last executing test programs:

1m0.367435724s ago: executing program 3 (id=1197):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fb5bdf252a00000008000300", @ANYRES32=r4, @ANYBLOB="20002f800c0002000203aaaaaaaaaaaa10000380080001000000000004000380"], 0x3c}, 0x1, 0x0, 0x0, 0x40c4}, 0x40800)
syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001d00070c000000000000000007000000", @ANYRES64=r5, @ANYBLOB="0c000200"], 0x28}}, 0x48000)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5e}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000005)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r7)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r7)
sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="87002dbd7000000000001e0000000a0004007770616e300000000800010007"], 0x28}, 0x1, 0x0, 0x0, 0x4040025}, 0x4024044)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ea0c00", 0x18, 0x88, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@dstopts={0x1}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}}, 0x0)
r9 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c0200000015000500fc01ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc100800000400240200e2", 0x55}], 0x1}, 0x0)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r11, 0x107, 0xe, 0x0, 0x0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r10, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c00080000000000000000000800010000007fff"], 0x90}}, 0x0)

50.414469155s ago: executing program 3 (id=1197):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fb5bdf252a00000008000300", @ANYRES32=r4, @ANYBLOB="20002f800c0002000203aaaaaaaaaaaa10000380080001000000000004000380"], 0x3c}, 0x1, 0x0, 0x0, 0x40c4}, 0x40800)
syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001d00070c000000000000000007000000", @ANYRES64=r5, @ANYBLOB="0c000200"], 0x28}}, 0x48000)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5e}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000005)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r7)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r7)
sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="87002dbd7000000000001e0000000a0004007770616e300000000800010007"], 0x28}, 0x1, 0x0, 0x0, 0x4040025}, 0x4024044)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ea0c00", 0x18, 0x88, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@dstopts={0x1}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}}, 0x0)
r9 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c0200000015000500fc01ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc100800000400240200e2", 0x55}], 0x1}, 0x0)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r11, 0x107, 0xe, 0x0, 0x0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r10, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c00080000000000000000000800010000007fff"], 0x90}}, 0x0)

39.057811612s ago: executing program 3 (id=1197):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fb5bdf252a00000008000300", @ANYRES32=r4, @ANYBLOB="20002f800c0002000203aaaaaaaaaaaa10000380080001000000000004000380"], 0x3c}, 0x1, 0x0, 0x0, 0x40c4}, 0x40800)
syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001d00070c000000000000000007000000", @ANYRES64=r5, @ANYBLOB="0c000200"], 0x28}}, 0x48000)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5e}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000005)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r7)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r7)
sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="87002dbd7000000000001e0000000a0004007770616e300000000800010007"], 0x28}, 0x1, 0x0, 0x0, 0x4040025}, 0x4024044)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ea0c00", 0x18, 0x88, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@dstopts={0x1}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}}, 0x0)
r9 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c0200000015000500fc01ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc100800000400240200e2", 0x55}], 0x1}, 0x0)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r11, 0x107, 0xe, 0x0, 0x0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r10, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c00080000000000000000000800010000007fff"], 0x90}}, 0x0)

28.147509857s ago: executing program 3 (id=1197):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fb5bdf252a00000008000300", @ANYRES32=r4, @ANYBLOB="20002f800c0002000203aaaaaaaaaaaa10000380080001000000000004000380"], 0x3c}, 0x1, 0x0, 0x0, 0x40c4}, 0x40800)
syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001d00070c000000000000000007000000", @ANYRES64=r5, @ANYBLOB="0c000200"], 0x28}}, 0x48000)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5e}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000005)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r7)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r7)
sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="87002dbd7000000000001e0000000a0004007770616e300000000800010007"], 0x28}, 0x1, 0x0, 0x0, 0x4040025}, 0x4024044)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ea0c00", 0x18, 0x88, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@dstopts={0x1}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}}, 0x0)
r9 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c0200000015000500fc01ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc100800000400240200e2", 0x55}], 0x1}, 0x0)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r11, 0x107, 0xe, 0x0, 0x0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r10, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c00080000000000000000000800010000007fff"], 0x90}}, 0x0)

16.918475699s ago: executing program 3 (id=1197):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fb5bdf252a00000008000300", @ANYRES32=r4, @ANYBLOB="20002f800c0002000203aaaaaaaaaaaa10000380080001000000000004000380"], 0x3c}, 0x1, 0x0, 0x0, 0x40c4}, 0x40800)
syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001d00070c000000000000000007000000", @ANYRES64=r5, @ANYBLOB="0c000200"], 0x28}}, 0x48000)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5e}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000005)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r7)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r7)
sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="87002dbd7000000000001e0000000a0004007770616e300000000800010007"], 0x28}, 0x1, 0x0, 0x0, 0x4040025}, 0x4024044)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ea0c00", 0x18, 0x88, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@dstopts={0x1}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}}, 0x0)
r9 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c0200000015000500fc01ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc100800000400240200e2", 0x55}], 0x1}, 0x0)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r11, 0x107, 0xe, 0x0, 0x0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r10, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c00080000000000000000000800010000007fff"], 0x90}}, 0x0)

10.122850912s ago: executing program 1 (id=1995):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}]}, 0x30}}, 0x0)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r4)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r3, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6}, @GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8020)
bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000040)="09000000010000", 0x7)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x20, 0x809, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0)

10.040995352s ago: executing program 1 (id=1996):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000240)={'geneve0\x00', &(0x7f0000000200)=@ethtool_rxfh={0x46, 0x4, 0x400, 0x1, 0x6, "f7b6fe"}}) (async)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000240)={'geneve0\x00', &(0x7f0000000200)=@ethtool_rxfh={0x46, 0x4, 0x400, 0x1, 0x6, "f7b6fe"}})
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x44, r1, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x80000002}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x44}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0x3, 0x2)
socket$alg(0x26, 0x5, 0x0) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', <r9=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000011c0)={0x48, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}]}]}, 0x48}}, 0x20000000) (async)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000011c0)={0x48, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}]}]}, 0x48}}, 0x20000000)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8904)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000)
sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x4, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200001, 0x1ff, 0x9})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000001, 0x3032, 0xffffffffffffffff, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000540)={'sit0\x00', &(0x7f0000002940)={'syztnl2\x00', 0x0, 0x40, 0x7800, 0x21ae, 0x7ff, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x65, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}}}})
write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc)

8.89128588s ago: executing program 1 (id=2005):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001100)={'filter\x00', 0x7, 0x4, 0x3e8, 0xe8, 0xe8, 0xe8, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @private, 0xff000000, 0x0, 0x0, 0x4, {}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 'veth1_to_team\x00', 'veth0_to_team\x00'}, 0xc0, 0x16c}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac, @dev={0xac, 0x14, 0x14, 0x40}, @local, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x452)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'bridge_slave_1\x00', {0x2, 0x4e24, @empty}})
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x7, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=<r2=>0x0, &(0x7f00000000c0)=0x4)
pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc)
sendmsg$sock(r0, &(0x7f0000000580)={&(0x7f0000000140)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, &(0x7f0000000480)=[{&(0x7f0000001540)="fae7d9549d36eedb7f1ba9c2b1cc452ef1f795fe5c9b1ba8b598264a3ca455da73bd00275c8d8134876634d6f74c5a684f3763d76dc1f6e3135f30c6203220059c661b0f1c6da3fe3d9e43124f303b59ed62bcee410069ee045eeb016ec54ca4bb208461abae0120f6228bf33bf68567d7e14c11dd56c8eb81da25001738168812b53e2ba8dd910914f1eb5f1f2ba2c5be33630b2a246cf6cfff57041971e5a96e85cca0c95df458f856da0cac2bc714be0925803854ce796235841b15de9070e39226ffd97a8e5801616b8d1198b1dff67495a00e9f925bcf82f5bb80d81b606f0255901dc919b2a46f1f21e32034178da2612a90c5aa6f3a1af6331b704d9dc6e941c1422f532b008605e89b42d007342b62599ff94c3a3b48f47c6b9db7925a63b626341d90c306b240837a3377f230c86afff4846021c7e94a86fdb2afb90c3ee136a621080738ef5487057e7af0e4015dea7a1f7d7f72aa5c10b63cbb76970ab77b2ff4ffeba58a0f1d509049e43bb9f79b738bf5fe13ba80fa78d150f5f17beec2349ebbeda8e7ea21785594aaf92ae111e7cedaddf41934d4baca1cefc8f7a425e29ab0d8ba595a218d5415e5c22ec295659b22ec581a647a3caeffe2d3be0cd7a54366a45ab1cb10283975f937508830f52be6aa3bdc5281db47a79de3a576f7cddfa0549c121b89064ccc8b0739633da9a99524feab4247d0fd0999072778ba8d4e55662bb123fd76f6e2b743ea590e3496fde92b2bceb932d63fd94938cbbceccaa0ddfa494f53065e1a5c300cda67e95bdb3914db45303aae622694af2c5e69f551c1563cdd95642368155d5bc2e7074a475b0ffa72cfae62df75d7be55fa2168fafd9a1c6d0edcfc6bad6d2c0913174a9db584cbd54cc1a56bbca13be05329f4c07c6548907747d239a02d55535b842b81cf4cd8ae0a53995b31111439fe7f8acc177c382c8304f523095184e6e6254b88b537a55ac8e6daf8d005478f6e4367bb190ee30d9f71c216d6c320cfe92e6d2ee77e80b2e2483fc288af767b310d8634fa9c273c72ac7e0d66d146b1a11b39d67054f31735fbecf53a10d4d92c9b9e018e7bd9b7ef729812c8a32ca7b00f5cc8b79bafcc39db0666c54a69e93288c2effe4b97b8df52e3b5354dded8da5b7e257060ef04cf2b22bf895f859df730020e7fa933fc28516fc5efc8f6dabd2414648bdb4d70f806b2c12eff9e1c04175b7648e114e30d127e6914a13a17f5f46da236458e99d9ab948fc61024533d30a70ea367c54f4f7f38989b850c3bd4d88a158765afcf8d29f68b46df0e8bf97c8c32babea05fb488ce8a3f326effb31efd093fc2d849e3c0c06bbb1309ff16db24372d3f47c3aa5830be348afde203fa3966cfd38ede8570c1b80852b2e30488e95ad6cf69a12b37ddeabbb2908763ffe8642914d0fbf63cc86ed65e766b933bcc1290c9ae14a58911d2b869d3693fc8bd8a5aa9df53f49e717ae687af044cf47500226966bff57351ff9e15d39adf5e6f6d2bda9d189427fa8199dbc4d6a6bafcd3c2837c790b1bf8adc6c3c2c247a1c6270d2aec7acd265a08cc1640b1670b797a8f3cff4be6efe869041958ac509a1445a274b0ce16e45158b24c6cf704c0944b9c8094e29f37c5f1bfd2ea8b3d990ce1227eadf589fde15e2d4ab26aa5c9294b6cc4434533b1910ce8a1a1f59344c4e741b430700e16684362fd8869201c18faa45b2fe626e02c6dd9e81d1d166078dabcf914938450c3ed606f6a500cf7bab5cb1863062558aa62e55da50e672f09b9a7af7e73f5c5930efbd0ec8f06edcbffe1614153ffeb60d2bf5b455d91dfc48149362376fb7f82e1d800f941ada684d7983eb77ec4b6b4483e06579932ba225d7fa21c48083435daaf149104a866926909521710c513356053e08c65f2df906c27b69ab174f81133bd9a9cef5ee6a355a2e6e2dbed663923abf9bef1c0c3d331163f093926ed55adb36e028b35138a1290392c8f20fa9987a59125475283e605ac8c84630ec1f74e504470e2bc40a88c8b567bd646f8c3d12724246f8fba2eb526b9353c4be672c00b87bda50ceebb0cc955983e828c7f7ce49c157d5d8ebe4f3f33f40992ba6ff27dfe3c5a4dbe6e1b4281486412bde85e736cab3f29960d421b7ae7f02f1ce3f041f3e99e8bf461c377470f32fcc34fd2406acfa0ad03f70ac2b9ab2414c0571ce6c95b5b38b617f2c191f9cece2c3eb66cd5e3fc3be60c53aa271c3def866fbc9af1ea5b211c15f92ce8434780e51ff18c409bf40390cbbb7ed94e0d4d8e810bbfc94c20a1bef12035d5ca403b85caca9c9004dcb81c70fdfe8239d6795fe11fab5bfd0be535c4f69b7cfffeac78edf3c38609e2e9a480b5ed2e52c1b71b7b33626a67cb014f56a8882805907f066fbe111307b8838268b5b677d149fda1018fe867d58c7b0935bef126041c2b334f77d963340e4021345d807924ae22d3e431c95193193df2da5bcfd416944157ab2ec5688a79f35aa0919aef77d261f41c15a925d7500953e179075fbf1ba2c128cc92e3e97de34fdca278a8b71d486406b1d0c8d4f0bcc6fe9b66f2a0d105402d310403e672bcb090d4ebd6247e1e92199f26d626eff3f69cd76c0d2d429599e9541a3fff518a2bd5bca9aa5b390c13f31ac278cfa2e2cf90ac1dbf2d4ef9ae6040670426dd0065403b57594bc6bfbd67a3ca96d2b1823cf3093bb601fe8d2ea71f2602f430c508934398b7c50733e2529c08548bb1487b0e8908043e17d4ed7bcf13eecf59aa92bc7d5e23da7a88913a2c58ae02659e26d70a9b9952beb036c5ac89a75995504f3a4bfefb5f2b0981e103e6dcef6921ca33c496ad0945a8bc5a8ac2ee98e69d23f786e85438245638a6fc73364a46ba9be62be716c5beca25c6433ace95670a380808323c9b0b01148133544f88f66b9e5ca5f811e63aaac8e1ea4ee546317e7b163ecf5bfb338b7433ab2f405d34312accd256343a373b06f18c0cd11550860038b85253fe5d5e798a2a4804de8a45ecef4d04b8dc58fc5ce6338592197da6d9da5266c8e4420e50ca460ac25f5e93185702cc50271af2fe74d379ad920d978f909d3157f3f085fceb4110105e164dda02bf2bdcff46ec52d4dfdca4498f4113378c6356118ca655f93b98600f70189cb3f252296315ff535bd7bd5c8aba820e23d68dd56fcc1d9155700787b23ecb1445d5c8fdf90ca3f775a48aefbed80ea18020f2e96fc16024efbdf42ab99a35f3cc80afede5b82bc5f6b80f7beecec822519da2b85fc260cbb4aeab0f5a10703ff6fa2e3759c63e518b5b97885ec817a0fbdd1f1cbf090d8ff9aa3ce1ff842458d7e512e5ef3c8a37a3f813b9ba518ed1bc66c2cd069c2b571c9ab2e3221fa3687a3f17126ea01e86451d0e3281c1d9218e68f5bcd525bd030eb6fc5982d543a47540450699e9823b81cf4af0341b0f23ec43d8f0ce45ac0c9d9aaa9f9d86033466fcaa5f9a898a6e5105811061e8422397ab6a87150c5adf6d9658ac462b5ed2bf544c91a50a3a0696603fbf3d0fd658d70a4b9ef023d267f7266d900e0df675185f8c8ed4fdfac5b07c72fcb778465e58dd8d8d042deef6937df915a006541c2a8924310143aedcf303acc483642cf2702aa389676e4a65f24f6711e18cf4a02dec36f57710f925783e5504a5aa5faa8af5f58d6263481f54723786f17f934b64928a286168c56819bc99d4c89ca81cdfbf3a4b0a46753134162e5e0074ed74fda37d888cd1c1f29b5668474b2c57ab70ac7cb21d70b5a0ba996d9629ed5f36c78779dcf680ed9eee5c9b438a015059e3449c4039255db6e6b10fa8246546dbf6427813280a4c9e98a96cc0ef23873cecb94fa9bcf80215999a095f9aa7d431709b6347df12684013f2287129ed053824251d30d3b35b054da0229f1ed1272e5ba45b73b8e322473b70d3009da69c87124ab77f7f5afae507c18cd1130552491e84ba8cd4f07fc2d5702142a4e21a8ba98ee036bda799a7178c64bb349c00e0e4c354079e67c1a63db0acf2cc639b1876bac2a6c295a14f9680c5084371bfa48053f2ef99065abdc3de61f55e0020146b577bfaeac28cb5250ee7526ffe8f749c8eac2004350c6ce943921d2cc9963e119f5cdd4bec9d76a04766c257bb6c4ea69fe3d5795bc141fb5122cb5f408d5b13e6a439e6030fe7492a3e9bc7af5a273ff62a8c7dc45d00affa6bcaf9b3370242b9107fb0536268384b8d8edf938b017b04cbbe4adb7f4832a7cc8a2074c863996557396c9c1577f70f4bab466c927a796a2cb71a56efdcd4979157bb2ef5147133942ab865efbfe1e6107186a1da0383bda951080ac94beb88d1edb95528eaf4880bd0992ed0ed592d1d686e03b4d9e0f51f8540f8ae2f07574ca1cb0bf5d8ea2f61442a71cfb8ccaa40baffc3d8b477024996a3bc5a51cb087d7d808ad017820de0f71c88fcee3abdf401fcb31c4b9d90887d3e989e80b9d1d26ab69cf0009f3f18138e4e9bfebc505573a92169c32b4895d4ed441215b5f64b0b6db765f7439b2c4638c17b16b333d8134af38cf1ed9e0f06a1ab6b28a4e2ff06376fcb39e67a4134d2f3f59117de586b3ee72734a6c0419c507146febfa192d8bb373efcaef8b6e82fff7c39e29f3ef57780aa8feb13424db95a3b04d39353d6ac96c675bf16ab66dd770cd58ee440b5bc0109eb57ea46bd34050388684ea600940edec7bcd36666490a2063e5f5e86c948e86988558d0ebe2026fe3df829e4655743bd9fffe25f2389bfdfbd02af66b73f339507c45a21a274cb80b29a0aade619c4aeafe2f81c8f09da2611357da9082d3d3ee9b3d9ab4e89c4bd15f5b0098e3163ec5d97ec64624d740b50c1e8c0707b77cd4c4f347b67a50f4d8af684321d6443adf7dedee58698e94a8967aff8f7d2c5ce64a358bc64c937e3ff4142937146a07f7496998f9c82e6190378b356e04c7e468c8929a4669de5fdfd5a9fb8534d52639d3039d8c89ede8e7452663ea932885e49b91ce3044f040788b046b9d3605dbbd76904c2851c842852e112e1a8506be056be9a2292b3b78bbcff9ae3969f3044ca46869f611966e3cd3f6dd86931f105acb8792b042c853530ab27f08e05df220fedd913d88f87966f32b2de5b3e8eeb5432bb540492778d2936181b1996807ab83116f5b7f170c9af1391131803b9fcea7a7808ad3b9e98eeae54593e5abbdc777a70d34e3b88aa4ff7cc36f9b98f01fbaf903073ed207480c58bf5812fc8f6704253771284a09c182ef2342e5aff8b2e2c6849215c3e05fb113f87f194d44def42b2ca74f4881b9fce81625ea30b6a588d2e6d69266ae1b620af6ec0af5c783a8e1a6289405dd1b302b1da4a79e98518269d78ad09b039ddd9032d1a1f91fc880c8d806f2bf06f3ab6318b591c2f6c85c8696eed4bdf1e6682d18658a5140a480ad1d741c20cd90992864ed219027ab0ce504b96857942ddd66ce98bdd21bbe52826fc1afbe0235f349a8f7898aedde34402a4b97c3fd4cf94601da7c795dadccee9293b855fd06b6d4173eb3a3545f95cacea460839f75e89839a5405e025ba20e0eca94f31ccf83d251d9226c43421f4793f036529b69279ec219e3d771ef1de0ec3ca33cced87303c4334b4b4c0cada63f5fbee05532612dce84df309af7e1638f7530b725f4b78ba37b52ec3cdf1c8fdf14449a1ae015fc81fa3b29f690234f180aaed31cbb39ef11fda487c98b76ef97217888dd8c84734df4e9e17d163f70c1401964439918dd20", 0x1000}, {&(0x7f00000001c0)="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", 0xfe}, {&(0x7f00000002c0)="5fddc403d604f9c4f4ac105c39fd41ddd4952ab3de6d1b2afae41ffa855cd63d431218cb12c5cb51b033688aa712f4f261eade43878c309830cd573955375a984c6586344229aaef1c6a8612f25be00b377f2827a473b9e4e2f1511378a1f42da4ea046f3d3905c0b159768decd921dfff76b4e334de9bc1abf664522e115963fcdeccb82a36cffc9cd9395edc9ee10e0b4f52f6", 0x94}, {&(0x7f0000002540)="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", 0x1000}, {&(0x7f0000000380)="46b946b4f62f5a410f26c3b59fa3be0b6caaded25f88fcac772d69bdd9ee777b181d5692f2a974a8545cdc29887c81e7", 0x30}], 0x5, &(0x7f0000000500)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x30000}}, @timestamping={{0x14, 0x1, 0x25, 0x2a}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x78}, 0x814)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x81, '\x00', r2}, 0x94)

8.654636772s ago: executing program 1 (id=2008):
socket(0x2a, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)="3912c1d03d9f66", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000001c40)="0349", 0x2}], 0x1}}], 0x2, 0x8010)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="02"], 0x10)
r5 = openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2b, 'net'}, {0x6, 'freezer'}, {0x2d, 'cpu'}, {0x54f5358855edc691, 'devices'}, {0x2b, 'net'}, {0x2d, 'io'}, {0x2b, 'net_cls'}, {0x2d, 'cpuset'}]}, 0x36)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000001c80)=""/4096, 0x1000, 0x1, &(0x7f0000000280)=""/36, 0x24}, &(0x7f0000000300)=0x40)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[], 0x10)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001002f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001000088be"], 0xfdef)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x240008c0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

8.200929297s ago: executing program 1 (id=2012):
write(0xffffffffffffffff, &(0x7f0000000100), 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x4890}, 0x20000810)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x1, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r3)
sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}}, 0x20000060)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x40010003)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000340)=[{0x6, 0x4, 0x0, 0x20000000}]}, 0x10)
socket(0x2, 0x4, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r7, &(0x7f0000000e00)={0xa, 0x4e22, 0xde, @mcast1, 0x91}, 0x1c)

7.889884283s ago: executing program 1 (id=2014):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB="000000000000000000007d48d2ec000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = socket(0x1d, 0x2, 0x6)
setsockopt$RDS_CANCEL_SENT_TO(r2, 0x6a, 0x1, 0x0, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x7, 0x1, 0xc, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000080)=0x2, 0x4)
r4 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r4, @ANYBLOB="00000000ff01030000000000015d36deed810000000000000090cc3f44c703dd42da11247f466381310c12c0443267748bede959db4e74fdd408af0a3c8f73f329938c1f8c76f73e82247b29e193048eea0edf6fef8e12a5a9d24d8572eca9cfb28bef96aedb3342e6003921a5c7f8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r6 = socket(0x200000100000011, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r8=>0x0})
bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x7, 0x6, @multicast}, 0x14)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4)
sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e8508"], 0x34}], 0x1, 0x0, 0x0, 0x20000080}, 0x4000)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000102c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r3)
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x88, r10, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x30}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000103c0)=ANY=[@ANYRES16=r6, @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b609080085ffffff7b9af0ff00000000bf8600000000000407080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000001500000085ffffffbf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6.063776644s ago: executing program 3 (id=1197):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fb5bdf252a00000008000300", @ANYRES32=r4, @ANYBLOB="20002f800c0002000203aaaaaaaaaaaa10000380080001000000000004000380"], 0x3c}, 0x1, 0x0, 0x0, 0x40c4}, 0x40800)
syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001d00070c000000000000000007000000", @ANYRES64=r5, @ANYBLOB="0c000200"], 0x28}}, 0x48000)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x58, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5e}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000005)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r7)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r7)
sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="87002dbd7000000000001e0000000a0004007770616e300000000800010007"], 0x28}, 0x1, 0x0, 0x0, 0x4040025}, 0x4024044)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ea0c00", 0x18, 0x88, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@dstopts={0x1}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}}, 0x0)
r9 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c0200000015000500fc01ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc100800000400240200e2", 0x55}], 0x1}, 0x0)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r11, 0x107, 0xe, 0x0, 0x0)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r10, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c00080000000000000000000800010000007fff"], 0x90}}, 0x0)

2.141127171s ago: executing program 0 (id=2052):
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
read(r0, &(0x7f0000000180)=""/115, 0x73)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000014001901000000000000000028001100fa"], 0x28}}, 0x40081)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3)

1.856999156s ago: executing program 2 (id=2055):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0x200000}, 0x1f00)
recvmmsg(r0, &(0x7f0000008480)=[{{0x0, 0x0, &(0x7f0000006040)=[{&(0x7f0000000700)=""/172, 0xac}], 0x1}, 0x1}, {{0x0, 0x0, 0x0}, 0x167d12a2}], 0x2, 0x0, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="a2", 0x3c}], 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000360009000fff52004507000015300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000000036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b0113000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a8cb62d81814c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c550282778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b358f571cd15af64f69951d79e5b57ba3640d345fbe1c9bf7ca74846bf4c2a73a80cee7c15839e2326694f6f5cc5408cbfdef7c6868299b1c8cdaf52740cc2e66daafc00000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)

1.611065213s ago: executing program 2 (id=2057):
syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x3c, r2, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}, 0x5}, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, r2, 0x83eec8a82e83fa98, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x218545a0}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2c}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x50}, 0x4800)

1.493604268s ago: executing program 2 (id=2059):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0xc40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001c40)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2, 0xfff3}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

1.241051384s ago: executing program 0 (id=2061):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x2)
connect$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r0, 0x2)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
ppoll(&(0x7f0000000000)=[{r0, 0x400}], 0x1, 0x0, 0x0, 0x0)

1.223620271s ago: executing program 4 (id=2062):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
r1 = socket$inet(0x2, 0x4, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x4) (async)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async)
socket$inet(0x2, 0x4, 0x0) (async)
setsockopt$inet_opts(r1, 0x0, 0x0, 0x0, 0x0) (async)
setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) (async)

1.179428917s ago: executing program 2 (id=2063):
socket$can_bcm(0x1d, 0x2, 0x2) (async)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x3, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) (async)
sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x3, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10)
nanosleep(&(0x7f0000000100)={0x77359400}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x24000044)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="e03f0300eb03"], 0x33fe0}}, 0x0) (async)
sendmsg$AUDIT_USER(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="e03f0300eb03"], 0x33fe0}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10012, r5, 0xffffe000)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0)
sendmsg$AUDIT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) (async)
sendmsg$AUDIT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00010069703665727370616e000000100002800d001600420000000400"/44], 0x44}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00010069703665727370616e000000100002800d001600420000000400"/44], 0x44}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd2, &(0x7f0000000440)=""/210, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

1.124629835s ago: executing program 0 (id=2064):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="0500"], 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000000053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x14}}, 0x98}}, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

859.888622ms ago: executing program 0 (id=2065):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x8917, 0x0) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @local}, 0x2}}, 0x2e) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) (async)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x9800}}, 0x2e)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) (async)
r5 = socket$unix(0x1, 0x5, 0x0) (async)
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000001c0)='team_slave_0\x00', 0x10) (async)
vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async)
close(r6)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) (async)
bind$unix(r6, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) (async)
listen(r0, 0x5e) (async)
ppoll(&(0x7f0000000280)=[{r5, 0x601}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0)

832.878969ms ago: executing program 4 (id=2066):
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
close(r0)

640.9994ms ago: executing program 0 (id=2067):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000079122800000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r1}]}}}, @IFLA_MTU={0x8, 0x3}]}, 0x40}}, 0x0)

575.317448ms ago: executing program 4 (id=2068):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xffffffffffffffab, &(0x7f0000000000)={&(0x7f0000000400)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x6c}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020200000a0000000000000000000000030006000000000002000000000000000000000000000000020001000000000000000a0000000000030005000000001402"], 0x50}, 0x1, 0x7}, 0x4050)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000020202000900010073797a3000000000090003"], 0x48}, 0x1, 0x40030000000000}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x3c}}, 0x20008820)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x8e, 0xcca0}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100}, 0x94)

349.639062ms ago: executing program 0 (id=2069):
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x80800)
connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @local}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000080)="444b05500a67dbb05c88d9ea2e9a0c404cc13d2c2ccf0e7e0e7d9ca1011cf033b7b3d84b9288dcc80cfed3bec7f632be5fd554dc00ce5cf87ffcce4997da82458daecd3ba78a6d3d62aa7215e8b093a06516fa5159488bf982f9e7b79d062f190a2233d331facea311a1b1647dec434b1381910f045f668d4869f3802a50a97973bb2d65b1b11b766ff4adba4ac89a1c11717902320a281334e10b4c90f2a35e918523f10808f932ff9bea1eb6991de4c36adc102219dfed612d25c8904b0b3046ea29ff8aad15f6703ef587f8fceb167140af4a5889b296c277e07babbb42d9be2de7873dcf42", &(0x7f0000000180)=@udp}, 0x20)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000200))
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cgroup.clone_children\x00', 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
poll(&(0x7f0000000280)=[{r0, 0x288}, {r1, 0x200}, {r0, 0x3400}, {r0, 0x4}, {r2, 0x9000}, {r0, 0x4101}, {0xffffffffffffffff, 0x84a6}, {r0, 0x11001}], 0x8, 0x1a54)
socket$vsock_stream(0x28, 0x1, 0x0)
epoll_create(0xf000)
r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000300)={[{0x2d, 'io'}, {0x2b, 'io'}, {0x2b, 'net'}, {0x2d, 'net_prio'}]}, 0x17)
epoll_create(0xb2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x800}, 0x4040)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r5, &(0x7f00000003c0)={0x2, 0x4e23, @private=0xa010101}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$cgroup_subtree(r3, &(0x7f0000000400)={[{0x2d, 'cpu'}, {0x6, 'pids'}, {0x2b, 'net_prio'}, {0x2d, 'io'}, {0x0, 'blkio'}, {0x2b, 'freezer'}, {0x0, 'net_prio'}]}, 0x33)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8)
accept4$bt_l2cap(r6, &(0x7f0000000480)={0x1f, 0x0, @none}, &(0x7f00000004c0)=0xe, 0x100800)
setsockopt$inet_buf(r5, 0x0, 0x151e2aa9ca98a65d, &(0x7f0000000500)="90478c87d0e05518ccd9d63b3f5bacd89ded5cd1f475ecb690a888eecd5e2893b1bab22c3dfa9b9f99b9ca3d120f7396db6eabf276b797921ff4d57adc6692e07465d279c50c6a2adafd20141a93e17e06523ff3cd52f5d980781853004a3480eb15748686312559ed35c0f7086f85d3004021b4682f4dc9c85973fc74174407742d58b63014c494e028ef0480d3722c10a0386463c4c613e32dbbc2cc807d41a8eeebf080ed45848f509814c10779c4b7effc210b093dfd97880a7ca70153803e03f7b8589caeb37fad7694d5e52473590fc20f33c7fc8fee0f55fbc3a4221b88c580cd", 0xe4)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600))
socket$vsock_stream(0x28, 0x1, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000c80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x58, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x118, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0xf1, 0x6, "32e95bbfe3a7512cab30fe92d15ca2103f96585be360c0f461794b01c35894566052b0d607d9a820cdcf378872bb2eb34f8244b472eb0bb0c746627b0b77a7f0a9286049662366dca098d5a9dd6b279191bc6e1724e9630d8f76755d66b9bbf6c57ec19373fc2830b3b90bba54dd7d1a369fc7c9fb158a2dcf448908cb99c6892a279f385b1a48253d42540c30c8f786ee53be0cfae50bb02c8b1e0bdbf1b3bd523a5add7b005dc2651bb507ce9b016c250b79135d4b01398925e037951b27058364245e0ff7ec12157958c7d05ce5203a07b12fc95b5c2f6acbdd5b9f1bddbf71cac1232f29925599ad9dda83"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x50, 0xe, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x350, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3d}, @NFTA_SET_USERDATA={0xb9, 0xd, 0x1, 0x0, "82fdce52b4a568f149a651826c9805eac6ce55fd27a2709e6461e68c2e23d61efaf7d6c0ee4396e7c67d205dfb5bde8eb2ba7b02cfb15e94211d8ca0404ee2179b5a66238622d4ca5f89d7ca4a062c57b5c55382ba63ac3894a0b0d6d730ab4a1dedaec75a52532a0a0291402488aed1f9e1b922b7a35eaa1d409d671ed6823b723879d518e8cef0dddc6ee56ca0dd1c2938d58edc659fef48cd2d9ae77250933fbaad45e25205d0488671a47e839983a4322dd2f9"}, @NFTA_SET_EXPRESSIONS={0xa4, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x4c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_DESC={0x1bc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0x114, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x70f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x280000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4a}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xde9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}]}]}, @NFTA_SET_DESC_CONCAT={0x9c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x223}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe4d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}]}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x594}, 0x1, 0x0, 0x0, 0x4010}, 0x10)
ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x3ff)
connect$vsock_stream(r6, &(0x7f0000000cc0)={0x28, 0x0, 0x2711}, 0x10)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r6, 0x110, 0x3)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e80)={r6, 0x20, &(0x7f0000000e40)={&(0x7f0000000d00)=""/16, 0x10, <r8=>0x0, &(0x7f0000000d40)=""/254, 0xfe}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000ec0)=r8, 0x4)

269.032968ms ago: executing program 4 (id=2070):
r0 = socket$inet6(0xa, 0x3, 0x7)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x24}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

213.536731ms ago: executing program 4 (id=2071):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a2f000006"], 0x1c}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0xe7}, 0x0, 0x6e6bb0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000090)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

202.168631ms ago: executing program 2 (id=2072):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) (async)
r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10, 0x800)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000000c0)=0x8000000000000000, 0x8) (async)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0xce22, 0x0, @dev, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000350000009c0000000000000025000000fffffff19500000dd0d800004bea11fade2d6950bdaebf39f5d5e2c5dec1e666c3a573"], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x22377ac8c6ae6831)

68.692134ms ago: executing program 4 (id=2073):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', <r2=>0x0, 0xf20ce96eb4225f2b, 0x7, 0x8, 0x1000, 0x5, @local, @remote, 0x7807, 0x7, 0x5, 0xfffffff7}})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@bridge_delneigh={0x44, 0x1d, 0xf2c, 0x70bd2b, 0x25dfdbff, {0x1c, 0x0, 0x0, r2, 0x4, 0x20, 0x6}, [@NDA_DST_IPV4={0x8, 0x1, @loopback}, @NDA_PROTOCOL={0x5, 0xc, 0xeb}, @NDA_LINK_NETNSID={0x8, 0xa, 0x7}, @NDA_IFINDEX={0x8, 0x8, r3}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e21, 0xa, @loopback, 0x40a}}, 0x0, 0x0, 0x7, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x24, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x24}}, 0x0)
sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x40, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xe1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmmsg$inet(r6, &(0x7f00000009c0)=[{{&(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000680)=[{&(0x7f00000005c0)="4164080e73c6444b", 0x8}, {&(0x7f0000000600)="d6a07e67e037df91e5aa2308a14ccfbecb4e48d841057b34b7309942b7f5f2a1d36f5bfb937cfce2665db4bac05e1b8c4bc9f5f2ca50fd9356a44c2bff6afac995e8ec7abbc9dc3b961b01d5d3cc3cf8eac6b9a90d73ba06e31ffad2072f9cd77a1166c42f1dbd3c17824a34cdbfa0ac679db1b3dbafb2b3b1411ba9", 0x7c}], 0x2, &(0x7f00000007c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa}}, @ip_retopts={{0x50, 0x0, 0x7, {[@generic={0x82, 0xb, "85db393795dc472466"}, @lsrr={0x83, 0x17, 0xf7, [@local, @empty, @remote, @multicast2, @broadcast]}, @rr={0x7, 0x1b, 0xb6, [@empty, @rand_addr=0x64010102, @broadcast, @multicast2, @broadcast, @local]}]}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@noop, @end, @timestamp_prespec={0x44, 0x14, 0xd5, 0x3, 0x5, [{@local, 0x40}, {@multicast2, 0x6}]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x42fa}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6d3e}}], 0x118}}, {{&(0x7f00000006c0)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000700)="12e07fc076a3c26a42944985f1fad97c9df71d6d0dac345453718ad3c53f414881c08716939b9494dead84a19035edda06e3db36728f0426930f61946ac5804118f138c02ff16fdbe9", 0x49}, {&(0x7f0000000900)="3331fad04467d88a3eb9fde51428a634c45bfb366df4c9123fcb809780056d8b6ffe1f916049cfac1ebb42164052", 0x2e}, {&(0x7f0000000940)="8bf74e6f5a7dbabdfb5dd9476383a730abb012e83136340d52d259877329210c1cebc1e695ad1e71", 0x28}], 0x3}}], 0x2, 0x4040)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x81, 0xc}}}}]}, 0x44}}, 0x44080)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001fc0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r8, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000040)=@generic={0x3, 0x9, 0x7})
sendto$inet6(r0, &(0x7f0000000000)="009610382b293f37f81da485db7fd704987ec4003f7dfa58", 0x18, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1004, @empty}, 0x1c)

0s ago: executing program 2 (id=2074):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={0xffffffffffffffff}}, 0xa6c7d0961745beb5)

kernel console output (not intermixed with test programs):

 invalid length.
[  175.874288][T10091] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1251'.
[  175.898225][T10093] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.959366][ T9931] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.969753][ T9931] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.983326][ T9931] bridge_slave_1: entered allmulticast mode
[  175.992846][T10102] Cannot find del_set index 17 as target
[  175.994315][ T9931] bridge_slave_1: entered promiscuous mode
[  176.056182][T10091] team0: Port device geneve0 added
[  176.212265][ T9931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  176.222045][ T6624] IPVS: stop unused estimator thread 0...
[  176.232731][T10112] netlink: 'syz.4.1257': attribute type 4 has an invalid length.
[  176.270521][ T9931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  176.411140][ T9931] team0: Port device team_slave_0 added
[  176.443522][ T9931] team0: Port device team_slave_1 added
[  176.525641][T10127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1262'.
[  176.543793][ T9931] batman_adv: batadv0: Adding interface: batadv_slave_0
[  176.557449][ T9931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.586214][ T9931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.607347][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1264'.
[  176.617713][ T9931] batman_adv: batadv0: Adding interface: batadv_slave_1
[  176.624750][ T9931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.687779][ T9931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  176.860864][T10147] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  176.903346][ T9931] hsr_slave_0: entered promiscuous mode
[  176.928908][ T9931] hsr_slave_1: entered promiscuous mode
[  176.935379][ T9931] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  176.945011][ T9931] Cannot create hsr debugfs directory
[  176.951603][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1262'.
[  176.974304][T10153] netlink: 'syz.1.1267': attribute type 2 has an invalid length.
[  176.983522][T10127] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1262'.
[  176.993521][T10153] netlink: 'syz.1.1267': attribute type 8 has an invalid length.
[  177.234354][T10165] netlink: zone id is out of range
[  177.243658][T10165] netlink: zone id is out of range
[  177.287161][T10165] netlink: zone id is out of range
[  177.292351][T10165] netlink: zone id is out of range
[  177.298318][T10165] netlink: zone id is out of range
[  177.330023][T10165] netlink: zone id is out of range
[  177.335208][T10165] netlink: zone id is out of range
[  177.358302][T10165] netlink: zone id is out of range
[  177.364010][T10165] netlink: zone id is out of range
[  177.366793][ T5867] Bluetooth: hci0: command tx timeout
[  177.388134][T10165] netlink: zone id is out of range
[  177.578473][T10174] xt_CT: You must specify a L4 protocol and not use inversions on it
[  177.650075][T10188] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.734987][T10188] bridge_slave_1 (unregistering): left allmulticast mode
[  177.747765][T10188] bridge_slave_1 (unregistering): left promiscuous mode
[  177.765148][T10188] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.186534][T10208] gretap1: entered promiscuous mode
[  178.270219][ T9931] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  178.291895][ T9931] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  178.334730][ T9931] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  178.356233][T10222] netlink: 'syz.1.1287': attribute type 1 has an invalid length.
[  178.373244][T10223] __nla_validate_parse: 5 callbacks suppressed
[  178.373261][T10223] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1286'.
[  178.400368][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'.
[  178.410126][T10227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1286'.
[  178.427171][T10227] netlink: 'syz.2.1286': attribute type 5 has an invalid length.
[  178.467181][ T9931] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  178.539878][T10222] 8021q: adding VLAN 0 to HW filter on device bond1
[  178.595937][T10233] IPVS: Error connecting to the multicast addr
[  178.831738][ T9931] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.840788][T10257] bridge0: the hash_elasticity option has been deprecated and is always 16
[  178.890478][ T9931] 8021q: adding VLAN 0 to HW filter on device team0
[  178.936123][ T6624] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.943375][ T6624] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.993882][ T6624] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.001098][ T6624] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.094862][T10262] lo speed is unknown, defaulting to 1000
[  179.142776][T10273] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1298'.
[  179.265550][ T9931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  179.366541][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  179.449883][ T5867] Bluetooth: hci0: command 0x0419 tx timeout
[  179.480186][T10286] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1300'.
[  179.761404][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1303'.
[  179.835203][T10302] netlink: 'syz.2.1304': attribute type 29 has an invalid length.
[  179.844277][T10302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1304'.
[  179.860879][T10302] netlink: 'syz.2.1304': attribute type 29 has an invalid length.
[  179.887402][T10302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1304'.
[  179.994930][ T9931] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.056309][T10306] netlink: 'syz.0.1305': attribute type 11 has an invalid length.
[  180.072045][T10306] netlink: 'syz.0.1305': attribute type 11 has an invalid length.
[  180.082608][T10306] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1305'.
[  180.121214][ T9931] veth0_vlan: entered promiscuous mode
[  180.135207][ T9931] veth1_vlan: entered promiscuous mode
[  180.202980][T10308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1306'.
[  180.210248][ T9931] veth0_macvtap: entered promiscuous mode
[  180.225287][ T9931] veth1_macvtap: entered promiscuous mode
[  180.281446][ T9931] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.325682][ T9931] batman_adv: batadv0: Interface activated: batadv_slave_1
[  180.357756][ T9931] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.375552][ T9931] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.398880][ T9931] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.421258][ T9931] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.651559][T10332] xt_hashlimit: size too large, truncated to 1048576
[  180.758519][ T7992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.787016][ T7992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.867420][ T7985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.891112][ T7985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.178972][T10359] netlink: 'syz.1.1318': attribute type 1 has an invalid length.
[  181.702142][ T7992] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.952564][T10390] lo speed is unknown, defaulting to 1000
[  181.963972][T10393] lo: left promiscuous mode
[  182.004499][T10393] gretap0: left promiscuous mode
[  182.035378][T10393] ip6tnl0: left promiscuous mode
[  182.064700][T10393] ip6tnl0: left allmulticast mode
[  182.101503][    T9] lo speed is unknown, defaulting to 1000
[  182.113823][    T9] syz2: Port: 1 Link ACTIVE
[  182.143579][ T7992] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.239632][T10399] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  182.269147][  T922] lo speed is unknown, defaulting to 1000
[  182.275759][T10399] xt_ecn: cannot match TCP bits for non-tcp packets
[  182.589082][ T7992] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.784293][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  182.796212][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  182.822212][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  182.849149][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  182.863415][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  182.874422][T10427] net_ratelimit: 16 callbacks suppressed
[  182.874438][T10427] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.905411][ T7992] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.084971][T10424] lo speed is unknown, defaulting to 1000
[  183.409494][ T7992] bridge_slave_1: left allmulticast mode
[  183.419214][ T7992] bridge_slave_1: left promiscuous mode
[  183.426559][ T7992] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.467344][ T7992] bridge_slave_0: left allmulticast mode
[  183.481988][ T7992] bridge_slave_0: left promiscuous mode
[  183.500242][ T7992] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.041626][ T7992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  184.052753][ T7992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.064381][ T7992] bond0 (unregistering): Released all slaves
[  184.453726][T10477] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  184.679820][T10486] netlink: 'syz.2.1352': attribute type 4 has an invalid length.
[  184.738847][T10488] netlink: 'syz.2.1352': attribute type 4 has an invalid length.
[  184.912340][ T7992] hsr_slave_0: left promiscuous mode
[  184.927094][ T7992] hsr_slave_1: left promiscuous mode
[  184.932991][ T7992] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.946766][ T7992] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.955247][ T7992] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.963103][ T7992] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.969878][ T5867] Bluetooth: hci0: command tx timeout
[  184.991093][ T7992] veth1_macvtap: left promiscuous mode
[  184.996851][ T7992] veth0_macvtap: left promiscuous mode
[  185.002474][ T7992] veth1_vlan: left promiscuous mode
[  185.009466][ T7992] veth0_vlan: left promiscuous mode
[  185.393944][ T7992] team0 (unregistering): Port device team_slave_1 removed
[  185.429493][ T7992] team0 (unregistering): Port device team_slave_0 removed
[  185.766130][T10424] chnl_net:caif_netlink_parms(): no params data found
[  185.897640][T10424] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.904918][T10424] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.915921][T10424] bridge_slave_0: entered allmulticast mode
[  185.924272][T10424] bridge_slave_0: entered promiscuous mode
[  185.933459][T10424] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.941575][T10424] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.949657][T10424] bridge_slave_1: entered allmulticast mode
[  185.957861][T10424] bridge_slave_1: entered promiscuous mode
[  185.996001][T10424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.021538][T10424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.061142][T10424] team0: Port device team_slave_0 added
[  186.074266][T10424] team0: Port device team_slave_1 added
[  186.105104][T10424] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.112525][T10424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.138638][T10424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.151333][T10424] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.158993][T10424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.185218][T10424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.237167][T10424] hsr_slave_0: entered promiscuous mode
[  186.243482][T10424] hsr_slave_1: entered promiscuous mode
[  186.250142][T10424] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  186.258904][T10424] Cannot create hsr debugfs directory
[  186.657408][T10424] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  186.668456][T10424] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  186.678789][T10424] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  186.689935][T10424] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  186.716212][T10424] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.723392][T10424] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.730898][T10424] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.738094][T10424] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.798697][T10424] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.810991][ T7994] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.819731][ T7994] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.850993][T10424] 8021q: adding VLAN 0 to HW filter on device team0
[  186.863532][ T7994] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.870692][ T7994] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.886823][ T6624] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.893980][ T6624] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.046678][ T5867] Bluetooth: hci0: command tx timeout
[  187.093930][T10424] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.135078][T10424] veth0_vlan: entered promiscuous mode
[  187.148863][T10424] veth1_vlan: entered promiscuous mode
[  187.178689][T10424] veth0_macvtap: entered promiscuous mode
[  187.189109][T10424] veth1_macvtap: entered promiscuous mode
[  187.210268][T10424] batman_adv: batadv0: Interface activated: batadv_slave_0
[  187.225282][T10424] batman_adv: batadv0: Interface activated: batadv_slave_1
[  187.240674][T10424] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.250699][T10424] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.260022][T10424] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.269589][T10424] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  187.334721][ T7994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.342903][ T7994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.377222][ T7994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  187.385852][ T7994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.078153][ T7992] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.411737][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  189.420569][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  189.428875][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  189.439082][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  189.448142][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  189.482489][T10513] lo speed is unknown, defaulting to 1000
[  189.758096][T10513] chnl_net:caif_netlink_parms(): no params data found
[  189.844051][T10513] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.851648][T10513] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.859373][T10513] bridge_slave_0: entered allmulticast mode
[  189.867672][T10513] bridge_slave_0: entered promiscuous mode
[  189.875577][T10513] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.883302][T10513] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.891034][T10513] bridge_slave_1: entered allmulticast mode
[  189.899200][T10513] bridge_slave_1: entered promiscuous mode
[  189.937830][T10513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  189.951129][T10513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  189.988925][T10513] team0: Port device team_slave_0 added
[  189.997191][T10513] team0: Port device team_slave_1 added
[  190.029889][T10513] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.037336][T10513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.064092][T10513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.077550][T10513] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.084623][T10513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.111122][T10513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.168039][T10513] hsr_slave_0: entered promiscuous mode
[  190.174389][T10513] hsr_slave_1: entered promiscuous mode
[  190.180979][T10513] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  190.188988][T10513] Cannot create hsr debugfs directory
[  190.653494][ T7992] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.783311][ T7992] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.850743][ T7992] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.934302][ T7992] bridge_slave_1: left allmulticast mode
[  190.940348][ T7992] bridge_slave_1: left promiscuous mode
[  190.946071][ T7992] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.956071][ T7992] bridge_slave_0: left allmulticast mode
[  190.962409][ T7992] bridge_slave_0: left promiscuous mode
[  190.969907][ T7992] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.218467][ T7992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  191.230790][ T7992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  191.241487][ T7992] bond0 (unregistering): Released all slaves
[  191.528379][ T5862] Bluetooth: hci0: command tx timeout
[  191.666140][ T7992] hsr_slave_0: left promiscuous mode
[  191.679094][ T7992] hsr_slave_1: left promiscuous mode
[  191.684964][ T7992] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.692563][ T7992] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.703822][ T7992] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.711952][ T7992] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.732260][ T7992] veth1_macvtap: left promiscuous mode
[  191.738281][ T7992] veth0_macvtap: left promiscuous mode
[  191.743943][ T7992] veth1_vlan: left promiscuous mode
[  191.749674][ T7992] veth0_vlan: left promiscuous mode
[  192.110288][ T7992] team0 (unregistering): Port device team_slave_1 removed
[  192.145487][ T7992] team0 (unregistering): Port device team_slave_0 removed
[  192.469542][T10513] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  192.481441][T10513] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  192.491362][T10513] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  192.501994][T10513] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  192.607934][T10513] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.639886][T10513] 8021q: adding VLAN 0 to HW filter on device team0
[  192.654231][ T7985] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.661372][ T7985] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.675505][ T6624] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.682661][ T6624] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.889304][T10513] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.931437][T10513] veth0_vlan: entered promiscuous mode
[  192.943432][T10513] veth1_vlan: entered promiscuous mode
[  192.972603][T10513] veth0_macvtap: entered promiscuous mode
[  192.982574][T10513] veth1_macvtap: entered promiscuous mode
[  193.002224][T10513] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.017073][T10513] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.030801][T10513] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.039920][T10513] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.049226][T10513] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.060075][T10513] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.121257][ T7971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.131712][ T7971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.158015][ T7971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.170672][ T7971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.090960][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  194.855564][ T7971] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.630938][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  195.640335][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  195.648698][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  195.658635][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  195.667160][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  195.701002][T10532] lo speed is unknown, defaulting to 1000
[  195.987294][T10532] chnl_net:caif_netlink_parms(): no params data found
[  196.071007][T10532] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.079195][T10532] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.087723][T10532] bridge_slave_0: entered allmulticast mode
[  196.095217][T10532] bridge_slave_0: entered promiscuous mode
[  196.104031][T10532] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.111590][T10532] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.119442][T10532] bridge_slave_1: entered allmulticast mode
[  196.127363][T10532] bridge_slave_1: entered promiscuous mode
[  196.164600][T10532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.177862][T10532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.217403][T10532] team0: Port device team_slave_0 added
[  196.226203][T10532] team0: Port device team_slave_1 added
[  196.263380][T10532] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.271273][T10532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.297888][T10532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.310969][T10532] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.318456][T10532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.345186][T10532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  196.395463][T10532] hsr_slave_0: entered promiscuous mode
[  196.402617][T10532] hsr_slave_1: entered promiscuous mode
[  196.410021][T10532] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  196.418852][T10532] Cannot create hsr debugfs directory
[  196.434866][ T7971] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.515268][ T7971] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.589445][ T7971] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.670818][ T7971] bridge_slave_1: left allmulticast mode
[  196.676794][ T7971] bridge_slave_1: left promiscuous mode
[  196.682498][ T7971] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.693194][ T7971] bridge_slave_0: left allmulticast mode
[  196.701164][ T7971] bridge_slave_0: left promiscuous mode
[  196.708635][ T7971] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.985974][ T7971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  197.000441][ T7971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  197.010742][ T7971] bond0 (unregistering): Released all slaves
[  197.362688][ T7971] hsr_slave_0: left promiscuous mode
[  197.370451][ T7971] hsr_slave_1: left promiscuous mode
[  197.376269][ T7971] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.400113][ T7971] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.413944][ T7971] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.421922][ T7971] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.441299][ T7971] veth1_macvtap: left promiscuous mode
[  197.447734][ T7971] veth0_macvtap: left promiscuous mode
[  197.453359][ T7971] veth1_vlan: left promiscuous mode
[  197.459123][ T7971] veth0_vlan: left promiscuous mode
[  197.686575][ T5867] Bluetooth: hci0: command tx timeout
[  197.816154][ T7971] team0 (unregistering): Port device team_slave_1 removed
[  197.851818][ T7971] team0 (unregistering): Port device team_slave_0 removed
[  198.183784][T10532] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  198.195474][T10532] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  198.208227][T10532] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  198.220298][T10532] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  198.318679][T10532] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.352154][T10532] 8021q: adding VLAN 0 to HW filter on device team0
[  198.364089][ T6624] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.371266][ T6624] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.399742][ T6624] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.406939][ T6624] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.599310][T10532] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.641817][T10532] veth0_vlan: entered promiscuous mode
[  198.654105][T10532] veth1_vlan: entered promiscuous mode
[  198.681968][T10532] veth0_macvtap: entered promiscuous mode
[  198.692023][T10532] veth1_macvtap: entered promiscuous mode
[  198.711135][T10532] batman_adv: batadv0: Interface activated: batadv_slave_0
[  198.725128][T10532] batman_adv: batadv0: Interface activated: batadv_slave_1
[  198.736019][T10532] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.745053][T10532] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.754634][T10532] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.763788][T10532] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.835925][ T7971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.844656][ T7971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.869627][ T7994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.878790][ T7994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.601658][ T7993] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.434788][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  201.443115][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  201.453357][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  201.461836][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  201.471232][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  201.505723][T10551] lo speed is unknown, defaulting to 1000
[  201.791264][T10551] chnl_net:caif_netlink_parms(): no params data found
[  201.874913][T10551] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.882837][T10551] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.890460][T10551] bridge_slave_0: entered allmulticast mode
[  201.898434][T10551] bridge_slave_0: entered promiscuous mode
[  201.907377][T10551] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.914614][T10551] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.922427][T10551] bridge_slave_1: entered allmulticast mode
[  201.935142][T10551] bridge_slave_1: entered promiscuous mode
[  201.969350][T10551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.983068][T10551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.023798][T10551] team0: Port device team_slave_0 added
[  202.032965][T10551] team0: Port device team_slave_1 added
[  202.064847][T10551] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.072414][T10551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.099624][T10551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.112627][T10551] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.120494][T10551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.147329][T10551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.197330][T10551] hsr_slave_0: entered promiscuous mode
[  202.204353][T10551] hsr_slave_1: entered promiscuous mode
[  202.210829][T10551] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  202.220765][T10551] Cannot create hsr debugfs directory
[  202.237171][ T7993] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.302083][ T7993] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.355112][ T7993] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.465786][ T7993] bridge_slave_1: left allmulticast mode
[  202.471533][ T7993] bridge_slave_1: left promiscuous mode
[  202.477608][ T7993] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.489603][ T7993] bridge_slave_0: left allmulticast mode
[  202.495643][ T7993] bridge_slave_0: left promiscuous mode
[  202.503589][ T7993] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.767955][ T7993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  202.779360][ T7993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  202.790717][ T7993] bond0 (unregistering): Released all slaves
[  203.144566][ T7993] hsr_slave_0: left promiscuous mode
[  203.151263][ T7993] hsr_slave_1: left promiscuous mode
[  203.160102][ T7993] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.168314][ T7993] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.177467][ T7993] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.184886][ T7993] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.210455][ T7993] veth1_macvtap: left promiscuous mode
[  203.216002][ T7993] veth0_macvtap: left promiscuous mode
[  203.222257][ T7993] veth1_vlan: left promiscuous mode
[  203.228103][ T7993] veth0_vlan: left promiscuous mode
[  203.533103][ T5862] Bluetooth: hci0: command tx timeout
[  203.596145][ T7993] team0 (unregistering): Port device team_slave_1 removed
[  203.634687][ T7993] team0 (unregistering): Port device team_slave_0 removed
[  203.980451][T10551] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  203.993385][T10551] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  204.012499][T10551] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  204.023257][T10551] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  204.138293][T10551] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.161432][T10551] 8021q: adding VLAN 0 to HW filter on device team0
[  204.175471][ T7971] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.182645][ T7971] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.195883][ T7994] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.203015][ T7994] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.407780][T10551] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.453628][T10551] veth0_vlan: entered promiscuous mode
[  204.465621][T10551] veth1_vlan: entered promiscuous mode
[  204.492490][T10551] veth0_macvtap: entered promiscuous mode
[  204.502364][T10551] veth1_macvtap: entered promiscuous mode
[  204.522694][T10551] batman_adv: batadv0: Interface activated: batadv_slave_0
[  204.538160][T10551] batman_adv: batadv0: Interface activated: batadv_slave_1
[  204.552134][T10551] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.561306][T10551] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.571658][T10551] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.580886][T10551] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  204.644426][ T7971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.662007][ T7971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.685412][ T7992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.698764][ T7992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.130492][T10578] __nla_validate_parse: 17 callbacks suppressed
[  206.130511][T10578] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1359'.
[  206.306252][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1362'.
[  206.373162][T10596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1364'.
[  206.779046][ T7993] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.831978][T10620] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1371'.
[  207.652476][T10625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  207.679569][T10631] xt_hashlimit: Unknown mode mask 115, kernel too old?
[  207.701058][T10625] netlink: 'syz.1.1373': attribute type 10 has an invalid length.
[  207.757996][T10625] mac80211_hwsim hwsim6 wlan1: left promiscuous mode
[  207.850618][T10631] netlink: 'syz.4.1375': attribute type 10 has an invalid length.
[  207.886482][T10631] bridge0: port 1(dummy0) entered disabled state
[  207.933200][T10631] bridge0: port 1(dummy0) entered blocking state
[  207.939882][T10631] bridge0: port 1(dummy0) entered forwarding state
[  207.985878][T10648] netlink: 'syz.2.1376': attribute type 11 has an invalid length.
[  207.997815][T10648] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1376'.
[  208.023312][T10631] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  208.045391][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1377'.
[  208.163639][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  208.176839][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  208.184661][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  208.192970][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  208.204463][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  208.252490][T10654] lo speed is unknown, defaulting to 1000
[  208.270554][T10659] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  208.498536][ T7993] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.661049][ T7993] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.865298][T10674] bridge0: port 1(dummy0) entered disabled state
[  209.673194][T10674] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.699020][T10674] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.717717][T10674] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.726291][T10674] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  210.082233][T10684] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1385'.
[  210.247835][ T5868] Bluetooth: hci0: command tx timeout
[  210.974106][    T9] lo speed is unknown, defaulting to 1000
[  210.981061][    T9] syz2: Port: 1 Link DOWN
[  211.096800][T10684] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  211.105894][T10684] bond0 (unregistering): Released all slaves
[  211.123945][T10687] sit0: entered promiscuous mode
[  211.158747][ T7993] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.232354][    T9] lo speed is unknown, defaulting to 1000
[  211.364020][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1390'.
[  211.444880][T10709] lo: entered allmulticast mode
[  211.528959][ T5868] Bluetooth: hci3: command 0x0406 tx timeout
[  211.535527][ T5852] Bluetooth: hci2: command 0x0406 tx timeout
[  211.535958][ T5857] Bluetooth: hci1: command 0x0406 tx timeout
[  211.553618][T10654] chnl_net:caif_netlink_parms(): no params data found
[  211.782095][T10734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1398'.
[  211.835436][ T7993] bridge_slave_1: left allmulticast mode
[  211.851067][ T7993] bridge_slave_1: left promiscuous mode
[  211.870624][ T7993] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.883721][ T7993] bridge_slave_0: left allmulticast mode
[  211.897196][ T7993] bridge_slave_0: left promiscuous mode
[  211.904893][ T7993] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.914526][T10739] delete_channel: no stack
[  212.107056][T10753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1403'.
[  212.327248][   T51] Bluetooth: hci0: command tx timeout
[  212.449032][ T7993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  212.460965][ T7993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  212.471509][ T7993] bond0 (unregistering): Released all slaves
[  212.500190][T10740] bridge3: entered promiscuous mode
[  212.505484][T10740] bridge3: entered allmulticast mode
[  212.687288][T10767] netlink: 'syz.4.1406': attribute type 21 has an invalid length.
[  212.710483][T10770] Bluetooth: MGMT ver 1.23
[  212.721642][T10654] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.738108][T10654] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.749569][T10654] bridge_slave_0: entered allmulticast mode
[  212.758694][T10654] bridge_slave_0: entered promiscuous mode
[  212.856122][T10767] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1406'.
[  212.873214][T10779] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1409'.
[  212.928153][T10654] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.935361][T10654] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.957163][T10654] bridge_slave_1: entered allmulticast mode
[  212.965101][T10654] bridge_slave_1: entered promiscuous mode
[  213.094446][T10788] openvswitch: netlink: Duplicate or invalid key (type 0).
[  213.111457][T10788] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  213.185094][T10654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  213.223437][T10654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  213.604967][T10654] team0: Port device team_slave_0 added
[  213.635265][T10808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1417'.
[  213.645129][T10808] netlink: 'syz.0.1417': attribute type 8 has an invalid length.
[  213.692513][T10654] team0: Port device team_slave_1 added
[  213.730221][T10811] No such timeout policy "syz0"
[  213.735400][ T7993] hsr_slave_0: left promiscuous mode
[  213.774936][ T7993] hsr_slave_1: left promiscuous mode
[  213.782204][ T7993] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.789848][ T7993] batman_adv: batadv0: Removing interface: batadv_slave_0
[  213.800725][ T7993] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.816057][ T7993] batman_adv: batadv0: Removing interface: batadv_slave_1
[  213.823433][T10816] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1420'.
[  213.868720][ T7993] veth1_macvtap: left promiscuous mode
[  213.875783][ T7993] veth0_macvtap: left promiscuous mode
[  213.883125][ T7993] veth1_vlan: left promiscuous mode
[  213.889164][ T7993] veth0_vlan: left promiscuous mode
[  214.047803][T10829] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1422'.
[  214.370859][ T7993] team0 (unregistering): Port device team_slave_1 removed
[  214.404565][ T7993] team0 (unregistering): Port device team_slave_0 removed
[  214.414724][   T51] Bluetooth: hci0: command tx timeout
[  214.783237][T10834] pimreg: left allmulticast mode
[  214.849370][T10654] batman_adv: batadv0: Adding interface: batadv_slave_0
[  214.870089][T10654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.903878][T10839] netlink: 'syz.1.1425': attribute type 1 has an invalid length.
[  214.912975][T10654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.919623][T10839] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1425'.
[  214.933437][T10654] batman_adv: batadv0: Adding interface: batadv_slave_1
[  214.942000][T10654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.974369][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1425'.
[  214.984809][T10654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  214.997044][T10843] netlink: 'syz.0.1426': attribute type 1 has an invalid length.
[  215.005458][T10837] netlink: 'syz.4.1424': attribute type 29 has an invalid length.
[  215.032592][T10842] netlink: 'syz.4.1424': attribute type 29 has an invalid length.
[  215.162615][T10851] netlink: 'syz.2.1427': attribute type 1 has an invalid length.
[  215.209465][T10654] hsr_slave_0: entered promiscuous mode
[  215.228743][T10654] hsr_slave_1: entered promiscuous mode
[  215.267218][T10654] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  215.275189][T10654] Cannot create hsr debugfs directory
[  215.632391][T10875] netlink: 'syz.0.1433': attribute type 1 has an invalid length.
[  215.673736][T10868] netlink: 'syz.1.1431': attribute type 21 has an invalid length.
[  215.685956][T10875] tipc: Enabled bearer <eth:team0>, priority 0
[  215.711573][T10872] netlink: 'syz.1.1431': attribute type 21 has an invalid length.
[  215.717427][T10868] netlink: 'syz.1.1431': attribute type 4 has an invalid length.
[  215.934612][T10880] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  216.493933][   T51] Bluetooth: hci0: command tx timeout
[  216.625965][T10924] __nla_validate_parse: 5 callbacks suppressed
[  216.625986][T10924] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1447'.
[  216.885748][T10654] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  216.924679][T10654] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  216.981040][T10654] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  217.011728][T10654] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  217.304217][T10654] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.364429][T10654] 8021q: adding VLAN 0 to HW filter on device team0
[  217.462152][ T7985] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.469394][ T7985] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.502100][ T7985] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.509317][ T7985] bridge0: port 2(bridge_slave_1) entered forwarding state
[  217.709889][T10987] hsr0: entered promiscuous mode
[  217.714925][T10987] hsr0: entered allmulticast mode
[  217.747167][T10987] hsr_slave_0: entered allmulticast mode
[  217.752878][T10987] hsr_slave_1: entered allmulticast mode
[  217.912086][T10993] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  218.085050][T11005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1468'.
[  218.090837][T10654] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.246275][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1471'.
[  218.293711][T11015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1471'.
[  218.325010][T11008] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1468'.
[  218.339444][T11001] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1468'.
[  218.449718][T10654] veth0_vlan: entered promiscuous mode
[  218.468789][T10654] veth1_vlan: entered promiscuous mode
[  218.530488][T10654] veth0_macvtap: entered promiscuous mode
[  218.548157][T10654] veth1_macvtap: entered promiscuous mode
[  218.580201][T10654] batman_adv: batadv0: Interface activated: batadv_slave_0
[  218.594806][T10654] batman_adv: batadv0: Interface activated: batadv_slave_1
[  218.619513][T10654] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.642062][T10654] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.651750][T10654] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.662092][T10654] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.775356][T11029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1476'.
[  218.786060][ T6624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.794830][ T6624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.894511][T11031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1477'.
[  218.901672][ T7991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.909496][T11031] openvswitch: netlink: VXLAN extension 173 out of range max 1
[  218.913754][ T7991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.327659][T11043] x_tables: duplicate underflow at hook 1
[  219.342766][T11045] validate_nla: 4 callbacks suppressed
[  219.342785][T11045] netlink: 'syz.1.1484': attribute type 1 has an invalid length.
[  219.362752][T11045] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1484'.
[  219.577908][T11057] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1487'.
[  219.932774][ T7991] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.317315][ T7991] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.620708][ T7991] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.770043][ T7991] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.881864][ T7991] bridge_slave_1: left allmulticast mode
[  220.888209][ T7991] bridge_slave_1: left promiscuous mode
[  220.894454][ T7991] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.903698][ T7991] bridge_slave_0: left allmulticast mode
[  220.909784][ T7991] bridge_slave_0: left promiscuous mode
[  220.915520][ T7991] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.073648][T11084] netlink: 'syz.0.1494': attribute type 10 has an invalid length.
[  221.128964][T11087] openvswitch: netlink: Port 10289156 exceeds max allowable 65535
[  221.309825][T11093] netlink: 'syz.1.1498': attribute type 1 has an invalid length.
[  221.479718][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  221.489130][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  221.497258][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  221.505746][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  221.513822][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  221.682987][ T7991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  221.698335][ T7991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  221.709135][ T7991] bond0 (unregistering): Released all slaves
[  221.739112][T11086] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  221.759068][T11086] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  221.781292][T11086] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  222.047583][T11093] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  222.092577][T11106] Bluetooth: hci0: Opcode 0x080f failed: -4
[  222.299224][T11095] lo speed is unknown, defaulting to 1000
[  222.750355][T11140] __nla_validate_parse: 4 callbacks suppressed
[  222.750376][T11140] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1509'.
[  223.057771][T11148] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1513'.
[  223.129010][T11148] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  223.162150][T11156] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  223.311278][T11158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'.
[  223.526782][   T51] Bluetooth: hci0: command tx timeout
[  223.550805][ T7991] hsr_slave_0: left promiscuous mode
[  223.574939][ T7991] hsr_slave_1: left promiscuous mode
[  223.581635][ T7991] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  223.591615][ T7991] batman_adv: batadv0: Removing interface: batadv_slave_0
[  223.604401][ T7991] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  223.614234][ T7991] batman_adv: batadv0: Removing interface: batadv_slave_1
[  223.649007][ T7991] veth1_macvtap: left promiscuous mode
[  223.654705][ T7991] veth0_macvtap: left promiscuous mode
[  223.656041][T11175] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1519'.
[  223.660485][ T7991] veth1_vlan: left promiscuous mode
[  223.660630][ T7991] veth0_vlan: left promiscuous mode
[  224.111435][ T7991] team0 (unregistering): Port device team_slave_1 removed
[  224.144163][ T7991] team0 (unregistering): Port device team_slave_0 removed
[  224.410937][   T24] page_pool_release_retry() stalled pool shutdown: id 36, 1 inflight 60 sec
[  224.655040][T11185] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1523'.
[  224.672114][T11095] chnl_net:caif_netlink_parms(): no params data found
[  224.706210][T11188] netlink: 'syz.4.1522': attribute type 2 has an invalid length.
[  224.716125][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1523'.
[  224.773980][T11191] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1525'.
[  225.060810][T11095] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.071718][T11095] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.102063][T11095] bridge_slave_0: entered allmulticast mode
[  225.118409][T11095] bridge_slave_0: entered promiscuous mode
[  225.149285][T11095] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.164792][T11095] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.174295][T11095] bridge_slave_1: entered allmulticast mode
[  225.185203][T11095] bridge_slave_1: entered promiscuous mode
[  225.300350][T11095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  225.321418][T11095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  225.355928][T11221] netlink: 'syz.1.1532': attribute type 1 has an invalid length.
[  225.366191][T11221] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1532'.
[  225.380287][T11219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1531'.
[  225.414648][T11095] team0: Port device team_slave_0 added
[  225.435222][T11095] team0: Port device team_slave_1 added
[  225.483303][T11226] bridge_slave_0: left allmulticast mode
[  225.490004][T11226] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.536682][T11226] team0: Port device team_slave_0 removed
[  225.550361][T11226] team0: Port device team_slave_1 removed
[  225.559072][T11226] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  225.570132][T11226] batman_adv: batadv0: Removing interface: batadv_slave_0
[  225.579253][T11226] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  225.589806][T11226] batman_adv: batadv0: Removing interface: batadv_slave_1
[  225.606652][   T51] Bluetooth: hci0: command 0x041b tx timeout
[  225.649876][ T7991] tipc: Resetting bearer <eth:team0>
[  225.666747][T11095] batman_adv: batadv0: Adding interface: batadv_slave_0
[  225.673750][T11095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.700219][T11095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  225.775015][T11095] batman_adv: batadv0: Adding interface: batadv_slave_1
[  225.792272][T11095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.832009][T11095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  225.866271][T11242] syzkaller1: entered promiscuous mode
[  225.888794][T11242] syzkaller1: entered allmulticast mode
[  225.919469][T11233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1535'.
[  226.011682][T11234] syzkaller1: left promiscuous mode
[  226.021746][T11234] syzkaller1: left allmulticast mode
[  226.035739][T11095] hsr_slave_0: entered promiscuous mode
[  226.049150][T11095] hsr_slave_1: entered promiscuous mode
[  226.055573][T11095] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  226.065109][T11095] Cannot create hsr debugfs directory
[  226.085429][T11249] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  226.885381][T11310] veth0: entered promiscuous mode
[  227.024746][T11310] veth0: left promiscuous mode
[  227.085739][T11095] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  227.101920][T11095] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  227.118059][T11095] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  227.141675][T11095] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  227.181093][T11327] netlink: 'syz.1.1559': attribute type 10 has an invalid length.
[  227.224830][T11327] 
: entered allmulticast mode
[  227.244894][T11327] 
: left promiscuous mode
[  227.254568][T11327] 
: entered promiscuous mode
[  227.260468][T11337] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7
[  227.265788][T11327] team0: Device 
 failed to register rx_handler
[  227.340404][T11340] netlink: 'syz.4.1561': attribute type 17 has an invalid length.
[  227.394746][T11095] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.433123][T11095] 8021q: adding VLAN 0 to HW filter on device team0
[  227.455396][ T6624] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.462656][ T6624] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.497713][ T6624] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.504940][ T6624] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.687278][   T51] Bluetooth: hci0: command 0x041b tx timeout
[  227.780393][T11360] __nla_validate_parse: 4 callbacks suppressed
[  227.780413][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1566'.
[  227.829132][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1566'.
[  227.971549][T11095] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.021438][T11367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1568'.
[  228.083184][T11095] veth0_vlan: entered promiscuous mode
[  228.121744][T11095] veth1_vlan: entered promiscuous mode
[  228.192617][T11371] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  228.215854][T11095] veth0_macvtap: entered promiscuous mode
[  228.240934][T11095] veth1_macvtap: entered promiscuous mode
[  228.248894][T11371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1570'.
[  228.295111][T11095] batman_adv: batadv0: Interface activated: batadv_slave_0
[  228.335580][T11378] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  228.382718][T11095] batman_adv: batadv0: Interface activated: batadv_slave_1
[  228.484109][T11095] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.517833][T11095] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.539102][T11095] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.564584][T11095] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.745849][T11404] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  228.781362][T11404] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  228.853969][T11412] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1584'.
[  228.864541][ T7991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.875375][ T7991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.956896][ T7993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.984073][ T7993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.257235][T11427] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.1589'.
[  229.284262][T11427] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.1589'.
[  229.301488][T11430] Cannot find set identified by id 0 to match
[  229.321261][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1590'.
[  229.330430][T11430] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64)
[  229.461542][T11432] netlink: 'syz.4.1592': attribute type 1 has an invalid length.
[  229.605502][T11432] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.624557][T11444] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  229.680559][T11432] vlan1: entered allmulticast mode
[  229.685748][T11432] veth1: entered allmulticast mode
[  229.723340][T11432] bond0: (slave vlan1): Opening slave failed
[  229.886686][T11457] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1596'.
[  229.944167][ T7993] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.612244][ T7993] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.920746][ T7993] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.014416][T11468] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1604'.
[  231.071257][ T7993] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.377724][ T7993] bridge_slave_1: left allmulticast mode
[  231.391997][ T7993] bridge_slave_1: left promiscuous mode
[  231.427465][ T7993] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.464214][ T7993] bridge_slave_0: left allmulticast mode
[  231.472633][ T7993] bridge_slave_0: left promiscuous mode
[  231.481844][ T7993] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.675552][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  231.687497][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  231.706924][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  231.716123][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  231.725079][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  231.978905][ T7993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  231.990922][ T7993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  232.001816][ T7993] bond0 (unregistering): Released all slaves
[  232.059892][T11511] erspan0: entered allmulticast mode
[  232.142687][T11505] lo speed is unknown, defaulting to 1000
[  232.544524][T11536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  232.609442][T11523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  232.661142][T11539] (unnamed net_device) (uninitialized): option mode: invalid value (133)
[  233.196544][T11568] netlink: 'syz.2.1628': attribute type 21 has an invalid length.
[  233.205797][T11570] __nla_validate_parse: 3 callbacks suppressed
[  233.205816][T11570] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1629'.
[  233.277075][ T7993] hsr_slave_0: left promiscuous mode
[  233.283320][ T7993] hsr_slave_1: left promiscuous mode
[  233.291406][ T7993] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  233.300747][ T7993] batman_adv: batadv0: Removing interface: batadv_slave_0
[  233.312462][ T7993] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  233.320279][ T7993] batman_adv: batadv0: Removing interface: batadv_slave_1
[  233.356904][ T7993] veth1_macvtap: left promiscuous mode
[  233.362626][ T7993] veth0_macvtap: left promiscuous mode
[  233.370511][ T7993] veth1_vlan: left promiscuous mode
[  233.375887][ T7993] veth0_vlan: left promiscuous mode
[  233.777148][   T51] Bluetooth: hci0: command tx timeout
[  233.803111][ T7993] team0 (unregistering): Port device team_slave_1 removed
[  233.850779][ T7993] team0 (unregistering): Port device team_slave_0 removed
[  234.183678][T11568] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1628'.
[  234.220094][T11574] netem: change failed
[  234.231345][T11577] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[  234.411723][T11592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1636'.
[  234.441121][T11594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1635'.
[  234.554064][T11602] netlink: 'syz.0.1636': attribute type 10 has an invalid length.
[  234.595049][T11605] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1638'.
[  234.672083][T11608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1639'.
[  234.704398][T11505] chnl_net:caif_netlink_parms(): no params data found
[  234.722045][T11611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1640'.
[  234.767402][T11608] netlink: 'syz.4.1639': attribute type 1 has an invalid length.
[  234.800549][T11608] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1639'.
[  235.032970][T11626] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  235.072356][T11505] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.093181][T11505] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.114642][T11505] bridge_slave_0: entered allmulticast mode
[  235.131345][T11505] bridge_slave_0: entered promiscuous mode
[  235.175312][T11632] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  235.186018][T11632] syzkaller0: entered promiscuous mode
[  235.195070][T11632] syzkaller0: entered allmulticast mode
[  235.203081][T11505] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.219211][T11505] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.228795][T11505] bridge_slave_1: entered allmulticast mode
[  235.237427][T11505] bridge_slave_1: entered promiscuous mode
[  235.247413][T11637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1649'.
[  235.275540][T11632] tipc: Resetting bearer <eth:syzkaller0>
[  235.285624][T11641] xt_l2tp: unknown flags: 18
[  235.313959][T11637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1649'.
[  235.325607][T11641] netlink: 'syz.4.1650': attribute type 1 has an invalid length.
[  235.333808][T11631] tipc: Resetting bearer <eth:syzkaller0>
[  235.361684][T11631] tipc: Disabling bearer <eth:syzkaller0>
[  235.402330][T11505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.430217][T11505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.519485][T11655] netlink: 'syz.4.1653': attribute type 4 has an invalid length.
[  235.552006][T11505] team0: Port device team_slave_0 added
[  235.575868][T11505] team0: Port device team_slave_1 added
[  235.597193][T11662] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  235.729831][T11505] batman_adv: batadv0: Adding interface: batadv_slave_0
[  235.747283][T11505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.800716][T11505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  235.842736][T11505] batman_adv: batadv0: Adding interface: batadv_slave_1
[  235.853729][   T51] Bluetooth: hci0: command tx timeout
[  235.867081][T11505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.893638][T11505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  235.971831][T11505] hsr_slave_0: entered promiscuous mode
[  236.005788][T11505] hsr_slave_1: entered promiscuous mode
[  236.025715][T11505] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  236.040995][T11505] Cannot create hsr debugfs directory
[  236.277571][T11697] netlink: 'syz.2.1665': attribute type 25 has an invalid length.
[  236.543685][T11720] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  236.623537][T11720] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2
[  236.657152][T11720] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€
[  236.714612][T11726] netlink: 'syz.1.1673': attribute type 1 has an invalid length.
[  237.179659][T11505] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  237.936759][   T51] Bluetooth: hci0: command tx timeout
[  237.997561][T11505] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  238.285902][T11505] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  238.306072][T11505] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  238.321257][T11776] netlink: 'syz.4.1685': attribute type 1 has an invalid length.
[  238.390271][T11776] bond5: entered promiscuous mode
[  238.402583][T11777] __nla_validate_parse: 14 callbacks suppressed
[  238.402600][T11777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1688'.
[  238.422174][T11776] 8021q: adding VLAN 0 to HW filter on device bond5
[  238.435566][T11777] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1688'.
[  238.476756][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1688'.
[  238.493164][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1690'.
[  238.496968][T11782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1688'.
[  238.521878][T11777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1688'.
[  238.550103][T11776] 8021q: adding VLAN 0 to HW filter on device bond5
[  238.560143][T11776] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address
[  238.572593][T11776] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  238.593765][T11776] bond5: (slave wireguard0): making interface the new active one
[  238.603221][T11776] wireguard0: entered promiscuous mode
[  238.611336][T11776] bond5: (slave wireguard0): Enslaving as an active interface with an up link
[  238.691800][T11804] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1693'.
[  238.784557][T11806] netlink: 'syz.1.1694': attribute type 1 has an invalid length.
[  238.797303][T11806] netlink: 'syz.1.1694': attribute type 29 has an invalid length.
[  238.812700][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1694'.
[  238.824173][T11806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1694'.
[  238.834740][T11806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1694'.
[  238.845953][T11505] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.881594][T11505] 8021q: adding VLAN 0 to HW filter on device team0
[  238.916205][ T6624] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.923455][ T6624] bridge0: port 1(bridge_slave_0) entered forwarding state
[  238.943431][ T6624] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.950753][ T6624] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.353055][T11505] 8021q: adding VLAN 0 to HW filter on device batadv0
[  239.452346][T11505] veth0_vlan: entered promiscuous mode
[  239.477469][T11505] veth1_vlan: entered promiscuous mode
[  239.538536][T11505] veth0_macvtap: entered promiscuous mode
[  239.561694][T11505] veth1_macvtap: entered promiscuous mode
[  239.623955][T11505] batman_adv: batadv0: Interface activated: batadv_slave_0
[  239.649748][T11505] batman_adv: batadv0: Interface activated: batadv_slave_1
[  239.679364][T11505] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  239.699850][T11505] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  239.725837][T11505] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  239.740124][T11505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.872228][ T7985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.892384][ T7985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.903093][T11815] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  239.962269][ T6624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.014736][ T6624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.022714][   T51] Bluetooth: hci0: command tx timeout
[  240.280817][T11861] openvswitch: netlink: Key type 16144 is out of range max 32
[  241.089317][T11918] netlink: 'syz.0.1725': attribute type 1 has an invalid length.
[  241.245053][ T7975] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.262774][ T7975] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.631844][ T7975] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.703209][T11940] : entered promiscuous mode
[  242.736053][T11946] netlink: 'syz.2.1734': attribute type 1 has an invalid length.
[  242.811311][ T7975] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.872463][T11948] netlink: 'syz.1.1735': attribute type 1 has an invalid length.
[  242.901193][T11946] 8021q: adding VLAN 0 to HW filter on device bond6
[  242.944700][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  242.957824][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  243.003524][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  243.025686][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  243.036243][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  243.166096][T11960] lo speed is unknown, defaulting to 1000
[  243.227504][ T7975] bridge_slave_1: left allmulticast mode
[  243.233234][ T7975] bridge_slave_1: left promiscuous mode
[  243.259243][ T7975] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.325466][ T7975] bridge_slave_0: left allmulticast mode
[  243.347124][ T7975] bridge_slave_0: left promiscuous mode
[  243.353000][ T7975] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.374162][T11982] netlink: 'syz.2.1743': attribute type 32 has an invalid length.
[  243.432202][T11986] __nla_validate_parse: 8 callbacks suppressed
[  243.432222][T11986] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1743'.
[  243.612506][T12004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1743'.
[  244.065861][ T7975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  244.080783][ T7975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  244.092022][ T7975] bond0 (unregistering): Released all slaves
[  244.408727][T12028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1751'.
[  244.714906][T12036] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1755'.
[  244.939284][T12057] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1759'.
[  244.961892][T12058] netlink: 'syz.4.1758': attribute type 3 has an invalid length.
[  244.989430][T12055] netlink: 'syz.4.1758': attribute type 3 has an invalid length.
[  245.140233][   T51] Bluetooth: hci0: command tx timeout
[  245.194452][T11960] chnl_net:caif_netlink_parms(): no params data found
[  245.255760][ T7975] hsr_slave_0: left promiscuous mode
[  245.262506][ T7975] hsr_slave_1: left promiscuous mode
[  245.282575][ T7975] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  245.286675][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  245.303713][ T7975] batman_adv: batadv0: Removing interface: batadv_slave_0
[  245.341146][ T7975] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  245.357019][ T7975] batman_adv: batadv0: Removing interface: batadv_slave_1
[  245.413078][ T7975] veth1_macvtap: left promiscuous mode
[  245.421752][ T7975] veth0_macvtap: left promiscuous mode
[  245.428672][ T7975] veth1_vlan: left promiscuous mode
[  245.434074][ T7975] veth0_vlan: left promiscuous mode
[  245.444728][T12078] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1762'.
[  246.044769][ T7975] team0 (unregistering): Port device team_slave_1 removed
[  246.090986][ T7975] team0 (unregistering): Port device team_slave_0 removed
[  246.826988][T11960] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.834216][T11960] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.903862][T11960] bridge_slave_0: entered allmulticast mode
[  246.927944][T12116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1772'.
[  246.937394][T11960] bridge_slave_0: entered promiscuous mode
[  246.944310][T11960] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.965492][T11960] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.994562][T11960] bridge_slave_1: entered allmulticast mode
[  247.005590][T11960] bridge_slave_1: entered promiscuous mode
[  247.189588][T11960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  247.206588][   T51] Bluetooth: hci0: command tx timeout
[  247.253783][T11960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  247.434335][T11960] team0: Port device team_slave_0 added
[  247.452853][T12140] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1778'.
[  247.483766][T11960] team0: Port device team_slave_1 added
[  247.706109][T11960] batman_adv: batadv0: Adding interface: batadv_slave_0
[  247.715267][T11960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.748909][T12156] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  247.759720][T11960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  247.792870][T11960] batman_adv: batadv0: Adding interface: batadv_slave_1
[  247.823318][T11960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.892039][T11960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  248.057727][T12176] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1788'.
[  248.091998][T12179] netlink: 'syz.1.1790': attribute type 1 has an invalid length.
[  248.121290][T12179] netlink: 'syz.1.1790': attribute type 6 has an invalid length.
[  248.170425][T11960] hsr_slave_0: entered promiscuous mode
[  248.201905][T11960] hsr_slave_1: entered promiscuous mode
[  248.220666][T11960] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  248.234274][T11960] Cannot create hsr debugfs directory
[  248.382212][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'.
[  248.456294][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'.
[  248.482347][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'.
[  248.604751][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'.
[  248.659672][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'.
[  248.697184][T12199] xt_CT: You must specify a L4 protocol and not use inversions on it
[  248.725436][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'.
[  248.752780][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'.
[  248.766236][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'.
[  248.794433][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'.
[  248.901664][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'.
[  248.936062][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'.
[  248.981080][T12205] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8
[  249.119632][T12210] openvswitch: netlink: Key type 29 is not supported
[  249.245924][T11960] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  249.286492][   T51] Bluetooth: hci0: command tx timeout
[  249.310687][T11960] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  249.333273][T12223] netlink: 'syz.1.1804': attribute type 1 has an invalid length.
[  249.395585][T11960] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  249.450248][T11960] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  249.709646][T11960] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.758225][T11960] 8021q: adding VLAN 0 to HW filter on device team0
[  249.812987][ T7985] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.820315][ T7985] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.849651][T12251] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  249.853233][ T7985] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.869214][ T7985] bridge0: port 2(bridge_slave_1) entered forwarding state
[  250.197361][T12270] netlink: 'syz.0.1818': attribute type 10 has an invalid length.
[  250.210688][T12270] tipc: Resetting bearer <eth:team0>
[  250.247927][T12270] batman_adv: batadv0: Adding interface: team0
[  250.254164][T12270] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.283383][T12270] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  250.374479][T12278] pim6reg1: entered promiscuous mode
[  250.382339][T12278] pim6reg1: entered allmulticast mode
[  250.460387][T11960] 8021q: adding VLAN 0 to HW filter on device batadv0
[  250.578917][T11960] veth0_vlan: entered promiscuous mode
[  250.605272][T11960] veth1_vlan: entered promiscuous mode
[  250.658587][T11960] veth0_macvtap: entered promiscuous mode
[  250.682884][T11960] veth1_macvtap: entered promiscuous mode
[  250.729713][T11960] batman_adv: batadv0: Interface activated: batadv_slave_0
[  250.764748][T11960] batman_adv: batadv0: Interface activated: batadv_slave_1
[  250.798392][T11960] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  250.826119][T11960] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  250.849465][T11960] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  250.860296][T11960] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  250.873379][T12298] netlink: 'syz.1.1824': attribute type 32 has an invalid length.
[  251.002399][ T7994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.020157][ T7994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.090509][ T7997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.102479][ T7997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.032294][T12340] gretap0: entered promiscuous mode
[  252.042619][T12340] gretap0: left promiscuous mode
[  252.113362][ T7994] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.700271][ T7994] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.191811][ T7994] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.291445][ T7994] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.403633][T12357] FAULT_INJECTION: forcing a failure.
[  253.403633][T12357] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  253.435493][T12354] dummy0: left allmulticast mode
[  253.441832][T12357] CPU: 0 UID: 0 PID: 12357 Comm: syz.2.1840 Not tainted 6.16.0-rc4-syzkaller-00121-g80852774ba0a #0 PREEMPT(full) 
[  253.441861][T12357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  253.441881][T12357] Call Trace:
[  253.441890][T12357]  <TASK>
[  253.441900][T12357]  dump_stack_lvl+0x189/0x250
[  253.441933][T12357]  ? __pfx____ratelimit+0x10/0x10
[  253.441971][T12357]  ? __pfx_dump_stack_lvl+0x10/0x10
[  253.441997][T12357]  ? __pfx__printk+0x10/0x10
[  253.442026][T12357]  ? __might_fault+0xb0/0x130
[  253.442065][T12357]  should_fail_ex+0x414/0x560
[  253.442102][T12357]  _copy_from_user+0x2d/0xb0
[  253.442130][T12357]  ___sys_sendmsg+0x158/0x2a0
[  253.442161][T12357]  ? __pfx____sys_sendmsg+0x10/0x10
[  253.442231][T12357]  ? __fget_files+0x2a/0x420
[  253.442264][T12357]  ? __fget_files+0x3a0/0x420
[  253.442305][T12357]  __x64_sys_sendmsg+0x19b/0x260
[  253.442337][T12357]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  253.442376][T12357]  ? __pfx_ksys_write+0x10/0x10
[  253.442398][T12357]  ? rcu_is_watching+0x15/0xb0
[  253.442429][T12357]  ? do_syscall_64+0xbe/0x3b0
[  253.442455][T12357]  do_syscall_64+0xfa/0x3b0
[  253.442474][T12357]  ? lockdep_hardirqs_on+0x9c/0x150
[  253.442505][T12357]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.442526][T12357]  ? clear_bhb_loop+0x60/0xb0
[  253.442552][T12357]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.442572][T12357] RIP: 0033:0x7f405598e929
[  253.442597][T12357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  253.442615][T12357] RSP: 002b:00007f40567e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  253.442641][T12357] RAX: ffffffffffffffda RBX: 00007f4055bb5fa0 RCX: 00007f405598e929
[  253.442656][T12357] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004
[  253.442668][T12357] RBP: 00007f40567e2090 R08: 0000000000000000 R09: 0000000000000000
[  253.442681][T12357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  253.442693][T12357] R13: 0000000000000000 R14: 00007f4055bb5fa0 R15: 00007fffcf347108
[  253.442726][T12357]  </TASK>
[  253.446558][T12354] dummy0: left promiscuous mode
[  253.672860][T12354] bridge0: port 1(dummy0) entered disabled state
[  253.673901][T12366] netlink: 'syz.2.1842': attribute type 1 has an invalid length.
[  253.710718][T12354] bond0: (slave veth0_to_bond): Releasing active interface
[  253.715538][T12366] __nla_validate_parse: 66 callbacks suppressed
[  253.715559][T12366] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1842'.
[  253.800778][T12354] bond5: (slave wireguard0): Releasing backup interface
[  253.834872][T12354] wireguard0: left promiscuous mode
[  253.927566][T12371] vlan0: entered promiscuous mode
[  253.933868][T12373] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  253.952331][T12377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1843'.
[  253.988245][ T7994] bridge_slave_1: left allmulticast mode
[  253.993961][ T7994] bridge_slave_1: left promiscuous mode
[  254.030671][ T7994] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.098665][ T7994] bridge_slave_0: left allmulticast mode
[  254.116397][ T7994] bridge_slave_0: left promiscuous mode
[  254.122313][ T7994] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.181932][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  254.193755][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  254.206940][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  254.217475][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  254.232728][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  254.811183][ T7994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  254.822409][ T7994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  254.832627][ T7994] bond0 (unregistering): Released all slaves
[  254.882304][T12388] lo speed is unknown, defaulting to 1000
[  254.908886][T12407] tipc: Started in network mode
[  254.918010][T12407] tipc: Node identity , cluster identity 4711
[  254.943424][T12407] tipc: Failed to obtain node identity
[  254.955673][T12407] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  254.990309][T12413] syzkaller0: entered promiscuous mode
[  254.995983][T12413] syzkaller0: entered allmulticast mode
[  255.175671][T12429] sctp: [Deprecated]: syz.2.1853 (pid 12429) Use of struct sctp_assoc_value in delayed_ack socket option.
[  255.175671][T12429] Use struct sctp_sack_info instead
[  255.291072][T12429] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  255.673553][T12454] xt_CT: You must specify a L4 protocol and not use inversions on it
[  255.693942][ T7994] hsr_slave_0: left promiscuous mode
[  255.703378][ T7994] hsr_slave_1: left promiscuous mode
[  255.710160][ T7994] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  255.717874][ T7994] batman_adv: batadv0: Removing interface: batadv_slave_0
[  255.737859][ T7994] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  255.746229][ T7994] batman_adv: batadv0: Removing interface: batadv_slave_1
[  255.792437][ T7994] veth1_macvtap: left promiscuous mode
[  255.803725][ T7994] veth0_macvtap: left promiscuous mode
[  255.813177][ T7994] veth1_vlan: left promiscuous mode
[  255.822845][ T7994] veth0_vlan: left promiscuous mode
[  256.313213][ T7994] team0 (unregistering): Port device team_slave_1 removed
[  256.328196][ T5867] Bluetooth: hci0: command tx timeout
[  256.359313][ T7994] team0 (unregistering): Port device team_slave_0 removed
[  256.922908][T12388] chnl_net:caif_netlink_parms(): no params data found
[  256.987184][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1864'.
[  257.008174][T12473] netlink: 'syz.0.1864': attribute type 1 has an invalid length.
[  257.090223][T12482] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  257.124751][T12477] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1865'.
[  257.157398][T12477] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1865'.
[  257.184659][T12489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1868'.
[  257.199170][T12488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1866'.
[  257.220859][T12490] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1867'.
[  257.233015][T12479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1866'.
[  257.239261][T12490] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1867'.
[  257.280754][T12490] netlink: 'syz.1.1867': attribute type 6 has an invalid length.
[  257.291530][T12490] netlink: 'syz.1.1867': attribute type 5 has an invalid length.
[  257.358605][T12388] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.365767][T12388] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.375162][T12388] bridge_slave_0: entered allmulticast mode
[  257.387984][T12388] bridge_slave_0: entered promiscuous mode
[  257.401087][T12388] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.408910][T12388] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.416101][T12388] bridge_slave_1: entered allmulticast mode
[  257.424645][T12388] bridge_slave_1: entered promiscuous mode
[  257.482099][T12388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  257.530346][T12388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  257.593012][T12388] team0: Port device team_slave_0 added
[  257.614515][T12388] team0: Port device team_slave_1 added
[  257.679762][T12388] batman_adv: batadv0: Adding interface: batadv_slave_0
[  257.690026][T12388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.721197][T12388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  257.735051][T12388] batman_adv: batadv0: Adding interface: batadv_slave_1
[  257.760525][T12507] nbd: must specify an index to disconnect
[  257.772688][T12388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.802503][T12388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  257.924502][T12388] hsr_slave_0: entered promiscuous mode
[  257.937968][T12388] hsr_slave_1: entered promiscuous mode
[  257.948945][T12388] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  257.958663][T12388] Cannot create hsr debugfs directory
[  258.169575][T12524] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  258.239822][T12524] batman_adv: batadv0: Removing interface: batadv_slave_1
[  258.408764][ T5867] Bluetooth: hci0: command tx timeout
[  258.538546][T12541] team0: Mode changed to "loadbalance"
[  258.559349][T12541] netlink: 'syz.0.1879': attribute type 9 has an invalid length.
[  258.836781][T12560] netlink: 'syz.2.1881': attribute type 21 has an invalid length.
[  258.844696][T12560] __nla_validate_parse: 6 callbacks suppressed
[  258.844715][T12560] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1881'.
[  258.951875][T12560] netlink: 'syz.2.1881': attribute type 4 has an invalid length.
[  258.987819][T12567] netlink: 'syz.2.1881': attribute type 21 has an invalid length.
[  258.995610][T12560] netlink: 'syz.2.1881': attribute type 5 has an invalid length.
[  258.995696][T12567] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1881'.
[  259.013011][T12560] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1881'.
[  259.057597][T12572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1884'.
[  259.073389][T12567] netlink: 'syz.2.1881': attribute type 4 has an invalid length.
[  259.081967][T12567] netlink: 'syz.2.1881': attribute type 5 has an invalid length.
[  259.094282][T12567] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1881'.
[  259.111978][T12560] tipc: Enabling <eth:lo> not permitted
[  259.118252][T12560] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  259.131744][T12563] x_tables: duplicate entry at hook 2
[  259.151783][T12576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1885'.
[  259.161745][T12576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1885'.
[  259.273292][T12578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1886'.
[  259.274644][T12581] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1888'.
[  259.292589][T12581] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1888'.
[  259.301290][T12580] delete_channel: no stack
[  259.690374][T12388] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  259.739334][T12603] FAULT_INJECTION: forcing a failure.
[  259.739334][T12603] name failslab, interval 1, probability 0, space 0, times 1
[  259.758480][T12603] CPU: 1 UID: 0 PID: 12603 Comm: syz.0.1893 Not tainted 6.16.0-rc4-syzkaller-00121-g80852774ba0a #0 PREEMPT(full) 
[  259.758513][T12603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  259.758527][T12603] Call Trace:
[  259.758535][T12603]  <TASK>
[  259.758546][T12603]  dump_stack_lvl+0x189/0x250
[  259.758578][T12603]  ? __pfx____ratelimit+0x10/0x10
[  259.758616][T12603]  ? __pfx_dump_stack_lvl+0x10/0x10
[  259.758641][T12603]  ? __pfx__printk+0x10/0x10
[  259.758677][T12603]  ? ref_tracker_alloc+0x318/0x460
[  259.758699][T12603]  should_fail_ex+0x414/0x560
[  259.758742][T12603]  should_failslab+0xa8/0x100
[  259.758772][T12603]  kmem_cache_alloc_noprof+0x73/0x3c0
[  259.758797][T12603]  ? skb_clone+0x212/0x3a0
[  259.758831][T12603]  skb_clone+0x212/0x3a0
[  259.758863][T12603]  __netlink_deliver_tap+0x404/0x850
[  259.758904][T12603]  ? netlink_deliver_tap+0x2e/0x1b0
[  259.758931][T12603]  netlink_deliver_tap+0x19c/0x1b0
[  259.758958][T12603]  netlink_unicast+0x730/0x8e0
[  259.758994][T12603]  netlink_sendmsg+0x805/0xb30
[  259.759030][T12603]  ? __pfx_netlink_sendmsg+0x10/0x10
[  259.759061][T12603]  ? aa_sock_msg_perm+0x94/0x160
[  259.759093][T12603]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  259.759113][T12603]  ? __pfx_netlink_sendmsg+0x10/0x10
[  259.759140][T12603]  __sock_sendmsg+0x219/0x270
[  259.759164][T12603]  ____sys_sendmsg+0x505/0x830
[  259.759198][T12603]  ? __pfx_____sys_sendmsg+0x10/0x10
[  259.759237][T12603]  ? import_iovec+0x74/0xa0
[  259.759278][T12603]  ___sys_sendmsg+0x21f/0x2a0
[  259.759308][T12603]  ? __pfx____sys_sendmsg+0x10/0x10
[  259.759375][T12603]  ? __fget_files+0x2a/0x420
[  259.759401][T12603]  ? __fget_files+0x3a0/0x420
[  259.759441][T12603]  __x64_sys_sendmsg+0x19b/0x260
[  259.759469][T12603]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  259.759508][T12603]  ? __pfx_ksys_write+0x10/0x10
[  259.759529][T12603]  ? rcu_is_watching+0x15/0xb0
[  259.759558][T12603]  ? do_syscall_64+0xbe/0x3b0
[  259.759582][T12603]  do_syscall_64+0xfa/0x3b0
[  259.759601][T12603]  ? lockdep_hardirqs_on+0x9c/0x150
[  259.759631][T12603]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.759651][T12603]  ? clear_bhb_loop+0x60/0xb0
[  259.759675][T12603]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.759694][T12603] RIP: 0033:0x7fcd8858e929
[  259.759712][T12603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  259.759736][T12603] RSP: 002b:00007fcd89368038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  259.759757][T12603] RAX: ffffffffffffffda RBX: 00007fcd887b5fa0 RCX: 00007fcd8858e929
[  259.759772][T12603] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004
[  259.759784][T12603] RBP: 00007fcd89368090 R08: 0000000000000000 R09: 0000000000000000
[  259.759797][T12603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  259.759808][T12603] R13: 0000000000000000 R14: 00007fcd887b5fa0 R15: 00007fff129c97d8
[  259.759841][T12603]  </TASK>
[  260.164404][T12388] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  260.190395][T12388] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  260.213646][T12388] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  260.491401][ T5867] Bluetooth: hci0: command tx timeout
[  260.512493][T12388] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.653727][T12388] 8021q: adding VLAN 0 to HW filter on device team0
[  260.704265][ T6646] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.711516][ T6646] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.765976][ T6646] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.773228][ T6646] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.001511][T12669] sctp: [Deprecated]: syz.4.1910 (pid 12669) Use of int in max_burst socket option deprecated.
[  261.001511][T12669] Use struct sctp_assoc_value instead
[  261.285843][T12388] 8021q: adding VLAN 0 to HW filter on device batadv0
[  261.385897][T12388] veth0_vlan: entered promiscuous mode
[  261.401732][T12388] veth1_vlan: entered promiscuous mode
[  261.451977][T12388] veth0_macvtap: entered promiscuous mode
[  261.468200][T12388] veth1_macvtap: entered promiscuous mode
[  261.503413][T12388] batman_adv: batadv0: Interface activated: batadv_slave_0
[  261.538328][T12388] batman_adv: batadv0: Interface activated: batadv_slave_1
[  261.559890][T12388] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.587083][T12388] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.595853][T12388] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.637203][T12388] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.654254][T12698] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.661967][T12698] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.835292][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.862023][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.074120][ T6646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.083327][ T6646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.764814][T12756] validate_nla: 3 callbacks suppressed
[  262.764831][T12756] netlink: 'syz.4.1937': attribute type 4 has an invalid length.
[  262.834227][T12762] IPVS: length: 24 != 49176
[  262.851934][T12762] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.002045][T12766] netlink: 'syz.4.1940': attribute type 1 has an invalid length.
[  263.010822][T12766] FAULT_INJECTION: forcing a failure.
[  263.010822][T12766] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  263.025684][T12766] CPU: 0 UID: 0 PID: 12766 Comm: syz.4.1940 Not tainted 6.16.0-rc4-syzkaller-00121-g80852774ba0a #0 PREEMPT(full) 
[  263.025709][T12766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  263.025720][T12766] Call Trace:
[  263.025727][T12766]  <TASK>
[  263.025734][T12766]  dump_stack_lvl+0x189/0x250
[  263.025760][T12766]  ? __pfx____ratelimit+0x10/0x10
[  263.025788][T12766]  ? __pfx_dump_stack_lvl+0x10/0x10
[  263.025809][T12766]  ? __pfx__printk+0x10/0x10
[  263.025845][T12766]  should_fail_ex+0x414/0x560
[  263.025877][T12766]  _copy_to_user+0x31/0xb0
[  263.025901][T12766]  simple_read_from_buffer+0xe1/0x170
[  263.025929][T12766]  proc_fail_nth_read+0x1df/0x250
[  263.025959][T12766]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  263.025987][T12766]  ? rw_verify_area+0x258/0x650
[  263.026007][T12766]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  263.026034][T12766]  vfs_read+0x200/0x980
[  263.026060][T12766]  ? __pfx___mutex_lock+0x10/0x10
[  263.026078][T12766]  ? __pfx_vfs_read+0x10/0x10
[  263.026100][T12766]  ? __fget_files+0x2a/0x420
[  263.026129][T12766]  ? __fget_files+0x3a0/0x420
[  263.026168][T12766]  ? __fget_files+0x2a/0x420
[  263.026203][T12766]  ksys_read+0x145/0x250
[  263.026227][T12766]  ? __pfx_ksys_read+0x10/0x10
[  263.026246][T12766]  ? rcu_is_watching+0x15/0xb0
[  263.026274][T12766]  ? do_syscall_64+0xbe/0x3b0
[  263.026296][T12766]  do_syscall_64+0xfa/0x3b0
[  263.026314][T12766]  ? lockdep_hardirqs_on+0x9c/0x150
[  263.026363][T12766]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.026387][T12766]  ? clear_bhb_loop+0x60/0xb0
[  263.026428][T12766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.026446][T12766] RIP: 0033:0x7f934d78d33c
[  263.026464][T12766] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  263.026481][T12766] RSP: 002b:00007f934b5f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  263.026518][T12766] RAX: ffffffffffffffda RBX: 00007f934d9b5fa0 RCX: 00007f934d78d33c
[  263.026533][T12766] RDX: 000000000000000f RSI: 00007f934b5f60a0 RDI: 0000000000000005
[  263.026545][T12766] RBP: 00007f934b5f6090 R08: 0000000000000000 R09: 0000000000000000
[  263.026557][T12766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  263.026568][T12766] R13: 0000000000000000 R14: 00007f934d9b5fa0 R15: 00007fff4fdbe598
[  263.026602][T12766]  </TASK>
[  263.480624][T12776] netlink: 'syz.0.1941': attribute type 39 has an invalid length.
[  263.645480][ T7985] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.261131][T12777] netlink: 'syz.4.1944': attribute type 1 has an invalid length.
[  264.304177][ T7985] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.732648][ T7985] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.907817][T12790] __nla_validate_parse: 12 callbacks suppressed
[  264.907836][T12790] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1948'.
[  264.928706][ T7985] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.987273][T12787] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1947'.
[  264.999470][T12788] can: request_module (can-proto-0) failed.
[  265.341782][ T7985] bridge_slave_1: left allmulticast mode
[  265.352839][ T7985] bridge_slave_1: left promiscuous mode
[  265.363624][ T7985] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.389799][ T7985] bridge_slave_0: left allmulticast mode
[  265.395580][ T7985] bridge_slave_0: left promiscuous mode
[  265.439957][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.551533][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  265.562966][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  265.571893][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  265.582541][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  265.591227][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  265.919949][ T7985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  265.933654][ T7985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  265.943866][ T7985] bond0 (unregistering): Released all slaves
[  266.005780][T12830] lo speed is unknown, defaulting to 1000
[  266.233845][T12841] netlink: 'syz.1.1959': attribute type 21 has an invalid length.
[  266.284235][T12847] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  266.302509][T12841] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1959'.
[  266.325630][T12847] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1961'.
[  266.327243][T12852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1961'.
[  266.358601][T12851] xt_bpf: check failed: parse error
[  266.403200][T12852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1961'.
[  266.694645][T12862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1963'.
[  266.894300][ T7985] hsr_slave_0: left promiscuous mode
[  266.902441][ T7985] hsr_slave_1: left promiscuous mode
[  266.912193][ T7985] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  266.920162][ T7985] batman_adv: batadv0: Removing interface: batadv_slave_0
[  266.933896][ T7985] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  266.943205][ T7985] batman_adv: batadv0: Removing interface: batadv_slave_1
[  267.004054][ T7985] veth1_macvtap: left promiscuous mode
[  267.015489][ T7985] veth0_macvtap: left promiscuous mode
[  267.026655][ T7985] veth1_vlan: left promiscuous mode
[  267.051922][ T7985] veth0_vlan: left promiscuous mode
[  267.152601][T12877] netlink: 'syz.2.1967': attribute type 4 has an invalid length.
[  267.175576][T12879] netlink: 'syz.0.1968': attribute type 5 has an invalid length.
[  267.188111][T12879] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1968'.
[  267.431557][T12896] netlink: 'syz.2.1972': attribute type 8 has an invalid length.
[  267.683612][ T7985] team0 (unregistering): Port device team_slave_1 removed
[  267.691294][ T5867] Bluetooth: hci0: command tx timeout
[  267.731306][ T7985] team0 (unregistering): Port device team_slave_0 removed
[  268.085341][T12879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1968'.
[  268.128449][T12894] lo speed is unknown, defaulting to 1000
[  268.207680][T12894] lo speed is unknown, defaulting to 1000
[  268.235196][T12894] lo speed is unknown, defaulting to 1000
[  268.282288][T12905] syz_tun: entered promiscuous mode
[  268.318899][T12905] syz_tun: entered allmulticast mode
[  268.331691][T12830] chnl_net:caif_netlink_parms(): no params data found
[  268.681884][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1980'.
[  268.749296][T12830] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.759062][T12830] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.769760][T12830] bridge_slave_0: entered allmulticast mode
[  268.774641][T12894] infiniband syz0: set active
[  268.778071][T12830] bridge_slave_0: entered promiscuous mode
[  268.788448][T12894] infiniband syz0: added lo
[  268.796982][ T5940] lo speed is unknown, defaulting to 1000
[  268.807110][T12894] syz0: rxe_create_cq: returned err = -12
[  268.807725][T12830] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.813045][T12894] infiniband syz0: Couldn't create ib_mad CQ
[  268.827733][T12894] infiniband syz0: Couldn't open port 1
[  268.833956][T12830] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.853691][T12830] bridge_slave_1: entered allmulticast mode
[  268.858038][T12894] RDS/IB: syz0: added
[  268.863777][T12894] smc: adding ib device syz0 with port count 1
[  268.867723][T12830] bridge_slave_1: entered promiscuous mode
[  268.883506][T12894] smc:    ib device syz0 port 1 has pnetid 
[  268.904493][ T5940] lo speed is unknown, defaulting to 1000
[  268.931215][T12894] lo speed is unknown, defaulting to 1000
[  268.939556][T12830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  268.973714][T12830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  269.069796][T12830] team0: Port device team_slave_0 added
[  269.078683][T12934] netlink: 'syz.0.1985': attribute type 16 has an invalid length.
[  269.089528][T12830] team0: Port device team_slave_1 added
[  269.090588][T12934] netlink: 'syz.0.1985': attribute type 17 has an invalid length.
[  269.210213][T12830] batman_adv: batadv0: Adding interface: batadv_slave_0
[  269.217489][T12830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  269.243641][T12830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  269.271088][T12935] xfrm1: entered promiscuous mode
[  269.287181][T12830] batman_adv: batadv0: Adding interface: batadv_slave_1
[  269.294198][T12830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  269.353316][T12830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  269.377363][T12894] lo speed is unknown, defaulting to 1000
[  269.477095][T12830] hsr_slave_0: entered promiscuous mode
[  269.487200][T12830] hsr_slave_1: entered promiscuous mode
[  269.506516][T12830] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  269.522241][T12942] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  269.526396][T12830] Cannot create hsr debugfs directory
[  269.544289][T12944] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  269.563442][    T9] IPVS: starting estimator thread 0...
[  269.570166][T12942] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20000
[  269.580294][T12944] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20000
[  269.670877][T12947] IPVS: using max 27 ests per chain, 64800 per kthread
[  269.769544][ T5867] Bluetooth: hci0: command 0x041b tx timeout
[  269.833567][T12956] netlink: 'syz.4.1991': attribute type 48 has an invalid length.
[  269.888011][T12958] netlink: 'syz.1.1992': attribute type 1 has an invalid length.
[  269.941068][T12894] lo speed is unknown, defaulting to 1000
[  270.101174][T12965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1994'.
[  270.108666][T12964] Bluetooth: MGMT ver 1.23
[  270.114529][T12965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1994'.
[  270.335442][T12973] netlink: 'syz.4.1997': attribute type 4 has an invalid length.
[  270.366285][T12972] netlink: 'syz.4.1997': attribute type 4 has an invalid length.
[  270.459104][T12973] netlink: 'syz.4.1997': attribute type 4 has an invalid length.
[  270.489124][ T5926] lo speed is unknown, defaulting to 1000
[  270.494925][ T5926] syz2: Port: 1 Link ACTIVE
[  270.523210][ T5918] lo speed is unknown, defaulting to 1000
[  270.523264][T12973] netlink: 'syz.4.1997': attribute type 4 has an invalid length.
[  270.545903][T12830] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  270.571336][T12976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1998'.
[  270.584623][    T9] lo speed is unknown, defaulting to 1000
[  270.584783][T12973] netlink: 'syz.4.1997': attribute type 4 has an invalid length.
[  270.595465][    T9] syz2: Port: 1 Link DOWN
[  270.598746][T12830] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  270.624462][T12973] netlink: 'syz.4.1997': attribute type 4 has an invalid length.
[  270.632423][T12894] lo speed is unknown, defaulting to 1000
[  270.638872][T12830] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  270.696682][T12830] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  270.791226][T12981] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1999'.
[  270.867979][T12987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2000'.
[  270.956009][T12830] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.063251][T12830] 8021q: adding VLAN 0 to HW filter on device team0
[  271.132366][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.139593][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  271.179193][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.186437][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  271.251120][T12997] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2002'.
[  271.427908][T12894] lo speed is unknown, defaulting to 1000
[  271.627649][T13015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2007'.
[  271.857218][ T5867] Bluetooth: hci0: command 0x041b tx timeout
[  272.074181][T12830] 8021q: adding VLAN 0 to HW filter on device batadv0
[  272.221781][T13038] sctp: [Deprecated]: syz.4.2013 (pid 13038) Use of struct sctp_assoc_value in delayed_ack socket option.
[  272.221781][T13038] Use struct sctp_sack_info instead
[  272.332580][T12830] veth0_vlan: entered promiscuous mode
[  272.353486][T12830] veth1_vlan: entered promiscuous mode
[  272.479980][T12830] veth0_macvtap: entered promiscuous mode
[  272.509664][T12830] veth1_macvtap: entered promiscuous mode
[  272.579553][T12830] batman_adv: batadv0: Interface activated: batadv_slave_0
[  272.625109][T12830] batman_adv: batadv0: Interface activated: batadv_slave_1
[  272.692306][T12830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  272.705863][T12830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  272.715443][T12830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  272.729227][T12830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  272.836874][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2017'.
[  272.860265][T13054] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2018'.
[  273.059389][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.068532][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.109421][T13062] syzkaller1: entered promiscuous mode
[  273.123703][T13062] syzkaller1: entered allmulticast mode
[  273.304281][ T6646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.336382][ T6646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.355256][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  273.369976][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  273.381275][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  273.407445][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  273.420573][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  273.464451][T13075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2023'.
[  273.495211][T13078] delete_channel: no stack
[  273.580584][T13072] lo speed is unknown, defaulting to 1000
[  273.704415][T13091] xt_TCPMSS: Only works on TCP SYN packets
[  273.743119][T13092] xt_TCPMSS: Only works on TCP SYN packets
[  273.787377][T13093] openvswitch: netlink: Flow actions attr not present in new flow.
[  274.023183][T13072] lo speed is unknown, defaulting to 1000
[  274.240374][ T6646] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.424391][ T6646] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.570282][ T6646] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.728020][ T6646] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.792273][T13072] chnl_net:caif_netlink_parms(): no params data found
[  274.919603][T13072] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.927664][T13072] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.934829][T13072] bridge_slave_0: entered allmulticast mode
[  274.943605][T13072] bridge_slave_0: entered promiscuous mode
[  274.961317][T13072] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.969607][T13072] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.977293][T13072] bridge_slave_1: entered allmulticast mode
[  274.984589][T13072] bridge_slave_1: entered promiscuous mode
[  274.992637][ T6646] bridge_slave_1: left allmulticast mode
[  274.998546][ T6646] bridge_slave_1: left promiscuous mode
[  275.004288][ T6646] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.014567][ T6646] bridge_slave_0: left allmulticast mode
[  275.020964][ T6646] bridge_slave_0: left promiscuous mode
[  275.027681][ T6646] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.319488][ T6646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  275.332084][ T6646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  275.342488][ T6646] bond0 (unregistering): Released all slaves
[  275.415826][T13072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  275.447594][   T51] Bluetooth: hci1: command tx timeout
[  275.460064][T13072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.502465][T13072] team0: Port device team_slave_0 added
[  275.521006][T13072] team0: Port device team_slave_1 added
[  275.572156][T13072] batman_adv: batadv0: Adding interface: batadv_slave_0
[  275.582416][T13072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.609588][T13072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  275.627940][T13072] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.634975][T13072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.662039][T13072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  275.808842][T13072] hsr_slave_0: entered promiscuous mode
[  275.815827][T13072] hsr_slave_1: entered promiscuous mode
[  275.887034][T13072] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  275.894655][T13072] Cannot create hsr debugfs directory
[  275.960725][T13124] ipip0: entered promiscuous mode
[  275.987669][T13130] xt_HMARK: spi-set and port-set can't be combined
[  276.011472][T13130] __nla_validate_parse: 4 callbacks suppressed
[  276.011490][T13130] netlink: 212208 bytes leftover after parsing attributes in process `syz.4.2037'.
[  276.070470][T13128] bond7: entered promiscuous mode
[  276.075631][T13128] bond7: entered allmulticast mode
[  276.082179][T13128] 8021q: adding VLAN 0 to HW filter on device bond7
[  276.241012][T13136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2039'.
[  276.422271][ T6646] hsr_slave_0: left promiscuous mode
[  276.431870][ T6646] hsr_slave_1: left promiscuous mode
[  276.438671][ T6646] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  276.439982][T13149] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000
[  276.446105][ T6646] batman_adv: batadv0: Removing interface: batadv_slave_0
[  276.458597][T13149] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000
[  276.501712][ T6646] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  276.517675][ T6646] batman_adv: batadv0: Removing interface: batadv_slave_1
[  276.567379][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  276.576201][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  276.580460][ T6646] veth1_macvtap: left promiscuous mode
[  276.589382][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  276.593465][ T6646] veth0_macvtap: left promiscuous mode
[  276.599095][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  276.602539][ T6646] veth1_vlan: left promiscuous mode
[  276.611582][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  276.618847][ T6646] veth0_vlan: left promiscuous mode
[  277.062628][ T6646] team0 (unregistering): Port device team_slave_1 removed
[  277.101284][ T6646] team0 (unregistering): Port device team_slave_0 removed
[  277.112835][T13164] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2044'.
[  277.527119][ T5867] Bluetooth: hci1: command tx timeout
[  277.729432][T13072] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.743685][T13174] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2047'.
[  277.793932][T13178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2047'.
[  277.814753][T13158] lo speed is unknown, defaulting to 1000
[  277.834981][T13178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2047'.
[  277.889615][T13072] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.018532][T13187] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.068016][T13072] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.144693][T13072] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.373331][T13158] lo speed is unknown, defaulting to 1000
[  278.376242][T13072] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  278.395773][T13072] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  278.410936][T13072] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  278.431966][T13072] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  278.542962][T13072] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.565445][T13072] 8021q: adding VLAN 0 to HW filter on device team0
[  278.604047][ T7994] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.611328][ T7994] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.650221][ T5867] Bluetooth: hci0: command tx timeout
[  278.692803][ T7994] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.700023][ T7994] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.750578][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2058'.
[  278.766935][T13220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2059'.
[  278.882523][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2059'.
[  279.153275][T13231] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2064'.
[  279.220911][T13158] chnl_net:caif_netlink_parms(): no params data found
[  279.616592][ T5867] Bluetooth: hci1: command tx timeout
[  279.644354][T13158] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.669708][T13158] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.677521][T13158] bridge_slave_0: entered allmulticast mode
[  279.685538][T13158] bridge_slave_0: entered promiscuous mode
[  279.701916][T13158] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.710679][T13158] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.720618][T13158] bridge_slave_1: entered allmulticast mode
[  279.730493][T13158] bridge_slave_1: entered promiscuous mode
[  279.817411][T13158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  279.834160][T13158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  279.930930][T13072] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.945159][T13158] team0: Port device team_slave_0 added
[  279.961226][T13158] team0: Port device team_slave_1 added
[  280.031304][T13158] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.057220][T13158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.097782][T13158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.118092][T13158] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.131431][T13158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.161857][T13158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  280.261900][T13158] hsr_slave_0: entered promiscuous mode
[  280.269821][T13158] hsr_slave_1: entered promiscuous mode
[  280.276205][T13158] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  280.285016][T13158] Cannot create hsr debugfs directory
[  280.294939][T13281] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI
[  280.306996][T13281] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027]
[  280.315435][T13281] CPU: 1 UID: 0 PID: 13281 Comm: syz.4.2073 Not tainted 6.16.0-rc4-syzkaller-00121-g80852774ba0a #0 PREEMPT(full) 
[  280.327516][T13281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  280.337583][T13281] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480
[  280.344010][T13281] Code: 89 ef e8 e0 1a ab f8 4d 89 ef 85 db 74 0d e8 04 98 47 f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 a9 1a ab f8 48 8b
[  280.363625][T13281] RSP: 0018:ffffc900052ef0c8 EFLAGS: 00010202
[  280.369703][T13281] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002
[  280.377696][T13281] RDX: ffff88807c48da00 RSI: 0000000000000000 RDI: 0000000000000000
[  280.385705][T13281] RBP: 0000000000000000 R08: ffff88807c48da00 R09: 0000000000000002
[  280.393687][T13281] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000a0000
[  280.401686][T13281] R13: ffff888049ca5800 R14: dffffc0000000000 R15: ffff888049ca5800
[  280.409705][T13281] FS:  00007f934b5d56c0(0000) GS:ffff888125d1d000(0000) knlGS:0000000000000000
[  280.418654][T13281] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  280.425244][T13281] CR2: 000000110c29fb90 CR3: 0000000033ffe000 CR4: 00000000003526f0
[  280.433258][T13281] Call Trace:
[  280.436584][T13281]  <TASK>
[  280.439529][T13281]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  280.445260][T13281]  pie_change+0x96d/0xca0
[  280.449603][T13281]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  280.455523][T13281]  ? lockdep_hardirqs_on+0x9c/0x150
[  280.460726][T13281]  ? __pfx_pie_change+0x10/0x10
[  280.465581][T13281]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  280.471492][T13281]  ? timer_init_key+0x171/0x2d0
[  280.476358][T13281]  ? __pfx_pie_init+0x10/0x10
[  280.481063][T13281]  pie_init+0x2a3/0x3f0
[  280.485227][T13281]  qdisc_create+0x7a9/0xea0
[  280.489744][T13281]  tc_modify_qdisc+0x1426/0x2010
[  280.494735][T13281]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  280.500076][T13281]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  280.505377][T13281]  rtnetlink_rcv_msg+0x77c/0xb70
[  280.510328][T13281]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  280.515462][T13281]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  280.520934][T13281]  netlink_rcv_skb+0x205/0x470
[  280.525710][T13281]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  280.531179][T13281]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  280.536488][T13281]  ? netlink_deliver_tap+0x2e/0x1b0
[  280.541727][T13281]  ? netlink_deliver_tap+0x2e/0x1b0
[  280.546945][T13281]  netlink_unicast+0x759/0x8e0
[  280.551756][T13281]  netlink_sendmsg+0x805/0xb30
[  280.556556][T13281]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.561866][T13281]  ? aa_sock_msg_perm+0x94/0x160
[  280.566820][T13281]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  280.572122][T13281]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.577414][T13281]  __sock_sendmsg+0x219/0x270
[  280.582106][T13281]  ____sys_sendmsg+0x505/0x830
[  280.586898][T13281]  ? __pfx_____sys_sendmsg+0x10/0x10
[  280.592211][T13281]  ? import_iovec+0x74/0xa0
[  280.596728][T13281]  ___sys_sendmsg+0x21f/0x2a0
[  280.601427][T13281]  ? __pfx____sys_sendmsg+0x10/0x10
[  280.606657][T13281]  ? __fget_files+0x2a/0x420
[  280.611274][T13281]  ? __fget_files+0x3a0/0x420
[  280.615976][T13281]  __x64_sys_sendmsg+0x19b/0x260
[  280.620922][T13281]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  280.626508][T13281]  ? do_user_addr_fault+0xc8a/0x1390
[  280.631817][T13281]  ? do_syscall_64+0xbe/0x3b0
[  280.636515][T13281]  do_syscall_64+0xfa/0x3b0
[  280.641035][T13281]  ? lockdep_hardirqs_on+0x9c/0x150
[  280.646249][T13281]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.652323][T13281]  ? clear_bhb_loop+0x60/0xb0
[  280.657013][T13281]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.662914][T13281] RIP: 0033:0x7f934d78e929
[  280.667343][T13281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  280.686975][T13281] RSP: 002b:00007f934b5d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  280.695408][T13281] RAX: ffffffffffffffda RBX: 00007f934d9b6080 RCX: 00007f934d78e929
[  280.703406][T13281] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000006
[  280.711382][T13281] RBP: 00007f934d810b39 R08: 0000000000000000 R09: 0000000000000000
[  280.719354][T13281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  280.727334][T13281] R13: 0000000000000001 R14: 00007f934d9b6080 R15: 00007fff4fdbe598
[  280.735331][T13281]  </TASK>
[  280.738363][T13281] Modules linked in:
[  280.742407][T13281] ---[ end trace 0000000000000000 ]---
[  280.747991][T13281] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480
[  280.754486][T13281] Code: 89 ef e8 e0 1a ab f8 4d 89 ef 85 db 74 0d e8 04 98 47 f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 a9 1a ab f8 48 8b
[  280.774149][T13281] RSP: 0018:ffffc900052ef0c8 EFLAGS: 00010202
[  280.780282][T13281] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002
[  280.788308][T13281] RDX: ffff88807c48da00 RSI: 0000000000000000 RDI: 0000000000000000
[  280.796337][T13281] RBP: 0000000000000000 R08: ffff88807c48da00 R09: 0000000000000002
[  280.804339][T13281] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000a0000
[  280.812358][T13281] R13: ffff888049ca5800 R14: dffffc0000000000 R15: ffff888049ca5800
[  280.820387][T13281] FS:  00007f934b5d56c0(0000) GS:ffff888125d1d000(0000) knlGS:0000000000000000
[  280.829370][T13281] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  280.835989][T13281] CR2: 000000110c29fb90 CR3: 0000000033ffe000 CR4: 00000000003526f0
[  280.844018][T13281] Kernel panic - not syncing: Fatal exception in interrupt
[  280.851587][T13281] Kernel Offset: disabled
[  280.855916][T13281] Rebooting in 86400 seconds..