last executing test programs:

1m17.117095852s ago: executing program 4 (id=967):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2b}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x3, 0x4, 0x0, 0x7fffc}}]}, {0xfffffffffffffff4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x70}}, 0x44010)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003fdffff7f000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0)

1m2.816913572s ago: executing program 4 (id=967):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2b}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x3, 0x4, 0x0, 0x7fffc}}]}, {0xfffffffffffffff4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x70}}, 0x44010)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003fdffff7f000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0)

48.121287172s ago: executing program 4 (id=967):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2b}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x3, 0x4, 0x0, 0x7fffc}}]}, {0xfffffffffffffff4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x70}}, 0x44010)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003fdffff7f000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0)

36.742449253s ago: executing program 4 (id=967):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2b}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x3, 0x4, 0x0, 0x7fffc}}]}, {0xfffffffffffffff4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x70}}, 0x44010)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003fdffff7f000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0)

22.974738879s ago: executing program 4 (id=967):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2b}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x3, 0x4, 0x0, 0x7fffc}}]}, {0xfffffffffffffff4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x70}}, 0x44010)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003fdffff7f000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0)

10.354886949s ago: executing program 4 (id=967):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2b}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x3, 0x4, 0x0, 0x7fffc}}]}, {0xfffffffffffffff4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x70}}, 0x44010)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003fdffff7f000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0)

3.278306722s ago: executing program 0 (id=1794):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r1, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x28}}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)

2.87715227s ago: executing program 2 (id=1798):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r3=>0x0]}, &(0x7f0000000040)=0x8)
syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60fca33f009bada57280000000000000000000000000007bf6b84b000000000000000000000000aa"], 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e24, 0xfffffff9, @empty, 0x2}}, 0xffffffff, 0xffc0, 0xfae, 0xfffffff7, 0x0, 0x0, 0x61}, 0x9c)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000, 0x5, 0x2}, 0x20)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r5], 0x128}, 0x24004885)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r11, 0x84, 0xb, &(0x7f0000000580), &(0x7f0000000180)=0x1)
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
close(r9)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', <r12=>0x0})
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x100c2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x14020, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r12}, 0x10)

2.864451679s ago: executing program 0 (id=1799):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x0, 0x2}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000022c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797ad00000000014000000110001"], 0x7c}}, 0x0)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x135cfb4307d517, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x60}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x18)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000100"/20, @ANYRES32=0x0, @ANYBLOB="2004000000009426ff8f2349e9cd"], 0x28}}, 0x0)

2.682094905s ago: executing program 0 (id=1800):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d79d8", 0xfffffe9f}, {&(0x7f00000000c0)="23ade41881a1e7ca07379924e2cb53138ec1e2ac415947eb6c7f56119ff98596d7469564e6d7c49134d1d57bf4cf20e6ba85156f3c5aa55a181146316537eceea0fff85f05333feea12645495ffa", 0x4e}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a23", 0x34}, {&(0x7f0000000180)="fe6abb1be48e556b473cabd427d746ca7d9bbf4f24ec7659b1c254940281f0a248dfc8c103fad1369a53e3402210b77170735064ceae5fcf381d21cc8960440e0a459705262c4c53065f369fe8e63bc7650112b91fdccaceff93fd8cdab5a479b9614318eebc5a609b633b114fe330c840cc077cd6a6f6ca2bca0cc48c06177e0bc3b7fe6320e9f2e5a824d74aa3cccac383bacd0a126a58fa999675ad5c41c171807570ac0501332c2794950f4633a074325e58cd43d58340513dbc10eaaf4ff3c4b8d98621267d8b1abdbf01d7de9a86c2d4373dd907da5a", 0xd9}, {&(0x7f0000000280)="1b1eb47967b88f89e960c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c1d3f6607ce5a2183a169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d45c1c15ca4d75cab6b1bb923cac1c51270bf577cf4c79ba54a6c45a345cc13208fa430c1e54548e5a9c5cf45337451511abc0a7d3539ac22191025d", 0x9a}], 0x5}], 0x1, 0x4814)
recvmmsg(r2, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x1, 0x2001, 0x0) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0xcc, 0x0, 0x2, 0x801, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_MASK={0x88, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x7d87f9ad1884bcce}, 0x0)

1.844452887s ago: executing program 2 (id=1809):
r0 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) (async)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={<r1=>0x0, @local, @local}, &(0x7f0000000140)=0xc) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2, &(0x7f0000000400)}, 0x20) (async, rerun: 64)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2d, r1}) (async, rerun: 32)
r4 = socket(0x2c, 0x2, 0x7) (async, rerun: 32)
r5 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r5, 0x0, 0xcf, 0x0, 0x0) (async)
setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) (async)
ioctl(r4, 0x8916, &(0x7f0000000000))
ioctl(r4, 0x8936, &(0x7f0000000000))

1.810630485s ago: executing program 0 (id=1811):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={<r2=>0x0, @in={{0x2, 0x4e22, @local}}, [0x3ff, 0x9, 0x6, 0x8, 0x85017ef, 0x8, 0x0, 0x8, 0x6, 0x7, 0x8, 0x9, 0x8, 0x100000001, 0x9]}, &(0x7f0000000100)=0x100)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r2, 0x7}, 0x8)
shutdown(r0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x10, &(0x7f0000000200)=0x60ae, 0x4)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x68, 0x49}}}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x9010)
ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000340))
bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e22, 0x2, @private0, 0x5}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r5)
connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e22, 0x7, @private1}, 0x1c)
syz_extract_tcp_res(&(0x7f0000000440), 0x9, 0xe8)
r6 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$inet_mreqsrc(r6, 0x0, 0x26, &(0x7f0000000480)={@empty}, &(0x7f00000004c0)=0xc)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000540)={0x3, &(0x7f0000000500)=[{0x5, 0x3, 0xff, 0x4}, {0x38a, 0x3, 0x2, 0x8}, {0x0, 0x4, 0xa, 0xfff}]}, 0x10)
r7 = socket$inet(0x2, 0x80000, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'})
setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f00000005c0)={0x2, 'dvmrp0\x00', 0x4}, 0x18)
setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000600), 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1, <r8=>0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r8, <r9=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x40010, r10, 0x40000)
listen(r3, 0x9)
listen(r5, 0x7)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r9, &(0x7f00000007c0)="f7bb7a468c5e4528778e7b4f341aee396a62aa1ce1c122ebfe75421d20efad31bf69399489a8e409d3a3d4536750f3efad7e93648a778df78fe093b1f434487c66f0f6c9746916431c", &(0x7f0000000840)=@buf="9af40cc8dd82cb6eda77612146a16335eadd22c3f7c8f2ce328e769e77291f69901fbffdd8e7f28b3bc7f8f4e42b4c383975ba6b4f2fd744c490268226eb657b5220adb5ad8dfc4389e19f0ef7f63374e4a9c7f5e148b70da1cb0fc68a2094d04de0a6c0de8c331f401ce146873aa59ef9a6802359a2bd9d3cb8ad0cbdaabfbbe062e8b3aacf53fd08a11d48a61899ba8726a5e1341c46c8076d29755a1a9bc16b77a78e2f1bd84708a563cfc499cb00ff0868ef935689eb81fce47bdc98d5b9f49a2a8ae1ac2d3b3cdba0a14b98b23ff9aee05c", 0x1}, 0x20)

1.519960957s ago: executing program 2 (id=1813):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={<r1=>0x0, 0x1000, "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"}, &(0x7f0000001040)=0x1008)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001080)=@assoc_value={r1, 0x5}, 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000010c0)={r1, 0x57}, 0x8) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000001100)={'lo\x00', 0x8}) (async)
connect$inet6(r0, &(0x7f0000001140)={0xa, 0x4e24, 0x7f, @rand_addr=' \x01\x00', 0x1000}, 0x1c) (async)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001180)={r1, 0x91, "c53cab2d1482466f8bd12a1754f3e10bc44538f5e8a45c68689b38ba081bae04c7cec5a840fd7aae280b13520303fa6dd5af37867197e973ecb907afcc2834f88d4a1917bb01073295a09ba7cfa87436d40c19f4e45a9315df6e8ae0784930bbf974d8380bb39f37333654147c11d11069ba87a884dff24cc7074a442790be2ad8eb53b10f89e742df14ada2027fb46504"}, &(0x7f0000001240)=0x99) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001280)={0x2d, 0x8002, 0x9, 0x8000, r1}, 0x10) (async)
sendto$inet6(r0, &(0x7f00000012c0)="21c56aafda6c2d9da5129b64345fe52f1959a7f9511c29d56892f996e669083d1010c151fd", 0x25, 0x20000000, &(0x7f0000001300)={0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) (async)
r3 = accept$ax25(0xffffffffffffffff, &(0x7f0000001340)={{0x3, @null}, [@netrom, @rose, @bcast, @null, @bcast, @rose, @bcast, @default]}, &(0x7f00000013c0)=0x48)
accept$ax25(r3, &(0x7f0000001400)={{0x3, @rose}, [@bcast, @bcast, @null, @rose, @bcast, @default, @null]}, &(0x7f0000001480)=0x48)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001580)={r1, 0xbc, &(0x7f00000014c0)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e20, 0x7, @mcast1}, @in6={0xa, 0x4e21, 0xf25, @remote, 0xfffffffe}, @in6={0xa, 0x4e22, 0x1, @local, 0x7ff}, @in6={0xa, 0x4e21, 0x1b593588, @dev={0xfe, 0x80, '\x00', 0x38}, 0xfffffffe}, @in6={0xa, 0x4e24, 0xfffffff6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}]}, &(0x7f00000015c0)=0x10) (async)
ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000001640)={0x9, 0x8, '\x00', 0x1, &(0x7f0000001600)=[0x0]}) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001700)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000001680), &(0x7f00000016c0)}, 0x20) (async)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000019c0)={&(0x7f0000001840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x4, [@func={0xc, 0x0, 0x0, 0xc, 0x5}, @func={0x5, 0x0, 0x0, 0xc, 0x4}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x3}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x72}, @struct={0xf, 0x8, 0x0, 0x4, 0x0, 0x9, [{0xd, 0x4, 0x3}, {0x5, 0x0, 0x8001}, {0xf, 0x0, 0x4}, {0x7, 0x0, 0x3}, {0x0, 0x0, 0x80000001}, {0x0, 0x5, 0x80000000}, {0xd, 0x3, 0x1}, {0x3, 0x1, 0x9}]}, @const={0x9, 0x0, 0x0, 0xa, 0x1}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x2, 0x5}]}, {0x0, [0x61, 0x30]}}, &(0x7f0000001940)=""/68, 0xd8, 0x44, 0x0, 0x6, 0x0, @void, @value}, 0x28)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001a80)=@o_path={&(0x7f0000001a40)='./file0\x00', 0x0, 0x4008, r3}, 0x18)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001b00)=@generic={&(0x7f0000001ac0)='./file0\x00', 0x0, 0x8}, 0x18) (async)
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001b80)=@o_path={&(0x7f0000001b40)='./file0\x00', 0x0, 0x10, r3}, 0x18) (async)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x28}, 0xc)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async)
r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001cc0)=@o_path={&(0x7f0000001c80)='./file0\x00', 0x0, 0x4010, r0}, 0x18) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001d80)={{0xffffffffffffffff, <r12=>0xffffffffffffffff}, &(0x7f0000001d00), &(0x7f0000001d40)='%pK    \x00'}, 0x20) (async)
r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001dc0)={0x0, 0x9, 0x10}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ec0)={0x18, 0x18, &(0x7f0000001740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}, @exit, @generic={0x0, 0x7, 0x8, 0x9, 0x96}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001800)='GPL\x00', 0x8000, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000001a00)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001e00)=[0x1, r6, r7, r8, r9, r10, r11, r12, r13], &(0x7f0000001e40)=[{0x1, 0x4, 0xd, 0x7}, {0x4, 0x5, 0xa, 0x4}, {0x2, 0x3, 0x8, 0xa}, {0x5, 0x5, 0x8, 0xc}, {0x0, 0x2, 0x1}, {0x5, 0x1, 0x7, 0xc}], 0x10, 0xa, @void, @value}, 0x94) (async)
connect$inet6(r0, &(0x7f0000001f80)={0xa, 0x4e20, 0x4, @mcast2, 0xfffffff7}, 0x1c)
r14 = socket(0x1d, 0x2, 0x8)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
sendmsg$NFT_BATCH(r14, &(0x7f0000002400)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000023c0)={&(0x7f0000002000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x3c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x33}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_DELOBJ={0x304, 0x14, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_OBJ_USERDATA={0xf0, 0x8, "d5d52f1744661ec17921731a82a23937fb074b42762bd14b0b0791c553098883737ef62e7ed1043694a19fb3249f1cb1d6adf94ec75e411906ca0f16a441a1c4468634c93a7e58d5a27d1bc517cd1163954f6ea1edb65e8ba990c991e6d42e3c29e05cd34f12f0b6eeee80c397ff75772f0cda69507a4200f48662cfb373a5c4a3cecb9750adbf599c4af0a3ff9f1f20380880b27a614caf0bea921df4100bb54b0067902e61c01284c6c5c3581845dc416b1f3cfb1401ef38beb05889da760d18b598b3d7bd647f2e400d541e429e631bceb1d81edbbb08538a92fc24c78894df5c1f32c6cee6a28114aa73"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x104, 0x8, "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"}, @NFTA_OBJ_USERDATA={0xbf, 0x8, "586aeeb5534d4c2c57f5347d4eaf2ec877f33cf74dba26b09552b9b0f4bd1ae1025c47196ba1a6833e2f0a9de1771339eb41de6c5aef3dfafcf85d58936e6f8c34cfa9fa58bfbe489376b45385258d00e3bbcd5bfc7784eb3fe5033df20d3b858c63be644ee4899144dc8699ccb60c027647eab8970b72e208c0e36b16030cfe285ee9e4f1b20c35a6c20f5da5cc4daa66d7808200b22260a201eea25c1cc2ee25d54d4b0f8fd4a363d36795ad1e416940588be08119ceee6ec167"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x3b4}, 0x1, 0x0, 0x0, 0x4000050}, 0x4044001)
socket$kcm(0x29, 0x2, 0x0)

1.310657032s ago: executing program 2 (id=1817):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r0 = socket(0xa, 0x3, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000002c0)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x0, 0x3, 0x0, 0x9}, {0x1ff, 0x4, 0x7, 0x1}, {0x0, 0x8, 0x5, 0x3}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x3157ab7aba0d36aa}}, {0xc}}}]}]}, 0x70}}, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x30}}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0xfff, 0x6d}, 0xfffffffffffffe95)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
read$alg(r0, &(0x7f0000000600)=""/4096, 0x1000)
sendmmsg$alg(r6, &(0x7f0000000040)=[{}], 0x1, 0x44844)
socket$kcm(0x25, 0x1, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x48, &(0x7f0000000500)={&(0x7f0000001700)=ANY=[@ANYBLOB="5c000000c512b09ba8c20f59a55cb2436c2fb4e4eebdda94f3398e2ec5f4881f031f7b06a00540761e2aa4790a1ea48cb981e8dd1ebbad643e7d746306d8b22d584069649111c59fd0efd70735559c03d2ddeba7c0a422e5f4b49c80b4c961d7fb99d4ccce074925379631e82c6e7c61f2b2e1ab9d0a3a4b53569b83c6a4cf36db1a4e416e1907c06733ce7154670c8c715f5f216f4d24eb75b443cb572eb9df7a5dc2a773", @ANYRES32=r0, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000340)=""/83, 0x53}], 0x2}, 0x2000)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=<r9=>0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000c001c"], 0x144}}, 0x20000000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x28000600)
r10 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r10, &(0x7f0000000440)={0x28, 0x0, 0x2711, @my=0x1}, 0x10)
r11 = socket(0x10, 0x3, 0x0)
preadv(r11, 0x0, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYRES16=r9], 0x38}, 0x1, 0x0, 0x0, 0x20044810}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)

1.052226419s ago: executing program 3 (id=1822):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x60000002}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0xf7, 0x0, 0x0, 0x70bd28, 0x23e}]}, 0x80}, 0x1, 0x7}, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x10fc, 0x35, 0x8, 0x70bd27, 0x25dfdbfc, {0x1b}, [@generic="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", @nested={0x8, 0x13c, 0x0, 0x1, [@nested={0x4, 0xb0}]}, @generic="e5fbf7b514d10630505635eecd6b47a15bbe3e32f3a683b4d64c193121f94a88a67060146bca516fc11d04c09b583517c0699320558e618ec14aae04eedd411b90e25204521686bdbdb3dce29062fa9613f591ae41eff22b0d287895d9ca42331f121b0f5bb23f149d19ef7041ccdf404f55f49201439a8b965d1657be83985082d5fd360aae71d044e98885dd4d62c5fa94a9adf5a93d98b0ceb6a37c204dd114b46a99951fac0a9509ca4f7f706878fd88d32641cff7f7cf79cf34e5cb6d9ff683737cf5580683943d1699bf30e3c8d0bea399cc09a1aaa1fc672e1f3bb1"]}, 0x10fc}, 0x1, 0x0, 0x0, 0x40000}, 0x5000c040) (async)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), r0)
sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000001480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x54, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x63}}]}]}, 0x54}}, 0x4000000) (async, rerun: 64)
r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}}, 0x0)

905.343209ms ago: executing program 3 (id=1823):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
accept$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000080)=0xffffffffffffffd8) (async)
accept$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000080)=0xffffffffffffffd8)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000000805000000000000000000030000ed05000240880900000900010073797a3000000000050003008426860065ea3e72a470763b4618cd3a1b3d30ca8ad6a887fa2fe5a9fdbef1eca47f1e5c017684e8361f0fd6cc2475db0b6b90e9a753eae407a9b8f9e231e21ca1db94f40cb1a0d4c115c804c742ad8991e0410255e92998bc7e626fda4762d4c7eb3c12fd47640d9300bb60beb056a207b914f4527c6ad22bd7d6cbe09688"], 0x30}, 0x1, 0x0, 0x0, 0x4048041}, 0x40084)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.current\x00', 0x0, 0x0) (async)
openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.current\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000000))
syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff)

806.341886ms ago: executing program 1 (id=1824):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5000000006a820a00a0b040000000000000000020000012400040320000180070001006374000015000280080002400000000f080004400000000a0900010073797a30000000000900020073797a320000000014000000110001000000000000000000008735d40d6e443d8c4f726c1a230866e73ec4f89ffe6de50563eb0faa777b03bf4cdc0f6d3f89219259746fb4e1b555d49f53df6b6d8c918abafca910fd93e1fc3d03b25871adb581a8d4c7181864447f3c3f639f31ec338c13e57f29b5edebb54aaee2911329d7dda5567eb1d7af672041a4adccda552c3ad437"], 0x78}}, 0x0)

805.00875ms ago: executing program 0 (id=1825):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=<r1=>0x0, &(0x7f00000000c0)=0x4)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x65, 0x65, 0x6, [@datasec={0x7, 0x0, 0x0, 0xf, 0x1, [], "c3"}, @volatile={0x7, 0x0, 0x0, 0x9, 0xfffffffe}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x3}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x7a, 0x0, 0x13, 0x2}, @const={0x5, 0x0, 0x0, 0xa, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0xd}}, @fwd={0xd}]}, {0x0, [0x2e, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000280)=""/143, 0x86, 0x8f, 0x0, 0x55, 0x0, @void, @value}, 0x28)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7270000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70406ce832bcf5adf00000035579c9c17374001f4a0bf3a15099a6bfa907349"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x1c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, 0x0, 0x0)
getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x2e}], 0x1}, 0x40000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff)
r10 = socket$packet(0x11, 0x3, 0x300)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000e7a697318aa026f4babd3d0b503b000000002fa15e0000000000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r11}, &(0x7f0000000280), &(0x7f0000000340), 0x12}, 0x20)
setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000180)=[{0x3c}, {0x6}]}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000680)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_PROBE_CLIENT(r8, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x7c, r9, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x8001, 0x20}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
sendmsg$NL80211_CMD_PROBE_CLIENT(r8, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f00000001c0)={0x64, r9, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x10001, 0x40}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x64}}, 0x0)
bind$netrom(r7, &(0x7f0000000000)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000380)={0x3, 0x5, 0x6, 0x2, 0x1, 0x3})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x14, r14, 0x1}, 0x14}}, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r14, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_TID={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r15 = socket(0x27, 0x5, 0x8)
sendmsg$NFT_BATCH(r15, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1cc}, 0x1, 0x0, 0x0, 0x4000001}, 0xc000)

735.605616ms ago: executing program 3 (id=1826):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000001529000000002500000008000300", @ANYRES32=r4, @ANYBLOB="0800090005ac0f000a0006000802110000010000110007003e633fbd9293ab0300b20546cc00000005000800010000000800370000000000040034000800350004000000080026"], 0x68}}, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r0])
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000440)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @link_local}]})
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000001529000000002500000008000300", @ANYRES32=r4, @ANYBLOB="0800090005ac0f000a0006000802110000010000110007003e633fbd9293ab0300b20546cc00000005000800010000000800370000000000040034000800350004000000080026"], 0x68}}, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r0]) (async)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000440)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @link_local}]}) (async)

678.731079ms ago: executing program 1 (id=1827):
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000013c0)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @private=0xa010102}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000080)="aab370c2c5a7bb320291d544fc80b51ce605b5804b415c6d387a0306c4ff4dc45f4d874b9097665f21f03b6469431d6c49a11165d9c2af051e8e5d27d969ca6c6f33e5c6202534e0b328ec171f17622d2febd113963b2b83ac3cd2cb8276db85b6fead71d7e6fa81c62ae03b31373da2ac831a86258b1e4bb84859ec5fe562a28691723499471651349f49d0e0822be4becaf7a72e948d4153ae067a863c3aad290682ec6b371b494fe87986c1a4", 0xae}, {&(0x7f0000000140)="2a75f0936c073a02939d1652f156e88c01f2522b3d567e5963c6c2e34fca22e7e7f193866e435bc685", 0x29}, {&(0x7f0000000180)="2ca972414fa5159de4bc9456ee04cb006207bf13e7c4ff433640560dc321d64c7905bea9ed22f9784497cadc6f53ea4882cf283d8b1f041ed7d8acbbeeb32413134872bb95a93a5338548b900b29adaa1b429802ab3ab7353e6e6b07ff2d8cd1799c5c3896b23c052318a04b56dc6681ebb41c1672c1a3b712b33558d9700823545665227649efc32c16ab085c9bfa921d263f64f72d06aa7a305b1d42", 0x9d}, {&(0x7f0000000240)="46006d56371eeaecf1b3395be23919a57964b0ca89415843479ba2202e196d3affeb36352fb40c75adbec43c5dd962089ed4103e1639bacd841e87b2bf5c42b6d29d58b028835dde4fa25dc37aec7fdc2b3099e3db9b5db1c908751283daa9575207988923242a52187c1699fbd135e2ceab84ff515403c130cfb5a867b7305e8563b7d1c4cb7ad3fe75ff101e3907d5319cf7d1efed0293510312aa539e7fc1759cd15cbe472afc772c4e2f558b91d7349287184211d4e5425ea986ea295ce8c906485468fa5813b36afa91e09f67f35cc0ba03e2e29f9b2d592c6bf268bbe7f69a5fcf8635864b7245b6c62d1d6d89d9713c6ad7f794301f994f260b625ff9e0e1868dec42be9e11da524c59a664210db24a0f689cf8ac9cf6d1c8b909128370e6d4e3af4f627e78274eca0d4638849d2c1a2106424a47a0316a000e285cd8e3238b0eec8811a1c806e4b192fa8d79f47449dbcbaea8e9fc9a5ba51d674c643fceb62a550f35a5c71b3d155c53bb2b8337c56381ca52bfe05ad0c49f7657721d7cd48b823ebf3bdc791f9e21ee78d50ecf8ce246b55ee6da387892ae348bf82c1929f9c4411940e9d05d76711581ce8b9884b94e52cd993fd2f2d419ec29be80a7d4d7bd58afb9a1d7b5988bb62abeef891a2f19683d8f530a77beb2b7ece1f91b69a826dc5be332f7359bbeddb13eb61ed7ebee8a535e231e00a579513180d14c2dd214114acd84ab2a5a50b90d7a3c78e431c7a378fc0d7ce15179e678debe69ebe0c1a4a21bc53c4227a41f8bfe378cfc46a452077532ad80283b15698cdb024f916bf506765e4c39c69b08bb79ff2288833cf2328bd2232427ac70e9d47a62cb81fab59b9a9c36f63ddf370cc6c9ef98406cae537c406a3c6c2ec98ebb16b96cf4178e40007da4962d9e027ef5472dbbebc43d0b4459642cdefa64a54b726780b465a493ad8938fcf27e2d11b728c5fc049421f3e3495fe2e0511a6dd4d52421a7dd79a5e616556ceda54fcef76a05a7252cc019df88567f1d4fbc14af21a75adefa933c3b04521a96f7b98d1d7df1ed5996286face745a288393d9e26da877b95321986cb8a714e55300b286513596470e4e9f78d2c2e311583aca1d68185cd4c2b20b62b66070ec2f1e0d9d59f796dcdc3613fcf74f1a7359060068298975b827b2b9e79bae873ad46a89f43fe186d278800262510ad734528fb029b5b85b074c6fa914465246f7dcd1192f687c471331df26137916efeaf47f1ba7cac9dd24790ce2ccba48f3549b2664e2be831db733762d5e131e7a4a556fada6119d33ba774d5ded44a3e15bfd888dd9abfbc424b630e8d8f48e4dd1959cb915085dfef5113cac6bbff87743e340c45f00b9b87a37230388540e61a0c63fcc1eb733e902963ebfcf659a8f5a00cc891237eae89a093597a17737de5c9cb83b2b936a6eab19baf69587c45bc149dbb0c2abe5f40cae700b2c69e7d45684259c9a90de73022c893a29864e2c6bccbad6b91609bb4e7b569b00935dec5c079ddc2d3f0092193a91e4572c7a98c6612419ebca16f824a0dcf8ac198bb8dedff7729708f2beb8138d2cdaad03b08c3fe35763e143fb778173ef79ec04775e86346f0516072a533d7bf0e2674d496a2ced3f0f209a9e4779a97435e7824b7705f1cf32a2d37c246683ed9342e6bad40ad1174da84a156789aa660b0f76f65c22fc15c57fc8a3d3d00fea92ac53e22bc5166915b3f1e1f5cff674607253bf3a208c2c75caa78909f31b231b529d714b80ee1f109182e2a54666f30555a8586ef04b114048afe63ef452606034f6f6f64f6dc3bda7e32aa7fd38e93b3b75f250d2e0b8fe24ee0061e438ce6c81c0a6aeab7105133aeb40c5ce3e1722befe3ff1678df5c8d39ba7aaf7af1a4b55c5075bd7a06fb3fc4de62b7bc18ca2db86931c6a4b16879441d05b463949a1433e611bef828dd3ccaf49bcf6b3060f9d902508b70a00cf7c4e18ce298ce695ea5cf0a66c93d1b8fcbcd406894178f82181c092602d556898a652b60a33810fd47ecd1fd19fe60f1429b5e4b468f63e9e2a1b0d53cb0accf6034151c732beac6d467ec33d4c2b8e31c6dbe5a3061353a98c3ee6aae0ce33df91265b02a2c33ea965a85a60956eeaf8e85ebc8010794639cce7c6ab2e9430adc54d69e2a45437b9370445e77e24bd4c0cc49c6fdd2b64fe82c89c92f882dc1ba6e84be499a49923a2c9d5a1a74fb9b7dd683784f7b1127af3617cee779fbc5723fde7048dfd7cbd3e4840bdf0a02db3bc25a0e09f4081832411940412cc031e6ae90fe6726714772747dcf82b0dc27d885e7edb5165b3892794f5318c2d1ea23fa1663620dc8c5db9fbe1b39dc326c9379c9414b48d79f3d6b8f83448b100b99ec61e987da8a562ba4821c68a192f7f90caf392f2dfaa8b9d5dad075426fef1d2e1d971e133a3425ea65af0bb2efc00e17ac2d5a6bc9ab0e4a505079c5141855c2a0961a3e88a90f2e66bd3d9fffece6de8900476d8bab0e4ecbe4c2fc801be750cb5406da3bc2ce490f2a7c26c3c7ac32cd70458bf53beaf9337420d33a475efe0a49c4a6fd7c8e0be9db30c0e36cdfdaca84268fa26fcd2ecea61de2d1a6130e75b42b80313bfec3ef25afd88214f49c9444e0793432505ad489bdf30e8cd99eb1a03510f85788a1a50f1c7c063f64912e638cfad929a69881acda12932b07dfa32b799bdf7743fc64066369f6809e3057f945d439b8a9dbb537fa96696b260e284332f0fd34f0b2290a8a3fcbd4e9fba41d02510742c05d6b26ced01bd615fec113cdca422d8fca93d3f9527f39e3b8fd88c77e0d13377576d55018aab3a29af945fbc4c96f7a18b0198e9454dfe6952a35adaac0a0c61955699293288952123e2c38586bd298e04ce4e222edc3b7459b12e36ac41d637f1f4bda29f624fbc24e409c3051caa2d72c0737d9b657b51d593aabf9e195407c7598e813fedd7e458af5b0597a39c952d4d7fc0b915f2bffd676bbbfe3cd097a2ea10ff3e35f68ca3bbe8924f4c8a295b94b6b09c7cf592364af73ec5fe084126bd4984a3dc1aee95077fed68c135544f29c20d6ad11018b57f3a68bc28eae5aca4b805f2f68bf7da1a0d81d9f0d9d2de79441fd71a52e811d32383b09307509f26a364b71b2837afa0c4374997ab63d2dedd7abf7f35bfceb76292803d4a6de1dab95ca3ca333fa1c5f969043e9b2f690afb283853e2c6cdc458dd36307db0a9cf5a59ea0edcc477fb1103800ec454835bd0b248b2195014b6e59320024a772b1c12751120af1d4dcba251d9ee908c82f2bfdc9ea043ba8efa9ab65dc6014f227a6cd4bf20c1956b3737934a3f0c4a639b237e700e4bb0845d1623b058887953797d47d2678b0f753dc51f782b11719a5aac8d3ba9092353b804a7f5fdfc2d509da1fa65026cd636d29557068edeb6eee9b957cb71d9b796d7607a0455a4124ea0f7ef17cc11f76408373d8c7c1529d807a240373240554c182190d4ff06771b7a48750894b44df225342309391d11a190fe63d8ad644b1dd86061d9e3f1338ea07ff6ad6ffd3ff27651209a046d10be580158b4bdbd48bf36233cf48ecc5672d8b451beeac4d55af0e368b0753b90414273471738ae970658203187ac04ab16f048d26fba020571519389b6090ee3a45aa13a68af6c3ef5ca4383330d55f7e9e7f44a77d8d9f34edeb6d75d55778c50cb53a222ad8a1438c601e3ad569091910cc46607052f7fa347d29ce0d9d69d47919b9c141debe4c0936471515e53137647fd3bef7b652e076d7b09c4902b6eedd40b3d6fd0643269e18233705a86a6006d6af93593662256e1dd081d90fad16fce71b0f51a8c0f6ecfb4356a6d13c803f8f6e0862dcee40134ba60ed6f28521bd23ad4f20e36fa98e953fa11117a43defb25924fe38bf9429dc5d9331f48305d40adead7bd78a2af2cef1d5974fa19b5665e045f40b58752bcc7fd3dde61aacfc6f88b7c11c2d6a87e84a3fbb7d5dac6e4b72a523f704e37ca9f79c9231fe779e46af851a569c0cce3f423c70076f0be6da755049bef0e04ef3347b1de2ccef2e5002c9e6a9f97b7a7bbfd07cb06115bab154db10f72021f59c991e271bb23fd61bf1d181065443688eb02af2b50f1a96a06bcccc33b29a062f53e6ff1dae60636149bdc3325e428a213d8dfc5ef4de95aa8ba6e2165df69a174cc627c94fa4133ebdaf78153ea8f6d059d50a61a4e4add0644288019f13d23ef3c508bdeae12b07622898f4122ac15dca06ed98c78efbdcc9fe75ed47dcd2e405a78ffd8692d9842e104299b12c0b307ca3ee72196e1552fc5b6e9a4dcbae65a7b896e9ec21167a685369f95f1af844d9cfc34457d15084c0120305fc50bdc918ddd18d9877bb5588fc7b67a9e26a83c695dca569e87f9eb18585ed56c472e048e2824112548cfc66c02c1d49e44282c27d68e24af97b746cf17533ffa98ab006c72435b4763cee22c865fa6786a3f9b413df71cc21436441ec71a25d695da12a11bbe0f054c4aa47f6c290220f3f3e6384bc5e9c4ddfa709c64a62674b2df79712e475230094d0ccb67f845ae957b852223030e35f70599e2d026f0f7326209e677273351efe6692a620474da9491a5308aa3af54e61ffc659deead5880272f91408a487a5cfafb3c705b814e5f5f51c0b50f95e8c6888178746a5be1f4adbb256b29b89155530624e032e913ac7f1bc4d8ad36a2cb08483cb30583a72659e53b0c1486515f4fed3e0f572ae8be5fc6b2af575cb8729157a86353bfcd2bec817f78a60ab3ef35d4b2c5d1018489363b5df3124dd68ba6d415acc849375b0c2559f63828f4769032c2d0ea39d8791d4efc24481e123c1af9446bf69dde42f9b954745dee96b68f3ea5b430eae2ba99fdd9a182aecd62f39fa90b4b370710273ba8067884ecb9ee270ef7044dde1c6edc813c2458adeb2e8abddad9fa54f85f0d7793de370b97b622a1f3356b37701d64a911c828dcbbe69335fd9d2e253d89d005326599a59b0aabd898c3d2c5faa3ffff573fd821c505a5595dd62afaefd42bc43d59f9e71ca26388f9c854db5f0a3b1bcb7578036e6ba73eb4fa3416378bab6c50a74b5953413ad1bbf4282fcd030a4404889d761f2befc48cd3c4f8070eaa4fa277b08a40c5726bd20e76708033b6b056aa3cec191f0b8b9c7abdbc6ae3a1c4cc91e45f4e322c1aa542c9f8bba8a9119e4bb54e0cb29152f330af35b51aab2c04fdcf99d794aac10ae684c4868f63072edafc7680919796f4999d2200cf18260db2a7f79d296fa26aefe98b2f3c4f12363b281c93f0bd4e62370ed6791cdb4ec4977bcc7cdd5b110d7152649483a04b7ea0904b31ebc4e9cc291c010182ce806720cd752750660f6effce121923b22bcb1c3a77a00ba7108ebf3895a574151e36b97fd16ec1d11d41a384b06674f64ec74b8ff0fcb68533affacf873d58f0a2430ed757e9d786093329d4c8b7eccc361ff00c31695fa6d8c0695cb846ec945ade4d02fa610a5850101e12244758cf6f5f48508712d24df6d62df07b2e3b5921da1f3b823f2f33ebce858e6a2b76b87a620344bf67866eef1028f9f042a0d3b53624ad148de9f090ba2e195d858bcd4a7361b6422b2f4d0e14baa3b0a107fedbad298edbbc65545d67f61e16684c2d1b384b99339e613f1c6ab42744874496455a5f3f9ebcd6b39e289c0f77e3c818ff96e2a9b7d76621b707ab4fa55e4de814995d3746da7081892aa71bd69aff6c600305fe2068c709715a95f", 0x1000}], 0x4, &(0x7f0000001280)=[{0x60, 0x11, 0x1, "c9d44f481f541429f575b0ff98fabf74bf87d1f73ec8a1cfe4727a71f6888791b223fa4a202127a6beb934e8d0d73a6514f125297e1feabb9a5973c05284f9c932f575c46ebfb8aa67ec7f01"}, {0xe0, 0x0, 0x5, "cb9493f7d29765b37bf2af94f75595714a7521299edd65df8e5f29bc5e5d6e31921bd5ca7f092682ad34858c6f35cf4e83dd3aabc307dbe7d747f16206c3fcb7fc233ebf717ad9b1f1c8b3b23e467b84585da05a7eab7e0e0d825b2790a1a10f9bd2c9ad775ca8be46f24ace2ed306634910fad3c514e39b6cec7c1c4828ef42dfd667c814c72272c9d9c7fd624b15506ff95d3c7e862077612b7d92c95b3256a22bafd8b59d87974613421261a88670203bc6c8ce503157cd513931661dfc0b9d8ce5bd4285b0a9d1d59a09d00bfcf5"}], 0x140}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f00000015c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001580)={&(0x7f0000001480)={0x100, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x100}, 0x1, 0x0, 0x0, 0x44014}, 0x2000c000) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001680)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000001600), &(0x7f0000001640)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001740)={{r0, <r4=>0xffffffffffffffff}, &(0x7f00000016c0), &(0x7f0000001700)}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001900)={'syztnl0\x00', &(0x7f0000001880)={'syztnl0\x00', <r5=>0x0, 0x700, 0x8000, 0x9, 0x100, {{0x9, 0x4, 0x1, 0x7, 0x24, 0x68, 0x0, 0xa6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010101, {[@rr={0x7, 0xf, 0xb2, [@private=0xa010100, @multicast1, @rand_addr=0x64010100]}]}}}}}) (async)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=@bloom_filter={0x1e, 0x40, 0x6, 0x36ba, 0x80, 0xffffffffffffffff, 0x59, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x3, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ac0)={0x11, 0x10, &(0x7f0000001780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2cd8ed91}, @call={0x85, 0x0, 0x0, 0x14}, @jmp={0x5, 0x1, 0xd, 0x9, 0xa, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000001800)='GPL\x00', 0x40, 0x27, &(0x7f0000001840)=""/39, 0x41100, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001940)={0x2, 0x9, 0x7fffffff, 0x48}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[r6, r7], 0x0, 0x10, 0x2, @void, @value}, 0x94) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001b80)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
recvmsg$unix(r8, &(0x7f0000001f00)={&(0x7f0000001bc0)=@abs, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000001c40)=""/24, 0x18}, {&(0x7f0000001c80)=""/245, 0xf5}], 0x2, &(0x7f0000001dc0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118}, 0x40012160)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001f40)={'veth1_to_batadv\x00', <r10=>0x0}) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000001f80)=0xcc, 0x4) (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002000), r9)
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000002100)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x4c, r11, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x89}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xbb}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008088}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000002180)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000002280)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000022c0)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0, <r14=>0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f00000023c0)=0xe8)
sendmsg$nl_xfrm(r9, &(0x7f00000026c0)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002680)={&(0x7f0000002400)=@newpolicy={0x254, 0x13, 0x200, 0x70bd25, 0x25dfdbfe, {{@in=@local, @in6=@private0, 0x4e21, 0x7, 0x4e24, 0x3536, 0xa, 0x20, 0x20, 0x73, 0x0, r12}, {0x7, 0x5, 0x2, 0x1a, 0xb, 0xfffffffffffffff8, 0xf815, 0x8}, {0x5, 0x9f, 0x1, 0x7}, 0x8, 0x6e6bbd, 0x2, 0x1, 0x0, 0x3}, [@extra_flags={0x8, 0x18, 0x2}, @coaddr={0x14, 0xe, @in6=@local}, @algo_auth_trunc={0xd2, 0x14, {{'sha224-arm64\x00'}, 0x430, 0xa0, "018ef437fd5895114733f068e0c798204f05c5a52871522ea3feaea21d6bda938670c8430d2fa88cd217f10e335f22d86e754331710aafe45f4bdf095a40960883167bb8830d4becf96d048253b63c6f3ffbb877ac529e233b23c9bc26610489331ee1ec8831f8778fb2aed0b36f2dbc8ec60b0d8cc99ed0bf9b253622b8a7bf2a8a6f7a5cc3"}}, @policy={0xac, 0x7, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@local, 0x4e21, 0x2, 0x4e23, 0x3, 0x8, 0x80, 0x80, 0x88, r10, r14}, {0x80aa, 0x6b52, 0x101, 0x6, 0xfff, 0x1, 0x8, 0x5}, {0xfffffffffffffff2, 0x9, 0x5, 0xfffffffffffffff0}, 0x7, 0x0, 0x1, 0x1, 0x1, 0x3}}]}, 0x254}, 0x1, 0x0, 0x0, 0xd4}, 0x8000) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002940)={{0xffffffffffffffff, <r15=>0xffffffffffffffff}, &(0x7f00000028c0), &(0x7f0000002900)='%+9llu \x00'}, 0x20) (async)
r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002980)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x0, '\x00', r13, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002a80)={0x6, 0x3, &(0x7f0000002700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81}}, &(0x7f0000002740)='syzkaller\x00', 0xd, 0x94, &(0x7f0000002780)=""/148, 0x40f00, 0x48, '\x00', 0x0, 0x25, r9, 0x8, &(0x7f0000002840)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000002880)={0x3, 0xd, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000002a00)=[r15, r6, r3, r16, r6, r4, r9, r9, r7], &(0x7f0000002a40)=[{0x0, 0x1, 0x8, 0xb}, {0x4, 0x5, 0x4, 0x6}, {0x5, 0x1, 0x2, 0x1}], 0x10, 0x7ff, @void, @value}, 0x94) (async)
r17 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_KEY(r17, &(0x7f0000002c40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b80)={0x54, r11, 0x200, 0x70bd25, 0x7, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "248c0c41df857ecaf80b9ecd30"}]}, 0x54}, 0x1, 0x0, 0x0, 0x48845}, 0x4000088) (async)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000002dc0)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002cc0)={0x88, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040984}, 0x4000844)
r18 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r18, &(0x7f0000002ec0)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x3c, 0x3, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
r19 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003180)={0x1b, 0x0, 0x0, 0xc48, 0x0, r6, 0x81, '\x00', r5, r7, 0x1, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003240)={0x6, 0x30, &(0x7f0000002f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}}, @ldst={0x3, 0x1, 0x1, 0xb, 0x1, 0xfffffffffffffffc, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r16}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r16}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x8, 0x3, 0x7, 0x20, 0x1}, @map_val={0x18, 0x4, 0x2, 0x0, r15, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003080)='GPL\x00', 0x3, 0x21, &(0x7f00000030c0)=""/33, 0x40f00, 0x26, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000003100)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000003140)={0x3, 0x2, 0x1000, 0xffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000003200)=[r16, r9, r4, r19, r16, r3, r15, 0xffffffffffffffff], 0x0, 0x10, 0x7, @void, @value}, 0x94)

598.265802ms ago: executing program 0 (id=1828):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @handle=@pci={{0x8}, {0x11}}]}, 0x3c}}, 0x0)
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000001500)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f00000008c0), 0x4)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000e4f4849ba7be0626000000acc039f3161f5bb2544823f32a43390b1a79f4a9cff9e0a048d304c32af8759ef0805f1c18556c4db190639e586416c59cd0eef82a26033928e76d0d7b8c7219400ab0aa581156f6c5cd7a05e3b450cae8d197d7330694b15bdbee3fd46d388f7ae9280a4da05cdb2befffc06e55df403771a60775f5285301dc019cdfd296848ee145b75c869bab0613f18cec13b08bc2b0d4dd4f667aa6f34a251d8c9707531b590e52a2dc5622", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xefffffffffffffff}]}, 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509020000d44affe5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

491.351759ms ago: executing program 3 (id=1829):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x200000100000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newsa={0xf0, 0x10, 0x133, 0x0, 0x0, {{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) (async)
setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000000), 0x4) (async)
r3 = socket$netlink(0x10, 0x3, 0xb) (async)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..'])
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
bpf$TOKEN_CREATE(0x24, &(0x7f0000003000)={0x0, r5}, 0x8) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r6) (async)
socket$packet(0x11, 0x3, 0x300) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000000008d"}) (async)
close(r3) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWRULE={0x144, 0x6, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8863}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x8000002}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0xe1, 0x7, 0x1, 0x0, "331b51e58a6de8d9e23045af86f973692c1a839b71cf59104d3e29ec2b8ed14dc88ba73dc4e988967008837f196a3062268d42c5299ebf82756ee3310c2a82ee83c588d2008c6e75b37e4e927a65862e4d952e4d14e03d27f8b7716ef6def1d6e4da26cde9fc77b178c59b4ff5c4ab01d5e51fee3da878a994e9d87425226f57d6912cc11957b038e1fb011f8001ed2784d52073c18ee65ee9d4156dec9943158a2cf1754a5fb29cd24bc5b9c33432dab13bdea0c2d53cf1f8c659c1cb7e7b47d6f4180daf60c3c7735eb42861bb77e2b8603107a942b8bcb6aa71ec07"}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1c8}}, 0x0)

442.420502ms ago: executing program 1 (id=1830):
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d3"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)
recvmmsg(r1, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000004f00)=""/199, 0xc7}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/76, 0x4c}, {&(0x7f0000001e80)=""/249, 0xf9}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x8101}], 0x4, 0x20, 0x0)

321.660768ms ago: executing program 2 (id=1831):
socketpair(0x1, 0x1, 0x4, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x0, 0x1, 0x1, [@default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) (async)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x1, @private1}, 0x1c)
getpeername$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "c0cba3304a37969f", "c53b9bbe497fd10d105f531d10272f01ff7f80f1c321f0d734533d0f4c2bb297", 'GBnH', "a174fb31b19ebc36"}, 0x38) (async)
sendmmsg(r0, &(0x7f0000001880)=[{{&(0x7f00000001c0)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)="b790296de2c5822a906d1b4c14659318ec25589d2424e2de605171a63ae40318c5", 0x21}], 0x1, &(0x7f00000002c0)=[{0x1010, 0x10d, 0x8001, "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"}, {0x68, 0x84, 0x9, "66cd2987235fcbafb82e64adbe441580acb7a82445e579e8996bd5409d2f88b77dd147c6bffcab49925b9b11e1e15c2a12d9ce279d301bbc1d9521962f7a8ce425e757ed2684c54a9d23c062cba8271d7faaa93ecf"}, {0xf0, 0x1, 0x2, "4c73e3e02e653fc0052d847c092c732c5e69516eb334b4ecaac9e20a1a70c84b8fa23f788c95b094bd4f9f379a6cb0e5a972ad0f707711bc586712b8312bd4f6ce4b1b0456de2178394ba5a287d0dfccd47cf75d2a269b0c9f77af444221204142251883f5d9e3ab1907cf6a1d45b4135e811a16b03c39ff6f53e923cc5fd9f18bb3a84ea8f704b9e9f28214b0828fd6c44a59cc082f3c6fcc22422969b091432f161ff03ea334868ac17de7d39b5182238b6783543f541f53dd46ecd4c16f5d199ea1084e455e894e1064bb74a47b25bb7a142ceb84b8874984d2c9"}, {0x70, 0x10b, 0x3, "fab483ab0f7a0ebf0a8b250faa163a30310b629903630cc0e81ec11782d58700bf7b5af1e243206da55da23015a2a388a08de16fba65373fe3e4dba1dda416113c3ac954e1df9c92d080a5f5d024b5f5345ad5c7f9168db96872305a06"}], 0x11d8}}, {{&(0x7f00000014c0)=@tipc=@name={0x1e, 0x2, 0x2, {{0x42}, 0x2}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001540)="53edd15a5de41eacad8efe71a03df25a5a1bbe79f8b82d5b7fd051c0b91ad01ebef6800cc1c51694e0a717c96694da070f96ec2c76739705837cd2cf055c00bb5d8af423f4f327428ec3cc52ffa528771f559984e0f730d2a77eeed5199511e475cc9bc9ebfe6ec36028fa90207990cd", 0x70}], 0x1, &(0x7f0000001600)=[{0x68, 0x111, 0xa, "be2825116dbd621441cc039dd1a0bd37f2dfdfc944bcca3f5ff1f23831399afbe0c491feb02251d568cb78bfa71a6c79a715c5c722e04ff65dda7477db629f33e9203d0bcb47199c0df7b46f0541472cf8"}, {0xd0, 0x115, 0x33, "4b3aba7ff8f8885ce136e085f1db04453f12df21ac188f9fb4333ead960034127aa7f79bc1a94b3b2465db9ea775d12ae7ad80e73936f7ecca2630ad4fed068b0751d2b0a9fa5359e6a89ed6cd2ddfc138cbd62985d1afb13895bbe5dffcac6da7870d1453b43974fc56406c817bdafcf6a1699f320dcf364415356968a747c22be350417fefc0b6c9950b8f54c1949f12539580385ff06728c5f0fa760977a38824327abf96798d0cab6d630bf8a165b32a421ee06b4e7a1e4ea54457"}, {0xf0, 0x115, 0x100, "0d4d63eb59768d718eb94fbe0a7ed37191aeef076d800ded78f6c8b879813bc65c74b1d7efa0635f1a277c6df206aeef80017f474e857f633bfcb0a367d9843819a243c44fa287ee7d461d18fb5c941cc954a19c74b08b46fe8e3a138e5cb00c5a90e0ddaba2d89a1a35d90a7b0f827a084ab6408519e73b23e84a3b1a16937e9ba6d5a21f11bc813baba878a310e0124e1bce31d49dae44627b5d746c26131499b8d839c21015a43d1b32e284ad2b223c9464cff82ed3913311bd8c04672c1a62c2e2f76618e7001e3dab5d3d68b86ff7f08a5fa5824db9e3715377b86bb12d"}, {0x40, 0x116, 0x0, "4110abc2ef01a3b0f0dfddc8a6c2b3e5a0a8d48e436e45913408243ef4809d4c64184ee1a79311e0f4e1d92e"}], 0x268}}], 0x2, 0x24040045) (async)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000001900)=0x1, 0x4) (async, rerun: 64)
listen(r1, 0x3) (rerun: 64)
socket$unix(0x1, 0x2, 0x0) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001980), r1)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000001b00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001ac0)={&(0x7f00000019c0)={0xe4, r4, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x800}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf3bc}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xe}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe1}]}, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x20000090) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x74, r4, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x862}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0x4000081) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001cc0)={0x1, &(0x7f0000001c80)=[{0x1, 0x1, 0x2, 0x7}]}, 0x10)
r6 = socket$rds(0x15, 0x5, 0x0)
setsockopt$sock_int(r6, 0x1, 0x0, &(0x7f0000001d00)=0x10, 0x4) (async)
recvmsg(r5, &(0x7f00000022c0)={&(0x7f0000001d40)=@hci, 0x80, &(0x7f0000002180)=[{&(0x7f0000001dc0)=""/50, 0x32}, {&(0x7f0000001e00)=""/117, 0x75}, {&(0x7f0000001e80)=""/253, 0xfd}, {&(0x7f0000001f80)=""/131, 0x83}, {&(0x7f0000002040)=""/63, 0x3f}, {&(0x7f0000002080)=""/172, 0xac}, {&(0x7f0000002140)=""/10, 0xa}], 0x7, &(0x7f0000002200)=""/152, 0x98}, 0x40) (async)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000002300)={0x6, 0x93, 0x9, 0x12c, 0xc}, 0x14) (async)
sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4200000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x44, 0xd, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x4009) (async)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000002540)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x20004}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x10, 0x3f5, 0x200, 0x70bd26, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x804}, 0x3400c001)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000026c0)={&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0, 0x0, 0x0, &(0x7f0000002580)=""/59, 0x3b, 0x0, &(0x7f00000025c0)=""/233, 0xe9}, &(0x7f0000002700)=0x40)
ioctl$sock_proto_private(r3, 0x89e3, &(0x7f0000002740)="1e1ecec49b0f4d73ed545c37d4688c0ff126184a37a768a4aae011df88dea927") (async, rerun: 32)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002780), r1) (async, rerun: 32)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000027c0)={0x42, 0x3, 0x3}, 0x10) (async)
socket$packet(0x11, 0x0, 0x300)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x9)

314.009628ms ago: executing program 1 (id=1832):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r0, @ANYRES8=r1, @ANYRESOCT, @ANYRES32=r1, @ANYBLOB="62fe9b0de23d786489a502a9edd620d387625149816786e946337a7a8fdae7927207e7c062072d15296e5902893ce0363508cb6267e45e3ad6fdb7314cba5dc7fa23a031c8b4781d8cf06041a1bd420f6a64e43563b7f26767eb562b165c980806a5348b88af69987f7f154d3d1d33dadb377723ce9acfcc8458eb4f9124133ce454749ea402f4e48280561f57b740680e4f", @ANYRESHEX, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRES8=r0, @ANYRES64=r1], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, r2, 0x4}, 0x38)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000206052000000000000000000000000005000400000000000900020073797a30000000001400078008001340200000001c000640000a1900050005000a000000050001000300000012000300686173683a6e6574"], 0x60}}, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa2}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010006007900000000006000000008000300", @ANYRES32=r8], 0x1c}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '})

229.353887ms ago: executing program 3 (id=1833):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000840)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = getpid()
sendmsg$unix(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003140)="fa", 0x1}], 0x1, &(0x7f00000046c0)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee00, 0xee01}}}, @rights={{0x10}}], 0x30}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.freeze\x00', 0x275a, 0x0)
sendmsg$inet(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)='|.', 0x2}], 0x1}, 0x10000080)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x1092, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000080)=r5, 0x4)
write$cgroup_type(r2, &(0x7f0000000100), 0x9)
recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000a000000000008000b002417"], 0x44}, 0x1, 0x2000000000000000}, 0x0)

109.319821ms ago: executing program 1 (id=1834):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r1 = socket$isdn_base(0x22, 0x3, 0x0)
accept(r1, 0x0, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5e8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x1810)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000004fab34713b06289600000001017c000004032d00"], 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

50.401126ms ago: executing program 2 (id=1835):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0)

48.810059ms ago: executing program 3 (id=1836):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) (async, rerun: 32)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, 0x0, 0x0) (async, rerun: 32)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x84, 0x30, 0x51b, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="d94c8f9e9390"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x84}}, 0x0) (async)
sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)={0x84, 0x41, 0x300, 0x70bd28, 0x25dfdbff, "", [@generic="a1d6a7bd1cd03d39c3f1d8e1f24c2e8feda1c620146ac31d3d5117d9b8bf902bdef2c0d3c59c316097e9c4433a49b7faec3a341b6a53d2622d93b45c42f2f559e33af2bd18855655d0e850a4f9d10a5990528dfafd8e420b4fb777112d39df36d0d93e7e689ea60bb4d30258", @nested={0x8, 0x5a, 0x0, 0x1, [@nested={0x4, 0xbc}]}]}, 0x84}], 0x1, 0x0, 0x0, 0x80810}, 0x40)

0s ago: executing program 1 (id=1837):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$rxrpc(0x21, 0x2, 0x2) (async)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', <r6=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_VERSION={0x5, 0x6, 0xc}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x50}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r7, r7, 0x4, r7}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x2, 0xd, 0xb, 0x4000, r2, 0xf, '\x00', r5, r7, 0x5, 0x1, 0x5, 0xc, @void, @value, @void, @value}, 0x50)
bind$rxrpc(r1, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
poll(&(0x7f0000000280)=[{r8}], 0x1, 0x200000)
bind$rxrpc(r1, &(0x7f0000001280)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
ioctl$SIOCSIFMTU(r0, 0x891f, &(0x7f0000000000)={'dummy0\x00'}) (async)
ioctl$SIOCSIFMTU(r0, 0x891f, &(0x7f0000000000)={'dummy0\x00'})

kernel console output (not intermixed with test programs):

479][ T6579] xt_l2tp: invalid flags combination: c
[  103.551598][ T6580] netlink: 52 bytes leftover after parsing attributes in process `syz.2.182'.
[  103.926269][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.188'.
[  104.010137][ T6592] 8021q: adding VLAN 0 to HW filter on device bond2
[  104.023787][ T6592] bond0: (slave bond2): Enslaving as an active interface with an up link
[  104.083226][ T6599] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  104.113526][ T6599] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  104.169719][ T6604] xt_time: invalid argument - start or stop time greater than 23:59:59
[  104.328034][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.194'.
[  104.454724][ T6622] netlink: 104 bytes leftover after parsing attributes in process `syz.2.196'.
[  104.485979][ T6622] netlink: 'syz.2.196': attribute type 3 has an invalid length.
[  104.769826][ T6634] Bluetooth: MGMT ver 1.23
[  105.228552][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'.
[  105.263550][ T6660] macvlan0: left promiscuous mode
[  105.276991][ T6660] macvlan0: left allmulticast mode
[  105.282605][ T6660] netlink: 'syz.1.211': attribute type 1 has an invalid length.
[  105.344212][ T6660] netlink: 'syz.1.211': attribute type 2 has an invalid length.
[  105.659626][ T6685] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  105.764682][ T6698] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[  105.927982][ T6693] netlink: 'syz.0.220': attribute type 1 has an invalid length.
[  106.154757][ T6720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'.
[  106.221256][ T6725] netlink: 'syz.4.227': attribute type 1 has an invalid length.
[  107.518977][ T6796] netlink: 'syz.3.247': attribute type 1 has an invalid length.
[  107.554206][ T6796] netlink: 'syz.3.247': attribute type 3 has an invalid length.
[  108.075637][ T6829] netlink: 'syz.2.254': attribute type 39 has an invalid length.
[  108.113757][ T6832] netlink: 'syz.2.254': attribute type 39 has an invalid length.
[  108.288587][ T6839] netlink: 'syz.0.257': attribute type 1 has an invalid length.
[  108.326331][ T6839] netlink: 'syz.0.257': attribute type 4 has an invalid length.
[  108.379520][ T6839] __nla_validate_parse: 5 callbacks suppressed
[  108.379536][ T6839] netlink: 192 bytes leftover after parsing attributes in process `syz.0.257'.
[  108.437368][ T6849] netlink: 32 bytes leftover after parsing attributes in process `syz.3.259'.
[  108.457966][ T6851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.260'.
[  108.581925][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'.
[  108.614023][ T6852] netlink: 36 bytes leftover after parsing attributes in process `syz.3.259'.
[  108.635424][ T6856] netlink: 'syz.0.262': attribute type 3 has an invalid length.
[  108.648445][ T6856] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.262'.
[  108.827103][ T6870] ksmbd: Unknown IPC event: 3, ignore.
[  108.942332][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'.
[  108.983780][ T6879] netlink: 5 bytes leftover after parsing attributes in process `syz.1.268'.
[  109.131434][ T6880] netlink: 146840 bytes leftover after parsing attributes in process `syz.2.267'.
[  109.242234][ T6880] sctp: [Deprecated]: syz.2.267 (pid 6880) Use of int in maxseg socket option.
[  109.242234][ T6880] Use struct sctp_assoc_value instead
[  109.377275][ T6899] netlink: 'syz.0.271': attribute type 12 has an invalid length.
[  109.388921][ T6898] netlink: 72 bytes leftover after parsing attributes in process `syz.4.272'.
[  110.359283][ T6942] netlink: 'syz.2.286': attribute type 2 has an invalid length.
[  110.454423][ T6916] infiniband syz0: set active
[  110.478697][ T6916] infiniband syz0: added bond_slave_1
[  110.702729][ T6916] RDS/IB: syz0: added
[  110.723711][ T6916] smc: adding ib device syz0 with port count 1
[  110.738475][ T6916] smc:    ib device syz0 port 1 has pnetid 
[  110.801952][ T6962] netlink: 'syz.3.291': attribute type 7 has an invalid length.
[  112.285318][ T7004] nbd: must specify at least one socket
[  112.753495][ T7019] netlink: 'syz.4.311': attribute type 2 has an invalid length.
[  113.243519][ T7032] netlink: 'syz.2.316': attribute type 4 has an invalid length.
[  113.321210][ T7035] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  113.579307][ T7045] bridge0: the hash_elasticity option has been deprecated and is always 16
[  113.605856][ T7045] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.615215][ T7045] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.671476][ T7047] __nla_validate_parse: 10 callbacks suppressed
[  113.671493][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.321'.
[  113.813458][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'.
[  113.843298][ T7056] netlink: 'syz.4.323': attribute type 2 has an invalid length.
[  113.853213][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.323'.
[  114.009954][ T7059] syzkaller1: entered promiscuous mode
[  114.023540][ T7059] syzkaller1: entered allmulticast mode
[  114.177889][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.325'.
[  114.187281][ T7061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.325'.
[  114.197683][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.325'.
[  114.243391][ T7061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.325'.
[  114.401943][ T7063] netlink: 'syz.3.326': attribute type 83 has an invalid length.
[  114.516838][ T7065] netlink: 'syz.4.327': attribute type 1 has an invalid length.
[  114.537882][ T7065] netlink: 'syz.4.327': attribute type 3 has an invalid length.
[  114.572792][ T7065] netlink: 224 bytes leftover after parsing attributes in process `syz.4.327'.
[  114.596022][ T7067] netlink: 'syz.3.328': attribute type 33 has an invalid length.
[  114.677410][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'.
[  115.150734][ T7083] netlink: 348 bytes leftover after parsing attributes in process `syz.0.332'.
[  115.886660][ T7096] netlink: 'syz.4.335': attribute type 9 has an invalid length.
[  115.936121][ T7099] can: request_module (can-proto-3) failed.
[  116.349061][ T7109] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4)
[  116.398853][ T7109] NCSI netlink: No device for ifindex 0
[  116.819757][ T7127] delete_channel: no stack
[  117.040137][ T7133] bond0: entered promiscuous mode
[  117.058905][ T7133] bond_slave_0: entered promiscuous mode
[  117.076718][ T7133] bond_slave_1: entered promiscuous mode
[  117.097172][ T7133] batadv0: entered promiscuous mode
[  117.119014][ T7133] 8021q: adding VLAN 0 to HW filter on device hsr1
[  117.459315][ T7141] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.479512][ T7141] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.629785][ T7141] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.642241][ T7141] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.655071][ T7141] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.664825][ T7141] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.772380][ T7145] bridge0: entered allmulticast mode
[  117.784851][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  117.800119][ T7146] bridge_slave_1: left allmulticast mode
[  117.808401][ T7146] bridge_slave_1: left promiscuous mode
[  117.824506][ T7146] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.861095][ T7146] bridge_slave_0: left allmulticast mode
[  117.867205][ T7146] bridge_slave_0: left promiscuous mode
[  117.885295][ T7146] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.941226][ T7146] bridge0 (unregistering): left allmulticast mode
[  118.034982][ T7153] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (8)
[  118.431717][ T7177] netlink: 'syz.4.358': attribute type 10 has an invalid length.
[  118.468915][ T7177] team0: Device ipvlan1 failed to register rx_handler
[  118.807542][ T7193] netlink: 'syz.3.365': attribute type 1 has an invalid length.
[  118.837166][ T7195] __nla_validate_parse: 9 callbacks suppressed
[  118.837184][ T7195] netlink: 28 bytes leftover after parsing attributes in process `syz.2.364'.
[  118.843890][ T7193] netlink: 'syz.3.365': attribute type 1 has an invalid length.
[  118.887349][ T7196] netlink: 48 bytes leftover after parsing attributes in process `syz.4.366'.
[  119.006896][ T7203] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) !
[  119.074771][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'.
[  119.115100][ T7208] netlink: 'syz.3.369': attribute type 8 has an invalid length.
[  119.373194][ T7217] netlink: 100 bytes leftover after parsing attributes in process `syz.4.373'.
[  119.409797][ T7219] netlink: 36 bytes leftover after parsing attributes in process `syz.3.372'.
[  119.453877][ T7223] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 !
[  119.476136][ T7221] netlink: 'syz.0.374': attribute type 4 has an invalid length.
[  119.485091][ T7220] netlink: 'syz.0.374': attribute type 4 has an invalid length.
[  120.056245][ T7240] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  120.126914][ T7252] netlink: 'syz.4.382': attribute type 1 has an invalid length.
[  120.166757][ T7252] netlink: 204 bytes leftover after parsing attributes in process `syz.4.382'.
[  120.413042][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.386'.
[  120.422374][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.386'.
[  120.459016][ T7250] netlink: 16 bytes leftover after parsing attributes in process `syz.2.381'.
[  120.524759][ T7256] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.381'.
[  120.657958][ T7271] xfrm1: entered promiscuous mode
[  120.674557][ T7271] xfrm1: entered allmulticast mode
[  120.746449][ T7275] x_tables: duplicate entry at hook 1
[  120.789625][ T7275] x_tables: ip6_tables: mh match: only valid for protocol 135
[  121.103613][ T7282] netlink: 'syz.4.392': attribute type 4 has an invalid length.
[  121.127570][ T7282] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  121.148045][ T7287] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  121.194977][ T7287] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  121.244205][ T7287] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  121.273493][ T7287] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  121.317187][ T7287] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  121.366896][ T7287] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  121.416987][ T7287] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  121.450992][ T7287] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  121.486114][ T7287] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  121.515456][ T7287] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  121.960750][ T7320] netlink: 'syz.4.403': attribute type 1 has an invalid length.
[  122.194198][ T7324] bridge0: port 3(syz_tun) entered blocking state
[  122.217850][ T7324] bridge0: port 3(syz_tun) entered disabled state
[  122.265869][ T7324] syz_tun: entered allmulticast mode
[  122.278380][ T7324] syz_tun: entered promiscuous mode
[  122.293769][ T7324] bridge0: port 3(syz_tun) entered blocking state
[  122.301183][ T7324] bridge0: port 3(syz_tun) entered forwarding state
[  122.516462][ T7336] unsupported nla_type 52263
[  122.570654][ T7340] sctp: [Deprecated]: syz.0.410 (pid 7340) Use of struct sctp_assoc_value in delayed_ack socket option.
[  122.570654][ T7340] Use struct sctp_sack_info instead
[  123.455321][    C0] Illegal XDP return value 16128 on prog  (id 119) dev lo, expect packet loss!
[  123.496413][ T7388] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.660033][ T7391] netlink: 'syz.4.423': attribute type 7 has an invalid length.
[  123.715607][ T7391] netlink: 'syz.4.423': attribute type 8 has an invalid length.
[  123.804383][ T7391] gretap0: entered promiscuous mode
[  123.836791][ T7391] gretap0: left promiscuous mode
[  123.910382][ T7405] __nla_validate_parse: 13 callbacks suppressed
[  123.910400][ T7405] netlink: 212 bytes leftover after parsing attributes in process `syz.1.426'.
[  123.931284][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'.
[  123.962306][ T7367] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  124.040125][ T7408] netlink: 'syz.2.427': attribute type 2 has an invalid length.
[  124.676852][ T7445] netlink: 'syz.2.437': attribute type 2 has an invalid length.
[  124.724842][ T7445] netlink: 144 bytes leftover after parsing attributes in process `syz.2.437'.
[  124.869744][   T43] IPVS: starting estimator thread 0...
[  124.973597][ T7451] IPVS: using max 27 ests per chain, 64800 per kthread
[  125.297406][ T7473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.448'.
[  125.560401][ T7479] netlink: 56 bytes leftover after parsing attributes in process `syz.1.450'.
[  125.707267][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'.
[  125.719875][ T7492] netlink: 60 bytes leftover after parsing attributes in process `syz.4.454'.
[  125.989809][ T7499] netlink: 52 bytes leftover after parsing attributes in process `syz.3.456'.
[  126.717778][ T7510] netlink: 76 bytes leftover after parsing attributes in process `syz.1.459'.
[  127.154997][ T7539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'.
[  127.505993][ T7554] 8021q: adding VLAN 0 to HW filter on device bond1
[  127.527764][ T7554] netlink: 'syz.4.472': attribute type 30 has an invalid length.
[  127.535924][ T7554] netlink: 'syz.4.472': attribute type 30 has an invalid length.
[  128.402086][ T7592] sctp: [Deprecated]: syz.0.482 (pid 7592) Use of int in max_burst socket option.
[  128.402086][ T7592] Use struct sctp_assoc_value instead
[  128.486991][ T7592] netlink: 'syz.0.482': attribute type 1 has an invalid length.
[  128.524676][ T7592] netlink: 'syz.0.482': attribute type 1 has an invalid length.
[  128.686251][ T7606] bond0: entered promiscuous mode
[  128.691348][ T7606] bond_slave_0: entered promiscuous mode
[  128.746036][ T7606] bond_slave_1: entered promiscuous mode
[  128.823765][ T7613] netlink: 'syz.3.487': attribute type 39 has an invalid length.
[  128.899323][ T7617] netlink: 'syz.2.488': attribute type 5 has an invalid length.
[  128.928849][ T7621] __nla_validate_parse: 8 callbacks suppressed
[  128.928866][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.491'.
[  128.939533][ T7620] xt_SECMARK: invalid mode: 0
[  128.954370][ T7621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.491'.
[  128.962425][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.490'.
[  129.023475][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.490'.
[  129.073259][ T7623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.490'.
[  129.112870][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'.
[  129.199438][ T7633] netlink: 'syz.4.494': attribute type 10 has an invalid length.
[  129.224189][ T7633] netlink: 40 bytes leftover after parsing attributes in process `syz.4.494'.
[  129.237515][ T7635] netlink: 132 bytes leftover after parsing attributes in process `syz.3.495'.
[  129.263677][ T7633] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.306695][ T7633] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.339849][ T7633] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.351931][ T7633] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.400755][ T7633] team0: Port device geneve0 added
[  129.477095][ T7643] netlink: 56 bytes leftover after parsing attributes in process `syz.2.498'.
[  129.509830][ T7649] netdevsim netdevsim1: Direct firmware load for 	 failed with error -2
[  129.520962][ T7649] netdevsim netdevsim1: Falling back to sysfs fallback for: 	
[  129.867858][ T7667] netlink: 'syz.2.507': attribute type 2 has an invalid length.
[  129.887875][ T7665] macvtap1: entered allmulticast mode
[  129.912444][ T7665] veth0_macvtap: entered allmulticast mode
[  130.018429][ T7667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.507'.
[  130.671016][ T7708] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.692020][ T7708] Bluetooth: MGMT ver 1.23
[  130.820094][ T7717] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  130.822873][ T7716] IPVS: stopping master sync thread 7717 ...
[  130.846923][ T7718] syz.4.525 uses old SIOCAX25GETINFO
[  131.263055][ T7733] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.283712][ T7733] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.290975][ T7733] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.999751][ T7768] team_slave_0: entered promiscuous mode
[  132.005804][ T7768] team_slave_1: entered promiscuous mode
[  132.037807][ T7771] netlink: 'syz.1.541': attribute type 2 has an invalid length.
[  132.093586][ T5838] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  132.260789][ T7787] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[  132.532464][ T7806] macvtap1: entered promiscuous mode
[  132.541085][ T7806] vlan0: entered promiscuous mode
[  132.551882][ T7806] macvtap1: entered allmulticast mode
[  132.567457][ T7806] vlan0: entered allmulticast mode
[  132.572735][ T7806] veth0_vlan: entered allmulticast mode
[  133.068444][ T7841] syzkaller1: entered promiscuous mode
[  133.082066][ T7841] syzkaller1: entered allmulticast mode
[  133.248804][ T7851] erspan0: entered promiscuous mode
[  133.257708][ T7851] batadv_slave_1: entered promiscuous mode
[  133.283479][ T7851] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  133.291089][ T7851] Cannot create hsr debugfs directory
[  133.852586][ T7889] netlink: 'syz.2.573': attribute type 11 has an invalid length.
[  134.069983][ T7897] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  134.241258][ T7873] infiniband syz1: set active
[  134.246189][ T7873] infiniband syz1: added bridge_slave_0
[  134.306902][ T7911] netlink: 'syz.4.578': attribute type 23 has an invalid length.
[  134.387546][ T7916] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6
[  134.405292][ T7873] RDS/IB: syz1: added
[  134.447704][ T7873] smc: adding ib device syz1 with port count 1
[  134.468524][ T7919] __nla_validate_parse: 21 callbacks suppressed
[  134.468541][ T7919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.580'.
[  134.474389][ T7873] smc:    ib device syz1 port 1 has pnetid 
[  134.538973][ T7923] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢
…D£øUDŒw˜}�z
[  134.570862][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.581'.
[  134.632259][ T7928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.581'.
[  135.041234][ T7939] xt_l2tp: v2 doesn't support IP mode
[  135.077725][ T7939] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  135.188073][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.587'.
[  135.324184][ T7958] bond0: entered allmulticast mode
[  135.341481][ T7958] bond_slave_0: entered allmulticast mode
[  135.357800][ T7958] bond_slave_1: entered allmulticast mode
[  135.364852][ T7958] bond2: entered allmulticast mode
[  135.397271][ T7963] syzkaller0: entered promiscuous mode
[  135.425955][ T7963] syzkaller0: entered allmulticast mode
[  135.481187][ T7958] ªªªªªª†³?ÂHº
: renamed from lo (while UP)
[  135.544836][ T7968] xt_connbytes: Forcing CT accounting to be enabled
[  136.048740][ T7992] ip6gre1: entered allmulticast mode
[  136.447647][ T8004] netlink: 'syz.1.600': attribute type 83 has an invalid length.
[  136.471588][ T8004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.600'.
[  136.511308][ T8005] netlink: 28 bytes leftover after parsing attributes in process `syz.1.600'.
[  136.537888][ T8005] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.546224][ T8005] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.572319][ T8010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.602'.
[  138.565413][ T8105] veth3: entered allmulticast mode
[  139.033307][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.625'.
[  139.079323][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.625'.
[  139.125464][ T8127] syzkaller0: tun_chr_ioctl cmd 1074025677
[  139.142506][ T8127] syzkaller0: Linktype set failed because interface is up
[  139.200882][ T8134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.626'.
[  140.788556][ T8153] netlink: 'syz.0.632': attribute type 21 has an invalid length.
[  140.826554][ T8153] netlink: 128 bytes leftover after parsing attributes in process `syz.0.632'.
[  140.884175][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'.
[  140.910688][ T8153] netlink: 3 bytes leftover after parsing attributes in process `syz.0.632'.
[  141.177285][ T8173] netlink: 14 bytes leftover after parsing attributes in process `syz.1.638'.
[  141.307548][ T8189] netlink: 'syz.4.640': attribute type 2 has an invalid length.
[  141.412751][ T8197] netlink: 'syz.1.638': attribute type 1 has an invalid length.
[  141.621680][ T8206] netlink: 16 bytes leftover after parsing attributes in process `syz.4.646'.
[  141.671797][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.638'.
[  141.849595][ T8221] netlink: 24 bytes leftover after parsing attributes in process `syz.0.647'.
[  141.939176][ T8173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.955767][ T8173] bond_slave_0: left allmulticast mode
[  141.981398][ T8173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  141.998725][ T8173] bond_slave_1: left allmulticast mode
[  142.016646][ T8173] bond0 (unregistering): (slave bond2): Releasing backup interface
[  142.034569][ T8173] bond2: left allmulticast mode
[  142.052592][ T8173] bond0 (unregistering): Released all slaves
[  142.484922][ T8245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.652'.
[  142.607278][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'.
[  142.715035][ T8256] netlink: 'syz.4.655': attribute type 18 has an invalid length.
[  142.787075][ T8256] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  142.796017][ T8256] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  142.805335][ T8256] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  142.815434][ T8256] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  142.839145][ T8261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'.
[  142.863913][ T8261] netlink: 'syz.2.657': attribute type 5 has an invalid length.
[  143.485751][ T8305] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  143.734505][ T8322] netlink: 'syz.0.676': attribute type 1 has an invalid length.
[  144.177981][ T8346] vlan2: entered promiscuous mode
[  144.197549][ T8346] bridge0: entered promiscuous mode
[  144.522840][ T8383] netlink: 'syz.1.689': attribute type 9 has an invalid length.
[  144.761870][ T8390] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.799648][ T8390] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.871648][ T8390] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.910465][ T8390] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.057199][ T8390] batadv0 (unregistering): left promiscuous mode
[  145.147842][ T8406] virt_wifi0 speed is unknown, defaulting to 1000
[  145.163377][ T8402] tipc: Failed to remove unknown binding: 66,1,1/0:2446661043/2446661045
[  145.189693][ T8406] virt_wifi0 speed is unknown, defaulting to 1000
[  145.218828][ T8406] virt_wifi0 speed is unknown, defaulting to 1000
[  145.251499][ T8406] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  145.325278][ T8406] infiniband sy{0: RDMA CMA: cma_listen_on_dev, error -98
[  145.428162][ T8406] virt_wifi0 speed is unknown, defaulting to 1000
[  145.461769][ T8406] virt_wifi0 speed is unknown, defaulting to 1000
[  145.501997][ T8406] virt_wifi0 speed is unknown, defaulting to 1000
[  145.535646][ T8406] virt_wifi0 speed is unknown, defaulting to 1000
[  145.572265][ T8406] virt_wifi0 speed is unknown, defaulting to 1000
[  146.040152][ T8446] netlink: 'syz.3.704': attribute type 10 has an invalid length.
[  146.116416][ T8448] __nla_validate_parse: 7 callbacks suppressed
[  146.116434][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.707'.
[  146.169480][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'.
[  146.258107][ T8451] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.703'.
[  146.489373][ T8468] netlink: 'syz.1.712': attribute type 13 has an invalid length.
[  146.531206][ T8469] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  146.769204][ T8481] netlink: 28 bytes leftover after parsing attributes in process `syz.0.717'.
[  147.479957][ T8517] netlink: 28 bytes leftover after parsing attributes in process `syz.4.728'.
[  147.489485][ T8517] netlink: 28 bytes leftover after parsing attributes in process `syz.4.728'.
[  147.601694][ T8523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  147.719486][ T8527] netlink: 'syz.0.730': attribute type 39 has an invalid length.
[  147.811374][ T8534] netlink: 132 bytes leftover after parsing attributes in process `syz.3.732'.
[  147.971808][ T8542] team0: Device gtp0 is of different type
[  148.109997][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.735'.
[  148.328760][ T8557] netlink: 'syz.0.739': attribute type 10 has an invalid length.
[  148.375513][ T8557] team0: Device ipvlan1 failed to register rx_handler
[  148.394279][ T8565] xt_recent: Unsupported userspace flags (00000061)
[  148.494587][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  148.761479][ T8591] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.922799][ T8595] netlink: 'syz.4.751': attribute type 3 has an invalid length.
[  148.932261][ T8595] netlink: 'syz.4.751': attribute type 3 has an invalid length.
[  149.083493][ T8610] vlan2: entered promiscuous mode
[  149.088806][ T8610] vlan2: entered allmulticast mode
[  149.119144][ T8610] hsr_slave_1: entered allmulticast mode
[  149.137717][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'.
[  149.417383][ T8620] netlink: 40 bytes leftover after parsing attributes in process `syz.0.758'.
[  149.696117][ T8642] netem: change failed
[  149.750229][ T8647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  149.757991][ T8647] IPv6: NLM_F_CREATE should be set when creating new route
[  150.019111][ T8669] netlink: 'syz.1.772': attribute type 1 has an invalid length.
[  150.740303][ T8680] team0 (unregistering): Port device team_slave_0 removed
[  150.774502][ T8680] team0 (unregistering): Port device team_slave_1 removed
[  150.811510][ T8691] sch_fq: defrate 0 ignored.
[  151.041287][ T8705] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7
[  151.300413][ T8727] __nla_validate_parse: 3 callbacks suppressed
[  151.300431][ T8727] netlink: 36 bytes leftover after parsing attributes in process `syz.3.788'.
[  151.313910][ T8729] netlink: 44 bytes leftover after parsing attributes in process `syz.2.789'.
[  151.339141][ T5838] Bluetooth: hci3: link tx timeout
[  151.350142][ T5838] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  151.360608][ T5838] Bluetooth: hci3: link tx timeout
[  151.367094][ T5838] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  151.419830][ T8709] netlink: 'syz.1.785': attribute type 29 has an invalid length.
[  151.436605][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.785'.
[  151.746567][ T3004] syzkaller0: tun_net_xmit 76
[  151.766331][ T3004] syzkaller0: tun_net_xmit 48
[  151.773756][   T43] syzkaller0: tun_net_xmit 76
[  151.816616][ T8750] netlink: 'syz.2.795': attribute type 1 has an invalid length.
[  151.833620][ T8750] netlink: 224 bytes leftover after parsing attributes in process `syz.2.795'.
[  151.868168][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.795'.
[  151.947349][ T8754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.794'.
[  153.201004][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'.
[  153.453415][   T51] Bluetooth: hci3: command 0x0405 tx timeout
[  154.025825][ T8804] sctp: [Deprecated]: syz.0.806 (pid 8804) Use of int in maxseg socket option.
[  154.025825][ T8804] Use struct sctp_assoc_value instead
[  154.205941][ T8811] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96
[  155.313732][ T8839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.814'.
[  155.436572][ T8842] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  155.474762][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.816'.
[  155.525184][ T8842] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  155.543784][ T8842] gretap1: entered promiscuous mode
[  155.554497][ T8842] gretap1: entered allmulticast mode
[  155.733246][ T8857] nbd: must specify at least one socket
[  155.750659][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.819'.
[  155.840260][ T8857] vlan3: entered allmulticast mode
[  155.873740][ T8857] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  156.411947][ T8899] team_slave_0: entered promiscuous mode
[  156.417771][ T8899] team_slave_1: entered promiscuous mode
[  156.495148][ T8905] netlink: 'syz.4.828': attribute type 7 has an invalid length.
[  156.746626][ T8924] xt_connbytes: Forcing CT accounting to be enabled
[  156.983771][ T8930] netlink: 'syz.1.840': attribute type 1 has an invalid length.
[  157.006679][ T8930] __nla_validate_parse: 2 callbacks suppressed
[  157.006697][ T8930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.840'.
[  157.314167][ T8954] xt_CT: You must specify a L4 protocol and not use inversions on it
[  157.341738][ T8955] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  157.360001][ T8955] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  157.482475][ T8965] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  157.792235][ T8981] netlink: 56 bytes leftover after parsing attributes in process `syz.3.853'.
[  158.137353][ T9000] netlink: 'syz.1.859': attribute type 10 has an invalid length.
[  158.153272][ T9000] netlink: 40 bytes leftover after parsing attributes in process `syz.1.859'.
[  158.171421][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.860'.
[  158.215794][ T9009] No such timeout policy "syz0"
[  158.237067][ T8999] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.353286][ T9000] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  158.548854][ T8999] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.667131][ T9036] netlink: 256 bytes leftover after parsing attributes in process `syz.0.865'.
[  158.817875][ T8999] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.850331][ T9047] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  158.880943][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.867'.
[  158.989622][ T9044] vlan2: entered promiscuous mode
[  159.033683][ T9044] bridge0: entered promiscuous mode
[  159.146185][ T8999] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.308983][ T9064] netlink: 'syz.3.871': attribute type 1 has an invalid length.
[  159.331592][ T9064] netlink: 244 bytes leftover after parsing attributes in process `syz.3.871'.
[  159.445547][ T9064] netlink: 156 bytes leftover after parsing attributes in process `syz.3.871'.
[  159.460422][ T9064] netlink: 156 bytes leftover after parsing attributes in process `syz.3.871'.
[  159.511115][ T8999] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.588748][ T8999] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.699749][ T9078] 8021q: adding VLAN 0 to HW filter on device bond2
[  160.168797][ T9101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.878'.
[  160.178900][ T9078] bond2 (unregistering): Released all slaves
[  160.231377][ T8999] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.242152][ T9101] syz_tun: left allmulticast mode
[  160.249579][ T9101] syz_tun: left promiscuous mode
[  160.260506][ T9101] bridge0: port 3(syz_tun) entered disabled state
[  160.301084][ T9101] bridge_slave_1: left allmulticast mode
[  160.312676][ T9101] bridge_slave_1: left promiscuous mode
[  160.319358][ T9101] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.367115][ T9101] bridge_slave_0: left allmulticast mode
[  160.385966][ T9101] bridge_slave_0: left promiscuous mode
[  160.398297][ T9101] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.574680][ T8999] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.881769][ T9130] openvswitch: netlink: Multiple metadata blocks provided
[  161.803858][ T9182] netlink: 'syz.2.898': attribute type 11 has an invalid length.
[  162.261006][ T9206] __nla_validate_parse: 14 callbacks suppressed
[  162.261024][ T9206] netlink: 48 bytes leftover after parsing attributes in process `syz.0.903'.
[  162.267835][ T9197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  162.552784][ T9223] netlink: 16 bytes leftover after parsing attributes in process `syz.2.907'.
[  162.630701][ T9234] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  162.858948][ T9246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.913'.
[  162.978938][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.914'.
[  163.024812][ T9259] trusted_key: syz.3.917 sent an empty control message without MSG_MORE.
[  163.267839][ T9270] Bluetooth: MGMT ver 1.23
[  163.676508][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.925'.
[  163.709198][ T9290] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  163.757413][ T9296] xt_NFQUEUE: number of total queues is 0
[  163.771050][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'.
[  163.793302][ T9290] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  163.817993][ T9290] gretap2: entered promiscuous mode
[  163.836241][ T9290] gretap2: entered allmulticast mode
[  163.858656][ T9301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.929'.
[  163.883353][ T9301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.929'.
[  163.931407][ T9301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.929'.
[  164.205089][ T9314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.932'.
[  164.266444][ T9314] tc_dump_action: action bad kind
[  164.428624][    C1] vcan0: j1939_tp_rxtimer: 0xffff88804d8b1800: rx timeout, send abort
[  164.442373][ T9333] netlink: 'syz.0.939': attribute type 11 has an invalid length.
[  164.459834][ T9333] netlink: 'syz.0.939': attribute type 11 has an invalid length.
[  164.579609][ T9327] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767)
[  164.599974][ T9327] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  166.460324][ T9367] netlink: 'syz.2.950': attribute type 1 has an invalid length.
[  167.059141][ T9403] pim6reg1: entered promiscuous mode
[  167.073087][ T9403] pim6reg1: entered allmulticast mode
[  167.204654][ T9412] netlink: 'syz.4.960': attribute type 2 has an invalid length.
[  167.683655][ T9434] __nla_validate_parse: 6 callbacks suppressed
[  167.683674][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.965'.
[  167.726133][ T9434] openvswitch: netlink: Unknown nsh attribute 0
[  167.732526][ T9434] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.380773][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  168.396925][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  168.405981][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  168.416157][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  168.426174][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  169.392546][ T9431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  169.418694][ T9432] gtp0: entered promiscuous mode
[  169.585783][ T9448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.968'.
[  169.681428][ T9452] xt_HMARK: proto mask must be zero with L3 mode
[  169.796630][ T9460] tc_dump_action: action bad kind
[  169.965541][ T9463] IPVS: set_ctl: invalid protocol: 92 10.1.1.1:20001
[  169.975050][ T5850] IPVS: starting estimator thread 0...
[  170.101634][ T9464] IPVS: using max 31 ests per chain, 74400 per kthread
[  170.278566][ T3031] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  170.310493][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'.
[  170.336903][ T3031] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.341114][ T9485] netlink: 'syz.2.980': attribute type 3 has an invalid length.
[  170.493953][   T51] Bluetooth: hci4: command tx timeout
[  170.541077][ T3031] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  170.553637][ T3031] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.691617][ T3031] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  170.710093][ T3031] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.855353][ T3031] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  170.892747][ T3031] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.240955][ T3031] bridge_slave_1: left allmulticast mode
[  171.269374][ T3031] bridge_slave_1: left promiscuous mode
[  171.293848][ T3031] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.386837][ T3031] bridge_slave_0: left allmulticast mode
[  171.392565][ T3031] bridge_slave_0: left promiscuous mode
[  171.414297][ T3031] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.630560][ T9532] netlink: 13 bytes leftover after parsing attributes in process `syz.1.989'.
[  171.685882][ T9537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.988'.
[  171.816877][ T9545] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.991'.
[  171.837220][ T9545] netlink: zone id is out of range
[  171.862108][ T9545] netlink: zone id is out of range
[  171.875443][ T9545] netlink: zone id is out of range
[  171.892371][ T9545] netlink: zone id is out of range
[  171.904004][ T9545] netlink: zone id is out of range
[  171.922083][ T9545] netlink: zone id is out of range
[  171.948070][ T9545] netlink: get zone limit has 8 unknown bytes
[  172.086929][ T3031] team0: Port device geneve0 removed
[  172.141018][ T9555] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.991'.
[  172.230151][ T3031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.240082][ T3031] bond_slave_0: left promiscuous mode
[  172.248856][ T3031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.265210][ T3031] bond_slave_1: left promiscuous mode
[  172.271084][ T3031] bond0 (unregistering): Released all slaves
[  172.369040][ T3031] bond1 (unregistering): Released all slaves
[  172.385352][ T9444] virt_wifi0 speed is unknown, defaulting to 1000
[  172.573465][   T51] Bluetooth: hci4: command tx timeout
[  172.723457][ T9565] netlink: 84 bytes leftover after parsing attributes in process `syz.1.994'.
[  172.785098][ T9571] IPVS: ip_vs_edit_dest(): server weight less than zero
[  172.884426][ T9574] netlink: 'syz.2.996': attribute type 21 has an invalid length.
[  172.931850][ T9576] openvswitch: netlink: IP tunnel dst address not specified
[  172.949492][ T9579] netlink: 'syz.2.996': attribute type 2 has an invalid length.
[  172.999611][ T9574] netlink: 156 bytes leftover after parsing attributes in process `syz.2.996'.
[  173.019616][ T9579] netlink: 'syz.2.996': attribute type 1 has an invalid length.
[  173.229651][ T9444] chnl_net:caif_netlink_parms(): no params data found
[  173.775528][ T9631] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.789413][ T9444] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.815678][ T9444] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.847392][ T9444] bridge_slave_0: entered allmulticast mode
[  173.878433][ T9444] bridge_slave_0: entered promiscuous mode
[  173.920269][ T9444] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.930807][ T9647] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.953074][ T9444] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.961270][ T9444] bridge_slave_1: entered allmulticast mode
[  174.002649][ T9444] bridge_slave_1: entered promiscuous mode
[  174.135899][ T9643] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1011'.
[  174.156592][ T9659] netlink: 'syz.0.1014': attribute type 2 has an invalid length.
[  174.170441][ T9657] netlink: 'syz.0.1014': attribute type 2 has an invalid length.
[  174.188421][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1014'.
[  174.198537][ T9657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1014'.
[  174.324935][ T9444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.368938][ T9444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.552853][ T9444] team0: Port device team_slave_0 added
[  174.569841][ T9672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1017'.
[  174.597017][ T9674] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1018'.
[  174.611622][ T9674] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1018'.
[  174.635664][ T9666] gtp0: entered promiscuous mode
[  174.664809][   T51] Bluetooth: hci4: command tx timeout
[  174.680039][ T9444] team0: Port device team_slave_1 added
[  174.951231][ T9682] bridge_slave_0: invalid flags given to default FDB implementation
[  174.996012][ T9444] batman_adv: batadv0: Adding interface: batadv_slave_0
[  175.021716][ T9444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.055428][ T9444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  175.121418][ T9694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'.
[  175.154244][ T9444] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.161377][ T9444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.218413][ T9444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.269965][ T2153] IPVS: starting estimator thread 0...
[  175.313128][ T9694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1022'.
[  175.322507][ T9694] netlink: 'syz.0.1022': attribute type 13 has an invalid length.
[  175.373192][ T9699] IPVS: using max 29 ests per chain, 69600 per kthread
[  176.042421][ T9444] hsr_slave_0: entered promiscuous mode
[  176.064814][ T9444] hsr_slave_1: entered promiscuous mode
[  176.085046][ T9444] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  176.092747][ T9444] Cannot create hsr debugfs directory
[  176.342729][ T3031] hsr_slave_0: left promiscuous mode
[  176.367982][ T3031] hsr_slave_1: left promiscuous mode
[  176.384554][ T3031] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.399760][ T3031] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.733792][   T51] Bluetooth: hci4: command tx timeout
[  177.281753][ T3031] team0 (unregistering): Port device team_slave_1 removed
[  177.321919][ T3031] team0 (unregistering): Port device team_slave_0 removed
[  177.736528][ T9744] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1035'.
[  178.845832][ T9817] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1050'.
[  178.886478][ T9814] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1049'.
[  179.252082][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1053'.
[  179.415060][ T9830] xt_connbytes: Forcing CT accounting to be enabled
[  180.216188][ T9444] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  180.267824][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1061'.
[  180.280919][ T9444] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  180.354120][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1060'.
[  180.371439][ T9444] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  180.452870][ T9444] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  180.660562][ T9894] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1064'.
[  180.711254][ T9894] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1064'.
[  180.774054][ T9894] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1064'.
[  180.816138][ T9894] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1064'.
[  180.991502][ T9905] netlink: 'syz.3.1067': attribute type 1 has an invalid length.
[  180.991922][ T9444] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.138704][ T9444] 8021q: adding VLAN 0 to HW filter on device team0
[  181.215563][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.222832][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.276080][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.283295][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.384530][ T9919] netlink: 'syz.1.1070': attribute type 3 has an invalid length.
[  181.701373][ T9935] netlink: 'syz.3.1076': attribute type 10 has an invalid length.
[  182.367800][ T9444] 8021q: adding VLAN 0 to HW filter on device batadv0
[  183.342825][ T9444] veth0_vlan: entered promiscuous mode
[  183.417155][ T9444] veth1_vlan: entered promiscuous mode
[  183.500239][T10020] xt_check_match: 55 callbacks suppressed
[  183.500261][T10020] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  183.556357][ T9444] veth0_macvtap: entered promiscuous mode
[  183.586079][ T9444] veth1_macvtap: entered promiscuous mode
[  183.594235][T10027] __nla_validate_parse: 7 callbacks suppressed
[  183.594251][T10027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1093'.
[  183.648272][ T9444] batman_adv: batadv0: Interface activated: batadv_slave_0
[  183.694563][ T9444] batman_adv: batadv0: Interface activated: batadv_slave_1
[  183.834722][ T9444] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.883057][ T9444] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.922077][ T9444] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.936785][ T9444] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.017388][T10045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  184.107603][T10053] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  184.270142][T10056] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1098'.
[  184.314613][T10056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1098'.
[  184.333691][T10056] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1098'.
[  184.350339][T10056] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1098'.
[  184.551361][ T3031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.581457][ T3031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.662053][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.681913][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.790751][T10105] netlink: 'syz.2.1107': attribute type 2 has an invalid length.
[  185.802065][T10099] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1105'.
[  185.817416][T10107] netlink: 164192 bytes leftover after parsing attributes in process `syz.0.1104'.
[  185.821506][T10099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1105'.
[  186.081693][T10122] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1111'.
[  186.122174][T10122] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1111'.
[  186.500826][ T5850] IPVS: starting estimator thread 0...
[  186.603077][T10142] IPVS: using max 38 ests per chain, 91200 per kthread
[  186.626489][ T3004] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.699346][T10138] netlink: 'syz.1.1115': attribute type 2 has an invalid length.
[  186.858493][ T3004] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.108483][ T3004] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.398175][ T3004] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.513964][T10170] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  187.820785][T10201] netlink: 'syz.1.1128': attribute type 9 has an invalid length.
[  187.856251][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  187.879547][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  187.890902][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  187.892002][ T3004] bridge_slave_1: left allmulticast mode
[  187.910742][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  187.921255][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  187.959464][ T3004] bridge_slave_1: left promiscuous mode
[  187.965534][ T3004] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.038733][ T3004] bridge_slave_0: left allmulticast mode
[  188.053280][ T3004] bridge_slave_0: left promiscuous mode
[  188.059179][ T3004] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.823828][ T3004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  188.836919][ T3004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  188.848856][ T3004] bond0 (unregistering): Released all slaves
[  189.320101][T10247] __nla_validate_parse: 7 callbacks suppressed
[  189.320121][T10247] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1137'.
[  189.341264][T10256] netlink: 'syz.1.1135': attribute type 11 has an invalid length.
[  189.676570][T10272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1141'.
[  189.703038][T10272] IPVS: Unknown mcast interface: vcan0
[  189.713900][T10268] netlink: 'syz.3.1140': attribute type 10 has an invalid length.
[  189.947568][T10283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1143'.
[  190.013551][ T5838] Bluetooth: hci4: command tx timeout
[  190.071921][T10283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  190.125176][T10283] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.199301][T10255] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  190.482109][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1149'.
[  190.603940][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'.
[  190.649689][T10314] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  190.701746][T10314] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1150'.
[  190.715539][T10319] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  190.909830][T10323] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1152'.
[  191.185419][T10341] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1153'.
[  191.621944][T10363] ªªªªªª†³?ÂHº
: entered promiscuous mode
[  191.678443][T10363] netlink: 'syz.1.1160': attribute type 2 has an invalid length.
[  191.698921][T10363] A link change request failed with some changes committed already. Interface ªªªªªª†³?ÂHº
 may have been left with an inconsistent configuration, please check.
[  191.768524][T10369] netlink: 'syz.0.1162': attribute type 2 has an invalid length.
[  191.807454][T10200] chnl_net:caif_netlink_parms(): no params data found
[  192.009510][T10381] netlink: 'syz.0.1164': attribute type 1 has an invalid length.
[  192.023164][T10381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1164'.
[  192.093103][ T5838] Bluetooth: hci4: command tx timeout
[  192.187006][ T3004] hsr_slave_0: left promiscuous mode
[  192.209546][ T3004] hsr_slave_1: left promiscuous mode
[  192.221828][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1163'.
[  192.239444][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.268417][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.333759][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.356772][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.410944][ T3004] veth1_macvtap: left promiscuous mode
[  192.417096][ T3004] veth0_macvtap: left promiscuous mode
[  192.422778][ T3004] veth1_vlan: left promiscuous mode
[  192.432273][ T3004] veth0_vlan: left promiscuous mode
[  192.997746][ T3004] team0 (unregistering): Port device team_slave_1 removed
[  193.037398][ T3004] team0 (unregistering): Port device team_slave_0 removed
[  193.636958][T10200] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.649292][T10200] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.659942][T10200] bridge_slave_0: entered allmulticast mode
[  193.675153][T10200] bridge_slave_0: entered promiscuous mode
[  193.685458][T10200] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.695359][T10200] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.704462][T10200] bridge_slave_1: entered allmulticast mode
[  193.712619][T10200] bridge_slave_1: entered promiscuous mode
[  193.754167][T10424] netlink: 'syz.3.1171': attribute type 1 has an invalid length.
[  193.938612][T10433] ipt_ECN: cannot use operation on non-tcp rule
[  193.943146][T10424] macvtap2: entered promiscuous mode
[  193.950392][T10424] vlan0: entered promiscuous mode
[  193.963320][T10424] macvtap2: entered allmulticast mode
[  193.968839][T10424] vlan0: entered allmulticast mode
[  193.985342][T10424] veth0_vlan: entered allmulticast mode
[  194.019275][T10200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  194.047576][T10200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.183754][ T5838] Bluetooth: hci4: command tx timeout
[  194.205918][T10200] team0: Port device team_slave_0 added
[  194.237032][T10200] team0: Port device team_slave_1 added
[  194.367248][T10200] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.385041][T10200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.447245][T10200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  194.490757][T10200] batman_adv: batadv0: Adding interface: batadv_slave_1
[  194.513789][T10200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.547041][T10200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  194.738062][T10200] hsr_slave_0: entered promiscuous mode
[  194.777531][T10200] hsr_slave_1: entered promiscuous mode
[  194.800233][T10200] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  194.829295][T10200] Cannot create hsr debugfs directory
[  195.198335][T10485] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20003
[  195.256426][T10486] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  195.324002][T10492] __nla_validate_parse: 6 callbacks suppressed
[  195.324018][T10492] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1189'.
[  195.568247][T10500] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1192'.
[  195.620955][T10503] netlink: 'syz.1.1191': attribute type 2 has an invalid length.
[  195.632588][T10503] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1191'.
[  196.083397][T10511] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1194'.
[  196.110202][T10516] veth7: entered allmulticast mode
[  196.253774][ T5838] Bluetooth: hci4: command tx timeout
[  196.362233][T10200] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  196.399741][T10200] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  196.483081][T10200] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  196.525403][T10534] netlink: 'syz.0.1199': attribute type 21 has an invalid length.
[  196.549419][T10200] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  196.602401][T10540] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1199'.
[  196.625764][T10538] netlink: 'syz.1.1201': attribute type 17 has an invalid length.
[  196.640080][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1201'.
[  196.650040][T10534] netem: change failed
[  196.661411][T10538] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1201'.
[  196.818471][T10555] netlink: 'syz.0.1204': attribute type 11 has an invalid length.
[  196.901136][T10563] netlink: 'syz.1.1205': attribute type 1 has an invalid length.
[  196.958432][T10200] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.033607][T10567] sctp: [Deprecated]: syz.0.1206 (pid 10567) Use of struct sctp_assoc_value in delayed_ack socket option.
[  197.033607][T10567] Use struct sctp_sack_info instead
[  197.040225][T10200] 8021q: adding VLAN 0 to HW filter on device team0
[  197.106457][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.113724][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.170273][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.177620][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.241808][T10577] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1206'.
[  197.280031][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1206'.
[  197.515674][T10592] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  197.727276][T10604] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  197.778176][T10604] macsec1: entered allmulticast mode
[  197.788934][T10612] x_tables: duplicate underflow at hook 1
[  197.818036][T10604] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  197.927647][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1217'.
[  198.219771][T10200] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.334441][ T5838] Bluetooth: hci4: command tx timeout
[  198.361595][T10639] netlink: 'syz.1.1222': attribute type 1 has an invalid length.
[  198.384977][T10643] netlink: 'syz.1.1222': attribute type 1 has an invalid length.
[  198.768632][T10659] bond0: (slave bond_slave_0): Releasing backup interface
[  198.820905][T10659] bond_slave_0: left promiscuous mode
[  198.878348][T10659] bond0: (slave bond_slave_1): Releasing backup interface
[  198.930587][T10659] bond_slave_1: left promiscuous mode
[  199.015520][T10659] team_slave_0: left promiscuous mode
[  199.072429][T10659] team0: Port device team_slave_0 removed
[  199.081775][T10659] team_slave_1: left promiscuous mode
[  199.106554][T10659] team0: Port device team_slave_1 removed
[  199.257008][T10200] veth0_vlan: entered promiscuous mode
[  199.290313][T10200] veth1_vlan: entered promiscuous mode
[  199.419842][T10200] veth0_macvtap: entered promiscuous mode
[  199.481986][T10200] veth1_macvtap: entered promiscuous mode
[  199.577012][T10200] batman_adv: batadv0: Interface activated: batadv_slave_0
[  199.620293][T10200] batman_adv: batadv0: Interface activated: batadv_slave_1
[  199.665700][T10200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.719382][T10200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.753771][T10200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.773676][T10200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.033951][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.068190][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.151816][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.181004][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.482311][T10739] __nla_validate_parse: 7 callbacks suppressed
[  200.482328][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1240'.
[  201.020847][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.186263][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.495753][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.541813][T10772] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1248'.
[  201.626867][T10773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1248'.
[  201.757418][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.848778][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  201.858107][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  201.872513][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  201.887148][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  201.896299][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  202.080038][   T12] bridge_slave_1: left allmulticast mode
[  202.098788][   T12] bridge_slave_1: left promiscuous mode
[  202.118917][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.144427][   T12] bridge_slave_0: left allmulticast mode
[  202.152200][   T12] bridge_slave_0: left promiscuous mode
[  202.168385][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.112779][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  203.134793][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  203.163885][   T12] bond0 (unregistering): Released all slaves
[  203.352137][T10831] netlink: 'syz.1.1260': attribute type 1 has an invalid length.
[  203.360563][T10831] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1260'.
[  203.750272][T10849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1263'.
[  203.936181][   T51] Bluetooth: hci4: command tx timeout
[  204.459622][T10881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1269'.
[  204.715391][T10889] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1270'.
[  204.743487][T10889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  204.882579][T10899] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1273'.
[  204.958385][   T24] hid-generic 0005:04F3:FFF9.0001: item fetching failed at offset 0/1
[  205.047260][   T24] hid-generic 0005:04F3:FFF9.0001: probe with driver hid-generic failed with error -22
[  205.466274][T10911] delete_channel: no stack
[  205.627273][   T12] hsr_slave_0: left promiscuous mode
[  205.653205][   T12] hsr_slave_1: left promiscuous mode
[  205.671002][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  205.690951][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  205.721950][T10932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1280'.
[  205.737825][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  205.746460][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  205.819874][   T12] veth1_macvtap: left promiscuous mode
[  205.838534][   T12] veth0_macvtap: left promiscuous mode
[  205.855070][   T12] veth1_vlan: left promiscuous mode
[  205.871453][   T12] veth0_vlan: left promiscuous mode
[  205.884755][T10939] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1282'.
[  206.013621][ T5156] Bluetooth: hci4: command tx timeout
[  206.752881][   T12] team0 (unregistering): Port device team_slave_1 removed
[  206.793076][   T12] team0 (unregistering): Port device team_slave_0 removed
[  206.898451][ T5842] Bluetooth: hci2: command 0x0406 tx timeout
[  206.903036][ T5156] Bluetooth: hci1: command 0x0406 tx timeout
[  207.262172][T10781] chnl_net:caif_netlink_parms(): no params data found
[  207.834770][T10781] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.856328][T10781] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.884541][T10781] bridge_slave_0: entered allmulticast mode
[  207.892643][T10994] netlink: 15 bytes leftover after parsing attributes in process `syz.2.1293'.
[  207.917261][T10781] bridge_slave_0: entered promiscuous mode
[  207.941194][T10781] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.958966][T10781] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.969144][T10781] bridge_slave_1: entered allmulticast mode
[  207.980998][T10781] bridge_slave_1: entered promiscuous mode
[  208.068922][T10781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.093482][ T5838] Bluetooth: hci4: command tx timeout
[  208.121512][T10781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.284699][T11008] SET target dimension over the limit!
[  208.416549][T10781] team0: Port device team_slave_0 added
[  208.450586][T11016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1297'.
[  208.490865][T10781] team0: Port device team_slave_1 added
[  208.695766][T11026] netlink: 'syz.3.1299': attribute type 1 has an invalid length.
[  208.769208][T11026] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1299'.
[  208.843091][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1299'.
[  208.862440][T10781] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.883008][T10781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.950161][T10781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.002879][T10781] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.020421][T10781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.084196][T11040] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.152275][T10781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.181160][T11044] netlink: 'syz.3.1304': attribute type 1 has an invalid length.
[  209.516749][T10781] hsr_slave_0: entered promiscuous mode
[  209.520550][T11055] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  209.534363][T10781] hsr_slave_1: entered promiscuous mode
[  209.540748][T10781] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  209.562998][T10781] Cannot create hsr debugfs directory
[  209.670895][T11059] netlink: 'syz.1.1307': attribute type 4 has an invalid length.
[  209.742568][T11061] tipc: Started in network mode
[  209.748224][T11061] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  209.763442][T11061] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  209.789049][T11061] tipc: Enabled bearer <udp:syz1>, priority 10
[  209.867605][T11068] netlink: 'syz.0.1310': attribute type 12 has an invalid length.
[  210.066794][T11068] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255)
[  210.173292][ T5838] Bluetooth: hci4: command tx timeout
[  210.292547][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1313'.
[  210.502875][T11101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1314'.
[  210.708042][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1316'.
[  210.929160][ T5850] tipc: Node number set to 1
[  211.423457][T11147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1326'.
[  211.447545][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1325'.
[  211.541389][T11151] xt_CT: No such helper "syz1"
[  211.667830][T11155] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1329'.
[  211.692642][T11158] gtp0: entered promiscuous mode
[  211.751081][T10781] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  211.765888][T10781] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  211.785655][T10781] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  211.801936][T10781] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  211.998382][T10781] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.035684][T11172] netlink: 'syz.2.1332': attribute type 1 has an invalid length.
[  212.054707][T10781] 8021q: adding VLAN 0 to HW filter on device team0
[  212.150337][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.157551][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.220124][T11182] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1332'.
[  212.230216][T11176] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  212.266601][T11172] 8021q: adding VLAN 0 to HW filter on device bond1
[  212.275519][   T64] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  212.477930][T11182] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  212.488652][T11182] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[  212.501219][T11182] bond1 (unregistering): Released all slaves
[  212.541319][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.548640][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.778096][T11199] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  213.099082][T11214] netlink: 'syz.1.1343': attribute type 21 has an invalid length.
[  213.121262][T10781] 8021q: adding VLAN 0 to HW filter on device batadv0
[  213.140753][T11214] IPv6: NLM_F_CREATE should be specified when creating new route
[  213.151148][T11217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1344'.
[  213.151977][T11214] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  213.167407][T11214] IPv6: NLM_F_CREATE should be set when creating new route
[  213.174798][T11214] IPv6: NLM_F_CREATE should be set when creating new route
[  213.182025][T11214] IPv6: NLM_F_CREATE should be set when creating new route
[  213.192368][T11217] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1344'.
[  213.318815][T11229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1346'.
[  213.355201][T11229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1346'.
[  213.390178][ T5838] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  213.476744][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1348'.
[  213.496619][T11241] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.1350'.
[  213.999677][T11277] netlink: 'syz.0.1359': attribute type 12 has an invalid length.
[  214.270468][T11285] geneve1: entered promiscuous mode
[  214.292588][T10781] veth0_vlan: entered promiscuous mode
[  214.318233][T10781] veth1_vlan: entered promiscuous mode
[  214.357690][T11293] netlink: 'syz.2.1363': attribute type 21 has an invalid length.
[  214.386182][T10781] veth0_macvtap: entered promiscuous mode
[  214.408089][T10781] veth1_macvtap: entered promiscuous mode
[  214.442071][T10781] batman_adv: batadv0: Interface activated: batadv_slave_0
[  214.468756][T10781] batman_adv: batadv0: Interface activated: batadv_slave_1
[  214.493682][T10781] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  214.502404][T10781] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  214.520139][T10781] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  214.529785][T10781] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  214.681393][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.714926][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.824714][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.849841][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.739194][ T2979] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.886974][ T2979] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.005724][ T2979] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.135651][ T2979] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.456070][ T2979] bridge_slave_1: left allmulticast mode
[  216.468125][ T2979] bridge_slave_1: left promiscuous mode
[  216.484966][ T2979] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.502619][T11356] netlink: 'syz.2.1379': attribute type 24 has an invalid length.
[  216.527079][ T2979] bridge_slave_0: left allmulticast mode
[  216.543158][ T2979] bridge_slave_0: left promiscuous mode
[  216.549058][ T2979] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.912504][ T5156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  216.927007][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  216.938183][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  216.961648][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  216.974421][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  217.142723][ T2979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  217.154111][ T2979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  217.167099][ T2979] bond0 (unregistering): Released all slaves
[  217.181898][T11350] tipc: New replicast peer: 255.255.255.255
[  217.188323][T11350] tipc: Enabled bearer <udp:syz2>, priority 10
[  217.195693][T11359] __nla_validate_parse: 9 callbacks suppressed
[  217.195709][T11359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1380'.
[  217.212337][T11359] tipc: Disabling bearer <udp:syz2>
[  217.476099][T11388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1384'.
[  217.532665][T11383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  217.929509][T11406] IPv6: sit1: Disabled Multicast RS
[  217.948109][T11406] sit1: entered allmulticast mode
[  218.078315][T11413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1390'.
[  218.223952][T11417] xt_CT: No such helper "pptp"
[  219.182357][ T5838] Bluetooth: hci4: command tx timeout
[  219.573160][ T2979] hsr_slave_0: left promiscuous mode
[  219.638155][ T2979] hsr_slave_1: left promiscuous mode
[  219.644618][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  219.658819][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_0
[  219.667951][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  219.687146][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_1
[  219.721989][ T2979] veth1_macvtap: left promiscuous mode
[  219.732135][ T2979] veth0_macvtap: left promiscuous mode
[  219.740934][ T2979] veth1_vlan: left promiscuous mode
[  219.749684][ T2979] veth0_vlan: left promiscuous mode
[  219.860595][T11464] xt_CT: No such helper "syz0"
[  219.878401][T11469] syz.3.1407: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  219.901800][T11469] CPU: 0 UID: 0 PID: 11469 Comm: syz.3.1407 Not tainted 6.16.0-rc1-syzkaller-00102-g5466491c9e33 #0 PREEMPT(full) 
[  219.901826][T11469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  219.901842][T11469] Call Trace:
[  219.901850][T11469]  <TASK>
[  219.901859][T11469]  dump_stack_lvl+0x189/0x250
[  219.901904][T11469]  ? __pfx_dump_stack_lvl+0x10/0x10
[  219.901929][T11469]  ? __pfx__printk+0x10/0x10
[  219.901949][T11469]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  219.901970][T11469]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  219.901990][T11469]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  219.902012][T11469]  warn_alloc+0x214/0x310
[  219.902033][T11469]  ? stack_depot_save_flags+0x40/0x900
[  219.902059][T11469]  ? __pfx_warn_alloc+0x10/0x10
[  219.902079][T11469]  ? kasan_save_track+0x4f/0x80
[  219.902104][T11469]  ? xskq_create+0x56/0x170
[  219.902124][T11469]  ? xsk_init_queue+0xb0/0x110
[  219.902143][T11469]  ? xsk_setsockopt+0x43f/0x710
[  219.902161][T11469]  ? do_sock_setsockopt+0x257/0x3e0
[  219.902177][T11469]  ? __x64_sys_setsockopt+0x18b/0x220
[  219.902194][T11469]  ? do_syscall_64+0xfa/0x3b0
[  219.902208][T11469]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.902232][T11469]  __vmalloc_node_range_noprof+0x125/0x12f0
[  219.902284][T11469]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  219.902310][T11469]  ? __kasan_kmalloc+0x93/0xb0
[  219.902331][T11469]  vmalloc_user_noprof+0xad/0xf0
[  219.902349][T11469]  ? xskq_create+0xbf/0x170
[  219.902371][T11469]  xskq_create+0xbf/0x170
[  219.902396][T11469]  xsk_init_queue+0xb0/0x110
[  219.902426][T11469]  xsk_setsockopt+0x43f/0x710
[  219.902449][T11469]  ? __pfx_xsk_setsockopt+0x10/0x10
[  219.902469][T11469]  ? __lock_acquire+0xab9/0xd20
[  219.902504][T11469]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  219.902525][T11469]  ? __pfx_xsk_setsockopt+0x10/0x10
[  219.902553][T11469]  do_sock_setsockopt+0x257/0x3e0
[  219.902580][T11469]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  219.902605][T11469]  ? __fget_files+0x2a/0x420
[  219.902635][T11469]  __x64_sys_setsockopt+0x18b/0x220
[  219.902662][T11469]  do_syscall_64+0xfa/0x3b0
[  219.902677][T11469]  ? lockdep_hardirqs_on+0x9c/0x150
[  219.902699][T11469]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.902716][T11469]  ? clear_bhb_loop+0x60/0xb0
[  219.902738][T11469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.902756][T11469] RIP: 0033:0x7fdbb418e929
[  219.902781][T11469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  219.902794][T11469] RSP: 002b:00007fdbb4f94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  219.902812][T11469] RAX: ffffffffffffffda RBX: 00007fdbb43b6160 RCX: 00007fdbb418e929
[  219.902825][T11469] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  219.902835][T11469] RBP: 00007fdbb4210b39 R08: 0000000000000004 R09: 0000000000000000
[  219.902844][T11469] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  219.902852][T11469] R13: 0000000000000001 R14: 00007fdbb43b6160 R15: 00007ffcd91442b8
[  219.902874][T11469]  </TASK>
[  220.227530][T11469] Mem-Info:
[  220.230767][T11469] active_anon:5043 inactive_anon:0 isolated_anon:0
[  220.230767][T11469]  active_file:1122 inactive_file:39883 isolated_file:0
[  220.230767][T11469]  unevictable:768 dirty:65 writeback:0
[  220.230767][T11469]  slab_reclaimable:11015 slab_unreclaimable:104338
[  220.230767][T11469]  mapped:29104 shmem:1376 pagetables:1289
[  220.230767][T11469]  sec_pagetables:0 bounce:0
[  220.230767][T11469]  kernel_misc_reclaimable:0
[  220.230767][T11469]  free:1326966 free_pcp:15314 free_cma:0
[  220.278566][T11469] Node 0 active_anon:20172kB inactive_anon:0kB active_file:4488kB inactive_file:159332kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116416kB dirty:260kB writeback:0kB shmem:3968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11892kB pagetables:5032kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  220.350302][T11469] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  220.382493][T11469] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  220.422361][T11469] lowmem_reserve[]: 0 2501 2502 2502 2502
[  220.430019][T11469] Node 0 DMA32 free:1395016kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20124kB inactive_anon:0kB active_file:4488kB inactive_file:157504kB unevictable:1536kB writepending:256kB present:3129332kB managed:2561036kB mlocked:0kB bounce:0kB free_pcp:39884kB local_pcp:21052kB free_cma:0kB
[  220.467737][T11469] lowmem_reserve[]: 0 0 1 1 1
[  220.472617][T11469] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  220.507413][T11469] lowmem_reserve[]: 0 0 0 0 0
[  220.512196][T11469] Node 1 Normal free:3897472kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21528kB local_pcp:10340kB free_cma:0kB
[  220.545239][T11469] lowmem_reserve[]: 0 0 0 0 0
[  220.551004][T11469] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  220.568824][T11469] Node 0 DMA32: 586*4kB (UM) 422*8kB (UM) 181*16kB (UM) 338*32kB (UME) 792*64kB (UME) 621*128kB (UME) 445*256kB (UME) 284*512kB (UME) 135*1024kB (UME) 10*2048kB (UME) 202*4096kB (UM) = 1395048kB
[  220.588614][T11469] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB
[  220.605213][T11469] Node 1 Normal: 236*4kB (UE) 48*8kB (UME) 41*16kB (UME) 74*32kB (UME) 26*64kB (UME) 8*128kB (UME) 3*256kB (ME) 5*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 948*4096kB (M) = 3897472kB
[  220.624189][T11469] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  220.635357][T11469] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  220.644799][T11469] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  220.668270][T11469] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  220.684666][T11469] 42378 total pagecache pages
[  220.689514][T11469] 0 pages in swap cache
[  220.693774][T11469] Free swap  = 124996kB
[  220.698190][T11469] Total swap = 124996kB
[  220.702384][T11469] 2097051 pages RAM
[  220.706394][T11469] 0 pages HighMem/MovableOnly
[  220.711213][T11469] 424686 pages reserved
[  220.716888][T11469] 0 pages cma reserved
[  220.951693][ T2979] team0 (unregistering): Port device team_slave_1 removed
[  221.012634][ T2979] team0 (unregistering): Port device team_slave_0 removed
[  221.214318][ T5838] Bluetooth: hci4: command tx timeout
[  221.491510][T11374] chnl_net:caif_netlink_parms(): no params data found
[  221.725737][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1413'.
[  221.811622][T11374] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.819300][T11374] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.827191][T11374] bridge_slave_0: entered allmulticast mode
[  221.837909][T11374] bridge_slave_0: entered promiscuous mode
[  221.891186][T11374] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.911912][T11374] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.942151][T11374] bridge_slave_1: entered allmulticast mode
[  221.965318][T11374] bridge_slave_1: entered promiscuous mode
[  221.990839][T11505] syzkaller1: entered promiscuous mode
[  222.027460][T11505] syzkaller1: entered allmulticast mode
[  222.275572][T11374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  222.325727][T11374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  222.345918][T11527] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1425'.
[  222.372428][T11525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1422'.
[  222.540962][T11374] team0: Port device team_slave_0 added
[  222.587244][T11374] team0: Port device team_slave_1 added
[  222.752581][T11374] batman_adv: batadv0: Adding interface: batadv_slave_0
[  222.754223][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1433'.
[  222.774318][T11547] netlink: 'syz.0.1431': attribute type 1 has an invalid length.
[  222.792549][T11553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1433'.
[  222.802670][T11374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.810441][T11548] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1433'.
[  222.838156][T11374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  222.867164][T11553] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1433'.
[  222.906003][T11547] 8021q: adding VLAN 0 to HW filter on device bond3
[  222.914526][T11374] batman_adv: batadv0: Adding interface: batadv_slave_1
[  222.921683][T11374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.949198][T11374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  223.003706][T11558] 8021q: adding VLAN 0 to HW filter on device bond3
[  223.011535][T11558] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address
[  223.027648][T11558] bond3: (slave vxcan1): Error -95 calling set_mac_address
[  223.126302][T11547] gretap1: entered promiscuous mode
[  223.159097][T11547] bond3: (slave gretap1): making interface the new active one
[  223.169564][T11547] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  223.295912][ T5838] Bluetooth: hci4: command tx timeout
[  223.308912][T11374] hsr_slave_0: entered promiscuous mode
[  223.400354][T11374] hsr_slave_1: entered promiscuous mode
[  223.419810][T11374] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  223.429652][T11588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1436'.
[  223.440197][T11588] netlink: 'syz.3.1436': attribute type 7 has an invalid length.
[  223.448093][T11588] netlink: 'syz.3.1436': attribute type 8 has an invalid length.
[  223.456242][T11588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1436'.
[  223.479104][T11591] xt_socket: unknown flags 0x3c
[  223.482979][T11374] Cannot create hsr debugfs directory
[  223.498959][T11588] erspan0: entered promiscuous mode
[  223.508746][T11588] erspan0: left promiscuous mode
[  224.006751][T11374] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  224.018882][T11374] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  224.029148][T11374] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  224.039557][T11374] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  224.111622][T11374] 8021q: adding VLAN 0 to HW filter on device bond0
[  224.132003][T11374] 8021q: adding VLAN 0 to HW filter on device team0
[  224.145874][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.153734][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  224.171806][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.179233][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.358065][T11374] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.577349][T11616] x_tables: duplicate underflow at hook 2
[  224.597736][T11622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1442'.
[  224.611495][T11620] netlink: 'syz.3.1443': attribute type 1 has an invalid length.
[  224.624749][T11620] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1443'.
[  224.779554][T11374] veth0_vlan: entered promiscuous mode
[  224.801066][T11374] veth1_vlan: entered promiscuous mode
[  224.883583][T11631] netlink: 'syz.3.1445': attribute type 4 has an invalid length.
[  224.925987][T11374] veth0_macvtap: entered promiscuous mode
[  224.981061][T11374] veth1_macvtap: entered promiscuous mode
[  225.002867][T11374] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.048970][T11374] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.087962][T11374] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.104571][T11374] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.128553][T11374] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.139264][T11374] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.354451][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.365506][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.373257][ T5838] Bluetooth: hci4: command tx timeout
[  225.472476][T11658] : renamed from hsr0 (while UP)
[  225.479745][T11660] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001
[  225.504556][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.517226][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.012651][T11683] xt_TPROXY: Can be used only with -p tcp or -p udp
[  226.501202][T11713] netlink: 'syz.2.1471': attribute type 4 has an invalid length.
[  226.679321][T11730] netlink: ct family unspecified
[  226.685791][T11730] openvswitch: netlink: Actions may not be safe on all matching packets
[  226.977454][   T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.661313][T11746] __nla_validate_parse: 7 callbacks suppressed
[  227.661335][T11746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1481'.
[  227.747948][   T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.821695][T11744] veth7: entered promiscuous mode
[  227.827515][T11744] veth7: entered allmulticast mode
[  228.025022][   T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.237258][   T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.349203][T11775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1490'.
[  228.429758][ T5156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  228.441544][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  228.452315][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  228.464328][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  228.475921][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  228.733738][   T36] bridge_slave_1: left allmulticast mode
[  228.755673][   T36] bridge_slave_1: left promiscuous mode
[  228.761629][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.793427][T11797] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1497'.
[  228.814390][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1497'.
[  228.854993][   T36] bridge_slave_0: left allmulticast mode
[  228.862039][   T36] bridge_slave_0: left promiscuous mode
[  228.891373][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.964854][T11809] netlink: 'syz.2.1499': attribute type 11 has an invalid length.
[  228.972806][T11809] netlink: 'syz.2.1499': attribute type 11 has an invalid length.
[  228.990403][T11809] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1499'.
[  229.378009][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  229.388807][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  229.399209][   T36] bond0 (unregistering): Released all slaves
[  229.411346][T11795] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1497'.
[  229.477033][T11808] netlink: 'syz.2.1499': attribute type 11 has an invalid length.
[  229.529351][T11808] netlink: 'syz.2.1499': attribute type 11 has an invalid length.
[  229.565610][T11808] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1499'.
[  229.683817][T11815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1500'.
[  230.097597][T11831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1505'.
[  230.567901][T11847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1508'.
[  230.573662][ T5156] Bluetooth: hci4: command tx timeout
[  232.275266][T11907] netlink: 'syz.0.1526': attribute type 1 has an invalid length.
[  232.301581][   T36] hsr_slave_0: left promiscuous mode
[  232.316962][   T36] hsr_slave_1: left promiscuous mode
[  232.336029][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.352988][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  232.371615][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.382642][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  232.413794][   T36] veth1_macvtap: left promiscuous mode
[  232.419405][   T36] veth0_macvtap: left promiscuous mode
[  232.426129][   T36] veth1_vlan: left promiscuous mode
[  232.431516][   T36] veth0_vlan: left promiscuous mode
[  232.653097][ T5156] Bluetooth: hci4: command tx timeout
[  232.941968][   T36] team0 (unregistering): Port device team_slave_1 removed
[  232.986075][   T36] team0 (unregistering): Port device team_slave_0 removed
[  233.558199][T11781] chnl_net:caif_netlink_parms(): no params data found
[  233.754476][T11937] __nla_validate_parse: 8 callbacks suppressed
[  233.754495][T11937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1533'.
[  233.803509][T11937] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1533'.
[  234.065624][T11781] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.078533][T11781] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.106719][T11781] bridge_slave_0: entered allmulticast mode
[  234.127610][T11952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1537'.
[  234.154814][T11781] bridge_slave_0: entered promiscuous mode
[  234.172244][T11781] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.222224][T11781] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.245463][T11781] bridge_slave_1: entered allmulticast mode
[  234.262479][T11781] bridge_slave_1: entered promiscuous mode
[  234.399473][T11781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  234.466492][T11781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  234.480282][T11974] netlink: 'syz.1.1540': attribute type 1 has an invalid length.
[  234.678212][T11781] team0: Port device team_slave_0 added
[  234.699344][T11989] netlink: 'syz.1.1546': attribute type 21 has an invalid length.
[  234.707469][T11989] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1546'.
[  234.725901][T11781] team0: Port device team_slave_1 added
[  234.737743][ T5156] Bluetooth: hci4: command tx timeout
[  234.759278][T11992] netlink: 'syz.1.1546': attribute type 21 has an invalid length.
[  234.767550][T11992] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1546'.
[  234.767584][T11989] netlink: 'syz.1.1546': attribute type 4 has an invalid length.
[  234.803033][T11989] netlink: 'syz.1.1546': attribute type 5 has an invalid length.
[  234.812444][T11989] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1546'.
[  234.839448][T11985] syzkaller0: entered promiscuous mode
[  234.846472][T11985] syzkaller0: entered allmulticast mode
[  234.866156][T11992] netlink: 'syz.1.1546': attribute type 4 has an invalid length.
[  234.874675][T11992] netlink: 'syz.1.1546': attribute type 5 has an invalid length.
[  234.883470][T11992] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1546'.
[  234.891540][   T10] hid-generic 0005:04F3:FFF9.0002: item fetching failed at offset 0/1
[  234.897866][T11983] tipc: Started in network mode
[  234.907682][T11983] tipc: Node identity 0ae1b941de4d, cluster identity 4711
[  234.915592][T11983] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  234.920555][   T10] hid-generic 0005:04F3:FFF9.0002: probe with driver hid-generic failed with error -22
[  234.961260][T12003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1550'.
[  234.977771][T11781] batman_adv: batadv0: Adding interface: batadv_slave_0
[  234.986653][T11781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.018836][T11781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  235.033324][T11983] tipc: Resetting bearer <eth:syzkaller0>
[  235.047016][T11781] batman_adv: batadv0: Adding interface: batadv_slave_1
[  235.056964][T11781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.084816][T11781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  235.103338][T11982] tipc: Resetting bearer <eth:syzkaller0>
[  235.133697][T11982] tipc: Disabling bearer <eth:syzkaller0>
[  235.329468][T12013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  235.426226][T11781] hsr_slave_0: entered promiscuous mode
[  235.432582][T11781] hsr_slave_1: entered promiscuous mode
[  236.021288][T12051] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1566'.
[  236.054185][T12051] xt_TPROXY: Can be used only with -p tcp or -p udp
[  236.221900][T12058] veth7: entered allmulticast mode
[  236.565374][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1572'.
[  236.710575][T12082] nft_compat: unsupported protocol 0
[  236.780529][T11781] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  236.813093][ T5156] Bluetooth: hci4: command tx timeout
[  236.918728][T11781] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  236.935440][T11781] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  236.979640][T11781] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  237.330378][T11781] 8021q: adding VLAN 0 to HW filter on device bond0
[  237.438779][T11781] 8021q: adding VLAN 0 to HW filter on device team0
[  237.467956][T12113] xt_CT: You must specify a L4 protocol and not use inversions on it
[  237.497185][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.504430][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.560891][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.568580][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.964972][T12143] x_tables: duplicate underflow at hook 1
[  238.253362][T11781] 8021q: adding VLAN 0 to HW filter on device batadv0
[  238.782731][T12173] netlink: 'syz.1.1592': attribute type 1 has an invalid length.
[  239.018536][T11781] veth0_vlan: entered promiscuous mode
[  239.111712][T11781] veth1_vlan: entered promiscuous mode
[  239.209521][T11781] veth0_macvtap: entered promiscuous mode
[  239.296204][T11781] veth1_macvtap: entered promiscuous mode
[  239.314675][T12192] syzkaller0: entered allmulticast mode
[  239.338043][T12188] syzkaller0: left allmulticast mode
[  239.381445][T11781] batman_adv: batadv0: Interface activated: batadv_slave_0
[  239.429316][T11781] batman_adv: batadv0: Interface activated: batadv_slave_1
[  239.476368][T11781] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  239.485392][T12200] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  239.503381][T11781] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  239.523919][T11781] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  239.532757][T11781] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.735159][T10819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.776561][T10819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.856785][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.887886][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.148157][T12218] netlink: 'syz.0.1611': attribute type 39 has an invalid length.
[  240.205716][T12222] __nla_validate_parse: 13 callbacks suppressed
[  240.205736][T12222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1612'.
[  240.712813][ T1155] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.890356][ T1155] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.259478][ T1155] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.430596][ T1155] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.581447][T12240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1617'.
[  241.583112][ T1155] bridge_slave_1: left allmulticast mode
[  241.627524][ T1155] bridge_slave_1: left promiscuous mode
[  241.642070][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.662655][T12249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1619'.
[  241.678524][ T1155] bridge_slave_0: left allmulticast mode
[  241.692955][ T1155] bridge_slave_0: left promiscuous mode
[  241.713892][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.936288][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  241.946996][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  241.957732][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  241.969325][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  241.977644][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  242.190096][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  242.203411][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  242.216075][ T1155] bond0 (unregistering): Released all slaves
[  242.269459][T12250] tc_dump_action: action bad kind
[  242.369911][T12260] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1622'.
[  242.590048][T12273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1624'.
[  242.709765][T12267] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1622'.
[  242.778976][T12274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1625'.
[  242.940886][T12286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1629'.
[  243.171791][T12297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1631'.
[  243.397549][T12305] gretap0: entered allmulticast mode
[  243.956064][T12328] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[  244.018223][T12335] netlink: 'syz.0.1644': attribute type 1 has an invalid length.
[  244.046683][T12335] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1644'.
[  244.107986][ T5156] Bluetooth: hci4: command tx timeout
[  244.158052][T12342] sctp: [Deprecated]: syz.3.1645 (pid 12342) Use of struct sctp_assoc_value in delayed_ack socket option.
[  244.158052][T12342] Use struct sctp_sack_info instead
[  244.266215][T12336] tipc: Started in network mode
[  244.271134][T12336] tipc: Node identity 080211, cluster identity 4711
[  244.348957][T12336] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  244.453336][ T1155] hsr_slave_0: left promiscuous mode
[  244.480759][ T1155] hsr_slave_1: left promiscuous mode
[  244.490457][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.505785][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  244.515744][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  244.523600][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  244.544527][ T1155] veth1_macvtap: left promiscuous mode
[  244.550326][ T1155] veth0_macvtap: left promiscuous mode
[  244.557581][ T1155] veth1_vlan: left promiscuous mode
[  244.563642][ T1155] veth0_vlan: left promiscuous mode
[  245.189893][ T1155] team0 (unregistering): Port device team_slave_1 removed
[  245.232861][ T1155] team0 (unregistering): Port device team_slave_0 removed
[  245.470353][ T5951] tipc: Node number set to 134353152
[  245.770058][T12255] chnl_net:caif_netlink_parms(): no params data found
[  245.788358][T12364] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  245.803445][T12364] batman_adv: batadv0: Removing interface: batadv_slave_0
[  245.847609][T12364] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  245.873138][T12364] batman_adv: batadv0: Removing interface: batadv_slave_1
[  245.931211][T12378] netlink: 'syz.2.1652': attribute type 4 has an invalid length.
[  245.968492][T12378] netlink: 'syz.2.1652': attribute type 4 has an invalid length.
[  246.130521][T12388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'.
[  246.172520][T12392] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1656'.
[  246.172916][T12390] nbd: couldn't find device at index 1006632960
[  246.181832][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1656'.
[  246.195280][ T5156] Bluetooth: hci4: command tx timeout
[  246.211469][T12388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1655'.
[  246.219288][T12390] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.344173][T12255] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.359379][T12255] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.368815][T12255] bridge_slave_0: entered allmulticast mode
[  246.377533][T12255] bridge_slave_0: entered promiscuous mode
[  246.386793][T12255] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.395013][T12255] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.403341][T12255] bridge_slave_1: entered allmulticast mode
[  246.476561][T12255] bridge_slave_1: entered promiscuous mode
[  246.557544][T12408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1661'.
[  246.581714][T12408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1661'.
[  246.607714][T12255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  246.617593][T12405] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1660'.
[  246.657310][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1662'.
[  246.695531][T12413] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1663'.
[  246.705320][T12255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.821932][T12255] team0: Port device team_slave_0 added
[  246.985454][T12255] team0: Port device team_slave_1 added
[  247.010698][T12425] netlink: 'syz.2.1668': attribute type 21 has an invalid length.
[  247.026122][T12425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1668'.
[  247.099749][T12255] batman_adv: batadv0: Adding interface: batadv_slave_0
[  247.107128][T12255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.133910][T12255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  247.165705][T12255] batman_adv: batadv0: Adding interface: batadv_slave_1
[  247.181066][T12255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.251055][T12255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  247.282489][T12439] xt_TPROXY: Can be used only with -p tcp or -p udp
[  247.327966][T12437] netlink: 'syz.2.1672': attribute type 11 has an invalid length.
[  247.334595][T12442] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  247.479456][T12444] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  247.539753][T12255] hsr_slave_0: entered promiscuous mode
[  247.567157][T12255] hsr_slave_1: entered promiscuous mode
[  248.253574][ T5156] Bluetooth: hci4: command tx timeout
[  248.805040][T12255] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  248.838379][T12503] : entered promiscuous mode
[  248.845583][T12255] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  248.900049][T12255] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  248.939345][T12255] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  249.031007][T12522] netlink: 'syz.1.1691': attribute type 1 has an invalid length.
[  249.064230][T12522] netlink: 'syz.1.1691': attribute type 2 has an invalid length.
[  249.087620][T12522] netlink: 'syz.1.1691': attribute type 1 has an invalid length.
[  249.176245][T12255] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.218274][T12255] 8021q: adding VLAN 0 to HW filter on device team0
[  249.289877][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.297099][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.344712][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.353347][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.524949][T12255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  249.919477][T12255] 8021q: adding VLAN 0 to HW filter on device batadv0
[  249.935546][T12552] netlink: 'syz.1.1699': attribute type 13 has an invalid length.
[  249.978139][T12552] veth0_macvtap: left promiscuous mode
[  249.984438][T12552] macvtap0: entered allmulticast mode
[  250.022391][T12552] macvtap0: refused to change device tx_queue_len
[  250.336699][ T5156] Bluetooth: hci4: command tx timeout
[  250.636007][T12255] veth0_vlan: entered promiscuous mode
[  250.680397][T12255] veth1_vlan: entered promiscuous mode
[  250.799700][T12255] veth0_macvtap: entered promiscuous mode
[  250.857879][T12255] veth1_macvtap: entered promiscuous mode
[  250.935558][T12255] batman_adv: batadv0: Interface activated: batadv_slave_0
[  250.978603][T12255] batman_adv: batadv0: Interface activated: batadv_slave_1
[  251.040002][T12255] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.082460][T12255] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.098533][T12255] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.128454][T12255] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.696614][T12594] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.775652][T12594] team_slave_0: left promiscuous mode
[  251.781744][T12594] team_slave_1: left promiscuous mode
[  252.052530][T12594] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  252.175042][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.197913][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.263362][   T24] syz1: Port: 1 Link DOWN
[  252.306113][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.347172][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.840664][T12624] x_tables: duplicate underflow at hook 3
[  252.964437][T12633] netlink: 'syz.1.1722': attribute type 3 has an invalid length.
[  253.002069][T12638] atomic_op ffff88807c01b998 conn xmit_atomic 0000000000000000
[  253.013998][T12633] xt_connbytes: Forcing CT accounting to be enabled
[  253.021090][T12633] --map-set only usable from mangle table
[  253.154782][T12643] __nla_validate_parse: 10 callbacks suppressed
[  253.154801][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1726'.
[  253.176526][T12647] netlink: 'syz.1.1727': attribute type 1 has an invalid length.
[  253.238735][T12649] netlink: 'syz.1.1727': attribute type 11 has an invalid length.
[  253.239907][ T2979] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.272271][T12649] netlink: 'syz.1.1727': attribute type 11 has an invalid length.
[  253.288523][T12649] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1727'.
[  253.455724][ T2979] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.709628][ T2979] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.768169][ T2979] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.862616][ T2979] bridge_slave_1: left allmulticast mode
[  253.869050][ T2979] bridge_slave_1: left promiscuous mode
[  253.875859][ T2979] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.884922][ T2979] bridge_slave_0: left allmulticast mode
[  253.890761][ T2979] bridge_slave_0: left promiscuous mode
[  253.897299][ T2979] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.207007][ T2979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  254.218048][ T2979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  254.239597][ T2979] bond0 (unregistering): Released all slaves
[  254.311426][T12656] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1729'.
[  254.331725][T12657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1730'.
[  254.736713][ T5156] Bluetooth: hci2: command 0x0406 tx timeout
[  254.869293][T12677] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1736'.
[  254.928904][T12684] netlink: 'syz.3.1736': attribute type 21 has an invalid length.
[  254.947464][T12684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1736'.
[  255.082031][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  255.091784][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  255.100678][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  255.112267][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  255.123208][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  255.459740][T12715] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  255.511233][T12717] bridge_slave_0: invalid flags given to default FDB implementation
[  255.620583][T12723] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1749'.
[  255.661979][T12725] netem: incorrect ge model size
[  255.683360][T12725] netem: change failed
[  255.719015][T12728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1750'.
[  255.748258][T12728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1750'.
[  256.040411][ T2979] hsr_slave_0: left promiscuous mode
[  256.052800][ T2979] hsr_slave_1: left promiscuous mode
[  256.065304][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  256.077552][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_0
[  256.100352][ T2979] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  256.115357][ T2979] batman_adv: batadv0: Removing interface: batadv_slave_1
[  256.171528][ T2979] veth1_macvtap: left promiscuous mode
[  256.177752][ T2979] veth0_macvtap: left promiscuous mode
[  256.187963][ T2979] veth1_vlan: left promiscuous mode
[  256.202021][ T2979] veth0_vlan: left promiscuous mode
[  256.243263][T12713] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  256.795599][ T2979] team0 (unregistering): Port device team_slave_1 removed
[  256.835953][ T2979] team0 (unregistering): Port device team_slave_0 removed
[  257.223312][ T5156] Bluetooth: hci4: command tx timeout
[  257.472657][T12771] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  258.483027][T12820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1775'.
[  258.528980][T12697] chnl_net:caif_netlink_parms(): no params data found
[  258.731179][T12831] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1778'.
[  258.824160][T12697] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.844653][T12697] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.851946][T12697] bridge_slave_0: entered allmulticast mode
[  258.864798][T12697] bridge_slave_0: entered promiscuous mode
[  258.878284][T12697] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.886860][T12697] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.899868][T12697] bridge_slave_1: entered allmulticast mode
[  258.908133][T12697] bridge_slave_1: entered promiscuous mode
[  259.039130][T12697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  259.055651][T12697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  259.224980][T12697] team0: Port device team_slave_0 added
[  259.251072][T12848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1783'.
[  259.270657][T12697] team0: Port device team_slave_1 added
[  259.293899][ T5156] Bluetooth: hci4: command tx timeout
[  259.417950][T12861] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1787'.
[  259.430804][T12861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1787'.
[  259.440497][T12861] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1787'.
[  259.454182][T12861] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1787'.
[  259.483646][T12697] batman_adv: batadv0: Adding interface: batadv_slave_0
[  259.500146][T12697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.528523][T12697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  259.573596][T12697] batman_adv: batadv0: Adding interface: batadv_slave_1
[  259.580601][T12697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.607400][T12697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  259.822515][T12870] bond3: entered promiscuous mode
[  259.829377][T12870] bond3: entered allmulticast mode
[  259.835754][T12870] 8021q: adding VLAN 0 to HW filter on device bond3
[  259.849790][T12697] hsr_slave_0: entered promiscuous mode
[  259.862631][T12697] hsr_slave_1: entered promiscuous mode
[  260.085812][T12881] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1792'.
[  260.438243][T12893] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1797'.
[  260.459396][T12892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1797'.
[  260.547913][T12887] syz.0.1794 (12887) used greatest stack depth: 16840 bytes left
[  261.021819][T12697] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  261.036950][T12697] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  261.063612][T12697] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  261.077672][T12914] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  261.092592][T12697] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  261.116065][T12916] x_tables: duplicate underflow at hook 2
[  261.233282][T12697] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.295394][T12697] 8021q: adding VLAN 0 to HW filter on device team0
[  261.324510][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.331708][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.373496][ T5156] Bluetooth: hci4: command tx timeout
[  261.383983][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.391282][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.164504][T12697] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.467231][T13002] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  262.691978][T12697] veth0_vlan: entered promiscuous mode
[  262.725874][T12697] veth1_vlan: entered promiscuous mode
[  262.787987][T12697] veth0_macvtap: entered promiscuous mode
[  262.857645][T12697] veth1_macvtap: entered promiscuous mode
[  262.893164][T12697] batman_adv: batadv0: Interface activated: batadv_slave_0
[  262.910091][T12697] batman_adv: batadv0: Interface activated: batadv_slave_1
[  262.928886][T12697] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  262.938534][T12697] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  262.948626][T12697] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  262.958464][T12697] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.147995][ T3031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.177524][ T3031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.268124][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.281404][T13046] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  263.304401][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.466409][ T5156] Bluetooth: hci4: command tx timeout
[  263.474335][T13019] ------------[ cut here ]------------
[  263.479997][T13019] refcount_t: underflow; use-after-free.
[  263.486057][T13019] WARNING: CPU: 0 PID: 13019 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0
[  263.495649][T13019] Modules linked in:
[  263.499764][T13019] CPU: 0 UID: 0 PID: 13019 Comm: kbnepd bnep0 Not tainted 6.16.0-rc1-syzkaller-00102-g5466491c9e33 #0 PREEMPT(full) 
[  263.512020][T13019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  263.522390][T13019] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0
[  263.528628][T13019] Code: 80 38 e2 8b e8 a7 c5 c2 fc 90 0f 0b 90 90 eb d7 e8 8b 1a ff fc c6 05 51 ba c9 0a 01 90 48 c7 c7 e0 38 e2 8b e8 87 c5 c2 fc 90 <0f> 0b 90 90 eb b7 e8 6b 1a ff fc c6 05 2e ba c9 0a 01 90 48 c7 c7
[  263.549036][T13019] RSP: 0018:ffffc900039976a0 EFLAGS: 00010246
[  263.555729][T13019] RAX: ef85ed48f226de00 RBX: 0000000000000003 RCX: ffff888028a58000
[  263.564060][T13019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  263.572030][T13019] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  263.580032][T13019] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: dffffc0000000000
[  263.588013][T13019] R13: ffff888057217060 R14: ffff888057217078 R15: ffffffff85f62610
[  263.596068][T13019] FS:  0000000000000000(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000
[  263.605226][T13019] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  263.611801][T13019] CR2: 00007fd5c12e56c0 CR3: 0000000068b1a000 CR4: 00000000003526f0
[  263.619893][T13019] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  263.628571][T13019] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  263.636631][T13019] Call Trace:
[  263.640008][T13019]  <TASK>
[  263.643101][T13019]  klist_dec_and_del+0x3c7/0x3d0
[  263.648033][T13019]  ? __pfx_klist_children_put+0x10/0x10
[  263.653704][T13019]  klist_del+0xa6/0x110
[  263.658255][T13019]  device_del+0x280/0x8e0
[  263.662606][T13019]  ? _raw_spin_unlock_irq+0x2e/0x50
[  263.668160][T13019]  ? pm_runtime_set_memalloc_noio+0x1f4/0x260
[  263.674344][T13019]  ? __pfx_device_del+0x10/0x10
[  263.679200][T13019]  ? netdev_unregister_kobject+0x344/0x450
[  263.685032][T13019]  unregister_netdevice_many_notify+0x1d52/0x2320
[  263.691469][T13019]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  263.698469][T13019]  ? rcu_is_watching+0x15/0xb0
[  263.703269][T13019]  ? trace_contention_end+0x39/0x120
[  263.709040][T13019]  ? __mutex_lock+0x330/0xe80
[  263.713849][T13019]  ? __lock_acquire+0xab9/0xd20
[  263.718805][T13019]  ? __lock_acquire+0xab9/0xd20
[  263.723723][T13019]  unregister_netdevice_queue+0x33c/0x380
[  263.729458][T13019]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  263.735852][T13019]  ? rtnl_net_dev_lock+0x36/0x2f0
[  263.740887][T13019]  ? rtnl_net_dev_lock+0x2de/0x2f0
[  263.746220][T13019]  unregister_netdev+0x1f/0x60
[  263.750990][T13019]  bnep_session+0x294d/0x2b40
[  263.755712][T13019]  ? trace_sched_exit_tp+0x38/0x120
[  263.761252][T13019]  ? __lock_acquire+0xab9/0xd20
[  263.766493][T13019]  ? __pfx_bnep_session+0x10/0x10
[  263.771710][T13019]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  263.777644][T13019]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  263.784165][T13019]  ? __pfx_woken_wake_function+0x10/0x10
[  263.789789][T13019]  ? __kthread_parkme+0x7b/0x200
[  263.794886][T13019]  ? __kthread_parkme+0x1a1/0x200
[  263.799910][T13019]  kthread+0x70e/0x8a0
[  263.804011][T13019]  ? __pfx_bnep_session+0x10/0x10
[  263.809052][T13019]  ? __pfx_kthread+0x10/0x10
[  263.813703][T13019]  ? _raw_spin_unlock_irq+0x23/0x50
[  263.818898][T13019]  ? lockdep_hardirqs_on+0x9c/0x150
[  263.824212][T13019]  ? __pfx_kthread+0x10/0x10
[  263.828896][T13019]  ret_from_fork+0x3fc/0x770
[  263.833507][T13019]  ? __pfx_ret_from_fork+0x10/0x10
[  263.838617][T13019]  ? __switch_to_asm+0x39/0x70
[  263.843539][T13019]  ? __switch_to_asm+0x33/0x70
[  263.848297][T13019]  ? __pfx_kthread+0x10/0x10
[  263.853058][T13019]  ret_from_fork_asm+0x1a/0x30
[  263.857874][T13019]  </TASK>
[  263.861159][T13019] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  263.868474][T13019] CPU: 0 UID: 0 PID: 13019 Comm: kbnepd bnep0 Not tainted 6.16.0-rc1-syzkaller-00102-g5466491c9e33 #0 PREEMPT(full) 
[  263.880833][T13019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  263.891054][T13019] Call Trace:
[  263.894409][T13019]  <TASK>
[  263.897345][T13019]  dump_stack_lvl+0x99/0x250
[  263.901967][T13019]  ? __asan_memcpy+0x40/0x70
[  263.906548][T13019]  ? __pfx_dump_stack_lvl+0x10/0x10
[  263.911869][T13019]  ? __pfx__printk+0x10/0x10
[  263.916523][T13019]  panic+0x2db/0x790
[  263.920425][T13019]  ? __pfx_panic+0x10/0x10
[  263.924839][T13019]  ? show_trace_log_lvl+0x4fb/0x550
[  263.930036][T13019]  ? ret_from_fork_asm+0x1a/0x30
[  263.935049][T13019]  __warn+0x31b/0x4b0
[  263.939646][T13019]  ? refcount_warn_saturate+0x11a/0x1d0
[  263.945332][T13019]  ? refcount_warn_saturate+0x11a/0x1d0
[  263.950892][T13019]  report_bug+0x2be/0x4f0
[  263.955307][T13019]  ? refcount_warn_saturate+0x11a/0x1d0
[  263.960844][T13019]  ? refcount_warn_saturate+0x11a/0x1d0
[  263.966465][T13019]  ? refcount_warn_saturate+0x11c/0x1d0
[  263.972112][T13019]  handle_bug+0x84/0x160
[  263.976363][T13019]  exc_invalid_op+0x1a/0x50
[  263.980871][T13019]  asm_exc_invalid_op+0x1a/0x20
[  263.985796][T13019] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0
[  263.992021][T13019] Code: 80 38 e2 8b e8 a7 c5 c2 fc 90 0f 0b 90 90 eb d7 e8 8b 1a ff fc c6 05 51 ba c9 0a 01 90 48 c7 c7 e0 38 e2 8b e8 87 c5 c2 fc 90 <0f> 0b 90 90 eb b7 e8 6b 1a ff fc c6 05 2e ba c9 0a 01 90 48 c7 c7
[  264.011792][T13019] RSP: 0018:ffffc900039976a0 EFLAGS: 00010246
[  264.017853][T13019] RAX: ef85ed48f226de00 RBX: 0000000000000003 RCX: ffff888028a58000
[  264.025929][T13019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  264.033973][T13019] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  264.042020][T13019] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: dffffc0000000000
[  264.049994][T13019] R13: ffff888057217060 R14: ffff888057217078 R15: ffffffff85f62610
[  264.058248][T13019]  ? __pfx_klist_children_put+0x10/0x10
[  264.063826][T13019]  klist_dec_and_del+0x3c7/0x3d0
[  264.068957][T13019]  ? __pfx_klist_children_put+0x10/0x10
[  264.074493][T13019]  klist_del+0xa6/0x110
[  264.078639][T13019]  device_del+0x280/0x8e0
[  264.082959][T13019]  ? _raw_spin_unlock_irq+0x2e/0x50
[  264.088178][T13019]  ? pm_runtime_set_memalloc_noio+0x1f4/0x260
[  264.094231][T13019]  ? __pfx_device_del+0x10/0x10
[  264.099163][T13019]  ? netdev_unregister_kobject+0x344/0x450
[  264.104976][T13019]  unregister_netdevice_many_notify+0x1d52/0x2320
[  264.111381][T13019]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  264.118126][T13019]  ? rcu_is_watching+0x15/0xb0
[  264.122872][T13019]  ? trace_contention_end+0x39/0x120
[  264.128140][T13019]  ? __mutex_lock+0x330/0xe80
[  264.132805][T13019]  ? __lock_acquire+0xab9/0xd20
[  264.137642][T13019]  ? __lock_acquire+0xab9/0xd20
[  264.142568][T13019]  unregister_netdevice_queue+0x33c/0x380
[  264.148276][T13019]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  264.154499][T13019]  ? rtnl_net_dev_lock+0x36/0x2f0
[  264.159937][T13019]  ? rtnl_net_dev_lock+0x2de/0x2f0
[  264.165204][T13019]  unregister_netdev+0x1f/0x60
[  264.169992][T13019]  bnep_session+0x294d/0x2b40
[  264.174686][T13019]  ? trace_sched_exit_tp+0x38/0x120
[  264.179906][T13019]  ? __lock_acquire+0xab9/0xd20
[  264.184762][T13019]  ? __pfx_bnep_session+0x10/0x10
[  264.189774][T13019]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  264.195663][T13019]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  264.202067][T13019]  ? __pfx_woken_wake_function+0x10/0x10
[  264.207687][T13019]  ? __kthread_parkme+0x7b/0x200
[  264.212606][T13019]  ? __kthread_parkme+0x1a1/0x200
[  264.217615][T13019]  kthread+0x70e/0x8a0
[  264.221672][T13019]  ? __pfx_bnep_session+0x10/0x10
[  264.226679][T13019]  ? __pfx_kthread+0x10/0x10
[  264.231252][T13019]  ? _raw_spin_unlock_irq+0x23/0x50
[  264.236543][T13019]  ? lockdep_hardirqs_on+0x9c/0x150
[  264.241917][T13019]  ? __pfx_kthread+0x10/0x10
[  264.246501][T13019]  ret_from_fork+0x3fc/0x770
[  264.251110][T13019]  ? __pfx_ret_from_fork+0x10/0x10
[  264.256214][T13019]  ? __switch_to_asm+0x39/0x70
[  264.260985][T13019]  ? __switch_to_asm+0x33/0x70
[  264.265751][T13019]  ? __pfx_kthread+0x10/0x10
[  264.270447][T13019]  ret_from_fork_asm+0x1a/0x30
[  264.275211][T13019]  </TASK>
[  265.355960][T13019] Shutting down cpus with NMI
[  265.361076][T13019] Kernel Offset: disabled
[  265.365398][T13019] Rebooting in 86400 seconds..