last executing test programs:

4.993413326s ago: executing program 3 (id=3377):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r2 = socket$kcm(0x2, 0x0, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x0, 0x0, 0x0, 0x8}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$inet(r2, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000180)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000180), 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10)
close(r0)

4.681741809s ago: executing program 2 (id=3378):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r2 = socket$kcm(0x2, 0x0, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x0, 0x0, 0x0, 0x8}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xd, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$inet(r2, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r7}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000180)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000180), 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10)
close(r0)

3.895659283s ago: executing program 3 (id=3385):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = accept4(r0, &(0x7f0000000a40)=@in={0x2, 0x0, @loopback}, &(0x7f0000000000)=0x80, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="b80000002100000228bd7000fddbdf25e90f1467060000070800000014000100fc00000000000000000000000000000814000100fe8000000000000000000000000000bb14000200fc01000000000000000000000000000114000200ff020000000000000000000000000001080010000004000014000100fe8000000000000000000000000000aa08000f00e30d00001400010000000000000000000000000000000001140011007465616d5f736c6176655f3100000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000000c0)=ANY=[@ANYBLOB="880000000802110000010802110000005050505050"], 0x28)
syz_emit_ethernet(0x2e, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020002000000011c97800000000000000008903aa0000004e200008907878e5db5af4c4a0804b952b83ede79252e0038fb7243f5d4bff7bb1d4834c693fc5e987f1af135e6d3cd3337281bcada4847fa731fbeaba239617c664cef210b3274e2013274205b4a2dadd9748a042285419a53b1bcd86dd1353baccc4"], 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000d40)=@mgmt_frame=@beacon={{{}, {0x7fff}, @broadcast, @broadcast}, 0x0, @default, 0x8100, @void, @val, @void, @val={0x4, 0x6, {0x3, 0x4, 0xce, 0x3}}, @val={0x6, 0x2, 0x5e5c}, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7}, @val={0x76, 0x6, {0x10, 0xae, 0xc, 0x7}}, [{0xdd, 0xa6, "cdae51d2f7447223dc6d39227596a77a2629b5219d8277a81a303eff03970adb3166593cd26853936660f6d5bba58e93941079b2503b8cc87354dac7f4d5242f343d6578f81b07c2d3bf052cb16873e6679cb6199644514fa11494599bb0f3593a50adb0f3d8dbabb8938824c695deb3f796f1b43cdc42fe2963fd74bf8f1860f9e1558e6bf12428e60cf9edf1605e696013319be79fb6c03da12b6d0b645e7a973b47192b4b"}]}, 0xeb)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000700)={'veth1_macvtap\x00', 0x8000})
sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0)
unshare(0x20000400)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r3, &(0x7f0000003bc0)=[{{&(0x7f0000001000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@flowinfo={{0x14, 0x29, 0xb, 0xf5e}}, @flowinfo={{0x14, 0x29, 0xb, 0x20c6}}], 0x30}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x10, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000800)='GPL\x00', 0x5, 0x1000, &(0x7f0000001040)=""/4096, 0xc0f00, 0x8, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x5, 0xcd, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000c40)=[{0x0, 0x4, 0x1, 0x8}, {0x4, 0x4, 0xf}, {0x2, 0x3, 0x3}, {0x3, 0x2, 0x1, 0x4}, {0x1, 0x2, 0xc, 0x5}, {0x5, 0x3, 0x6, 0x1}, {0x5, 0x2, 0xd, 0x9}, {0x4, 0x3, 0x8, 0x8}], 0x10, 0x80000000}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x81, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xd0, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000540)=[@in={0x2, 0xfffa, @broadcast}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000800)={0x0, 0x1}, 0x8)
sendmmsg$inet6(r5, &(0x7f0000003e80)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="ff", 0x1}], 0x1}}], 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000001840)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)='~', 0x1}], 0x1}}], 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', r4, 0x2f, 0xff, 0x40, 0x9, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x80, 0x40, 0x0, 0x7}})
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
unshare(0x42000000)
r7 = socket$igmp6(0xa, 0x3, 0x2)
sendmsg$tipc(r7, &(0x7f00000026c0)={0x0, 0x0, 0x0}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0xfffffffffffffe31)
connect$inet(r6, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10)

3.686729854s ago: executing program 0 (id=3387):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = socket$kcm(0x2, 0x0, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x0, 0x0, 0x0, 0x8}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xd, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$inet(r1, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r7}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000180)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000180), 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10)
close(r0)

3.618705555s ago: executing program 2 (id=3388):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$isdn_base(0x22, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000900000000000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0x5, 0x0, &(0x7f0000000440)="b9ff030768", 0x0, 0xb000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r3 = socket(0x2, 0x80805, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x8, 0x4)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003100), r4)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000003140)={0x50, r5, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x50}}, 0x0)
getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006)
listen(r2, 0x0)
sendmsg$sock(r3, &(0x7f00000017c0)={&(0x7f00000010c0)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0x5, 0x4, "ded82101761dbb24a7a3a4d491a662e7d348b7b93afc23dbb2f6198b186d4a6dfed74b50004d4d4b28c6d3477d3775f6cbc121f724eaf4d3df6808dfa83a65", 0x1c}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001240)="03d59bef42c41a4d58ae21f7a168afac993f75a2bad7b957c6b8c7f907ee0b8e1d75ac52aeb3be2eddb4b8b41e92f4612981c8c529eb364907188d451914164201aced8678b645e6ced1c9b47c0c43ac63bce5f4a2cfa5b09a21dd5bef6267bff5078f8a6e4bff15415c4217c3761a3c2c190db139377ccf7c41209b651672d549a3fa40d8fc3a8f1e4e4f51913d3b210d46d64575c632d1c051f16b5d9dfeae5b88866c0aa50dfa5cc67d06", 0xac}, {&(0x7f0000001140)="610c787199f3805b850fff569a0fe2b60000c4c3692a2b7afdf6fdf73d5acb8ec036d1e716836ae704395bbc0e9b9e3d942e9a45f0629883a00fa848cac6fabbafbd073d28cb", 0x46}, {&(0x7f0000001300)="51eb6342c40c4d0e87ccf85f18e4a8065be04abd84135b672451db90652a8339b7438a86d1d186aa688945dec0cc4974ca312a43c90ae61a1cfe31acb2e7f41f4e2dda0e912b8d50a07ece6704e8016417632554139af446d509a42b245d007c8aafb0489fc53cdbe3d2", 0x6a}, {&(0x7f0000001400)="7ab33131ed063ae2cb0edade7c5c4f96ff5ca9314d405f7015652bb47f6fa2da8d0b102b15e8d334c87692c4c3391dd816552f424d912019a5ee7343a92129d406b210940982f7bdc908d1fe06e22cb7003cb6f83d7739733bf2f240ae6283c89f3680f6904bbea494c5cb7f778ff2d0ba619a36a6a27ea815167218cee27094952f48b933436997b96761fa7abcb046f81c70f9e7ef3eaa592aaca651b14f71d51a5874d4c5c30f1084", 0xaa}, {&(0x7f00000014c0)="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", 0xfa}, {&(0x7f0000001040)}, {&(0x7f00000015c0)="2337f9da5e603734a10f38da41ae6e1604cf9c034bebfecb20bb5b56b73d7c759b1319688549e079c9f3e329527e2eb4869c1f1de16612564f4cfe5271d3ff2d6815514ce4a20a6e810c8d839f0fc4cae286e3badaa64396b699e304b1c79d7475d23423edf2f42fc4b4d4d33cc7fb6f65b215c79f9744af", 0x78}, {&(0x7f0000001640)="b7d93f2b5f2d6963a7126c240a16c66d1d28034bcd663b83f0c48432b26efb0f3419db74b9538fa15f1b525cdfed32a0ee3a9e0b9b4a3652de06fb6480f917c9038ea57c6ca76870499603710ddb1874a3d84b2e707f272d23076691582c5d97d44702d1ce624a61f7bd04ec5422aa63426e4523d607af36322bf5322ac9d5b478c498b801ab441953224135789985ae6a54de", 0x93}], 0x8, &(0x7f0000001780)=[@mark={{0x14, 0x1, 0x24, 0x2c5}}], 0x18}, 0xc010)
r6 = socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x2, 0x200000000000001, 0x106)
syz_emit_ethernet(0x6a, &(0x7f00000007c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [], "ee00"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}}}}}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000001880)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x2c, 0x15, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000140)=[{&(0x7f0000000780)="89000000120081ae08060cdc030ec0007f03e3f71100000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc03bba2816fab52fc908120800030006010000bdad446b9bbc7a66e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e73538afa8af9233a514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

2.768659921s ago: executing program 4 (id=3390):
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000040), 0x4)
recvmsg(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a80258c6394f92024fc60030f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x20000001, 0x4)
shutdown(r2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x100000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
syz_emit_ethernet(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0)
socket(0x1, 0x3, 0x0)
r3 = epoll_create1(0x0)
epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

2.762337077s ago: executing program 1 (id=3391):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vcan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001800210200000000000000001d01000008000900", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00'], 0x24}}, 0x0)

2.673938431s ago: executing program 0 (id=3392):
r0 = socket$inet_sctp(0x2, 0x0, 0x84)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(r1, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="88010000100033010000000000000000e000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x188}}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
close(r2)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000380)={0x6, 0x200, 0x1, 0x401}, &(0x7f00000003c0)=0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x200, 0x0, @udp='udp:syz1\x00'}}}}, 0x34}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x7f81, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f00000000c0)="aa910c8034c3f1a684a62396df0e6b84c9ef7bf08838aa39fe0ee271f7a5db2933c9a0a486519474062938d23e21d44bad66471235b4424181ea438cebd80403d9fdafd1e64ba1eaa8e157f399c5df5e319cae4f508d053272707caed49173f10a8101d13ffecc0f3f7ed64cf8ea5fa1dc98384384d97d1902ff692530674c5893d569909fc8d4fd576bb623b941d2fcdfdd5b07d870bc721ec1fb040517abecbfb8e7e639e47a1f90b0c4112f93416d7fdeacef95b5f0465a4601790aa1f18b11df5ef7e5cb10c6895ea3a090fa6a2a807c007f21c335f20c14149ecb67f9516f3ae4dd0c36df3a0bd430ae09c590")

2.622804648s ago: executing program 2 (id=3393):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = accept4(r0, &(0x7f0000000a40)=@in={0x2, 0x0, @loopback}, &(0x7f0000000000)=0x80, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="b80000002100000228bd7000fddbdf25e90f1467060000070800000014000100fc00000000000000000000000000000814000100fe8000000000000000000000000000bb14000200fc01000000000000000000000000000114000200ff020000000000000000000000000001080010000004000014000100fe8000000000000000000000000000aa08000f00e30d00001400010000000000000000000000000000000001140011007465616d5f736c6176655f3100000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000000c0)=ANY=[@ANYBLOB="88000000080211000001080211000000505050505050"], 0x28)
syz_emit_ethernet(0x2e, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000d40)=@mgmt_frame=@beacon={{{}, {0x7fff}, @broadcast, @broadcast}, 0x0, @default, 0x8100, @void, @val, @void, @val={0x4, 0x6, {0x3, 0x4, 0xce, 0x3}}, @val={0x6, 0x2, 0x5e5c}, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7}, @val={0x76, 0x6, {0x10, 0xae, 0xc, 0x7}}, [{0xdd, 0xa6, "cdae51d2f7447223dc6d39227596a77a2629b5219d8277a81a303eff03970adb3166593cd26853936660f6d5bba58e93941079b2503b8cc87354dac7f4d5242f343d6578f81b07c2d3bf052cb16873e6679cb6199644514fa11494599bb0f3593a50adb0f3d8dbabb8938824c695deb3f796f1b43cdc42fe2963fd74bf8f1860f9e1558e6bf12428e60cf9edf1605e696013319be79fb6c03da12b6d0b645e7a973b47192b4b"}]}, 0xeb)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000700)={'veth1_macvtap\x00', 0x8000})
sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0)
unshare(0x20000400)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r3, &(0x7f0000003bc0)=[{{&(0x7f0000001000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@flowinfo={{0x14, 0x29, 0xb, 0xf5e}}, @flowinfo={{0x14, 0x29, 0xb, 0x20c6}}], 0x30}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x10, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000800)='GPL\x00', 0x5, 0x1000, &(0x7f0000001040)=""/4096, 0xc0f00, 0x8, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x5, 0xcd, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000c40)=[{0x0, 0x4, 0x1, 0x8}, {0x4, 0x4, 0xf}, {0x2, 0x3, 0x3}, {0x3, 0x2, 0x1, 0x4}, {0x1, 0x2, 0xc, 0x5}, {0x5, 0x3, 0x6, 0x1}, {0x5, 0x2, 0xd, 0x9}, {0x4, 0x3, 0x8, 0x8}], 0x10, 0x80000000}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x81, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xd0, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000540)=[@in={0x2, 0xfffa, @broadcast}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000800)={0x0, 0x1}, 0x8)
sendmmsg$inet6(r5, &(0x7f0000003e80)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="ff", 0x1}], 0x1}}], 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000001840)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)='~', 0x1}], 0x1}}], 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', r4, 0x2f, 0xff, 0x40, 0x9, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x80, 0x40, 0x0, 0x7}})
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
unshare(0x42000000)
r7 = socket$igmp6(0xa, 0x3, 0x2)
sendmsg$tipc(r7, &(0x7f00000026c0)={0x0, 0x0, 0x0}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0xfffffffffffffe31)
connect$inet(r6, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10)

2.586400114s ago: executing program 1 (id=3394):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000900000000000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
pipe(&(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
readv(r3, &(0x7f0000000540)=[{&(0x7f0000000440)=""/194, 0xfffffdef}], 0x11)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="000225bd7000fedbdf251e00000008000c0003000000d458061419ad1d606f10e46a655a56e08fcfb5675e959830968a71ee6a275f6716ed3ff857fce1628644b08759dc56d5d2f1e1f0d5991a40992f9bb351972f1d91c9429aacb240c5b36cff9157ca3bb9bf934dc18cc70c8603dde56929b0b80efe00a6766467012642ca8ed748efda3cd4d02435a7166d114b588143"], 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x2404c040)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0x5}}}, 0x24}}, 0x0)
write$binfmt_elf64(r4, &(0x7f0000000400)=ANY=[], 0xff8a)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r10)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00012bbd7000ffdbdf25510000000c009900050000001c00000005008a00010000000a000600ffffffffffff00000af78438d3c6d31712000600"], 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000)
write$cgroup_int(r10, &(0x7f0000000200), 0xf000)

2.384405724s ago: executing program 3 (id=3395):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000900000000000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
pipe(&(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
readv(r3, &(0x7f0000000540)=[{&(0x7f0000000440)=""/194, 0xfffffdef}], 0x11)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="000225bd7000fedbdf251e00000008000c0003000000d458061419ad1d606f10e46a655a56e08fcfb5675e959830968a71ee6a275f6716ed3ff857fce1628644b08759dc56d5d2f1e1f0d5991a40992f9bb351972f1d91c9429aacb240c5b36cff9157ca3bb9bf934dc18cc70c8603dde56929b0b80efe00a6766467012642ca8ed748efda3cd4d02435a7166d114b588143"], 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x2404c040)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0x5}}}, 0x24}}, 0x0)
write$binfmt_elf64(r4, &(0x7f0000000400)=ANY=[], 0xff8a)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r10)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00012bbd7000ffdbdf25510000000c009900050000001c00000005008a00010000000a000600ffffffffffff00000af78438d3c6d31712000600"], 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000)
write$cgroup_int(r10, &(0x7f0000000200), 0xf000)

2.336648186s ago: executing program 1 (id=3396):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r2 = socket$kcm(0x2, 0x0, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x0, 0x0, 0x0, 0x8}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xd, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$inet(r2, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r8}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000180)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000180), 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10)
close(r0)

2.205071733s ago: executing program 3 (id=3397):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x19, &(0x7f00000003c0)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB="0000850000000c000000b700000000000000bf91000000000000b71d95b17858550a7a00000085000000b7200000000000009500"/67], &(0x7f0000000180)='GPL\x00', 0x8, 0x28, &(0x7f00000001c0)=""/40, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r2 = epoll_create(0x689)
socket(0x11, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x10000005})
epoll_pwait(r2, &(0x7f0000000180)=[{}], 0x1, 0xfffffffa, 0x0, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000", 0x4d}], 0x1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket(0x10, 0x0, 0x0)
write(r4, &(0x7f00000000c0)="240000001a001f001007f4f9002304000a04f511080004000201000208", 0x1d)
ioctl$sock_inet_SIOCDARP(r3, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @broadcast}, {0x0, @random="9f444415c302"}, 0xffffff7d, {0x2, 0x0, @broadcast}})
write(r0, &(0x7f0000000300)="ec448506d4e9a160a056b43aaf3d9ea65a351ebef55dc622413dc7379c6a4b4b596037cf8df95ce5ac92f3800db2769addf31a3977cb0f43f41dada4c51a806359970b11f3207e22b4a7e618650300418ccad65569b38cc464d374a54ea7d830e2913eb2e03aa04121e5ac4e480069afef6e", 0x72)
r5 = socket(0x10, 0x2, 0x0)
write(r5, &(0x7f0000000800)="240000001e005f031420000000000000000000000100000000000800080008c013000000", 0x24)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)=""/116, 0x74}], 0x1}, 0x2)

1.845709224s ago: executing program 4 (id=3398):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_generic(r0, 0x0, 0x0)

1.776115278s ago: executing program 4 (id=3399):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x90000002})
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x1003}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x60}, 0x1, 0xba01}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}}, 0x14}, 0x1, 0x3000000}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6, 0x2, 0xdd0, 0x2}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x800)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0xac}}, 0x0)

1.723910732s ago: executing program 0 (id=3400):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000014c0), 0x0, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x39000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd71d}, [@printk={@lld}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000600)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[r1, r0, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x0, 0x4}, {0x5, 0x1, 0x6}], 0x10, 0xfca9}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00'}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
r4 = socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(r4, 0x0, 0x200048cc)
close(r4)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f00000002c0), 0x4)
r5 = socket$inet6(0xa, 0x3, 0x20)
sendmmsg$inet6(r5, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@rthdrdstopts={{0x20, 0x29, 0x2, {0x0, 0x0, '\x00', [@pad1, @padn]}}}], 0x20}}], 0x1, 0x0)
pselect6(0x40, &(0x7f0000000300)={0xb7, 0x6, 0x3, 0x8, 0xff, 0x8, 0x7, 0x1}, &(0x7f0000000640)={0x2, 0x7, 0x0, 0x0, 0x7, 0x3, 0x9}, &(0x7f0000000980)={0x8c, 0xec, 0xe, 0x42, 0x7, 0x401, 0x8, 0x4}, &(0x7f00000009c0)={0x77359400}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x184}}, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x200000)

1.609970249s ago: executing program 4 (id=3401):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000014c0), 0x0, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x39000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd71d}, [@printk={@lld}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000600)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[r1, r0, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x0, 0x4}, {0x5, 0x1, 0x6}], 0x10, 0xfca9}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00'}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
r4 = socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(r4, 0x0, 0x200048cc)
setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x24)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f00000002c0), 0x4)
r5 = socket$inet6(0xa, 0x3, 0x20)
sendmmsg$inet6(r5, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@rthdrdstopts={{0x20, 0x29, 0x2, {0x0, 0x0, '\x00', [@pad1, @padn]}}}], 0x20}}], 0x1, 0x0)
pselect6(0x40, &(0x7f0000000300)={0xb7, 0x6, 0x3, 0x8, 0xff, 0x8, 0x7, 0x1}, &(0x7f0000000640)={0x2, 0x7, 0x0, 0x0, 0x7, 0x3, 0x9}, &(0x7f0000000980)={0x8c, 0xec, 0xe, 0x42, 0x7, 0x401, 0x8, 0x4}, &(0x7f00000009c0)={0x77359400}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x184}}, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x200000)

1.37314031s ago: executing program 1 (id=3402):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x90000002})
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x64, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x1003}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x64}, 0x1, 0xba01}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}}, 0x14}, 0x1, 0x3000000}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6, 0x2, 0xdd0, 0x2}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x800)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0xac}}, 0x0)

1.262473042s ago: executing program 3 (id=3403):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000014c0), 0x0, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x39000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd71d}, [@printk={@lld}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000600)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[r1, r0, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x0, 0x4}, {0x5, 0x1, 0x6}], 0x10, 0xfca9}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00'}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
r4 = socket$kcm(0x2b, 0x0, 0x0)
sendmsg$inet(r4, 0x0, 0x200048cc)
setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x24)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f00000002c0), 0x4)
pselect6(0x40, &(0x7f0000000300)={0xb7, 0x6, 0x3, 0x8, 0xff, 0x8, 0x7, 0x1}, &(0x7f0000000640)={0x2, 0x7, 0x0, 0x0, 0x7, 0x3, 0x9}, &(0x7f0000000980)={0x8c, 0xec, 0xe, 0x42, 0x7, 0x401, 0x8, 0x4}, &(0x7f00000009c0)={0x77359400}, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x200000)

1.182107203s ago: executing program 1 (id=3404):
socket$inet6(0xa, 0x3, 0x0)
r0 = socket(0x0, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x184}}, 0x0)
socketpair(0xe09e125e4f71a7b6, 0xa, 0x2, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000200095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000001000)='sched_switch\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r4, 0xa4fbfd4840e03a43}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}}, 0x44000)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000950000000000000006ed8251d8290f642c1393316cd8952da8d457f92840adef4560ded5476abfe599704cebbefac3a1d9ae14ad3ccffbf5fece4ac790227b6fa247"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10", 0x2b}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x89, 0x0, &(0x7f0000000000)="e0b954f53a000000000000005bec5642cd7dc6754b9c56c4c3410fa6170ed20e3590ee5cb943778b363bc5ae6c6a4e05bad09a6015748fbaae79221e51cb9e5b5296f0a8a58e333218f259d99976c5019337e4f4fc30d39b7717bd83771dcf470baa52252d4b240a8208f59f1ed2c94c13ea9b509e720b12924bfc8d673679c5044a8b0b90f901a23a", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r7 = socket(0x15, 0x5, 0x0)
connect$l2tp6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r10)
sendmsg$NLBL_MGMT_C_LISTDEF(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00b4bc", @ANYRES16=r11, @ANYBLOB="010000000000000000000600000006000b0015000000"], 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.15905703s ago: executing program 2 (id=3405):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000600), 0x4)
ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x401)
socket$nl_generic(0x10, 0x3, 0x10)
syz_80211_inject_frame(0x0, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0xb}, {0x16, 0x1}]}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0xffffffffffffffff}}, @void}, 0x41)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = gettid()
sendmsg$netlink(r3, &(0x7f0000000080)={&(0x7f0000000040)=@proc, 0xc, &(0x7f00000008c0)=[{&(0x7f0000000200)={0x10}, 0x10}], 0x1, &(0x7f0000002100)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xee01}}}], 0x20}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r6, &(0x7f0000000380)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}, 0x48)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)

757.24768ms ago: executing program 0 (id=3406):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x29, 0x5, 0x0)
socket$inet6(0xa, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/ipc\x00')
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
socket$l2tp(0x2, 0x2, 0x73)
socket$inet6(0xa, 0x6, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1f02ffff0000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r1], 0x40}}, 0x0)

673.530001ms ago: executing program 4 (id=3407):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x50)
socket$inet_sctp(0x2, 0x0, 0x84)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000880)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x628, 0x3d0, 0xd0, 0xd0, 0x1a0, 0x3d0, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ipv6={@dev, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x302}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private0, @local}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish-generic)\x00'}, 0x58)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000000002d007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001980)=ANY=[@ANYBLOB="611228000000000061134c0000000000bf200000000000001503000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc5d4681d295c45a674f888a08034b7dd399703d6c4f6"], &(0x7f0000000100)='GPL\x00'}, 0x90)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x0, 0x800000003, 0x0)
r11 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009"], 0x7c}}, 0x0)
readv(r11, 0x0, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0}, 0x0)
r12 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_int(r12, 0x29, 0x31, &(0x7f0000000040)=0x10000, 0x4)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f0000000080)=0xb, 0x4)

607.776803ms ago: executing program 0 (id=3408):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000043df4a38000008000300", @ANYRES32=r6], 0x60}}, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf2564000000080001004d00000008000300a72f5a56da097e44cc35a0315faed8679393063537af92227deea90d04c17c7387e1b37f0ba571f2835334d47bce10", @ANYRES32=r6, @ANYBLOB="0c009900010000004b000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x44400)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', <r7=>0x0})
r8 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c)
sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c)
r9 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r9, 0x114, 0x271c, 0x0, &(0x7f00000000c0))
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000040)={'team0\x00', <r11=>0x0})
r12 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r11, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000009", @ANYRES32=r7, @ANYBLOB="d5f20c6f01a889"], 0x5c}, 0x1, 0xf000}, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x4)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_SERVICE(r13, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB], 0x34}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x1f00, 0x3ff, 0x24, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff)
r14 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r14, 0x0, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0)

531.319286ms ago: executing program 2 (id=3409):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14140000008000000000001400000000000080100100000a000040000000000000c7960763eb0f0000"], 0x38}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018210000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70a000014000000b70300000000000085000000ce000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095000000000000"], &(0x7f0000001540)='GPL\x00'}, 0x90)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6(0xa, 0x6, 0x0)
socket$inet6(0xa, 0x6, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
r5 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r5, 0x221, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8}]}, 0x20}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SIZE={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r7=>0x0})
bind$packet(r2, &(0x7f0000000100)={0x11, 0x4, r7}, 0x14)
r8 = socket$inet(0x2, 0x2, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', r7, 0x29, 0xbc, 0x8, 0x7, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x700, 0x6, 0xff9}})
sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59ecb", 0xd8}], 0x1}, 0x0)
setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)

297.994024ms ago: executing program 3 (id=3410):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r2 = socket$kcm(0x2, 0x0, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x0, 0x0, 0x0, 0x8}, 0x48)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xd, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$inet(r2, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r8}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000180)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000180), 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10)
close(r0)

210.525565ms ago: executing program 4 (id=3411):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x408d1}, 0x0)
recvmmsg(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)=""/32, 0x20}], 0x1}}], 0x1, 0x0, 0x0)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, r1, 0x8, &(0x7f0000000640)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x8}, 0x10, 0xb6d3, r5, 0x0, &(0x7f0000000740)=[r2, r6], 0x0, 0x10, 0x2}, 0x90)
syz_emit_ethernet(0x11f, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan0\x00', <r7=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4b}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x11c, 0x13, 0x20, 0x70bd2c, 0x25dfdbff, {0x1d, 0x4f, 0x6, 0x2, {0x4e27, 0x4e22, [0x9, 0x5, 0x3f, 0x8], [0x7, 0x0, 0xfffff017, 0x1], r7, [0x6, 0x4]}, 0x239}, [@INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "f1214a3462a05255e6bfb7c05ad3a7d22392ceb6de0b24977e49fabaa71d869bf2c5afd26683f7881e761ab9958de2a6411366cca844b012c076daa14215de9c59226ece14e6ffe02d14c6d1705c001faad323bb75a4ba2fb2f878eb43c37f2d49efd8a8005726842f3a55dadca7cf56d328fa734d5f8e6fe2711a87f1793bb081daf104f44adca2cad0aacc7407830c09f9e457d8d7a5f6"}, @INET_DIAG_REQ_BYTECODE={0x34, 0x1, "0846b420707a07018000000000ad118dbcd92e0fed74b4a608b1bfdadfbfff494d11cb5bdfd05bf9d8aa4dd6ff7f0000"}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8092}, 0x4000010)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000040)="a5", 0x1}], 0x1}, 0x11)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7c00000010000100"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012800c0001006d6163766c616e001800"], 0x7c}}, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)

164.243471ms ago: executing program 1 (id=3412):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = socket$kcm(0x2, 0x0, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x0, 0x0, 0x0, 0x8}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xd, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$inet(r1, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r7}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000180)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000180), 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10)
close(0xffffffffffffffff)

134.485128ms ago: executing program 0 (id=3413):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000014c0), 0x0, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x39000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd71d}, [@printk={@lld}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000600)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[r1, r0, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x0, 0x4}, {0x5, 0x1, 0x6}], 0x10, 0xfca9}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00'}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
r4 = socket$kcm(0x2b, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r4)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f00000002c0), 0x4)
r5 = socket$inet6(0xa, 0x3, 0x20)
sendmmsg$inet6(r5, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@rthdrdstopts={{0x20, 0x29, 0x2, {0x0, 0x0, '\x00', [@pad1, @padn]}}}], 0x20}}], 0x1, 0x0)
pselect6(0x40, &(0x7f0000000300)={0xb7, 0x6, 0x3, 0x8, 0xff, 0x8, 0x7, 0x1}, &(0x7f0000000640)={0x2, 0x7, 0x0, 0x0, 0x7, 0x3, 0x9}, &(0x7f0000000980)={0x8c, 0xec, 0xe, 0x42, 0x7, 0x401, 0x8, 0x4}, &(0x7f00000009c0)={0x77359400}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x184}}, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x200000)

0s ago: executing program 2 (id=3414):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10, 0x800)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000380)={0x1, 'veth1_to_batadv\x00', {}, 0x2})
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000003080)=ANY=[@ANYBLOB="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"], 0x29c}], 0x1}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000140001000000000000000000021f0000", @ANYRES32, @ANYBLOB="08000200ac"], 0x28}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r7 = socket(0x40000000015, 0x5, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, 0x10, 0x0}, 0x0)
getsockopt(r7, 0x200000000114, 0x2720, 0x0, &(0x7f0000000080)=0x39)

kernel console output (not intermixed with test programs):

285.658090][T11410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1787'.
[  285.893092][T11418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1790'.
[  286.002706][T11423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1792'.
[  286.186239][T11425] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  286.353214][T11415] vcan0 speed is unknown, defaulting to 1000
[  286.354438][T11427] bridge0: port 3(bond1) entered blocking state
[  286.400736][T11427] bridge0: port 3(bond1) entered disabled state
[  286.424981][T11427] bond1: entered allmulticast mode
[  286.443873][T11427] bridge1: entered allmulticast mode
[  286.457450][T11427] bond1: entered promiscuous mode
[  286.491998][T11427] bridge1: entered promiscuous mode
[  286.687791][T11436] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1796'.
[  286.719805][T11436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1796'.
[  286.775140][T11436] netlink: 'syz.2.1796': attribute type 3 has an invalid length.
[  286.777180][T11439] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1797'.
[  286.816961][T11436] netlink: 'syz.2.1796': attribute type 3 has an invalid length.
[  286.956065][T11446] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1799'.
[  286.967350][T11445] bridge0: entered promiscuous mode
[  286.972593][T11445] bridge0: entered allmulticast mode
[  287.063643][T11448] netlink: 'syz.4.1799': attribute type 3 has an invalid length.
[  287.089894][T11448] netlink: 'syz.4.1799': attribute type 3 has an invalid length.
[  287.521476][T11450] vcan0 speed is unknown, defaulting to 1000
[  288.053529][T11455] netlink: 'syz.0.1801': attribute type 4 has an invalid length.
[  288.111291][T11454] vcan0 speed is unknown, defaulting to 1000
[  288.180620][T11452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  288.880935][T11483] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  288.912552][T11483] netlink: 'syz.1.1811': attribute type 3 has an invalid length.
[  288.928948][T11483] netlink: 'syz.1.1811': attribute type 3 has an invalid length.
[  289.267001][T11487] team2: Mode changed to "activebackup"
[  289.282501][T11487] team2: Mode changed to "roundrobin"
[  296.941545][T11496] __nla_validate_parse: 5 callbacks suppressed
[  296.941564][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1816'.
[  296.951021][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  297.374281][T11511] netlink: 'syz.2.1820': attribute type 1 has an invalid length.
[  297.419755][T11515] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1820'.
[  297.456421][T11515] 8021q: adding VLAN 0 to HW filter on device bond2
[  297.496658][T11518] 8021q: adding VLAN 0 to HW filter on device batadv1
[  297.508666][T11518] bond2: (slave batadv1): Enslaving as a backup interface with an up link
[  297.566100][ T2486] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  297.705004][ T2968] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  297.916070][T11537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  297.930250][T11537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  297.961848][T11538] syz_tun (unregistering): left promiscuous mode
[  298.038851][T11543] Dead loop on virtual device ipvlan1, fix it urgently!
[  298.109688][T11545] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1830'.
[  298.204538][T11546] vcan0 speed is unknown, defaulting to 1000
[  298.256214][T11551] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526
[  298.401898][T11553] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1833'.
[  298.719146][T11559] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1836'.
[  299.151693][T11579] geneve2: entered promiscuous mode
[  299.159917][T11579] geneve2: entered allmulticast mode
[  299.427793][T11586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  299.490823][T11586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  299.513846][T11585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1845'.
[  299.578041][T11585] team_slave_1: entered promiscuous mode
[  299.594234][T11585] macvtap1: entered promiscuous mode
[  299.600904][T11585] team0: entered promiscuous mode
[  299.618450][T11585] macvtap1: entered allmulticast mode
[  299.631746][T11585] team0: entered allmulticast mode
[  299.641964][T11589] can: request_module (can-proto-0) failed.
[  299.648175][T11585] team_slave_1: entered allmulticast mode
[  299.650166][T11585] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  299.676243][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1845'.
[  299.694735][T11590] team0: left allmulticast mode
[  299.699848][T11590] team_slave_1: left allmulticast mode
[  299.705565][T11590] team0: left promiscuous mode
[  299.729936][T11590] team_slave_1: left promiscuous mode
[  299.738307][T11590] macvtap1: left promiscuous mode
[  299.754572][T11590] macvtap1: left allmulticast mode
[  299.779893][T11589] netlink: 'syz.0.1846': attribute type 12 has an invalid length.
[  299.868906][T11594] vcan0 speed is unknown, defaulting to 1000
[  300.039315][T11600] 
��: renamed from vlan0 (while UP)
[  300.273571][T11608] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1850'.
[  300.303855][T11608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1850'.
[  300.403857][T11612] netlink: 'syz.4.1850': attribute type 3 has an invalid length.
[  300.433542][T11612] netlink: 'syz.4.1850': attribute type 3 has an invalid length.
[  300.589879][T11618] netlink: 'syz.0.1854': attribute type 10 has an invalid length.
[  300.608471][T11618] team0: left promiscuous mode
[  300.614373][T11618] team_slave_1: left promiscuous mode
[  300.631037][T11618] batman_adv: batadv0: Adding interface: team0
[  300.640949][T11618] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.641213][T11622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  300.668099][T11618] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  300.724540][T11623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  300.812265][T11623] Dead loop on virtual device ipvlan1, fix it urgently!
[  300.968728][T11630] gretap0: entered promiscuous mode
[  301.044236][T11630] bond0: entered promiscuous mode
[  301.065507][T11630] bond_slave_0: entered promiscuous mode
[  301.088065][T11630] bond_slave_1: entered promiscuous mode
[  301.096414][T11630] batadv0: entered promiscuous mode
[  301.107428][T11630] bond0: left promiscuous mode
[  301.112235][T11630] bond_slave_0: left promiscuous mode
[  301.118160][T11630] bond_slave_1: left promiscuous mode
[  301.124173][T11630] batadv0: left promiscuous mode
[  301.129910][T11630] gretap0: left promiscuous mode
[  301.147043][T11626] vcan0 speed is unknown, defaulting to 1000
[  301.152193][T11641] tipc: Started in network mode
[  301.163028][T11641] tipc: Node identity ac1414aa, cluster identity 4711
[  301.172593][T11641] tipc: Enabled bearer <udp:syz2>, priority 10
[  301.203097][T11640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1860'.
[  301.911653][T11664] syzkaller0: entered promiscuous mode
[  301.926649][T11664] syzkaller0: entered allmulticast mode
[  302.056988][T11669] Bluetooth: hci3: invalid length 0, exp 2 for type 23
[  302.284836][ T5280] tipc: Node number set to 2886997162
[  303.849010][T11673] sit0: entered allmulticast mode
[  303.877286][T11675] sit0: entered promiscuous mode
[  303.956755][T11683] batman_adv: batadv0: Adding interface: wlan1
[  303.973689][T11683] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.032621][T11683] batman_adv: batadv0: Interface activated: wlan1
[  304.052728][T11698] batman_adv: batadv0: Adding interface: wlan1
[  304.060604][T11698] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.088521][T11698] batman_adv: batadv0: Interface activated: wlan1
[  304.108441][T11689] batman_adv: batadv0: Interface deactivated: wlan1
[  304.164885][T11691] batman_adv: batadv0: Removing interface: wlan1
[  304.266281][T11698] batman_adv: batadv0: Interface deactivated: wlan1
[  304.279465][T11705] xt_TCPMSS: Only works on TCP SYN packets
[  304.422656][T11698] batman_adv: batadv0: Removing interface: wlan1
[  305.475696][T11739] __nla_validate_parse: 1 callbacks suppressed
[  305.475716][T11739] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1887'.
[  305.515413][T11741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1886'.
[  305.542701][T11741] netlink: 'syz.0.1886': attribute type 25 has an invalid length.
[  305.902364][T11753] Bluetooth: hci3: invalid length 0, exp 2 for type 30
[  305.932759][T11756] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1893'.
[  305.944630][T11756] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1893'.
[  305.963072][T11756] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1893'.
[  306.124181][T11764] netlink: 'syz.1.1894': attribute type 9 has an invalid length.
[  306.263468][T11767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1894'.
[  306.520849][T11770] can: request_module (can-proto-4) failed.
[  307.027601][T11751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1891'.
[  307.596310][T11809] netlink: 211388 bytes leftover after parsing attributes in process `syz.4.1901'.
[  309.263314][   T55] Bluetooth: hci5: command 0x0405 tx timeout
[  309.396569][T11802] macsec0: entered promiscuous mode
[  309.401898][T11802] macsec0: entered allmulticast mode
[  309.424254][T11806] veth1_macvtap: entered allmulticast mode
[  309.430251][T11806] macsec0: left promiscuous mode
[  309.436760][T11806] macsec0: left allmulticast mode
[  309.441812][T11806] veth1_macvtap: left allmulticast mode
[  309.624841][T11828] netlink: 'syz.0.1904': attribute type 3 has an invalid length.
[  309.632617][T11828] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1904'.
[  309.846650][T11840] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1908'.
[  310.790033][T11858] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  310.935860][T11862] netlink: 'syz.1.1915': attribute type 7 has an invalid length.
[  310.974076][T11862] __nla_validate_parse: 1 callbacks suppressed
[  310.974096][T11862] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1915'.
[  311.029099][T11866] netlink: 1192 bytes leftover after parsing attributes in process `syz.0.1916'.
[  311.395666][T11878] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1918'.
[  311.516192][T11882] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  311.536687][T11882] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1920'.
[  311.581611][T11882] openvswitch: netlink: Multiple metadata blocks provided
[  311.596087][T11882] netlink: 'syz.2.1920': attribute type 10 has an invalid length.
[  311.757470][T11890] netlink: 'syz.2.1924': attribute type 1 has an invalid length.
[  311.783284][T11890] netlink: 9384 bytes leftover after parsing attributes in process `syz.2.1924'.
[  311.821660][T11896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1923'.
[  311.874454][T11896] geneve2: entered promiscuous mode
[  311.890756][T11896] geneve2: entered allmulticast mode
[  312.576142][T11915] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1928'.
[  312.612499][T11915] netlink: 'syz.0.1928': attribute type 1 has an invalid length.
[  312.643963][T11915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1928'.
[  312.671364][T11918] syzkaller1: entered promiscuous mode
[  312.684096][T11918] syzkaller1: entered allmulticast mode
[  312.758401][T11920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1931'.
[  312.835307][T11920] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  312.941587][T11927] smc: removing ib device syz1
[  312.941607][T11920] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1931'.
[  313.101440][T11932] netlink: 'syz.1.1934': attribute type 21 has an invalid length.
[  313.167423][T11932] dummy0: entered promiscuous mode
[  313.182302][T11932] dummy0: left promiscuous mode
[  313.211900][T11937] xt_hashlimit: invalid rate
[  313.346380][T11942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  313.373366][T11944] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  313.418647][T11942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  313.636163][T11947] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  313.667569][T11947] netlink: 'syz.3.1938': attribute type 3 has an invalid length.
[  313.683663][T11947] netlink: 'syz.3.1938': attribute type 3 has an invalid length.
[  313.875557][T11951] team_slave_0: entered promiscuous mode
[  313.881327][T11951] team_slave_1: entered promiscuous mode
[  313.894574][T11951] macvtap1: entered promiscuous mode
[  313.903705][T11951] team0: entered promiscuous mode
[  313.913752][T11951] macvtap1: entered allmulticast mode
[  313.921580][T11951] team0: entered allmulticast mode
[  313.927183][T11951] team_slave_0: entered allmulticast mode
[  313.933564][T11951] team_slave_1: entered allmulticast mode
[  313.942474][T11955] team0: left allmulticast mode
[  313.955761][T11955] team_slave_0: left allmulticast mode
[  313.970441][T11955] team_slave_1: left allmulticast mode
[  313.976408][T11955] team0: left promiscuous mode
[  313.981769][T11955] team_slave_0: left promiscuous mode
[  313.987346][T11955] team_slave_1: left promiscuous mode
[  313.996644][T11955] macvtap1: left promiscuous mode
[  314.018775][T11955] macvtap1: left allmulticast mode
[  314.263902][T11965] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  314.443326][ T2923] bridge_slave_1: left allmulticast mode
[  314.449614][ T2923] bridge_slave_1: left promiscuous mode
[  314.467454][ T2923] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.496640][ T2923] bridge_slave_0: left allmulticast mode
[  314.502425][ T2923] bridge_slave_0: left promiscuous mode
[  314.508677][ T2923] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.876830][ T2923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  314.888838][ T2923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  314.905856][ T2923] bond0 (unregistering): Released all slaves
[  314.924567][T11964] macvlan2: entered allmulticast mode
[  314.944521][T11961] bond0: entered promiscuous mode
[  314.949592][T11961] bond_slave_0: entered promiscuous mode
[  314.955532][T11961] bond_slave_1: entered promiscuous mode
[  314.961558][T11961] batadv0: entered promiscuous mode
[  315.329358][T11987] netlink: 'syz.1.1947': attribute type 10 has an invalid length.
[  315.830819][T11997] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  315.883517][T11997] netlink: 'syz.3.1950': attribute type 3 has an invalid length.
[  315.893942][T11997] netlink: 'syz.3.1950': attribute type 3 has an invalid length.
[  316.017540][T12006] __nla_validate_parse: 9 callbacks suppressed
[  316.017640][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1952'.
[  316.033909][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1952'.
[  317.707335][T12028] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2
[  317.911092][T12033] bridge_slave_0: default FDB implementation only supports local addresses
[  319.080891][T12054] x_tables: duplicate entry at hook 2
[  319.544240][T12067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  319.618050][T12070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  319.686605][T12070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  319.876109][T12078] netlink: 'syz.1.1973': attribute type 10 has an invalid length.
[  319.895995][T12078] batman_adv: batadv0: Adding interface: team0
[  319.911489][T12078] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  320.041890][T12082] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1975'.
[  320.079949][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  320.090861][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  320.107042][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  320.118945][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  320.128418][   T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  320.137142][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  320.380752][T12083] chnl_net:caif_netlink_parms(): no params data found
[  320.540495][T12083] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.546738][T12091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1976'.
[  320.547867][T12083] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.565424][T12083] bridge_slave_0: entered allmulticast mode
[  320.573522][T12083] bridge_slave_0: entered promiscuous mode
[  320.588656][T12083] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.613375][T12083] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.620632][T12083] bridge_slave_1: entered allmulticast mode
[  320.637297][T12083] bridge_slave_1: entered promiscuous mode
[  320.703415][T12083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  320.720177][T12083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  320.775390][T12083] team0: Port device team_slave_0 added
[  320.795629][T12083] team0: Port device team_slave_1 added
[  320.855527][T12083] batman_adv: batadv0: Adding interface: batadv_slave_0
[  320.862502][T12083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  320.907186][T12083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  320.921348][T12104] Bluetooth: MGMT ver 1.23
[  320.924034][T12083] batman_adv: batadv0: Adding interface: batadv_slave_1
[  320.933094][T12083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  320.969358][T12083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  321.036806][T12107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1979'.
[  321.072426][T12083] hsr_slave_0: entered promiscuous mode
[  321.119197][T12083] hsr_slave_1: entered promiscuous mode
[  321.143414][T12083] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  321.151111][T12083] Cannot create hsr debugfs directory
[  321.421840][T12124] No such timeout policy "syz0"
[  321.442659][T12083] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.469415][T12124] netlink: 'syz.3.1983': attribute type 10 has an invalid length.
[  321.517520][T12083] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.601870][T12083] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.681319][T12083] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.185868][T12083] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  322.206378][T12083] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  322.214679][T12157] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1994'.
[  322.228540][   T55] Bluetooth: hci4: command tx timeout
[  322.239952][T12083] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  322.256746][T12083] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  322.266916][T12153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1994'.
[  322.294053][T12153] netlink: 'syz.2.1994': attribute type 3 has an invalid length.
[  322.318198][T12153] netlink: 'syz.2.1994': attribute type 3 has an invalid length.
[  322.586442][T12083] 8021q: adding VLAN 0 to HW filter on device bond0
[  322.633794][T12083] 8021q: adding VLAN 0 to HW filter on device team0
[  322.689903][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.697300][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  322.749948][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.757184][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  323.046523][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2001'.
[  323.066876][T12175] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2001'.
[  323.082993][T12170] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1999'.
[  323.103558][T12175] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[  323.599957][ T4622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  323.610824][ T4622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  323.619877][ T4622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  323.628903][ T4622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  323.641288][ T4622] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  323.648723][ T4622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  323.652226][T12083] 8021q: adding VLAN 0 to HW filter on device batadv0
[  323.956189][T12192] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2004'.
[  324.016579][T12192] netlink: 'syz.1.2004': attribute type 10 has an invalid length.
[  324.052542][T12192] batadv0: mtu greater than device maximum
[  324.069404][T12192] bond0: (slave batadv0): Error -22 calling dev_set_mtu
[  324.293908][T12203] netlink: 'syz.2.2006': attribute type 1 has an invalid length.
[  324.313492][   T55] Bluetooth: hci4: command tx timeout
[  324.361064][T12184] chnl_net:caif_netlink_parms(): no params data found
[  324.565550][T12184] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.572714][T12184] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.581686][T12184] bridge_slave_0: entered allmulticast mode
[  324.591914][T12184] bridge_slave_0: entered promiscuous mode
[  324.681182][T12184] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.690687][T12184] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.699189][T12184] bridge_slave_1: entered allmulticast mode
[  324.707437][T12184] bridge_slave_1: entered promiscuous mode
[  324.755882][T12083] veth0_vlan: entered promiscuous mode
[  324.786425][T12184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  324.813204][T12184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  324.836246][T12083] veth1_vlan: entered promiscuous mode
[  324.931007][T12228] netlink: 5300 bytes leftover after parsing attributes in process `syz.1.2014'.
[  324.948994][T12228] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[  324.974965][T12184] team0: Port device team_slave_0 added
[  325.004447][T12184] team0: Port device team_slave_1 added
[  325.092220][T12184] batman_adv: batadv0: Adding interface: batadv_slave_0
[  325.100385][T12184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.129605][T12184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.148618][T12184] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.156363][T12184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.183771][T12184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.319617][T12184] hsr_slave_0: entered promiscuous mode
[  325.336243][T12184] hsr_slave_1: entered promiscuous mode
[  325.356101][T12184] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  325.372509][T12184] Cannot create hsr debugfs directory
[  325.508956][T12083] veth0_macvtap: entered promiscuous mode
[  325.551296][T12083] veth1_macvtap: entered promiscuous mode
[  325.660250][T12184] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  325.671152][T12184] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.698895][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.710375][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.720638][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.731480][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.741711][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.753299][   T55] Bluetooth: hci5: command tx timeout
[  325.772849][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.782734][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.795579][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.807322][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.818534][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.831450][T12083] batman_adv: batadv0: Interface activated: batadv_slave_0
[  325.840010][T12240] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2017'.
[  325.945315][T12184] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  325.970343][T12184] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.034805][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  326.061605][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.078021][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  326.113372][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.134324][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  326.154257][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.164367][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  326.177667][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.195778][T12083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  326.217767][T12083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.247193][T12083] batman_adv: batadv0: Interface activated: batadv_slave_1
[  326.265813][T12184] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  326.276111][T12184] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.316425][T12083] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  326.335488][T12083] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  326.354921][T12083] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  326.373268][T12083] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  326.383232][   T55] Bluetooth: hci4: command tx timeout
[  326.407280][T12184] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  326.422659][T12184] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.447258][T12260] netlink: 'syz.1.2023': attribute type 29 has an invalid length.
[  326.459448][T12262] netlink: 'syz.1.2023': attribute type 29 has an invalid length.
[  326.540190][T12264] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2024'.
[  326.661715][ T2486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.689773][ T2486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.759118][   T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.768903][   T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.910988][T12184] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  326.945721][T12280] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2029'.
[  326.961871][T12184] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  326.975642][T12184] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  327.001593][T12184] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  327.130321][T12287] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2030'.
[  327.182489][T12291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2030'.
[  327.203671][T12287] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  327.232308][T12184] 8021q: adding VLAN 0 to HW filter on device bond0
[  327.253724][T12287] netlink: 'syz.1.2030': attribute type 3 has an invalid length.
[  327.273592][T12287] netlink: 'syz.1.2030': attribute type 3 has an invalid length.
[  327.290898][T12184] 8021q: adding VLAN 0 to HW filter on device team0
[  327.310736][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.318224][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  327.418752][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.426023][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  327.806672][T12316] tipc: Started in network mode
[  327.820702][T12316] tipc: Node identity 1, cluster identity 4711
[  327.828463][   T55] Bluetooth: hci5: command tx timeout
[  327.843214][T12316] tipc: Node number set to 1
[  327.854816][T12316] tipc: Cannot configure node identity twice
[  327.972010][T12184] 8021q: adding VLAN 0 to HW filter on device batadv0
[  327.985764][T12325] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2042'.
[  328.014309][T12325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2042'.
[  328.048788][T12325] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  328.091081][T12325] netlink: 'syz.1.2042': attribute type 3 has an invalid length.
[  328.097889][T12184] veth0_vlan: entered promiscuous mode
[  328.109210][T12325] netlink: 'syz.1.2042': attribute type 3 has an invalid length.
[  328.134970][T12184] veth1_vlan: entered promiscuous mode
[  328.233619][T12184] veth0_macvtap: entered promiscuous mode
[  328.260057][T12334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  328.276337][T12184] veth1_macvtap: entered promiscuous mode
[  328.311467][T12339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  328.316377][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.365167][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.389318][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.402271][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.412563][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.424298][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.447598][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.459028][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.470778][   T55] Bluetooth: hci4: command tx timeout
[  328.493274][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.504144][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.514509][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  328.525757][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.538243][T12184] batman_adv: batadv0: Interface activated: batadv_slave_0
[  328.558340][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.571892][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.582038][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.594843][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.605465][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.626045][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.646568][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.679537][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.691221][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.723426][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.743209][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  328.765571][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  328.791621][T12184] batman_adv: batadv0: Interface activated: batadv_slave_1
[  328.890771][T12184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  328.910582][T12184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  328.925728][T12184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  328.939800][T12184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  329.141629][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  329.163332][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  329.194858][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  329.213151][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  329.285213][T12367] sctp: [Deprecated]: syz.3.2057 (pid 12367) Use of int in max_burst socket option.
[  329.285213][T12367] Use struct sctp_assoc_value instead
[  329.467114][T12379] netlink: 'syz.0.2063': attribute type 9 has an invalid length.
[  329.781102][T12390] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2068'.
[  329.796698][T12390] netlink: 'syz.0.2068': attribute type 3 has an invalid length.
[  329.805251][T12390] netlink: 'syz.0.2068': attribute type 3 has an invalid length.
[  329.904024][   T55] Bluetooth: hci5: command tx timeout
[  330.043730][T12396] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2071'.
[  330.174115][T12402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  330.191837][T12402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  330.376377][T12408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2076'.
[  330.740932][T12428] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2084'.
[  330.759618][T12428] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  330.773816][T12428] netlink: 'syz.3.2084': attribute type 3 has an invalid length.
[  330.955799][T12436] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  331.711234][T12482] __nla_validate_parse: 1 callbacks suppressed
[  331.711253][T12482] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2104'.
[  331.735790][T12482] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2104'.
[  331.900337][T12489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  331.934801][T12489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  331.984589][   T55] Bluetooth: hci5: command tx timeout
[  332.163647][T12502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2111'.
[  332.600009][T12524] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2117'.
[  332.620632][T12524] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  332.650359][T12524] validate_nla: 1 callbacks suppressed
[  332.650378][T12524] netlink: 'syz.1.2117': attribute type 3 has an invalid length.
[  332.676624][T12524] netlink: 'syz.1.2117': attribute type 3 has an invalid length.
[  332.731355][T12530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  332.746241][T12530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  333.292127][T12540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2122'.
[  333.453781][T12545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  333.490332][T12545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  333.594415][T12552] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2128'.
[  333.734174][T12557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  333.784290][T12561] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2129'.
[  333.819816][T12561] netlink: 'syz.2.2129': attribute type 3 has an invalid length.
[  333.843136][T12561] netlink: 'syz.2.2129': attribute type 3 has an invalid length.
[  333.852688][T12566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  334.911088][T12606] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2155'.
[  334.950548][T12606] netlink: 'syz.2.2155': attribute type 3 has an invalid length.
[  334.959448][T12606] netlink: 'syz.2.2155': attribute type 3 has an invalid length.
[  335.072591][T12612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  335.142657][T12603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  335.249220][T12603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  335.546709][T12634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  335.579294][T12634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  335.858808][T12649] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2160'.
[  335.883637][T12649] netlink: 'syz.2.2160': attribute type 3 has an invalid length.
[  335.916082][T12649] netlink: 'syz.2.2160': attribute type 3 has an invalid length.
[  336.078787][T12659] syzkaller1: entered promiscuous mode
[  336.084889][T12659] syzkaller1: entered allmulticast mode
[  336.481455][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2170'.
[  336.833776][T12695] netlink: 'syz.0.2177': attribute type 2 has an invalid length.
[  336.903916][T12698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  336.940984][T12698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  337.401942][T12720] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2186'.
[  337.671893][ T4622] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  337.688589][ T4622] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  337.697660][ T4622] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  337.707501][ T4622] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  337.715431][ T4622] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  337.726190][T12732] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2189'.
[  337.736567][ T4622] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  337.801608][T12732] netlink: 'syz.2.2189': attribute type 3 has an invalid length.
[  337.836064][T12732] netlink: 'syz.2.2189': attribute type 3 has an invalid length.
[  338.002685][T12729] chnl_net:caif_netlink_parms(): no params data found
[  338.112632][T12729] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.136793][T12729] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.146148][T12729] bridge_slave_0: entered allmulticast mode
[  338.154401][T12729] bridge_slave_0: entered promiscuous mode
[  338.176181][T12729] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.185676][T12750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  338.192625][T12729] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.198829][T12750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  338.208341][T12729] bridge_slave_1: entered allmulticast mode
[  338.232271][T12729] bridge_slave_1: entered promiscuous mode
[  338.341212][T12729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  338.371801][T12729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  338.449414][T12729] team0: Port device team_slave_0 added
[  338.486926][T12729] team0: Port device team_slave_1 added
[  338.545835][T12729] batman_adv: batadv0: Adding interface: batadv_slave_0
[  338.555132][T12729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.586476][T12729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  338.613421][T12729] batman_adv: batadv0: Adding interface: batadv_slave_1
[  338.620793][T12729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.656389][T12729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  338.710153][T12765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2198'.
[  338.744529][T12729] hsr_slave_0: entered promiscuous mode
[  338.756613][T12729] hsr_slave_1: entered promiscuous mode
[  338.764231][T12729] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  338.771949][T12729] Cannot create hsr debugfs directory
[  338.854475][T12767] syzkaller1: entered promiscuous mode
[  338.869230][T12767] syzkaller1: entered allmulticast mode
[  339.109114][T12771] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2201'.
[  339.135329][T12729] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.172260][T12771] netlink: 'syz.0.2201': attribute type 3 has an invalid length.
[  339.193357][T12771] netlink: 'syz.0.2201': attribute type 3 has an invalid length.
[  339.266522][T12729] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.358391][T12780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  339.396912][T12780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  339.436912][T12729] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.595385][T12729] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.827094][ T4622] Bluetooth: hci7: command tx timeout
[  340.059625][T12729] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  340.077478][T12729] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  340.104977][T12729] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  340.134671][T12729] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  340.267933][T12729] 8021q: adding VLAN 0 to HW filter on device bond0
[  340.295835][T12729] 8021q: adding VLAN 0 to HW filter on device team0
[  340.315467][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.322712][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  340.342395][ T2486] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.349573][ T2486] bridge0: port 2(bridge_slave_1) entered forwarding state
[  340.558584][T12729] 8021q: adding VLAN 0 to HW filter on device batadv0
[  340.828344][T12729] veth0_vlan: entered promiscuous mode
[  340.899594][T12729] veth1_vlan: entered promiscuous mode
[  340.904409][T12831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  340.926556][T12831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  341.045577][T12729] veth0_macvtap: entered promiscuous mode
[  341.115828][T12729] veth1_macvtap: entered promiscuous mode
[  341.246959][T12729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  341.279877][T12729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.290200][T12729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  341.300988][T12729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.312188][T12729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  341.324078][T12729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.334047][T12729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  341.346441][T12729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.356612][T12729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  341.367465][T12729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.378237][T12729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  341.389445][T12729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.399546][T12729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  341.410371][T12729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.423977][T12729] batman_adv: batadv0: Interface activated: batadv_slave_0
[  341.445833][T12729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.456592][T12729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.467600][T12729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.484115][T12729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.499465][T12729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.520873][T12729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.540168][T12729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.552945][T12729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.566614][T12729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.577566][T12729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.610796][T12729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.621361][T12729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.648137][T12729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  341.659062][T12729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.673932][T12729] batman_adv: batadv0: Interface activated: batadv_slave_1
[  341.687697][T12729] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  341.697783][T12729] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  341.708279][T12729] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  341.717190][T12729] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  341.903547][   T55] Bluetooth: hci7: command tx timeout
[  341.933271][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.957847][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  342.064927][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  342.073892][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  342.269777][T12860] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  342.381421][T12863] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2231'.
[  342.463649][T12863] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.527062][T12868] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2233'.
[  342.551840][T12868] netlink: 'syz.0.2233': attribute type 3 has an invalid length.
[  342.562410][T12868] netlink: 'syz.0.2233': attribute type 3 has an invalid length.
[  343.361852][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2244'.
[  343.983552][   T55] Bluetooth: hci7: command tx timeout
[  344.303361][   T55] Bluetooth: hci0: command tx timeout
[  344.317900][T12917] netlink: 472 bytes leftover after parsing attributes in process `syz.3.2256'.
[  344.327755][T12917] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2256'.
[  345.099578][T12863] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.640099][T12948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  345.718741][T12948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.065727][   T55] Bluetooth: hci7: command tx timeout
[  347.852748][T12863] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.016073][T12863] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.031992][T12979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2278'.
[  348.058557][T12979] bond1: entered promiscuous mode
[  348.067704][T12980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2278'.
[  348.089774][T12980] bond1 (unregistering): Released all slaves
[  348.177152][T12863] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.199260][T12863] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.221205][T12863] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.239998][T12863] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.575244][T12993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2283'.
[  348.664294][T12997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2285'.
[  349.062090][T13013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2292'.
[  349.637700][T13025] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2297'.
[  349.647569][T13025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2297'.
[  349.660261][T13025] netlink: 'syz.0.2297': attribute type 3 has an invalid length.
[  349.669492][T13025] netlink: 'syz.0.2297': attribute type 3 has an invalid length.
[  349.772022][T13029] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2299'.
[  349.788111][T13029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2299'.
[  349.807658][T13029] netlink: 'syz.0.2299': attribute type 3 has an invalid length.
[  349.816856][T13029] netlink: 'syz.0.2299': attribute type 3 has an invalid length.
[  352.015377][T13084] syzkaller0: entered promiscuous mode
[  352.021055][T13084] syzkaller0: entered allmulticast mode
[  352.030902][T13084] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  352.224487][T13086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  352.238129][T13086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  352.271669][ T4622] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  352.281874][ T4622] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  352.290919][ T4622] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  352.301302][ T4622] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  352.313755][ T4622] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  352.325998][ T4622] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  352.621192][T13098] raw_sendmsg: syz.3.2325 forgot to set AF_INET. Fix it!
[  352.684615][T13101] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2326'.
[  352.760457][T13101] netlink: 'syz.0.2326': attribute type 3 has an invalid length.
[  352.772622][T13101] netlink: 'syz.0.2326': attribute type 3 has an invalid length.
[  352.790694][T13087] chnl_net:caif_netlink_parms(): no params data found
[  352.939171][T13087] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.947644][T13087] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.955231][T13087] bridge_slave_0: entered allmulticast mode
[  352.962460][T13087] bridge_slave_0: entered promiscuous mode
[  352.980254][T13087] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.987907][T13087] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.996334][T13087] bridge_slave_1: entered allmulticast mode
[  353.004813][T13087] bridge_slave_1: entered promiscuous mode
[  353.054681][T13087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  353.068798][T13087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  353.114629][T13087] team0: Port device team_slave_0 added
[  353.131248][T13087] team0: Port device team_slave_1 added
[  353.175973][T13087] batman_adv: batadv0: Adding interface: batadv_slave_0
[  353.185471][T13087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  353.221828][T13087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  353.238151][T13087] batman_adv: batadv0: Adding interface: batadv_slave_1
[  353.245518][T13087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  353.280933][T13087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  353.399811][T13087] hsr_slave_0: entered promiscuous mode
[  353.415381][T13087] hsr_slave_1: entered promiscuous mode
[  353.421974][T13087] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  353.431879][T13087] Cannot create hsr debugfs directory
[  353.621275][T13087] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.799109][T13087] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode
[  353.827879][T13087] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.028320][T13087] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.132682][T13087] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.383783][ T4622] Bluetooth: hci8: command tx timeout
[  354.403104][T13087] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  354.433886][T13127] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.441455][T13127] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.474536][T13127] __nla_validate_parse: 1 callbacks suppressed
[  354.474555][T13127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2334'.
[  354.485048][T13087] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  354.519680][T13087] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  354.557549][T13087] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  354.611776][T13129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2335'.
[  354.805791][T13087] 8021q: adding VLAN 0 to HW filter on device bond0
[  354.847950][T13087] 8021q: adding VLAN 0 to HW filter on device team0
[  354.890050][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.897261][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  354.917478][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.924690][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  355.227665][T13087] 8021q: adding VLAN 0 to HW filter on device batadv0
[  355.263610][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888072f65400: rx timeout, send abort
[  355.272588][    C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888072f65400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  355.290483][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88802e0cf400: rx timeout, send abort
[  355.314664][T13087] veth0_vlan: entered promiscuous mode
[  355.331455][T13087] veth1_vlan: entered promiscuous mode
[  355.378698][T13087] veth0_macvtap: entered promiscuous mode
[  355.406215][T13087] veth1_macvtap: entered promiscuous mode
[  355.451977][T13087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  355.463066][T13087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.480754][T13087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  355.491720][T13087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.502283][T13087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  355.515111][T13087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.526489][T13087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  355.538193][T13087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.548316][T13087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  355.559213][T13087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.569125][T13087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  355.581192][T13087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.592030][T13087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  355.603161][T13087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.613675][T13087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  355.624944][T13087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.637824][T13087] batman_adv: batadv0: Interface activated: batadv_slave_0
[  355.651545][T13087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  355.662577][T13087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.673113][T13087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  355.713005][T13087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.724662][T13087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  355.735449][T13087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.746859][T13087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  355.768346][T13087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.789872][T13087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  355.798826][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88802e0cf400: abort rx timeout. Force session deactivation
[  355.811022][T13087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.811050][T13087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  355.811066][T13087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.811081][T13087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  355.811095][T13087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.811114][T13087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  355.811127][T13087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  355.821232][T13087] batman_adv: batadv0: Interface activated: batadv_slave_1
[  355.989245][T13087] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  356.022931][T13087] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  356.062119][T13087] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  356.082672][T13087] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  356.381539][ T2486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  356.411801][ T2486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  356.449169][   T55] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  356.459603][   T55] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  356.467711][ T5242] Bluetooth: hci8: command tx timeout
[  356.478915][   T55] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  356.488793][   T55] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  356.498896][   T55] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  356.506474][   T55] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  356.552449][ T2926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  356.593159][ T2926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  356.627271][T13169] syzkaller0: entered allmulticast mode
[  356.807285][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  357.438249][T13166] chnl_net:caif_netlink_parms(): no params data found
[  357.734510][T13205] sctp: [Deprecated]: syz.4.2356 (pid 13205) Use of int in max_burst socket option deprecated.
[  357.734510][T13205] Use struct sctp_assoc_value instead
[  357.910784][T13213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  357.942299][T13213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  358.087626][T13166] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.102663][T13166] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.113672][T13166] bridge_slave_0: entered allmulticast mode
[  358.132124][T13166] bridge_slave_0: entered promiscuous mode
[  358.286574][T13166] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.300231][T13166] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.309983][T13166] bridge_slave_1: entered allmulticast mode
[  358.320946][T13166] bridge_slave_1: entered promiscuous mode
[  358.404858][T13221] netlink: 'syz.0.2362': attribute type 10 has an invalid length.
[  358.427552][T13221] 8021q: adding VLAN 0 to HW filter on device team0
[  358.449736][T13221] bond0: (slave team0): Enslaving as an active interface with an up link
[  358.544561][   T55] Bluetooth: hci8: command tx timeout
[  358.550450][ T4622] Bluetooth: hci9: command tx timeout
[  358.741704][T13230] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2365'.
[  358.795452][T13231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2365'.
[  358.859179][T13232] netlink: 'syz.4.2365': attribute type 3 has an invalid length.
[  360.295953][T13223] netlink: 'syz.0.2362': attribute type 10 has an invalid length.
[  360.307198][T13223] bond0: (slave team0): Releasing backup interface
[  360.326723][T13223] bridge0: port 3(team0) entered blocking state
[  360.339559][T13223] bridge0: port 3(team0) entered disabled state
[  360.346461][T13223] team0: entered allmulticast mode
[  360.351664][T13223] team_slave_0: entered allmulticast mode
[  360.365016][T13223] team_slave_1: entered allmulticast mode
[  360.373553][T13223] team0: entered promiscuous mode
[  360.378731][T13223] team_slave_0: entered promiscuous mode
[  360.385450][T13223] team_slave_1: entered promiscuous mode
[  360.467473][T13166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  360.485798][T13232] netlink: 'syz.4.2365': attribute type 3 has an invalid length.
[  360.535819][T13166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  360.624110][ T4622] Bluetooth: hci9: command tx timeout
[  360.624120][   T55] Bluetooth: hci8: command tx timeout
[  360.680246][T13241] vlan2: entered promiscuous mode
[  360.782338][T13166] team0: Port device team_slave_0 added
[  360.793047][T13250] netlink: 'syz.4.2371': attribute type 10 has an invalid length.
[  360.827428][T13166] team0: Port device team_slave_1 added
[  360.928129][T13166] batman_adv: batadv0: Adding interface: batadv_slave_0
[  360.953555][T13166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.002980][T13166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  361.020030][T13257] hsr_slave_0: left promiscuous mode
[  361.020374][T13254] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2372'.
[  361.035931][T13257] hsr_slave_1: left promiscuous mode
[  361.105898][T13166] batman_adv: batadv0: Adding interface: batadv_slave_1
[  361.126357][T13166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.171988][T13166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  361.210477][T13263] netlink: 'syz.2.2375': attribute type 4 has an invalid length.
[  361.254107][T13263] netlink: 126052 bytes leftover after parsing attributes in process `syz.2.2375'.
[  361.434137][T13254] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.574633][T13274] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2379'.
[  361.607942][T13254] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.649331][T13279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2379'.
[  361.678569][T13281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  361.693830][T13281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  361.711211][T13274] netlink: 'syz.2.2379': attribute type 3 has an invalid length.
[  361.748666][T13254] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.796508][T13166] hsr_slave_0: entered promiscuous mode
[  361.822389][T13166] hsr_slave_1: entered promiscuous mode
[  361.833541][T13166] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  361.841307][T13166] Cannot create hsr debugfs directory
[  361.849992][T13274] netlink: 'syz.2.2379': attribute type 3 has an invalid length.
[  361.874034][T13254] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode
[  361.961732][T13254] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.101762][T13288] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2383'.
[  362.224505][T13254] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  362.256843][T13254] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  362.296685][T13254] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  362.314322][T13254] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  362.443255][T13293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  362.457258][T13293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  362.475609][T13166] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  362.504551][T13166] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.559651][T13166] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  362.570527][T13166] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.622210][T13166] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  362.634312][T13166] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.703275][ T4622] Bluetooth: hci9: command tx timeout
[  362.728452][T13166] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  362.738576][T13166] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.001581][T13166] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  363.022043][T13166] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  363.037542][T13166] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  363.051234][T13166] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  363.101002][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2389'.
[  363.134776][T13307] netlink: 'syz.2.2389': attribute type 2 has an invalid length.
[  363.199649][T13166] 8021q: adding VLAN 0 to HW filter on device bond0
[  363.234706][T13166] 8021q: adding VLAN 0 to HW filter on device team0
[  363.261024][ T2486] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.268216][ T2486] bridge0: port 1(bridge_slave_0) entered forwarding state
[  363.289741][ T2486] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.296928][ T2486] bridge0: port 2(bridge_slave_1) entered forwarding state
[  363.500559][T13314] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2391'.
[  363.529529][T13314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2391'.
[  363.559732][T13314] netlink: 'syz.2.2391': attribute type 3 has an invalid length.
[  363.580980][T13314] netlink: 'syz.2.2391': attribute type 3 has an invalid length.
[  363.607310][T13319] netlink: 'syz.0.2392': attribute type 2 has an invalid length.
[  363.645981][T13166] 8021q: adding VLAN 0 to HW filter on device batadv0
[  363.749124][T13166] veth0_vlan: entered promiscuous mode
[  363.786632][T13166] veth1_vlan: entered promiscuous mode
[  363.866376][T13166] veth0_macvtap: entered promiscuous mode
[  363.890480][T13166] veth1_macvtap: entered promiscuous mode
[  363.906097][T13325] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2395'.
[  363.941081][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  363.963787][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  363.985155][T13329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2395'.
[  364.002927][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.023700][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.048938][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.060489][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.080369][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.108872][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.119764][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.132292][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.142522][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.156017][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.166012][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.178168][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.188598][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.203907][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.214591][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.225522][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.237656][T13166] batman_adv: batadv0: Interface activated: batadv_slave_0
[  364.317530][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.373549][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.406449][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.463928][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.479978][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.517876][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.558602][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.579389][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.604616][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.636177][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.662991][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.673997][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.684682][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.697446][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.713239][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.724417][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.738955][T13166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.749640][T13166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.762412][T13166] batman_adv: batadv0: Interface activated: batadv_slave_1
[  364.785979][ T4622] Bluetooth: hci9: command tx timeout
[  365.016710][T13166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  365.041581][T13166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  365.061633][T13166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  365.081950][T13166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  365.088575][T13359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  365.109277][T13359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  365.378774][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.399984][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.581240][   T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.599074][   T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.941815][T13386] __nla_validate_parse: 2 callbacks suppressed
[  366.941836][T13386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2412'.
[  367.686018][T13413] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2420'.
[  367.709771][T13413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2420'.
[  367.730713][T13413] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  368.011854][T13428] sit0: entered allmulticast mode
[  368.053397][T13430] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2424'.
[  368.075745][T13426] sit0: entered promiscuous mode
[  368.501213][T13440] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2429'.
[  368.531656][T13440] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2429'.
[  368.564836][T13440] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2429'.
[  368.662629][T13447] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2431'.
[  368.688863][T13447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2431'.
[  368.756560][T13447] netlink: 'syz.4.2431': attribute type 3 has an invalid length.
[  368.850997][T13447] netlink: 'syz.4.2431': attribute type 3 has an invalid length.
[  368.865484][T13455] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2433'.
[  368.957920][T13455] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  369.165508][T13468] netlink: 'syz.1.2435': attribute type 3 has an invalid length.
[  370.172687][T13495] IPv6: addrconf: prefix option has invalid lifetime
[  371.162659][T13468] netlink: 'syz.1.2435': attribute type 3 has an invalid length.
[  371.192477][T13493] netlink: 'syz.2.2442': attribute type 11 has an invalid length.
[  371.378874][T13503] netlink: 'syz.4.2443': attribute type 3 has an invalid length.
[  371.393605][T13503] netlink: 'syz.4.2443': attribute type 3 has an invalid length.
[  371.442415][T13507] macsec0: entered promiscuous mode
[  371.484169][T13508] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2
[  371.484748][T13507] macsec0: entered allmulticast mode
[  371.524909][T13507] veth1_macvtap: entered allmulticast mode
[  371.533258][T13507] macsec0: left promiscuous mode
[  371.538476][T13507] macsec0: left allmulticast mode
[  371.558158][T13507] veth1_macvtap: left allmulticast mode
[  371.603236][T13511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  371.651650][T13511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  373.604670][T13553] __nla_validate_parse: 7 callbacks suppressed
[  373.604688][T13553] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2458'.
[  373.613441][T13561] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2459'.
[  373.680761][T13564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2459'.
[  373.745791][T13560] atomic_op ffff888056a80998 conn xmit_atomic 0000000000000000
[  373.923988][T13560] smc: net device lo applied user defined pnetid SYZ2
[  374.073155][T13572] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2462'.
[  374.280246][T13577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2464'.
[  374.591556][T13590] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2466'.
[  374.622314][T13590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2466'.
[  374.684055][T13585] netlink: 'syz.4.2466': attribute type 3 has an invalid length.
[  374.691846][T13585] netlink: 'syz.4.2466': attribute type 3 has an invalid length.
[  374.743526][T13592] ax25_connect(): syz.1.2468 uses autobind, please contact jreuter@yaina.de
[  374.753526][T13589] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2467'.
[  374.790746][T13589] sit0: entered allmulticast mode
[  374.862211][T13589] sit0: entered promiscuous mode
[  375.165013][T13607] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2472'.
[  375.209641][T13607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2472'.
[  375.837525][T13629] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  375.844891][T13629] IPv6: NLM_F_CREATE should be set when creating new route
[  375.852164][T13629] IPv6: NLM_F_CREATE should be set when creating new route
[  375.877305][T13632] netlink: 'syz.1.2480': attribute type 3 has an invalid length.
[  375.915681][T13632] netlink: 'syz.1.2480': attribute type 3 has an invalid length.
[  376.725098][T13666] netlink: 'syz.3.2491': attribute type 6 has an invalid length.
[  376.865865][T13665] syzkaller0: mtu less than device minimum
[  376.904755][T13675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  376.968168][T13665] syzkaller0: entered allmulticast mode
[  376.968431][T13675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  377.689675][T13715] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  377.837971][T13719] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  378.228452][T13740] netlink: 'syz.1.2517': attribute type 21 has an invalid length.
[  378.530139][T13750] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  378.583717][T13750] netlink: 'syz.0.2520': attribute type 3 has an invalid length.
[  378.594923][T13740] dummy0: entered promiscuous mode
[  378.643453][T13740] dummy0: left promiscuous mode
[  378.681489][T13750] netlink: 'syz.0.2520': attribute type 3 has an invalid length.
[  378.789595][T13760] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  379.082633][T13775] __nla_validate_parse: 13 callbacks suppressed
[  379.082652][T13775] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2528'.
[  379.130487][T13775] netlink: 'syz.4.2528': attribute type 3 has an invalid length.
[  379.138588][T13775] netlink: 'syz.4.2528': attribute type 3 has an invalid length.
[  379.167246][T13765] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2526'.
[  379.212247][T13765] sit0: left promiscuous mode
[  379.397754][T13771] sit0: entered promiscuous mode
[  379.918254][T13799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  379.941991][T13799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  380.094044][T13811] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2541'.
[  380.177235][T13811] netlink: 'syz.4.2541': attribute type 3 has an invalid length.
[  380.250141][T13811] netlink: 'syz.4.2541': attribute type 3 has an invalid length.
[  380.500141][T13826] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2545'.
[  380.523621][T13826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2545'.
[  381.124685][T13858] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2556'.
[  381.496863][T13881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2565'.
[  381.504701][T13883] tipc: Enabling <ib:lo> not permitted
[  381.511415][T13883] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  381.530445][T13885] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.2564'.
[  381.575684][T13885] netlink: 'syz.3.2564': attribute type 10 has an invalid length.
[  381.940084][T13904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  381.953717][T13904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  382.052057][T13909] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check.
[  382.259146][T13917] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2579'.
[  382.269502][T13917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2579'.
[  382.285977][T13917] netlink: 'syz.2.2579': attribute type 3 has an invalid length.
[  382.695016][T13900] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  382.860315][T13948] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  382.902244][T13948] netlink: 'syz.0.2592': attribute type 3 has an invalid length.
[  383.211331][T13955] xt_NFQUEUE: number of total queues is 0
[  383.900588][T13991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  383.936649][T13991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  384.334586][T14010] netlink: 'syz.3.2616': attribute type 9 has an invalid length.
[  384.888896][T14036] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  385.013098][T14041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  385.082316][T14041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  385.145450][T14047] __nla_validate_parse: 10 callbacks suppressed
[  385.145469][T14047] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2631'.
[  385.204372][T14047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2631'.
[  385.279459][T14047] netlink: 'syz.2.2631': attribute type 3 has an invalid length.
[  385.306939][T14050] dvmrp1: tun_chr_ioctl cmd 1074025677
[  385.327183][T14050] dvmrp1: linktype set to 805
[  385.332400][T14047] netlink: 'syz.2.2631': attribute type 3 has an invalid length.
[  386.150793][T14091] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2645'.
[  386.174332][T14091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2645'.
[  386.214529][T14093] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2646'.
[  386.331501][T14098] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2648'.
[  386.362111][T14098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2648'.
[  387.058703][T14136] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2663'.
[  387.068982][T14136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2663'.
[  387.116510][T14136] netlink: 'syz.2.2663': attribute type 3 has an invalid length.
[  387.133139][T14136] netlink: 'syz.2.2663': attribute type 3 has an invalid length.
[  387.231907][T14142] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2664'.
[  387.261512][T14142] netlink: 'syz.4.2664': attribute type 3 has an invalid length.
[  387.288723][T14142] netlink: 'syz.4.2664': attribute type 3 has an invalid length.
[  387.385830][T14149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  387.444152][T14149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  387.687658][T14165] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  388.060056][T14182] netlink: 'syz.1.2680': attribute type 3 has an invalid length.
[  388.103292][T14182] netlink: 'syz.1.2680': attribute type 3 has an invalid length.
[  388.734685][T14216] syzkaller1: entered promiscuous mode
[  388.740298][T14216] syzkaller1: entered allmulticast mode
[  388.773793][T14219] netlink: 'syz.0.2695': attribute type 3 has an invalid length.
[  388.835776][T14219] netlink: 'syz.0.2695': attribute type 3 has an invalid length.
[  390.244926][T14292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  390.266701][T14292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  390.808951][T14315] __nla_validate_parse: 9 callbacks suppressed
[  390.808969][T14315] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2731'.
[  390.853086][T14315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2731'.
[  390.902751][T14315] netlink: 'syz.2.2731': attribute type 3 has an invalid length.
[  390.943398][T14315] netlink: 'syz.2.2731': attribute type 3 has an invalid length.
[  390.985780][T14322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2734'.
[  391.013554][T14322] bond0: option ad_select: unable to set because the bond device is up
[  391.015310][   T53] bond0: (slave bond_slave_0): interface is now down
[  391.050237][   T53] bond0: (slave bond_slave_1): interface is now down
[  391.088460][   T53] bond0: now running without any active interface!
[  391.356523][T14334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2740'.
[  391.620207][T14341] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2743'.
[  391.657058][T14341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2743'.
[  392.318365][T14373] netlink: 'syz.4.2756': attribute type 4 has an invalid length.
[  392.354474][T14373] netlink: 'syz.4.2756': attribute type 4 has an invalid length.
[  392.808676][T14392] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2761'.
[  392.832182][T14392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2761'.
[  392.851251][T14392] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  392.884577][T14392] netlink: 'syz.0.2761': attribute type 3 has an invalid length.
[  392.903560][T14392] netlink: 'syz.0.2761': attribute type 3 has an invalid length.
[  393.136286][T14404] sctp: [Deprecated]: syz.0.2767 (pid 14404) Use of int in max_burst socket option.
[  393.136286][T14404] Use struct sctp_assoc_value instead
[  393.886032][T14437] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2782'.
[  393.915544][T14437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2782'.
[  394.785849][T14442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  396.195144][T14523] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2813'.
[  396.228006][T14523] netlink: 'syz.3.2813': attribute type 2 has an invalid length.
[  396.253556][T14523] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2813'.
[  396.364694][T14526] tipc: Started in network mode
[  396.371489][T14526] tipc: Node identity ffffffff, cluster identity 4711
[  396.378976][T14526] tipc: Node number set to 4294967295
[  396.415394][T14527] hsr_slave_0: left promiscuous mode
[  396.462316][T14527] hsr_slave_1: left promiscuous mode
[  396.918045][T14544] syzkaller1: entered promiscuous mode
[  396.934515][T14544] syzkaller1: entered allmulticast mode
[  396.975964][T14514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  397.694925][T14559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  397.769526][T14559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  398.588341][T14598] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2840'.
[  398.648013][T14596] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2840'.
[  398.949425][T14613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2844'.
[  399.250439][T14627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2850'.
[  399.273414][T14627] bM1�Nu����30�: renamed from lo
[  399.293589][T14627] bM1�Nu����30�: entered allmulticast mode
[  399.444793][T14632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2851'.
[  399.475796][T14632] bond2: entered promiscuous mode
[  399.496810][T14632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2851'.
[  399.525861][T14632] bond2 (unregistering): Released all slaves
[  399.769431][T14638] IPVS: Scheduler module ip_vs_sip not found
[  399.914693][T14644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  399.944757][T14644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  399.969937][T14646] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2856'.
[  400.286223][T14658] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2859'.
[  400.341145][T14655] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(158478793707920) <= P.seqno(0) <= S.SWH(158478793707994)) and (P.ackno exists or LAWL(163330142041162) <= P.ackno(163330142041164) <= S.AWH(163330142041164), sending SYNC...
[  400.406372][T14663] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.414099][T14663] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.469824][T14666] hsr_slave_0: left promiscuous mode
[  400.493997][T14666] hsr_slave_1: left promiscuous mode
[  401.159647][T14669] dccp_close: ABORT with 36 bytes unread
[  401.472660][T14707] __nla_validate_parse: 2 callbacks suppressed
[  401.472680][T14707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2871'.
[  401.510504][T14707] netlink: 'syz.2.2871': attribute type 2 has an invalid length.
[  401.874735][T14715] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  402.090630][T14713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2873'.
[  403.102917][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2877'.
[  403.466153][T14748] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2879'.
[  405.124355][T14752] veth0_vlan: entered allmulticast mode
[  405.414888][T14768] netlink: 'syz.2.2884': attribute type 10 has an invalid length.
[  406.489041][T14783] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2890'.
[  406.561718][T14790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2891'.
[  406.854786][T14803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2896'.
[  407.003157][T14810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2898'.
[  407.085940][T14812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  407.151171][T14812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  407.395423][T14822] wg0: entered allmulticast mode
[  407.465028][T14822] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  407.494184][T14822] veth0_vlan: entered allmulticast mode
[  407.722271][T14834] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2905'.
[  407.853652][T14839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2908'.
[  408.511223][T14868] netlink: 'syz.3.2915': attribute type 21 has an invalid length.
[  408.558961][T14868] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2915'.
[  408.763402][T14881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2920'.
[  408.972423][T14892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2921'.
[  409.052065][T14894] bond1: entered promiscuous mode
[  409.173145][T14894] lo: entered promiscuous mode
[  409.176312][T14892] xt_NFQUEUE: number of total queues is 0
[  409.208093][T14894] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  409.255805][T14894] bond1: (slave lo): Enslaving as an active interface with an up link
[  409.275074][T14886] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2921'.
[  409.677161][T14928] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  409.797731][T14932] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.805523][T14932] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.639463][T14952] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  410.997335][T14961] netlink: 'syz.2.2945': attribute type 21 has an invalid length.
[  411.805538][T15000] netlink: 'syz.2.2956': attribute type 3 has an invalid length.
[  411.828260][T15001] netlink: 'syz.3.2954': attribute type 21 has an invalid length.
[  411.841709][T15000] __nla_validate_parse: 11 callbacks suppressed
[  411.841727][T15000] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2956'.
[  411.872311][T15001] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2954'.
[  412.157061][T15014] bond1: entered promiscuous mode
[  412.198569][T15014] lo: entered promiscuous mode
[  412.237009][T15014] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  412.266656][T15014] bond1: (slave lo): Enslaving as an active interface with an up link
[  412.397931][T15023] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2964'.
[  412.404992][T15024] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2962'.
[  412.438446][T15024] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2962'.
[  412.758183][   T55] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  412.773645][   T55] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  412.782725][   T55] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  412.797469][   T55] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  412.806183][   T55] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  412.820908][   T55] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  412.900494][T15035] netlink: 'syz.1.2967': attribute type 1 has an invalid length.
[  412.913584][T15035] netlink: 616 bytes leftover after parsing attributes in process `syz.1.2967'.
[  412.937687][T15035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2967'.
[  413.149507][T15038] xt_ipcomp: unknown flags 12
[  413.153436][T15031] chnl_net:caif_netlink_parms(): no params data found
[  413.307890][T15031] bridge0: port 1(bridge_slave_0) entered blocking state
[  413.315895][T15031] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.323566][T15031] bridge_slave_0: entered allmulticast mode
[  413.332490][T15031] bridge_slave_0: entered promiscuous mode
[  413.342257][T15031] bridge0: port 2(bridge_slave_1) entered blocking state
[  413.350380][T15031] bridge0: port 2(bridge_slave_1) entered disabled state
[  413.358164][T15031] bridge_slave_1: entered allmulticast mode
[  413.362056][T15047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  413.365701][T15031] bridge_slave_1: entered promiscuous mode
[  413.417852][T15047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  413.456021][T15031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  413.486451][T15051] netlink: 'syz.3.2969': attribute type 21 has an invalid length.
[  413.502876][T15051] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2969'.
[  413.525879][T15031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  413.612474][T15055] netlink: 'syz.0.2971': attribute type 1 has an invalid length.
[  413.642528][T15055] netlink: 616 bytes leftover after parsing attributes in process `syz.0.2971'.
[  413.727896][T15031] team0: Port device team_slave_0 added
[  413.734873][T15059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2971'.
[  413.777986][T15031] team0: Port device team_slave_1 added
[  413.859338][T15031] batman_adv: batadv0: Adding interface: batadv_slave_0
[  413.866539][T15031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  413.893165][T15031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  413.907668][T15031] batman_adv: batadv0: Adding interface: batadv_slave_1
[  413.915402][T15031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  413.943726][T15031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  414.020159][T15031] hsr_slave_0: entered promiscuous mode
[  414.029429][T15031] hsr_slave_1: entered promiscuous mode
[  414.161925][T15031] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.213673][T15031] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.269563][T15031] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.318727][T15031] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.456054][T15031] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  414.479170][T15031] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  414.491319][T15031] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  414.538427][T15031] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  414.650364][T15067] netlink: 'syz.3.2974': attribute type 10 has an invalid length.
[  414.864174][ T4622] Bluetooth: hci10: command tx timeout
[  414.977012][T15078] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  415.336090][T15031] 8021q: adding VLAN 0 to HW filter on device bond0
[  415.430639][T15031] 8021q: adding VLAN 0 to HW filter on device team0
[  415.556771][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.563980][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state
[  415.637298][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.644574][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  416.125747][T15031] 8021q: adding VLAN 0 to HW filter on device batadv0
[  416.811937][T15031] veth0_vlan: entered promiscuous mode
[  416.840771][T15031] veth1_vlan: entered promiscuous mode
[  416.934237][T15031] veth0_macvtap: entered promiscuous mode
[  416.943480][ T4622] Bluetooth: hci10: command tx timeout
[  416.952622][T15031] veth1_macvtap: entered promiscuous mode
[  417.046872][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.073004][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.083853][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.099029][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.117099][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.129092][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.139571][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.150271][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.161254][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.178554][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.205393][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.247728][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.258267][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.271464][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.282367][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.294327][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.306374][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.317823][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.329280][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.341358][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.356168][T15031] batman_adv: batadv0: Interface activated: batadv_slave_0
[  417.411200][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.453199][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.482163][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.504106][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.522383][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.544505][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.566224][T15140] netlink: 'syz.0.2992': attribute type 1 has an invalid length.
[  417.574562][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.602885][T15140] __nla_validate_parse: 7 callbacks suppressed
[  417.602902][T15140] netlink: 616 bytes leftover after parsing attributes in process `syz.0.2992'.
[  417.616870][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.654512][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.675855][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.696545][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.713528][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.724052][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.735839][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.746868][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.757742][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.770365][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.781449][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.791647][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.803108][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.815942][T15031] batman_adv: batadv0: Interface activated: batadv_slave_1
[  417.867053][T15148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2992'.
[  417.897059][T15141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  417.932478][T15031] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  417.973759][T15031] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  417.995288][T15031] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  418.013200][T15031] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  418.379921][ T2926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.404932][ T2926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.428885][T15165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3000'.
[  418.474838][ T2926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.497281][ T2926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  419.023911][ T4622] Bluetooth: hci10: command tx timeout
[  419.051215][T15192] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3007'.
[  419.086014][T15192] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3007'.
[  419.149564][T15199] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3010'.
[  419.173049][T15199] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3010'.
[  419.219780][T15201] netlink: 'syz.2.3011': attribute type 1 has an invalid length.
[  419.229425][T15201] netlink: 616 bytes leftover after parsing attributes in process `syz.2.3011'.
[  419.247641][T15201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3011'.
[  419.963112][T15217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  421.105106][ T4622] Bluetooth: hci10: command tx timeout
[  421.267924][T15257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  421.464177][T15274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  421.673208][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3036'.
[  421.796662][T15291] netlink: 'syz.4.3038': attribute type 21 has an invalid length.
[  422.278557][T15314] netlink: 'syz.3.3042': attribute type 21 has an invalid length.
[  423.376833][T15354] __nla_validate_parse: 2 callbacks suppressed
[  423.376852][T15354] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3052'.
[  423.438418][T15359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3052'.
[  423.464106][T15343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  423.483629][T15354] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  423.517537][T15354] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3052'.
[  423.927882][T15370] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3057'.
[  423.938401][T15370] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3057'.
[  424.562389][T15395] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3064'.
[  424.603265][T15395] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3064'.
[  424.657429][T15399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  424.695109][T15399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  424.975045][T15416] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3069'.
[  425.000231][T15416] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3069'.
[  425.508134][T15425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  427.784336][T15510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  427.898105][T15523] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3095'.
[  428.328310][T15536] netlink: 'syz.3.3098': attribute type 21 has an invalid length.
[  428.456692][T15539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  428.500414][T15539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  429.054201][T15556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  429.260159][T15564] __nla_validate_parse: 2 callbacks suppressed
[  429.260178][T15564] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3105'.
[  429.286511][T15564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3105'.
[  429.324801][T15564] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  429.358877][T15564] netlink: 'syz.0.3105': attribute type 3 has an invalid length.
[  429.378553][T15564] netlink: 'syz.0.3105': attribute type 3 has an invalid length.
[  429.882755][T15575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  429.936775][T15588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3114'.
[  430.289107][T15595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  430.701728][T15611] netlink: 'syz.4.3120': attribute type 21 has an invalid length.
[  430.713997][T15611] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3120'.
[  430.736611][T15614] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3121'.
[  430.746095][T15614] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3121'.
[  431.067302][T15629] netlink: 'syz.3.3123': attribute type 21 has an invalid length.
[  431.110189][T15629] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3123'.
[  431.719120][T15656] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3134'.
[  431.743088][T15656] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3134'.
[  432.011592][T15668] netlink: 'syz.0.3137': attribute type 21 has an invalid length.
[  432.052338][T15668] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3137'.
[  432.245409][T15682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  432.273315][T15682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  432.687172][T15699] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  432.701457][T15699] netlink: 'syz.3.3146': attribute type 3 has an invalid length.
[  432.711419][T15699] netlink: 'syz.3.3146': attribute type 3 has an invalid length.
[  434.259593][T15759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  434.295670][T15759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  434.782597][T15780] netlink: 'syz.0.3165': attribute type 3 has an invalid length.
[  434.790945][T15780] __nla_validate_parse: 2 callbacks suppressed
[  434.790960][T15780] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3165'.
[  435.559989][T15801] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3173'.
[  435.571418][T15801] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3173'.
[  436.079777][T15825] netlink: 'syz.0.3179': attribute type 1 has an invalid length.
[  436.088143][T15825] netlink: 616 bytes leftover after parsing attributes in process `syz.0.3179'.
[  436.104417][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3179'.
[  436.222636][T15829] netlink: 'syz.0.3181': attribute type 1 has an invalid length.
[  436.231795][T15829] netlink: 616 bytes leftover after parsing attributes in process `syz.0.3181'.
[  436.247428][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3181'.
[  436.439889][T15833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3183'.
[  436.873898][T15848] netlink: 'syz.4.3187': attribute type 21 has an invalid length.
[  436.897740][T15848] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3187'.
[  437.375848][T15869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  437.742695][T15887] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3198'.
[  437.766791][T15887] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  437.781132][T15887] netlink: 'syz.0.3198': attribute type 3 has an invalid length.
[  437.789600][T15887] netlink: 'syz.0.3198': attribute type 3 has an invalid length.
[  437.923585][T15893] netlink: 'syz.0.3199': attribute type 21 has an invalid length.
[  438.704592][T15926] netlink: 'syz.1.3211': attribute type 21 has an invalid length.
[  439.716766][T15964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  440.023111][T15975] __nla_validate_parse: 13 callbacks suppressed
[  440.023131][T15975] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3224'.
[  440.040177][T15975] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3224'.
[  440.478424][T15989] netlink: 'syz.1.3229': attribute type 21 has an invalid length.
[  440.521136][T15989] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3229'.
[  440.883402][T16009] netlink: 'syz.4.3237': attribute type 1 has an invalid length.
[  440.891192][T16009] netlink: 616 bytes leftover after parsing attributes in process `syz.4.3237'.
[  440.953505][T15999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  440.974507][T16009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3237'.
[  441.137247][T16017] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3240'.
[  441.167693][T16017] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3240'.
[  441.252077][T16023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  441.256016][T16025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  442.383354][ T5242] Bluetooth: hci6: command 0x0405 tx timeout
[  442.390689][ T5240] Bluetooth: hci4: command 0x0406 tx timeout
[  442.487832][T16060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  442.897741][T16078] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3256'.
[  442.940722][T16078] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3256'.
[  442.987382][T16083] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3257'.
[  443.282487][T16089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  443.856659][T16109] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  443.869552][T16109] netlink: 'syz.3.3265': attribute type 3 has an invalid length.
[  443.877839][T16109] netlink: 'syz.3.3265': attribute type 3 has an invalid length.
[  444.654800][T16130] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2
[  445.202259][T16143] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.210048][T16143] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.214734][T16144] __nla_validate_parse: 7 callbacks suppressed
[  445.214750][T16144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3274'.
[  445.875418][T16153] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3276'.
[  446.384724][T16171] netlink: 'syz.2.3282': attribute type 1 has an invalid length.
[  446.433164][T16171] netlink: 616 bytes leftover after parsing attributes in process `syz.2.3282'.
[  446.679896][T16179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3286'.
[  447.503542][ T5240] Bluetooth: hci5: command 0x0406 tx timeout
[  447.588172][T16197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  447.719670][T16209] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3295'.
[  447.741995][T16209] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3295'.
[  447.930999][T16218] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3298'.
[  447.971057][T16220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3299'.
[  448.465805][T16239] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3306'.
[  448.503125][T16239] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3306'.
[  449.155748][T16251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  449.927238][T16285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  450.238041][T16313] __nla_validate_parse: 6 callbacks suppressed
[  450.238061][T16313] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3323'.
[  450.674965][T16321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  451.756936][T16363] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2
[  452.257721][T16376] netlink: 'syz.3.3339': attribute type 1 has an invalid length.
[  452.286716][T16377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  452.303219][T16376] netlink: 616 bytes leftover after parsing attributes in process `syz.3.3339'.
[  452.338786][T16376] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3339'.
[  452.530375][T16387] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3342'.
[  452.540848][T16387] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3342'.
[  452.604379][T16379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  452.770753][T16395] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3344'.
[  452.779987][T16395] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3344'.
[  453.031326][T16407] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3347'.
[  453.232592][T16410] netlink: 'syz.0.3349': attribute type 1 has an invalid length.
[  453.252452][T16410] netlink: 616 bytes leftover after parsing attributes in process `syz.0.3349'.
[  453.287477][T16410] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3349'.
[  453.825707][T16433] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2
[  454.002114][T16428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  455.096848][T16471] netlink: 'syz.4.3365': attribute type 1 has an invalid length.
[  455.883637][T16498] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2
[  457.032321][T16533] __nla_validate_parse: 5 callbacks suppressed
[  457.032340][T16533] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3379'.
[  457.059286][T16533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3379'.
[  457.074105][T16533] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  457.087771][T16533] netlink: 'syz.0.3379': attribute type 1 has an invalid length.
[  457.096649][T16533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3379'.
[  457.689659][T16552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  457.759952][T16552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  457.984112][T16568] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2
[  458.527965][T16578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3389'.
[  458.795573][T16583] netlink: 'syz.4.3390': attribute type 3 has an invalid length.
[  458.836561][T16583] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.3390'.
[  458.907691][T16590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  458.926671][T16590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  460.339469][T16633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  460.928358][T16649] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3408'.
[  460.964255][T16649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3408'.
[  460.998504][T16649] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  461.026245][T16649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3408'.
[  461.097623][T16649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3408'.
[  461.224775][T16654] netlink: 'syz.2.3409': attribute type 21 has an invalid length.
[  461.232676][T16654] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3409'.
[  461.423664][   T30] INFO: task kworker/u8:9:2923 blocked for more than 143 seconds.
[  461.435502][   T30]       Not tainted 6.11.0-rc3-syzkaller-00216-gaf688a99eb1f #0
[  461.449257][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  461.474544][   T30] task:kworker/u8:9    state:D stack:20536 pid:2923  tgid:2923  ppid:2      flags:0x00004000
[  461.520731][   T30] Workqueue: netns cleanup_net
[  461.539349][   T30] Call Trace:
[  461.548315][   T30]  <TASK>
[  461.554691][   T30]  __schedule+0x1800/0x4a60
[  461.565963][   T30]  ? __pfx___schedule+0x10/0x10
[  461.566321][T16680] netlink: 'syz.2.3414': attribute type 1 has an invalid length.
[  461.576401][   T30]  ? __pfx_lock_release+0x10/0x10
[  461.592847][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  461.606686][   T30]  ? kthread_data+0x52/0xd0
[  461.616560][   T30]  ? schedule+0x90/0x320
[  461.626445][   T30]  ? wq_worker_sleeping+0x66/0x240
[  461.637282][   T30]  ? schedule+0x90/0x320
[  461.660497][   T30]  schedule+0x14b/0x320
[  461.671269][   T30]  schedule_preempt_disabled+0x13/0x30
[  461.679457][   T30]  __mutex_lock+0x6a4/0xd70
[  461.690398][   T30]  ? __mutex_lock+0x527/0xd70
[  461.700179][   T30]  ? rdma_dev_change_netns+0x3a/0x2f0
[  461.706186][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  461.711243][   T30]  ? kobject_put+0x272/0x480
[  461.717370][   T30]  ? kfree+0x149/0x360
[  461.721548][   T30]  rdma_dev_change_netns+0x3a/0x2f0
[  461.727166][   T30]  rdma_dev_exit_net+0x21e/0x350
[  461.732152][   T30]  ? __pfx___might_resched+0x10/0x10
[  461.737686][   T30]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  461.743578][   T30]  ? mutex_is_locked+0x12/0x50
[  461.748366][   T30]  ? rtnl_is_locked+0x15/0x20
[  461.753173][   T30]  ? cfg80211_pernet_exit+0xf0/0x140
[  461.758485][   T30]  cleanup_net+0x802/0xcc0
[  461.764456][   T30]  ? __pfx_cleanup_net+0x10/0x10
[  461.769500][   T30]  ? process_scheduled_works+0x945/0x1830
[  461.775404][   T30]  process_scheduled_works+0xa2c/0x1830
[  461.781062][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  461.787433][   T30]  ? assign_work+0x364/0x3d0
[  461.792073][   T30]  worker_thread+0x86d/0xd40
[  461.796791][   T30]  ? __kthread_parkme+0x169/0x1d0
[  461.801871][   T30]  ? __pfx_worker_thread+0x10/0x10
[  461.811086][   T30]  kthread+0x2f0/0x390
[  461.819712][   T30]  ? __pfx_worker_thread+0x10/0x10
[  461.827062][   T30]  ? __pfx_kthread+0x10/0x10
[  461.831774][   T30]  ret_from_fork+0x4b/0x80
[  461.836486][   T30]  ? __pfx_kthread+0x10/0x10
[  461.841107][   T30]  ret_from_fork_asm+0x1a/0x30
[  461.846282][   T30]  </TASK>
[  461.849410][   T30] INFO: task syz.0.1932:11927 blocked for more than 143 seconds.
[  461.858802][   T30]       Not tainted 6.11.0-rc3-syzkaller-00216-gaf688a99eb1f #0
[  461.872013][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  461.880824][   T30] task:syz.0.1932      state:D stack:21616 pid:11927 tgid:11926 ppid:5226   flags:0x00004004
[  461.891582][   T30] Call Trace:
[  461.895127][   T30]  <TASK>
[  461.898081][   T30]  __schedule+0x1800/0x4a60
[  461.902638][   T30]  ? __pfx___schedule+0x10/0x10
[  461.909203][   T30]  ? __pfx_lock_release+0x10/0x10
[  461.914459][   T30]  ? schedule+0x90/0x320
[  461.918806][   T30]  schedule+0x14b/0x320
[  461.923528][   T30]  schedule_timeout+0xb0/0x310
[  461.928322][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  461.935303][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  461.941329][   T30]  ? wait_for_completion+0x2fe/0x620
[  461.947049][   T30]  ? wait_for_completion+0x2fe/0x620
[  461.952363][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  461.957765][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  461.963390][   T30]  ? wait_for_completion+0x2fe/0x620
[  461.969664][   T30]  wait_for_completion+0x355/0x620
[  461.975045][   T30]  ? __pfx_wait_for_completion+0x10/0x10
[  461.980715][   T30]  ? remove_client_context+0xc0/0x1e0
[  461.987373][   T30]  disable_device+0x1c4/0x360
[  461.992154][   T30]  ? __pfx_disable_device+0x10/0x10
[  461.999724][   T30]  __ib_unregister_device+0x2a9/0x3c0
[  462.005416][   T30]  ? __pfx_ib_device_get_by_index+0x10/0x10
[  462.011336][   T30]  ib_unregister_device_and_put+0xb6/0xf0
[  462.017287][   T30]  nldev_dellink+0x2d6/0x320
[  462.021890][   T30]  ? __pfx_nldev_dellink+0x10/0x10
[  462.027472][   T30]  ? apparmor_capable+0x138/0x1b0
[  462.032526][   T30]  ? bpf_lsm_capable+0x9/0x10
[  462.037332][   T30]  ? security_capable+0x90/0xb0
[  462.042207][   T30]  ? __pfx_nldev_dellink+0x10/0x10
[  462.048904][   T30]  rdma_nl_rcv+0x6dd/0x9e0
[  462.053490][   T30]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  462.058563][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  462.066854][   T30]  netlink_unicast+0x7f0/0x990
[  462.072589][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  462.078363][   T30]  ? __virt_addr_valid+0x183/0x530
[  462.083812][   T30]  ? __check_object_size+0x49c/0x900
[  462.089170][   T30]  ? bpf_lsm_netlink_send+0x9/0x10
[  462.094579][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  462.099522][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  462.105273][   T30]  ? __import_iovec+0x536/0x820
[  462.110152][   T30]  ? aa_sock_msg_perm+0x91/0x160
[  462.115236][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  462.120532][   T30]  ? security_socket_sendmsg+0x87/0xb0
[  462.126327][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  462.134920][   T30]  __sock_sendmsg+0x221/0x270
[  462.141688][   T30]  ____sys_sendmsg+0x525/0x7d0
[  462.147399][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  462.156763][   T30]  __sys_sendmsg+0x2b0/0x3a0
[  462.161443][   T30]  ? __pfx___sys_sendmsg+0x10/0x10
[  462.166902][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  462.174062][   T30]  ? do_syscall_64+0x100/0x230
[  462.178880][   T30]  ? do_syscall_64+0xb6/0x230
[  462.183856][   T30]  do_syscall_64+0xf3/0x230
[  462.188417][   T30]  ? clear_bhb_loop+0x35/0x90
[  462.193246][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.199447][   T30] RIP: 0033:0x7f16d5f79e79
[  462.204534][   T30] RSP: 002b:00007f16d6cc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  462.214201][   T30] RAX: ffffffffffffffda RBX: 00007f16d6115f80 RCX: 00007f16d5f79e79
[  462.222206][   T30] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000007
[  462.238589][   T30] RBP: 00007f16d5fe7916 R08: 0000000000000000 R09: 0000000000000000
[  462.246880][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  462.255008][   T30] R13: 0000000000000000 R14: 00007f16d6115f80 R15: 00007fff3733eee8
[  462.264370][   T30]  </TASK>
[  462.267530][   T30] 
[  462.267530][   T30] Showing all locks held in the system:
[  462.276112][   T30] 2 locks held by ksoftirqd/1/24:
[  462.281328][   T30]  #0: ffff8880b933ea18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  462.306279][   T30]  #1: ffff8880b9328948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770
[  462.321872][   T30] 1 lock held by khungtaskd/30:
[  462.327396][   T30]  #0: ffffffff8e9382e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  462.337515][   T30] 3 locks held by kworker/u9:0/55:
[  462.342658][   T30]  #0: ffff888023d3e948 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  462.354349][   T30]  #1: ffffc90000bf7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  462.367107][   T30]  #2: ffff88802ce80d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  462.377701][   T30] 4 locks held by kworker/u8:9/2923:
[  462.384654][   T30]  #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  462.396874][   T30]  #1: ffffc9000a1b7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  462.407632][   T30]  #2: ffffffff8fc75c50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[  462.417713][   T30]  #3: ffff8880717786b0 (&device->unregistration_lock){+.+.}-{3:3}, at: rdma_dev_change_netns+0x3a/0x2f0
[  462.429212][   T30] 2 locks held by getty/4984:
[  462.434648][   T30]  #0: ffff88802b7fd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  462.444667][   T30]  #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00
[  462.455355][   T30] 2 locks held by syz.0.1932/11927:
[  462.460560][   T30]  #0: ffffffff952ce018 (&rdma_nl_types[idx].sem){.+.+}-{3:3}, at: rdma_nl_rcv+0x32d/0x9e0
[  462.470887][   T30]  #1: ffff8880717786b0 (&device->unregistration_lock){+.+.}-{3:3}, at: __ib_unregister_device+0x261/0x3c0
[  462.483167][   T30] 2 locks held by syz.2.2227/12850:
[  462.488384][   T30]  #0: ffffffff952ce018 (&rdma_nl_types[idx].sem){.+.+}-{3:3}, at: rdma_nl_rcv+0x32d/0x9e0
[  462.499702][   T30]  #1: ffff8880717786b0 (&device->unregistration_lock){+.+.}-{3:3}, at: __ib_unregister_device+0x261/0x3c0
[  462.511370][   T30] 2 locks held by syz.1.2268/12948:
[  462.516644][   T30]  #0: ffffffff8fc75c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0
[  462.526444][   T30]  #1: ffff8880717786b0 (&device->unregistration_lock){+.+.}-{3:3}, at: rdma_dev_change_netns+0x3a/0x2f0
[  462.537855][   T30] 2 locks held by syz.4.2875/14725:
[  462.543888][   T30]  #0: ffffffff8fc75c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0
[  462.553501][   T30]  #1: ffff8880717786b0 (&device->unregistration_lock){+.+.}-{3:3}, at: rdma_dev_change_netns+0x3a/0x2f0
[  462.565034][   T30] 1 lock held by syz.3.3410/16660:
[  462.570151][   T30]  #0: ffffffff8fc82808 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0
[  462.579315][   T30] 2 locks held by syz.4.3411/16662:
[  462.585581][   T30]  #0: ffff888045502c08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240
[  462.595973][   T30]  #1: ffffffff8e93d6b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[  462.608204][   T30] 1 lock held by syz.1.3412/16674:
[  462.613526][   T30]  #0: ffffffff8fc82808 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0
[  462.622675][   T30] 
[  462.647793][   T30] =============================================
[  462.647793][   T30] 
[  462.657137][   T30] NMI backtrace for cpu 1
[  462.661487][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00216-gaf688a99eb1f #0
[  462.671989][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  462.682032][   T30] Call Trace:
[  462.685302][   T30]  <TASK>
[  462.688216][   T30]  dump_stack_lvl+0x241/0x360
[  462.692883][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  462.698064][   T30]  ? __pfx__printk+0x10/0x10
[  462.702639][   T30]  ? vprintk_emit+0x631/0x770
[  462.707299][   T30]  ? __pfx_vprintk_emit+0x10/0x10
[  462.712309][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  462.717258][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  462.722731][   T30]  ? _printk+0xd5/0x120
[  462.726897][   T30]  ? __pfx__printk+0x10/0x10
[  462.731500][   T30]  ? __wake_up_klogd+0xcc/0x110
[  462.736336][   T30]  ? __pfx__printk+0x10/0x10
[  462.740926][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  462.746021][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  462.751994][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  462.757965][   T30]  watchdog+0xfee/0x1030
[  462.762196][   T30]  ? watchdog+0x1ea/0x1030
[  462.766617][   T30]  ? __pfx_watchdog+0x10/0x10
[  462.771307][   T30]  kthread+0x2f0/0x390
[  462.775390][   T30]  ? __pfx_watchdog+0x10/0x10
[  462.780078][   T30]  ? __pfx_kthread+0x10/0x10
[  462.784678][   T30]  ret_from_fork+0x4b/0x80
[  462.789084][   T30]  ? __pfx_kthread+0x10/0x10
[  462.793682][   T30]  ret_from_fork_asm+0x1a/0x30
[  462.798443][   T30]  </TASK>
[  462.803279][   T30] Sending NMI from CPU 1 to CPUs 0:
[  462.809033][    C0] NMI backtrace for cpu 0
[  462.809046][    C0] CPU: 0 UID: 0 PID: 2486 Comm: kworker/u8:8 Not tainted 6.11.0-rc3-syzkaller-00216-gaf688a99eb1f #0
[  462.809065][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  462.809074][    C0] Workqueue: bat_events batadv_nc_worker
[  462.809096][    C0] RIP: 0010:lock_release+0x62c/0xa30
[  462.809118][    C0] Code: 4c 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 88 d5 8a 00 48 c7 84 24 90 00 00 00 00 00 00 00 9c 8f 84 24 90 00 00 00 <42> 80 3c 3b 00 74 08 4c 89 f7 e8 75 d4 8a 00 f6 84 24 91 00 00 00
[  462.809132][    C0] RSP: 0018:ffffc900099f7a20 EFLAGS: 00000046
[  462.809144][    C0] RAX: 0000000000000001 RBX: 1ffff9200133ef56 RCX: ffffc900099f7a03
[  462.809156][    C0] RDX: 0000000000000002 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c606900
[  462.809167][    C0] RBP: ffffc900099f7b48 R08: ffffffff9017d4ef R09: 1ffffffff202fa9d
[  462.809178][    C0] R10: dffffc0000000000 R11: fffffbfff202fa9e R12: 1ffff9200133ef50
[  462.809190][    C0] R13: 0000000000000246 R14: ffffc900099f7ab0 R15: dffffc0000000000
[  462.809201][    C0] FS:  0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000
[  462.809215][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  462.809226][    C0] CR2: 00007fbaa38e8178 CR3: 000000000e734000 CR4: 00000000003506f0
[  462.809240][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  462.809250][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  462.809260][    C0] Call Trace:
[  462.809266][    C0]  <NMI>
[  462.809273][    C0]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  462.809290][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  462.809310][    C0]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  462.809326][    C0]  ? nmi_handle+0x2a/0x5a0
[  462.809349][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  462.809367][    C0]  ? nmi_handle+0x14f/0x5a0
[  462.809381][    C0]  ? nmi_handle+0x2a/0x5a0
[  462.809396][    C0]  ? lock_release+0x62c/0xa30
[  462.809415][    C0]  ? default_do_nmi+0x63/0x160
[  462.809433][    C0]  ? exc_nmi+0x123/0x1f0
[  462.809450][    C0]  ? end_repeat_nmi+0xf/0x53
[  462.809472][    C0]  ? lock_release+0x62c/0xa30
[  462.809491][    C0]  ? lock_release+0x62c/0xa30
[  462.809511][    C0]  ? lock_release+0x62c/0xa30
[  462.809528][    C0]  </NMI>
[  462.809534][    C0]  <TASK>
[  462.809543][    C0]  ? batadv_nc_worker+0xcb/0x610
[  462.809561][    C0]  ? __pfx_lock_release+0x10/0x10
[  462.809584][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  462.809605][    C0]  ? batadv_nc_worker+0xcb/0x610
[  462.809624][    C0]  batadv_nc_worker+0x28b/0x610
[  462.809643][    C0]  ? batadv_nc_worker+0xcb/0x610
[  462.809663][    C0]  ? process_scheduled_works+0x945/0x1830
[  462.809681][    C0]  process_scheduled_works+0xa2c/0x1830
[  462.809713][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  462.809736][    C0]  ? assign_work+0x364/0x3d0
[  462.809756][    C0]  worker_thread+0x86d/0xd40
[  462.809779][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  462.809801][    C0]  ? __kthread_parkme+0x169/0x1d0
[  462.809822][    C0]  ? __pfx_worker_thread+0x10/0x10
[  462.809840][    C0]  kthread+0x2f0/0x390
[  462.809860][    C0]  ? __pfx_worker_thread+0x10/0x10
[  462.809877][    C0]  ? __pfx_kthread+0x10/0x10
[  462.809897][    C0]  ret_from_fork+0x4b/0x80
[  462.809916][    C0]  ? __pfx_kthread+0x10/0x10
[  462.809935][    C0]  ret_from_fork_asm+0x1a/0x30
[  462.809961][    C0]  </TASK>
[  463.139685][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  463.146585][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00216-gaf688a99eb1f #0
[  463.157094][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  463.167324][   T30] Call Trace:
[  463.170615][   T30]  <TASK>
[  463.173557][   T30]  dump_stack_lvl+0x241/0x360
[  463.178248][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  463.183451][   T30]  ? __pfx__printk+0x10/0x10
[  463.188047][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  463.194028][   T30]  ? vscnprintf+0x5d/0x90
[  463.198525][   T30]  panic+0x349/0x860
[  463.202421][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  463.208570][   T30]  ? __pfx_panic+0x10/0x10
[  463.212993][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  463.218372][   T30]  ? __irq_work_queue_local+0x137/0x410
[  463.223920][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  463.229278][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  463.235507][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  463.241658][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  463.247803][   T30]  watchdog+0x102d/0x1030
[  463.252126][   T30]  ? watchdog+0x1ea/0x1030
[  463.256629][   T30]  ? __pfx_watchdog+0x10/0x10
[  463.261325][   T30]  kthread+0x2f0/0x390
[  463.265389][   T30]  ? __pfx_watchdog+0x10/0x10
[  463.270143][   T30]  ? __pfx_kthread+0x10/0x10
[  463.274810][   T30]  ret_from_fork+0x4b/0x80
[  463.279219][   T30]  ? __pfx_kthread+0x10/0x10
[  463.283802][   T30]  ret_from_fork_asm+0x1a/0x30
[  463.288569][   T30]  </TASK>
[  463.291838][   T30] Kernel Offset: disabled
[  463.296151][   T30] Rebooting in 86400 seconds..