last executing test programs:

1m8.122781382s ago: executing program 1 (id=1402):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf00000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)
socket$xdp(0x2c, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r3=>0x0})
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x691}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0xfffffff4}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@deltclass={0x5c, 0x29, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x15}, {0xd, 0x4}, {0xfff1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x8}}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))

1m7.942514187s ago: executing program 1 (id=1404):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000009500"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x51}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) (async)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, &(0x7f0000000100)) (async)
r1 = socket(0x21, 0x2, 0x1)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000540)={0x2, &(0x7f0000000400)=[{0x7, 0x7, 0x9, 0x60a}, {0x81, 0xc, 0x4, 0xfffffff7}]}, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000010000000000000000000000711216000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0000005e070000c70000005200000020080000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000000000000000000000000000000000000000000f9a9c8cbe6b97be1bcfde19578f5661beb04ab7d752c5aaffa7499e0500eebf4533b26e97b03d68d5cd11311"], 0x50) (async, rerun: 32)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4c094) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00'})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES16=r4, @ANYRES16=r5, @ANYBLOB="000425bd7000fedbdf250900000005000700110000000500074067372a000500080008000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async, rerun: 32)
socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64)
r7 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000011140100000000000000000008004b0028000000"], 0x18}}, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000440)=@ethtool_gfeatures}) (async)
ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)='macvlan1\x00') (async)
r8 = gettid() (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r11=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, &(0x7f0000000640)=ANY=[@ANYRES64=r3], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="44000000180001002cbd7000000000000a0000f90002ff000000000008000400", @ANYRES32=r11, @ANYBLOB="06001500070000001800168014000100020000000000000003ffeb008030b900"], 0x44}}, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
syz_open_procfs$namespace(r8, &(0x7f0000000200)='ns/pid\x00')

1m1.509927195s ago: executing program 1 (id=1404):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000009500"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x51}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) (async)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, &(0x7f0000000100)) (async)
r1 = socket(0x21, 0x2, 0x1)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000540)={0x2, &(0x7f0000000400)=[{0x7, 0x7, 0x9, 0x60a}, {0x81, 0xc, 0x4, 0xfffffff7}]}, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000010000000000000000000000711216000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0000005e070000c70000005200000020080000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000000000000000000000000000000000000000000f9a9c8cbe6b97be1bcfde19578f5661beb04ab7d752c5aaffa7499e0500eebf4533b26e97b03d68d5cd11311"], 0x50) (async, rerun: 32)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4c094) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00'})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES16=r4, @ANYRES16=r5, @ANYBLOB="000425bd7000fedbdf250900000005000700110000000500074067372a000500080008000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async, rerun: 32)
socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64)
r7 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000011140100000000000000000008004b0028000000"], 0x18}}, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000440)=@ethtool_gfeatures}) (async)
ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)='macvlan1\x00') (async)
r8 = gettid() (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r11=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, &(0x7f0000000640)=ANY=[@ANYRES64=r3], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="44000000180001002cbd7000000000000a0000f90002ff000000000008000400", @ANYRES32=r11, @ANYBLOB="06001500070000001800168014000100020000000000000003ffeb008030b900"], 0x44}}, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
syz_open_procfs$namespace(r8, &(0x7f0000000200)='ns/pid\x00')

55.771171918s ago: executing program 1 (id=1404):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000009500"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x51}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) (async)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, &(0x7f0000000100)) (async)
r1 = socket(0x21, 0x2, 0x1)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000540)={0x2, &(0x7f0000000400)=[{0x7, 0x7, 0x9, 0x60a}, {0x81, 0xc, 0x4, 0xfffffff7}]}, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000010000000000000000000000711216000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0000005e070000c70000005200000020080000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000000000000000000000000000000000000000000f9a9c8cbe6b97be1bcfde19578f5661beb04ab7d752c5aaffa7499e0500eebf4533b26e97b03d68d5cd11311"], 0x50) (async, rerun: 32)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4c094) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00'})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES16=r4, @ANYRES16=r5, @ANYBLOB="000425bd7000fedbdf250900000005000700110000000500074067372a000500080008000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async, rerun: 32)
socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64)
r7 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000011140100000000000000000008004b0028000000"], 0x18}}, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000440)=@ethtool_gfeatures}) (async)
ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)='macvlan1\x00') (async)
r8 = gettid() (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r11=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, &(0x7f0000000640)=ANY=[@ANYRES64=r3], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="44000000180001002cbd7000000000000a0000f90002ff000000000008000400", @ANYRES32=r11, @ANYBLOB="06001500070000001800168014000100020000000000000003ffeb008030b900"], 0x44}}, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
syz_open_procfs$namespace(r8, &(0x7f0000000200)='ns/pid\x00')

11.216039221s ago: executing program 1 (id=1404):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000009500"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x51}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) (async)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, &(0x7f0000000100)) (async)
r1 = socket(0x21, 0x2, 0x1)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000540)={0x2, &(0x7f0000000400)=[{0x7, 0x7, 0x9, 0x60a}, {0x81, 0xc, 0x4, 0xfffffff7}]}, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000010000000000000000000000711216000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0000005e070000c70000005200000020080000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000000000000000000000000000000000000000000f9a9c8cbe6b97be1bcfde19578f5661beb04ab7d752c5aaffa7499e0500eebf4533b26e97b03d68d5cd11311"], 0x50) (async, rerun: 32)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4c094) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00'})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES16=r4, @ANYRES16=r5, @ANYBLOB="000425bd7000fedbdf250900000005000700110000000500074067372a000500080008000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async, rerun: 32)
socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64)
r7 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000011140100000000000000000008004b0028000000"], 0x18}}, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000440)=@ethtool_gfeatures}) (async)
ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)='macvlan1\x00') (async)
r8 = gettid() (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r11=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, &(0x7f0000000640)=ANY=[@ANYRES64=r3], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="44000000180001002cbd7000000000000a0000f90002ff000000000008000400", @ANYRES32=r11, @ANYBLOB="06001500070000001800168014000100020000000000000003ffeb008030b900"], 0x44}}, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
syz_open_procfs$namespace(r8, &(0x7f0000000200)='ns/pid\x00')

5.235284986s ago: executing program 1 (id=1404):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000009500"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x51}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) (async)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, &(0x7f0000000100)) (async)
r1 = socket(0x21, 0x2, 0x1)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000540)={0x2, &(0x7f0000000400)=[{0x7, 0x7, 0x9, 0x60a}, {0x81, 0xc, 0x4, 0xfffffff7}]}, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000010000000000000000000000711216000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0000005e070000c70000005200000020080000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000000000000000000000000000000000000000000f9a9c8cbe6b97be1bcfde19578f5661beb04ab7d752c5aaffa7499e0500eebf4533b26e97b03d68d5cd11311"], 0x50) (async, rerun: 32)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4c094) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00'})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES16=r4, @ANYRES16=r5, @ANYBLOB="000425bd7000fedbdf250900000005000700110000000500074067372a000500080008000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async, rerun: 32)
socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64)
r7 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000011140100000000000000000008004b0028000000"], 0x18}}, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000440)=@ethtool_gfeatures}) (async)
ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)='macvlan1\x00') (async)
r8 = gettid() (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r11=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, &(0x7f0000000640)=ANY=[@ANYRES64=r3], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="44000000180001002cbd7000000000000a0000f90002ff000000000008000400", @ANYRES32=r11, @ANYBLOB="06001500070000001800168014000100020000000000000003ffeb008030b900"], 0x44}}, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
syz_open_procfs$namespace(r8, &(0x7f0000000200)='ns/pid\x00')

4.52257299s ago: executing program 2 (id=1838):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000b40)={'dummy0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
sendmsg$nl_generic(r1, 0x0, 0x60800)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a01020000000000000000070000060900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000c0800034000000000080002400000000d080001400000000808000240000000090800014000000009080002400000001808000140000000a4"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, &(0x7f0000000100)=""/40, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="001e"], 0xf8)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r7, 0x7, 0x0, 0x8, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
listen(r5, 0x0)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmsg$rds(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000200)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/103, 0x67}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000240)=""/61, 0x3d}, {&(0x7f00000002c0)=""/38, 0x26}], 0x4, &(0x7f0000000640)=[@cswp={0x58, 0x114, 0x7, {{0x4, 0x1}, &(0x7f00000005c0)=0x5, &(0x7f0000000600)=0x5, 0x5, 0x7, 0x8, 0x0, 0x5, 0x6}}], 0x58, 0x44045}, 0x4000)
setsockopt$nfc_llcp_NFC_LLCP_RW(r8, 0x118, 0x0, &(0x7f0000000000)=0x8000007, 0x4)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf001}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11}}}}}}}, 0x0)

4.447688437s ago: executing program 2 (id=1839):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r1, 0x0)
ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000002200)={0x3e, 0x1, 0x6, 0x3, 0x0, 0x81})
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x42d681a14bc7351c)
socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x9, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x5, &(0x7f00000000c0), 0x10}, 0x94)
r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={<r4=>0x0, 0x8, 0x7, [0x80, 0x6, 0x536, 0xb212, 0x4, 0x9, 0x9]}, &(0x7f0000000140)=0x16)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000001c0)={<r5=>r4, 0x6, "e071b8093633"}, &(0x7f0000000200)=0xe)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES16=r5], 0x34}], 0x1, 0x0, 0x0, 0x4004094}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000280)={'erspan0\x00', <r6=>0x0, 0x80, 0x7800, 0x9, 0xbbb4, {{0xa, 0x4, 0x1, 0x0, 0x28, 0x65, 0x0, 0xf, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x94, 0x11, "97b2bc084d5849cce3630120ba9944"}, @end, @noop]}}}}})
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x7, [@enum={0xc, 0x7, 0x0, 0x6, 0x4, [{0x4, 0x1}, {0x2, 0x2}, {0x6, 0x7}, {0xe, 0x9}, {0x9, 0xd64}, {0x4, 0x5}, {0xc, 0x1000}]}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x3}, @var={0xc, 0x0, 0x0, 0xe, 0x2, 0x2}, @fwd={0x3}, @ptr={0x4, 0x0, 0x0, 0x2, 0x9}]}, {0x0, [0x5f, 0x0, 0x0, 0x41, 0x2e]}}, &(0x7f0000000440)=""/41, 0x97, 0x29, 0x0, 0x3}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x774c, 0x58, &(0x7f0000000200)=""/88, 0x41100, 0x1, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000540)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x7, 0x92, 0xfffffff9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x10, 0x7}, 0x94)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
connect$packet(r2, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14)
shutdown(r2, 0x1)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x6c}}, 0x0)
write(r9, &(0x7f0000000300)="1c2b4ba20e99421c5e6346", 0xb)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB="14000000100001000000000000000000e900000a20000000000a01020000000000000000050000000900010073797a10000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000000e0a01030000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x400)
writev(r10, &(0x7f0000000040), 0x2)

4.446735204s ago: executing program 0 (id=1840):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, &(0x7f0000000240))
ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xf51)
readv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x100000000000030a)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000140)="2aa229111272ff", 0x7}, {&(0x7f0000000200)="3cc5c48b32b27a215ed6734667e778fd5e31bd2a645c1ad3521f8bb3347afdda1150f0871a3dc29260bd8c43222471588c75a894d31eb4e0a8b9439adf553dd6c343aa6a7cb47d37bfcc1b89ff13a3e68d9ec5751948ea50e29915258db6597fa5c3ed168fe9704d5ecced81fd9dc1400a7b749d9495e6e621", 0x79}], 0x2}, 0x24044014)

3.557730981s ago: executing program 2 (id=1841):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async)
unshare(0x68040200) (async)
r1 = socket(0x2a, 0x2, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff}) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r3)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14) (async, rerun: 64)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r7, 0x0, 0xd}, 0x18)
mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x3000004, 0x40010, r8, 0x3f38e000)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f7}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) (async)
bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r9, &(0x7f0000000140)="24000000010006", 0x7) (async, rerun: 32)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (rerun: 32)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r6)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x1c, r11, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
connect$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async, rerun: 64)
sendmmsg$sock(r10, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) (async, rerun: 64)
shutdown(r10, 0x1)

3.557224371s ago: executing program 0 (id=1842):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$bt_sco(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r2 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@ethernet={0x0, @random}, &(0x7f0000000040)=0x80)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffd}, 0xe)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$netlink(0x10, 0x3, 0xf)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ffc}, 0xe)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, 0x0, &(0x7f0000000100)=0x10)
unshare(0x62040200)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r1, 0x0, 0x0}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x2300}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x3fff}]}}]}, 0x40}}, 0x0)
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000806010200000000000000000000000705000100070000000900020073ff00000000000000000100070000000500010007000000"], 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x4048800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
socket$rds(0x15, 0x5, 0x0)

2.507144375s ago: executing program 2 (id=1843):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='y\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000500000000000000f9ffffffffffffff00000000a3e82a161ea91b969ae76d91e3b42de095741c7e9e97bb64dbb8417e536864b177fb5261524a4a484e9fd1d8b9337e4227f2b81c7b99dc092d1d4090eb604f173c4d3832eeb5de01fa097923f87fed7f3f97093c3f949b"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)='%pi6   \x00'}, 0x20)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$alg(0x26, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40201, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x126, 0x0, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
close(0x3)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socket$inet6(0xa, 0x3, 0xff)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000003e000701feffffff00000000017c0000040042800c00018006000600800a00000800028004"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e22, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x1}, {0xa, 0x4e20, 0x81, @mcast2, 0xa}, 0xffffffffffffffff, {[0x1e, 0xff, 0xffffff00, 0xa1, 0x6, 0x89, 0x400, 0x8]}}, 0x5c)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)

2.302271882s ago: executing program 0 (id=1844):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000340)=@ethtool_rxnfc={0x31, 0x1, 0xe, {0x2, @udp_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x4e22, 0x4e22, 0xa}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, 0x7, 0x8b6, [0x5, 0xb3300]}, @udp_ip6_spec={@local, @private0, 0x4e20, 0x4e24, 0x8f}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x800, 0xf, [0x7, 0x9]}, 0x10, 0x2}}})
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
write(r3, &(0x7f00000003c0)="7e3dfac72d3d5421eff418100091b6eff3b3f1f72f4760228d6ed617f3fe67f839096c4bb9dbac5ee964c6dabdc5bcf79493995fd9d6ae325e5eb83e14146a683ea2da265e5bb5b70ba8ae1d6df291c98594917e1757ec8459a4afabe12281af697e5f18197465ebabf9d2e4523b6fadb144764d59813aaca95a54d907d7e13b97fc4feb9282d649a3f264bc580fa1d3681f50c67dcc4a9ceb138c1eac9020118a6f51d9f09b47005a9b76a2991ffdc415698d0780f29a7575bac3df340f5b345d347804c3311ad8621fca1c10c1b5bae6ab0f56", 0xd4)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESDEC=r2, @ANYRES32=r0], 0x180}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
clock_gettime(0x2, &(0x7f00000001c0))
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8)
sendto$inet6(r6, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000800)={0x5, 0x3, 0x4, 0xb, 0x3, 0x7fff, 0xc1, 0x7}, 0x20)
syz_80211_join_ibss(&(0x7f0000000240)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0)

1.033268246s ago: executing program 0 (id=1845):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRES32=0x0, @ANYBLOB="080003"], 0x94}}, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000140), 0x4)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000080)={0xf1c0, {0x29, 0x8000000000000001, 0x8000, 0xc, 0x9}})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x83)
r3 = accept4$llc(r2, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x10, 0x80000)
getpeername$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_netdev_private(r1, 0x8924, &(0x7f0000000000))

907.846863ms ago: executing program 0 (id=1846):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000100)=0x4)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00020000008000003c0012800b00010062726964676500072c0002950c002200090001000000000008001d000300000005002900000000000c002e000100000000100000080003"], 0x6c}}, 0x8000)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f2", @ANYRES8=r3, @ANYRESOCT], 0xfc}}, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00'})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)={0x40, r7, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}]]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=<r12=>0x0)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13)
sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r14, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x1c}}, 0x0)
write$nci(r11, &(0x7f0000000a40)=ANY=[@ANYBLOB="01f5"], 0x10)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000c00)={0x0, 0x7, &(0x7f0000000640)={&(0x7f00000002c0)={0x90, r15, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x55, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_b, @device_a, @initial, {0x4, 0x9}, @value=@ver_80211n={0x0, 0xd6, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, @val={0x0, 0x17, @random="9db4a84f2beb2f4ecb945a20a904b03028ceeafad3e3a2"}, @void, @void, @val={0x2d, 0x1a, {0x800, 0x0, 0x0, 0x0, {0x10, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x400, 0x6, 0x9}}, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1296}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x93}]}, 0x90}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be70}, 0x24008080)
sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="28000000b8f36f2eb6031df5d9fab7cbff5987c2ec26edfd8fa24821aa6993842f565aa8be740ae84857dc321ba7800ee883c8e6e0e2fe802f91ca777ff0a8c767dba3d619737007dcf17cea57fae2b6560b2536b6249e57890437beb44019c49f103bc1d63b458245b46c5cf886afde1de6d91c9dda8681811fbd39bdee143b8a1d0c15f058659d1dcdd9ba1c8caffc084b9bf22292b2e93cf7053d6eb77191b8811371361dcac3864886c02414f96995c15ea14f88b621789878dc23faf1bf098ac9d02dba1d040c653d364745b3bb0bd4da93f8", @ANYRES16=r7, @ANYBLOB="00022cbd7000fbdbdf256500000008000300", @ANYRES32=r9, @ANYBLOB="0c0099000400000014000000"], 0x28}, 0x1, 0x0, 0x0, 0xf89bb23dac3535ca}, 0x42)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r16=>0xffffffffffffffff})
sendmmsg$unix(r16, &(0x7f00000bd000), 0x318, 0x0)
connect$unix(r16, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e)

494.531968ms ago: executing program 2 (id=1847):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
tee(0xffffffffffffffff, r0, 0x8f5, 0x100000000000000)
write$cgroup_type(r0, &(0x7f0000000180), 0x9)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10)
socket(0x28, 0x5, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000001680)=@base={0xa, 0x1, 0x3f, 0x40, 0x50, r3, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001700)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x3, <r4=>0x0}, 0x8)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={r4, 0xfffffffc, 0x10}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket(0x2a, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$key(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)={0x2, 0x6, 0x1, 0x2, 0x13, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d4}, @sadb_x_policy={0x8, 0x12, 0x3, 0x0, 0x0, 0x6e6bbc, 0x7, {0x6, 0x2b, 0x2, 0x2, 0x0, 0x6, 0x0, @in=@broadcast, @in6=@mcast2}}, @sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd29}, @sadb_lifetime={0x4, 0x4, 0x1, 0x3, 0x9, 0x8}]}, 0x98}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r6, r6, 0x2e}, 0x20)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

346.643174ms ago: executing program 2 (id=1848):
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xc79, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000000180)='%pi6   \x00'}, 0x20)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$alg(0x26, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40201, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
close(0x3)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
socket$kcm(0x29, 0x7, 0x0)
socket$inet6(0xa, 0x3, 0xff)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r3])

0s ago: executing program 0 (id=1849):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$bt_sco(r0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x8, &(0x7f0000004780)=ANY=[@ANYBLOB="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", @ANYBLOB="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", @ANYBLOB="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", @ANYRES8=r1, @ANYRES8=r0, @ANYRESDEC=r1], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r3 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@ethernet={0x0, @random}, &(0x7f0000000040)=0x80)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffd}, 0xe)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$netlink(0x10, 0x3, 0xf)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ffc}, 0xe)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x62040200)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r2, 0x0, 0x0}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x2300}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x3fff}]}}]}, 0x40}}, 0x0)
sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x4048800)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
socket$rds(0x15, 0x5, 0x0)

kernel console output (not intermixed with test programs):

ce batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.459739][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.481958][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.484956][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.493378][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.600265][ T5828] hsr_slave_0: entered promiscuous mode
[   57.605805][ T5828] hsr_slave_1: entered promiscuous mode
[   57.609098][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.613568][ T5828] Cannot create hsr debugfs directory
[   57.646428][ T5833] hsr_slave_0: entered promiscuous mode
[   57.649764][ T5833] hsr_slave_1: entered promiscuous mode
[   57.653036][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.656053][ T5833] Cannot create hsr debugfs directory
[   57.989371][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.000296][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.007285][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.024598][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.072806][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.080387][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.095180][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.103891][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.192706][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.204332][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.221989][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.229329][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.252320][   T54] Bluetooth: hci0: command tx timeout
[   58.331120][   T54] Bluetooth: hci1: command tx timeout
[   58.378831][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.411026][   T54] Bluetooth: hci2: command tx timeout
[   58.426174][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.456112][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   58.481289][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   58.504412][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.507545][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.514753][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.517645][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.523754][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.526694][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.538199][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.556141][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.559124][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.595793][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   58.635924][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.638880][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.649785][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.652828][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.924297][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.939268][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.949917][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.021786][ T5828] veth0_vlan: entered promiscuous mode
[   59.040013][ T5824] veth0_vlan: entered promiscuous mode
[   59.049405][ T5833] veth0_vlan: entered promiscuous mode
[   59.055609][ T5828] veth1_vlan: entered promiscuous mode
[   59.066589][ T5824] veth1_vlan: entered promiscuous mode
[   59.077441][ T5833] veth1_vlan: entered promiscuous mode
[   59.118063][ T5828] veth0_macvtap: entered promiscuous mode
[   59.131204][ T5828] veth1_macvtap: entered promiscuous mode
[   59.154093][ T5833] veth0_macvtap: entered promiscuous mode
[   59.162467][ T5824] veth0_macvtap: entered promiscuous mode
[   59.172885][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.176870][ T5833] veth1_macvtap: entered promiscuous mode
[   59.187181][ T5824] veth1_macvtap: entered promiscuous mode
[   59.199366][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.215387][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.218930][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.224096][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.227555][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.237879][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.253945][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.263275][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.278211][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.282521][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.286078][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.289548][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.309264][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.323559][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.327151][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.332701][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.336245][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.491680][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.495053][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.506987][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.510557][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.562559][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.565822][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.603495][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.608862][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.665883][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.670206][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.677523][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.680897][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.755837][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.982467][ T5902] netlink: 'syz.2.5': attribute type 1 has an invalid length.
[   59.986193][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5'.
[   59.989990][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5'.
[   60.340963][   T54] Bluetooth: hci0: command tx timeout
[   60.412527][   T54] Bluetooth: hci1: command tx timeout
[   60.491547][   T54] Bluetooth: hci2: command tx timeout
[   60.840768][ T5914] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.930561][ T5917] syz.0.9 uses obsolete (PF_INET,SOCK_PACKET)
[   60.990514][ T5914] netlink: 'syz.2.8': attribute type 4 has an invalid length.
[   61.119804][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'.
[   61.243402][ T5933] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.819994][ T5940] netlink: 'syz.2.14': attribute type 4 has an invalid length.
[   62.059446][ T5973] Zero length message leads to an empty skb
[   62.338558][ T2207] IPVS: starting estimator thread 0...
[   62.411083][   T54] Bluetooth: hci0: command tx timeout
[   62.460856][ T5986] IPVS: using max 49 ests per chain, 117600 per kthread
[   62.491507][   T54] Bluetooth: hci1: command tx timeout
[   62.586213][   T54] Bluetooth: hci2: command tx timeout
[   63.289797][ T6008] netlink: 'syz.1.29': attribute type 4 has an invalid length.
[   63.553685][ T6036] netlink: 48 bytes leftover after parsing attributes in process `syz.1.35'.
[   63.597312][ T6037] x_tables: duplicate underflow at hook 2
[   64.493610][   T54] Bluetooth: hci0: command tx timeout
[   64.573765][   T54] Bluetooth: hci1: command tx timeout
[   64.661381][   T54] Bluetooth: hci2: command tx timeout
[   66.277133][ T6072] netlink: 32 bytes leftover after parsing attributes in process `syz.0.44'.
[   66.342978][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.45'.
[   66.345932][ T6074] veth1_virt_wifi: entered promiscuous mode
[   66.347987][ T6074] veth1_virt_wifi: entered allmulticast mode
[   66.731153][ T5218] Bluetooth: hci2: command tx timeout
[   67.135206][ T6116] netlink: 48 bytes leftover after parsing attributes in process `syz.1.53'.
[   67.272849][ T6120] netlink: 56 bytes leftover after parsing attributes in process `syz.0.56'.
[   67.282777][ T6120] Bluetooth: MGMT ver 1.23
[   67.547435][ T6139] netlink: 'syz.1.58': attribute type 13 has an invalid length.
[   67.550184][ T6139] netlink: 'syz.1.58': attribute type 17 has an invalid length.
[   67.686785][ T6139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   67.937666][ T6151] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   67.975770][ T6128] syz.1.58 (6128) used greatest stack depth: 17912 bytes left
[   68.236004][ T6160] netlink: 'syz.1.63': attribute type 4 has an invalid length.
[   68.276007][ T6160] netlink: 'syz.1.63': attribute type 4 has an invalid length.
[   68.360799][ T6160] netlink: 'syz.1.63': attribute type 4 has an invalid length.
[   68.363543][ T6160] netlink: 'syz.1.63': attribute type 4 has an invalid length.
[   68.366140][ T6160] netlink: 'syz.1.63': attribute type 4 has an invalid length.
[   68.447173][ T6160] netlink: 'syz.1.63': attribute type 4 has an invalid length.
[   68.514242][ T6160] netlink: 'syz.1.63': attribute type 4 has an invalid length.
[   68.567953][ T6160] netlink: 'syz.1.63': attribute type 4 has an invalid length.
[   68.821244][ T5218] Bluetooth: hci2: command 0x0405 tx timeout
[   69.207068][ T6193] netlink: 16 bytes leftover after parsing attributes in process `syz.1.70'.
[   69.659058][ T6221] 8021q: VLANs not supported on vxcan0
[   70.209180][ T6249] tipc: Started in network mode
[   70.211523][ T6249] tipc: Node identity 36a986c1400a, cluster identity 229
[   70.214499][ T6249] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.218526][ T6249] syzkaller0: entered promiscuous mode
[   70.223058][ T6249] syzkaller0: entered allmulticast mode
[   70.258557][ T6247] tipc: Resetting bearer <eth:syzkaller0>
[   70.276727][ T6247] tipc: Disabling bearer <eth:syzkaller0>
[   70.436198][ T6257] warning: `syz.1.86' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.888199][ T6283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.92'.
[   70.894936][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'.
[   70.989414][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.991979][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.101391][ T6291] netlink: 64 bytes leftover after parsing attributes in process `syz.1.93'.
[   71.104378][ T6291] netlink: 64 bytes leftover after parsing attributes in process `syz.1.93'.
[   71.109167][ T6291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.382346][ T6298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.94'.
[   71.387281][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'.
[   71.397854][ T6298] netlink: 5 bytes leftover after parsing attributes in process `syz.2.94'.
[   71.408018][ T6298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.94'.
[   71.545368][   T33] audit: type=1800 audit(1752510783.425:2): pid=6306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.96" name="blkio.bfq.time_recursive" dev="tmpfs" ino=178 res=0 errno=0
[   71.691564][ T5218] Bluetooth: hci2: command 0x0405 tx timeout
[   71.742756][ T6316] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.98'.
[   71.749617][ T6316] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   71.979075][ T6335] netlink: 48 bytes leftover after parsing attributes in process `syz.1.101'.
[   72.257229][ T5723] nci: nci_rx_work: unknown MT 0x1
[   73.402480][ T6409] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.515008][ T6412] validate_nla: 58 callbacks suppressed
[   73.515181][ T6412] netlink: 'syz.0.115': attribute type 8 has an invalid length.
[   73.850341][ T6421] netlink: 'syz.2.118': attribute type 1 has an invalid length.
[   73.855187][ T6421] netlink: 244 bytes leftover after parsing attributes in process `syz.2.118'.
[   74.060460][ T6435] netlink: 16 bytes leftover after parsing attributes in process `syz.2.120'.
[   74.532815][ T6450] netlink: 56 bytes leftover after parsing attributes in process `syz.0.127'.
[   74.547716][ T6452] netlink: 20 bytes leftover after parsing attributes in process `syz.1.128'.
[   74.858322][ T6463] IPVS: Scheduler module ip_vs_sip not found
[   75.757711][ T6492] syzkaller1: entered allmulticast mode
[   76.545657][ T6510] tipc: Started in network mode
[   76.547781][ T6510] tipc: Node identity 5e9050f5ac67, cluster identity 4711
[   76.556847][ T6510] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.560550][ T6512] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   76.565900][ T6509] syzkaller0: entered promiscuous mode
[   76.568273][ T6509] syzkaller0: entered allmulticast mode
[   76.588269][ T6508] tipc: Resetting bearer <eth:syzkaller0>
[   76.607866][ T6508] tipc: Disabling bearer <eth:syzkaller0>
[   76.633908][ T6508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.848680][   T33] audit: type=1800 audit(1752510788.725:3): pid=6519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.145" name="blkio.bfq.time_recursive" dev="tmpfs" ino=264 res=0 errno=0
[   76.852078][ T6522] __nla_validate_parse: 2 callbacks suppressed
[   76.852097][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'.
[   77.234962][ T6529] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[   77.283070][ T6528] tls_set_device_offload: netdev not found
[   77.735330][ T6557] !: renamed from dummy0 (while UP)
[   77.768528][ T6559] bpq0: entered allmulticast mode
[   78.148820][ T6574] netlink: 64 bytes leftover after parsing attributes in process `syz.0.164'.
[   78.793858][ T6612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.173'.
[   78.890453][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'.
[   78.896339][ T6623] netlink: 5 bytes leftover after parsing attributes in process `syz.0.177'.
[   78.900461][ T6623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.177'.
[   78.985401][ T6629] netlink: 48 bytes leftover after parsing attributes in process `syz.1.175'.
[   79.148700][ T6631] netlink: 48 bytes leftover after parsing attributes in process `syz.0.179'.
[   79.353479][ T6641] bpq0: left allmulticast mode
[   79.445310][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'.
[   79.448215][ T6647] netlink: 5 bytes leftover after parsing attributes in process `syz.0.185'.
[   79.757359][ T6664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.875154][ T6692] netlink: 'syz.1.197': attribute type 29 has an invalid length.
[   80.882529][ T6692] netlink: 'syz.1.197': attribute type 29 has an invalid length.
[   80.921977][ T6692] netlink: 'syz.1.197': attribute type 29 has an invalid length.
[   80.928109][ T6692] netlink: 'syz.1.197': attribute type 29 has an invalid length.
[   80.932026][ T6692] netlink: 'syz.1.197': attribute type 29 has an invalid length.
[   80.935372][ T6692] netlink: 'syz.1.197': attribute type 29 has an invalid length.
[   80.938610][ T6692] netlink: 'syz.1.197': attribute type 29 has an invalid length.
[   80.950885][ T6692] netlink: 'syz.1.197': attribute type 29 has an invalid length.
[   80.954130][ T6692] netlink: 'syz.1.197': attribute type 29 has an invalid length.
[   81.219249][   T10] cfg80211: failed to load regulatory.db
[   81.334286][ T6720] wlan1: mtu less than device minimum
[   81.355893][ T6717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.594063][ T6729] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   81.737527][ T6734] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 38101 - 0
[   81.742186][ T6734] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 38101 - 0
[   81.745633][ T6734] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 38101 - 0
[   81.749234][ T6734] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 38101 - 0
[   81.760126][ T6734] geneve3: entered promiscuous mode
[   81.762716][ T6734] geneve3: entered allmulticast mode
[   81.950946][ T6740] __nla_validate_parse: 6 callbacks suppressed
[   81.950964][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'.
[   81.957722][ T6740] netlink: 5 bytes leftover after parsing attributes in process `syz.2.211'.
[   81.963651][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.211'.
[   82.056292][ T6744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.213'.
[   82.059120][ T6744] netlink: 'syz.2.213': attribute type 7 has an invalid length.
[   82.062344][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'.
[   82.077997][ T6744] erspan0: entered promiscuous mode
[   82.081098][ T6744] gretap0: entered promiscuous mode
[   82.092293][ T6744] erspan0: left promiscuous mode
[   82.096991][ T6744] gretap0: left promiscuous mode
[   82.511589][ T6766] netlink: 16 bytes leftover after parsing attributes in process `syz.1.220'.
[   83.220866][ T5218] Bluetooth: hci2: command 0x0405 tx timeout
[   83.329692][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.226'.
[   83.334374][ T6787] netlink: 5 bytes leftover after parsing attributes in process `syz.1.226'.
[   83.337991][ T6787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.226'.
[   83.715801][ T6795] Unsupported ieee802154 address type: 0
[   83.821907][ T6801] openvswitch: netlink: Duplicate or invalid key (type 0).
[   83.824815][ T6801] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.340272][ T6819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.237'.
[   84.579230][ T6824] bpq0: entered promiscuous mode
[   84.583035][ T6824] bpq0: entered allmulticast mode
[   85.177378][ T6858] @: renamed from bond_slave_0 (while UP)
[   85.249616][ T6860] tap0: tun_chr_ioctl cmd 1074025677
[   85.252947][ T6860] tap0: linktype set to 19
[   85.258137][ T6860] tap0: tun_chr_ioctl cmd 1074025675
[   85.260373][ T6860] tap0: persist disabled
[   85.655890][ T6878] xt_CT: No such helper "pptp"
[   86.269156][ T6906] validate_nla: 2 callbacks suppressed
[   86.269176][ T6906] netlink: 'syz.2.260': attribute type 4 has an invalid length.
[   86.416607][ T6925] xt_l2tp: v2 doesn't support IP mode
[   86.934202][ T6950] ip6t_REJECT: ECHOREPLY is not supported
[   87.034803][ T6955] bpq0: left promiscuous mode
[   87.271124][ T6964] __nla_validate_parse: 6 callbacks suppressed
[   87.271168][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.275'.
[   87.277282][ T6964] netlink: 5 bytes leftover after parsing attributes in process `syz.0.275'.
[   87.279971][ T6964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.275'.
[   87.361529][ T6968] netlink: 56 bytes leftover after parsing attributes in process `syz.0.277'.
[   87.463654][ T6972] tipc: Started in network mode
[   87.465368][ T6972] tipc: Node identity 121ef66b9ef2, cluster identity 4711
[   87.468737][ T6972] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.473272][ T6972] syzkaller0: entered promiscuous mode
[   87.475183][ T6972] syzkaller0: entered allmulticast mode
[   87.484881][ T6972] tipc: Resetting bearer <eth:syzkaller0>
[   87.492099][ T6970] tipc: Resetting bearer <eth:syzkaller0>
[   87.502229][ T6970] tipc: Disabling bearer <eth:syzkaller0>
[   87.507273][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'.
[   87.566051][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'.
[   87.623729][ T6979] netlink: 24 bytes leftover after parsing attributes in process `syz.0.281'.
[   87.752181][ T6985] netlink: 'syz.0.283': attribute type 7 has an invalid length.
[   87.755690][ T6985] netlink: 'syz.0.283': attribute type 8 has an invalid length.
[   87.885495][ T6992] netlink: 'syz.2.286': attribute type 9 has an invalid length.
[   87.988539][ T6997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.288'.
[   87.999750][ T6997] netlink: 48 bytes leftover after parsing attributes in process `syz.2.288'.
[   88.218016][ T7006] netlink: 256 bytes leftover after parsing attributes in process `syz.2.291'.
[   89.378961][ T7044] bpq0: left allmulticast mode
[   89.657720][ T7062] tls_set_device_offload: netdev not found
[   89.805821][ T7070] netlink: 'syz.2.310': attribute type 32 has an invalid length.
[   91.689429][ T7163] batadv0: entered promiscuous mode
[   91.692206][ T7163] vlan2: entered promiscuous mode
[   92.014450][ T7184] xt_CT: No such helper "snmp"
[   92.198349][ T7196] TCP: TCP_TX_DELAY enabled
[   92.739064][ T7217] bpq0: entered promiscuous mode
[   92.741243][ T7217] bpq0: entered allmulticast mode
[   92.819068][ T7220] nft_compat: unsupported protocol 0
[   93.057169][ T7239] __nla_validate_parse: 14 callbacks suppressed
[   93.057181][ T7239] netlink: 132 bytes leftover after parsing attributes in process `syz.1.349'.
[   93.433410][   T10] IPVS: starting estimator thread 0...
[   93.478280][ T7263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.356'.
[   93.501566][   T33] audit: type=1800 audit(1752510805.385:4): pid=7263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.356" name="blkio.bfq.time_recursive" dev="tmpfs" ino=717 res=0 errno=0
[   93.521731][ T7260] IPVS: using max 62 ests per chain, 148800 per kthread
[   93.706903][ T7278] netpci0: tun_chr_ioctl cmd 1074025681
[   93.737092][ T7278] netpci0: tun_chr_ioctl cmd 2148070673
[   94.317589][ T7307] netlink: 64 bytes leftover after parsing attributes in process `syz.1.368'.
[   94.364510][ T7307] netlink: 28 bytes leftover after parsing attributes in process `syz.1.368'.
[   94.367959][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'.
[   94.419939][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.371'.
[   94.665945][ T7324] xt_hashlimit: max too large, truncated to 1048576
[   94.916534][ T7345] bpq0: left promiscuous mode
[   94.918872][ T7345] bpq0: left allmulticast mode
[   95.028401][ T7344] netlink: 25 bytes leftover after parsing attributes in process `syz.2.380'.
[   95.326110][ T7360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.384'.
[   95.572083][ T2207] IPVS: starting estimator thread 0...
[   95.615648][ T7367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.680743][ T7369] IPVS: using max 63 ests per chain, 151200 per kthread
[   96.237194][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'.
[   96.492766][ T7392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.391'.
[   96.529948][ T7389] ip6erspan0: entered allmulticast mode
[   97.088510][ T7419] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551500)
[   97.092934][ T7419] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[   97.390141][ T7429] batadv_slave_1: entered promiscuous mode
[   97.458252][ T7428] batadv_slave_1: left promiscuous mode
[   98.100418][ T7447] netlink: 'syz.2.407': attribute type 4 has an invalid length.
[   98.132186][ T7447] __nla_validate_parse: 1 callbacks suppressed
[   98.132208][ T7447] netlink: 17 bytes leftover after parsing attributes in process `syz.2.407'.
[   98.178262][ T7450] netlink: 'syz.0.409': attribute type 4 has an invalid length.
[   99.035128][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'.
[   99.147096][ T7499] netlink: 48 bytes leftover after parsing attributes in process `syz.1.422'.
[   99.364624][ T7505] netlink: 48 bytes leftover after parsing attributes in process `syz.0.424'.
[  100.265687][ T7539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'.
[  100.374394][ T7539] hsr_slave_1 (unregistering): left promiscuous mode
[  100.737680][ T7562] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  101.424067][ T7615] nft_compat: unsupported protocol 0
[  101.590304][ T7625] netlink: 104 bytes leftover after parsing attributes in process `syz.0.453'.
[  102.121833][ T7637] netlink: 'syz.0.455': attribute type 4 has an invalid length.
[  102.295170][ T7652] netlink: 'syz.2.459': attribute type 4 has an invalid length.
[  102.407768][ T7665] netlink: 68 bytes leftover after parsing attributes in process `syz.1.460'.
[  102.442024][ T7665] netlink: 48 bytes leftover after parsing attributes in process `syz.1.460'.
[  102.619902][ T7668] bpq0: entered promiscuous mode
[  102.623333][ T7668] bpq0: entered allmulticast mode
[  103.306173][ T7685] can: request_module (can-proto-0) failed.
[  103.447447][ T5218] Bluetooth: hci2: link tx timeout
[  103.449639][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  103.455172][ T5218] Bluetooth: hci2: link tx timeout
[  103.457089][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  103.459578][ T5218] Bluetooth: hci2: link tx timeout
[  103.461455][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  103.640299][ T7705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'.
[  103.643410][ T7700] nft_compat: unsupported protocol 0
[  103.643914][ T7705] netlink: 34 bytes leftover after parsing attributes in process `syz.0.471'.
[  104.025930][ T7724] netlink: 165 bytes leftover after parsing attributes in process `syz.1.477'.
[  104.737928][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'.
[  104.743095][ T7742] netlink: 5 bytes leftover after parsing attributes in process `syz.2.482'.
[  104.746760][ T7742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.482'.
[  104.811558][ T7745] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  105.382697][ T5218] Bluetooth: hci2: command 0x0405 tx timeout
[  105.648447][ T7778] netlink: 44 bytes leftover after parsing attributes in process `syz.1.492'.
[  105.778591][ T7782] bridge0: entered allmulticast mode
[  105.819225][ T7782] pim6reg: entered allmulticast mode
[  105.825723][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'.
[  105.828793][ T7782] bridge_slave_1: left allmulticast mode
[  105.831312][ T7782] bridge_slave_1: left promiscuous mode
[  105.835541][ T7782] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.841828][ T7784] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  105.856772][ T7782] bridge_slave_0: left allmulticast mode
[  105.859002][ T7782] bridge_slave_0: left promiscuous mode
[  105.862045][ T7782] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.923549][ T7782] bridge0 (unregistering): left allmulticast mode
[  105.991529][ T5218] Bluetooth: hci2: link tx timeout
[  105.993349][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  105.996809][ T5218] Bluetooth: hci2: link tx timeout
[  105.998694][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  106.004773][ T5218] Bluetooth: hci2: link tx timeout
[  106.006761][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  106.009641][ T5218] Bluetooth: hci2: link tx timeout
[  106.012950][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  106.016621][ T5218] Bluetooth: hci2: link tx timeout
[  106.018269][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  106.021283][ T5218] Bluetooth: hci2: link tx timeout
[  106.022982][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  106.025690][ T5218] Bluetooth: hci2: link tx timeout
[  106.027374][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  106.029901][ T5218] Bluetooth: hci2: link tx timeout
[  106.031984][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  106.040880][ T5218] Bluetooth: hci2: link tx timeout
[  106.042970][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  106.059567][ T5218] Bluetooth: hci2: link tx timeout
[  106.063455][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  106.076813][   T33] audit: type=1800 audit(1752510817.955:5): pid=7798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.497" name="blkio.bfq.time_recursive" dev="tmpfs" ino=767 res=0 errno=0
[  106.559137][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'.
[  106.690922][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'.
[  107.270704][ T7818] xt_hashlimit: size too large, truncated to 1048576
[  107.351364][ T7821] netlink: 'syz.1.504': attribute type 4 has an invalid length.
[  107.374831][ T7835] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  107.460765][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  107.479348][ T7840] netlink: 'syz.2.508': attribute type 1 has an invalid length.
[  107.489026][ T7842] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[  107.535544][ T7840] veth5: entered promiscuous mode
[  107.575897][ T7844] erspan0: entered allmulticast mode
[  108.500226][ T7901] syzkaller1: entered promiscuous mode
[  108.503447][ T7901] syzkaller1: entered allmulticast mode
[  108.670562][ T7908] __nla_validate_parse: 5 callbacks suppressed
[  108.673360][ T7908] netlink: 48 bytes leftover after parsing attributes in process `syz.0.530'.
[  108.994941][   T33] audit: type=1804 audit(1752510820.875:6): pid=7913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.532" name="/newroot/175/cgroup.controllers" dev="tmpfs" ino=909 res=1 errno=0
[  109.007346][   T33] audit: type=1800 audit(1752510820.875:7): pid=7913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.532" name="cgroup.controllers" dev="tmpfs" ino=909 res=0 errno=0
[  109.016598][ T7913] nft_compat: unsupported protocol 0
[  109.111505][ T7918] netlink: 'syz.2.534': attribute type 9 has an invalid length.
[  109.114689][ T7918] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.534'.
[  109.291189][ T7799] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  109.587905][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'.
[  109.590889][ T7940] netlink: 5 bytes leftover after parsing attributes in process `syz.2.541'.
[  109.593776][ T7940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.541'.
[  109.697721][ T7942] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  109.754407][ T5723] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  109.857871][ T7954] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.925441][ T7954] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.977780][ T7954] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.046288][ T7954] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.108877][ T7954] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.119425][ T7954] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.134107][ T7954] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.219625][ T7954] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.749679][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'.
[  110.758229][ T7996] netlink: 5 bytes leftover after parsing attributes in process `syz.1.557'.
[  110.763586][ T7996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.557'.
[  110.945690][ T8004] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9
[  111.034213][ T8009] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10
[  111.280350][ T8024] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  111.338129][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.464861][ T8045] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input11
[  111.637094][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'.
[  111.639994][ T8053] netlink: 5 bytes leftover after parsing attributes in process `syz.0.572'.
[  111.643457][ T8053] netlink: 'syz.0.572': attribute type 2 has an invalid length.
[  111.645937][ T8053] netlink: 'syz.0.572': attribute type 1 has an invalid length.
[  111.875922][ T8064] x_tables: duplicate underflow at hook 3
[  111.883540][ T8064] x_tables: duplicate underflow at hook 1
[  111.994291][ T8080] netlink: 'syz.2.579': attribute type 2 has an invalid length.
[  111.996960][ T8080] netlink: 'syz.2.579': attribute type 1 has an invalid length.
[  112.367055][ T8101] veth0_to_bridge: entered promiscuous mode
[  113.050005][ T8106] bridge0: entered allmulticast mode
[  113.101493][ T8097] veth0_to_bridge: left promiscuous mode
[  113.143954][ T8109] netlink: 'syz.0.587': attribute type 1 has an invalid length.
[  113.742872][ T8128] syzkaller1: entered promiscuous mode
[  113.745334][ T8128] syzkaller1: entered allmulticast mode
[  114.625933][ T8148] netlink: 'syz.0.597': attribute type 4 has an invalid length.
[  114.829429][ T8157] __nla_validate_parse: 42 callbacks suppressed
[  114.829449][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'.
[  114.851165][ T8157] netlink: 5 bytes leftover after parsing attributes in process `syz.0.598'.
[  114.854572][ T8157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.598'.
[  114.858106][ T8157] netlink: 'syz.0.598': attribute type 2 has an invalid length.
[  114.871643][ T8157] netlink: 'syz.0.598': attribute type 1 has an invalid length.
[  114.874078][ T8157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.598'.
[  114.954539][ T8166] netlink: 300 bytes leftover after parsing attributes in process `syz.0.602'.
[  114.972580][ T8164] netlink: 300 bytes leftover after parsing attributes in process `syz.0.602'.
[  115.032953][ T8168] bpq0: left promiscuous mode
[  115.034496][ T8168] bpq0: left allmulticast mode
[  115.055498][ T8171] netlink: 270 bytes leftover after parsing attributes in process `syz.0.603'.
[  115.133547][ T8155] netlink: 'syz.1.599': attribute type 4 has an invalid length.
[  115.749696][ T8217] netlink: 'syz.0.612': attribute type 29 has an invalid length.
[  115.757722][ T8217] netlink: 'syz.0.612': attribute type 29 has an invalid length.
[  116.029288][ T8224] netlink: 56 bytes leftover after parsing attributes in process `syz.1.616'.
[  116.332557][ T8239] netlink: 48 bytes leftover after parsing attributes in process `syz.0.619'.
[  116.397018][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.623'.
[  116.698767][ T8257] netlink: 'syz.2.625': attribute type 4 has an invalid length.
[  116.830251][ T8260] netlink: 'syz.1.627': attribute type 4 has an invalid length.
[  117.111122][ T8278] netlink: 'syz.2.630': attribute type 2 has an invalid length.
[  117.381934][ T8289] veth0_to_bridge: entered promiscuous mode
[  117.578738][ T8302] No such timeout policy "syz1"
[  118.100926][ T8288] veth0_to_bridge: left promiscuous mode
[  118.426890][ T8339] bpq0: entered allmulticast mode
[  118.468208][ T8341] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  118.522963][ T8351] validate_nla: 1 callbacks suppressed
[  118.522976][ T8351] netlink: 'syz.2.647': attribute type 3 has an invalid length.
[  118.658261][ T8354] bpq0: entered promiscuous mode
[  118.817344][ T8366] netlink: 'syz.2.654': attribute type 4 has an invalid length.
[  119.256455][ T8392] syzkaller0: refused to change device tx_queue_len
[  120.318763][ T8448] bond1: entered promiscuous mode
[  120.322837][ T8448] bond1: entered allmulticast mode
[  120.325373][ T8448] 8021q: adding VLAN 0 to HW filter on device bond1
[  120.734269][ T8470] __nla_validate_parse: 14 callbacks suppressed
[  120.734282][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'.
[  120.880020][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.897070][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.314732][ T8491] netlink: 64 bytes leftover after parsing attributes in process `syz.1.683'.
[  121.326426][ T8491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.683'.
[  121.497759][ T8501] bpq0: left promiscuous mode
[  121.499403][ T8501] bpq0: left allmulticast mode
[  121.510245][ T8502] netlink: 'syz.1.686': attribute type 1 has an invalid length.
[  121.975260][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.693'.
[  122.223412][ T8555] netlink: 80 bytes leftover after parsing attributes in process `syz.0.698'.
[  122.496188][ T8565] netlink: 'syz.0.701': attribute type 2 has an invalid length.
[  123.447833][ T8597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.707'.
[  123.616535][ T8601] netlink: 'syz.1.709': attribute type 4 has an invalid length.
[  124.010947][ T5827] Bluetooth: hci2: command 0x0405 tx timeout
[  124.327369][ T8623] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  124.370411][ T8623] netlink: 48 bytes leftover after parsing attributes in process `syz.1.715'.
[  124.377970][ T8624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'.
[  124.873302][ T8633] netlink: 'syz.1.718': attribute type 1 has an invalid length.
[  124.946766][ T8635] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  124.979969][ T8633] veth3: entered promiscuous mode
[  125.134222][ T8638] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input12
[  125.545964][ T8653] netlink: 24 bytes leftover after parsing attributes in process `syz.2.724'.
[  125.787030][ T8656] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input13
[  126.013960][ T8662] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input14
[  126.261701][ T8667] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.265200][ T8667] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.432910][ T8676] netlink: 'syz.1.732': attribute type 1 has an invalid length.
[  126.436313][ T8676] netlink: 'syz.1.732': attribute type 1 has an invalid length.
[  126.450715][ T8677] netlink: 'syz.1.732': attribute type 1 has an invalid length.
[  126.453311][ T8677] netlink: 'syz.1.732': attribute type 1 has an invalid length.
[  126.540883][ T8680] netlink: 'syz.1.733': attribute type 9 has an invalid length.
[  126.850099][ T8707] netlink: 32 bytes leftover after parsing attributes in process `syz.0.741'.
[  126.921008][ T8709] bpq0: entered allmulticast mode
[  127.055109][ T7799] Bluetooth: hci2: command 0x0405 tx timeout
[  127.618750][ T8734] ip6tnl1: entered promiscuous mode
[  127.709690][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'.
[  127.746309][ T8737] bpq0: left allmulticast mode
[  128.728114][ T8765] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input15
[  128.865021][ T8768] netlink: 224 bytes leftover after parsing attributes in process `syz.2.759'.
[  128.872644][ T8768] netlink: 224 bytes leftover after parsing attributes in process `syz.2.759'.
[  128.879688][ T8768] netlink: 224 bytes leftover after parsing attributes in process `syz.2.759'.
[  128.890326][ T8768] netlink: 224 bytes leftover after parsing attributes in process `syz.2.759'.
[  129.327173][ T8799] netlink: 'syz.2.766': attribute type 2 has an invalid length.
[  129.353380][ T8799] netlink: 'syz.2.766': attribute type 2 has an invalid length.
[  129.356470][ T8799] netlink: 'syz.2.766': attribute type 1 has an invalid length.
[  129.436392][ T8802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.768'.
[  129.471353][ T8803] netlink: 'syz.2.769': attribute type 11 has an invalid length.
[  129.477126][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.767'.
[  130.578903][ T8833] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input16
[  130.767939][ T8838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.778'.
[  130.771228][ T8838] netlink: 40 bytes leftover after parsing attributes in process `syz.1.778'.
[  131.183698][ T8854] netlink: 'syz.0.783': attribute type 4 has an invalid length.
[  132.398693][ T8939] netlink: 48 bytes leftover after parsing attributes in process `syz.2.804'.
[  132.413327][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  132.425937][ T8941] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  132.428780][ T8941] netlink: 'syz.1.806': attribute type 13 has an invalid length.
[  132.431508][ T8941] netlink: 36 bytes leftover after parsing attributes in process `syz.1.806'.
[  132.782091][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.811'.
[  132.812000][ T8961] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input17
[  132.915117][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.813'.
[  132.918677][ T8964] netlink: 32 bytes leftover after parsing attributes in process `syz.0.813'.
[  132.922297][ T8967] netlink: 20 bytes leftover after parsing attributes in process `syz.1.814'.
[  132.945552][ T8964] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input18
[  133.045770][ T8973] pimreg3: entered allmulticast mode
[  133.799642][ T8968] pimreg3: left allmulticast mode
[  133.926160][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.825'.
[  133.984516][ T8997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.824'.
[  133.984563][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.825'.
[  134.341521][ T9024] netlink: 168 bytes leftover after parsing attributes in process `syz.0.831'.
[  134.660055][ T9051] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input19
[  137.094478][ T9061] syz.0.841: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  137.102516][ T9061] CPU: 0 UID: 0 PID: 9061 Comm: syz.0.841 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  137.102532][ T9061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  137.102538][ T9061] Call Trace:
[  137.102542][ T9061]  <TASK>
[  137.102547][ T9061]  dump_stack_lvl+0x189/0x250
[  137.102592][ T9061]  ? __pfx_dump_stack_lvl+0x10/0x10
[  137.102603][ T9061]  ? __pfx__printk+0x10/0x10
[  137.102614][ T9061]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  137.102627][ T9061]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  137.102637][ T9061]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  137.102649][ T9061]  warn_alloc+0x214/0x310
[  137.102665][ T9061]  ? __pfx_warn_alloc+0x10/0x10
[  137.102679][ T9061]  ? __get_vm_area_node+0x28f/0x300
[  137.102691][ T9061]  ? xskq_create+0xbf/0x170
[  137.102707][ T9061]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  137.102731][ T9061]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  137.102744][ T9061]  ? __kasan_kmalloc+0x93/0xb0
[  137.102756][ T9061]  vmalloc_user_noprof+0xad/0xf0
[  137.102765][ T9061]  ? xskq_create+0xbf/0x170
[  137.102776][ T9061]  xskq_create+0xbf/0x170
[  137.102789][ T9061]  xsk_init_queue+0xb0/0x110
[  137.102801][ T9061]  xsk_setsockopt+0x4de/0x710
[  137.102813][ T9061]  ? __pfx_xsk_setsockopt+0x10/0x10
[  137.102826][ T9061]  ? aa_sock_opt_perm+0x74/0x110
[  137.102840][ T9061]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  137.102866][ T9061]  ? __pfx_xsk_setsockopt+0x10/0x10
[  137.102878][ T9061]  do_sock_setsockopt+0x25a/0x3e0
[  137.102892][ T9061]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  137.102903][ T9061]  ? __fget_files+0x2a/0x420
[  137.102918][ T9061]  __x64_sys_setsockopt+0x18b/0x220
[  137.102930][ T9061]  do_syscall_64+0xfa/0x3b0
[  137.102938][ T9061]  ? lockdep_hardirqs_on+0x9c/0x150
[  137.102951][ T9061]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.102958][ T9061]  ? exc_page_fault+0x9f/0xf0
[  137.102970][ T9061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.102978][ T9061] RIP: 0033:0x7f636898e929
[  137.102987][ T9061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  137.102994][ T9061] RSP: 002b:00007f636974a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  137.103004][ T9061] RAX: ffffffffffffffda RBX: 00007f6368bb5fa0 RCX: 00007f636898e929
[  137.103009][ T9061] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005
[  137.103014][ T9061] RBP: 00007f6368a10b39 R08: 0000000000000004 R09: 0000000000000000
[  137.103019][ T9061] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  137.103023][ T9061] R13: 0000000000000000 R14: 00007f6368bb5fa0 R15: 00007fffa1aaa9b8
[  137.103036][ T9061]  </TASK>
[  137.103059][ T9061] Mem-Info:
[  137.189067][ T9061] active_anon:4544 inactive_anon:0 isolated_anon:0
[  137.189067][ T9061]  active_file:1146 inactive_file:38233 isolated_file:0
[  137.189067][ T9061]  unevictable:1768 dirty:166 writeback:0
[  137.189067][ T9061]  slab_reclaimable:9461 slab_unreclaimable:68874
[  137.189067][ T9061]  mapped:18005 shmem:2452 pagetables:1106
[  137.189067][ T9061]  sec_pagetables:0 bounce:0
[  137.189067][ T9061]  kernel_misc_reclaimable:0
[  137.189067][ T9061]  free:281787 free_pcp:22305 free_cma:0
[  137.202587][ T9061] Node 0 active_anon:6620kB inactive_anon:0kB active_file:3928kB inactive_file:22628kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29408kB dirty:524kB writeback:0kB shmem:4636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6880kB pagetables:1724kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  137.220120][ T9061] Node 1 active_anon:11556kB inactive_anon:0kB active_file:656kB inactive_file:130304kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42612kB dirty:140kB writeback:0kB shmem:5172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4592kB pagetables:2700kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  137.230296][ T9061] Node 0 DMA free:14980kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:380kB local_pcp:380kB free_cma:0kB
[  137.240862][ T9061] lowmem_reserve[]: 0 812 812 812 812
[  137.242621][ T9061] Node 0 DMA32 free:338152kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6688kB inactive_anon:0kB active_file:3928kB inactive_file:22628kB unevictable:3536kB writepending:524kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:30556kB local_pcp:12856kB free_cma:0kB
[  137.252462][ T9061] lowmem_reserve[]: 0 0 0 0 0
[  137.253990][ T9061] Node 1 DMA32 free:437868kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:136kB inactive_file:8kB unevictable:0kB writepending:76kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:18236kB local_pcp:9896kB free_cma:0kB
[  137.280694][ T9061] lowmem_reserve[]: 0 0 854 854 854
[  137.282399][ T9061] Node 1 Normal free:335828kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11480kB inactive_anon:0kB active_file:520kB inactive_file:130296kB unevictable:3536kB writepending:64kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:40356kB local_pcp:17516kB free_cma:0kB
[  137.298673][ T9074] netlink: 'syz.2.844': attribute type 29 has an invalid length.
[  137.319058][ T9061] lowmem_reserve[]: 0 0 0 0 0
[  137.320856][ T9061] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (U) = 14980kB
[  137.325459][ T9061] Node 0 DMA32: 322*4kB (UME) 660*8kB (UME) 188*16kB (UME) 496*32kB (UME) 190*64kB (UME) 108*128kB (UME) 87*256kB (UME) 59*512kB (UM) 41*1024kB (UM) 20*2048kB (UM) 37*4096kB (UM) = 338408kB
[  137.339319][ T9061] Node 1 DMA32: 135*4kB (U) 126*8kB (UM) 120*16kB (U) 135*32kB (UE) 124*64kB (U) 122*128kB (UM) 74*256kB (UM) 111*512kB (UE) 105*1024kB (UE) 3*2048kB (UME) 53*4096kB (M) = 437868kB
[  137.346849][ T9061] Node 1 Normal: 1285*4kB (UM) 616*8kB (UME) 538*16kB (UM) 620*32kB (UME) 400*64kB (UM) 241*128kB (UME) 195*256kB (UM) 141*512kB (UM) 116*1024kB (UM) 0*2048kB 0*4096kB = 335860kB
[  137.353110][ T9061] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  137.377217][ T9061] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  137.380207][ T9061] 41831 total pagecache pages
[  137.400758][ T9061] 0 pages in swap cache
[  137.402136][ T9061] Free swap  = 124996kB
[  137.403455][ T9061] Total swap = 124996kB
[  137.404776][ T9061] 786301 pages RAM
[  137.405935][ T9061] 0 pages HighMem/MovableOnly
[  137.407417][ T9061] 241085 pages reserved
[  137.408737][ T9061] 0 pages cma reserved
[  137.822040][ T9101] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING
[  138.351687][ T9119] __nla_validate_parse: 3 callbacks suppressed
[  138.351704][ T9119] netlink: 48 bytes leftover after parsing attributes in process `syz.0.853'.
[  138.567732][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.858'.
[  138.690170][ T9135] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  139.632816][ T9176] vlan2: entered promiscuous mode
[  139.683174][ T9182] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  139.842806][ T9194] netlink: 'syz.0.877': attribute type 1 has an invalid length.
[  139.845205][ T9194] netlink: 'syz.0.877': attribute type 1 has an invalid length.
[  139.939718][ T9204] netlink: 'syz.0.880': attribute type 4 has an invalid length.
[  139.962836][ T9206] nft_compat: unsupported protocol 0
[  140.008714][ T9212] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  140.014911][ T9212] macsec1: entered promiscuous mode
[  140.016742][ T9212] macsec1: entered allmulticast mode
[  140.022141][ T9212] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  140.661309][ T9225] can: request_module (can-proto-0) failed.
[  140.664806][ T9225] netlink: 16 bytes leftover after parsing attributes in process `syz.2.886'.
[  141.227640][ T9232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.889'.
[  141.712997][ T9273] 8021q: VLANs not supported on vxcan1
[  142.040498][ T9300] bpq0: entered promiscuous mode
[  142.050270][ T9300] bpq0: entered allmulticast mode
[  142.370400][ T9321] netlink: 'syz.1.916': attribute type 8 has an invalid length.
[  142.831263][ T9340] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input20
[  143.207181][ T9354] netlink: 56 bytes leftover after parsing attributes in process `syz.0.928'.
[  143.318400][ T9358] nft_compat: unsupported protocol 0
[  143.458074][ T9376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.933'.
[  143.464470][ T9377] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input21
[  144.142157][ T9390] netlink: 'syz.1.937': attribute type 4 has an invalid length.
[  144.173385][ T9402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.940'.
[  144.179988][ T9402] vlan2: entered promiscuous mode
[  144.185130][ T9402] batadv0: entered promiscuous mode
[  144.319872][ T9409] netlink: 14 bytes leftover after parsing attributes in process `syz.0.943'.
[  144.380914][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.944'.
[  144.406431][ T9409] bond0 (unregistering): (slave c@): Releasing backup interface
[  144.412678][ T9409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.416871][ T9409] bond0 (unregistering): Released all slaves
[  144.441216][ T9411] 8021q: adding VLAN 0 to HW filter on device team1
[  144.851585][ T9441] netlink: 'syz.2.951': attribute type 195 has an invalid length.
[  145.945679][ T9469] nbd: must specify at least one socket
[  146.380408][ T9488] netlink: 48 bytes leftover after parsing attributes in process `syz.0.964'.
[  146.483685][ T9494] 8021q: VLANs not supported on wg1
[  146.894948][ T9518] netlink: 'syz.2.972': attribute type 1 has an invalid length.
[  146.943260][ T9518] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  146.955129][ T9518] bridge_slave_0: left allmulticast mode
[  146.957111][ T9518] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.989630][ T9518] bridge_slave_1: left allmulticast mode
[  146.992788][ T9518] bridge_slave_1: left promiscuous mode
[  146.994881][ T9518] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.018079][ T9518] bond0: (slave bond_slave_0): Releasing backup interface
[  147.040331][ T9518] bond0: (slave bond_slave_1): Releasing backup interface
[  147.063053][ T9518] team0: Port device team_slave_0 removed
[  147.078244][ T9518] team0: Port device team_slave_1 removed
[  147.080949][ T9518] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.083576][ T9518] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.089140][ T9518] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.092825][ T9518] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.103799][ T9518] bond2: (slave ip6gretap1): Releasing backup interface
[  147.243488][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'.
[  147.253644][ T9526] x_tables: duplicate underflow at hook 3
[  147.256085][ T9526] x_tables: duplicate underflow at hook 3
[  147.258429][ T9526] x_tables: duplicate underflow at hook 3
[  147.301497][ T9526] x_tables: duplicate underflow at hook 3
[  147.303876][ T9526] x_tables: duplicate underflow at hook 3
[  147.306135][ T9526] x_tables: duplicate underflow at hook 3
[  147.308509][ T9526] x_tables: duplicate underflow at hook 3
[  147.352723][ T9526] x_tables: duplicate underflow at hook 3
[  147.358850][ T9526] x_tables: duplicate underflow at hook 3
[  147.362132][ T9526] x_tables: duplicate underflow at hook 3
[  147.394527][ T9530] tc_dump_action: action bad kind
[  147.471527][ T9535] netlink: 'syz.2.975': attribute type 11 has an invalid length.
[  147.474120][ T9535] netlink: 224 bytes leftover after parsing attributes in process `syz.2.975'.
[  147.759299][ T9542] netlink: 48 bytes leftover after parsing attributes in process `syz.0.978'.
[  147.951189][ T9550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.979'.
[  148.030325][ T9554] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.147031][ T9556] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  148.710262][ T9564] vlan2: entered promiscuous mode
[  149.024567][ T2207] tipc: Node number set to 1990428353
[  149.292358][ T9573] netlink: 'syz.2.988': attribute type 4 has an invalid length.
[  149.785866][ T9606] netlink: 'syz.0.997': attribute type 3 has an invalid length.
[  149.793910][ T9606] netlink: 'syz.0.997': attribute type 1 has an invalid length.
[  149.801235][ T9606] netlink: 220 bytes leftover after parsing attributes in process `syz.0.997'.
[  150.925528][ T9622] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  151.618730][ T9655] netlink: 'syz.0.1011': attribute type 4 has an invalid length.
[  151.753800][ T9661] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1012'.
[  151.759366][ T9661] trusted_key: syz.0.1012 sent an empty control message without MSG_MORE.
[  151.853984][ T9665] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1014'.
[  151.854380][ T9666] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1014'.
[  151.928921][ T9669] nft_compat: unsupported protocol 0
[  152.091830][ T7799] Bluetooth: hci1: command 0x0401 tx timeout
[  152.350026][ T9688] bpq0: left promiscuous mode
[  152.806558][ T9698] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1021'.
[  153.171216][ T9712] netlink: 'syz.0.1028': attribute type 4 has an invalid length.
[  153.406866][ T9733] No such timeout policy "syz0"
[  153.657234][ T9751] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1039'.
[  154.067169][ T9766] 8021q: adding VLAN 0 to HW filter on device batadv1
[  154.085559][ T9766] team0: Port device batadv1 added
[  154.147326][ T9773] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1045'.
[  154.350492][ T9790] bpq0: left allmulticast mode
[  154.426170][ T9793] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1051'.
[  154.578016][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1055'.
[  154.597851][ T9803] netlink: 'syz.1.1054': attribute type 8 has an invalid length.
[  155.047790][ T9813] netlink: 'syz.0.1059': attribute type 3 has an invalid length.
[  155.087126][ T9813] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.163178][ T9813] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.227119][ T9813] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.281726][ T9813] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.335518][ T9813] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.345100][ T9813] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.354149][ T9813] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.370852][ T9813] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.403171][ T9817] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1060'.
[  155.832323][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'.
[  155.849941][ T9847] netlink: 'syz.2.1066': attribute type 1 has an invalid length.
[  155.859674][ T9847] netlink: 'syz.2.1066': attribute type 2 has an invalid length.
[  155.900290][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1069'.
[  156.496188][ T9862] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.385916][ T9871] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1076'.
[  157.433717][ T5827] Bluetooth: hci2: link tx timeout
[  157.435499][ T5827] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  157.439788][ T5827] Bluetooth: hci2: link tx timeout
[  157.441717][ T5827] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  157.444458][ T5827] Bluetooth: hci2: link tx timeout
[  157.446257][ T5827] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  157.598068][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1077'.
[  157.741055][ T9882] netlink: 'syz.2.1080': attribute type 1 has an invalid length.
[  157.747742][ T9882] netlink: 'syz.2.1080': attribute type 2 has an invalid length.
[  157.754365][ T9882] netlink: 'syz.2.1080': attribute type 1 has an invalid length.
[  157.757585][ T9882] netlink: 'syz.2.1080': attribute type 2 has an invalid length.
[  157.948470][ T9884] netlink: 'syz.2.1081': attribute type 4 has an invalid length.
[  158.049689][ T9893] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1083'.
[  158.055489][ T9893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1083'.
[  158.058984][ T9893] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1083'.
[  158.063884][ T9893] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1083'.
[  158.228191][ T9900] bpq0: entered allmulticast mode
[  158.305020][ T9902] bond_slave_1: entered allmulticast mode
[  158.595780][ T9922] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  158.599600][ T9922] syzkaller0: entered promiscuous mode
[  158.603175][ T9922] syzkaller0: entered allmulticast mode
[  158.678916][ T9928] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  158.700477][ T9928] tipc: Resetting bearer <eth:syzkaller0>
[  159.031506][ T9946] netlink: 'syz.1.1098': attribute type 21 has an invalid length.
[  159.034610][ T9946] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1098'.
[  159.451800][ T5827] Bluetooth: hci2: command 0x0405 tx timeout
[  160.917026][T10016] __nla_validate_parse: 1 callbacks suppressed
[  160.917037][T10016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1108'.
[  161.024248][T10023] netlink: 'syz.0.1110': attribute type 21 has an invalid length.
[  161.053582][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1109'.
[  161.060446][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1109'.
[  161.146001][T10029] netlink: 'syz.0.1111': attribute type 4 has an invalid length.
[  162.834030][T10074] bpq0: left allmulticast mode
[  164.778126][T10124] netlink: 'syz.2.1137': attribute type 4 has an invalid length.
[  164.787768][T10124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1137'.
[  164.844282][T10128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1138'.
[  164.848016][T10128] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1138'.
[  164.855831][T10128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1138'.
[  164.859542][T10128] netlink: 'syz.2.1138': attribute type 2 has an invalid length.
[  164.862966][T10128] netlink: 'syz.2.1138': attribute type 1 has an invalid length.
[  164.866881][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'.
[  165.068904][T10140] bpq0: entered allmulticast mode
[  165.356807][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1146'.
[  165.410881][T10154] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1146'.
[  165.414618][T10154] netlink: 'syz.0.1146': attribute type 2 has an invalid length.
[  165.417852][T10154] netlink: 'syz.0.1146': attribute type 1 has an invalid length.
[  165.925621][T10160] __nla_validate_parse: 2 callbacks suppressed
[  165.925639][T10160] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1148'.
[  166.148511][T10163] xt_l2tp: v2 tid > 0xffff: 4294967295
[  166.615507][T10178] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1154'.
[  166.996264][T10188] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1157'.
[  167.130733][ T5827] Bluetooth: hci2: command 0x0405 tx timeout
[  167.346786][T10213] bpq0: left allmulticast mode
[  167.825583][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'.
[  167.835642][T10239] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  167.838566][T10239] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  167.963344][T10241] netlink: 'syz.2.1171': attribute type 4 has an invalid length.
[  168.469202][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1172'.
[  168.473102][T10248] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1172'.
[  168.476549][T10248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1172'.
[  168.479706][T10248] netlink: 'syz.1.1172': attribute type 2 has an invalid length.
[  168.482907][T10248] netlink: 'syz.1.1172': attribute type 1 has an invalid length.
[  168.485395][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1172'.
[  168.528281][T10251] netlink: 136784 bytes leftover after parsing attributes in process `syz.1.1173'.
[  168.531529][T10251] netlink: zone id is out of range
[  168.533367][T10251] netlink: zone id is out of range
[  168.535139][T10251] netlink: zone id is out of range
[  168.536875][T10251] netlink: zone id is out of range
[  168.538552][T10251] netlink: zone id is out of range
[  168.540332][T10251] netlink: zone id is out of range
[  168.546475][T10251] netlink: zone id is out of range
[  168.548787][T10251] netlink: zone id is out of range
[  168.552439][T10251] netlink: zone id is out of range
[  168.556757][T10251] netlink: zone id is out of range
[  168.713328][T10263] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1176'.
[  168.824367][T10263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  168.830184][T10263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  168.835196][T10263] bond0 (unregistering): Released all slaves
[  168.910205][T10274] netlink: 'syz.2.1179': attribute type 2 has an invalid length.
[  168.919112][T10274] netlink: 'syz.2.1179': attribute type 1 has an invalid length.
[  169.016048][T10280] vlan2: entered promiscuous mode
[  169.055635][   T33] audit: type=1107 audit(1752510880.925:8): pid=10281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='VnaC)C;RWoX
[  169.055635][   T33] `_e֔&L98U~5 G3덊E!w>!og<2.T=f5D(5o\΢Ol)Z/=.}+{FX'
[  169.324731][T10298] netlink: 'syz.2.1187': attribute type 5 has an invalid length.
[  169.428515][T10301] bpq0: entered allmulticast mode
[  170.125192][T10314] veth0: entered promiscuous mode
[  170.127288][T10314] vlan2: entered promiscuous mode
[  172.175452][T10355] __nla_validate_parse: 7 callbacks suppressed
[  172.175463][T10355] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1203'.
[  172.737207][T10372] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1207'.
[  172.844427][T10375] bpq0: left allmulticast mode
[  172.875555][T10377] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1209'.
[  172.957077][T10381] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1210'.
[  173.336019][T10390] veth0: entered promiscuous mode
[  173.337836][T10390] vlan2: entered promiscuous mode
[  173.628021][T10392] netlink: 'syz.1.1215': attribute type 4 has an invalid length.
[  173.773462][T10402] netlink: 'syz.0.1217': attribute type 6 has an invalid length.
[  173.779235][T10402] netlink: 'syz.0.1217': attribute type 7 has an invalid length.
[  173.783014][T10402] netlink: 'syz.0.1217': attribute type 8 has an invalid length.
[  174.898399][T10432] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1223'.
[  174.921788][T10435] netlink: 4260 bytes leftover after parsing attributes in process `syz.0.1224'.
[  174.985317][T10437] netlink: 'syz.0.1225': attribute type 6 has an invalid length.
[  175.646673][T10445] erspan0: left allmulticast mode
[  175.657513][T10445] net_ratelimit: 4052 callbacks suppressed
[  175.657539][T10445] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  175.668778][T10445] netlink: 'syz.2.1227': attribute type 1 has an invalid length.
[  175.769783][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1229'.
[  175.774815][T10449] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1229'.
[  175.779807][T10449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1229'.
[  175.783070][T10449] netlink: 'syz.2.1229': attribute type 2 has an invalid length.
[  175.785597][T10449] netlink: 'syz.2.1229': attribute type 1 has an invalid length.
[  175.788086][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1229'.
[  176.477658][T10485] bridge2: the hash_elasticity option has been deprecated and is always 16
[  176.481710][T10486] Illegal XDP return value 16128 on prog  (id 475) dev syz_tun, expect packet loss!
[  176.486283][T10485] bridge2: entered allmulticast mode
[  177.619418][T10541] bpq0: entered allmulticast mode
[  177.869446][T10554] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  178.055714][T10567] __nla_validate_parse: 6 callbacks suppressed
[  178.055731][T10567] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1262'.
[  178.268429][T10580] netlink: 'syz.0.1265': attribute type 21 has an invalid length.
[  178.272556][T10581] netlink: 'syz.0.1265': attribute type 21 has an invalid length.
[  178.275856][T10581] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1265'.
[  178.279705][T10580] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1265'.
[  179.138231][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1266'.
[  179.149062][T10587] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1266'.
[  179.157870][T10587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1266'.
[  179.177750][T10587] netlink: 'syz.0.1266': attribute type 2 has an invalid length.
[  179.187852][T10587] netlink: 'syz.0.1266': attribute type 1 has an invalid length.
[  179.191278][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1266'.
[  180.127279][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1275'.
[  180.130492][T10626] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1275'.
[  180.136826][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1275'.
[  180.141342][T10626] netlink: 'syz.2.1275': attribute type 2 has an invalid length.
[  180.143751][T10626] netlink: 'syz.2.1275': attribute type 1 has an invalid length.
[  180.574512][ T7799] Bluetooth: hci1: command 0x0401 tx timeout
[  181.986959][T10680] IPv6: sit1: Disabled Multicast RS
[  181.990082][T10680] sit1: entered allmulticast mode
[  182.655904][T10710] tipc: Failed to remove unknown binding: 66,1,1/0:3164686136/3164686138
[  182.669595][T10710] tipc: Failed to remove unknown binding: 66,1,1/0:3164686136/3164686138
[  183.146857][T10716] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  183.170537][T10716] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  183.282944][T10716] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  183.288035][T10716] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  183.297936][T10716] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  183.301529][T10716] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  183.312540][T10725] __nla_validate_parse: 6 callbacks suppressed
[  183.312550][T10725] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1301'.
[  183.578680][T10734] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20004
[  184.993626][T10781] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1315'.
[  185.661635][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'.
[  185.680736][T10807] bpq0: left allmulticast mode
[  185.794690][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1324'.
[  185.834146][T10813] bpq0: entered allmulticast mode
[  186.223338][T10838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'.
[  186.226392][T10838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'.
[  186.229258][T10838] netlink: 'syz.0.1332': attribute type 30 has an invalid length.
[  186.674703][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1336'.
[  187.028615][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1339'.
[  187.365793][T10885] bpq0: left allmulticast mode
[  187.393789][T10889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1343'.
[  187.502170][T10900] netlink: 'syz.1.1347': attribute type 2 has an invalid length.
[  187.519599][T10900] xt_check_table_hooks: 55 callbacks suppressed
[  187.519640][T10900] x_tables: duplicate underflow at hook 2
[  187.642577][T10906] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1348'.
[  188.044248][T10909] netlink: 'syz.0.1349': attribute type 4 has an invalid length.
[  188.526460][T10948] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1356'.
[  188.567785][T10950] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1357'.
[  188.583198][T10950] vlan2: entered promiscuous mode
[  188.584934][T10950] veth1: entered promiscuous mode
[  188.879054][T10956] SET target dimension over the limit!
[  189.274817][T10987] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1371'.
[  189.423801][T11003] syzkaller0: entered promiscuous mode
[  189.425892][T11003] syzkaller0: entered allmulticast mode
[  189.799491][T11027] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1383'.
[  190.347859][T11056] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1391'.
[  190.410195][T11041] netlink: 'syz.0.1387': attribute type 4 has an invalid length.
[  191.768381][ T5855] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.774702][ T5855] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 38101 - 0
[  191.860254][ T5855] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.864458][ T5855] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 38101 - 0
[  191.943193][ T5855] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.961676][ T5855] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 38101 - 0
[  192.012391][ T5855] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.015717][ T5855] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 38101 - 0
[  192.166947][ T7799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  192.171505][ T7799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  192.175106][ T7799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  192.175138][ T5855] bridge_slave_1: left allmulticast mode
[  192.181645][ T7799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  192.185958][ T5855] bridge_slave_1: left promiscuous mode
[  192.185993][ T7799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  192.188373][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.206969][ T5855] bridge_slave_0: left promiscuous mode
[  192.210644][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.235248][ T5855] tipc: Resetting bearer <eth:syzkaller0>
[  192.325058][ T5855] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface
[  192.601467][ T5855] tipc: Disabling bearer <eth:syzkaller0>
[  192.688686][T11118] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1409'.
[  192.706672][ T5855] bond1 (unregistering): Released all slaves
[  192.717290][ T5855] bond2 (unregistering): Released all slaves
[  192.960596][T11118] bond0 (unregistering): Released all slaves
[  192.992364][ T5855] tipc: Left network mode
[  193.386474][T11132] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1412'.
[  193.509457][ T5855] mac80211_hwsim hwsim4 wlan0 (unregistering): left allmulticast mode
[  193.577619][T11110] chnl_net:caif_netlink_parms(): no params data found
[  193.645450][ T5855] hsr_slave_0: left promiscuous mode
[  193.647748][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  193.650063][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_0
[  193.654245][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  193.657463][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_1
[  193.686330][ T5855] veth1_macvtap: left promiscuous mode
[  193.688420][ T5855] veth0_macvtap: left promiscuous mode
[  193.690229][ T5855] veth1_vlan: left promiscuous mode
[  193.702046][ T5855] veth0_vlan: left promiscuous mode
[  194.247355][ T5855] team0 (unregistering): Port device team_slave_1 removed
[  194.250866][ T7799] Bluetooth: hci1: command tx timeout
[  194.281138][ T5855] team0 (unregistering): Port device team_slave_0 removed
[  194.752424][T11110] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.755130][T11110] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.758264][T11110] bridge_slave_0: entered allmulticast mode
[  194.768123][T11110] bridge_slave_0: entered promiscuous mode
[  194.777557][T11110] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.779890][T11110] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.782568][T11110] bridge_slave_1: entered allmulticast mode
[  194.785667][T11110] bridge_slave_1: entered promiscuous mode
[  194.816924][T11110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  194.822448][T11110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.879194][T11110] team0: Port device team_slave_0 added
[  194.884986][T11110] team0: Port device team_slave_1 added
[  194.926166][T11110] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.929122][T11110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.949505][T11110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  194.959266][T11110] batman_adv: batadv0: Adding interface: batadv_slave_1
[  194.962304][T11110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.971360][T11110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.031635][ T5855] IPVS: stop unused estimator thread 0...
[  195.045474][T11110] hsr_slave_0: entered promiscuous mode
[  195.048225][T11110] hsr_slave_1: entered promiscuous mode
[  195.054823][T11110] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  195.057539][T11110] Cannot create hsr debugfs directory
[  195.120375][T11152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1419'.
[  195.139161][T11152] vlan2: entered promiscuous mode
[  195.142246][T11152] @: entered promiscuous mode
[  195.281675][T11165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1421'.
[  195.383442][T11171] netlink: 'syz.2.1424': attribute type 1 has an invalid length.
[  195.385954][T11171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1424'.
[  195.656658][T11181] syzkaller1: entered promiscuous mode
[  195.658949][T11181] syzkaller1: entered allmulticast mode
[  195.818041][T11110] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  195.823251][T11110] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  195.829563][T11110] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  195.838734][T11110] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  195.911187][T11196] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1429'.
[  195.914666][T11110] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.932577][T11110] 8021q: adding VLAN 0 to HW filter on device team0
[  195.942191][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.945089][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.963193][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.965854][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.128963][T11213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'.
[  196.132535][T11213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1432'.
[  196.144538][T11110] 8021q: adding VLAN 0 to HW filter on device batadv0
[  196.176368][T11110] veth0_vlan: entered promiscuous mode
[  196.189424][T11110] veth1_vlan: entered promiscuous mode
[  196.196013][T11215] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1433'.
[  196.230930][T11110] veth0_macvtap: entered promiscuous mode
[  196.237382][T11110] veth1_macvtap: entered promiscuous mode
[  196.257054][T11110] batman_adv: batadv0: Interface activated: batadv_slave_0
[  196.268716][T11110] batman_adv: batadv0: Interface activated: batadv_slave_1
[  196.277010][T11110] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.280371][T11110] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.284533][T11110] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.288475][T11110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.331498][ T7799] Bluetooth: hci1: command tx timeout
[  196.384368][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.387481][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.422625][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.425705][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.597008][T11224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1436'.
[  196.685082][T11226] nft_compat: unsupported protocol 0
[  196.956638][ T3701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.960378][ T3701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.215458][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1443'.
[  197.218978][T11250] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1443'.
[  197.223267][T11250] netlink: 'syz.2.1443': attribute type 2 has an invalid length.
[  197.226481][T11250] netlink: 'syz.2.1443': attribute type 1 has an invalid length.
[  198.239742][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.531693][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  198.535016][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  198.538250][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  198.542531][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  198.546597][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  198.748478][T11275] chnl_net:caif_netlink_parms(): no params data found
[  198.763674][T11282] netlink: 'syz.0.1450': attribute type 2 has an invalid length.
[  198.766464][T11282] netlink: 'syz.0.1450': attribute type 1 has an invalid length.
[  198.880124][T11275] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.882856][T11275] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.885117][T11275] bridge_slave_0: entered allmulticast mode
[  198.888355][T11275] bridge_slave_0: entered promiscuous mode
[  198.898615][T11275] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.901341][T11275] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.903584][T11275] bridge_slave_1: entered allmulticast mode
[  198.906429][T11275] bridge_slave_1: entered promiscuous mode
[  198.941986][T11275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.946706][T11275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.987050][T11298] netlink: 'syz.0.1455': attribute type 11 has an invalid length.
[  198.988398][T11275] team0: Port device team_slave_0 added
[  198.989604][T11298] netlink: 'syz.0.1455': attribute type 11 has an invalid length.
[  198.995679][T11275] team0: Port device team_slave_1 added
[  199.023206][T11275] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.025348][T11275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.033888][T11275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.039163][T11275] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.042032][T11275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.049787][T11275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.093854][T11275] hsr_slave_0: entered promiscuous mode
[  199.096696][T11275] hsr_slave_1: entered promiscuous mode
[  199.099159][T11275] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  199.101876][T11275] Cannot create hsr debugfs directory
[  199.809303][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.839404][T11305] netlink: 'syz.2.1456': attribute type 5 has an invalid length.
[  199.860468][T11305] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input22
[  199.885949][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.975072][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.996659][T11312] netlink: 'syz.2.1458': attribute type 2 has an invalid length.
[  199.999786][T11312] netlink: 'syz.2.1458': attribute type 1 has an invalid length.
[  200.136658][   T12] bridge_slave_1: left allmulticast mode
[  200.138872][   T12] bridge_slave_1: left promiscuous mode
[  200.144837][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.164386][   T12] bridge_slave_0: left allmulticast mode
[  200.166712][   T12] bridge_slave_0: left promiscuous mode
[  200.170322][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.480392][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.487936][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.491905][   T12] bond0 (unregistering): Released all slaves
[  200.578577][ T5827] Bluetooth: hci1: command tx timeout
[  200.649282][T11326] __nla_validate_parse: 14 callbacks suppressed
[  200.649303][T11326] netlink: 732 bytes leftover after parsing attributes in process `syz.0.1462'.
[  200.655543][T11326] netlink: 732 bytes leftover after parsing attributes in process `syz.0.1462'.
[  200.786135][T11334] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1466'.
[  200.839294][   T12] hsr_slave_0: left promiscuous mode
[  200.841563][   T12] hsr_slave_1: left promiscuous mode
[  200.843628][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.845947][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.848355][   T33] audit: type=1800 audit(1752510912.725:9): pid=11338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1467" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2583 res=0 errno=0
[  200.863667][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  200.866267][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.872519][   T33] audit: type=1800 audit(1752510912.755:10): pid=11338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1467" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2583 res=0 errno=0
[  200.886992][   T12] veth1_macvtap: left promiscuous mode
[  200.888816][   T12] veth0_macvtap: left promiscuous mode
[  200.892710][   T12] veth1_vlan: left promiscuous mode
[  200.894437][   T12] veth0_vlan: left promiscuous mode
[  201.258280][   T12] team0 (unregistering): Port device team_slave_1 removed
[  201.285136][   T12] team0 (unregistering): Port device team_slave_0 removed
[  201.672408][T11345] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1469'.
[  201.675258][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1469'.
[  201.684181][T11345] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  201.692778][T11275] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  201.699448][T11275] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  201.726191][T11275] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  201.733540][T11275] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  201.814539][T11275] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.833750][T11275] 8021q: adding VLAN 0 to HW filter on device team0
[  201.839550][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.841839][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.848849][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.851166][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.975294][T11275] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.018470][T11275] veth0_vlan: entered promiscuous mode
[  202.027657][T11275] veth1_vlan: entered promiscuous mode
[  202.046167][T11275] veth0_macvtap: entered promiscuous mode
[  202.050249][T11275] veth1_macvtap: entered promiscuous mode
[  202.062380][T11275] batman_adv: batadv0: Interface activated: batadv_slave_0
[  202.069597][T11275] batman_adv: batadv0: Interface activated: batadv_slave_1
[  202.076182][T11275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  202.078863][T11275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  202.083000][T11275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  202.085610][T11275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.135167][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.138267][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.161609][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.164309][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.908806][T11409] delete_channel: no stack
[  203.968957][ T7516] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.443413][ T7799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  204.451138][ T7799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  204.455137][ T7799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  204.460087][ T7799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  204.465108][ T7799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  204.561686][T11426] netlink: 'syz.2.1487': attribute type 4 has an invalid length.
[  204.734313][T11431] infiniband syz0: set down
[  204.737018][T11431] infiniband syz0: added ipvlan1
[  204.740066][T11431] syz0: rxe_create_cq: returned err = -12
[  204.742555][T11431] infiniband syz0: Couldn't create ib_mad CQ
[  204.744543][T11431] infiniband syz0: Couldn't open port 1
[  204.758384][T11432] chnl_net:caif_netlink_parms(): no params data found
[  204.760530][T11431] RDS/IB: syz0: added
[  204.763325][T11431] smc: adding ib device syz0 with port count 1
[  204.765365][T11431] smc:    ib device syz0 port 1 has pnetid 
[  205.252776][T11450] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  205.256183][T11450] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  205.259497][T11450] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  205.263711][T11450] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  205.329220][T11432] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.333010][T11432] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.336027][T11432] bridge_slave_0: entered allmulticast mode
[  205.340068][T11432] bridge_slave_0: entered promiscuous mode
[  205.345235][T11432] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.348125][T11432] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.351720][T11432] bridge_slave_1: entered allmulticast mode
[  205.356295][T11432] bridge_slave_1: entered promiscuous mode
[  205.394300][T11432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.401447][T11432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.443055][T11432] team0: Port device team_slave_0 added
[  205.448317][T11432] team0: Port device team_slave_1 added
[  205.495321][T11432] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.498333][T11432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.509158][T11432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.515883][T11432] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.518727][T11432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.529608][T11432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.579081][T11432] hsr_slave_0: entered promiscuous mode
[  205.582525][T11432] hsr_slave_1: entered promiscuous mode
[  205.585940][T11432] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  205.589001][T11432] Cannot create hsr debugfs directory
[  205.753790][ T7516] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.849165][ T7516] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.930264][ T7516] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.036466][T11461] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1491'.
[  206.074150][ T7516] bridge_slave_1: left allmulticast mode
[  206.076478][ T7516] bridge_slave_1: left promiscuous mode
[  206.078893][ T7516] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.088744][ T7516] bridge_slave_0: left allmulticast mode
[  206.094814][ T7516] bridge_slave_0: left promiscuous mode
[  206.097516][ T7516] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.216400][T11463] netlink: 'syz.0.1492': attribute type 1 has an invalid length.
[  206.400248][ T7516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  206.404949][ T7516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  206.408677][ T7516] bond0 (unregistering): Released all slaves
[  206.448837][T11463] 8021q: adding VLAN 0 to HW filter on device bond1
[  206.481457][T11464] veth5: entered promiscuous mode
[  206.488018][T11464] bond1: (slave veth5): Enslaving as an active interface with a down link
[  206.490973][ T5827] Bluetooth: hci1: command tx timeout
[  206.493637][T11465] erspan0: entered allmulticast mode
[  206.497648][T11465] bond1: (slave erspan0): making interface the new active one
[  206.509309][T11465] erspan0: entered promiscuous mode
[  206.513255][T11465] bond1: (slave erspan0): Enslaving as an active interface with an up link
[  206.839380][ T7516] hsr_slave_0: left promiscuous mode
[  206.849766][ T7516] hsr_slave_1: left promiscuous mode
[  206.853631][ T7516] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.855909][ T7516] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.858648][ T7516] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.861058][ T7516] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.873606][ T7516] veth1_macvtap: left promiscuous mode
[  206.875380][ T7516] veth0_macvtap: left promiscuous mode
[  206.877153][ T7516] veth1_vlan: left promiscuous mode
[  206.878816][ T7516] veth0_vlan: left promiscuous mode
[  207.178402][ T7516] team0 (unregistering): Port device team_slave_1 removed
[  207.207001][ T7516] team0 (unregistering): Port device team_slave_0 removed
[  207.499746][T11432] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  207.510186][T11432] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  207.539077][T11432] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  207.574007][T11432] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  207.677983][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1498'.
[  207.738193][T11501] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input23
[  207.783958][T11432] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.822983][T11432] 8021q: adding VLAN 0 to HW filter on device team0
[  207.898624][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.900850][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.905549][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.907917][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.976464][T11432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  208.166893][T11432] 8021q: adding VLAN 0 to HW filter on device batadv0
[  208.219389][T11432] veth0_vlan: entered promiscuous mode
[  208.226570][T11432] veth1_vlan: entered promiscuous mode
[  208.249859][T11517] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  208.257275][T11432] veth0_macvtap: entered promiscuous mode
[  208.265467][T11432] veth1_macvtap: entered promiscuous mode
[  208.268187][T11517] x_tables: duplicate underflow at hook 1
[  208.280154][T11432] batman_adv: batadv0: Interface activated: batadv_slave_0
[  208.295121][T11432] batman_adv: batadv0: Interface activated: batadv_slave_1
[  208.311996][T11432] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.315181][T11432] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.317944][T11432] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.323948][T11432] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.421257][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.423964][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.477802][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.480385][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.572742][ T7799] Bluetooth: hci1: command tx timeout
[  208.698487][T11533] x_tables: duplicate underflow at hook 1
[  208.705424][T11533] x_tables: duplicate underflow at hook 2
[  208.707570][T11533] x_tables: duplicate underflow at hook 2
[  208.729039][T11535] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1506'.
[  209.742893][T11562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1514'.
[  209.974953][T11575] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1517'.
[  210.534837][T11596] bpq0: entered allmulticast mode
[  210.881311][T11605] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1528'.
[  211.401736][T11613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1529'.
[  211.406260][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1529'.
[  211.738587][T11633] openvswitch: netlink: Key type 251 is out of range max 32
[  212.504918][T11656] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1540'.
[  212.509027][T11655] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1540'.
[  212.598635][T11661] netlink: 'syz.0.1542': attribute type 13 has an invalid length.
[  212.663851][T11665] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1542'.
[  212.892681][   T33] audit: type=1800 audit(1752510924.775:11): pid=11670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1544" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2769 res=0 errno=0
[  213.319829][T11676] nft_compat: unsupported protocol 0
[  214.393848][T11702] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1553'.
[  214.512585][T11710] x_tables: duplicate underflow at hook 3
[  214.639590][T11716] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1559'.
[  215.020341][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1560'.
[  215.918465][T11731] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1562'.
[  216.607399][T11740] netlink: 'syz.2.1565': attribute type 4 has an invalid length.
[  216.777907][T11755] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1570'.
[  217.087993][T11767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1573'.
[  217.120713][T11767] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1573'.
[  217.124323][T11767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1573'.
[  217.127704][T11767] netlink: 'syz.2.1573': attribute type 2 has an invalid length.
[  217.149577][T11767] netlink: 'syz.2.1573': attribute type 1 has an invalid length.
[  217.152253][T11767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1573'.
[  217.821551][   T13] erspan0: left promiscuous mode
[  218.100363][T11782] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1577'.
[  218.553359][T11791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1580'.
[  218.556134][T11791] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1580'.
[  218.558807][T11791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1580'.
[  218.561637][T11791] netlink: 'syz.2.1580': attribute type 2 has an invalid length.
[  218.564027][T11791] netlink: 'syz.2.1580': attribute type 1 has an invalid length.
[  218.566464][T11791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1580'.
[  219.510921][T11819] netlink: 'syz.2.1588': attribute type 2 has an invalid length.
[  219.513421][T11819] netlink: 'syz.2.1588': attribute type 1 has an invalid length.
[  219.592490][T11822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  219.932627][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  220.587822][T11838] bpq0: left allmulticast mode
[  220.599244][T11838] syzkaller1: entered allmulticast mode
[  221.415477][T11874] sctp: [Deprecated]: syz.2.1605 (pid 11874) Use of int in maxseg socket option.
[  221.415477][T11874] Use struct sctp_assoc_value instead
[  221.609815][T11891] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  221.738237][T11896] netlink: 'syz.0.1610': attribute type 4 has an invalid length.
[  222.714582][T11905] netlink: 'syz.0.1613': attribute type 4 has an invalid length.
[  223.036704][T11914] __nla_validate_parse: 14 callbacks suppressed
[  223.036720][T11914] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1614'.
[  223.751822][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'.
[  224.804251][T11977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1633'.
[  224.814673][T11977] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 54457 - 0
[  224.818019][T11977] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 54457 - 0
[  224.821611][T11977] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 54457 - 0
[  224.824970][T11977] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 54457 - 0
[  224.828383][T11977] geneve2: entered promiscuous mode
[  224.830515][T11977] geneve2: entered allmulticast mode
[  226.902051][T12008] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1642'.
[  227.032542][T12012] xt_hashlimit: size too large, truncated to 1048576
[  227.033781][T12010] xt_hashlimit: size too large, truncated to 1048576
[  228.187279][T12037] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1649'.
[  229.061864][T12042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  229.262931][T12057] nft_compat: unsupported protocol 0
[  229.339747][T12065] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1657'.
[  229.865595][T12088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  230.064604][T12093] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1665'.
[  230.485981][T12117] bpq0: entered promiscuous mode
[  230.488075][T12117] bpq0: entered allmulticast mode
[  230.607518][T12122] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1673'.
[  230.954202][T12127] netlink: 'syz.0.1674': attribute type 1 has an invalid length.
[  230.960477][T12127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1674'.
[  231.636434][T12142] netlink: 'syz.0.1679': attribute type 12 has an invalid length.
[  231.639611][T12142] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1679'.
[  232.482395][T12157] netlink: 'syz.0.1684': attribute type 4 has an invalid length.
[  232.486723][T12157] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.574967][T12162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1686'.
[  232.577962][T12162] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1686'.
[  232.582366][T12162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1686'.
[  232.585177][T12162] netlink: 'syz.0.1686': attribute type 2 has an invalid length.
[  232.587559][T12162] netlink: 'syz.0.1686': attribute type 1 has an invalid length.
[  232.589966][T12162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1686'.
[  233.531473][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  234.102732][T12195] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1697'.
[  235.352462][T12217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1703'.
[  235.359529][T12217] netlink: 'syz.0.1703': attribute type 4 has an invalid length.
[  235.603234][T12229] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  235.613400][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  236.996237][T12257] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1715'.
[  237.525790][T12277] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1722'.
[  238.947556][T12300] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1730'.
[  239.308352][T12307] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma?
[  240.036281][T12314] xt_hashlimit: size too large, truncated to 1048576
[  240.090284][T12315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1734'.
[  241.178034][T12334] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  241.181045][T12334] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  241.183698][T12334] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  241.186260][T12334] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  241.227395][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1740'.
[  241.245024][T12330] veth0_to_bridge: entered promiscuous mode
[  241.934390][T12329] veth0_to_bridge: left promiscuous mode
[  243.159364][T12369] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1752'.
[  244.149365][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1759'.
[  244.154797][T12390] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1759'.
[  244.157907][T12390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1759'.
[  244.161035][T12390] netlink: 'syz.2.1759': attribute type 2 has an invalid length.
[  244.164175][T12390] netlink: 'syz.2.1759': attribute type 1 has an invalid length.
[  244.166811][T12390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1759'.
[  244.830197][T12409] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1764'.
[  245.239673][T12411] openvswitch: netlink: IP tunnel dst address not specified
[  245.693385][T12414] netlink: 'syz.0.1766': attribute type 11 has an invalid length.
[  246.007566][T12418] netlink: 'syz.0.1767': attribute type 4 has an invalid length.
[  246.172322][T12425] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1768'.
[  246.820440][T12436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'.
[  246.826426][T12436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'.
[  247.022842][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1773'.
[  247.026597][T12444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1773'.
[  247.259649][T12459] IPv6: sit1: Disabled Multicast RS
[  247.978372][T12462] xt_l2tp: unknown flags: 10
[  248.012000][T12462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1778'.
[  248.362932][T12483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1784'.
[  248.471891][T12491] unknown channel width for channel at 909000KHz?
[  248.553424][ T5855] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.641877][ T5855] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.677536][T12495] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1788'.
[  248.741197][ T5855] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.804612][ T5855] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.939522][ T5855] bridge_slave_1: left allmulticast mode
[  248.942213][ T5855] bridge_slave_1: left promiscuous mode
[  248.945063][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.950102][ T5855] bridge_slave_0: left allmulticast mode
[  248.952972][ T5855] bridge_slave_0: left promiscuous mode
[  248.955374][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.135113][T12499] netlink: 'syz.0.1789': attribute type 1 has an invalid length.
[  249.391818][ T5855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  249.402249][ T5855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  249.407556][ T5855] bond0 (unregistering): Released all slaves
[  249.509227][ T7799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  249.516180][ T7799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  249.533561][ T7799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  249.549892][ T7799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  249.557103][ T7799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  249.998416][T12539] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  250.031094][T12538] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input24
[  250.052107][ T5855] hsr_slave_0: left promiscuous mode
[  250.055078][ T5855] hsr_slave_1: left promiscuous mode
[  250.057486][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  250.059931][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_0
[  250.065387][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  250.067932][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_1
[  250.086224][ T5855] veth1_macvtap: left promiscuous mode
[  250.088037][ T5855] veth0_macvtap: left promiscuous mode
[  250.089838][ T5855] veth1_vlan: left promiscuous mode
[  250.094527][ T5855] veth0_vlan: left promiscuous mode
[  250.515219][ T5855] team0 (unregistering): Port device team_slave_1 removed
[  250.550405][ T5855] team0 (unregistering): Port device team_slave_0 removed
[  251.088376][T12508] chnl_net:caif_netlink_parms(): no params data found
[  251.343794][T12508] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.349313][T12508] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.355427][T12508] bridge_slave_0: entered allmulticast mode
[  251.361351][T12508] bridge_slave_0: entered promiscuous mode
[  251.375650][T12508] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.378795][T12508] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.382861][T12508] bridge_slave_1: entered allmulticast mode
[  251.386951][T12508] bridge_slave_1: entered promiscuous mode
[  251.430161][T12508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.438975][T12508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.518756][T12508] team0: Port device team_slave_0 added
[  251.535324][T12508] team0: Port device team_slave_1 added
[  251.565192][T12508] batman_adv: batadv0: Adding interface: batadv_slave_0
[  251.567967][T12508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.578328][T12508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  251.584847][T12508] batman_adv: batadv0: Adding interface: batadv_slave_1
[  251.587141][T12508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.595725][T12508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  251.611063][ T5827] Bluetooth: hci1: command tx timeout
[  251.697934][T12508] hsr_slave_0: entered promiscuous mode
[  251.700470][T12508] hsr_slave_1: entered promiscuous mode
[  251.703464][T12508] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  251.706704][T12508] Cannot create hsr debugfs directory
[  252.089097][T12508] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  252.095445][T12508] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  252.100801][T12508] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  252.105862][T12508] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  252.177461][T12508] 8021q: adding VLAN 0 to HW filter on device bond0
[  252.196698][T12508] 8021q: adding VLAN 0 to HW filter on device team0
[  252.213549][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.216087][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  252.223308][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.225711][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  252.402765][T12508] 8021q: adding VLAN 0 to HW filter on device batadv0
[  252.441942][T12508] veth0_vlan: entered promiscuous mode
[  252.452311][T12508] veth1_vlan: entered promiscuous mode
[  252.487351][T12508] veth0_macvtap: entered promiscuous mode
[  252.507316][T12508] veth1_macvtap: entered promiscuous mode
[  252.533887][T12508] batman_adv: batadv0: Interface activated: batadv_slave_0
[  252.557771][T12508] batman_adv: batadv0: Interface activated: batadv_slave_1
[  252.576038][T12508] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.578797][T12508] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.586764][T12508] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.589473][T12508] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.701179][ T3701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.704243][ T3701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.724110][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.727202][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.033583][T12619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1819'.
[  253.036645][T12619] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1819'.
[  253.039583][T12619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1819'.
[  253.043535][T12619] netlink: 'syz.0.1819': attribute type 2 has an invalid length.
[  253.046097][T12619] netlink: 'syz.0.1819': attribute type 1 has an invalid length.
[  253.048923][T12619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1819'.
[  253.094330][T12621] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1820'.
[  253.247625][T12634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1827'.
[  253.251643][T12634] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1827'.
[  253.254811][T12634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1827'.
[  253.257858][T12634] netlink: 'syz.0.1827': attribute type 2 has an invalid length.
[  253.260365][T12634] netlink: 'syz.0.1827': attribute type 1 has an invalid length.
[  253.263872][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1827'.
[  253.397221][T12647] bpq0: left promiscuous mode
[  254.210039][T12654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1832'.
[  254.298048][T12656] nft_compat: unsupported protocol 0
[  254.363310][T12660] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  254.368118][T12660] tipc: Resetting bearer <eth:syzkaller0>
[  254.376291][T12659] tipc: Disabling bearer <eth:syzkaller0>
[  254.507146][ T5855] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.178334][T12670] netlink: 'syz.0.1837': attribute type 2 has an invalid length.
[  255.197638][T12670] netlink: 'syz.0.1837': attribute type 1 has an invalid length.
[  255.338826][ T7799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  255.346666][ T7799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  255.350924][ T7799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  255.357535][ T7799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  255.362504][ T7799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  255.678571][T12677] chnl_net:caif_netlink_parms(): no params data found
[  255.737657][T12677] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.740034][T12677] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.742560][T12677] bridge_slave_0: entered allmulticast mode
[  255.745687][T12677] bridge_slave_0: entered promiscuous mode
[  255.749568][T12677] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.752133][T12677] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.754577][T12677] bridge_slave_1: entered allmulticast mode
[  255.759543][T12677] bridge_slave_1: entered promiscuous mode
[  255.783424][T12677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.789090][T12677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.813225][T12677] team0: Port device team_slave_0 added
[  255.819001][T12677] team0: Port device team_slave_1 added
[  255.840841][T12677] batman_adv: batadv0: Adding interface: batadv_slave_0
[  255.843712][T12677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.854360][T12677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  255.860561][T12677] batman_adv: batadv0: Adding interface: batadv_slave_1
[  255.862894][T12677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.871177][T12677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  255.904513][T12677] hsr_slave_0: entered promiscuous mode
[  255.907658][T12677] hsr_slave_1: entered promiscuous mode
[  255.910471][T12677] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  255.913744][T12677] Cannot create hsr debugfs directory
[  256.120130][ T5855] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.217542][ T5855] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.279131][ T5855] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.450806][ T5855] bridge_slave_1: left allmulticast mode
[  256.452700][ T5855] bridge_slave_1: left promiscuous mode
[  256.454782][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.462896][ T5855] bridge_slave_0: left allmulticast mode
[  256.464872][ T5855] bridge_slave_0: left promiscuous mode
[  256.466831][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.804635][ T5855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  256.809780][ T5855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  256.816586][ T5855] bond0 (unregistering): Released all slaves
[  257.284638][T12677] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  257.332921][T12677] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  257.374819][T12677] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  257.397075][T12677] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  257.412846][ T5855] hsr_slave_0: left promiscuous mode
[  257.415042][ T5855] hsr_slave_1: left promiscuous mode
[  257.417119][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  257.419390][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_0
[  257.435389][ T5855] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  257.437770][ T5855] batman_adv: batadv0: Removing interface: batadv_slave_1
[  257.450136][ T5855] veth1_macvtap: left promiscuous mode
[  257.452155][ T7799] Bluetooth: hci1: command tx timeout
[  257.459750][ T5855] veth0_macvtap: left promiscuous mode
[  257.462044][ T5855] veth1_vlan: left promiscuous mode
[  257.463757][ T5855] veth0_vlan: left promiscuous mode
[  257.479571][T12696] netlink: 'syz.2.1843': attribute type 4 has an invalid length.
[  257.608976][T12705] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  257.979081][ T5855] team0 (unregistering): Port device team_slave_1 removed
[  258.030336][ T5855] team0 (unregistering): Port device team_slave_0 removed
[  258.696661][T12677] 8021q: adding VLAN 0 to HW filter on device bond0
[  258.750457][T12677] 8021q: adding VLAN 0 to HW filter on device team0
[  258.772501][T12716] sctp: [Deprecated]: syz.0.1846 (pid 12716) Use of int in max_burst socket option.
[  258.772501][T12716] Use struct sctp_assoc_value instead
[  258.783160][T12716] __nla_validate_parse: 9 callbacks suppressed
[  258.783171][T12716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1846'.
[  258.784512][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.791904][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  258.847697][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.850702][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  259.201216][T12677] 8021q: adding VLAN 0 to HW filter on device batadv0
[  259.265804][T12677] veth0_vlan: entered promiscuous mode
[  259.292962][T12677] veth1_vlan: entered promiscuous mode
[  259.325386][T12677] veth0_macvtap: entered promiscuous mode
[  259.337557][T12677] veth1_macvtap: entered promiscuous mode
[  259.357841][T12677] batman_adv: batadv0: Interface activated: batadv_slave_0
[  259.366454][T12677] batman_adv: batadv0: Interface activated: batadv_slave_1
[  259.375954][T12677] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.378686][T12677] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  259.382092][T12677] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  259.384913][T12677] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  259.531105][ T7799] Bluetooth: hci1: command tx timeout
[  259.569433][T12730] netlink: 'syz.2.1848': attribute type 4 has an invalid length.
[  259.639620][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  259.646076][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  259.671730][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  259.674605][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  259.798702][T12677] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  259.803354][T12677] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  259.806369][T12677] CPU: 1 UID: 0 PID: 12677 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  259.811102][T12677] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  259.814600][T12677] RIP: 0010:klist_remove+0x14a/0x340
[  259.816647][T12677] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 89 50 be f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 6a 50 be f6 49 8b 44 24 58 48 89 44 24 08
[  259.824046][T12677] RSP: 0018:ffffc9000329f840 EFLAGS: 00010202
[  259.826459][T12677] RAX: 000000000000000b RBX: ffff88810d2a0000 RCX: 0000000000000000
[  259.829652][T12677] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  259.832817][T12677] RBP: ffffc9000329f928 R08: ffffffff8f887283 R09: 1ffffffff1f10e50
[  259.835987][T12677] R10: dffffc0000000000 R11: fffffbfff1f10e51 R12: 0000000000000000
[  259.839108][T12677] R13: 1ffff1102600910c R14: ffff888130048860 R15: dffffc0000000000
[  259.842099][T12677] FS:  00005555794ee500(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  259.845582][T12677] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  259.848166][T12677] CR2: 0000200000000180 CR3: 00000001053be000 CR4: 00000000000006f0
[  259.851277][T12677] Call Trace:
[  259.852657][T12677]  <TASK>
[  259.853827][T12677]  ? __pfx_klist_remove+0x10/0x10
[  259.855796][T12677]  ? __pfx_kobject_move+0x10/0x10
[  259.857795][T12677]  ? get_device_parent+0x366/0x3a0
[  259.860019][T12677]  device_move+0x193/0x700
[  259.861768][T12677]  hci_conn_del_sysfs+0xb8/0x170
[  259.863672][T12677]  hci_conn_del+0x8ff/0xcb0
[  259.865459][T12677]  hci_conn_hash_flush+0x191/0x230
[  259.867537][T12677]  hci_dev_close_sync+0xaef/0x1330
[  259.869543][T12677]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  259.871590][T12677]  ? up_write+0x1c4/0x420
[  259.872927][T12677]  hci_unregister_dev+0x21a/0x510
[  259.874613][T12677]  vhci_release+0x80/0xd0
[  259.876303][T12677]  ? __pfx_vhci_release+0x10/0x10
[  259.878078][T12677]  __fput+0x44c/0xa70
[  259.879326][T12677]  task_work_run+0x1d4/0x260
[  259.880794][T12677]  ? __pfx_task_work_run+0x10/0x10
[  259.882413][T12677]  ? kmem_cache_free+0x18f/0x400
[  259.883978][T12677]  do_exit+0x6b5/0x22e0
[  259.885553][T12677]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  259.885739][T12742] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1849'.
[  259.887410][T12677]  ? __pfx_do_exit+0x10/0x10
[  259.887429][T12677]  ? _raw_spin_unlock_irq+0x23/0x50
[  259.887443][T12677]  ? lockdep_hardirqs_on+0x9c/0x150
[  259.887456][T12677]  do_group_exit+0x21c/0x2d0
[  259.887469][T12677]  __x64_sys_exit_group+0x3f/0x40
[  259.887480][T12677]  x64_sys_call+0x21ba/0x21c0
[  259.900482][T12677]  do_syscall_64+0xfa/0x3b0
[  259.902022][T12677]  ? lockdep_hardirqs_on+0x9c/0x150
[  259.903686][T12677]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.906028][T12677]  ? exc_page_fault+0x9f/0xf0
[  259.907529][T12677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.909385][T12677] RIP: 0033:0x7f233e98e929
[  259.910849][T12677] Code: Unable to access opcode bytes at 0x7f233e98e8ff.
[  259.913052][T12677] RSP: 002b:00007fff53cce0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  259.915711][T12677] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f233e98e929
[  259.918317][T12677] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  259.920977][T12677] RBP: 00007f233e9ee8f0 R08: 00007fff53ccbe87 R09: 0000000000000003
[  259.923703][T12677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  259.926630][T12677] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007fff53cce2a0
[  259.929191][T12677]  </TASK>
[  259.930186][T12677] Modules linked in:
[  259.932117][T12677] ---[ end trace 0000000000000000 ]---
[  259.937932][T12677] RIP: 0010:klist_remove+0x14a/0x340
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  259.939720][T12677] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 89 50 be f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 6a 50 be f6 49 8b 44 24 58 48 89 44 24 08
[  259.947071][T12677] RSP: 0018:ffffc9000329f840 EFLAGS: 00010202
[  259.949176][T12677] RAX: 000000000000000b RBX: ffff88810d2a0000 RCX: 0000000000000000
[  259.961366][T12677] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  259.963978][T12677] RBP: ffffc9000329f928 R08: ffffffff8f887283 R09: 1ffffffff1f10e50
[  259.966869][T12677] R10: dffffc0000000000 R11: fffffbfff1f10e51 R12: 0000000000000000
[  259.969545][T12677] R13: 1ffff1102600910c R14: ffff888130048860 R15: dffffc0000000000
[  259.990890][T12677] FS:  00005555794ee500(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  259.994705][T12677] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  259.997551][T12677] CR2: 00007f63663d2fc8 CR3: 000000010d7d8000 CR4: 00000000000006f0
[  260.000208][T12677] Kernel panic - not syncing: Fatal exception
[  260.003030][T12677] Kernel Offset: disabled
[  260.004702][T12677] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:36:11  Registers:
info registers vcpu 0

CPU#0
RAX=3de7e7459fe92500 RBX=ffffffff81976c78 RCX=3de7e7459fe92500 RDX=0000000000000001
RSI=ffffffff8be29da0 RDI=ffffffff81976c78 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1f3f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6368bb7bac CR3=000000002a334000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f6368a11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000043 RBX=0000000000000043 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000329efd0
R8 =ffff8880218e0237 R9 =1ffff1100431c046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af9898 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555794ee500 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000180 CR3=00000001053be000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000009f8999d 000000000000001c XMM01=0000003165736f72 000055a521ae0f88
XMM02=010000ffffffffff 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 ffffff0000000000 XMM05=45cd6bff01000000 00000000000002ff
XMM06=45cd6bff01000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
