last executing test programs:

1m5.745214167s ago: executing program 1 (id=655):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4)
setsockopt(r1, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971)
setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback, 0x402}, 0x1c)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e22, 0x4, 0x4e24, 0x2, 0xa, 0x20, 0x0, 0x19, r2, 0xffffffffffffffff}, {0x7, 0xdf, 0x4, 0x0, 0x1000000000000, 0x1, 0xffffffffffffff80, 0x1}, {0xfffffffffffffffa, 0xae, 0x1, 0x7}, 0x2, 0x6e6bb6, 0x2, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x4d4, 0xff}, 0x2, @in6=@mcast2, 0x3502, 0x3, 0x1, 0x4, 0xf8, 0x7ff, 0x9}}, 0xe8)

55.333167332s ago: executing program 1 (id=655):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4)
setsockopt(r1, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971)
setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback, 0x402}, 0x1c)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e22, 0x4, 0x4e24, 0x2, 0xa, 0x20, 0x0, 0x19, r2, 0xffffffffffffffff}, {0x7, 0xdf, 0x4, 0x0, 0x1000000000000, 0x1, 0xffffffffffffff80, 0x1}, {0xfffffffffffffffa, 0xae, 0x1, 0x7}, 0x2, 0x6e6bb6, 0x2, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x4d4, 0xff}, 0x2, @in6=@mcast2, 0x3502, 0x3, 0x1, 0x4, 0xf8, 0x7ff, 0x9}}, 0xe8)

43.460354276s ago: executing program 1 (id=655):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4)
setsockopt(r1, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971)
setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback, 0x402}, 0x1c)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e22, 0x4, 0x4e24, 0x2, 0xa, 0x20, 0x0, 0x19, r2, 0xffffffffffffffff}, {0x7, 0xdf, 0x4, 0x0, 0x1000000000000, 0x1, 0xffffffffffffff80, 0x1}, {0xfffffffffffffffa, 0xae, 0x1, 0x7}, 0x2, 0x6e6bb6, 0x2, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x4d4, 0xff}, 0x2, @in6=@mcast2, 0x3502, 0x3, 0x1, 0x4, 0xf8, 0x7ff, 0x9}}, 0xe8)

30.995011023s ago: executing program 1 (id=655):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4)
setsockopt(r1, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971)
setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback, 0x402}, 0x1c)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e22, 0x4, 0x4e24, 0x2, 0xa, 0x20, 0x0, 0x19, r2, 0xffffffffffffffff}, {0x7, 0xdf, 0x4, 0x0, 0x1000000000000, 0x1, 0xffffffffffffff80, 0x1}, {0xfffffffffffffffa, 0xae, 0x1, 0x7}, 0x2, 0x6e6bb6, 0x2, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x4d4, 0xff}, 0x2, @in6=@mcast2, 0x3502, 0x3, 0x1, 0x4, 0xf8, 0x7ff, 0x9}}, 0xe8)

19.773550003s ago: executing program 1 (id=655):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4)
setsockopt(r1, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971)
setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback, 0x402}, 0x1c)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e22, 0x4, 0x4e24, 0x2, 0xa, 0x20, 0x0, 0x19, r2, 0xffffffffffffffff}, {0x7, 0xdf, 0x4, 0x0, 0x1000000000000, 0x1, 0xffffffffffffff80, 0x1}, {0xfffffffffffffffa, 0xae, 0x1, 0x7}, 0x2, 0x6e6bb6, 0x2, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x4d4, 0xff}, 0x2, @in6=@mcast2, 0x3502, 0x3, 0x1, 0x4, 0xf8, 0x7ff, 0x9}}, 0xe8)

10.099881027s ago: executing program 1 (id=655):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4)
setsockopt(r1, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971)
setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback, 0x402}, 0x1c)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e22, 0x4, 0x4e24, 0x2, 0xa, 0x20, 0x0, 0x19, r2, 0xffffffffffffffff}, {0x7, 0xdf, 0x4, 0x0, 0x1000000000000, 0x1, 0xffffffffffffff80, 0x1}, {0xfffffffffffffffa, 0xae, 0x1, 0x7}, 0x2, 0x6e6bb6, 0x2, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x4d4, 0xff}, 0x2, @in6=@mcast2, 0x3502, 0x3, 0x1, 0x4, 0xf8, 0x7ff, 0x9}}, 0xe8)

2.175130964s ago: executing program 4 (id=1332):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="18081000018000000000000005000000851000000500000085000000bb000000a700000f00000000180000000000000000f4ff000000000095000000000000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

2.034960546s ago: executing program 4 (id=1336):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50)
r1 = socket$kcm(0x10, 0x2, 0x10)
r2 = socket$kcm(0x11, 0x2, 0x300)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400001fb7030000000000008500000083000000b70900000000000055090100000000007b00000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7090000000000001801000020646c0a00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000d00)=r5, 0x4)
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="3504", 0x2}], 0x1}, 0x10049014)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}})
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x10, &(0x7f0000000000), 0x4)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x2, 0x103, @empty, 0xb}, 0x1c)
sendto$inet6(r7, 0x0, 0x0, 0xb97, 0x0, 0xfffffd76)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup, 0x6, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3, 0x11}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

1.883196731s ago: executing program 0 (id=1337):
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180a1100000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="d87822a56f11ab74c878e8861ac0b0d2ff000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', <r2=>0x0}) (async)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, 0x0, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async, rerun: 32)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x2001, @loopback}, 0x10) (rerun: 32)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async)
sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="24aafa2cbcbf647ac508e14a15b391f45bfd9495b59171ad39130fbaa6e3d8ea89820346354d6dc36f211405d1b4eb720591b8e356bd2a77299232ee0587296b859d2e4b0367ed5beb72ab4700c01776e6129a9d6b6e00ae883108ae47fa363587ce5fbbe18b390bd4022d9dc465f80688b9c8066b08814784e14a723a3e436a6f3955ffb82578108e", 0x89}, {&(0x7f0000000380)="e999d009d51e328d2752498c07e656b55dfa07087e04bab989c1cdf5ab48f0ee0b3dad2d114d1ac4c0ab86255289bd895bf03b4a37723e2cbc262a0b3df408c326e832924abb273072e226a5f12d8db5a57827303a655e4695239ba049c4bd8b2562060a93c23cf7", 0x68}, {&(0x7f0000000600)="20213d968335d562fc7c46ea3229498de1f6a0fced68ede71a7f2bbd074e87492c07071e6086475d7a4dd615fd17b29650e6372e5764", 0x36}], 0x3}, 0x11) (async, rerun: 32)
sendmmsg$inet(r4, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb17", 0x52}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)='N', 0x1}, {&(0x7f0000000340)}], 0x2}}], 0x4, 0x4000219) (async, rerun: 32)
setsockopt$sock_int(r4, 0x1, 0x20, 0x0, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) (async)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async, rerun: 64)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r7], 0x1c}}, 0x0) (async, rerun: 64)
bind$can_raw(r3, &(0x7f0000000700), 0x10)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r5, 0x8040942d, &(0x7f0000000240)) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_route(0x10, 0x3, 0x0)
accept4(r9, 0x0, 0x0, 0x800) (async, rerun: 64)
sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000000104010800000000000000000300000108000340000000080800044000656c13c8a30f46b63d124e8b2b00000c0500010001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10000}, 0x0) (async, rerun: 64)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="43b3a2185ad481ffdd2719e8ae4a9a291e00d0e88b1ee72f35327d4c282a11bdaa45a711459ed4d77f4cdfd8655a3d816fb369e9ef0ecacfec5240ebccc8708ff00b4dcb053cd3c2865aaed51ba6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32=r6, @ANYBLOB="0100000004000000030000000500"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10, <r11=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b781375669e409bb798af8ff00000000bfa200000000000007b4ab00f8ffffffb70300eba45055874300850000000300fcff9500000000000000d7f22d20160700bad412f27e82465a3ad33c621c26ed1ff53874993da421507a070000008cd93112239318e3f34d1440a8c2fd2d988c186243169671fa140695afba8e448465df49aa7f6e717bf3e76317e327f83b03880293fe77cb18b186e45b0c26832b544e7012b20c0000341bdccf31bb0b74a948000000000032cd9126911a6a5325123cdc498cdc6d5fece737757e46ddd4963fa61eaa4352dff9669dfaa1ce000000000000"], &(0x7f0000000180)='syzkaller\x00', 0xb, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.8819752s ago: executing program 3 (id=1338):
r0 = socket$inet6(0xa, 0x5, 0x9) (async)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x9, @remote, 0x5, 0x4}, 0x20)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x338) (async)
socketpair(0x15, 0x2, 0x7, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10c, 0xb, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xf6}]}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7fffffff}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0xa}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1000}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x4}}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}]}]}, 0x10c}}, 0x24040004) (async, rerun: 32)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={<r4=>0x0}, &(0x7f00000002c0)=0xc) (rerun: 32)
syz_open_procfs$namespace(r4, &(0x7f0000000300)='ns/cgroup\x00')
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0x8010, r0, 0xe0d58000) (async)
ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000340)={'geneve0\x00', {0x2, 0x0, @remote}}) (async)
sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0xa040)
getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000480)={@local, <r5=>0x0}, &(0x7f00000004c0)=0x14)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000640)={'syztnl1\x00', &(0x7f0000000500)={'syztnl0\x00', r5, 0xd1aeb80f71fd8bb1, 0x20, 0x8, 0x8, {{0x45, 0x4, 0x3, 0x4, 0x114, 0x68, 0x0, 0x7, 0x2f, 0x0, @broadcast, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x24, 0xd0, 0x3, 0x2, [{@multicast1, 0x2}, {@multicast2, 0x3}, {@private=0xa010100, 0x7ff}, {@loopback}]}, @timestamp_addr={0x44, 0x1c, 0x90, 0x1, 0xf, [{@remote, 0x5}, {@loopback, 0x100}, {@empty, 0x4}]}, @ssrr={0x89, 0x2b, 0xf1, [@local, @loopback, @local, @multicast2, @rand_addr=0x64010101, @local, @empty, @empty, @multicast1, @multicast1]}, @timestamp_addr={0x44, 0x24, 0x10, 0x1, 0x2, [{@private=0xa010102, 0x7fffffff}, {@multicast2, 0x6}, {@broadcast, 0x3}, {@multicast2, 0x3c27ef29}]}, @end, @timestamp_prespec={0x44, 0x3c, 0x17, 0x3, 0x4, [{@broadcast, 0xb53}, {@multicast2, 0x4}, {@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast2, 0x80}, {@multicast2, 0x1}, {@private=0xa010100, 0x8}]}, @rr={0x7, 0xb, 0xa7, [@remote, @rand_addr=0x64010100]}, @ra={0x94, 0x4}, @cipso={0x86, 0x1e, 0x3, [{0x7, 0x11, "07bd1e0a305bb0459d4e71b9bef688"}, {0x6, 0x7, "f0c4b71437"}]}, @generic={0x7, 0x6, "d5fe6ef6"}]}}}}}) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r3)
sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x48, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x28}}}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xe}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x81}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xe2}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) (async)
r7 = accept4(r1, 0x0, &(0x7f0000000800), 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000880)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r6, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x7f}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0xc000)
ioctl$sock_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000980)) (async)
getsockname$packet(r7, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a00)=0x14)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000a40), 0x4) (async)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r7, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, 0x140e, 0x8, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044050}, 0x4000806)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000b80)={0x1, 0x3, 0xc, 0xfd, 0x8, 0x10}, 0xc) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000bc0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}, @in6={0xa, 0x6, 0xfffffa60, @empty, 0x1}, @in6={0xa, 0x4e23, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}], 0x68) (async, rerun: 32)
recvfrom$llc(r3, &(0x7f0000000c40)=""/99, 0x63, 0x170, &(0x7f0000000cc0)={0x1a, 0x20b, 0xc, 0xc, 0x8, 0x80, @remote}, 0x10) (rerun: 32)
socket$netlink(0x10, 0x3, 0x0) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000001600)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x88000040}, 0xc, &(0x7f00000015c0)={&(0x7f0000000d40)={0x874, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x198, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xc53, 0x3, 0xb, 0x1b58, 0xe, 0x1, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x3, 0x4, 0x4, 0xff, 0x7, 0x2, 0x6]}}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x6}, {0x4, 0x7}, {0x0, 0x8}, {0x0, 0xa}, {0x5, 0x5}, {0x4, 0x5}, {0x1, 0x9}, {0x4, 0xa}, {0x7, 0x3}, {0x1, 0x8}, {0x2, 0x9}, {0x6, 0x1}, {0x5, 0x5}, {0x0, 0x2}, {0x4, 0x9}, {0x1, 0x7}, {0x7, 0x7}, {0x0, 0xa}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x8}, {0x1, 0x6}, {0x7, 0x2}, {0x5}, {0x6, 0x5}, {0x0, 0x5}, {0x1}, {0x0, 0x6}, {0x7, 0x8}, {0x6, 0x8}, {0x4}, {0x1, 0x4}, {0x0, 0x6}, {0x5, 0x8}, {0x0, 0x1}, {0x7, 0x3}, {0x6, 0x13}, {0x0, 0x6}, {0x6, 0x3}, {0x0, 0xa}, {0x5, 0x9}, {0x1, 0x5}, {0x6, 0x6}, {0x0, 0x4}, {0x0, 0x9}, {0x3, 0x6}, {0x0, 0x9}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0x1}, {0x1, 0x7}, {0x1, 0x4}, {0x4, 0x4}, {0x0, 0x5}, {0x5, 0x7}, {0x7, 0xa}, {0x7, 0x7}, {0x0, 0x3}, {0x0, 0x2}, {0x7, 0x9}, {0x3, 0x8}, {0x5, 0x1}, {0x3, 0x4}, {0x4, 0x1}, {0x3, 0x9}, {0x7, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x3, 0x2, 0x1, 0x5, 0x6, 0x6]}}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x1}, {0x6, 0xa}, {0x3, 0x5}, {0x1, 0x6}, {0x4, 0x4}, {0x7, 0x6}, {0x7, 0x2}, {}, {0x3, 0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x0, 0x9}, {0x5, 0x7}, {0x0, 0x1}, {0x1, 0x9}, {0x0, 0x6}, {0x5, 0x1}, {0x1, 0x5}, {0x4, 0x1}, {0x2, 0x7}, {0x4, 0xa}, {0x2, 0x4}, {0x0, 0x8}, {0x4, 0x6}, {0x6}, {0x6}, {0x3, 0x6}, {0x4, 0x7}, {0x1, 0x2}, {0x1, 0x3}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x5, 0x4}, {0x7}, {0x4, 0x4}, {0x4}, {0x7, 0x5}, {0x1, 0x5}, {0x0, 0x5}, {0x4, 0x2}, {0x0, 0x7}, {0x6, 0x3}, {0x1, 0x4}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x6}, {0x6, 0x7}, {0x7, 0x5}, {0x0, 0x4}, {0x1}, {0x7, 0x8}, {0x2}, {}, {0x6, 0x8}, {0x0, 0x3}, {0x0, 0x5}]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xff, 0xf001, 0x401, 0x9, 0x4, 0x4, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xe, 0x0, 0x4, 0x8ca7, 0x10, 0x81, 0xf001]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x3, 0x8, 0x1b, 0xc, 0x3, 0x5, 0x9, 0x18, 0x18, 0x6, 0x6c, 0x36, 0x16, 0x28, 0x9, 0x12, 0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x9, 0x8, 0x7, 0x9, 0x164f, 0x401]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6c, 0x36, 0x1, 0x24, 0x36, 0x5, 0x1a, 0x1b, 0x9, 0x1, 0x16, 0x6c, 0x6c, 0x1b, 0xb, 0x16, 0x60, 0x1, 0x30, 0x24, 0x60, 0x18, 0x30, 0x12, 0x48, 0x2, 0x6c, 0x3, 0x60, 0x30, 0x18, 0x18]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1b, 0x2, 0x4, 0x48, 0xb, 0x1b, 0x60, 0x9]}]}]}, @NL80211_ATTR_TX_RATES={0xcc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x557, 0xd99, 0x3ff, 0x0, 0x4, 0xfff, 0x7, 0x3e]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x0, 0xa}, {0x7, 0x8}, {0x2, 0x6}, {0x7, 0x1}, {0x5, 0x4}, {0x5, 0x5}, {0x3, 0x6}, {0x0, 0x8}, {0x1, 0x3}, {0x1, 0x9}, {0x2, 0x6}, {0x7, 0x4}, {0x5, 0x4}, {0x4, 0x1}, {0x7, 0x8}, {0x7, 0x9}, {0x0, 0x19}, {0x7, 0x3}, {0x3}, {0x0, 0x9}, {0x4, 0x2}, {0x5, 0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x6}, {0x6, 0x1}, {0x3}, {0x6, 0x6}, {0x0, 0x4}, {0x4, 0x3}, {0x2, 0x6}, {0x1, 0x5}, {0x3, 0xa}, {0x5, 0x2}, {0x7, 0x3}, {}, {0x2, 0x1}, {0x5, 0x6}, {0x0, 0x6}, {0x1, 0x3}, {0x1, 0x5}, {0x4, 0x4}, {0x7, 0x2}, {0x5, 0x8}, {0x1, 0x3}, {0x1, 0xa}, {0x3, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xf, 0x80, 0x2, 0x2, 0x0, 0x8, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xc, 0x1, 0x6, 0x8, 0x896, 0x6, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x34, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x101, 0xfff, 0xf5, 0x3, 0x0, 0x7ff]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x1, 0x5}, {0x6, 0x2}, {0x2, 0x5}, {0x0, 0x4}, {0x0, 0x4}, {0x2, 0x1}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x60, 0x30, 0x1, 0x1, 0x24, 0x4, 0x4, 0x5]}]}]}, @NL80211_ATTR_TX_RATES={0x174, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x4, 0xa}, {0x3, 0x8}, {0x5, 0xa}, {0x4, 0x8}, {0x1, 0x1}, {0x6, 0x2}, {0x5, 0xa}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0x9}, {0x1}, {0x3, 0x1}, {0x6, 0x4}, {0x7, 0x2}, {0x4, 0x7}, {0x1, 0x8}, {0x0, 0x7}, {0x0, 0x3}, {0x1, 0x6}, {0x5, 0x9}, {0x1, 0x8}, {0x1}, {0x4, 0x6}, {0x1, 0x3}, {0x0, 0x1}, {0x4, 0x3}, {0x6}, {0x7, 0x3}, {0x1, 0x6}, {0x6, 0x2}, {0x2, 0x2}, {0x1, 0xa}, {0x5, 0x3}, {0x2, 0x4}, {0x5, 0x2}, {0x6, 0x1}, {0x0, 0x4}, {0x1, 0x5}, {0x7, 0x8}, {0x7, 0x4}, {0x0, 0x6}, {0x4, 0x5}, {0x7, 0x9}, {0x1, 0x2}, {0x4, 0xa}, {0x7, 0x2}, {0x0, 0x3}, {0x2, 0x2}, {0x1, 0x9}, {0x0, 0x3}, {0x1, 0x6}, {0x4, 0x6}, {0x3, 0xa}, {0x5, 0x9}, {0x0, 0x3}, {0x0, 0x5}, {0x0, 0xa}, {0x1, 0x4}, {0x1, 0xa}, {0x1}, {0x5, 0x7}, {0x6, 0x2}, {0x6, 0x9}, {0x6, 0x2}, {0x0, 0xa}, {0x5, 0x2}, {0x1, 0xa}, {0x4, 0x8}, {0x6, 0x9}, {0x4, 0x1}, {0x4}, {0x4, 0x8}, {0x1}, {0x4}]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x7}, {0x2, 0x7}, {0x5, 0x9}, {0x5}, {0x0, 0x3}, {0x1, 0x2}, {0x4, 0x5}, {0x2, 0x7}, {0x4, 0x5}, {0x1}, {0x1, 0x9}, {0x4, 0xa}, {0x6, 0x5}, {0x2, 0x1}, {0x1, 0x2}, {0x0, 0x4}, {0x0, 0x7}, {0x7, 0x8}, {0x3, 0x9}, {0x5, 0x3}, {0x1, 0x8}, {0x1, 0x9}, {0x7, 0x7}, {0x6, 0x7}, {0x1, 0x3}, {0x3, 0xa}, {0x2, 0x6}, {0x4, 0x3}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0xf}, {0x3}, {0x0, 0xa}, {0x3, 0x4}, {0x0, 0x8}, {0x6, 0x8}, {0x7, 0x7}, {0x0, 0x2}, {0x1, 0x2}, {0x4, 0x2}, {0x2}, {0x1, 0x3}, {0x0, 0x1}, {0x4, 0x4}, {0x0, 0x8}, {0x5, 0x2}, {0x6, 0x1}, {0x7, 0x8}, {0x3, 0x6}]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa81a, 0x8000, 0x0, 0x2, 0x3, 0x8, 0x800, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0xc2, 0x3, 0x7, 0x1, 0xf, 0x200, 0xff]}}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x2, 0x6}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {}, {0x1, 0x8}, {0x3, 0x7}, {0x7, 0x5}, {0x0, 0x6}, {0x5, 0x8}, {0x7, 0x5}, {0x5, 0x6}, {0x5}, {0x3, 0xa}, {0x3, 0x3}, {0x2, 0x2}, {0x3, 0x1}, {0x7, 0x3}, {0x4, 0xa}, {0x1, 0x9}, {0x5, 0x5}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0xa}, {0x4, 0x2}, {0x4, 0x9}, {0x7, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd574, 0x0, 0x6, 0x1, 0x6, 0x0, 0x3, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x3, 0x9}, {0x0, 0x5}, {0x4}, {0x7, 0x7}, {0x6, 0x2}, {0x5, 0x7}, {0x2, 0x7}, {0x2, 0x2}, {0x0, 0x6}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0x6}, {0x3, 0x1}, {0x7, 0x3}, {0x1}, {0x0, 0x2}, {0x7, 0xa}, {0x3, 0x2}, {0x4, 0x6}, {0x6}, {0x5, 0x5}, {0x2, 0x8}, {0x2}, {0x7, 0x1}, {0x6, 0x8}, {0x1, 0x8}, {0x7, 0x2}, {0x1, 0x7}, {0x3, 0x5}, {0x3, 0x1}, {0x1, 0x5}, {0x4, 0x5}, {0x2, 0x3}, {0x6, 0xa}, {0x2, 0x9}, {0x2, 0x6}, {0x0, 0x5}, {0x0, 0x2}, {0x3, 0xa}, {0x0, 0x7}, {0x1, 0x6}, {0x0, 0x3}, {0x5, 0x4}, {0x3, 0x1}, {0x4, 0x7}]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0xd5, 0x3, 0x54, 0x2, 0x2, 0x3, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x3, 0x874c, 0xffff, 0x0, 0x9b0a, 0xe1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x168, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1, 0x6, 0xfc7e6116db9bc215, 0x60, 0x36, 0x18, 0x2, 0x16, 0x3, 0x2, 0x2, 0x60, 0x3, 0x16, 0x6c, 0x5, 0x24, 0x5, 0x4, 0x36, 0x30, 0x30, 0x3a]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3ff, 0x107f, 0x4000, 0xfffb, 0x9, 0x3, 0x2c]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x2, 0x5, 0xcd, 0x3, 0x8, 0x3ff]}}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xc7f4, 0x1, 0x8001, 0x2, 0x8000, 0x7, 0x4, 0x9]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x2, 0x8}, {0x2, 0x9}, {0x3, 0x7}, {0x4, 0x6}, {0x4, 0x2}, {0x0, 0x4}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x1, 0x2}, {0x0, 0x3}, {0x0, 0x2}, {0x1, 0x2}, {0x0, 0x16}, {0x3, 0x1f}, {0x0, 0xa}, {0x0, 0xa}, {0x7, 0x3}, {0x0, 0x1}, {0x1, 0x8}, {0x2, 0x7}, {0x6, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x1}, {0x0, 0x5}, {0x3, 0x5}, {0x7}, {0x1, 0x8}, {0x2, 0x4}, {0x5, 0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x6, 0x5}, {0x6, 0x9}, {0x0, 0x3}, {0x5, 0xa}, {0x2, 0x9}, {0x0, 0x1}, {0x3, 0x9}, {0x1, 0x6}, {0x5, 0xa}, {0x7, 0x8}, {0x3, 0xa}, {0x3, 0x7}, {0x1, 0x8}, {0x4, 0xa}, {0x5, 0x6}, {0x7}, {0x2, 0x9}, {0x6, 0x1}, {0x1, 0x5}, {0x1, 0x7}, {0x3}, {0x5, 0x7}, {0x2, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xbb7f, 0xfff8, 0x8, 0x8, 0x0, 0x256, 0x6]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x1, 0x5}, {0x2, 0x2}, {0x0, 0x6}, {0x6, 0x5}, {0x2, 0x6}, {0x1, 0x8}, {0x6, 0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x6, 0x8}, {0x6, 0x5}, {0x0, 0xa}, {0x2, 0x8}, {0x2, 0x2}, {0x1, 0xa}, {0x0, 0x5}, {0x4, 0xa}, {0x0, 0x2}, {0x7, 0x3}, {0x0, 0x8}, {0x4, 0x5}, {0x3, 0x3}, {0x6, 0x3}, {0x4, 0x4}, {0x7, 0xa}, {0x1, 0x7}, {0x7, 0x6}, {0x7, 0x7}, {0x7, 0x9}, {0x0, 0x1}, {0x1}, {0x2, 0x9}, {0x3, 0x5}, {0x5, 0x5}, {0x6, 0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x0, 0x4}, {}, {0x1, 0x4}, {0x0, 0xa}, {0x3, 0xa}, {0x2, 0x2}, {0x4, 0x7}, {0x5, 0x3}, {0x3, 0x9}, {0x6, 0x9}, {0x0, 0x2}, {0x5, 0x4}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x8}, {0x0, 0x2}, {0x0, 0xa}]}]}]}, @NL80211_ATTR_TX_RATES={0x2d8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x1, 0x81, 0x10, 0x4, 0x60f, 0xb27a, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xdaea, 0x5, 0xffff, 0x40, 0xffff, 0x9, 0x199]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0xa}, {0x7, 0x2}, {0x7, 0xa}, {0x7, 0x1}, {0x4, 0x9}, {0x2, 0x1}, {0x2, 0x6}, {0x1, 0x8}, {0x2, 0x5}, {0x2, 0x2}, {0x6, 0x8}, {0x3}, {0x5}, {0x1, 0x5}, {0x7, 0x3}, {0x5}, {0x7, 0x8}, {0x7, 0x1}, {0x0, 0x5}, {0x5, 0x9}, {0x5, 0x1}, {0x7, 0x5}, {0x7, 0x2}, {0x5, 0x1}, {0x6, 0x4}, {0x0, 0x1}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x18, 0xbe186e8193510a5d, 0x16, 0x6c, 0x5, 0x5, 0x36, 0x4, 0x5, 0x0, 0x18, 0x6c, 0x6c, 0x25, 0x18, 0x1b, 0x36, 0x5, 0x6c, 0x1b, 0x6c, 0x24, 0x30, 0x5, 0x9, 0x48, 0x24, 0x36, 0x1, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x3, 0x9}, {0x1, 0x3}, {0x7, 0x5}, {0x4, 0x6}, {0x0, 0x3}, {0x0, 0x6}, {0x7, 0x4}, {0x2, 0x9}, {0x2, 0xa}, {0x2, 0x8}, {0x1, 0x5}, {0x5, 0x3}, {0x2, 0x7}, {0x7}, {0x1, 0x9}, {0x1, 0x4}]}]}, @NL80211_BAND_60GHZ={0x178, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x4, 0xb, 0x12, 0x60, 0x2, 0x36, 0x6, 0x16, 0x1b, 0x60, 0x12, 0x6, 0x12, 0x30, 0x5, 0x3, 0x24, 0xc, 0x1b, 0x3, 0xb, 0x1b, 0x12, 0x18, 0x0, 0x18, 0x60, 0x60, 0x12]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x4, 0x8}, {0x1}, {0x5, 0x2}, {0x4, 0x4}, {0x0, 0xa}, {0x2, 0x6}, {0x5, 0xa}, {0x4, 0x5}, {0x6, 0x4}, {0x0, 0x2}, {0x0, 0x9}, {0x3, 0x9}, {0x6, 0x6}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x8}, {0x2, 0x5}, {0x1, 0x1}, {0x0, 0x3}, {0x6, 0x8}, {0x6, 0x9}, {0x0, 0xa}, {0x4, 0x5}, {0x6, 0x4}, {0x4, 0x4}, {0x2, 0x6}, {0x7}, {0x7, 0x7}, {0x5, 0x6}, {0x4, 0x5}, {0x2, 0x4}, {0x7, 0x7}, {0x4, 0xa}, {0x3, 0x9}, {0x4, 0x2}, {0x1, 0x6}, {0x1, 0x5}, {0x6, 0x4}, {0x3, 0x8}, {0x0, 0x8}, {0x3, 0x3}, {0x6, 0xa}, {0x6, 0x3}, {0x1}, {0x1, 0x6}, {0x0, 0x4}, {0x3, 0x8}, {0x7, 0x2}, {0x4, 0x5}, {0x1, 0x4}, {0x3, 0x8}, {0x7, 0x1}, {0x3, 0x6}, {0x7, 0x5}, {0x3, 0x4}, {0x5}, {0x1}, {0x7, 0x1}, {0x1, 0xa}, {0x6, 0x2}, {0x0, 0x1}, {0x4, 0x6}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x7, 0x6}, {0x6, 0x1}, {0x7, 0x7}, {0x4, 0x4}]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x4, 0x7}, {0x6, 0x7}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0xa}, {0x0, 0x4}, {0x1, 0x6}, {0x0, 0x7}, {0x3, 0x1}, {0x7, 0x7}, {0x4}, {0x0, 0x5}, {0x1, 0x8}, {0x1, 0x5}, {0x3, 0x7}, {0x0, 0x6}, {0x5, 0xa}, {0x3, 0xa}, {0x1, 0x5}, {0x4, 0x2}, {0x1, 0x9}, {0x7, 0x4}, {0x5, 0xa}, {0x1, 0xa}, {0x4, 0x5}, {0x1, 0x9}, {0x1}, {0x1, 0x6}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x8}, {0x0, 0x1}, {0x3, 0x7}, {0x0, 0x6}, {0x7}, {0x4, 0x6}, {0x7, 0x5}, {0x5, 0x2}, {0x3, 0x1}, {0x4, 0x3}, {0x7, 0x2}, {0x0, 0x2}, {0x3, 0x2}, {0x4, 0x7}, {0x2, 0xa}, {0x1, 0x5}, {0x7, 0x8}, {0x5}, {0x3, 0x7}, {0x3, 0xa}, {0x3, 0x9}, {0x5, 0x8}, {0x0, 0x6}, {0x6, 0x8}, {0x1, 0x4}, {0x2, 0x8}, {0x2, 0x5}, {0x1, 0x9}, {0x5, 0x1}, {0x0, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x6, 0x7e27, 0x8, 0xff, 0x1, 0xe, 0xc0d]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x4, 0x5}, {0x1, 0x8}, {0x0, 0x9}, {0x0, 0x1}, {0x3, 0x7}, {0x4}, {0x0, 0x5}, {0x3}, {0x1}, {0x1, 0x4}, {0x0, 0x7}, {0x2, 0x8}, {0x3}, {0x3, 0x9}, {0x7, 0x5}, {0x5, 0x7}, {0x0, 0x8}, {0x4, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x9, 0x7f, 0xf, 0x7, 0x0, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x7, 0x1, 0x30, 0x10, 0x1000, 0x8001, 0x33]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4209, 0x35c, 0x4, 0xff7d, 0x4, 0x5, 0xd]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x7, 0x7}, {0x3}, {0x7, 0x3}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x8}, {0x3, 0x2}, {0x6, 0xa}, {0x6, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {0x0, 0x1}, {0x4, 0x9}, {0x2, 0x1e}, {0x0, 0x4}, {0x4, 0x8}, {0x6, 0x6}, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x7}, {0x0, 0x4}, {0x7, 0x8}, {0x7, 0x1}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x7}, {0x5, 0x9}, {0x0, 0x7}, {0x7}, {0x5, 0x5}, {0x2, 0xa}, {0x4, 0xa}, {0x5, 0xa}, {0x6, 0x6}, {0x1, 0x1}, {0x1, 0x5}, {0x0, 0x9}, {0x5, 0x1}, {0x2, 0x3}, {0x0, 0x6}, {0x6, 0x3}, {0x2, 0x6}, {0x3, 0x1}, {0x0, 0x3}, {0x0, 0x6}, {0x6, 0x1}, {0x5, 0x8}, {0x1, 0x2}, {0x1, 0x8}, {0x5, 0x4}, {0x6, 0x1}, {0x4, 0x7}, {0x7, 0x6}, {0x3}, {0x0, 0x4}, {0x5, 0xa}, {}, {0x7, 0xa}, {0x3}, {0x5, 0x2}, {0x6, 0x2}, {0x0, 0x5}, {0x1, 0x2}, {0x7, 0x9}, {0x1, 0x2}, {0x4, 0xa}, {0x0, 0x8}, {0x0, 0x3}, {0x2}, {}, {0x6, 0x2}, {0x7, 0x5}, {0x5, 0x8}, {0x0, 0x6}, {0x5, 0xa}, {0x1, 0x9}, {0x5, 0x8}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0xfffa, 0x1, 0x1c, 0xffff, 0x9, 0xb2]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x4, 0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x4}, {0x5, 0xa}, {0x6, 0x5}, {0x3, 0xa}, {0x1, 0x2}, {0x6, 0x2}, {0x7, 0x7}, {0x3, 0x2}, {0x0, 0x8}, {0x1, 0x1}, {0x5, 0x7}, {0x1, 0x9}, {0x6, 0x5}, {0x6, 0x7}, {0x4}, {0x3, 0x2}, {0x7, 0x6}, {0x2, 0x1}, {0x5}, {0x6, 0x3}, {0x1, 0x6}, {0x0, 0x2}, {0x6, 0x6}, {0x1, 0x4}, {}, {0x1, 0xa}, {0x4, 0x2}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x2}, {0x3}, {0x7, 0x4}, {0x6, 0x3}, {0x5, 0x3}, {0x5, 0x8}, {0x0, 0x8}, {0x3, 0xa}, {0x5, 0x5}, {0x2, 0xa}, {0x1, 0x3}, {0x5, 0x8}, {0x5, 0x6}, {0x3}, {0x7, 0x1}, {0x2, 0x9}, {0x7, 0x7}, {0x5, 0xa}, {0x5, 0x8}, {0x4, 0x2}, {0x5, 0x8}, {0x5, 0x4}, {0x6, 0x5}, {0x7, 0x4}, {0x5, 0x2}, {0x7, 0x8}, {0x1, 0x6}, {0x0, 0xa}, {0x2, 0x9}, {0x1, 0x6}, {0x5, 0x8}, {0x6, 0x9}, {0x5, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x12, 0x6, 0x1, 0x30, 0x1, 0x60, 0x3, 0x1b, 0x9, 0x12, 0x3, 0x4, 0x18, 0x6, 0x16, 0x30, 0xc, 0x0, 0x4, 0x2, 0x3, 0x48, 0x4, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x843, 0xfff2, 0x2, 0xa, 0xfff2, 0x3, 0x101, 0xfffb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x874}, 0x1, 0x0, 0x0, 0x2}, 0x8048000)
sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x10000002}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x3c, r6, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x36}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0xc010) (async)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000017c0)={0x0, 0xfff}, 0x8)

1.683036179s ago: executing program 4 (id=1339):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(0x3)
syz_open_procfs$namespace(0x0, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x10801, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9, 0x0, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @bcast, @default]})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
close(r3)

1.618162191s ago: executing program 3 (id=1340):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x98}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$sock_buf(r2, 0x1, 0x4b, 0x0, &(0x7f0000000040)=0x1c00)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffef6, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x20, 0x10, 0x10, 0x0, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0xc3, 0x60042}}, 0x20}, 0x1, 0xffffa888}, 0x40831)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000001c0)={<r3=>r0, 0xd3, 0x5, 0x7})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="340000003d000701000016f5ebffffff027c00000800458004000880180009"], 0x34}}, 0x4040040)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
write$cgroup_type(r3, &(0x7f0000000240), 0x9)
sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x114, 0x24, 0xf0b, 0xffffffff, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xe4, 0x2, {{0x7, [0x5, 0x1, 0xd, 0xb, 0xb, 0x0, 0xd, 0x5, 0xc, 0xc, 0x10, 0x10, 0xd, 0xf, 0x7, 0xc], 0x0, [0x0, 0xbf, 0x7, 0x34f, 0x7958, 0xe582, 0x1, 0x7fff, 0x0, 0x6, 0xaa15, 0x6, 0xfac, 0x7, 0x2, 0x7525], [0x400, 0xebb, 0x105e, 0x8, 0x4, 0x1, 0x0, 0x7, 0x4, 0xfb1, 0x8, 0x2, 0x3, 0x3, 0x6, 0x7f]}, [@TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MIN_RATE64={0x7c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x6}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x3}, {0xc}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0xc7e}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0x1000}, {0xc}]}, @TCA_MQPRIO_MODE={0x6}]}}}]}, 0x114}, 0x1, 0x0, 0x0, 0x58040}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00'})
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x4, [@enum64={0xe, 0x6, 0x0, 0x13, 0x1, 0x14, [{0xb, 0x10000, 0x40}, {0x3, 0x1000, 0xfffffffe}, {0x9, 0xfff, 0xc}, {0x7, 0x9, 0x5}, {0xb, 0x40, 0x4a}, {0xa, 0x8}]}, @enum={0x5, 0x3, 0x0, 0x6, 0x4, [{0x7, 0xc7}, {0x3, 0x8}, {0xf, 0x5}]}]}, {0x0, [0x30, 0x5f]}}, &(0x7f00000003c0)=""/83, 0x94, 0x53, 0x1, 0x7, 0x10000, @value}, 0x28)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c9, 0x0, 0x0, 0x0, 0x40}}, &(0x7f0000000280)='syzkaller\x00', 0x3, 0x1a, &(0x7f00000002c0)=""/26, 0x41100, 0x0, '\x00', r8, 0x1b, r9, 0x8, &(0x7f0000000480)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0xc, 0xffff8a19}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000500)=[{0x1, 0x2, 0xe, 0x4}, {0x2, 0x2, 0xb, 0x5}], 0x10, 0xa57, @void, @value}, 0x94)

1.592294952s ago: executing program 2 (id=1341):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socket(0x2c, 0x5, 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1.438884408s ago: executing program 0 (id=1342):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) (async)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, <r2=>0xffffffffffffffff}, 0x0, &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x73, <r4=>0x0}, 0x8) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@ldst={0x1, 0x0, 0x2, 0x1, 0x2, 0x2, 0xfffffffffffffff0}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x80000000, 0x8, 0x10, 0xa000, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5, 0x8, @value, @void, @void, @value}, 0x50) (async)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
preadv(r9, &(0x7f00000004c0)=[{0x0}], 0x1, 0x4, 0x0) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x7, &(0x7f00000009c0)=ANY=[@ANYBLOB="0801070008000000c17906000080000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000a00)='GPL\x00', 0x10001, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000000a40)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x9, 0x60000, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff, r3, 0xffffffffffffffff, r5, r3], 0x0, 0x10, 0x10, @void, @value}, 0x94) (rerun: 32)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
sendto$inet(r11, &(0x7f0000000200)='\x00', 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
shutdown(r11, 0x1) (async, rerun: 32)
r12 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32)
getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r13=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000000080)={r13, 0x204}, 0x8) (async, rerun: 32)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r15=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r14, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_START_AP(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x70, r14, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3b, 0xe, {{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0xc24b, @void, @void, @val={0x3, 0x1, 0xab}, @val={0x4, 0x6, {0x20, 0x80, 0xd6d2, 0x3}}, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x800}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x7e9d330e52dd5f50}, 0x20000880) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r14, @ANYBLOB="00022cbd7000fedbdf25210000000a00f500ffffffffffff0000eacc16bb7d25dd9458c653fa3eaf95ee08ddfc92d13e0e55b66ed0703d50a59908b06f0e60f33bd6808bc9f0254f0545b4174bb51444a6771bd6e390d3fab097e5b73891c9dd86547b1da37d92831af3631b38de4d4e12035d18437d01553f4a514609e9ada61d6101bdec4f2f90bd005ebb45c49220d64579242de99b080c8e7d34a12cb92aef6c73e1e333298dab9c33874d1e121685a06a47abfd"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40011) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x1b, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x23a}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @alu={0x4, 0x1, 0xd, 0x3, 0x0, 0xfffffffffffffffe, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x1, 0x83, &(0x7f0000000400)=""/131, 0xc3000, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x5, 0x6, 0x1, 0xffffffff}, 0x10, r4, 0x0, 0x0, 0x0, 0x0, 0x10, 0x62a, @void, @value}, 0x94)

1.413913672s ago: executing program 3 (id=1343):
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200390001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
close(r0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r2, 0xfffffffc)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10)
socket(0x23, 0x6, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
r8 = socket$kcm(0xa, 0x3, 0x3a)
socket$packet(0x11, 0x2, 0x300)
sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)

1.410995436s ago: executing program 4 (id=1344):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.359107804s ago: executing program 2 (id=1345):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xab, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.218490948s ago: executing program 4 (id=1346):
r0 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x60802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000040)=0x7f)
readv(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000040)=""/19, 0x13}], 0x2)
unshare(0x22020400)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300a8ebdfc5700462b568501bee0c7483000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed4, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000780)={0x28, r4, 0x483, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000180)={'tunl0\x00', <r5=>0x0, 0x8, 0x80, 0xaa5, 0x5, {{0x11, 0x4, 0x0, 0x2b, 0x44, 0x64, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x94, [@remote, @loopback]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x9d, 0x1, 0xe, [{@local, 0x9}, {@rand_addr=0x64010101, 0x8}]}, @timestamp_addr={0x44, 0xc, 0xd1, 0x1, 0x9, [{@remote}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', <r6=>0x0, 0xaebc9eb784bb43d6, 0x1, 0x6, 0x6831, 0x14, @dev={0xfe, 0x80, '\x00', 0x27}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x700, 0x3}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002900)=@newqdisc={0x74, 0x58, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x1, 0x0]}}]}]}, 0x74}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl1\x00', <r10=>0x0, 0x10, 0x700, 0xf84, 0x405, {{0x16, 0x4, 0x2, 0x27, 0x58, 0x66, 0x0, 0x2, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x14}, {[@timestamp_prespec={0x44, 0x24, 0x78, 0x3, 0x8, [{@empty, 0xa49}, {@multicast1, 0x6}, {@private=0xa010102, 0xc}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x9}]}, @rr={0x7, 0xb, 0xa, [@rand_addr=0x64010100, @broadcast]}, @generic={0xd, 0x12, "03000000e00600180001000000000000"}]}}}}})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r4, @ANYBLOB="20002dbd7000ffffffff0d0000002800018014000200776730000000000000000000000000000800030005000000080003000200000030000180140002006e696376663000000000000000000000080003000300000008000100", @ANYRES32=r5, @ANYBLOB="08000300e580004800018008000100001578761dba8b4c127231e7e29152e453ad150db18d0d51f4e1b5a7153e61ff62af9a7259a5c73a32b812e9cee4ecdc49d520ace5b4a6cf3ae46e7f33977f144c22b4dd26ff0bab2584c42d5b17e39ecb808fdbda8c552fb072054c701aceb628b659da3d14ae231bd9666f88d312dcbbb66f7e4b912579a0842d8f7385cd28", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=r9, @ANYBLOB="1400020076657468300000000000000000000000080003000100000008000100", @ANYRES32=r10, @ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x24004001}, 0x4000000)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fad636ac", @ANYRES16=r4, @ANYBLOB="200027bd7000fedbdf250d000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040881}, 0x80)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
pwritev(r11, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x300, 0x0, 0x0)
r12 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r12}, @call={0x85, 0x0, 0x0, 0xc0}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r13, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)="065c06dc19755900a6bf651b2de0e6dbd91e3a4b4d72fcb9d112dddcb795dcc7b3737a4deb7993243bebaa8ab2a629edd9cabf344d420d52634fdd17894b", 0x3e}, {&(0x7f0000000900)="c087978b556074edc213ae4e69f5e15c23d1e6845a1b84d83ec486b80529e9f3222097225e6883e09501ffd1dd2bfecb518c5e1456ae6a6823fd54a42d296e577f2ef799b1b1d34d9459c00043e4d08e7fcf21f6552830f16ef7f58caafdb36e9c960aeb29bbe05a99d79e194431ecc783305d727baa5eb13657ae1d228f5e359521a7e21b6e7c50aa0cfdd24a339b03f3a935df9c0062397d66b1ce53e6c60637e1ec7980fd1ec6de35e26e00bb29b8a0141378a5a853152c4fd40edd62a57184b047efc4553a6eaf7da265221ff02fd41c50b30eea6a8d8d66c62979f9f53c", 0xe0}], 0x2}}], 0x1, 0x80)

1.186706272s ago: executing program 2 (id=1347):
unshare(0x22020400)
unshare(0x2c060000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x83, 0x0)
r0 = socket$inet(0x2, 0x1, 0x8)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x7, 0x4)

1.074952108s ago: executing program 0 (id=1348):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x8005}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close(r2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18030100d100000000000300000000009500000000000001"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000180))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000880)={0x0, r1, 0x0, 0x1, &(0x7f0000000840)='\x00'}, 0x30)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x80000)
sendmmsg$unix(r7, &(0x7f0000002880)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x44081}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="f001000017003dcb02000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x18}}], 0x2, 0x88)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="fadf2ae5", @ANYRES16=r5, @ANYBLOB="a787ffffffffa1ffffff0700000004000180"], 0x18}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x100, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4c, 0x0, 0xc3}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}, 0x1, 0xffffa888}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=<r11=>0x0, @ANYBLOB="000000c20178b4515bca6f1db9eaa04d6a6e0e00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r12}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010800}, 0x8054)
r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000240)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x8}], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r14, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_BATCH(r10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES32=r11], 0x518}}, 0x0)

827.974504ms ago: executing program 2 (id=1349):
r0 = socket(0x1, 0x2, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000240)=""/207, 0x122000, 0x0, 0x7, 0x1}, 0x20) (async)
ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={<r3=>0x0, 0x7b, 0x7, 0x0, 0x100, 0x3}, &(0x7f00000000c0)=0x14)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={r3, 0x34}, 0x8)
connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24)
sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x18, 0x500}}], 0x2, 0x0) (async)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4)

674.36776ms ago: executing program 0 (id=1350):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x2, 0x0)
close(r0)
r1 = socket$kcm(0x11, 0x2, 0x0)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8)
r3 = socket$kcm(0x11, 0x2, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8)
r5 = socket$kcm(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, 0x0, &(0x7f0000000380)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x2000000000000080, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x8, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r8], 0x4c}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)

595.123421ms ago: executing program 2 (id=1351):
r0 = socket$kcm(0x11, 0x3, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r2) (async)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000680)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000001", @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) (async, rerun: 64)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) (async, rerun: 64)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}})

491.020691ms ago: executing program 0 (id=1352):
sendmsg(0xffffffffffffffff, 0x0, 0x4800)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x80}}, 0x40800)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10)
sendto$inet(r3, &(0x7f00000020c0)="f72bacc3ca1a9edf08e239411cbcf4b2ef918084f500db36e20f4f509b2d142d7f20570bec6d2d7fcdd876a9f6", 0x2d, 0x0, &(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x84, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x54, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_NAT={0xa}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x84}}, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)={0xbc, 0x5, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @remote}, @pad1, @jumbo={0xc2, 0x4, 0x9}]}, 0x38)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23, @loopback}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5)
sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r7, 0x511, 0x0, 0xfffffffe, {0x5}}, 0x14}}, 0xa000000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve0\x00', <r9=>0x0})
socket(0x10, 0x80002, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0xfffffffffffffcd2, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x3c, 0x1a, 0x20, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x84}, [@NDA_CACHEINFO={0x14, 0x3, {0x7}}, @NDA_LINK_NETNSID={0x0, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4840}, 0x0)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00'})
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0)

424.924002ms ago: executing program 3 (id=1353):
r0 = socket$inet(0x2, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="6006000040000900ffffffff02dbdf250100000099001f00460601"], 0x660}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010102}}}], 0x20}, 0x24008004)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000140)=""/17, &(0x7f00000001c0)=0x11)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x7ad8, 0xfffffffd}, {0xfffffffc, 0x80003}]}})

303.094436ms ago: executing program 2 (id=1354):
r0 = socket(0x2a, 0x2, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000000)={0x80000, {{0x2, 0x4e20, @multicast2}}}, 0x88) (async, rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) (async, rerun: 32)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '.,\\-\\{\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0x7, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xb}}]}, 0x98}}, 0x801)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

195.50836ms ago: executing program 3 (id=1355):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000401000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c0000000000"], 0x3c}}, 0x0)

44.128801ms ago: executing program 3 (id=1356):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000070000000400000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000045bf1570683c255200"/21], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0xfffffffffffffe5f, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x1})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, 0x0)

43.326294ms ago: executing program 4 (id=1357):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000020800084080"], 0x8c}}, 0x0) (async)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000012140100000000000000000008004b0013000000080003000000000008000180"], 0x28}}, 0x0) (async)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x83, &(0x7f0000000140)={r4}, 0x8) (async)
socket$kcm(0x29, 0x2, 0x0) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x6, 0xf, 0x203, 0x3, 0x5, 0x40, 0xea, 0x7, r4}, &(0x7f0000000140)=0x20) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})

0s ago: executing program 0 (id=1358):
syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x6}, @md5sig={0x1d, 0x12, "ac3272000000006f00"}]}}}}}}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001540)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x178, 0x98, 0x210, 0x210, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x8000000, 0x0, {[{{@ip={@loopback, @private, 0x0, 0x0, 'bond_slave_0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x9}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @rand_addr=0x64010101, 0xffffff00, 0xffffff00, 'macvlan0\x00', 'pim6reg1\x00', {}, {}, 0x4, 0x3, 0x45}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x9}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'macvlan1\x00', 'vxcan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'pim6reg0\x00', 'dummy0\x00', {}, {}, 0x0, 0x0, 0x56}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@remote, @local, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_hsr\x00', {}, {}, 0x11}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x4, 0x6, 0x7, 0x1, 0x2], 0x0, 0x3}, {0x0, [0x4, 0x5, 0x1, 0x0, 0x2, 0x7], 0x2, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCDELRT(r4, 0x890c, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x2c, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x2c}}, 0x4018000)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r7, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x30008000)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r2, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0)
pipe(&(0x7f00000007c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
vmsplice(r9, &(0x7f0000000680)=[{&(0x7f00000000c0)="c292201b755a2aea8afd4cc398f71754d78fe427251183d99ac92a27b0aa8d88b25681686a43bf54e040877b6d3a6d78120f30cf1f68291fd8b900fb1c7cd3326d11cf207b53ad51430e39405ddf6e6ac79eb94c9eecc34c3f422416d894e750e0af209a167eda95f951a646c1d587315401f638bfa564f040f39df6883e2f", 0x7f}, {&(0x7f0000000000)="c8edf1", 0x3}, {0x0}], 0x3, 0x3)
close(r9)
r10 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r10, 0x89ef, &(0x7f0000000200)=0x10000)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r11, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
splice(r8, 0x0, r9, 0x0, 0xfffd, 0x0)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0xe}, 0x76, r2})

kernel console output (not intermixed with test programs):

x0405 tx timeout
[  138.036624][ T7907] __nla_validate_parse: 1 callbacks suppressed
[  138.036646][ T7907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.523'.
[  138.085017][ T7912] netlink: 40 bytes leftover after parsing attributes in process `syz.4.524'.
[  138.122643][ T7912] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  138.479791][ T7929] netlink: 36 bytes leftover after parsing attributes in process `syz.2.529'.
[  138.613061][ T7934] netlink: 'syz.1.531': attribute type 1 has an invalid length.
[  138.718535][ T7934] 8021q: adding VLAN 0 to HW filter on device bond3
[  138.925211][ T7940] bond3: (slave ip6erspan0): making interface the new active one
[  138.930910][ T7947] netlink: 'syz.2.535': attribute type 10 has an invalid length.
[  138.952459][ T7940] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link
[  138.963855][ T7947] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.535'.
[  139.000059][ T7947] openvswitch: netlink: Flow key attr not present in new flow.
[  139.038642][ T7948] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  139.215890][ T7951] vxlan1: entered promiscuous mode
[  139.246515][ T7951] vxlan1: entered allmulticast mode
[  139.797744][ T7967] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  139.816187][ T7967] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  140.205481][ T7982] netlink: 'syz.2.547': attribute type 1 has an invalid length.
[  140.228703][ T7984] netlink: 'syz.1.549': attribute type 21 has an invalid length.
[  140.246874][ T7984] netlink: 128 bytes leftover after parsing attributes in process `syz.1.549'.
[  140.256196][ T7984] netlink: 'syz.1.549': attribute type 4 has an invalid length.
[  140.266129][ T7984] netlink: 3 bytes leftover after parsing attributes in process `syz.1.549'.
[  140.434373][ T7989] tipc: Started in network mode
[  140.444603][ T7989] tipc: Node identity ac1414aa, cluster identity 4711
[  140.455776][ T7989] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  140.468104][ T7989] tipc: Enabled bearer <udp:s>, priority 10
[  140.474177][ T7994] netlink: 'syz.0.550': attribute type 1 has an invalid length.
[  140.482952][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.550'.
[  140.494875][ T7986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.548'.
[  140.526137][ T7998] netlink: 'syz.2.551': attribute type 4 has an invalid length.
[  140.587378][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  140.651940][ T5840] Bluetooth: hci4: link tx timeout
[  140.660554][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  140.671585][ T5840] Bluetooth: hci4: link tx timeout
[  140.677346][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  140.727366][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  140.867297][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  141.007291][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  141.147296][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  141.275163][ T8034] xt_policy: neither incoming nor outgoing policy selected
[  141.287276][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  141.567760][  T972] tipc: Node number set to 2886997162
[  141.921898][ T8068] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  142.037039][ T8079] netlink: 'syz.0.575': attribute type 2 has an invalid length.
[  142.084503][ T8079] netlink: 'syz.0.575': attribute type 9 has an invalid length.
[  142.108512][ T8079] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.575'.
[  142.199293][ T8083] netlink: 'syz.3.576': attribute type 9 has an invalid length.
[  142.344030][ T8083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.576'.
[  142.583329][ T8096] IPVS: Scheduler module ip_vs_sip not found
[  142.717760][ T5840] Bluetooth: hci4: command 0x0405 tx timeout
[  143.363226][ T8137] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.372645][ T8137] syzkaller0: entered promiscuous mode
[  143.378964][ T8137] syzkaller0: entered allmulticast mode
[  144.392501][ T8180] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  144.402046][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.601'.
[  144.429303][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.601'.
[  144.452109][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.601'.
[  144.476082][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.601'.
[  144.516991][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.601'.
[  144.624450][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.603'.
[  144.632238][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.601'.
[  144.642326][    C1] net_ratelimit: 6 callbacks suppressed
[  144.642345][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  144.687388][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.601'.
[  144.696481][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.601'.
[  144.716038][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.601'.
[  144.742909][ T8185] gretap1: left promiscuous mode
[  144.767507][ T8185] gretap1: left allmulticast mode
[  144.782485][ T8185] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.791375][ T8185] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.800974][ T8185] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.810356][ T8185] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.836083][ T8189] veth0_to_bond: entered promiscuous mode
[  144.975941][ T8198] veth0_to_bond (unregistering): left promiscuous mode
[  145.018756][ T8198] bond0: (slave bond_slave_0): Releasing backup interface
[  145.687278][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  145.876860][ T8243] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  146.383466][ T6312] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  146.672447][ T8278] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.702756][ T8278] 8021q: adding VLAN 0 to HW filter on device team0
[  146.717941][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  146.739283][ T8278] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  146.988620][ T8301] netlink: 'syz.3.633': attribute type 1 has an invalid length.
[  147.170772][ T8314] bridge_slave_0: left allmulticast mode
[  147.176672][ T8314] bridge_slave_0: left promiscuous mode
[  147.185378][ T8314] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.215054][ T8314] bridge_slave_1: left allmulticast mode
[  147.226859][ T8314] bridge_slave_1: left promiscuous mode
[  147.236183][ T8314] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.328969][ T8314] bond0: (slave bond_slave_1): Releasing backup interface
[  147.363961][ T8314] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.377084][ T8314] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.406629][ T8314] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.424909][ T8314] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.473422][ T8314] bond3: (slave ip6erspan0): Releasing active interface
[  147.757334][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  148.348506][ T8359] batman_adv: batadv0: Adding interface: dummy0
[  148.354902][ T8359] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.431921][ T8359] batman_adv: batadv0: Interface activated: dummy0
[  148.589042][ T8361] 8021q: adding VLAN 0 to HW filter on device bond5
[  148.622223][ T8364] batadv0: mtu less than device minimum
[  148.659763][ T8364] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  148.672890][ T8364] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  148.685615][ T8364] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  148.900563][ T8366] 8021q: adding VLAN 0 to HW filter on device bond5
[  148.918501][ T8366] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  148.946259][ T8366] bond5: (slave vxcan1): Error -95 calling set_mac_address
[  149.160239][ T1148] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.342459][ T1148] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.520915][ T1148] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.607150][ T1148] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.847271][    C1] net_ratelimit: 17 callbacks suppressed
[  149.847292][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  149.977064][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  149.988230][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  149.997881][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  150.006025][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  150.014429][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  150.022240][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  150.125384][ T1148] tipc: Resetting bearer <eth:syzkaller0>
[  150.669855][ T1148] tipc: Disabling bearer <eth:syzkaller0>
[  150.888522][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  150.944398][ T1148] bond0 (unregistering): Released all slaves
[  150.960455][ T1148] bond1 (unregistering): Released all slaves
[  151.086213][ T1148] bond2 (unregistering): Released all slaves
[  151.192601][ T1148] bond3 (unregistering): Released all slaves
[  151.309212][ T1148] tipc: Disabling bearer <udp:syz1>
[  151.335920][ T1148] tipc: Left network mode
[  151.923709][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  152.077430][ T5845] Bluetooth: hci0: command tx timeout
[  152.439245][ T8433] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  152.604696][ T1148] hsr_slave_0: left promiscuous mode
[  152.646395][ T1148] hsr_slave_1: left promiscuous mode
[  152.674317][ T1148] veth1_macvtap: left promiscuous mode
[  152.680645][ T1148] veth0_macvtap: left promiscuous mode
[  152.688457][ T1148] veth1_vlan: left promiscuous mode
[  152.694100][ T1148] veth0_vlan: left promiscuous mode
[  152.957257][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  153.903377][ T8473] netlink: 'syz.3.675': attribute type 7 has an invalid length.
[  153.998404][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  154.157740][ T5840] Bluetooth: hci0: command tx timeout
[  154.243138][ T8489] batadv_slave_1: entered promiscuous mode
[  154.270266][ T8489] __nla_validate_parse: 85 callbacks suppressed
[  154.270287][ T8489] netlink: 44 bytes leftover after parsing attributes in process `syz.2.678'.
[  154.324569][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.678'.
[  154.427937][ T8488] batadv_slave_1: left promiscuous mode
[  154.434939][ T8393] chnl_net:caif_netlink_parms(): no params data found
[  154.788625][ T8512] netlink: 'syz.0.681': attribute type 1 has an invalid length.
[  154.868912][ T8393] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.926729][ T8393] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.977577][ T8393] bridge_slave_0: entered allmulticast mode
[  154.987700][ T8393] bridge_slave_0: entered promiscuous mode
[  155.025528][ T1148] IPVS: stop unused estimator thread 0...
[  155.029244][ T8393] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.047268][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  155.062438][ T8393] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.085286][ T8393] bridge_slave_1: entered allmulticast mode
[  155.110805][ T8393] bridge_slave_1: entered promiscuous mode
[  155.246428][ T8393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.295555][ T8393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.554808][ T8393] team0: Port device team_slave_0 added
[  155.572020][ T8393] team0: Port device team_slave_1 added
[  155.867713][ T8393] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.876199][ T8393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.937870][ T8393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.959736][ T8393] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.966747][ T8393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.030855][ T8393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  156.077269][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  156.222827][ T8566] netlink: 160 bytes leftover after parsing attributes in process `syz.2.691'.
[  156.237974][ T5840] Bluetooth: hci0: command 0x040f tx timeout
[  156.278610][ T8393] hsr_slave_0: entered promiscuous mode
[  156.319346][ T8393] hsr_slave_1: entered promiscuous mode
[  156.325559][ T8393] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  156.371623][ T8393] Cannot create hsr debugfs directory
[  156.462231][ T8578] netlink: 128 bytes leftover after parsing attributes in process `syz.2.693'.
[  156.784947][ T8590] netlink: 'syz.2.696': attribute type 1 has an invalid length.
[  156.846762][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'.
[  157.117283][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  157.183487][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.697'.
[  157.264003][ T8612] netlink: 32 bytes leftover after parsing attributes in process `syz.2.698'.
[  157.707747][ T8393] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  157.719635][ T8393] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  157.746784][ T8393] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  157.884928][ T8393] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  157.927710][ T8636] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.157434][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  158.189983][ T8393] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.250507][ T8650] netlink: 40 bytes leftover after parsing attributes in process `syz.0.703'.
[  158.312137][ T8393] 8021q: adding VLAN 0 to HW filter on device team0
[  158.319576][ T5845] Bluetooth: hci2: command tx timeout
[  158.325145][ T5845] Bluetooth: hci0: command 0x040f tx timeout
[  158.463685][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.470922][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.537209][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.544436][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.555411][ T8657] netlink: zone id is out of range
[  158.561776][ T8657] netlink: zone id is out of range
[  158.580681][ T8657] netlink: set zone limit has 8 unknown bytes
[  158.814248][ T8393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  158.989820][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.711'.
[  159.028069][ T8684] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000
[  159.197345][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  159.452054][ T8693] bridge0: entered promiscuous mode
[  159.457996][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'.
[  159.466863][ T8695] bridge_slave_1: left allmulticast mode
[  159.473197][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'.
[  159.496577][ T8695] bridge_slave_1: left promiscuous mode
[  159.517815][ T8695] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.563491][ T8695] bridge_slave_0: left allmulticast mode
[  159.582850][ T8695] bridge_slave_0: left promiscuous mode
[  159.589779][ T8695] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.631416][ T8695] bridge0 (unregistering): left promiscuous mode
[  159.872378][ T8393] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.977472][ T8716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  160.017965][ T8393] veth0_vlan: entered promiscuous mode
[  160.053971][ T8393] veth1_vlan: entered promiscuous mode
[  160.133808][ T8393] veth0_macvtap: entered promiscuous mode
[  160.179800][ T8393] veth1_macvtap: entered promiscuous mode
[  160.237322][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  160.389604][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.400104][ T5845] Bluetooth: hci0: command 0x040f tx timeout
[  160.409041][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.421133][ T8393] batman_adv: batadv0: Interface activated: batadv_slave_0
[  160.435281][ T8393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  160.446761][ T8393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.460381][ T8393] batman_adv: batadv0: Interface activated: batadv_slave_1
[  160.474178][ T8393] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.503918][ T8393] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.534143][ T8393] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.563553][ T8393] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.600971][ T8737] netlink: 100 bytes leftover after parsing attributes in process `syz.0.719'.
[  160.808908][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.817142][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.904710][ T7489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.921071][ T7489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.277328][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  161.711544][ T7472] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.894649][ T7472] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.121111][ T8797] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  162.129726][ T8797] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  162.139513][ T8797] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  162.148079][ T8797] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  162.317343][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  162.430481][ T7472] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.650435][ T7472] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.791502][ T8815] xt_CT: No such helper "snmp"
[  162.821581][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  162.832076][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  162.841789][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  162.859702][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  162.867975][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  162.876499][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  162.945062][ T7472] bridge_slave_1: left allmulticast mode
[  162.969915][ T7472] bridge_slave_1: left promiscuous mode
[  163.007601][ T7472] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.084098][ T7472] bridge_slave_0: left allmulticast mode
[  163.103210][ T7472] bridge_slave_0: left promiscuous mode
[  163.123325][ T7472] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.367537][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  163.681166][ T7472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.693093][ T7472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.704104][ T7472] bond0 (unregistering): Released all slaves
[  163.942079][ T8861] netlink: 'syz.4.742': attribute type 1 has an invalid length.
[  163.987519][ T8861] netlink: 224 bytes leftover after parsing attributes in process `syz.4.742'.
[  164.397294][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  164.431614][ T8888] netlink: 468 bytes leftover after parsing attributes in process `syz.0.748'.
[  164.482457][ T8888] netlink: 'syz.0.748': attribute type 2 has an invalid length.
[  164.528121][ T8888] netlink: 76 bytes leftover after parsing attributes in process `syz.0.748'.
[  164.630456][ T8901] rdma_rxe: rxe_newlink: failed to add lo
[  164.890004][ T7472] hsr_slave_0: left promiscuous mode
[  164.935240][ T7472] hsr_slave_1: left promiscuous mode
[  164.950912][ T7472] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.959207][ T5845] Bluetooth: hci0: command tx timeout
[  164.976554][ T7472] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.998860][ T7472] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  165.036337][ T7472] batman_adv: batadv0: Removing interface: batadv_slave_1
[  165.085499][ T7472] veth1_macvtap: left promiscuous mode
[  165.091666][ T8916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.752'.
[  165.101478][ T7472] veth0_macvtap: left promiscuous mode
[  165.107689][ T7472] veth1_vlan: left promiscuous mode
[  165.113216][ T7472] veth0_vlan: left promiscuous mode
[  165.133467][ T8920] netlink: 24 bytes leftover after parsing attributes in process `syz.3.753'.
[  165.425612][ T8932] Bluetooth: MGMT ver 1.23
[  165.443398][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  165.667234][ T8942] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  165.968589][ T7472] team0 (unregistering): Port device team_slave_1 removed
[  166.010329][ T7472] team0 (unregistering): Port device team_slave_0 removed
[  166.453748][ T8937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.755'.
[  166.463244][ T8937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.755'.
[  166.477331][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  166.664758][ T8828] chnl_net:caif_netlink_parms(): no params data found
[  166.729700][ T8957] netlink: 16 bytes leftover after parsing attributes in process `syz.0.760'.
[  166.765359][ T8962] netlink: 256 bytes leftover after parsing attributes in process `syz.2.762'.
[  166.784494][ T8962] netlink: 'syz.2.762': attribute type 9 has an invalid length.
[  166.848156][ T8962] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  166.856356][ T8963] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  166.880181][ T8962] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.887143][ T8963] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.047311][ T5845] Bluetooth: hci0: command tx timeout
[  167.047601][ T8828] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.066957][ T8828] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.075587][ T8828] bridge_slave_0: entered allmulticast mode
[  167.084963][ T8828] bridge_slave_0: entered promiscuous mode
[  167.136312][ T8828] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.143678][ T8828] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.158056][ T8828] bridge_slave_1: entered allmulticast mode
[  167.169400][ T8828] bridge_slave_1: entered promiscuous mode
[  167.265980][ T8828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  167.308486][ T8828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  167.479257][ T8828] team0: Port device team_slave_0 added
[  167.491606][ T8828] team0: Port device team_slave_1 added
[  167.517499][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  167.604032][ T8828] batman_adv: batadv0: Adding interface: batadv_slave_0
[  167.611586][ T8828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.668890][ T9002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.772'.
[  167.674024][ T8828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  167.732159][ T8828] batman_adv: batadv0: Adding interface: batadv_slave_1
[  167.744350][ T8828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.776461][ T8828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  167.905310][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.775'.
[  167.945662][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'.
[  167.972757][ T8828] hsr_slave_0: entered promiscuous mode
[  167.990228][ T8828] hsr_slave_1: entered promiscuous mode
[  167.995516][ T9013] netlink: 'syz.2.775': attribute type 11 has an invalid length.
[  167.997619][ T8828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  168.017253][ T8828] Cannot create hsr debugfs directory
[  168.026045][ T9022] netlink: 'syz.2.775': attribute type 18 has an invalid length.
[  168.233593][ T9032] netlink: 'syz.4.778': attribute type 29 has an invalid length.
[  168.428826][ T9036] netlink: 'syz.0.779': attribute type 1 has an invalid length.
[  168.557295][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  168.706565][ T9066] netlink: 'syz.2.780': attribute type 5 has an invalid length.
[  168.718335][ T9032] netlink: 'syz.4.778': attribute type 29 has an invalid length.
[  168.770254][ T9034] batadv1: entered promiscuous mode
[  168.775698][ T9034] batadv1: entered allmulticast mode
[  168.799903][   T29] audit: type=1107 audit(1739711258.478:2): pid=9067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='d¡“mÚmTk%$it¡�ÃôN”±ë'
[  168.851574][ T9035] netlink: 'syz.4.778': attribute type 29 has an invalid length.
[  168.909822][ T9072] ip6gretap0: entered promiscuous mode
[  168.938920][ T9072] batadv_slave_0: entered promiscuous mode
[  169.117393][ T5845] Bluetooth: hci0: command tx timeout
[  169.597361][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  169.695088][ T8828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  169.729237][ T8828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  169.743143][ T8828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  169.759543][ T8828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  169.870262][ T9101] netem: incorrect gi model size
[  169.902269][ T9101] netem: change failed
[  170.142192][ T8828] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.227042][ T8828] 8021q: adding VLAN 0 to HW filter on device team0
[  170.279866][ T7489] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.287076][ T7489] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.306619][ T7489] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.313825][ T7489] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.323372][ T9111] netlink: 'syz.4.794': attribute type 64 has an invalid length.
[  170.331923][ T9111] __nla_validate_parse: 5 callbacks suppressed
[  170.331941][ T9111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.794'.
[  170.638575][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  170.708887][ T9122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.798'.
[  171.041685][ T8828] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.155589][ T8828] veth0_vlan: entered promiscuous mode
[  171.192528][ T8828] veth1_vlan: entered promiscuous mode
[  171.207830][ T5845] Bluetooth: hci0: command tx timeout
[  171.340908][ T8828] veth0_macvtap: entered promiscuous mode
[  171.390533][ T8828] veth1_macvtap: entered promiscuous mode
[  171.429635][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.447434][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.472271][ T8828] batman_adv: batadv0: Interface activated: batadv_slave_0
[  171.493674][ T8828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.527681][ T8828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.548459][ T8828] batman_adv: batadv0: Interface activated: batadv_slave_1
[  171.617725][ T8828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.627386][ T8828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.669993][ T8828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.687555][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  171.699550][ T8828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.970540][ T9170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  172.048415][ T9175] veth0_to_bond: entered promiscuous mode
[  172.064404][ T7459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.090661][ T7459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.181783][ T7476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.192348][ T7476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.330979][ T9186] netlink: 44 bytes leftover after parsing attributes in process `syz.0.812'.
[  172.523443][ T9175] veth0_to_bond: left promiscuous mode
[  172.717401][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  172.731086][ T9196] netlink: 277 bytes leftover after parsing attributes in process `syz.3.816'.
[  172.819462][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.818'.
[  172.915541][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.817'.
[  173.276957][ T9066] Set syz1 is full, maxelem 65536 reached
[  173.405021][ T9218] netlink: 44 bytes leftover after parsing attributes in process `syz.0.824'.
[  173.428655][   T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.757243][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  173.849719][   T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.963584][   T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.143095][   T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.159175][ T9233] netlink: 'syz.4.828': attribute type 1 has an invalid length.
[  174.177805][ T9233] netlink: 'syz.4.828': attribute type 1 has an invalid length.
[  174.210106][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'.
[  174.261148][ T9233] ieee802154 phy0 wpan0: encryption failed: -22
[  174.318450][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  174.329347][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  174.338910][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  174.354417][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  174.362360][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  174.369865][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  174.540149][ T9239] netlink: 'syz.4.829': attribute type 2 has an invalid length.
[  174.607532][   T51] bridge_slave_1: left allmulticast mode
[  174.624965][   T51] bridge_slave_1: left promiscuous mode
[  174.642552][ T9244] ieee802154 phy0 wpan0: encryption failed: -22
[  174.654843][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.669501][   T51] bridge_slave_0: left allmulticast mode
[  174.687506][   T51] bridge_slave_0: left promiscuous mode
[  174.693355][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.797283][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  175.235762][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  175.254644][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  175.266106][   T51] bond0 (unregistering): Released all slaves
[  175.837330][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  175.902301][ T9276] netlink: 44 bytes leftover after parsing attributes in process `syz.4.836'.
[  176.396046][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.838'.
[  176.413899][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.838'.
[  176.424324][ T9283] netlink: 'syz.4.838': attribute type 32 has an invalid length.
[  176.478188][ T5845] Bluetooth: hci0: command tx timeout
[  176.881894][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  177.930546][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  178.282043][   T51] hsr_slave_0: left promiscuous mode
[  178.288666][   T51] hsr_slave_1: left promiscuous mode
[  178.294724][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  178.302296][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  178.312359][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  178.320540][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.361763][   T51] veth1_macvtap: left promiscuous mode
[  178.375190][   T51] veth0_macvtap: left promiscuous mode
[  178.381202][   T51] veth1_vlan: left promiscuous mode
[  178.386754][   T51] veth0_vlan: left promiscuous mode
[  178.562584][ T5845] Bluetooth: hci0: command tx timeout
[  178.879039][   T51] team0 (unregistering): Port device team_slave_1 removed
[  178.924227][   T51] team0 (unregistering): Port device team_slave_0 removed
[  178.967280][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  179.379890][ T9289] netlink: 16 bytes leftover after parsing attributes in process `syz.3.840'.
[  179.664023][ T9236] chnl_net:caif_netlink_parms(): no params data found
[  179.973202][ T9236] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.977458][ T9323] netlink: 44 bytes leftover after parsing attributes in process `syz.2.847'.
[  179.995932][ T9236] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.007258][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  180.026505][ T9236] bridge_slave_0: entered allmulticast mode
[  180.055526][ T9236] bridge_slave_0: entered promiscuous mode
[  180.074188][ T9325] netlink: 20 bytes leftover after parsing attributes in process `syz.0.848'.
[  180.085948][ T9328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.848'.
[  180.111154][ T9236] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.135446][ T9236] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.147611][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'.
[  180.164867][ T9236] bridge_slave_1: entered allmulticast mode
[  180.189209][ T9236] bridge_slave_1: entered promiscuous mode
[  180.198500][ T9331] netlink: 216 bytes leftover after parsing attributes in process `syz.3.849'.
[  180.312154][ T9236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  180.328021][ T9335] netlink: 92 bytes leftover after parsing attributes in process `syz.4.852'.
[  180.361186][ T9236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  180.535619][ T9236] team0: Port device team_slave_0 added
[  180.570702][ T9236] team0: Port device team_slave_1 added
[  180.639795][ T5845] Bluetooth: hci0: command tx timeout
[  180.706602][ T9236] batman_adv: batadv0: Adding interface: batadv_slave_0
[  180.729932][ T9236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.787520][ T9236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  180.804904][ T9345] batman_adv: batadv0: Removing interface: team0
[  180.813775][ T9345] batman_adv: batadv0: Interface deactivated: dummy0
[  180.820848][ T9345] batman_adv: batadv0: Removing interface: dummy0
[  180.846492][ T9345] bridge_slave_0: left allmulticast mode
[  180.853467][ T9345] bridge_slave_0: left promiscuous mode
[  180.860127][ T9345] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.874141][ T9345] bridge_slave_1: left allmulticast mode
[  180.880326][ T9345] bridge_slave_1: left promiscuous mode
[  180.886134][ T9345] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.907109][ T9345] bond0: (slave bond_slave_0): Releasing backup interface
[  180.932099][ T9345] bond0: (slave bond_slave_1): Releasing backup interface
[  180.976069][ T9345] team0: Port device team_slave_0 removed
[  181.009057][ T9345] team0: Port device team_slave_1 removed
[  181.015868][ T9345] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.026053][ T9345] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.037377][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  181.037773][ T9345] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.052921][ T9345] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.069876][ T9345] team0: Port device netdevsim0 removed
[  181.079673][ T9236] batman_adv: batadv0: Adding interface: batadv_slave_1
[  181.089903][ T9236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.125615][ T9236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  181.367750][ T9236] hsr_slave_0: entered promiscuous mode
[  181.375888][ T9236] hsr_slave_1: entered promiscuous mode
[  181.383790][ T9236] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  181.392264][ T9236] Cannot create hsr debugfs directory
[  181.666599][ T9359] __nla_validate_parse: 1 callbacks suppressed
[  181.666619][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.858'.
[  181.814833][ T9363] netlink: 44 bytes leftover after parsing attributes in process `syz.3.861'.
[  181.946655][ T9365] netlink: 'syz.4.860': attribute type 4 has an invalid length.
[  182.077501][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  182.240687][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.864'.
[  182.249849][ T9374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.864'.
[  182.341879][ T9376] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  182.349013][ T9376] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  182.397926][ T9376] hsr_slave_0: left promiscuous mode
[  182.418295][ T9376] hsr_slave_1: left promiscuous mode
[  182.630183][ T9376] netlink: 20 bytes leftover after parsing attributes in process `syz.2.865'.
[  182.668124][ T9236] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  182.710230][ T9236] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  182.717593][ T5845] Bluetooth: hci0: command tx timeout
[  182.738986][ T9236] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  182.789446][ T9236] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  182.859581][ T9398] netlink: 44 bytes leftover after parsing attributes in process `syz.4.872'.
[  183.001121][ T9236] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.101134][ T9402] syzkaller0: entered promiscuous mode
[  183.106688][ T9402] syzkaller0: entered allmulticast mode
[  183.117321][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  183.120117][ T9236] 8021q: adding VLAN 0 to HW filter on device team0
[  183.176024][ T9410] netlink: 16 bytes leftover after parsing attributes in process `syz.4.877'.
[  183.843606][ T9420] netlink: 'syz.0.881': attribute type 1 has an invalid length.
[  183.975987][ T9422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.881'.
[  184.167262][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  185.051869][ T9410] team0: entered promiscuous mode
[  185.056968][ T9410] team_slave_0: entered promiscuous mode
[  185.070596][ T9410] team_slave_1: entered promiscuous mode
[  185.078961][ T9410] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  185.088809][ T9410] team0: left promiscuous mode
[  185.094459][ T9410] team_slave_0: left promiscuous mode
[  185.102137][ T9410] team_slave_1: left promiscuous mode
[  185.157785][ T9420] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  185.164727][ T9421] batadv1: entered allmulticast mode
[  185.197343][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  185.236817][ T7459] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.239311][ T9428] netlink: 'syz.2.883': attribute type 1 has an invalid length.
[  185.244001][ T7459] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.267302][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.883'.
[  185.288759][ T7459] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.295936][ T7459] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.327531][ T9428] netlink: 'syz.2.883': attribute type 1 has an invalid length.
[  185.374087][ T9428] netlink: 'syz.2.883': attribute type 10 has an invalid length.
[  185.417524][ T9428] netlink: 55 bytes leftover after parsing attributes in process `syz.2.883'.
[  185.799476][ T9427] delete_channel: no stack
[  185.884376][ T9236] 8021q: adding VLAN 0 to HW filter on device batadv0
[  185.940405][ T9236] veth0_vlan: entered promiscuous mode
[  185.963715][ T9236] veth1_vlan: entered promiscuous mode
[  186.017425][ T9236] veth0_macvtap: entered promiscuous mode
[  186.030614][ T9236] veth1_macvtap: entered promiscuous mode
[  186.051266][ T9236] batman_adv: batadv0: Interface activated: batadv_slave_0
[  186.073756][ T9236] batman_adv: batadv0: Interface activated: batadv_slave_1
[  186.088431][ T9236] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.097910][ T9236] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.107015][ T9236] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.120302][ T9236] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.220518][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.238666][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.248013][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  186.302127][ T7500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.310853][ T7500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.328276][ T9467] netlink: 'syz.2.893': attribute type 29 has an invalid length.
[  186.681370][ T9476] vlan2: left allmulticast mode
[  186.696618][ T9476] vlan2: left promiscuous mode
[  186.707137][ T9480] netlink: 'syz.0.897': attribute type 10 has an invalid length.
[  186.710479][ T9476] bridge0: port 1(vlan2) entered disabled state
[  186.738830][ T9482] __nla_validate_parse: 5 callbacks suppressed
[  186.738847][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.896'.
[  186.779274][ T9481] netlink: 72 bytes leftover after parsing attributes in process `syz.4.898'.
[  186.789148][ T9482] netlink: 68 bytes leftover after parsing attributes in process `syz.2.896'.
[  186.800809][ T9480] batman_adv: batadv0: Adding interface: team0
[  186.804981][ T9484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.899'.
[  186.815853][ T9480] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.815884][ T9480] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  186.979191][ T9489] SET target dimension over the limit!
[  187.008844][ T9491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.901'.
[  187.277363][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  187.479288][ T7476] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.192658][ T7476] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.259955][ T9509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.907'.
[  188.317271][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  188.345517][ T9509] netlink: 20 bytes leftover after parsing attributes in process `syz.3.907'.
[  188.386663][ T9509] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  188.507647][ T9516] netlink: 'syz.0.909': attribute type 1 has an invalid length.
[  188.650501][ T7476] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.691299][ T9518] netlink: 32 bytes leftover after parsing attributes in process `syz.4.911'.
[  188.850126][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  188.867443][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  188.888509][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  188.918932][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  188.930637][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  188.944002][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  188.968982][ T7476] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.017987][ T9529] netlink: 24 bytes leftover after parsing attributes in process `syz.4.913'.
[  189.346842][ T7476] bridge_slave_1: left allmulticast mode
[  189.358485][ T7476] bridge_slave_1: left promiscuous mode
[  189.367262][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  189.388582][ T7476] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.442599][ T9548] netlink: 24 bytes leftover after parsing attributes in process `syz.3.918'.
[  189.453143][ T7476] bridge_slave_0: left allmulticast mode
[  189.459328][ T7476] bridge_slave_0: left promiscuous mode
[  189.473149][ T7476] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.006169][ T7489] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  190.274753][ T7476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  190.299477][ T7476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  190.310868][ T7476] bond0 (unregistering): Released all slaves
[  190.397315][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  190.412329][ T9560] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  191.038414][ T5845] Bluetooth: hci0: command tx timeout
[  191.303605][ T7476] hsr_slave_0: left promiscuous mode
[  191.325884][ T7476] hsr_slave_1: left promiscuous mode
[  191.339283][ T7476] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.355784][ T7476] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.373098][ T9589] xt_CT: You must specify a L4 protocol and not use inversions on it
[  191.388424][ T7476] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.404859][ T7476] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.437478][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  191.467738][ T7476] veth1_macvtap: left promiscuous mode
[  191.473361][ T7476] veth0_macvtap: left promiscuous mode
[  191.486404][ T7476] veth1_vlan: left promiscuous mode
[  191.492230][ T7476] veth0_vlan: left promiscuous mode
[  191.779975][ T9604] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  192.210770][ T7476] team0 (unregistering): Port device team_slave_1 removed
[  192.293895][ T7476] team0 (unregistering): Port device team_slave_0 removed
[  192.487269][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  192.780952][ T9524] chnl_net:caif_netlink_parms(): no params data found
[  193.021957][ T9524] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.029433][ T9524] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.036684][ T9524] bridge_slave_0: entered allmulticast mode
[  193.088917][ T9524] bridge_slave_0: entered promiscuous mode
[  193.105231][ T9524] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.113228][ T9524] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.121493][ T5845] Bluetooth: hci0: command tx timeout
[  193.128689][ T9524] bridge_slave_1: entered allmulticast mode
[  193.135851][ T9524] bridge_slave_1: entered promiscuous mode
[  193.241125][ T9524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.261783][ T9524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.411967][ T9524] team0: Port device team_slave_0 added
[  193.434984][ T9524] team0: Port device team_slave_1 added
[  193.517325][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  193.627948][ T9524] batman_adv: batadv0: Adding interface: batadv_slave_0
[  193.634968][ T9524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.669448][ T9524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  193.692872][ T9524] batman_adv: batadv0: Adding interface: batadv_slave_1
[  193.705668][ T9524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.732490][ T9645] __nla_validate_parse: 2 callbacks suppressed
[  193.732508][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.942'.
[  193.752479][ T9524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  193.763267][ T9645] netlink: 36 bytes leftover after parsing attributes in process `syz.4.942'.
[  193.782937][ T9647] netlink: 16 bytes leftover after parsing attributes in process `syz.0.943'.
[  193.822808][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.942'.
[  193.837764][ T9645] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048)
[  193.885997][ T9524] hsr_slave_0: entered promiscuous mode
[  193.904188][ T9524] hsr_slave_1: entered promiscuous mode
[  194.131287][ T9659] netlink: 104 bytes leftover after parsing attributes in process `syz.4.946'.
[  194.204655][ T9665] netlink: 'syz.0.948': attribute type 11 has an invalid length.
[  194.567267][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  194.726575][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  194.812683][ T9686] netlink: 'syz.3.953': attribute type 10 has an invalid length.
[  194.831534][ T9524] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  194.842950][ T9524] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  194.853675][ T9524] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  194.868889][ T9524] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  194.951463][ T9686] netlink: 'syz.3.953': attribute type 11 has an invalid length.
[  195.163835][ T9524] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.183637][ T9698] xt_TCPMSS: Only works on TCP SYN packets
[  195.198229][ T5845] Bluetooth: hci0: command tx timeout
[  195.211377][ T9524] 8021q: adding VLAN 0 to HW filter on device team0
[  195.232416][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.239621][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.272113][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.279334][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.563332][ T9524] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.597235][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  195.625015][ T9524] veth0_vlan: entered promiscuous mode
[  195.653571][ T9524] veth1_vlan: entered promiscuous mode
[  195.736365][ T9524] veth0_macvtap: entered promiscuous mode
[  195.762807][ T9524] veth1_macvtap: entered promiscuous mode
[  195.802452][ T9524] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.830738][ T9524] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.869318][ T9524] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.887874][ T9524] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.907591][ T9524] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.936812][ T9524] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.144796][ T7474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.203647][ T7474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.207574][ T9732] netlink: 'syz.0.968': attribute type 6 has an invalid length.
[  196.284132][ T7464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.302316][ T7464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.501301][ T9745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.971'.
[  196.533698][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.970'.
[  196.542928][ T9744] caif0: Master is either lo or non-ether device
[  196.545643][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.971'.
[  196.607494][ T9746] netlink: 'syz.0.971': attribute type 3 has an invalid length.
[  196.637390][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  196.647019][ T9746] netlink: 20 bytes leftover after parsing attributes in process `syz.0.971'.
[  196.682263][ T9748] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.972'.
[  197.063305][ T9760] syz.0.976 uses old SIOCAX25GETINFO
[  197.131306][ T9759] bridge_slave_1: entered allmulticast mode
[  197.141974][ T9758] bridge_slave_1: left allmulticast mode
[  197.271260][ T9762] tipc: Enabled bearer <udp:syz0>, priority 7
[  197.485046][ T9769] netlink: 'syz.3.981': attribute type 1 has an invalid length.
[  197.526047][ T9766] can: request_module (can-proto-3) failed.
[  197.550100][ T9769] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  197.615793][ T9769] 8021q: adding VLAN 0 to HW filter on device bond2
[  197.620565][ T3582] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  197.663446][ T9770] veth5: entered promiscuous mode
[  197.677299][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  197.681004][ T9770] bond2: (slave veth5): Enslaving as a backup interface with a down link
[  197.798979][ T7474] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  198.014496][ T3582] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.717294][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  198.792905][ T9791] __nla_validate_parse: 2 callbacks suppressed
[  198.792926][ T9791] netlink: 16 bytes leftover after parsing attributes in process `syz.2.985'.
[  198.815018][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.985'.
[  199.174636][ T9799] sctp: [Deprecated]: syz.0.989 (pid 9799) Use of int in max_burst socket option.
[  199.174636][ T9799] Use struct sctp_assoc_value instead
[  199.225644][ T9804] syzkaller1: entered promiscuous mode
[  199.237294][ T9804] syzkaller1: entered allmulticast mode
[  199.366608][ T3582] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.420424][ T9816] netlink: 'syz.4.992': attribute type 322 has an invalid length.
[  199.439107][ T5850] Bluetooth: hci4: command 0x0405 tx timeout
[  199.447123][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  199.457871][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  199.466175][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  199.503874][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  199.512132][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  199.521542][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  199.699600][ T3582] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.755120][ T9831] netlink: 44 bytes leftover after parsing attributes in process `syz.3.996'.
[  199.764331][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  199.868415][ T3582] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.927007][ T9831] 8021q: adding VLAN 0 to HW filter on device team0
[  199.961763][ T9831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  200.011842][ T9841] netlink: 'syz.0.1000': attribute type 10 has an invalid length.
[  200.180143][ T9841] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.341009][ T9851] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.463305][ T9851] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.670240][ T9851] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.705925][ T3582] bridge_slave_1: left allmulticast mode
[  200.713158][ T3582] bridge_slave_1: left promiscuous mode
[  200.726785][ T9870] set match dimension is over the limit!
[  200.733542][ T3582] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.754281][ T3582] bridge_slave_0: left allmulticast mode
[  200.761876][ T3582] bridge_slave_0: left promiscuous mode
[  200.769367][ T3582] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.797444][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  200.842611][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1008'.
[  201.200429][ T3582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  201.216345][ T3582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  201.232262][ T3582] bond0 (unregistering): Released all slaves
[  201.246179][ T9866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1006'.
[  201.264637][ T9870] pim6reg: entered allmulticast mode
[  201.324932][ T9851] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.601177][   T53] Bluetooth: hci0: command tx timeout
[  201.635932][ T9818] chnl_net:caif_netlink_parms(): no params data found
[  201.712627][ T9851] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.765615][ T9851] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.790693][ T9851] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.837386][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  201.845455][ T9851] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.917271][   T53] Bluetooth: hci2: command 0x0406 tx timeout
[  201.928696][   T53] Bluetooth: hci1: command 0x0406 tx timeout
[  201.935279][ T5850] Bluetooth: hci3: command 0x0406 tx timeout
[  202.049588][ T9897] trusted_key: syz.2.1014 sent an empty control message without MSG_MORE.
[  202.099807][ T9818] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.107794][ T9818] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.115088][ T9818] bridge_slave_0: entered allmulticast mode
[  202.122415][ T9818] bridge_slave_0: entered promiscuous mode
[  202.131398][ T9895] raw_sendmsg: syz.2.1014 forgot to set AF_INET. Fix it!
[  202.156222][ T3582] hsr_slave_0: left promiscuous mode
[  202.227288][ T3582] hsr_slave_1: left promiscuous mode
[  202.233338][ T3582] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  202.267325][ T3582] batman_adv: batadv0: Removing interface: batadv_slave_0
[  202.314259][ T3582] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  202.322333][ T3582] batman_adv: batadv0: Removing interface: batadv_slave_1
[  202.363189][ T9908] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1019'.
[  202.384678][ T3582] veth1_macvtap: left promiscuous mode
[  202.407817][ T3582] veth0_macvtap: left promiscuous mode
[  202.414589][ T3582] veth1_vlan: left promiscuous mode
[  202.427675][ T3582] veth0_vlan: left promiscuous mode
[  202.492910][ T9910] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1018'.
[  202.895383][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  203.388481][ T3582] team0 (unregistering): Port device team_slave_1 removed
[  203.434684][ T3582] team0 (unregistering): Port device team_slave_0 removed
[  203.680364][ T5840] Bluetooth: hci0: command tx timeout
[  203.927240][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  203.949490][ T9818] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.956909][ T9818] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.966670][ T9818] bridge_slave_1: entered allmulticast mode
[  203.974585][ T9818] bridge_slave_1: entered promiscuous mode
[  204.146815][ T9949] Dead loop on virtual device ip6_vti0, fix it urgently!
[  204.181492][ T9949] netlink: 'syz.0.1028': attribute type 1 has an invalid length.
[  204.201869][ T9949] netlink: 'syz.0.1028': attribute type 4 has an invalid length.
[  204.212011][ T9949] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1028'.
[  204.221501][ T9818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  204.230173][ T9818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  204.246556][ T9949] NCSI netlink: No device for ifindex 458760
[  204.295656][ T9955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'.
[  204.355677][ T9955] macsec1: entered allmulticast mode
[  204.363816][ T9957] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1031'.
[  204.379493][ T9955] veth1: entered allmulticast mode
[  204.386859][ T9955] veth1: left allmulticast mode
[  204.436164][ T9818] team0: Port device team_slave_0 added
[  204.491219][ T9818] team0: Port device team_slave_1 added
[  204.527616][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1032'.
[  204.654427][ T9960] infiniband syz1: set down
[  204.659539][ T9960] infiniband syz1: added team_slave_0
[  204.705653][ T9960] RDS/IB: syz1: added
[  204.710120][ T9960] smc: adding ib device syz1 with port count 1
[  204.716415][ T9960] smc:    ib device syz1 port 1 has pnetid 
[  204.760529][ T9976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1034'.
[  204.769740][ T9976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1034'.
[  204.792059][ T9818] batman_adv: batadv0: Adding interface: batadv_slave_0
[  204.806630][ T9818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.900915][ T9818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  204.931380][ T9818] batman_adv: batadv0: Adding interface: batadv_slave_1
[  204.942833][ T9818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.979046][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  205.026289][ T9818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.206881][ T9818] hsr_slave_0: entered promiscuous mode
[  205.228441][ T9818] hsr_slave_1: entered promiscuous mode
[  205.758276][ T5840] Bluetooth: hci0: command tx timeout
[  205.835163][T10000] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1042'.
[  205.997252][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  206.098229][T10004] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1043'.
[  206.180301][T10004] ip6t_rpfilter: unknown options
[  206.182146][T10006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  206.226339][T10006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  206.258941][ T9818] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  206.279959][ T9818] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  206.330643][ T9818] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  206.355066][ T9818] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  206.431659][T10016] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1047'.
[  206.469117][ T9818] 8021q: adding VLAN 0 to HW filter on device bond0
[  206.492716][ T9818] 8021q: adding VLAN 0 to HW filter on device team0
[  206.504855][T10016] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1047'.
[  206.548633][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.555785][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  206.601284][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.608496][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.806652][T10030] dvmrp5: entered allmulticast mode
[  207.037299][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  207.073570][T10028] dvmrp5: left allmulticast mode
[  207.212236][ T9818] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.332727][ T9818] veth0_vlan: entered promiscuous mode
[  207.365561][ T9818] veth1_vlan: entered promiscuous mode
[  207.441014][ T9818] veth0_macvtap: entered promiscuous mode
[  207.475556][ T9818] veth1_macvtap: entered promiscuous mode
[  207.538321][ T9818] batman_adv: batadv0: Interface activated: batadv_slave_0
[  207.587635][ T9818] batman_adv: batadv0: Interface activated: batadv_slave_1
[  207.622554][ T9818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  207.641400][ T9818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  207.659612][ T9818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.673950][ T9818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.747784][T10063] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  207.839695][ T5840] Bluetooth: hci0: command tx timeout
[  207.930227][ T7464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.977432][ T7464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.039346][T10079] FAULT_INJECTION: forcing a failure.
[  208.039346][T10079] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  208.056529][ T7464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.071876][ T7464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.079479][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  208.097384][T10079] CPU: 1 UID: 0 PID: 10079 Comm: syz.3.1063 Not tainted 6.14.0-rc2-syzkaller-00474-g0784d83df3bf #0
[  208.097417][T10079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  208.097435][T10079] Call Trace:
[  208.097442][T10079]  <TASK>
[  208.097451][T10079]  dump_stack_lvl+0x241/0x360
[  208.097496][T10079]  ? __pfx_dump_stack_lvl+0x10/0x10
[  208.097518][T10079]  ? __pfx__printk+0x10/0x10
[  208.097550][T10079]  ? __pfx_lock_release+0x10/0x10
[  208.097581][T10079]  ? __lock_acquire+0x1397/0x2100
[  208.097619][T10079]  should_fail_ex+0x40a/0x550
[  208.097653][T10079]  _copy_from_user+0x2d/0xb0
[  208.097678][T10079]  kstrtouint_from_user+0xc6/0x190
[  208.097715][T10079]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  208.097751][T10079]  ? __pfx_lock_acquire+0x10/0x10
[  208.097793][T10079]  proc_fail_nth_write+0xaa/0x2d0
[  208.097822][T10079]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  208.097850][T10079]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  208.097885][T10079]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  208.097919][T10079]  vfs_write+0x29f/0xd10
[  208.097942][T10079]  ? fdget_pos+0x254/0x320
[  208.097971][T10079]  ? __mutex_unlock_slowpath+0x227/0x800
[  208.098001][T10079]  ? __pfx_vfs_write+0x10/0x10
[  208.098019][T10079]  ? do_sys_openat2+0x17a/0x1d0
[  208.098052][T10079]  ? __fget_files+0x2a/0x410
[  208.098082][T10079]  ? __fget_files+0x395/0x410
[  208.098109][T10079]  ? __fget_files+0x2a/0x410
[  208.098148][T10079]  ksys_write+0x18f/0x2b0
[  208.098172][T10079]  ? __pfx_ksys_write+0x10/0x10
[  208.098194][T10079]  ? do_syscall_64+0x100/0x230
[  208.098224][T10079]  ? do_syscall_64+0xb6/0x230
[  208.098253][T10079]  do_syscall_64+0xf3/0x230
[  208.098280][T10079]  ? clear_bhb_loop+0x35/0x90
[  208.098313][T10079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.098341][T10079] RIP: 0033:0x7fa3e8f8b89f
[  208.098369][T10079] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  208.098387][T10079] RSP: 002b:00007fa3e9db1030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  208.098414][T10079] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa3e8f8b89f
[  208.098429][T10079] RDX: 0000000000000001 RSI: 00007fa3e9db10a0 RDI: 0000000000000004
[  208.098442][T10079] RBP: 00007fa3e9db1090 R08: 0000000000000000 R09: 0000000000000000
[  208.098455][T10079] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  208.098468][T10079] R13: 0000000000000000 R14: 00007fa3e91a5fa0 R15: 00007ffe6d37df08
[  208.098500][T10079]  </TASK>
[  208.196149][T10083] tls_set_device_offload_rx: netdev not found
[  209.117338][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  209.811980][ T3582] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.157384][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  210.489310][ T3582] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.610642][ T3582] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.819003][ T3582] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.000672][T10141] netlink: 'syz.0.1077': attribute type 1 has an invalid length.
[  211.012792][T10141] __nla_validate_parse: 3 callbacks suppressed
[  211.012812][T10141] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1077'.
[  211.140473][T10144] netlink: 'syz.4.1078': attribute type 9 has an invalid length.
[  211.150457][T10141] batadv1: entered promiscuous mode
[  211.178503][T10144] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1078'.
[  211.180094][T10143] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1077'.
[  211.207428][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  211.243209][T10146] nftables ruleset with unbound set
[  211.251241][T10141] batadv1: entered allmulticast mode
[  211.315656][T10139] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1077'.
[  211.337986][ T3582] bridge_slave_1: left allmulticast mode
[  211.348827][ T3582] bridge_slave_1: left promiscuous mode
[  211.372582][ T3582] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.377943][T10149] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1080'.
[  211.393867][T10147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1077'.
[  211.489043][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  211.498562][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  211.513273][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  211.524168][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  211.524865][ T3582] bridge_slave_0: left allmulticast mode
[  211.548261][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  211.557493][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  211.600659][ T3582] bridge_slave_0: left promiscuous mode
[  211.621344][ T3582] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.247367][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  212.395175][ T3582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  212.409522][ T3582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  212.421603][ T3582] bond0 (unregistering): Released all slaves
[  212.444084][T10154] bridge0: port 1(syz_tun) entered blocking state
[  212.457504][T10154] bridge0: port 1(syz_tun) entered disabled state
[  212.464422][T10154] syz_tun: entered allmulticast mode
[  212.489063][T10154] syz_tun: entered promiscuous mode
[  212.499617][T10154] bridge0: port 1(syz_tun) entered blocking state
[  212.506526][T10154] bridge0: port 1(syz_tun) entered forwarding state
[  212.741637][T10172] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1085'.
[  212.779250][T10172] sit0: entered promiscuous mode
[  212.813544][T10172] netlink: 'syz.0.1085': attribute type 1 has an invalid length.
[  212.842065][T10172] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1085'.
[  212.869281][T10168] bridge0: port 2(gretap0) entered blocking state
[  212.876052][T10168] bridge0: port 2(gretap0) entered disabled state
[  212.893963][T10168] gretap0: entered allmulticast mode
[  212.912575][T10168] gretap0: entered promiscuous mode
[  212.928143][T10168] bridge0: port 2(gretap0) entered blocking state
[  212.934777][T10168] bridge0: port 2(gretap0) entered forwarding state
[  212.997664][T10173] gretap0: left allmulticast mode
[  213.005259][T10173] gretap0: left promiscuous mode
[  213.012488][T10173] bridge0: port 2(gretap0) entered disabled state
[  213.058293][T10180] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1087'.
[  213.277346][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  213.597352][ T5845] Bluetooth: hci0: command tx timeout
[  213.868333][T10217] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.1095'.
[  214.211462][ T3582] hsr_slave_0: left promiscuous mode
[  214.245411][ T3582] hsr_slave_1: left promiscuous mode
[  214.262366][ T3582] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  214.282385][ T3582] batman_adv: batadv0: Removing interface: batadv_slave_0
[  214.310686][ T3582] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  214.318261][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  214.335950][ T3582] batman_adv: batadv0: Removing interface: batadv_slave_1
[  214.389796][ T3582] veth1_macvtap: left promiscuous mode
[  214.397854][ T3582] veth0_macvtap: left promiscuous mode
[  214.404088][ T3582] veth1_vlan: left promiscuous mode
[  214.415670][ T3582] veth0_vlan: left promiscuous mode
[  215.159687][ T3582] team0 (unregistering): Port device team_slave_1 removed
[  215.220749][ T3582] team0 (unregistering): Port device team_slave_0 removed
[  215.367247][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  215.679453][ T5845] Bluetooth: hci0: command tx timeout
[  215.908097][T10150] chnl_net:caif_netlink_parms(): no params data found
[  216.113378][T10270] syzkaller1: entered promiscuous mode
[  216.129362][T10270] syzkaller1: entered allmulticast mode
[  216.151575][T10274] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  216.221664][T10150] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.249751][T10150] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.278412][T10150] bridge_slave_0: entered allmulticast mode
[  216.285603][T10150] bridge_slave_0: entered promiscuous mode
[  216.317900][T10286] __nla_validate_parse: 1 callbacks suppressed
[  216.317922][T10286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1114'.
[  216.321185][T10288] netlink: 'syz.2.1113': attribute type 3 has an invalid length.
[  216.381459][T10286] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1114'.
[  216.397397][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  216.409786][T10270] netlink: 'syz.4.1109': attribute type 20 has an invalid length.
[  216.413413][T10150] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.433684][T10150] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.441740][T10150] bridge_slave_1: entered allmulticast mode
[  216.457694][T10150] bridge_slave_1: entered promiscuous mode
[  216.544900][T10150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  216.573579][T10150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  216.643774][T10150] team0: Port device team_slave_0 added
[  216.660608][T10150] team0: Port device team_slave_1 added
[  216.867096][T10150] batman_adv: batadv0: Adding interface: batadv_slave_0
[  216.880993][T10150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.908300][T10150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  216.921576][T10150] batman_adv: batadv0: Adding interface: batadv_slave_1
[  216.928788][T10150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.997264][T10150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.036165][T10323] netlink: 'syz.3.1123': attribute type 21 has an invalid length.
[  217.195471][T10331] netlink: 'syz.3.1123': attribute type 21 has an invalid length.
[  217.212879][T10150] hsr_slave_0: entered promiscuous mode
[  217.250215][T10150] hsr_slave_1: entered promiscuous mode
[  217.352123][T10340] Bluetooth: MGMT ver 1.23
[  217.437290][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  217.622330][T10357] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001
[  217.651617][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1131'.
[  217.758014][ T5845] Bluetooth: hci0: command tx timeout
[  217.986979][T10373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.063663][T10373] netpci0: tun_chr_ioctl cmd 1074025677
[  218.069299][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1137'.
[  218.093342][T10375] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1136'.
[  218.093541][T10373] netpci0: linktype set to 803
[  218.290358][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1138'.
[  218.477250][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  218.521411][   T80] smc: removing ib device syz0
[  218.551421][T10393] netlink: 'syz.3.1140': attribute type 2 has an invalid length.
[  218.582773][T10394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1141'.
[  218.715522][T10150] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  218.725452][T10150] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  218.763945][ T1212] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  218.834894][T10393] fþ²¹¥‰: entered promiscuous mode
[  218.895786][T10150] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  218.943659][T10150] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  219.199726][ T1212] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  219.210340][T10399] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.1143'.
[  219.303368][T10150] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.405940][T10150] 8021q: adding VLAN 0 to HW filter on device team0
[  219.443236][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.450489][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[  219.517330][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  219.558500][ T7464] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.565640][ T7464] bridge0: port 2(bridge_slave_1) entered forwarding state
[  219.859337][ T5845] Bluetooth: hci0: command tx timeout
[  220.185034][T10415] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  220.342003][T10150] 8021q: adding VLAN 0 to HW filter on device batadv0
[  220.422296][T10424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1145'.
[  220.488925][T10426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1148'.
[  220.536941][T10150] veth0_vlan: entered promiscuous mode
[  220.557376][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  220.583065][T10433] netlink: 'syz.4.1149': attribute type 1 has an invalid length.
[  220.645789][T10150] veth1_vlan: entered promiscuous mode
[  220.698875][T10150] veth0_macvtap: entered promiscuous mode
[  220.716401][T10150] veth1_macvtap: entered promiscuous mode
[  220.781482][T10150] batman_adv: batadv0: Interface activated: batadv_slave_0
[  220.795667][T10150] batman_adv: batadv0: Interface activated: batadv_slave_1
[  220.810662][T10150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  220.819548][T10150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  220.830417][T10150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  220.840112][T10150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  221.009695][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  221.034480][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.086429][   T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  221.098336][   T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.168477][T10442] netlink: 'syz.3.1152': attribute type 16 has an invalid length.
[  221.187915][T10442] netlink: 'syz.3.1152': attribute type 17 has an invalid length.
[  221.414572][T10442] bridge0: port 1(syz_tun) entered disabled state
[  221.607418][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  221.726141][T10442] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.734810][T10442] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.744347][T10442] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.753681][T10442] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.826143][T10461] bridge0: entered promiscuous mode
[  221.848615][T10461] macvlan0: entered promiscuous mode
[  222.096041][T10466] __nla_validate_parse: 4 callbacks suppressed
[  222.096067][T10466] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1159'.
[  222.120077][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1158'.
[  222.206717][T10468] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  222.243297][T10468] gretap1: entered promiscuous mode
[  222.262322][T10468] gretap1: entered allmulticast mode
[  222.396224][ T7464] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.588762][ T7464] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.637385][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  222.691851][ T7464] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.769390][ T7464] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.976580][ T7464] bridge_slave_1: left allmulticast mode
[  222.982865][ T7464] bridge_slave_1: left promiscuous mode
[  222.989122][ T7464] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.997955][ T7464] bridge_slave_0: left allmulticast mode
[  223.003724][ T7464] bridge_slave_0: left promiscuous mode
[  223.010077][ T7464] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.253148][T10481] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1163'.
[  223.346282][T10488] netlink: 'syz.2.1162': attribute type 1 has an invalid length.
[  223.367674][T10488] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1162'.
[  223.531919][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  223.542742][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  223.560879][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  223.573587][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  223.591219][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  223.605660][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  223.681198][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  223.717442][ T7464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  223.739410][ T7464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  223.751235][ T7464] bond0 (unregistering): Released all slaves
[  223.768953][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1162'.
[  223.791354][T10483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1162'.
[  223.820358][T10483] tc_dump_action: action bad kind
[  223.963017][T10502] netlink: zone id is out of range
[  223.968961][T10502] netlink: zone id is out of range
[  223.974241][T10502] netlink: zone id is out of range
[  223.987450][T10502] netlink: zone id is out of range
[  223.994966][T10502] netlink: zone id is out of range
[  224.008490][T10502] netlink: zone id is out of range
[  224.031712][T10502] netlink: zone id is out of range
[  224.042212][T10502] netlink: zone id is out of range
[  224.202625][T10513] netlink: 'syz.3.1169': attribute type 1 has an invalid length.
[  224.368665][T10514] bond3 (unregistering): Released all slaves
[  224.438040][ T7464] hsr_slave_0: left promiscuous mode
[  224.459217][ T7464] hsr_slave_1: left promiscuous mode
[  224.465578][ T7464] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.473823][ T7464] batman_adv: batadv0: Removing interface: batadv_slave_0
[  224.482902][ T7464] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.490727][ T7464] batman_adv: batadv0: Removing interface: batadv_slave_1
[  224.526151][ T7464] veth1_macvtap: left promiscuous mode
[  224.532120][ T7464] veth0_macvtap: left promiscuous mode
[  224.538642][ T7464] veth1_vlan: left promiscuous mode
[  224.543989][ T7464] veth0_vlan: left promiscuous mode
[  225.154917][ T7464] team0 (unregistering): Port device team_slave_1 removed
[  225.203309][ T7464] team0 (unregistering): Port device team_slave_0 removed
[  225.395287][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1175'.
[  225.425613][T10538] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1175'.
[  225.619637][T10540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1175'.
[  225.677590][ T5845] Bluetooth: hci0: command tx timeout
[  226.489441][T10520] netlink: 'syz.4.1171': attribute type 6 has an invalid length.
[  226.497445][T10520] netlink: 'syz.4.1171': attribute type 7 has an invalid length.
[  226.505228][T10520] netlink: 'syz.4.1171': attribute type 8 has an invalid length.
[  226.806114][T10496] chnl_net:caif_netlink_parms(): no params data found
[  227.089709][T10496] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.125119][T10496] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.145038][T10496] bridge_slave_0: entered allmulticast mode
[  227.161075][T10496] bridge_slave_0: entered promiscuous mode
[  227.211738][T10496] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.235535][T10496] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.257393][T10496] bridge_slave_1: entered allmulticast mode
[  227.264572][T10496] bridge_slave_1: entered promiscuous mode
[  227.281834][T10561] netlink: 'syz.4.1181': attribute type 11 has an invalid length.
[  227.300343][T10561] netlink: 'syz.4.1181': attribute type 10 has an invalid length.
[  227.352055][T10496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.373703][T10496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  227.487556][T10496] team0: Port device team_slave_0 added
[  227.524719][T10496] team0: Port device team_slave_1 added
[  227.615055][T10496] batman_adv: batadv0: Adding interface: batadv_slave_0
[  227.632932][T10496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.696598][T10496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  227.715410][T10569] sctp: [Deprecated]: syz.0.1184 (pid 10569) Use of int in max_burst socket option deprecated.
[  227.715410][T10569] Use struct sctp_assoc_value instead
[  227.747799][T10496] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.757714][ T5840] Bluetooth: hci0: command tx timeout
[  227.778066][T10496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.837235][    C1] net_ratelimit: 95 callbacks suppressed
[  227.837257][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  227.857581][T10496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.990236][T10496] hsr_slave_0: entered promiscuous mode
[  227.998524][T10496] hsr_slave_1: entered promiscuous mode
[  228.126940][T10581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1186'.
[  228.307947][T10583] ax25_connect(): syz.4.1187 uses autobind, please contact jreuter@yaina.de
[  228.583395][T10591] tap0: tun_chr_ioctl cmd 1074025678
[  228.597119][T10591] tap0: group set to 0
[  228.674766][T10595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1192'.
[  228.710624][T10594] netlink: 'syz.2.1191': attribute type 2 has an invalid length.
[  228.724384][T10594] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1191'.
[  228.746036][T10594] netlink: 'syz.2.1191': attribute type 153 has an invalid length.
[  228.790045][T10598] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma?
[  228.829431][T10598] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1193'.
[  228.877298][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  228.971126][T10604] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  229.024184][T10606] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  229.032415][T10606] CPU: 0 UID: 0 PID: 10606 Comm: syz.4.1196 Not tainted 6.14.0-rc2-syzkaller-00474-g0784d83df3bf #0
[  229.032444][T10606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  229.032458][T10606] Call Trace:
[  229.032466][T10606]  <TASK>
[  229.032475][T10606]  dump_stack_lvl+0x241/0x360
[  229.032511][T10606]  ? __pfx_dump_stack_lvl+0x10/0x10
[  229.032536][T10606]  ? __pfx__printk+0x10/0x10
[  229.032564][T10606]  ? __kmalloc_cache_noprof+0x243/0x390
[  229.032593][T10606]  ? sysfs_warn_dup+0x51/0xa0
[  229.032624][T10606]  sysfs_warn_dup+0x8e/0xa0
[  229.032648][T10606]  sysfs_do_create_link_sd+0xbe/0x110
[  229.032677][T10606]  device_add_class_symlinks+0x1c5/0x250
[  229.032713][T10606]  device_add+0x553/0xbf0
[  229.032752][T10606]  wiphy_register+0x1922/0x2650
[  229.032797][T10606]  ? __pfx_wiphy_register+0x10/0x10
[  229.032826][T10606]  ? minstrel_ht_alloc+0x84b/0x940
[  229.032867][T10606]  ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620
[  229.032905][T10606]  ieee80211_register_hw+0x35d9/0x42e0
[  229.032942][T10606]  ? ieee80211_register_hw+0x1671/0x42e0
[  229.032974][T10606]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  229.033008][T10606]  ? __asan_memset+0x23/0x50
[  229.033043][T10606]  ? __hrtimer_init+0x170/0x250
[  229.033071][T10606]  mac80211_hwsim_new_radio+0x2ae8/0x4a40
[  229.033153][T10606]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  229.033194][T10606]  ? trace_kmalloc+0x1f/0xd0
[  229.033220][T10606]  ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0
[  229.033252][T10606]  ? kstrndup+0xbb/0x150
[  229.033295][T10606]  hwsim_new_radio_nl+0xece/0x2290
[  229.033332][T10606]  ? __pfx___nla_validate_parse+0x10/0x10
[  229.033374][T10606]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  229.033436][T10606]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  229.033475][T10606]  genl_rcv_msg+0xb1f/0xec0
[  229.033513][T10606]  ? __pfx_genl_rcv_msg+0x10/0x10
[  229.033575][T10606]  ? __pfx_lock_acquire+0x10/0x10
[  229.033607][T10606]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  229.033631][T10606]  ? __pfx___might_resched+0x10/0x10
[  229.033672][T10606]  netlink_rcv_skb+0x206/0x480
[  229.033707][T10606]  ? __pfx_genl_rcv_msg+0x10/0x10
[  229.033736][T10606]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  229.033808][T10606]  genl_rcv+0x28/0x40
[  229.033831][T10606]  netlink_unicast+0x7f6/0x990
[  229.033873][T10606]  ? __pfx_netlink_unicast+0x10/0x10
[  229.033902][T10606]  ? __virt_addr_valid+0x45f/0x530
[  229.033937][T10606]  ? __phys_addr_symbol+0x2f/0x70
[  229.033971][T10606]  ? __check_object_size+0x47a/0x730
[  229.034006][T10606]  netlink_sendmsg+0x8de/0xcb0
[  229.034042][T10606]  ? __pfx_netlink_sendmsg+0x10/0x10
[  229.034069][T10606]  ? aa_sock_msg_perm+0x91/0x160
[  229.034115][T10606]  ? __pfx_netlink_sendmsg+0x10/0x10
[  229.034134][T10606]  __sock_sendmsg+0x221/0x270
[  229.034162][T10606]  ____sys_sendmsg+0x53a/0x860
[  229.034204][T10606]  ? __pfx_____sys_sendmsg+0x10/0x10
[  229.034234][T10606]  ? __fget_files+0x2a/0x410
[  229.034268][T10606]  ? __fget_files+0x2a/0x410
[  229.034310][T10606]  __sys_sendmsg+0x269/0x350
[  229.034340][T10606]  ? __pfx_futex_wake+0x10/0x10
[  229.034377][T10606]  ? __pfx___sys_sendmsg+0x10/0x10
[  229.034462][T10606]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  229.034497][T10606]  ? do_syscall_64+0x100/0x230
[  229.034528][T10606]  ? do_syscall_64+0xb6/0x230
[  229.034559][T10606]  do_syscall_64+0xf3/0x230
[  229.034586][T10606]  ? clear_bhb_loop+0x35/0x90
[  229.034621][T10606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.034651][T10606] RIP: 0033:0x7f5a2ab8cde9
[  229.034671][T10606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  229.034691][T10606] RSP: 002b:00007f5a2ba56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  229.034714][T10606] RAX: ffffffffffffffda RBX: 00007f5a2ada5fa0 RCX: 00007f5a2ab8cde9
[  229.034731][T10606] RDX: 0000000000000800 RSI: 0000400000000100 RDI: 0000000000000007
[  229.034745][T10606] RBP: 00007f5a2ac0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  229.034759][T10606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  229.034773][T10606] R13: 0000000000000000 R14: 00007f5a2ada5fa0 R15: 00007fff959e9a78
[  229.034805][T10606]  </TASK>
[  229.442678][T10496] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  229.464568][T10496] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  229.509778][T10496] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  229.554675][T10608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  229.562480][T10608] IPv6: NLM_F_CREATE should be set when creating new route
[  229.569740][T10608] IPv6: NLM_F_CREATE should be set when creating new route
[  229.600612][T10496] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  229.719607][T10615] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  229.797952][T10615] batman_adv: batadv0: Removing interface: team0
[  229.807663][T10615] bond0: (slave bond_slave_0): Releasing backup interface
[  229.818655][    T8] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  229.837540][ T5840] Bluetooth: hci0: command 0x040f tx timeout
[  229.849775][T10624] netlink: 'syz.0.1198': attribute type 10 has an invalid length.
[  229.912595][T10615] bond0: (slave bond_slave_1): Releasing backup interface
[  229.920193][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  229.943632][T10615] team0: Port device team_slave_0 removed
[  229.954702][T10615] team0: Port device team_slave_1 removed
[  229.986323][T10615] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.035624][T10615] bond1: (slave gretap1): Releasing active interface
[  230.056851][T10624] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  230.070199][T10624] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.084651][T10624] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  230.116184][T10615] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1198'.
[  230.144167][T10615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1198'.
[  230.243199][    T8] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  230.273336][T10496] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.372107][T10643] 8021q: adding VLAN 0 to HW filter on device bond1
[  230.428485][T10496] 8021q: adding VLAN 0 to HW filter on device team0
[  230.463031][ T9690] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.470249][ T9690] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.513531][T10654] openvswitch: netlink: Message has 8 unknown bytes.
[  230.554541][ T7464] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.561758][ T7464] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.708331][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1209'.
[  230.731706][T10496] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  230.957564][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  231.169322][T10678] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1213'.
[  231.238645][T10496] 8021q: adding VLAN 0 to HW filter on device batadv0
[  231.513238][T10496] veth0_vlan: entered promiscuous mode
[  231.556712][T10496] veth1_vlan: entered promiscuous mode
[  231.653205][T10496] veth0_macvtap: entered promiscuous mode
[  231.685444][T10699] Bluetooth: MGMT ver 1.23
[  231.698954][T10695] Bluetooth: hci0: Opcode 0x0401 failed: -112
[  231.701319][T10496] veth1_macvtap: entered promiscuous mode
[  231.799706][T10496] batman_adv: batadv0: Interface activated: batadv_slave_0
[  231.860567][T10496] batman_adv: batadv0: Interface activated: batadv_slave_1
[  231.905174][T10496] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  231.927664][T10496] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  231.929927][ T5840] Bluetooth: hci0: command 0x040f tx timeout
[  231.936416][T10496] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  231.951680][ T5845] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  231.970613][T10496] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  231.997252][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  232.277259][ T3582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.285160][ T3582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.321313][ T9690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.339516][ T9690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.393303][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1221'.
[  232.426632][T10722] netlink: 'syz.3.1222': attribute type 1 has an invalid length.
[  232.569325][T10722] 8021q: adding VLAN 0 to HW filter on device bond3
[  232.668355][T10722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1222'.
[  232.699974][T10727] 8021q: adding VLAN 0 to HW filter on device batadv1
[  232.712387][T10727] bond3: (slave batadv1): making interface the new active one
[  232.734074][T10704] sctp: [Deprecated]: syz.0.1217 (pid 10704) Use of struct sctp_assoc_value in delayed_ack socket option.
[  232.734074][T10704] Use struct sctp_sack_info instead
[  232.786860][T10727] bond3: (slave batadv1): Enslaving as an active interface with an up link
[  232.848896][T10722] vlan2: entered promiscuous mode
[  232.858386][T10722] bond3: entered promiscuous mode
[  232.869624][T10722] batadv1: entered promiscuous mode
[  232.889377][T10722] bond3: left promiscuous mode
[  232.905192][T10722] batadv1: left promiscuous mode
[  233.040501][T10740] vlan0: entered allmulticast mode
[  233.047249][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  233.499239][ T7500] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.551518][T10759] __nla_validate_parse: 1 callbacks suppressed
[  233.551539][T10759] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1231'.
[  233.757323][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  233.759683][ T7500] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.021245][ T7500] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.087237][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  234.130306][ T7500] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.296142][ T7500] bridge_slave_1: left allmulticast mode
[  234.301951][ T7500] bridge_slave_1: left promiscuous mode
[  234.317604][ T7500] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.335917][ T7500] bridge_slave_0: left allmulticast mode
[  234.342130][ T7500] bridge_slave_0: left promiscuous mode
[  234.348284][ T7500] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.643713][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1232'.
[  234.675750][T10777] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  234.688188][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1233'.
[  234.708256][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1233'.
[  234.750312][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1233'.
[  235.126436][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  235.242801][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  235.253843][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  235.263025][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  235.282519][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  235.290503][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  235.311776][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  235.386591][ T7500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  235.404525][ T7500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  235.405403][T10788] netlink: 'syz.0.1236': attribute type 9 has an invalid length.
[  235.421933][T10788] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1236'.
[  235.428437][ T7500] bond0 (unregistering): Released all slaves
[  235.709492][T10794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1238'.
[  235.756794][T10795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1238'.
[  235.826284][T10794] 8021q: adding VLAN 0 to HW filter on device batadv1
[  235.856872][T10794] bridge0: port 1(batadv1) entered blocking state
[  235.877415][T10794] bridge0: port 1(batadv1) entered disabled state
[  235.891307][T10801] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1240'.
[  235.898277][T10794] batadv1: entered allmulticast mode
[  235.913740][T10794] batadv1: entered promiscuous mode
[  235.935998][T10794] bridge0: port 1(batadv1) entered blocking state
[  235.943903][T10794] bridge0: port 1(batadv1) entered forwarding state
[  236.103481][T10809] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1242'.
[  236.157298][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  236.175972][T10810] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  236.314429][ T3582] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  236.324697][ T3582] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  236.499323][ T7500] hsr_slave_0: left promiscuous mode
[  236.506329][ T7500] hsr_slave_1: left promiscuous mode
[  236.515624][ T7500] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  236.523453][ T7500] batman_adv: batadv0: Removing interface: batadv_slave_0
[  236.553157][ T7500] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  236.563361][ T7500] batman_adv: batadv0: Removing interface: batadv_slave_1
[  236.615731][ T7500] veth1_macvtap: left promiscuous mode
[  236.621588][ T7500] veth0_macvtap: left promiscuous mode
[  236.627296][ T7500] veth1_vlan: left promiscuous mode
[  236.632644][ T7500] veth0_vlan: left promiscuous mode
[  237.008995][T10827] netlink: 'syz.2.1247': attribute type 11 has an invalid length.
[  237.200472][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  237.347453][ T7500] team0 (unregistering): Port device team_slave_1 removed
[  237.357323][ T5840] Bluetooth: hci0: command tx timeout
[  237.399303][ T7500] team0 (unregistering): Port device team_slave_0 removed
[  238.133413][T10841] netlink: 'syz.3.1251': attribute type 12 has an invalid length.
[  238.211540][T10783] chnl_net:caif_netlink_parms(): no params data found
[  238.216492][T10843] netlink: 'syz.3.1251': attribute type 2 has an invalid length.
[  238.237293][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  238.261894][T10843] Tq€!7: entered promiscuous mode
[  238.392958][T10783] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.409669][T10783] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.430813][T10783] bridge_slave_0: entered allmulticast mode
[  238.448426][T10783] bridge_slave_0: entered promiscuous mode
[  238.479537][T10783] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.487560][T10783] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.494836][T10783] bridge_slave_1: entered allmulticast mode
[  238.502554][T10783] bridge_slave_1: entered promiscuous mode
[  238.582413][T10783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  238.595837][T10783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  238.643711][T10783] team0: Port device team_slave_0 added
[  238.653194][T10783] team0: Port device team_slave_1 added
[  238.676231][T10860] netlink: 'syz.4.1255': attribute type 13 has an invalid length.
[  238.703845][T10783] batman_adv: batadv0: Adding interface: batadv_slave_0
[  238.713617][T10783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.740185][T10783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  238.754369][T10783] batman_adv: batadv0: Adding interface: batadv_slave_1
[  238.761417][T10783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.787665][T10783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  238.888971][T10783] hsr_slave_0: entered promiscuous mode
[  238.896108][T10783] hsr_slave_1: entered promiscuous mode
[  239.277386][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  239.373797][   T29] audit: type=1800 audit(1739711329.078:3): pid=10876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1259" name="memory.events" dev="tmpfs" ino=1528 res=0 errno=0
[  239.415788][T10874] netlink: 'syz.2.1258': attribute type 1 has an invalid length.
[  239.440196][ T5840] Bluetooth: hci0: command tx timeout
[  239.549115][T10783] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  239.598343][T10783] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  239.639694][T10783] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  239.690847][T10783] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  239.712161][T10890] netlink: zone id is out of range
[  239.717934][T10890] netlink: zone id is out of range
[  239.723153][T10890] netlink: zone id is out of range
[  239.737392][T10890] netlink: zone id is out of range
[  239.742929][T10890] netlink: zone id is out of range
[  239.758744][T10890] netlink: zone id is out of range
[  239.776367][T10890] netlink: del zone limit has 4 unknown bytes
[  239.805774][T10891] team0: entered promiscuous mode
[  239.817772][T10891] team_slave_0: entered promiscuous mode
[  239.829541][T10891] team_slave_1: entered promiscuous mode
[  239.876488][T10896] __nla_validate_parse: 2 callbacks suppressed
[  239.876510][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'.
[  239.908378][T10890] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551607)
[  239.921903][T10890] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  239.958266][T10783] 8021q: adding VLAN 0 to HW filter on device bond0
[  239.966762][T10889] team0: left promiscuous mode
[  239.973136][T10889] team_slave_0: left promiscuous mode
[  239.980835][T10889] team_slave_1: left promiscuous mode
[  240.032255][T10783] 8021q: adding VLAN 0 to HW filter on device team0
[  240.057913][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.065349][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.133450][ T7500] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.140699][ T7500] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.154928][T10905] SET target dimension over the limit!
[  240.317226][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  241.254813][T10783] 8021q: adding VLAN 0 to HW filter on device batadv0
[  241.429765][T10783] veth0_vlan: entered promiscuous mode
[  241.474778][T10783] veth1_vlan: entered promiscuous mode
[  241.517657][ T5840] Bluetooth: hci0: command tx timeout
[  241.524746][T10783] veth0_macvtap: entered promiscuous mode
[  241.579424][T10783] veth1_macvtap: entered promiscuous mode
[  241.645024][T10783] batman_adv: batadv0: Interface activated: batadv_slave_0
[  241.706167][T10783] batman_adv: batadv0: Interface activated: batadv_slave_1
[  241.736322][T10783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.769554][T10783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  241.794520][T10783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  241.804748][T10783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  241.985425][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.003820][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.074080][ T7474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.082879][ T7474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.203921][T10959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1282'.
[  242.407820][T10970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1284'.
[  242.451705][T10968] x_tables: unsorted underflow at hook 3
[  243.065395][ T7500] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.067931][T10987] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1289'.
[  243.133102][T10987] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1289'.
[  243.177421][T10987] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1289'.
[  243.186489][T10987] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1289'.
[  243.308640][ T7500] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.447327][    C1] net_ratelimit: 2 callbacks suppressed
[  243.447350][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  243.482259][ T7500] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.593682][ T7500] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.786970][ T7500] bridge_slave_1: left allmulticast mode
[  243.794340][ T7500] bridge_slave_1: left promiscuous mode
[  243.800258][ T7500] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.809504][ T7500] bridge_slave_0: left allmulticast mode
[  243.815288][ T7500] bridge_slave_0: left promiscuous mode
[  243.821273][ T7500] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.183948][ T7500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  244.248249][ T7500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  244.300069][ T7500] bond0 (unregistering): Released all slaves
[  244.487254][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  244.648180][T11011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1295'.
[  244.658485][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1294'.
[  244.790578][T11011] 8021q: adding VLAN 0 to HW filter on device bond3
[  244.888950][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  244.917273][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  244.923397][T11025] netlink: 'syz.3.1298': attribute type 1 has an invalid length.
[  244.938565][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  244.956406][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  244.965681][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  244.968604][T11027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1297'.
[  244.982344][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  245.248000][T11026] 8021q: adding VLAN 0 to HW filter on device bond4
[  245.279269][T11031] bridge4: entered promiscuous mode
[  245.517304][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  245.583921][ T7500] hsr_slave_0: left promiscuous mode
[  245.622163][ T7500] hsr_slave_1: left promiscuous mode
[  245.637487][ T7500] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  245.645115][ T7500] batman_adv: batadv0: Removing interface: batadv_slave_0
[  245.686472][ T7500] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  245.697356][ T7500] batman_adv: batadv0: Removing interface: batadv_slave_1
[  245.736381][ T7500] veth1_macvtap: left promiscuous mode
[  245.742254][ T7500] veth0_macvtap: left promiscuous mode
[  245.748605][ T7500] veth1_vlan: left promiscuous mode
[  245.754120][ T7500] veth0_vlan: left promiscuous mode
[  245.794821][T11051] netlink: 'syz.2.1302': attribute type 3 has an invalid length.
[  245.816632][T11051] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1302'.
[  246.567480][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  246.626821][ T7500] team0 (unregistering): Port device team_slave_1 removed
[  246.675985][ T7500] team0 (unregistering): Port device team_slave_0 removed
[  247.042331][ T5840] Bluetooth: hci0: command tx timeout
[  247.429580][T11021] chnl_net:caif_netlink_parms(): no params data found
[  247.524256][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1307'.
[  247.541132][T11072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1307'.
[  247.597254][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  247.733476][T11021] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.741035][T11021] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.748483][T11021] bridge_slave_0: entered allmulticast mode
[  247.755904][T11021] bridge_slave_0: entered promiscuous mode
[  247.790565][T11085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1308'.
[  247.829720][T11021] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.856851][T11021] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.880456][T11021] bridge_slave_1: entered allmulticast mode
[  247.888617][T11021] bridge_slave_1: entered promiscuous mode
[  247.977101][T11084] IPv6: Can't replace route, no match found
[  247.993352][T11089] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.086073][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'.
[  248.087849][T11089] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.106900][T11105] netlink: 'syz.0.1314': attribute type 10 has an invalid length.
[  248.148628][T11021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  248.172773][T11021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  248.173800][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1313'.
[  248.193885][T11101] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1313'.
[  248.209384][T11105] veth0_vlan: left promiscuous mode
[  248.219483][T11105] veth0_vlan: entered promiscuous mode
[  248.282239][T11105] team0: Device veth0_vlan failed to register rx_handler
[  248.408570][T11089] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.508346][T11021] team0: Port device team_slave_0 added
[  248.570575][T11089] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.619198][T11021] team0: Port device team_slave_1 added
[  248.637348][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  248.753794][T11021] batman_adv: batadv0: Adding interface: batadv_slave_0
[  248.767397][T11021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.852846][T11021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  248.885651][T11021] batman_adv: batadv0: Adding interface: batadv_slave_1
[  248.900009][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1318'.
[  248.909302][T11128] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1318'.
[  248.918549][T11021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.974464][T11021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  249.050008][T11089] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.104549][T11089] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.122213][ T5840] Bluetooth: hci0: command tx timeout
[  249.302238][T11136] netlink: 'syz.4.1316': attribute type 4 has an invalid length.
[  249.385014][T11140] netlink: 'syz.4.1316': attribute type 4 has an invalid length.
[  249.455699][T11089] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.487367][T11089] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  249.541215][T11021] hsr_slave_0: entered promiscuous mode
[  249.597064][T11021] hsr_slave_1: entered promiscuous mode
[  249.671198][T11122] syzkaller1: entered promiscuous mode
[  249.677222][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  249.684683][T11122] syzkaller1: entered allmulticast mode
[  250.031902][T11147] bridge0: entered promiscuous mode
[  250.186253][T11159] __nla_validate_parse: 2 callbacks suppressed
[  250.186273][T11159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1325'.
[  250.337983][T11162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1327'.
[  250.352968][T11163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1327'.
[  250.377594][T11163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1327'.
[  250.718657][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  250.752496][T11021] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  250.763833][T11021] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  250.779602][T11021] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  250.791148][T11021] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  251.019499][T11177] xt_HMARK: proto mask must be zero with L3 mode
[  251.044292][T11021] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.115656][T11021] 8021q: adding VLAN 0 to HW filter on device team0
[  251.148692][ T9690] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.155861][ T9690] bridge0: port 1(bridge_slave_0) entered forwarding state
[  251.197806][ T5840] Bluetooth: hci0: command tx timeout
[  251.205018][T11184] bridge0: port 3(veth0_to_bridge) entered blocking state
[  251.233629][T11184] bridge0: port 3(veth0_to_bridge) entered disabled state
[  251.255443][T11184] veth0_to_bridge: entered allmulticast mode
[  251.262706][T11184] veth0_to_bridge: entered promiscuous mode
[  251.274363][ T7474] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.281590][ T7474] bridge0: port 2(bridge_slave_1) entered forwarding state
[  251.292885][T11187] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1335'.
[  251.365710][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'.
[  251.379805][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'.
[  251.411003][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'.
[  251.445585][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'.
[  251.478483][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'.
[  251.757257][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  251.875542][T11021] 8021q: adding VLAN 0 to HW filter on device batadv0
[  252.013584][T11021] veth0_vlan: entered promiscuous mode
[  252.029695][T11021] veth1_vlan: entered promiscuous mode
[  252.077012][T11021] veth0_macvtap: entered promiscuous mode
[  252.102539][T11021] veth1_macvtap: entered promiscuous mode
[  252.129462][T11228] sit0: left promiscuous mode
[  252.166635][T11228] 8021q: adding VLAN 0 to HW filter on device team0
[  252.177836][  T972] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  252.199956][T11228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  252.372445][T11021] batman_adv: batadv0: Interface activated: batadv_slave_0
[  252.395560][T11021] batman_adv: batadv0: Interface activated: batadv_slave_1
[  252.427035][T11021] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.442479][T11021] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.456105][T11021] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.472080][T11021] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.658253][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.703089][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.773995][T11250] netlink: set zone limit has 8 unknown bytes
[  252.789980][ T7500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.807448][    C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  252.818314][ T7500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.057595][ T5887] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  253.132368][T11086] ------------[ cut here ]------------
[  253.138509][T11086] refcount_t: underflow; use-after-free.
[  253.144597][T11086] WARNING: CPU: 1 PID: 11086 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0
[  253.154367][T11086] Modules linked in:
[  253.158302][T11086] CPU: 1 UID: 0 PID: 11086 Comm: kbnepd bnep0 Not tainted 6.14.0-rc2-syzkaller-00474-g0784d83df3bf #0
[  253.169357][T11086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  253.179468][T11086] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0
[  253.185652][T11086] Code: 60 a1 80 8c e8 57 57 8c fc 90 0f 0b 90 90 eb 99 e8 2b 94 cc fc c6 05 67 da 31 0b 01 90 48 c7 c7 c0 a1 80 8c e8 37 57 8c fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 08 94 cc fc c6 05 41 da 31 0b 01 90
[  253.205720][T11086] RSP: 0018:ffffc900045ef720 EFLAGS: 00010246
[  253.211962][T11086] RAX: fdc17f25bb2d2700 RBX: ffff88805cbc1878 RCX: ffff88803435bc00
[  253.219973][T11086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  253.227972][T11086] RBP: 0000000000000003 R08: ffffffff81817d12 R09: fffffbfff1d3a614
[  253.235946][T11086] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: ffff88805cbc1860
[  253.243958][T11086] R13: 1ffff1100b97830c R14: ffff88805cbc1860 R15: ffffffff86384ef0
[  253.252083][T11086] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  253.261048][T11086] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  253.267688][T11086] CR2: 00007f99140d56c0 CR3: 0000000060832000 CR4: 00000000003526f0
[  253.275673][T11086] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  253.283675][T11086] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  253.291800][T11086] Call Trace:
[  253.295104][T11086]  <TASK>
[  253.298435][T11086]  ? __warn+0x165/0x4d0
[  253.302614][T11086]  ? refcount_warn_saturate+0x15a/0x1d0
[  253.308206][T11086]  ? report_bug+0x2b3/0x500
[  253.312716][T11086]  ? refcount_warn_saturate+0x15a/0x1d0
[  253.318308][T11086]  ? handle_bug+0x60/0x90
[  253.323082][T11086]  ? exc_invalid_op+0x1a/0x50
[  253.327793][T11086]  ? asm_exc_invalid_op+0x1a/0x20
[  253.333006][T11086]  ? __pfx_klist_children_put+0x10/0x10
[  253.339198][T11086]  ? __warn_printk+0x292/0x360
[  253.343985][T11086]  ? refcount_warn_saturate+0x15a/0x1d0
[  253.349647][T11086]  klist_dec_and_del+0x3ec/0x3f0
[  253.354627][T11086]  ? __pfx_klist_children_put+0x10/0x10
[  253.360220][T11086]  klist_del+0xa7/0x110
[  253.364390][T11086]  device_del+0x2c9/0x9b0
[  253.368793][T11086]  ? __pfx_device_del+0x10/0x10
[  253.373660][T11086]  ? netdev_unregister_kobject+0x178/0x250
[  253.379505][T11086]  unregister_netdevice_many_notify+0x1ae7/0x2070
[  253.385950][T11086]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  253.392893][T11086]  ? rcu_is_watching+0x15/0xb0
[  253.398255][T11086]  ? trace_contention_end+0x3c/0x120
[  253.403589][T11086]  ? __mutex_lock+0x397/0x1010
[  253.408423][T11086]  ? unregister_netdev+0x17/0x30
[  253.413374][T11086]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  253.419748][T11086]  unregister_netdevice_queue+0x303/0x370
[  253.425489][T11086]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  253.431773][T11086]  ? down_write+0x18c/0x220
[  253.436308][T11086]  ? __pfx_down_write+0x10/0x10
[  253.441196][T11086]  unregister_netdev+0x21/0x30
[  253.445975][T11086]  bnep_session+0x2e4e/0x3040
[  253.450936][T11086]  ? __pfx_bnep_session+0x10/0x10
[  253.455980][T11086]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  253.461913][T11086]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  253.468274][T11086]  ? __pfx_woken_wake_function+0x10/0x10
[  253.473927][T11086]  ? __kthread_parkme+0x169/0x1d0
[  253.478988][T11086]  ? __pfx_bnep_session+0x10/0x10
[  253.484026][T11086]  kthread+0x7a9/0x920
[  253.488132][T11086]  ? __pfx_kthread+0x10/0x10
[  253.492741][T11086]  ? __pfx_bnep_session+0x10/0x10
[  253.497996][T11086]  ? __pfx_kthread+0x10/0x10
[  253.502602][T11086]  ? __pfx_kthread+0x10/0x10
[  253.507335][T11086]  ? __pfx_kthread+0x10/0x10
[  253.511939][T11086]  ? _raw_spin_unlock_irq+0x23/0x50
[  253.517178][T11086]  ? lockdep_hardirqs_on+0x99/0x150
[  253.522385][T11086]  ? __pfx_kthread+0x10/0x10
[  253.526989][T11086]  ret_from_fork+0x4b/0x80
[  253.531443][T11086]  ? __pfx_kthread+0x10/0x10
[  253.536052][T11086]  ret_from_fork_asm+0x1a/0x30
[  253.540950][T11086]  </TASK>
[  253.543989][T11086] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  253.551452][T11086] CPU: 1 UID: 0 PID: 11086 Comm: kbnepd bnep0 Not tainted 6.14.0-rc2-syzkaller-00474-g0784d83df3bf #0
[  253.562389][T11086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  253.572450][T11086] Call Trace:
[  253.575735][T11086]  <TASK>
[  253.578693][T11086]  dump_stack_lvl+0x241/0x360
[  253.583403][T11086]  ? __pfx_dump_stack_lvl+0x10/0x10
[  253.588637][T11086]  ? __pfx__printk+0x10/0x10
[  253.593238][T11086]  ? _printk+0xd5/0x120
[  253.597399][T11086]  ? __init_begin+0x41000/0x41000
[  253.602628][T11086]  ? vscnprintf+0x5d/0x90
[  253.606972][T11086]  panic+0x349/0x880
[  253.610905][T11086]  ? __warn+0x174/0x4d0
[  253.615070][T11086]  ? __pfx_panic+0x10/0x10
[  253.619515][T11086]  ? ret_from_fork_asm+0x1a/0x30
[  253.624553][T11086]  __warn+0x344/0x4d0
[  253.628546][T11086]  ? refcount_warn_saturate+0x15a/0x1d0
[  253.634098][T11086]  report_bug+0x2b3/0x500
[  253.638430][T11086]  ? refcount_warn_saturate+0x15a/0x1d0
[  253.643983][T11086]  handle_bug+0x60/0x90
[  253.648174][T11086]  exc_invalid_op+0x1a/0x50
[  253.652682][T11086]  asm_exc_invalid_op+0x1a/0x20
[  253.657546][T11086] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0
[  253.663820][T11086] Code: 60 a1 80 8c e8 57 57 8c fc 90 0f 0b 90 90 eb 99 e8 2b 94 cc fc c6 05 67 da 31 0b 01 90 48 c7 c7 c0 a1 80 8c e8 37 57 8c fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 08 94 cc fc c6 05 41 da 31 0b 01 90
[  253.683793][T11086] RSP: 0018:ffffc900045ef720 EFLAGS: 00010246
[  253.689874][T11086] RAX: fdc17f25bb2d2700 RBX: ffff88805cbc1878 RCX: ffff88803435bc00
[  253.697850][T11086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  253.705824][T11086] RBP: 0000000000000003 R08: ffffffff81817d12 R09: fffffbfff1d3a614
[  253.713895][T11086] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: ffff88805cbc1860
[  253.721899][T11086] R13: 1ffff1100b97830c R14: ffff88805cbc1860 R15: ffffffff86384ef0
[  253.729891][T11086]  ? __pfx_klist_children_put+0x10/0x10
[  253.735452][T11086]  ? __warn_printk+0x292/0x360
[  253.740266][T11086]  klist_dec_and_del+0x3ec/0x3f0
[  253.745306][T11086]  ? __pfx_klist_children_put+0x10/0x10
[  253.750868][T11086]  klist_del+0xa7/0x110
[  253.755045][T11086]  device_del+0x2c9/0x9b0
[  253.759397][T11086]  ? __pfx_device_del+0x10/0x10
[  253.764436][T11086]  ? netdev_unregister_kobject+0x178/0x250
[  253.770255][T11086]  unregister_netdevice_many_notify+0x1ae7/0x2070
[  253.776696][T11086]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  253.783470][T11086]  ? rcu_is_watching+0x15/0xb0
[  253.788240][T11086]  ? trace_contention_end+0x3c/0x120
[  253.793533][T11086]  ? __mutex_lock+0x397/0x1010
[  253.798333][T11086]  ? unregister_netdev+0x17/0x30
[  253.803285][T11086]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  253.809644][T11086]  unregister_netdevice_queue+0x303/0x370
[  253.815383][T11086]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  253.821631][T11086]  ? down_write+0x18c/0x220
[  253.826143][T11086]  ? __pfx_down_write+0x10/0x10
[  253.831017][T11086]  unregister_netdev+0x21/0x30
[  253.835794][T11086]  bnep_session+0x2e4e/0x3040
[  253.840587][T11086]  ? __pfx_bnep_session+0x10/0x10
[  253.845677][T11086]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  253.851585][T11086]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  253.857937][T11086]  ? __pfx_woken_wake_function+0x10/0x10
[  253.863596][T11086]  ? __kthread_parkme+0x169/0x1d0
[  253.868642][T11086]  ? __pfx_bnep_session+0x10/0x10
[  253.873686][T11086]  kthread+0x7a9/0x920
[  253.877770][T11086]  ? __pfx_kthread+0x10/0x10
[  253.882370][T11086]  ? __pfx_bnep_session+0x10/0x10
[  253.887405][T11086]  ? __pfx_kthread+0x10/0x10
[  253.892003][T11086]  ? __pfx_kthread+0x10/0x10
[  253.896604][T11086]  ? __pfx_kthread+0x10/0x10
[  253.901203][T11086]  ? _raw_spin_unlock_irq+0x23/0x50
[  253.906490][T11086]  ? lockdep_hardirqs_on+0x99/0x150
[  253.911691][T11086]  ? __pfx_kthread+0x10/0x10
[  253.916287][T11086]  ret_from_fork+0x4b/0x80
[  253.920707][T11086]  ? __pfx_kthread+0x10/0x10
[  253.925302][T11086]  ret_from_fork_asm+0x1a/0x30
[  253.930077][T11086]  </TASK>
[  255.036478][T11086] Shutting down cpus with NMI
[  255.041569][T11086] Kernel Offset: disabled
[  255.046024][T11086] Rebooting in 86400 seconds..