ T7677]  ____sys_sendmsg+0x505/0x830
[   89.993855][ T7677]  ? __pfx_____sys_sendmsg+0x10/0x10
[   89.993868][ T7677]  ? import_iovec+0x74/0xa0
[   89.993876][ T7677]  ___sys_sendmsg+0x21f/0x2a0
[   89.993886][ T7677]  ? __pfx____sys_sendmsg+0x10/0x10
[   89.993909][ T7677]  ? __fget_files+0x2a/0x420
[   89.993917][ T7677]  ? __fget_files+0x3a0/0x420
[   89.993929][ T7677]  __x64_sys_sendmsg+0x19b/0x260
[   89.993938][ T7677]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   89.993978][ T7677]  ? rcu_is_watching+0x15/0xb0
[   89.993993][ T7677]  ? do_syscall_64+0xbe/0x3b0
[   89.994001][ T7677]  do_syscall_64+0xfa/0x3b0
[   89.994007][ T7677]  ? lockdep_hardirqs_on+0x9c/0x150
[   89.994017][ T7677]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.994025][ T7677]  ? exc_page_fault+0x9f/0xf0
[   89.994037][ T7677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.994044][ T7677] RIP: 0033:0x7fbc7518e929
[   89.994052][ T7677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.994058][ T7677] RSP: 002b:00007fbc75f1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   89.994067][ T7677] RAX: ffffffffffffffda RBX: 00007fbc753b5fa0 RCX: 00007fbc7518e929
[   89.994073][ T7677] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[   89.994077][ T7677] RBP: 00007fbc75210b39 R08: 0000000000000000 R09: 0000000000000000
[   89.994081][ T7677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   89.994085][ T7677] R13: 0000000000000000 R14: 00007fbc753b5fa0 R15: 00007ffed4718858
[   89.994097][ T7677]  </TASK>
[   90.191368][ T7617] Bluetooth: hci1: Opcode 0x0401 failed: -4
[   90.267577][ T7682] netlink: 'syz.1.589': attribute type 83 has an invalid length.
[   90.330445][ T7687] netlink: 'syz.1.590': attribute type 11 has an invalid length.
[   90.330475][ T7688] netlink: 'syz.1.590': attribute type 11 has an invalid length.
[   90.449393][ T7696] netlink: 'syz.2.593': attribute type 1 has an invalid length.
[   90.472274][ T7696] 8021q: adding VLAN 0 to HW filter on device bond2
[   90.482383][ T7696] netlink: 16 bytes leftover after parsing attributes in process `syz.2.593'.
[   90.507246][ T7703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.513752][ T7696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.818430][ T5813] Bluetooth: hci1: command 0x0401 tx timeout
[   90.821472][ T7695] Bluetooth: hci1: Opcode 0x0401 failed: -110
[   91.489599][ T7725] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   91.783716][ T7743] netlink: 68 bytes leftover after parsing attributes in process `syz.1.610'.
[   91.837204][ T7745] netlink: 268 bytes leftover after parsing attributes in process `syz.1.611'.
[   92.081354][ T7768] netlink: 268 bytes leftover after parsing attributes in process `syz.2.618'.
[   92.094476][ T7769] netlink: 52 bytes leftover after parsing attributes in process `syz.1.619'.
[   92.430580][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'.
[   92.435479][ T7796] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[   92.501026][ T7801] syzkaller1: entered promiscuous mode
[   92.503729][ T7801] syzkaller1: entered allmulticast mode
[   92.874887][ T7828] netlink: 'syz.0.634': attribute type 11 has an invalid length.
[   92.888572][ T5813] Bluetooth: hci1: command 0x0401 tx timeout
[   93.090163][ T7845] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[   93.409491][ T7856] block nbd0: server does not support multiple connections per device.
[   93.416968][ T7856] block nbd0: shutting down sockets
[   93.777823][ T7881] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[   93.781820][ T7881] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[   93.792048][ T7881] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[   93.797516][ T7881] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[   93.803354][ T7881] geneve2: entered promiscuous mode
[   93.867202][ T7887] __nla_validate_parse: 13 callbacks suppressed
[   93.867224][ T7887] netlink: 268 bytes leftover after parsing attributes in process `syz.2.654'.
[   94.027321][ T7896] netlink: 'syz.2.658': attribute type 1 has an invalid length.
[   94.035614][ T7896] netlink: 'syz.2.658': attribute type 2 has an invalid length.
[   94.103212][ T7897] sock: sock_timestamping_bind_phc: sock not bind to device
[   94.401670][ T7906] netlink: 32 bytes leftover after parsing attributes in process `syz.1.660'.
[   94.632638][ T7921] dvmrp0: left allmulticast mode
[   94.971011][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'.
[   94.974931][ T7937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.670'.
[   95.196036][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.675'.
[   95.226637][ T7963] netlink: 36 bytes leftover after parsing attributes in process `syz.1.677'.
[   95.320778][ T7970] wg1 speed is unknown, defaulting to 1000
[   95.411722][ T7970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.679'.
[   95.730950][ T7980] netlink: 14 bytes leftover after parsing attributes in process `syz.0.683'.
[   95.735558][ T7980] hsr_slave_0: left promiscuous mode
[   95.740645][ T7980] hsr_slave_1: left promiscuous mode
[   95.888647][ T7987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.434562][ T8010] bridge3: entered promiscuous mode
[   96.562092][ T8018] team_slave_0: entered promiscuous mode
[   96.564634][ T8018] team_slave_1: entered promiscuous mode
[   96.567048][ T8018] macsec1: entered promiscuous mode
[   96.595143][ T8018] team0: entered promiscuous mode
[   96.703972][ T8028] wg1 speed is unknown, defaulting to 1000
[   96.754951][ T8035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.981928][ T8028] delete_channel: no stack
[   97.288559][ T5813] Bluetooth: hci2: command tx timeout
[   97.436914][ T8070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'.
[   97.570197][ T8076] xt_hashlimit: overflow, rate too high: 1125899906842624
[   97.841594][ T8089] netlink: 16 bytes leftover after parsing attributes in process `syz.2.720'.
[   98.061582][ T8103] netlink: 'syz.2.726': attribute type 1 has an invalid length.
[   98.064960][ T8103] netlink: 'syz.2.726': attribute type 1 has an invalid length.
[   98.204141][ T8118] veth1_to_bond: entered allmulticast mode
[   98.424749][ T8118] bond0: (slave bond_slave_1): Releasing backup interface
[   98.452298][ T8118] veth1_to_bond (unregistering): left allmulticast mode
[   98.881628][ T8167] netlink: 'syz.0.745': attribute type 1 has an invalid length.
[   98.893110][ T8167] gretap1: entered allmulticast mode
[   98.934639][ T8172] __nla_validate_parse: 8 callbacks suppressed
[   98.934654][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.746'.
[   99.004113][ T8175] netlink: 14 bytes leftover after parsing attributes in process `syz.0.747'.
[   99.012122][ T8175] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   99.064943][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'.
[   99.476084][ T8196] netlink: 268 bytes leftover after parsing attributes in process `syz.2.754'.
[   99.706640][ T8203] 8021q: adding VLAN 0 to HW filter on device bond5
[   99.879717][ T8213] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.884289][ T8213] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   99.959608][ T8213] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.963214][ T8213] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  100.026404][ T8213] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.031609][ T8213] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  100.078077][ T8213] batman_adv: batadv0: Removing interface: netdevsim0
[  100.081989][ T8213] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.085576][ T8213] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  100.165739][ T8213] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  100.170293][ T8213] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  100.178190][ T8213] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  100.182464][ T8213] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  100.196289][ T8213] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  100.200246][ T8213] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  100.208726][ T8213] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  100.212423][ T8213] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  100.229257][ T8220] netlink: 268 bytes leftover after parsing attributes in process `syz.0.762'.
[  100.261538][ T8222] netlink: 'syz.1.763': attribute type 3 has an invalid length.
[  100.311965][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'.
[  100.375113][ T8231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.766'.
[  100.581149][ T8240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.769'.
[  100.634939][ T8242] netlink: 268 bytes leftover after parsing attributes in process `syz.2.770'.
[  101.473654][ T8263] netlink: 'syz.0.777': attribute type 2 has an invalid length.
[  101.477119][ T8263] netlink: 'syz.0.777': attribute type 1 has an invalid length.
[  101.480865][ T8263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.777'.
[  101.501134][ T8263] wg1 speed is unknown, defaulting to 1000
[  101.659959][ T8273] netlink: 'syz.2.781': attribute type 39 has an invalid length.
[  102.127210][ T8323] team0: entered promiscuous mode
[  102.130012][ T8323] team_slave_0: entered promiscuous mode
[  102.140712][ T8323] team_slave_1: entered promiscuous mode
[  102.145131][ T8323] team0: left promiscuous mode
[  102.147200][ T8323] team_slave_0: left promiscuous mode
[  102.152173][ T8323] team_slave_1: left promiscuous mode
[  102.392634][ T8325] bridge_slave_0: left allmulticast mode
[  102.394743][ T8325] bridge_slave_0: left promiscuous mode
[  102.396804][ T8325] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.401604][ T8325] bridge_slave_1: left allmulticast mode
[  102.403646][ T8325] bridge_slave_1: left promiscuous mode
[  102.405837][ T8325] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.411972][ T8325] bond0: (slave bond_slave_0): Releasing backup interface
[  102.417578][ T8325] bond0: (slave bond_slave_1): Releasing backup interface
[  102.433028][ T8325] team0: Port device team_slave_0 removed
[  102.443515][ T8325] team0: Port device team_slave_1 removed
[  102.447732][ T8325] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.452231][ T8325] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.457020][ T8325] batman_adv: batadv0: Interface deactivated: 26
[  102.460354][ T8325] batman_adv: batadv0: Removing interface: 26
[  102.471128][ T8325] bond2: (slave geneve2): Releasing active interface
[  102.474133][ T8325] bond2: (slave geneve2): the permanent HWaddr of slave - 82:40:45:52:f8:8e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  102.482499][ T8325] bond2: (slave ip6gretap1): making interface the new active one
[  102.487338][ T8325] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  102.495575][ T8325] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  102.503043][ T8325] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  102.506765][ T8325] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  102.513611][ T8325] bond2: (slave ip6gretap1): Releasing active interface
[  102.521135][ T8325] bond4: (slave bridge2): Releasing active interface
[  102.835784][ T8356] netlink: 'syz.0.809': attribute type 58 has an invalid length.
[  103.499717][ T8409] wg1 speed is unknown, defaulting to 1000
[  104.175485][ T8428] netlink: 'syz.0.834': attribute type 1 has an invalid length.
[  104.243230][ T8434] x_tables: duplicate underflow at hook 3
[  104.376890][ T8437] __nla_validate_parse: 17 callbacks suppressed
[  104.376905][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.838'.
[  104.394345][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.838'.
[  104.398159][ T8437] netlink: 'syz.1.838': attribute type 13 has an invalid length.
[  104.405860][ T8437] netlink: 'syz.1.838': attribute type 12 has an invalid length.
[  104.539982][ T8442] syzkaller1: entered promiscuous mode
[  104.542384][ T8442] syzkaller1: entered allmulticast mode
[  104.584451][ T8450] netlink: 240 bytes leftover after parsing attributes in process `syz.1.842'.
[  104.610299][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.840'.
[  104.686160][ T8453] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  104.782936][ T8459] netlink: 72 bytes leftover after parsing attributes in process `syz.2.845'.
[  104.820860][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'.
[  104.824749][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'.
[  104.832298][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'.
[  104.999352][ T8480] netlink: 'syz.0.850': attribute type 1 has an invalid length.
[  105.002617][ T8480] netlink: 228 bytes leftover after parsing attributes in process `syz.0.850'.
[  105.054290][ T8485] netlink: 'syz.2.853': attribute type 13 has an invalid length.
[  105.113637][ T8488] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  105.172629][ T8493] netlink: 224 bytes leftover after parsing attributes in process `syz.2.856'.
[  105.361571][ T8506] netlink: 'syz.0.859': attribute type 1 has an invalid length.
[  105.390009][   T33] audit: type=1800 audit(1751724574.339:6): pid=8508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.858" name=33FFFF dev="tmpfs" ino=1443 res=0 errno=0
[  105.478218][ T8514] dvmrp1: entered allmulticast mode
[  105.481523][ T8514] dvmrp1: left allmulticast mode
[  105.612855][ T8516] vlan3: entered promiscuous mode
[  105.945471][ T8546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.451910][ T8572] xt_CT: No such helper "snmp"
[  106.464672][ T8572] netlink: 'syz.1.885': attribute type 5 has an invalid length.
[  106.511037][ T8577] lo: entered allmulticast mode
[  106.577328][ T8581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.746828][ T8584] netlink: 'syz.2.888': attribute type 13 has an invalid length.
[  106.860862][ T8592] netlink: 'syz.2.890': attribute type 11 has an invalid length.
[  107.151345][ T8602] xt_l2tp: missing protocol rule (udp|l2tpip)
[  107.224608][ T8607] 8021q: adding VLAN 0 to HW filter on device bond3
[  107.796902][ T8644] netlink: 'syz.0.907': attribute type 6 has an invalid length.
[  107.852103][ T8579] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  107.970400][ T8660] netlink: 'syz.0.911': attribute type 2 has an invalid length.
[  108.006912][ T8662] tc_dump_action: action bad kind
[  108.071945][ T8665] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.139499][ T8665] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.193664][ T8665] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.243792][ T8665] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.310296][ T8665] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.319934][ T8665] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.336302][ T8665] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.344942][ T8665] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.482002][ T8695] wg1 speed is unknown, defaulting to 1000
[  108.568638][ T5813] Bluetooth: hci1: command 0x0401 tx timeout
[  109.530039][ T8748] __nla_validate_parse: 20 callbacks suppressed
[  109.530051][ T8748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.940'.
[  109.593636][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.941'.
[  109.596664][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.941'.
[  109.600413][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.941'.
[  109.606655][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.941'.
[  109.614050][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.941'.
[  109.617351][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.941'.
[  109.620889][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.941'.
[  109.624400][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.941'.
[  109.627577][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.941'.
[  109.763860][ T8766] xt_CT: You must specify a L4 protocol and not use inversions on it
[  109.770141][ T8767] xt_CT: You must specify a L4 protocol and not use inversions on it
[  110.051019][ T8791] geneve2: entered promiscuous mode
[  110.122228][ T8790] netlink: 'syz.1.954': attribute type 1 has an invalid length.
[  111.036335][ T8814] netlink: 'syz.0.963': attribute type 10 has an invalid length.
[  111.054980][ T8814] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  112.065554][ T8826] veth1_to_team: entered promiscuous mode
[  112.317208][ T8841] xt_policy: output policy not valid in PREROUTING and INPUT
[  112.506831][ T8870] xt_limit: Overflow, try lower: 0/0
[  112.515027][ T8871] netlink: 'syz.1.978': attribute type 2 has an invalid length.
[  112.575611][ T8874] netlink: 'syz.0.982': attribute type 7 has an invalid length.
[  112.658622][ T8882] IPVS: Unknown mcast interface: vcan0
[  113.817811][ T8927] xt_hashlimit: overflow, rate too high: 1125899906842624
[  114.157341][ T8954] syz.1.1010: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  114.166010][ T8954] CPU: 0 UID: 0 PID: 8954 Comm: syz.1.1010 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  114.166034][ T8954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  114.166042][ T8954] Call Trace:
[  114.166051][ T8954]  <TASK>
[  114.166057][ T8954]  dump_stack_lvl+0x189/0x250
[  114.166088][ T8954]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.166131][ T8954]  ? __pfx__printk+0x10/0x10
[  114.166146][ T8954]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  114.166161][ T8954]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  114.166177][ T8954]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  114.166195][ T8954]  warn_alloc+0x214/0x310
[  114.166211][ T8954]  ? stack_depot_save_flags+0x40/0x900
[  114.166232][ T8954]  ? __pfx_warn_alloc+0x10/0x10
[  114.166248][ T8954]  ? kasan_save_track+0x4f/0x80
[  114.166269][ T8954]  ? xskq_create+0x56/0x170
[  114.166287][ T8954]  ? xsk_init_queue+0xb0/0x110
[  114.166303][ T8954]  ? xsk_setsockopt+0x43f/0x710
[  114.166318][ T8954]  ? do_sock_setsockopt+0x25a/0x3e0
[  114.166330][ T8954]  ? __x64_sys_setsockopt+0x18b/0x220
[  114.166343][ T8954]  ? do_syscall_64+0xfa/0x3b0
[  114.166355][ T8954]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.166375][ T8954]  __vmalloc_node_range_noprof+0x125/0x12f0
[  114.166414][ T8954]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  114.166433][ T8954]  ? __kasan_kmalloc+0x93/0xb0
[  114.166447][ T8954]  vmalloc_user_noprof+0xad/0xf0
[  114.166461][ T8954]  ? xskq_create+0xbf/0x170
[  114.166479][ T8954]  xskq_create+0xbf/0x170
[  114.166499][ T8954]  xsk_init_queue+0xb0/0x110
[  114.166516][ T8954]  xsk_setsockopt+0x43f/0x710
[  114.166534][ T8954]  ? __pfx_xsk_setsockopt+0x10/0x10
[  114.166549][ T8954]  ? __lock_acquire+0xab9/0xd20
[  114.166574][ T8954]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  114.166589][ T8954]  ? __pfx_xsk_setsockopt+0x10/0x10
[  114.166606][ T8954]  do_sock_setsockopt+0x25a/0x3e0
[  114.166623][ T8954]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  114.166640][ T8954]  ? __fget_files+0x2a/0x420
[  114.166661][ T8954]  __x64_sys_setsockopt+0x18b/0x220
[  114.166707][ T8954]  do_syscall_64+0xfa/0x3b0
[  114.166720][ T8954]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.166741][ T8954]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.166754][ T8954]  ? exc_page_fault+0x9f/0xf0
[  114.166774][ T8954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.166788][ T8954] RIP: 0033:0x7fbc7518e929
[  114.166801][ T8954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.166811][ T8954] RSP: 002b:00007fbc72ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  114.166826][ T8954] RAX: ffffffffffffffda RBX: 00007fbc753b6080 RCX: 00007fbc7518e929
[  114.166834][ T8954] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[  114.166841][ T8954] RBP: 00007fbc75210b39 R08: 0000000000000004 R09: 0000000000000000
[  114.166849][ T8954] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000
[  114.166856][ T8954] R13: 0000000000000000 R14: 00007fbc753b6080 R15: 00007ffed4718858
[  114.166877][ T8954]  </TASK>
[  114.166908][ T8954] Mem-Info:
[  114.299961][ T8954] active_anon:13329 inactive_anon:0 isolated_anon:0
[  114.299961][ T8954]  active_file:1262 inactive_file:38228 isolated_file:0
[  114.299961][ T8954]  unevictable:1768 dirty:161 writeback:0
[  114.299961][ T8954]  slab_reclaimable:9710 slab_unreclaimable:64353
[  114.299961][ T8954]  mapped:18277 shmem:2467 pagetables:926
[  114.299961][ T8954]  sec_pagetables:0 bounce:0
[  114.299961][ T8954]  kernel_misc_reclaimable:0
[  114.299961][ T8954]  free:284868 free_pcp:16667 free_cma:0
[  114.318208][ T8954] Node 0 active_anon:19404kB inactive_anon:0kB active_file:3216kB inactive_file:20704kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39904kB dirty:292kB writeback:0kB shmem:4860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5992kB pagetables:2144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  114.331754][ T8954] Node 1 active_anon:33912kB inactive_anon:0kB active_file:1832kB inactive_file:132208kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33204kB dirty:352kB writeback:0kB shmem:5008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5752kB pagetables:1560kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  114.345325][ T8954] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  114.357074][ T8954] lowmem_reserve[]: 0 815 815 815 815
[  114.359708][ T8954] Node 0 DMA32 free:363144kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19404kB inactive_anon:0kB active_file:3216kB inactive_file:20704kB unevictable:3536kB writepending:292kB present:1556484kB managed:834740kB mlocked:0kB bounce:0kB free_pcp:27688kB local_pcp:13948kB free_cma:0kB
[  114.373660][ T8954] lowmem_reserve[]: 0 0 0 0 0
[  114.375816][ T8954] Node 1 DMA32 free:458616kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  114.390026][ T8954] lowmem_reserve[]: 0 0 854 854 854
[  114.392350][ T8954] Node 1 Normal free:302352kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33912kB inactive_anon:0kB active_file:1832kB inactive_file:132208kB unevictable:3536kB writepending:352kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:38976kB local_pcp:18820kB free_cma:0kB
[  114.405816][ T8954] lowmem_reserve[]: 0 0 0 0 0
[  114.407924][ T8954] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  114.415526][ T8954] Node 0 DMA32: 1540*4kB (UME) 969*8kB (UME) 139*16kB (UM) 260*32kB (UME) 324*64kB (UM) 26*128kB (UME) 29*256kB (UME) 50*512kB (UM) 27*1024kB (UM) 14*2048kB (UM) 55*4096kB (UM) = 363144kB
[  114.423898][ T8954] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  114.432412][ T8954] Node 1 Normal: 156*4kB (M) 292*8kB (UME) 96*16kB (ME) 102*32kB (UME) 131*64kB (UM) 82*128kB (UM) 29*256kB (UM) 2*512kB (U) 1*1024kB (U) 6*2048kB (UM) 62*4096kB (M) = 302352kB
[  114.440270][ T8954] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  114.444260][ T8954] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  114.448203][ T8954] 41960 total pagecache pages
[  114.452116][ T8954] 0 pages in swap cache
[  114.454106][ T8954] Free swap  = 124996kB
[  114.458494][ T8954] Total swap = 124996kB
[  114.460354][ T8954] 786301 pages RAM
[  114.462192][ T8954] 0 pages HighMem/MovableOnly
[  114.464248][ T8954] 240368 pages reserved
[  114.466075][ T8954] 0 pages cma reserved
[  114.549586][ T8961] netlink: 'syz.1.1013': attribute type 10 has an invalid length.
[  114.566802][ T8961] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  114.625067][ T8965] __nla_validate_parse: 185 callbacks suppressed
[  114.625085][ T8965] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1011'.
[  114.632205][ T8965] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1011'.
[  114.640203][ T8965] netlink: 'syz.0.1011': attribute type 2 has an invalid length.
[  114.643727][ T8965] netlink: 'syz.0.1011': attribute type 8 has an invalid length.
[  114.647179][ T8965] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1011'.
[  114.656880][ T8965] netlink: 212160 bytes leftover after parsing attributes in process `syz.0.1011'.
[  114.716485][ T8972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1017'.
[  114.720312][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1017'.
[  114.751831][ T8974] netlink: 'syz.1.1018': attribute type 9 has an invalid length.
[  114.755759][ T8974] netlink: 'syz.1.1018': attribute type 6 has an invalid length.
[  114.832554][ T8979] syz.1.1019 (8979) used greatest stack depth: 19880 bytes left
[  115.247199][ T9004] netlink: 'syz.2.1027': attribute type 1 has an invalid length.
[  115.252216][ T9004] netlink: 'syz.2.1027': attribute type 1 has an invalid length.
[  115.256066][ T9004] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1027'.
[  115.267049][ T9005] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1026'.
[  115.272521][ T9005] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1026'.
[  115.276534][ T9005] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1026'.
[  115.676787][ T9028] xt_ecn: cannot match TCP bits for non-tcp packets
[  116.283966][   T33] audit: type=1800 audit(1751724585.239:7): pid=9073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1053" name="x000000000000000600000000000000000000006" dev="tmpfs" ino=1689 res=0 errno=0
[  116.296142][   T33] audit: type=1804 audit(1751724585.249:8): pid=9073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1053" name="x000000000000000600000000000000000000006" dev="tmpfs" ino=1689 res=1 errno=0
[  116.319440][ T9059] wg1 speed is unknown, defaulting to 1000
[  116.766709][ T9098] wg1 speed is unknown, defaulting to 1000
[  117.173895][ T9120] validate_nla: 1 callbacks suppressed
[  117.173907][ T9120] netlink: 'syz.1.1070': attribute type 1 has an invalid length.
[  117.277514][ T9120] bond7: entered promiscuous mode
[  117.284388][ T9120] 8021q: adding VLAN 0 to HW filter on device bond7
[  117.858608][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  118.063099][   T33] audit: type=1107 audit(1751724587.019:9): pid=9206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='܆n0o8ؠkc	w=[_Q̝Do߫hӇi#0?AnjՏY-I6v5+jX'0;CJ̃r,BX2qIY|S
[  118.063099][   T33] @F(zwrءS%OynS*bixaa٘!)@)x'
[  118.154610][ T9212] netlink: 'syz.1.1097': attribute type 21 has an invalid length.
[  118.221454][ T9218] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  118.360202][ T9224] netlink: 'syz.0.1103': attribute type 12 has an invalid length.
[  118.699228][ T9235] netlink: 'syz.2.1107': attribute type 9 has an invalid length.
[  118.711214][ T9235] macvlan2: entered allmulticast mode
[  118.713697][ T9235] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  120.960364][ T9268] netlink: 'syz.1.1119': attribute type 21 has an invalid length.
[  120.964710][ T9268] __nla_validate_parse: 20 callbacks suppressed
[  120.964726][ T9268] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1119'.
[  125.362123][ T9278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1121'.
[  130.298328][    C1] sched: DL replenish lagged too much
[  132.690205][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  135.767161][ T9273] wg1 speed is unknown, defaulting to 1000
[  143.981999][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  143.985964][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  143.993475][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  143.996957][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  144.003135][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  145.067814][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  145.077538][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  145.103991][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  145.124040][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  145.127147][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  146.354648][ T5813] Bluetooth: hci3: command tx timeout
[  147.225678][ T5813] Bluetooth: hci4: command tx timeout
[  147.440974][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  147.445390][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  147.451858][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  147.454571][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  147.482687][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  148.431513][   T54] Bluetooth: hci3: command tx timeout
[  149.403619][   T54] Bluetooth: hci4: command tx timeout
[  149.544211][   T54] Bluetooth: hci1: command tx timeout
[  150.501791][   T54] Bluetooth: hci3: command tx timeout
[  151.490040][   T54] Bluetooth: hci4: command tx timeout
[  151.816629][   T54] Bluetooth: hci1: command tx timeout
[  152.573736][   T54] Bluetooth: hci3: command tx timeout
[  153.538926][   T54] Bluetooth: hci4: command tx timeout
[  153.851690][   T54] Bluetooth: hci1: command tx timeout
[  155.943614][   T54] Bluetooth: hci1: command tx timeout
[  158.004037][ T9294] wg1 speed is unknown, defaulting to 1000
[  158.302823][ T9300] wg1 speed is unknown, defaulting to 1000
[  158.466802][ T9296] wg1 speed is unknown, defaulting to 1000
[  164.523878][ T9294] chnl_net:caif_netlink_parms(): no params data found
[  165.051580][ T9296] chnl_net:caif_netlink_parms(): no params data found
[  165.759080][ T9300] chnl_net:caif_netlink_parms(): no params data found
[  168.223505][ T9294] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.238395][ T9294] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.268067][ T9294] bridge_slave_0: entered allmulticast mode
[  168.378223][ T9294] bridge_slave_0: entered promiscuous mode
[  168.571965][ T9294] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.610727][ T9294] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.632139][ T9294] bridge_slave_1: entered allmulticast mode
[  168.652594][ T9294] bridge_slave_1: entered promiscuous mode
[  169.696591][ T9300] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.720534][ T9300] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.739817][ T9300] bridge_slave_0: entered allmulticast mode
[  169.791633][ T9300] bridge_slave_0: entered promiscuous mode
[  169.970396][ T9296] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.989708][ T9296] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.010280][ T9296] bridge_slave_0: entered allmulticast mode
[  170.062526][ T9296] bridge_slave_0: entered promiscuous mode
[  170.627486][ T9294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.642386][ T9300] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.683903][ T9300] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.699652][ T9300] bridge_slave_1: entered allmulticast mode
[  170.728864][ T9300] bridge_slave_1: entered promiscuous mode
[  170.866384][ T9296] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.884687][ T9296] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.904994][ T9296] bridge_slave_1: entered allmulticast mode
[  170.929612][ T9296] bridge_slave_1: entered promiscuous mode
[  171.359983][ T9294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.319001][ T9300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.458690][ T9300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.609873][ T9296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.696389][ T9294] team0: Port device team_slave_0 added
[  173.013744][ T9296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.190252][ T9294] team0: Port device team_slave_1 added
[  173.689840][ T9300] team0: Port device team_slave_0 added
[  174.190872][ T9294] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.193168][ T9294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.230795][ T9294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.563424][ T9300] team0: Port device team_slave_1 added
[  174.798968][ T9296] team0: Port device team_slave_0 added
[  175.048747][ T9296] team0: Port device team_slave_1 added
[  175.111314][ T9294] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.113745][ T9294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.159358][ T9294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.211265][ T9296] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.213869][ T9296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.251489][ T9296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.281815][ T9300] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.284828][ T9300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.307351][ T9300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.379822][ T9300] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.382290][ T9300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.419367][ T9300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.696578][ T9296] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.711790][ T9296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.791146][ T9296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  179.210095][ T9294] hsr_slave_0: entered promiscuous mode
[  179.274802][ T9294] hsr_slave_1: entered promiscuous mode
[  179.508682][ T9294] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  179.511257][ T9294] Cannot create hsr debugfs directory
[  180.662679][ T9296] hsr_slave_0: entered promiscuous mode
[  180.852975][ T9296] hsr_slave_1: entered promiscuous mode
[  180.880112][ T9296] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  180.882524][ T9296] Cannot create hsr debugfs directory
[  181.503875][ T9300] hsr_slave_0: entered promiscuous mode
[  181.566568][ T9300] hsr_slave_1: entered promiscuous mode
[  181.654779][ T9300] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  181.657973][ T9300] Cannot create hsr debugfs directory
[  183.774169][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.390352][ T9294] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  187.799411][ T9294] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  188.811728][ T9294] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  190.550319][ T9294] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  191.198394][ T9300] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  194.259076][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  194.810750][ T9300] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  198.380856][ T9300] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  205.793276][ T9294] kthread_run failed with err -4
[  225.951770][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  225.957649][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  225.969077][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  226.004306][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  226.041872][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  226.360992][ T9300] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  228.269827][ T5813] Bluetooth: hci0: command tx timeout
[  230.331126][ T5813] Bluetooth: hci0: command tx timeout
[  232.699112][ T5813] Bluetooth: hci0: command tx timeout
[  234.748574][ T5813] Bluetooth: hci0: command tx timeout
[  235.945537][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  235.986846][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  236.051853][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  236.055224][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  236.265876][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  238.346587][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  238.383633][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  238.397263][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  238.433694][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  238.460921][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  239.211003][ T5813] Bluetooth: hci2: command tx timeout
[  240.800520][ T5813] Bluetooth: hci1: command tx timeout
[  241.362186][ T5813] Bluetooth: hci2: command tx timeout
[  242.958970][ T5813] Bluetooth: hci1: command tx timeout
[  243.394519][ T5813] Bluetooth: hci2: command tx timeout
[  244.980036][ T5813] Bluetooth: hci1: command tx timeout
[  245.462070][ T5813] Bluetooth: hci2: command tx timeout
[  247.486242][ T5813] Bluetooth: hci1: command tx timeout
[  255.748412][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  275.420808][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  275.426272][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  275.437125][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  275.456735][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  275.506400][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  277.614574][ T5813] Bluetooth: hci0: command tx timeout
[  279.715914][ T5813] Bluetooth: hci0: command tx timeout
[  281.330824][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  281.356124][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  281.365560][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  281.383097][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  281.390427][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  281.803514][ T5813] Bluetooth: hci0: command tx timeout
[  283.712050][ T5813] Bluetooth: hci3: command tx timeout
[  283.982833][ T5813] Bluetooth: hci0: command tx timeout
[  285.781739][ T5813] Bluetooth: hci3: command tx timeout
[  287.851796][ T5813] Bluetooth: hci3: command tx timeout
[  290.012260][ T5813] Bluetooth: hci3: command tx timeout
[  298.596835][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  298.611635][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  298.615084][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  298.624199][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  298.627247][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  300.951749][   T54] Bluetooth: hci2: command tx timeout
[  303.272096][   T54] Bluetooth: hci2: command tx timeout
[  305.305095][   T54] Bluetooth: hci2: command tx timeout
[  307.374927][   T54] Bluetooth: hci2: command tx timeout
[  311.772068][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.023233][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  336.710951][ T9358] wg1 speed is unknown, defaulting to 1000
[  337.744426][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  337.765492][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  337.840533][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  337.845585][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  337.870344][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  337.913590][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  337.929130][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  337.932904][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  337.935860][ T5813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  337.946111][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  337.968249][ T5837] bridge_slave_1: left allmulticast mode
[  337.990982][ T5837] bridge_slave_1: left promiscuous mode
[  338.300053][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.640746][ T5837] bridge_slave_0: left allmulticast mode
[  338.650396][ T5837] bridge_slave_0: left promiscuous mode
[  338.658430][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.032667][   T54] Bluetooth: hci3: command tx timeout
[  340.092507][   T54] Bluetooth: hci0: command tx timeout
[  342.092512][   T54] Bluetooth: hci3: command tx timeout
[  342.171763][   T54] Bluetooth: hci0: command tx timeout
[  344.177268][   T54] Bluetooth: hci3: command tx timeout
[  344.253781][   T54] Bluetooth: hci0: command tx timeout
[  346.280593][   T54] Bluetooth: hci3: command tx timeout
[  346.331491][   T54] Bluetooth: hci0: command tx timeout
[  378.446196][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  416.392908][   T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  417.085142][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  417.657528][ T5837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  419.159877][ T9375] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  421.404525][ T9376] Bluetooth: hci2: command 0x0406 tx timeout
[  424.311594][ T5837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  424.841380][ T9376] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  424.845756][ T9376] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  424.854062][ T9376] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  424.857965][ T9376] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  424.865041][ T9376] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  427.349342][   T54] Bluetooth: hci1: command tx timeout
[  428.737281][ T9376] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  429.295816][ T9376] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  429.386443][ T9376] Bluetooth: hci1: command tx timeout
[  429.408739][ T9376] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  429.411754][ T9376] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  429.420761][ T9376] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  429.726547][ T5837] bond0 (unregistering): Released all slaves
[  431.520090][ T9376] Bluetooth: hci1: command tx timeout
[  431.771846][   T54] Bluetooth: hci4: command tx timeout
[  433.617215][   T54] Bluetooth: hci1: command tx timeout
[  434.093550][   T54] Bluetooth: hci4: command tx timeout

VM DIAGNOSIS:
14:15:04  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000000f RBX=ffffffff8e13ee60 RCX=0000000000000007 RDX=0000000000000000
RSI=0000000000002000 RDI=ffff8880209dd640 RBP=0000000000000007 RSP=ffffc900000073c8
R8 =0000000000000000 R9 =ffffffff81728af5 R10=ffffc90000007628 R11=fffff52000000ed1
R12=0000000000022000 R13=0000000000000000 R14=ffff8880209de1a8 R15=ffff8880209de130
RIP=ffffffff819e28a2 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055b515208d98 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 000001000000ffff
XMM02=0000000000000068 746f6f7465756c62 XMM03=ffffffffffff0000 ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=000000000000016d 0000000033326c0a
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffff00000000 XMM09=00000000000001e1 0000000033326c6c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000023401 RBX=0000000000000d0c RCX=0000000000023401 RDX=ffffffff9360b358
RSI=0000000000000003 RDI=000000000003200a RBP=ffffffff93a4b7d0 RSP=ffffc90000067bc0
R8 =0000000000000000 R9 =ffffffff81ab3138 R10=dffffc0000000000 R11=fffffbfff1f4219f
R12=000000000003e8eb R13=0000000000000000 R14=ffffffff92aa1d0e R15=00000000000234ef
RIP=ffffffff819e9b30 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055b5151ff048 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=000000000000016d 0000000033326c0a
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffff00000000 XMM09=00000000000001e1 0000000033326c6c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
