last executing test programs:

6.313585562s ago: executing program 0 (id=443):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x3d, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xc7, '\x00', 0x86dc, 0x3, 0x100, 0xc}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x50}}, 0x4000010)

6.31326759s ago: executing program 0 (id=444):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010200000000000000000100000009000100"], 0x110}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001200576d101400000000000007000000", @ANYRES32=0x0, @ANYBLOB="000002000255000008"], 0x3c}}, 0x0)

6.214324525s ago: executing program 0 (id=446):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket(0xa, 0x3, 0x3a)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x18}, 0xc800)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(0x0, r3)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

5.384249451s ago: executing program 0 (id=472):
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52}, 0x20)
socket$l2tp(0x2, 0x2, 0x73)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10)
socket$l2tp(0x2, 0x2, 0x73)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x17, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="250af7a19d98c880e1b30400000000001800000000000000000000000000003db0519c2ae7179490"], &(0x7f0000000000)='GPL\x00'}, 0x80)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='rdma.max\x00', 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_int(r3, &(0x7f0000000080)=0x8, 0x12)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r2)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0xa}, 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x38, r6, 0x1, 0x1, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x38}}, 0x0)

5.130766664s ago: executing program 0 (id=476):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xe4, @fixed, 0x0, 0x1}, 0xe)

4.791636152s ago: executing program 0 (id=480):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002a000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001000000085000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x609, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000140600000000000000000000028831000100fd2929bf64daedcfeb488e63040000000000000087f783980a4d1634c6450559443c29240956451306cf1fb0e10000000000"], 0x48}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r2)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x19fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x0, 0x2000000, {0x7, 0x0, 0x0, r5, 0x0, 0x2}}, 0x1c}}, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000100)=0x8)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYRESHEX=r7], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdcf}, 0x94)
r9 = socket$rds(0x15, 0x5, 0x0)
ppoll(&(0x7f00000001c0)=[{r9}], 0x1, 0x0, 0x0, 0x0)
bind$rds(r9, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r9, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000061c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003e80)=""/172, 0xac}, 0x80000000}], 0x1, 0x836b, 0x0)
connect$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r10, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
close(r10)
setsockopt$RDS_CANCEL_SENT_TO(r9, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x5, <r11=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000a400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
mkdirat$cgroup(r8, &(0x7f0000000080)='syz1\x00', 0x1ff)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20010, r3, 0xa942c000)

274.296962ms ago: executing program 1 (id=552):
unshare(0x22020400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="c3aa00fe0000000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0x75, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f0000000640)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f0000000580), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000700)}}, 0x10)

214.88009ms ago: executing program 1 (id=554):
r0 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4620, @private=0xa010101}]}, &(0x7f00000002c0)=0x10)
getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc)

165.138429ms ago: executing program 1 (id=555):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000100008000000000efff141afffe020000110c00018006"], 0x20}}, 0x24000000)
sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050)

164.639101ms ago: executing program 2 (id=556):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040), 0xc)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1)
read(r0, &(0x7f0000000000)=""/3, 0x3)

110.408125ms ago: executing program 2 (id=557):
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030)

109.998902ms ago: executing program 1 (id=558):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18)

109.712898ms ago: executing program 2 (id=559):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}}, @NFT_MSG_DELOBJ={0x1b4, 0x14, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x91, 0x8, "d789d6872b89943d72bbdf5139672ae77b452d7b24075f511006e1a0cfd0c39350c4cb5c35c225721312747b0e2ad7f97f275e8f71e63d9d8aab464662570f407feb1d8024967f3ef558513b6c9ab8851ab095776667aedacf66f90afd3fcda51bff0e0ce3147bf9c51c1c3d890f758864c92511d712bfcb94733ffbbcd00dfffc173670a698c214caba88440c"}, @NFTA_OBJ_USERDATA={0x52, 0x8, "57465797b99a9a3227a1bd2e279f9756722366ae893dd9cb9640590df4a10b6f7e1141a203c2d030b735044945cf1f798cd1b59e134b5dad7204a1cf660d33bb5c70b2c15d19035f01c3ca2e669f"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x76, 0x8, "042b206813ab2870bdfaea4a07da030f24b47a546108ff5882357eede123adeed42ba27d72835905dd045b2b0a2e2441a1ed8d7e5170a3831fac67c6a49762e9f39490f943df022461eb82ef041fd72f60724fe9286781535c032d739f3b9bac1c3b3ea7f6d9f66734223126d39f33ea0b3643ab4f2a13aa9d9556c7bc02aa2cb35116927ed5"}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0xbcc8c9aebf91a27f}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x230}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000)

102.358941ms ago: executing program 1 (id=560):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8814}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002900), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='contention_end\x00', r6, 0x0, 0x4}, 0x18)
sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000003200)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100000000000000}}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40c4)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x8}, {0x6, 0x60, 0x6, 0x8}]})
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0x7)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
write$ppp(r0, &(0x7f0000000300)="5af9", 0x2)

45.389293ms ago: executing program 2 (id=561):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDARP(r0, 0xc0189436, &(0x7f00000004c0)={{0x2, 0x0, @empty}, {0x6, @random="9f44441dc302"}, 0xffffff5d, {0x2, 0x0, @empty}})

45.102244ms ago: executing program 2 (id=562):
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d00000000140002800800010001000000080002001100"], 0x74}}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

7.454576ms ago: executing program 2 (id=563):
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16=r0], 0xdd12}], 0x1}, 0x10)

0s ago: executing program 1 (id=564):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:63029' (ED25519) to the list of known hosts.
syzkaller login: [   49.465187][ T5783] cgroup: Unknown subsys name 'net'
[   49.533692][ T5783] cgroup: Unknown subsys name 'cpuset'
[   49.539761][ T5783] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.436677][ T5783] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.662397][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.667881][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.671301][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.710229][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.713823][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.717028][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.720862][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.724097][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.728723][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.733292][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.763131][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.767733][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.771540][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.776081][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.780137][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.177573][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   57.244952][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   57.308172][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   57.339547][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.342503][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.344970][ T5831] bridge_slave_0: entered allmulticast mode
[   57.348218][ T5831] bridge_slave_0: entered promiscuous mode
[   57.373738][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.376899][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.379058][ T5831] bridge_slave_1: entered allmulticast mode
[   57.381785][ T5831] bridge_slave_1: entered promiscuous mode
[   57.423039][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.426396][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.429222][ T5836] bridge_slave_0: entered allmulticast mode
[   57.432643][ T5836] bridge_slave_0: entered promiscuous mode
[   57.436554][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.438835][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.441151][ T5836] bridge_slave_1: entered allmulticast mode
[   57.443966][ T5836] bridge_slave_1: entered promiscuous mode
[   57.485309][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.491556][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.504459][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.510455][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.581147][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.583920][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.589293][ T5827] bridge_slave_0: entered allmulticast mode
[   57.592700][ T5827] bridge_slave_0: entered promiscuous mode
[   57.613267][ T5831] team0: Port device team_slave_0 added
[   57.615944][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.618067][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.620280][ T5827] bridge_slave_1: entered allmulticast mode
[   57.623683][ T5827] bridge_slave_1: entered promiscuous mode
[   57.630599][ T5836] team0: Port device team_slave_0 added
[   57.635155][ T5831] team0: Port device team_slave_1 added
[   57.682276][ T5836] team0: Port device team_slave_1 added
[   57.703932][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.724040][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.727148][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.737473][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.745296][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.777921][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.780710][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.791471][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.813447][ T5827] team0: Port device team_slave_0 added
[   57.816452][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.818627][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.827167][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.839178][ T5827] team0: Port device team_slave_1 added
[   57.841738][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.844473][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.853422][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.902630][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.904780][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.913232][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.943594][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.947348][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.955474][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.978161][ T5831] hsr_slave_0: entered promiscuous mode
[   57.981751][ T5831] hsr_slave_1: entered promiscuous mode
[   57.988770][ T5836] hsr_slave_0: entered promiscuous mode
[   57.991152][ T5836] hsr_slave_1: entered promiscuous mode
[   57.993248][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.996277][ T5836] Cannot create hsr debugfs directory
[   58.048876][ T5827] hsr_slave_0: entered promiscuous mode
[   58.051359][ T5827] hsr_slave_1: entered promiscuous mode
[   58.053537][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.056166][ T5827] Cannot create hsr debugfs directory
[   58.417837][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.428941][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.437920][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.457435][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.510525][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.524931][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.538970][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.559675][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.618052][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.632639][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.638740][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.650549][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.755981][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.767129][ T5834] Bluetooth: hci0: command tx timeout
[   58.767135][   T55] Bluetooth: hci1: command tx timeout
[   58.801786][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   58.817820][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.820835][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.834907][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.837916][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.846083][ T5834] Bluetooth: hci2: command tx timeout
[   58.853599][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.890794][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   58.921880][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.924660][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.950188][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.952982][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.980409][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.036928][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   59.055622][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.058535][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.075166][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   59.108984][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.111849][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.168167][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.253682][ T5836] veth0_vlan: entered promiscuous mode
[   59.261595][ T5836] veth1_vlan: entered promiscuous mode
[   59.294145][ T5836] veth0_macvtap: entered promiscuous mode
[   59.301401][ T5836] veth1_macvtap: entered promiscuous mode
[   59.313902][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.320504][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.336913][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.349226][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.352041][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.354697][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.357979][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.377060][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.472547][ T4331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.479678][ T4331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.509319][ T5831] veth0_vlan: entered promiscuous mode
[   59.538507][ T5827] veth0_vlan: entered promiscuous mode
[   59.552661][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.554304][ T5831] veth1_vlan: entered promiscuous mode
[   59.558449][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.570718][ T5827] veth1_vlan: entered promiscuous mode
[   59.611908][ T5831] veth0_macvtap: entered promiscuous mode
[   59.635062][ T5831] veth1_macvtap: entered promiscuous mode
[   59.639814][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.664338][ T5827] veth0_macvtap: entered promiscuous mode
[   59.682568][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.688379][ T5827] veth1_macvtap: entered promiscuous mode
[   59.732025][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.742485][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.749563][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.753086][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.756861][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.778575][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.828025][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.843161][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.848627][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.852239][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.857690][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.920832][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.923568][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.991646][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.994146][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.038744][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.041202][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.105688][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.113546][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.308536][ T5914] syz.0.10 uses obsolete (PF_INET,SOCK_PACKET)
[   60.396180][ T5920] netlink: 'syz.0.14': attribute type 10 has an invalid length.
[   60.406659][ T5920] Zero length message leads to an empty skb
[   60.440105][ T5922] warning: `syz.2.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   60.807160][ T5944] Bluetooth: MGMT ver 1.23
[   60.855723][ T5834] Bluetooth: hci0: command tx timeout
[   60.856234][   T55] Bluetooth: hci1: command tx timeout
[   60.868365][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'.
[   60.926278][   T55] Bluetooth: hci2: command tx timeout
[   60.951255][ T5953] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   61.274404][ T5967] IPVS: length: 148 != 24
[   61.446692][   T57] block nbd0: Wrong magic (0x24000000)
[   61.749457][ T5991] macsec1: entered promiscuous mode
[   61.751186][ T5991] macsec1: entered allmulticast mode
[   62.360121][ T6017] netlink: 10 bytes leftover after parsing attributes in process `syz.0.56'.
[   62.708168][ T6031] netlink: 'syz.0.63': attribute type 2 has an invalid length.
[   62.837777][ T6041] netlink: 'syz.0.67': attribute type 9 has an invalid length.
[   62.927904][   T55] Bluetooth: hci1: command tx timeout
[   62.928602][ T5834] Bluetooth: hci0: command tx timeout
[   62.994439][ T6054] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.002117][ T6054] netlink: 212 bytes leftover after parsing attributes in process `syz.1.74'.
[   63.006005][ T5834] Bluetooth: hci2: command tx timeout
[   63.033061][ T6056] veth0_to_team: entered promiscuous mode
[   63.048724][ T6056] veth0_to_team: entered allmulticast mode
[   63.301760][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'.
[   63.340404][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.79'.
[   63.652785][ T6102] netlink: 92 bytes leftover after parsing attributes in process `syz.1.88'.
[   63.659968][ T6102] netlink: 92 bytes leftover after parsing attributes in process `syz.1.88'.
[   63.958280][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.92'.
[   64.241700][ T6124] tipc: Invalid UDP bearer configuration
[   64.241748][ T6124] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   64.360101][ T6130] pim6reg1: entered promiscuous mode
[   64.362432][ T6130] pim6reg1: entered allmulticast mode
[   65.006916][ T5834] Bluetooth: hci0: command tx timeout
[   65.019000][ T5834] Bluetooth: hci1: command tx timeout
[   65.086232][ T5834] Bluetooth: hci2: command tx timeout
[   66.053102][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'.
[   66.191758][ T6224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.145'.
[   66.367459][ T6233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.151'.
[   66.377086][ T6233] Bluetooth: MGMT ver 1.23
[   66.432878][ T6236] tipc: Started in network mode
[   66.434525][ T6236] tipc: Node identity 4a17c06a850e, cluster identity 4711
[   66.439856][ T6236] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.442558][ T6236] syzkaller0: entered promiscuous mode
[   66.444260][ T6236] syzkaller0: entered allmulticast mode
[   66.451623][ T6236] tipc: Resetting bearer <eth:syzkaller0>
[   66.454509][ T6236] syzkaller0: tun_net_xmit 90
[   66.466330][ T6235] tipc: Resetting bearer <eth:syzkaller0>
[   66.472045][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.153'.
[   66.484045][ T6235] tipc: Disabling bearer <eth:syzkaller0>
[   66.798819][ T6263] netlink: 'syz.2.163': attribute type 30 has an invalid length.
[   66.981925][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'.
[   66.986457][ T6280] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   67.503092][ T6317] netlink: 'syz.2.186': attribute type 13 has an invalid length.
[   67.505800][ T6317] netlink: 'syz.2.186': attribute type 17 has an invalid length.
[   67.633130][ T6317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   67.664066][ T6321] veth0_to_bridge: entered promiscuous mode
[   67.730637][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.814162][ T6310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.871218][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.349530][ T6320] veth0_to_bridge: left promiscuous mode
[   68.393082][ T6310] syz.2.186 (6310) used greatest stack depth: 20312 bytes left
[   68.503964][ T6349] netlink: 28 bytes leftover after parsing attributes in process `syz.2.200'.
[   68.511752][ T6349] netlink: 28 bytes leftover after parsing attributes in process `syz.2.200'.
[   68.557817][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.203'.
[   68.582272][ T6357] xt_l2tp: missing protocol rule (udp|l2tpip)
[   68.921400][ T6381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.216'.
[   69.082910][ T6387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.219'.
[   69.088596][ T6387] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.091621][ T6387] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.254016][ T6410] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   69.646152][ T5834] Bluetooth: hci2: command tx timeout
[   70.249311][ T6429] netlink: zone id is out of range
[   70.251041][ T6429] netlink: zone id is out of range
[   70.252862][ T6429] netlink: zone id is out of range
[   70.255788][ T6429] netlink: zone id is out of range
[   70.258016][ T6429] netlink: zone id is out of range
[   70.264264][ T6429] netlink: zone id is out of range
[   70.267174][ T6429] netlink: zone id is out of range
[   70.269245][ T6429] netlink: zone id is out of range
[   70.290269][ T6431] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.440795][ T6439] Driver unsupported XDP return value 0 on prog  (id 41) dev N/A, expect packet loss!
[   70.543851][ T6449] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   70.728257][ T6463] raw_sendmsg: syz.0.254 forgot to set AF_INET. Fix it!
[   71.014179][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.016405][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.257759][ T6511] __nla_validate_parse: 2 callbacks suppressed
[   71.257774][ T6511] netlink: 104 bytes leftover after parsing attributes in process `syz.0.272'.
[   71.460737][ T6528] netlink: 'syz.2.281': attribute type 1 has an invalid length.
[   71.463104][ T6528] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.281'.
[   71.590961][ T6538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.285'.
[   71.738461][ T6548] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.748491][ T6550] netlink: 'syz.1.289': attribute type 13 has an invalid length.
[   71.750886][ T6550] netlink: 'syz.1.289': attribute type 17 has an invalid length.
[   71.837182][ T6548] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.934972][ T6548] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.031621][ T6550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.033086][ T6548] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.096385][ T6560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.109072][ T6564] netlink: 88 bytes leftover after parsing attributes in process `syz.2.295'.
[   72.112969][ T6564] netlink: 16 bytes leftover after parsing attributes in process `syz.2.295'.
[   72.174129][ T6548] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.194701][ T6548] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.199547][ T6550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.221310][ T6548] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.240823][ T6548] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.271898][ T6571] netlink: 'syz.2.298': attribute type 1 has an invalid length.
[   72.276215][ T6571] netlink: 172 bytes leftover after parsing attributes in process `syz.2.298'.
[   72.447235][ T6579] unknown channel width for channel at 909000KHz?
[   72.449999][ T6579] unknown channel width for channel at 909000KHz?
[   72.871316][ T6604] netlink: 36 bytes leftover after parsing attributes in process `syz.2.314'.
[   72.921361][ T6610] netlink: 'syz.1.316': attribute type 21 has an invalid length.
[   72.956668][ T6610] netlink: 132 bytes leftover after parsing attributes in process `syz.1.316'.
[   73.030666][ T6616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.320'.
[   73.443536][ T6648] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   73.492028][ T6654] netlink: 'syz.1.338': attribute type 1 has an invalid length.
[   73.494443][ T6654] netlink: 224 bytes leftover after parsing attributes in process `syz.1.338'.
[   73.623014][ T6662] net_ratelimit: 77 callbacks suppressed
[   73.623046][ T6662] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.637539][ T6662] netlink: 'syz.2.335': attribute type 4 has an invalid length.
[   74.106114][ T6676] netlink: 'syz.0.347': attribute type 1 has an invalid length.
[   74.108524][ T6676] netlink: 'syz.0.347': attribute type 1 has an invalid length.
[   74.242375][ T6680] netlink: 'syz.0.348': attribute type 5 has an invalid length.
[   74.481355][ T6697] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received
[   74.608918][ T6709] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   74.785646][ T6727] nbd1: detected capacity change from 0 to 127
[   74.789798][   T56] block nbd1: Receive control failed (result -32)
[   74.793208][ T5829] block nbd1: Dead connection, failed to find a fallback
[   74.796035][ T5829] block nbd1: shutting down sockets
[   74.797834][ T5829] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   74.800835][ T5829] Buffer I/O error on dev nbd1, logical block 0, async page read
[   74.803368][ T5829] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   74.824140][ T5829] Buffer I/O error on dev nbd1, logical block 1, async page read
[   74.827397][ T5829] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   74.830227][ T5829] Buffer I/O error on dev nbd1, logical block 2, async page read
[   74.837195][ T5829] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   74.840055][ T5829] Buffer I/O error on dev nbd1, logical block 3, async page read
[   74.842624][ T5829] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   74.847011][ T5829] Buffer I/O error on dev nbd1, logical block 0, async page read
[   74.849632][ T5829] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   74.852845][ T5829] Buffer I/O error on dev nbd1, logical block 1, async page read
[   74.855291][ T5829] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   74.858300][ T5829] Buffer I/O error on dev nbd1, logical block 2, async page read
[   74.861585][ T5829] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   74.864345][ T5829] Buffer I/O error on dev nbd1, logical block 3, async page read
[   74.867253][ T5829] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   74.869957][ T5829] Buffer I/O error on dev nbd1, logical block 0, async page read
[   74.872360][ T5829] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   74.875090][ T5829] Buffer I/O error on dev nbd1, logical block 1, async page read
[   74.880709][ T5829] ldm_validate_partition_table(): Disk read failed.
[   74.883729][ T5829] Dev nbd1: unable to read RDB block 0
[   74.889703][ T5829]  nbd1: unable to read partition table
[   74.899009][ T5829] ldm_validate_partition_table(): Disk read failed.
[   74.901945][ T5829] Dev nbd1: unable to read RDB block 0
[   74.905253][ T5829]  nbd1: unable to read partition table
[   75.054928][ T6755] netlink: 'syz.2.382': attribute type 5 has an invalid length.
[   75.662754][ T6788] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.686755][ T6788] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.691115][ T6788] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[   75.696546][ T6788] bond1: (slave vti0): Error -95 calling set_mac_address
[   76.004100][ T6805] 8021q: VLANs not supported on wg0
[   76.311301][ T6838] __nla_validate_parse: 4 callbacks suppressed
[   76.311311][ T6838] netlink: 96 bytes leftover after parsing attributes in process `syz.1.422'.
[   76.448278][ T6849] syz.1.428 (6849) used greatest stack depth: 19672 bytes left
[   76.530299][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.433'.
[   76.687586][ T6872] syzkaller1: entered promiscuous mode
[   76.689611][ T6872] syzkaller1: entered allmulticast mode
[   76.979416][ T6881] netlink: 'syz.0.442': attribute type 7 has an invalid length.
[   76.982546][ T6881] netlink: 'syz.0.442': attribute type 8 has an invalid length.
[   76.985747][ T6881] netlink: 204 bytes leftover after parsing attributes in process `syz.0.442'.
[   77.038322][ T6883] netlink: 17 bytes leftover after parsing attributes in process `syz.0.443'.
[   77.089224][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.444'.
[   77.185785][ T6892] bridge_slave_0: left allmulticast mode
[   77.187678][ T6892] bridge_slave_0: left promiscuous mode
[   77.190254][ T6892] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.241293][ T6892] bridge_slave_1: left allmulticast mode
[   77.243185][ T6892] bridge_slave_1: left promiscuous mode
[   77.245904][ T6892] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.261727][ T6892] bond0: (slave bond_slave_0): Releasing backup interface
[   77.269384][ T6892] bond0: (slave bond_slave_1): Releasing backup interface
[   77.283774][ T6892] team0: Port device team_slave_0 removed
[   77.293106][ T6892] team0: Port device team_slave_1 removed
[   77.297472][ T6892] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.299698][ T6892] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.308602][ T6892] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.310940][ T6892] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.321791][ T6897] validate_nla: 1 callbacks suppressed
[   77.321836][ T6897] netlink: 'syz.1.449': attribute type 13 has an invalid length.
[   77.723922][ T6923] trusted_key: syz.2.462 sent an empty control message without MSG_MORE.
[   77.911280][ T6939] netlink: 248 bytes leftover after parsing attributes in process `syz.1.470'.
[   78.130264][ T6954] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.133241][ T6954] syzkaller0: entered promiscuous mode
[   78.135020][ T6954] syzkaller0: entered allmulticast mode
[   78.168296][ T6954] tipc: Resetting bearer <eth:syzkaller0>
[   78.174133][ T6953] tipc: Resetting bearer <eth:syzkaller0>
[   78.196131][ T6953] tipc: Disabling bearer <eth:syzkaller0>
[   78.595224][ T5858] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.666826][ T5858] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.742863][ T5858] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.867190][ T5858] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.001952][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   79.005150][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   79.008600][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   79.012183][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   79.031077][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   79.407871][ T5858] bond0 (unregistering): Released all slaves
[   79.761101][ T6994] chnl_net:caif_netlink_parms(): no params data found
[   79.847781][ T5858] hsr_slave_0: left promiscuous mode
[   79.855774][ T5858] hsr_slave_1: left promiscuous mode
[   79.880468][ T5858] veth1_macvtap: left promiscuous mode
[   79.882967][ T5858] veth0_macvtap: left promiscuous mode
[   79.885254][ T5858] veth1_vlan: left promiscuous mode
[   79.896861][ T5858] veth0_vlan: left promiscuous mode
[   80.480215][ T6994] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.482843][ T6994] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.492466][ T6994] bridge_slave_0: entered allmulticast mode
[   80.495179][ T6994] bridge_slave_0: entered promiscuous mode
[   80.516261][ T6994] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.518930][ T6994] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.521307][ T6994] bridge_slave_1: entered allmulticast mode
[   80.524181][ T6994] bridge_slave_1: entered promiscuous mode
[   80.589184][ T6994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.599894][ T6994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.650629][ T6994] team0: Port device team_slave_0 added
[   80.656022][ T6994] team0: Port device team_slave_1 added
[   80.694091][ T6994] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.697364][ T6994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.711887][ T6994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.728079][ T6994] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.731016][ T6994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.740282][ T6994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.874784][ T6994] hsr_slave_0: entered promiscuous mode
[   80.877815][ T6994] hsr_slave_1: entered promiscuous mode
[   80.879917][ T6994] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.882282][ T6994] Cannot create hsr debugfs directory
[   81.019968][ T7065] team0: Device gtp0 is of different type
[   81.095730][   T55] Bluetooth: hci0: command tx timeout
[   81.099171][ T7074] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.124648][ T7074] syzkaller0: entered promiscuous mode
[   81.126722][ T7074] syzkaller0: entered allmulticast mode
[   81.179027][ T7074] tipc: Resetting bearer <eth:syzkaller0>
[   81.183208][ T7073] tipc: Resetting bearer <eth:syzkaller0>
[   81.194510][ T7073] tipc: Disabling bearer <eth:syzkaller0>
[   81.248182][   T24] cfg80211: failed to load regulatory.db
[   81.443712][ T6994] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   81.448784][ T6994] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   81.454103][ T6994] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   81.459929][ T6994] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   81.497922][ T7092] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.505919][ T7105] veth0_to_bridge: entered promiscuous mode
[   81.516143][ T7104] veth0_to_bridge: left promiscuous mode
[   81.556798][ T6994] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.574229][ T6994] 8021q: adding VLAN 0 to HW filter on device team0
[   81.585045][  T141] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.587329][  T141] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.606783][  T141] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.608978][  T141] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.701537][ T7118] netlink: 20 bytes leftover after parsing attributes in process `syz.2.517'.
[   81.748771][ T6994] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.803707][ T6994] veth0_vlan: entered promiscuous mode
[   81.815296][ T6994] veth1_vlan: entered promiscuous mode
[   81.844305][ T6994] veth0_macvtap: entered promiscuous mode
[   81.852903][ T6994] veth1_macvtap: entered promiscuous mode
[   81.872785][ T6994] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.890710][ T6994] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.903167][ T6994] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.914458][ T6994] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.920556][ T6994] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.925612][ T6994] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.015861][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.027286][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.068655][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.073072][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.759158][ T7175] netlink: 'syz.1.535': attribute type 83 has an invalid length.
[   82.793555][ T7179] netlink: 'syz.2.537': attribute type 58 has an invalid length.
[   82.797664][ T7179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.537'.
[   82.924637][ T7189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.542'.
[   82.932804][ T7189] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   83.022443][ T7199] delete_channel: no stack
[   83.031714][ T7201] netlink: 'syz.2.548': attribute type 6 has an invalid length.
[   83.034342][ T7201] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.548'.
[   83.237018][ T7222] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   83.240749][ T7221] IPVS: stopping master sync thread 7222 ...
[   83.257418][ T7224] netlink: 20 bytes leftover after parsing attributes in process `syz.2.559'.
[   83.333714][ T7230] netlink: 48 bytes leftover after parsing attributes in process `syz.2.562'.
[   83.410272][  T141] 
[   83.411257][  T141] ======================================================
[   83.413993][  T141] WARNING: possible circular locking dependency detected
[   83.416895][  T141] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[   83.420938][  T141] ------------------------------------------------------
[   83.423571][  T141] kworker/u10:4/141 is trying to acquire lock:
[   83.426126][  T141] ffff8880219f7358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[   83.429882][  T141] 
[   83.429882][  T141] but task is already holding lock:
[   83.432809][  T141] ffff8880219fe988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[   83.436610][  T141] 
[   83.436610][  T141] which lock already depends on the new lock.
[   83.436610][  T141] 
[   83.440909][  T141] 
[   83.440909][  T141] the existing dependency chain (in reverse order) is:
[   83.444052][  T141] 
[   83.444052][  T141] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[   83.446695][  T141]        lock_acquire+0x120/0x360
[   83.448203][  T141]        down_write+0x96/0x1f0
[   83.449626][  T141]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[   83.451503][  T141]        nbd_start_device+0x16c/0xac0
[   83.453085][  T141]        nbd_genl_connect+0x1250/0x1930
[   83.454917][  T141]        genl_family_rcv_msg_doit+0x215/0x300
[   83.456925][  T141]        genl_rcv_msg+0x60e/0x790
[   83.458458][  T141]        netlink_rcv_skb+0x208/0x470
[   83.460030][  T141]        genl_rcv+0x28/0x40
[   83.461443][  T141]        netlink_unicast+0x75c/0x8e0
[   83.463041][  T141]        netlink_sendmsg+0x805/0xb30
[   83.464725][  T141]        __sock_sendmsg+0x21c/0x270
[   83.466342][  T141]        ____sys_sendmsg+0x505/0x830
[   83.467952][  T141]        ___sys_sendmsg+0x21f/0x2a0
[   83.469699][  T141]        __x64_sys_sendmsg+0x19b/0x260
[   83.471453][  T141]        do_syscall_64+0xfa/0x3b0
[   83.473197][  T141]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.475210][  T141] 
[   83.475210][  T141] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[   83.477638][  T141]        lock_acquire+0x120/0x360
[   83.479130][  T141]        __mutex_lock+0x182/0xe80
[   83.480803][  T141]        refcount_dec_and_mutex_lock+0x30/0xa0
[   83.482840][  T141]        nbd_config_put+0x2c/0x790
[   83.484520][  T141]        nbd_release+0xfe/0x140
[   83.486018][  T141]        bdev_release+0x536/0x650
[   83.487591][  T141]        blkdev_release+0x15/0x20
[   83.489425][  T141]        __fput+0x44c/0xa70
[   83.491065][  T141]        fput_close_sync+0x119/0x200
[   83.492860][  T141]        __x64_sys_close+0x7f/0x110
[   83.494482][  T141]        do_syscall_64+0xfa/0x3b0
[   83.496343][  T141]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.498792][  T141] 
[   83.498792][  T141] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[   83.501439][  T141]        validate_chain+0xb9b/0x2140
[   83.503467][  T141]        __lock_acquire+0xab9/0xd20
[   83.505337][  T141]        lock_acquire+0x120/0x360
[   83.507147][  T141]        __mutex_lock+0x182/0xe80
[   83.508979][  T141]        __del_gendisk+0x129/0x9e0
[   83.510782][  T141]        del_gendisk+0xe8/0x160
[   83.512630][  T141]        nbd_dev_remove_work+0x47/0xe0
[   83.514679][  T141]        process_scheduled_works+0xae1/0x17b0
[   83.516667][  T141]        worker_thread+0x8a0/0xda0
[   83.518275][  T141]        kthread+0x711/0x8a0
[   83.520063][  T141]        ret_from_fork+0x3fc/0x770
[   83.521673][  T141]        ret_from_fork_asm+0x1a/0x30
[   83.523332][  T141] 
[   83.523332][  T141] other info that might help us debug this:
[   83.523332][  T141] 
[   83.526505][  T141] Chain exists of:
[   83.526505][  T141]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[   83.526505][  T141] 
[   83.530857][  T141]  Possible unsafe locking scenario:
[   83.530857][  T141] 
[   83.533233][  T141]        CPU0                    CPU1
[   83.535340][  T141]        ----                    ----
[   83.537003][  T141]   rlock(&set->update_nr_hwq_lock);
[   83.538682][  T141]                                lock(&nbd->config_lock);
[   83.541132][  T141]                                lock(&set->update_nr_hwq_lock);
[   83.544148][  T141]   lock(&disk->open_mutex);
[   83.545998][  T141] 
[   83.545998][  T141]  *** DEADLOCK ***
[   83.545998][  T141] 
[   83.549055][  T141] 3 locks held by kworker/u10:4/141:
[   83.551097][  T141]  #0: ffff888021911148 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[   83.555068][  T141]  #1: ffffc9000251fbc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[   83.558879][  T141]  #2: ffff8880219fe988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[   83.562530][  T141] 
[   83.562530][  T141] stack backtrace:
[   83.564736][  T141] CPU: 1 UID: 0 PID: 141 Comm: kworker/u10:4 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   83.564747][  T141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   83.564754][  T141] Workqueue: nbd-del nbd_dev_remove_work
[   83.564767][  T141] Call Trace:
[   83.564772][  T141]  <TASK>
[   83.564778][  T141]  dump_stack_lvl+0x189/0x250
[   83.564790][  T141]  ? __pfx_dump_stack_lvl+0x10/0x10
[   83.564798][  T141]  ? __pfx__printk+0x10/0x10
[   83.564809][  T141]  ? print_lock_name+0xde/0x100
[   83.564819][  T141]  print_circular_bug+0x2ee/0x310
[   83.564830][  T141]  check_noncircular+0x134/0x160
[   83.564841][  T141]  validate_chain+0xb9b/0x2140
[   83.564851][  T141]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   83.564862][  T141]  ? arch_stack_walk+0x11c/0x150
[   83.564873][  T141]  __lock_acquire+0xab9/0xd20
[   83.564881][  T141]  ? __del_gendisk+0x129/0x9e0
[   83.564889][  T141]  lock_acquire+0x120/0x360
[   83.564896][  T141]  ? __del_gendisk+0x129/0x9e0
[   83.564905][  T141]  ? check_path+0x21/0x40
[   83.564914][  T141]  __mutex_lock+0x182/0xe80
[   83.564922][  T141]  ? __del_gendisk+0x129/0x9e0
[   83.564931][  T141]  ? __del_gendisk+0x129/0x9e0
[   83.564939][  T141]  ? __pfx___mutex_lock+0x10/0x10
[   83.564946][  T141]  ? __pfx___might_resched+0x10/0x10
[   83.564956][  T141]  ? __lock_acquire+0xab9/0xd20
[   83.564963][  T141]  ? disk_del_events+0xb5/0x210
[   83.564972][  T141]  ? __del_gendisk+0xc1/0x9e0
[   83.564979][  T141]  __del_gendisk+0x129/0x9e0
[   83.564987][  T141]  ? del_gendisk+0xe0/0x160
[   83.564995][  T141]  ? __pfx___del_gendisk+0x10/0x10
[   83.565003][  T141]  ? down_read+0x1ad/0x2e0
[   83.565011][  T141]  del_gendisk+0xe8/0x160
[   83.565019][  T141]  nbd_dev_remove_work+0x47/0xe0
[   83.565026][  T141]  ? process_scheduled_works+0x9ef/0x17b0
[   83.565035][  T141]  process_scheduled_works+0xae1/0x17b0
[   83.565048][  T141]  ? __pfx_process_scheduled_works+0x10/0x10
[   83.565060][  T141]  worker_thread+0x8a0/0xda0
[   83.565068][  T141]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   83.565080][  T141]  ? __kthread_parkme+0x7b/0x200
[   83.565091][  T141]  kthread+0x711/0x8a0
[   83.565107][  T141]  ? __pfx_worker_thread+0x10/0x10
[   83.565120][  T141]  ? __pfx_kthread+0x10/0x10
[   83.565135][  T141]  ? _raw_spin_unlock_irq+0x23/0x50
[   83.565155][  T141]  ? lockdep_hardirqs_on+0x9c/0x150
[   83.565198][  T141]  ? __pfx_kthread+0x10/0x10
[   83.565216][  T141]  ret_from_fork+0x3fc/0x770
[   83.565231][  T141]  ? __pfx_ret_from_fork+0x10/0x10
[   83.565244][  T141]  ? __switch_to_asm+0x39/0x70
[   83.565260][  T141]  ? __switch_to_asm+0x33/0x70
[   83.565274][  T141]  ? __pfx_kthread+0x10/0x10
[   83.565292][  T141]  ret_from_fork_asm+0x1a/0x30
[   83.565308][  T141]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   84.080317][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.669329][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.720362][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.820709][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.916508][   T12] bridge_slave_1: left allmulticast mode
[   85.919331][   T12] bridge_slave_1: left promiscuous mode
[   85.921611][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.925920][   T12] bridge_slave_0: left allmulticast mode
[   85.927670][   T12] bridge_slave_0: left promiscuous mode
[   85.929436][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.993516][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   85.997663][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.000857][   T12] bond0 (unregistering): Released all slaves
[   86.221382][   T12] hsr_slave_0: left promiscuous mode
[   86.223935][   T12] hsr_slave_1: left promiscuous mode
[   86.228356][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.231329][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.234581][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.237790][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.243394][   T12] veth1_macvtap: left promiscuous mode
[   86.247075][   T12] veth0_macvtap: left promiscuous mode
[   86.248879][   T12] veth1_vlan: left promiscuous mode
[   86.250714][   T12] veth0_vlan: left promiscuous mode
[   86.345237][   T12] team0 (unregistering): Port device team_slave_1 removed
[   86.361387][   T12] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
03:40:56  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff822ec747 RBX=ffff8880fc600000 RCX=ffff888026af3980 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc9000322f328
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=fffff94000910d81
R12=00000000001221b0 R13=dffffc0000000000 R14=ffff88805fffa801 R15=0000000000001000
RIP=ffffffff81c036a7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555583d39500 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8b6dae56c0 CR3=00000001222f0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f8b6ce11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000251ee10
R8 =ffff8881073d0237 R9 =1ffff11020e7a046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98b7 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9845fc9095 CR3=0000000109006000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=2f322f6100302d74 652f2f317565702f
XMM06=0000000000000000 0000000000000000 XMM07=0000ff0000000000 00ff000000000000
XMM08=00000000ff000000 0000000000000000 XMM09=2f326e6170772f74 656e2f317968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
