last executing test programs:

29.583553348s ago: executing program 0 (id=873):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)={0x174, 0x1, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0xcc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}]}, 0x174}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000) (async)
sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x3, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xb0d1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2b7}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xe39}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x24040094)
socket$packet(0x11, 0x3, 0x300)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2)
sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r3, 0x501, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)={0x48, r5, 0x1, 0x70bd29, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x50) (async)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000003040002000c000280050001000000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x98, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x58, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9338fb738dc7acd4067bda8254d36cd691aec4cffbc31872b1903b25a25f9e47"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x85}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "79a09c9bf038ddf4ba73eb3d528235e4"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3e5fe97329af61b2e32d706d7a8978ec"}]}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2c84520558ac3e3cb0b729ccb3119b46"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8894b2aab0043de8ebb923fd92930fd0"}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x44090)

21.819124262s ago: executing program 0 (id=873):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)={0x174, 0x1, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0xcc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}]}, 0x174}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000) (async)
sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x3, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xb0d1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2b7}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xe39}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x24040094)
socket$packet(0x11, 0x3, 0x300)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2)
sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r3, 0x501, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)={0x48, r5, 0x1, 0x70bd29, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x50) (async)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000003040002000c000280050001000000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x98, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x58, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9338fb738dc7acd4067bda8254d36cd691aec4cffbc31872b1903b25a25f9e47"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x85}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "79a09c9bf038ddf4ba73eb3d528235e4"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3e5fe97329af61b2e32d706d7a8978ec"}]}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2c84520558ac3e3cb0b729ccb3119b46"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8894b2aab0043de8ebb923fd92930fd0"}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x44090)

16.910797132s ago: executing program 0 (id=873):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)={0x174, 0x1, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0xcc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}]}, 0x174}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000) (async)
sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x3, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xb0d1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2b7}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xe39}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x24040094)
socket$packet(0x11, 0x3, 0x300)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2)
sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r3, 0x501, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)={0x48, r5, 0x1, 0x70bd29, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x50) (async)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000003040002000c000280050001000000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x98, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x58, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9338fb738dc7acd4067bda8254d36cd691aec4cffbc31872b1903b25a25f9e47"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x85}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "79a09c9bf038ddf4ba73eb3d528235e4"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3e5fe97329af61b2e32d706d7a8978ec"}]}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2c84520558ac3e3cb0b729ccb3119b46"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8894b2aab0043de8ebb923fd92930fd0"}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x44090)

12.550694716s ago: executing program 0 (id=873):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)={0x174, 0x1, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0xcc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}]}, 0x174}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000) (async)
sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x3, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xb0d1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2b7}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xe39}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x24040094)
socket$packet(0x11, 0x3, 0x300)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2)
sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r3, 0x501, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)={0x48, r5, 0x1, 0x70bd29, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x50) (async)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000003040002000c000280050001000000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x98, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x58, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9338fb738dc7acd4067bda8254d36cd691aec4cffbc31872b1903b25a25f9e47"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x85}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "79a09c9bf038ddf4ba73eb3d528235e4"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3e5fe97329af61b2e32d706d7a8978ec"}]}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2c84520558ac3e3cb0b729ccb3119b46"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8894b2aab0043de8ebb923fd92930fd0"}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x44090)

7.686093887s ago: executing program 0 (id=873):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)={0x174, 0x1, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0xcc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}]}, 0x174}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000) (async)
sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x3, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xb0d1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2b7}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xe39}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x24040094)
socket$packet(0x11, 0x3, 0x300)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2)
sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r3, 0x501, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)={0x48, r5, 0x1, 0x70bd29, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x50) (async)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000003040002000c000280050001000000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x98, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x58, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9338fb738dc7acd4067bda8254d36cd691aec4cffbc31872b1903b25a25f9e47"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x85}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "79a09c9bf038ddf4ba73eb3d528235e4"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3e5fe97329af61b2e32d706d7a8978ec"}]}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2c84520558ac3e3cb0b729ccb3119b46"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8894b2aab0043de8ebb923fd92930fd0"}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x44090)

3.304577832s ago: executing program 0 (id=873):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)={0x174, 0x1, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0xcc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}]}, 0x174}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000) (async)
sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x3, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xb0d1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2b7}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xe39}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x24040094)
socket$packet(0x11, 0x3, 0x300)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2)
sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r3, 0x501, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)={0x48, r5, 0x1, 0x70bd29, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x400}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x50) (async)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000003040002000c000280050001000000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x98, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x58, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9338fb738dc7acd4067bda8254d36cd691aec4cffbc31872b1903b25a25f9e47"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x85}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "79a09c9bf038ddf4ba73eb3d528235e4"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3e5fe97329af61b2e32d706d7a8978ec"}]}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2c84520558ac3e3cb0b729ccb3119b46"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8894b2aab0043de8ebb923fd92930fd0"}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x44090)

2.281149931s ago: executing program 1 (id=1188):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2060005}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, r0)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008001}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000080001000000dd3c789b42c1a300000400048004000c800800020001000000180008801400070c08000500000000000800060000000000"], 0x44}}, 0x0)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000000899961d938534a6fe7358f3e020b10f3422d9442d1d0b4d43a55b0414f30cdb6cb5d6015622b1b18077d0a8c53b8584a88ca6d242e6b3bd60cb3bb2bc1e664f150c5b90451365c", @ANYRES16=r1, @ANYBLOB="00012cbd71212b00000000000cd4f8c29a55e0c825002d000000000400"/38], 0x28}, 0x1, 0x0, 0x0, 0x20018810}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000001a00)=@raw={'raw\x00', 0x4001, 0x3, 0x2d0, 0x140, 0x0, 0x148, 0x140, 0x148, 0x238, 0x240, 0x240, 0x238, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @loopback, 0xff000000, 0xff, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x88}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x4, 0x2000000, 0x0, 0x7}}, @common=@inet=@multiport={{0x50}, {0x0, 0xa, [0x4e23, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x4, 0x4000, 0x4e24, 0x4f20, 0x0, 0x0, 0x0, 0x4e20], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfe]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x6, 0x1, 'netbios-ns\x00', {0x8}}}}, {{@ip={@local, @private=0xa010102, 0xff, 0xffffff00, 'hsr0\x00', 'pim6reg\x00', {}, {}, 0x6c, 0x3, 0x50}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x4, 0x0, 0x4, 0xc, 0x4, 0x5], 0x3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xc, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600))
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000001740)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmsg$alg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18, 0x20004814}, 0x20008000)
sendmsg$nl_route_sched_retired(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004280)=@newtaction={0x61c, 0x30, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{0x608, 0x1, [@m_ipt={0x604, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x5d9, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x61c}}, 0x4000000)
read$alg(r5, &(0x7f0000000a00)=""/4087, 0xff7)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2.280418391s ago: executing program 1 (id=1189):
r0 = socket(0x10, 0x3, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d80)=@newqdisc={0x64, 0x15, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, r4, {0x4}, {0xfff1, 0x1}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x3, 0x2, 0xe9b2, 0xf38c, 0xa}, {0x1, 0x0, 0x0, 0x3, 0x401, 0x5}, 0x2, 0x8, 0x257}}, @TCA_TBF_RATE64={0xc, 0x4, 0x49d575b2170be625}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
pselect6(0x40, &(0x7f0000000000)={0x10, 0x4, 0x80000000000, 0x3, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0x0, 0x0, 0x0)
close(r7)
setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000280)=0x20ed, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r9=>0x0})
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4)
r10 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r10, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x8000, @mcast2, 0x2}], 0x1c)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRESHEX=r9, @ANYBLOB="211a0000000000002000128008000100687372001400028008000100", @ANYRES32=r8, @ANYBLOB="880002006dc7489190e40d58307e2375d8267777c9ab0ad48cc2514c9c48f6d8b9d13bc255c2d62edc21f9cc0089b0af10000000000000005843e2330af4ccf0fc00bb77481e050022a5fb9cc8732c0d599f7e20ee7e062d272ea89c006a8dca168c", @ANYRES32=r9, @ANYRESDEC=r5, @ANYRES32=r9, @ANYBLOB], 0x48}}, 0x0)

1.40364821s ago: executing program 1 (id=1191):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="34160000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x40b942b37d0000)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'wlan1\x00', 0x0})
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]})
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_sctp(0xa, 0x4, 0x84)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r6}, 0x18)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8)
write$cgroup_int(r8, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYRES8=r5, @ANYRESHEX, @ANYRESOCT=r3, @ANYRES32=r7, @ANYRES64=r7, @ANYRESDEC=0x0], &(0x7f0000000080)='GPL\x00'}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x400, 0x40006, 0xffffffff, 0x2}, 0x10)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
r9 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f0000000600)=""/123, 0x7b}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000800)=""/133, 0x85}], 0x5, 0x0, 0x4}}], 0x48}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x4000010, 0xffffffffffffffff, 0x54099000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a27f200022c00fe8000000000000000000000000000bbfe8000000000000000000000000000aaff0001080000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078080050e439cc1c50f9e8f0e11a069a10956846f9b94ac998f72d61715c8c4129345ff7afa956de43ce83b4c1b2fd7eafbe4262b2a5cceb924593f577cf04736141ea2ae5370d3f14c75cba771a9ee982efac6d632b944c8a90dcdae68109c259f0bfba1973a8b12f4d11dabc5d60ae87f6b6c78d6b2a01b5e1bda3afbb5fd61a2267026b611444954d06525cf062794471ed32d643f610ddbbfe8148fd2aa4a46e3e"], 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x66)

1.107306303s ago: executing program 2 (id=1196):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private1, 0x2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x60000000}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000340)={r2, @in={{0x2, 0x4e22, @empty}}, 0xfff3, 0x3}, 0x90) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@private, @multicast1, <r4=>0x0}, &(0x7f0000000280)=0xc)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000780)={r3, &(0x7f0000000840)="afb39b45c10bbe9a39beff883fb23968ea1c96a871b3", &(0x7f0000000880), 0x2}, 0x20) (async)
r6 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000080)=r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000004800817225bd7000ffdbdf250a007800", @ANYRES32=0x0, @ANYBLOB="ff00000008000200080000001400010000000000000000000000ffffac14140e"], 0x38}}, 0x4000080) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0x3, 0x39, 0x208, 0xffffffffffffffff, 0xc8a, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3, 0x8}, 0x50) (async, rerun: 32)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x1, 0x74, 0x1, 0x25, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0x3}, 0x50) (async, rerun: 32)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x10, r1}, 0x18) (async, rerun: 32)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50) (async, rerun: 32)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000151400000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fe800000000000000000000000000028000000003c00000000000000ffffffff00000000000000000000000002000000040300"/180], 0xfc}}, 0x0)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async, rerun: 64)
r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x101, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) (rerun: 64)
r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="03000000040200"/20, @ANYRES32, @ANYBLOB="01000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000100"/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000100000000000000f8ffffffb708000022ef9367cab1ed5000000000b7080000070000007b8a130001000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a50000001800000008000000000000000700000018690000080000000000000000000000592f0000010000008500000080000000852000000400000095000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000006c0)=[r6, r8, r9, 0x1, r1, r10, r11, r14, r15], &(0x7f0000000700)=[{0x0, 0x3, 0x1}, {0x0, 0x3, 0x4, 0x9}, {0x1, 0x2, 0x1, 0xc}, {0x5, 0x1, 0x10, 0x6}, {0x5, 0x3, 0x2, 0x7}, {0x0, 0x1, 0x10, 0x1}], 0x10, 0x9e}, 0x94)
r16 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r16, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 64)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7}) (rerun: 64)

829.939283ms ago: executing program 2 (id=1197):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x880)
bpf$ITER_CREATE(0x21, &(0x7f0000000780), 0x8)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYRESOCT], 0x38}}, 0x40054)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
r1 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbdf25090000000e0001006e65ff64657673696d0000000f0002006e657464657673696d3000000800030001ffc9a644000900030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000800090005000000"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040010)
openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x113141, 0x0)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="050a0400", @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf258300000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20048814}, 0x4000014)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0400d0000c00490006ac0f0006ac0f00080049000aac0f000d001501d1a8f611abd2c4c84d00000004001e0108004a0006ac0f00040008011400490005ac0f000dac0f000cac0f00000000000400cc000400e200"], 0x70}, 0x1, 0x0, 0x0, 0x40011}, 0x4000)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000812000002400128009000100626f6e640000000014000280080003000600000008000400030013ab"], 0x44}}, 0x28000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getpeername$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0xb)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0)

601.255055ms ago: executing program 2 (id=1198):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, 0xffffffff, 0xe0, 0x200, 0x200, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@broadcast, @broadcast, 0xffffff00, 0xff000000, 'veth1_macvtap\x00', 'wg2\x00', {}, {}, 0x4, 0x3, 0x48}, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@addrtype={{0x30}, {0x800, 0x2, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0x4, 0xfff, 0x94, 0xfffffff7, 0x9, 0x5, 0xd]}}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x3}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x4, 0x2}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x2, 0x2}, {0x1, 0x2, 0x5}, {0xffffffffffffffff, 0x4, 0x1}, 0x3, 0x4}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x17}, @multicast2, 0xffffffff, 0xffffffff, 'ipvlan0\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x1, 0x2, 0x12}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@ah={{0x30}, {[0x7f, 0x4]}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410)

521.028914ms ago: executing program 2 (id=1199):
syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0xfc1f, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x29, 0x0, '\x00', [@ra={0x5, 0x88, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0xfc1f, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x29, 0x0, '\x00', [@ra={0x5, 0x88, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x9c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x58, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x20050800)
syz_emit_ethernet(0x22, &(0x7f00000002c0)={@broadcast, @random="f5ab325f8d63", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x38, 0x14, 0x65, 0x0, 0xef, 0x2b, 0x0, @loopback, @loopback}}}}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="f800000016000100000000000000000000000000000000000000000000000000fc0200000000000000000000000000004e2000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff010000000000000000000000000001000000003c000000ffffffff0000000000000000000000000500000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000400000000000000f8ffffffffffffff00000000000000000000000000000000000a0000000000000000000000050000000500"/176], 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) (async)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x24}}, 0x0)

519.276367ms ago: executing program 1 (id=1200):
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x30, 0xffffffffffffffff, 0xfef66000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

450.491501ms ago: executing program 2 (id=1201):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) (async)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMRRU(r2, 0x4010744d, 0x0) (async)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="9fbeb3fea816fffdffffffff86dd600a843500140601fe8000000000000000000000000000bbfe80000000000000a9f0dd0a000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000020000008500000089000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x1e00, 0x61, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$int_in(r5, 0x5452, &(0x7f0000000280)=0xfffffffffffffff8) (async)
close(r5) (async)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000006c0)={<r7=>0x0, 0x81, 0x30, 0xe6, 0xfff}, &(0x7f0000000700)=0x18)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0xe, 0x4, 0x4c0, 0xffffffff, 0x320, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3f0, 0x3f0, 0x3f0, 0xffffffff, 0x4, &(0x7f0000000800), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @local, [0xffffff00, 0x29d564ca9709b7c9, 0x0, 0xff], [0xffffffff, 0xff000000, 0xff000000], 'macvlan0\x00', 'netdevsim0\x00', {}, {}, 0x1, 0x7, 0x0, 0x6}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x3e, "87e63960b3f18ca60a8c383e887e3e50aa638cd9a4cf4af032248ceb1bc0"}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xff000000, 0xff, 0xffffffff], [0xff, 0xff, 0xffffff00, 0xff000000], 'pim6reg1\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x2f, 0x4, 0x5, 0x10}, 0x0, 0x210, 0x238, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x2, 0xf], 0x4, 0x2, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @local, @remote, @remote, @mcast1, @mcast2, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0x36}, @mcast2, @loopback, @private1]}}, @common=@frag={{0x30}, {[0xffff, 0x81], 0x1, 0xa}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000740)={r7, @in={{0x2, 0x4e22, @empty}}}, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0x43, 0xa0, 0x238, 0x98, 0x330, 0x178, 0x178, 0x330, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1f0, 0x238, 0x0, {0x0, 0x7a010000}, [@common=@inet=@hashlimit3={{0x158}, {'bond_slave_0\x00', {0x9, 0x0, 0x57, 0x0, 0x0, 0x1, 0xe1, 0x3}}}, @inet=@rpfilter={{0x28}, {0xbb}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x428) (async)
syz_emit_ethernet(0x60, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x2a, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, @empty, {[], {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "55fffd4a98cc4abac94547a0f7488bab"}]}}, {"4fe5"}}}}}}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d80)=@newqdisc={0xfffffef7, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8}}, [@TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x0, 0xc1, 0x9b40, 0x101, 0x2, 0x5, 0x6}}, {0x0, 0x2, [0x8, 0x2]}}, {{0x0, 0x1, {0x0, 0x0, 0x9, 0x2, 0x1, 0x6, 0xffff}}, {0x0, 0x2, [0x10]}}, {{0x0, 0x1, {0x3, 0xf, 0x1, 0x5, 0x1, 0x8}}, {0x0, 0x2, [0x9f, 0xfffe, 0x9]}}, {{0x0, 0x1, {0x45, 0x4, 0xf2, 0x2, 0x2, 0x3, 0x23}}, {0x0, 0x2, [0xd, 0x8001, 0x5, 0x7, 0x0, 0x2]}}, {{0x0, 0x1, {0x80, 0x6, 0xd1, 0x100, 0x2, 0x3, 0x3}}, {0x0, 0x2, [0x3]}}, {{0x0, 0x1, {0xb, 0xf9, 0x1000, 0x80, 0x1, 0x40, 0xd}}, {0x0, 0x2, [0x3ff, 0xf1b, 0xff]}}, {{0x0, 0x1, {0x5e, 0x3, 0x2, 0x3, 0x2, 0x9, 0x7fff}}, {0x0, 0x2, [0x4, 0xff26, 0x9, 0x0]}}, {{0x0, 0x1, {0xf4, 0xf5, 0xe48, 0x7, 0x2, 0x9000, 0x6}}, {0x0, 0x2, [0x9, 0xfb, 0x3, 0xb1a, 0x9, 0x3, 0x2]}}, {{0x0, 0x1, {0x9, 0xf, 0x2, 0x7fffffff, 0x2, 0x2, 0x3}}, {0x0, 0x2, [0x8, 0x200, 0x100, 0x1, 0x87d]}}]}, @qdisc_kind_options=@q_pie={{}, {0x0, 0x2, [@TCA_PIE_BYTEMODE={0x0, 0x7, 0x1}, @TCA_PIE_BETA={0x0, 0x5, 0x5}, @TCA_PIE_LIMIT={0x0, 0x2, 0x68}, @TCA_PIE_ALPHA={0x0, 0x4, 0x20}]}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}, @TCA_HHF_ADMIT_BYTES={0x0, 0x5, 0xc9b0b50}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x5}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r9, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r10 = socket(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
socket$nl_crypto(0x10, 0x3, 0x15)

329.960936ms ago: executing program 1 (id=1202):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="b4000000000090006910a30000000000040000000000000095000200000000002f994f61ef34eeba1fc4a883ce77b9a9bb6cc1c98d9186"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000003480)={0x0, 'ip6erspan0\x00', {0x3}, 0x7})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r2, 0x331, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000580))
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)=0x10000000)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x8102, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)=0x3)
close(r4)
write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
recvmmsg(r0, &(0x7f00000048c0)=[{{&(0x7f0000000000)=@x25, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/143, 0x8f}, {&(0x7f0000000180)=""/231, 0xe7}], 0x2, &(0x7f00000002c0)=""/213, 0xd5}, 0xfff}, {{&(0x7f00000003c0)=@ax25={{0x3, @default}, [@default, @rose, @bcast, @null, @null, @default, @remote, @bcast]}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000500)=""/193, 0xc1}, {&(0x7f0000000600)=""/185, 0xb9}, {&(0x7f00000006c0)=""/192, 0xc0}, {&(0x7f0000000780)=""/62, 0x3e}, {&(0x7f0000000800)=""/244, 0xf4}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/222, 0xde}], 0x7}, 0x4}, {{&(0x7f0000001a80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/212, 0xd4}], 0x1, &(0x7f0000001c40)=""/20, 0x14}, 0x1}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001c80)=""/230, 0xe6}, {&(0x7f0000001d80)=""/32, 0x20}, {&(0x7f0000001dc0)=""/106, 0x6a}], 0x3, &(0x7f0000001e80)=""/84, 0x54}, 0x3}, {{&(0x7f0000001f00)=@nl, 0x80, &(0x7f0000003040)=[{&(0x7f0000001f80)=""/144, 0x90}, {&(0x7f0000002040)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000003080)=""/130, 0x82}, {&(0x7f0000003140)=""/73, 0x49}], 0x2, &(0x7f0000003200)=""/148, 0x94}, 0xfffffffd}, {{&(0x7f00000032c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000004800)=[{&(0x7f0000003340)=""/237, 0xed}, {&(0x7f0000003440)=""/63, 0x3f}, {&(0x7f0000003480)}, {&(0x7f00000034c0)=""/4, 0x4}, {&(0x7f0000003500)=""/28, 0x1c}, {&(0x7f0000003540)=""/226, 0xe2}, {&(0x7f0000003640)=""/232, 0xe8}, {&(0x7f0000003740)=""/43, 0x2b}, {&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000004780)=""/89, 0x59}], 0xa}, 0x9}], 0x7, 0x0, &(0x7f0000004a80)={0x0, 0x989680})

329.575106ms ago: executing program 2 (id=1203):
r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010100000000000000000400ffff14000780080012400000000505001500090000000500940006000000050005000a00000041258dcc46b230aad2ed8efbe38b5bd1050004310000000014000300686173683a69702c706f72742c697000a16240ba921a665da86268dc92adceead31c8caac7f42b538fda02a7507bf36851b911630744d36a59999949780c98d9ba2f4ecaaceaead3e96b8a4cfcf4caf3080eee01a6546b88e8043919918323325839114176e8333aee3e5aceaa9745b8be4f1c56d9e3710b2e"], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) (async)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r2, r2, 0xc, 0x1, &(0x7f0000000140)="c0", 0x9, 0x52, 0x10cf, 0x7, 0x9, 0x0, 0x4, 'syz1\x00'}) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x48) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
close(r5)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000180)={'wg1\x00', <r6=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1000b, 0x0, 0x0, 0x41000, 0x10}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r7, 0x8b2a, &(0x7f0000000040)) (async, rerun: 32)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) (rerun: 32)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, <r9=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r9, 0x4) (async)
r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r10, &(0x7f0000000dc0)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r11, &(0x7f0000000700), 0x0}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x11, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000007000000000000000500000018110000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0xb7, 0x8, &(0x7f0000000080)=""/8, 0x40f00, 0x8, '\x00', r6, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xf, 0x84e, 0xd5a}, 0x10, r9, r5, 0x1, &(0x7f0000000340)=[r11, r4], &(0x7f0000000380)=[{0x0, 0x2, 0x3}], 0x10, 0x2}, 0x94) (async, rerun: 32)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r9, 0x4) (rerun: 32)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x49, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES8=0x0, @ANYRESOCT=r0, @ANYRESDEC=r0], 0x20}}, 0x0)

0s ago: executing program 1 (id=1204):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})
socketpair(0xd87b2aef6535a4b5, 0x800, 0xd83, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1d0, 0x1d0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8, 0x0, {0x3ed}}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x3b}, @multicast2, 0xffffff00, 0xff000000, 0xff, 0x1, {@mac=@link_local}, {@empty, {[0x0, 0xff, 0xff]}}, 0x0, 0x4, 0xffff, 0xc092, 0x0, 0x2, 'gretap0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x6}}}, {{@arp={@initdev={0xac, 0x1e, 0xfe, 0x0}, @broadcast, 0xff, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x5, 0xe, 0x0, 'bridge0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x0, 0x1a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @multicast1, @broadcast, 0x7, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x418)
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000009c0)={r2, r3, 0x9, 0xa9, &(0x7f0000000400)="e1c76daffb8ce1713015a45530c3889cb6ee35467b20d25c4c3afa823bd801596cd2bbc7ba01dc75583110bf44f6a391f2c24f939c695886a9544ce41c9b07563813f2dd4af88e4c233621bd9caccd5b6755725730367cf36aede98c276dd9b5259f46fe06f0957b8c77fe2eb8a3cb01afc09deabab0f5505d20c9cb1728788d536b9eb42188dd7ccb7a7fe55502c365315f161174e54a7b0783b15f80210635733e01f7e3dba8b136", 0x0, 0x7f, 0xee7d, 0x8, 0x10, 0x1, 0x7, 'syz0\x00'})
close(0x3)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x40}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0xb0, r7, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x10d5, 0x79}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8de3301e071a313e29d36d4f1be380397e49d1042e51634e"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4010}, 0x20008900)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:4068' (ED25519) to the list of known hosts.
syzkaller login: [   56.199206][ T5811] cgroup: Unknown subsys name 'net'
[   56.288309][ T5811] cgroup: Unknown subsys name 'cpuset'
[   56.303178][ T5811] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.295167][ T5811] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.018592][ T5217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.044043][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.048326][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.050769][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.053657][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.057073][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.059486][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.062632][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.085210][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.088193][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.093050][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.103176][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.105780][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.108669][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.108806][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.359461][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   63.512174][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   63.520463][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   63.530558][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.534424][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.537462][ T5831] bridge_slave_0: entered allmulticast mode
[   63.541365][ T5831] bridge_slave_0: entered promiscuous mode
[   63.589606][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.592625][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.596617][ T5831] bridge_slave_1: entered allmulticast mode
[   63.599773][ T5831] bridge_slave_1: entered promiscuous mode
[   63.671251][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.704724][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.708512][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.711650][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.715933][ T5827] bridge_slave_0: entered allmulticast mode
[   63.719729][ T5827] bridge_slave_0: entered promiscuous mode
[   63.770162][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.773369][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.776287][ T5827] bridge_slave_1: entered allmulticast mode
[   63.780071][ T5827] bridge_slave_1: entered promiscuous mode
[   63.799458][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.802493][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.807644][ T5835] bridge_slave_0: entered allmulticast mode
[   63.811653][ T5835] bridge_slave_0: entered promiscuous mode
[   63.818581][ T5831] team0: Port device team_slave_0 added
[   63.834579][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.837704][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.840091][ T5835] bridge_slave_1: entered allmulticast mode
[   63.843084][ T5835] bridge_slave_1: entered promiscuous mode
[   63.847916][ T5831] team0: Port device team_slave_1 added
[   63.861641][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.895467][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.900493][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.904748][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.907322][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.917720][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.943382][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.947204][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.949462][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.958932][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.965441][ T5827] team0: Port device team_slave_0 added
[   63.982467][ T5827] team0: Port device team_slave_1 added
[   64.006395][ T5835] team0: Port device team_slave_0 added
[   64.010765][ T5835] team0: Port device team_slave_1 added
[   64.046898][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.049184][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.058109][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.075448][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.077700][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.088091][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.094137][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.096316][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.104647][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.118288][ T5831] hsr_slave_0: entered promiscuous mode
[   64.121556][ T5831] hsr_slave_1: entered promiscuous mode
[   64.139377][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.142197][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.152157][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.200731][ T5827] hsr_slave_0: entered promiscuous mode
[   64.203547][ T5827] hsr_slave_1: entered promiscuous mode
[   64.206108][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.209173][ T5827] Cannot create hsr debugfs directory
[   64.288593][ T5835] hsr_slave_0: entered promiscuous mode
[   64.291893][ T5835] hsr_slave_1: entered promiscuous mode
[   64.296056][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.299088][ T5835] Cannot create hsr debugfs directory
[   64.566299][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.573090][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.581448][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.600432][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.635121][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.650352][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.676117][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.682193][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.712583][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.719824][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.731508][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.747058][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.839088][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.865924][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   64.890711][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.893825][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.900030][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.903087][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.916749][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.947441][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   64.971956][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.990470][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.993411][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.013887][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.016056][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.041858][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   65.076462][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.078904][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.096170][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.099054][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.124053][ T5833] Bluetooth: hci0: command tx timeout
[   65.213252][ T5833] Bluetooth: hci2: command tx timeout
[   65.215180][ T5833] Bluetooth: hci1: command tx timeout
[   65.234673][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.286279][ T5827] veth0_vlan: entered promiscuous mode
[   65.295070][ T5827] veth1_vlan: entered promiscuous mode
[   65.347779][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.379908][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.385170][ T5827] veth0_macvtap: entered promiscuous mode
[   65.395357][ T5827] veth1_macvtap: entered promiscuous mode
[   65.444083][ T5831] veth0_vlan: entered promiscuous mode
[   65.458017][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.469859][ T5831] veth1_vlan: entered promiscuous mode
[   65.477836][ T5835] veth0_vlan: entered promiscuous mode
[   65.483998][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.496388][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.499982][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.504898][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.508347][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.516871][ T5835] veth1_vlan: entered promiscuous mode
[   65.577656][ T5831] veth0_macvtap: entered promiscuous mode
[   65.599975][ T5831] veth1_macvtap: entered promiscuous mode
[   65.621956][ T5835] veth0_macvtap: entered promiscuous mode
[   65.640578][ T5835] veth1_macvtap: entered promiscuous mode
[   65.656309][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.659375][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.664545][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.690076][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.720761][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.725577][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.728512][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.731312][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.740567][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.747778][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.755857][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.775327][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.784255][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.787724][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.791089][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.799721][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.840209][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.846380][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.859752][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.883526][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.886435][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.947958][  T925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.952259][  T925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.978782][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.981239][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.000772][ T5895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'.
[   66.009968][ T5895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'.
[   66.109723][ T5899] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   66.274013][ T5911] openvswitch: netlink: Duplicate or invalid key (type 0).
[   66.296279][ T5911] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.369580][ T5918] warning: `syz.0.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.480212][ T5924] netlink: 9 bytes leftover after parsing attributes in process `syz.0.11'.
[   66.487310][ T5924] 0: renamed from hsr0 (while UP)
[   66.497648][ T5924] 0: entered allmulticast mode
[   66.499138][ T5924] hsr_slave_0: entered allmulticast mode
[   66.500894][ T5924] hsr_slave_1: entered allmulticast mode
[   66.513718][ T5924] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[   66.814297][ T5942] syzkaller0: entered promiscuous mode
[   66.816399][ T5942] syzkaller0: entered allmulticast mode
[   66.999275][ T5952] netlink: 'syz.2.17': attribute type 10 has an invalid length.
[   67.017586][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.026418][ T5952] team0: Port device bond0 added
[   67.166448][ T5956] openvswitch: netlink: Message has 4 unknown bytes.
[   67.173768][ T5956] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.203304][   T54] Bluetooth: hci0: command tx timeout
[   67.208684][ T5957] Zero length message leads to an empty skb
[   67.283875][   T54] Bluetooth: hci1: command tx timeout
[   67.285248][ T5833] Bluetooth: hci2: command tx timeout
[   67.364606][ T5962] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   67.787139][ T5972] netlink: 68 bytes leftover after parsing attributes in process `syz.0.23'.
[   67.909767][ T5982] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   67.922103][ T5982] netlink: 'syz.2.26': attribute type 2 has an invalid length.
[   68.017946][ T5993] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.056868][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'.
[   68.059719][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26'.
[   68.066418][ T5996] netlink: 'syz.2.26': attribute type 12 has an invalid length.
[   68.135275][ T5998] Bluetooth: MGMT ver 1.23
[   68.144685][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31'.
[   68.185629][ T6005] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.218168][ T6008] netlink: 'syz.2.32': attribute type 39 has an invalid length.
[   68.231806][ T6005] netlink: 'syz.2.32': attribute type 39 has an invalid length.
[   68.288350][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'.
[   68.357298][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'.
[   68.367322][ T6021] ip6erspan0: entered allmulticast mode
[   68.439117][ T6026] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   68.527927][ T6030] team0: No ports can be present during mode change
[   68.685444][ T6028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.39'.
[   68.724366][ T6039] netlink: 'syz.1.41': attribute type 1 has an invalid length.
[   68.779437][ T6039] veth3: entered promiscuous mode
[   68.796200][ T6043] erspan0: entered allmulticast mode
[   69.289947][ T5833] Bluetooth: hci0: command tx timeout
[   69.363216][ T5833] Bluetooth: hci1: command tx timeout
[   69.365319][ T5833] Bluetooth: hci2: command tx timeout
[   69.383841][ T6074] syz.0.50 uses obsolete (PF_INET,SOCK_PACKET)
[   69.563557][ T6084] netlink: 'syz.1.53': attribute type 1 has an invalid length.
[   69.892604][ T6113] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.238023][ T6142] delete_channel: no stack
[   70.391560][ T6160] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   70.391976][ T5859] bond0: (slave bond_slave_0): interface is now down
[   70.406001][ T6163] trusted_key: syz.2.78 sent an empty control message without MSG_MORE.
[   70.410512][ T5859] bond0: (slave bond_slave_1): interface is now down
[   70.433782][   T13] bond0: (slave bond_slave_0): interface is now down
[   70.435933][   T13] bond0: (slave bond_slave_1): interface is now down
[   70.464961][ T5859] bond0: (slave bond_slave_0): interface is now down
[   70.468113][ T5859] bond0: (slave bond_slave_1): interface is now down
[   70.485002][ T5859] bond0: (slave bond_slave_0): interface is now down
[   70.491098][ T5859] bond0: (slave bond_slave_1): interface is now down
[   70.500207][ T5859] bond0: now running without any active interface!
[   70.935845][ T6196] ip6gre1: entered allmulticast mode
[   70.945296][ T6196] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071844200453)
[   70.949412][ T6196] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[   71.035420][ T6214] __nla_validate_parse: 12 callbacks suppressed
[   71.035437][ T6214] netlink: 204 bytes leftover after parsing attributes in process `syz.0.94'.
[   71.126150][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.131734][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.169596][ T6224] netlink: 'syz.1.96': attribute type 83 has an invalid length.
[   71.295723][ T6228] netlink: 40 bytes leftover after parsing attributes in process `syz.1.97'.
[   71.364009][ T5833] Bluetooth: hci0: command tx timeout
[   71.443207][ T5833] Bluetooth: hci1: command tx timeout
[   71.448371][ T6240] sctp: [Deprecated]: syz.1.101 (pid 6240) Use of int in max_burst socket option deprecated.
[   71.448371][ T6240] Use struct sctp_assoc_value instead
[   71.452984][ T5833] Bluetooth: hci2: command tx timeout
[   71.521009][ T6246] netlink: 300 bytes leftover after parsing attributes in process `syz.1.103'.
[   71.588701][ T6252] sctp: [Deprecated]: syz.2.102 (pid 6252) Use of int in maxseg socket option.
[   71.588701][ T6252] Use struct sctp_assoc_value instead
[   71.796075][ T6259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.107'.
[   71.801088][ T6259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.107'.
[   71.803983][ T6259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.107'.
[   71.868971][ T6264] tap0: tun_chr_ioctl cmd 1074025677
[   71.878837][ T6264] tap0: linktype set to 825
[   71.932334][ T6264] netlink: 'syz.2.110': attribute type 1 has an invalid length.
[   71.999063][ T6277] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.113'.
[   72.093573][ T6288] 8021q: adding VLAN 0 to HW filter on device batadv1
[   72.097067][ T6288] team0: Failed to send port change of device batadv1 via netlink (err -105)
[   72.099801][ T6288] team0: Failed to send options change via netlink (err -105)
[   72.102384][ T6288] team0: Port device batadv1 added
[   72.130389][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'.
[   72.144175][ T6291] netlink: 52 bytes leftover after parsing attributes in process `syz.0.119'.
[   72.151738][ T6294] netlink: 34 bytes leftover after parsing attributes in process `syz.2.120'.
[   72.309378][ T6310] tipc: Started in network mode
[   72.311063][ T6310] tipc: Node identity bab20febdd3e, cluster identity 4711
[   72.317140][ T6310] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.328810][ T6310] syzkaller0: entered promiscuous mode
[   72.330585][ T6310] syzkaller0: entered allmulticast mode
[   72.359451][ T6310] tipc: Resetting bearer <eth:syzkaller0>
[   72.402159][ T6320] netlink: 'syz.1.128': attribute type 1 has an invalid length.
[   72.446634][ T6309] tipc: Resetting bearer <eth:syzkaller0>
[   72.470997][ T6309] tipc: Disabling bearer <eth:syzkaller0>
[   72.522562][ T6322] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   72.540245][ T5859] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   72.546923][ T6320] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.565669][ T6320] bridge_slave_0: left allmulticast mode
[   72.567426][ T6320] bridge_slave_0: left promiscuous mode
[   72.570360][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.591474][ T6320] bridge_slave_1: left allmulticast mode
[   72.595551][ T6320] bridge_slave_1: left promiscuous mode
[   72.603657][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.630223][ T6320] bond0: (slave bond_slave_0): Releasing backup interface
[   72.639742][ T6320] bond0: (slave bond_slave_1): Releasing backup interface
[   72.654232][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   72.659538][ T6320] team0: Port device team_slave_0 removed
[   72.669412][ T6320] team0: Port device team_slave_1 removed
[   72.672648][ T6320] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.677286][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.681354][ T6320] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.690215][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.700809][ T6334] netlink: 'syz.0.130': attribute type 1 has an invalid length.
[   72.708155][ T6320] bond1: (slave ip6gretap1): Removing an active aggregator
[   72.711455][ T6320] bond1: (slave ip6gretap1): Releasing backup interface
[   72.731988][ T6334] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   73.149175][ T6375] x_tables: duplicate underflow at hook 3
[   73.683663][ T6390] batadv_slave_1: entered promiscuous mode
[   73.743538][ T6389] batadv_slave_1: left promiscuous mode
[   74.180127][ T6424] IPv6: sit1: Disabled Multicast RS
[   74.203833][ T6424] sit1: entered allmulticast mode
[   74.215926][ T6425] netlink: 'syz.2.157': attribute type 2 has an invalid length.
[   74.686032][ T6443] netlink: 'syz.1.167': attribute type 11 has an invalid length.
[   74.894517][ T6452] netlink: 'syz.0.170': attribute type 1 has an invalid length.
[   75.141919][ T6457] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.155567][ T6462] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.157956][ T6462] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[   75.165965][ T6462] bond1: (slave vti0): Error -95 calling set_mac_address
[   75.189094][ T6467] netlink: 'syz.1.175': attribute type 11 has an invalid length.
[   75.435970][ T6488] sctp: [Deprecated]: syz.0.182 (pid 6488) Use of struct sctp_assoc_value in delayed_ack socket option.
[   75.435970][ T6488] Use struct sctp_sack_info instead
[   75.704892][ T6511] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   76.567209][ T6526] netlink: 'syz.0.196': attribute type 22 has an invalid length.
[   76.570657][ T6526] netlink: 'syz.0.196': attribute type 22 has an invalid length.
[   76.574174][ T6526] netlink: 'syz.0.196': attribute type 22 has an invalid length.
[   76.577292][ T6526] netlink: 'syz.0.196': attribute type 22 has an invalid length.
[   76.580153][ T6526] netlink: 'syz.0.196': attribute type 22 has an invalid length.
[   76.617306][ T6526] __nla_validate_parse: 20 callbacks suppressed
[   76.617323][ T6526] netlink: 732 bytes leftover after parsing attributes in process `syz.0.196'.
[   76.628585][ T6526] netlink: 732 bytes leftover after parsing attributes in process `syz.0.196'.
[   76.764929][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'.
[   77.089957][ T6557] xt_CT: You must specify a L4 protocol and not use inversions on it
[   77.263536][ T6575] batadv_slave_0: entered promiscuous mode
[   77.276310][ T6568] batadv_slave_0: left promiscuous mode
[   77.376113][ T6581] xt_socket: unknown flags 0xd0
[   77.405955][ T6581] netlink: 236 bytes leftover after parsing attributes in process `syz.0.214'.
[   77.439579][ T6586] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   77.442551][ T6586] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   77.447808][ T6586] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   77.462813][ T6586] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   77.466753][ T6586] geneve2: entered promiscuous mode
[   77.551175][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'.
[   77.560835][   T24] IPVS: starting estimator thread 0...
[   77.573110][ T6600] netlink: 24 bytes leftover after parsing attributes in process `syz.0.220'.
[   77.595875][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.218'.
[   77.598814][ T6596] netlink: 60 bytes leftover after parsing attributes in process `syz.1.218'.
[   77.652559][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'.
[   77.659192][ T6599] IPVS: using max 48 ests per chain, 115200 per kthread
[   77.716530][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   77.787336][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.225'.
[   78.459870][   T33] audit: type=1804 audit(1752682194.752:2): pid=6623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.226" name="memory.events" dev="tmpfs" ino=424 res=1 errno=0
[   78.479896][   T33] audit: type=1800 audit(1752682194.752:3): pid=6623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.226" name="memory.events" dev="tmpfs" ino=424 res=0 errno=0
[   78.812041][ T6658] IPv6: syztnl1: Disabled Multicast RS
[   78.966131][   T33] audit: type=1804 audit(1752682195.262:4): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.243" name="/newroot/74/memory.events" dev="tmpfs" ino=398 res=1 errno=0
[   78.987834][   T33] audit: type=1800 audit(1752682195.262:5): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.243" name="memory.events" dev="tmpfs" ino=398 res=0 errno=0
[   79.305249][ T6699] netdevsim netdevsim2: Direct firmware load for .. failed with error -2
[   79.308471][ T6699] netdevsim netdevsim2: Falling back to sysfs fallback for: ..
[   79.707388][ T6716] only policy match revision 0 supported
[   79.707406][ T6716] unable to load match
[   80.217717][ T6724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   80.225192][ T6726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   81.169355][ T6744] validate_nla: 61 callbacks suppressed
[   81.169392][ T6744] netlink: 'syz.2.269': attribute type 10 has an invalid length.
[   81.175616][ T6744] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   81.258139][ T6747] syzkaller0: entered promiscuous mode
[   81.260446][ T6747] syzkaller0: entered allmulticast mode
[   81.389130][   T47] cfg80211: failed to load regulatory.db
[   81.838616][ T6751] x_tables: duplicate underflow at hook 3
[   82.042563][ T6760] xt_hashlimit: size too large, truncated to 1048576
[   82.495775][ T6765] syzkaller0: entered allmulticast mode
[   82.659516][ T6779] __nla_validate_parse: 6 callbacks suppressed
[   82.659532][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'.
[   83.511330][ T6794] netlink: 40 bytes leftover after parsing attributes in process `syz.2.284'.
[   83.546687][ T6794] pimreg: entered allmulticast mode
[   83.560704][ T6794] pimreg: left allmulticast mode
[   83.592445][ T6796] tipc: Started in network mode
[   83.594724][ T6796] tipc: Node identity 3e8b92e5edd8, cluster identity 4711
[   83.597015][ T6796] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.599339][ T6796] syzkaller0: entered promiscuous mode
[   83.601046][ T6796] syzkaller0: entered allmulticast mode
[   83.607251][ T6801] tipc: Resetting bearer <eth:syzkaller0>
[   83.609121][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'.
[   83.616513][ T6795] tipc: Resetting bearer <eth:syzkaller0>
[   83.624724][ T6795] tipc: Disabling bearer <eth:syzkaller0>
[   83.975243][ T6819] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   83.979935][ T6819] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (65536)
[   83.990672][ T6819] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   84.003682][ T6813] netlink: 20 bytes leftover after parsing attributes in process `syz.2.289'.
[   84.024453][ T6813] SET target dimension over the limit!
[   84.046788][ T6810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.289'.
[   84.303819][ T6825] netlink: 68 bytes leftover after parsing attributes in process `syz.2.293'.
[   85.026931][ T6850] netlink: 28 bytes leftover after parsing attributes in process `syz.0.298'.
[   85.029808][ T6850] netlink: 'syz.0.298': attribute type 7 has an invalid length.
[   85.032178][ T6850] netlink: 'syz.0.298': attribute type 8 has an invalid length.
[   85.041347][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'.
[   85.052127][ T6850] gretap0: entered promiscuous mode
[   85.054838][ T6850] batadv_slave_1: entered promiscuous mode
[   85.057293][ T6850] erspan0: entered promiscuous mode
[   85.060151][ T6850] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.067146][ T6850] Cannot create hsr debugfs directory
[   85.682977][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   85.847802][ T6878] Cannot find set identified by id 1 to match
[   85.942127][ T6883] sctp: [Deprecated]: syz.1.309 (pid 6883) Use of int in maxseg socket option.
[   85.942127][ T6883] Use struct sctp_assoc_value instead
[   85.970163][ T6886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.310'.
[   85.973241][ T6886] netlink: 'syz.1.310': attribute type 7 has an invalid length.
[   85.975809][ T6886] netlink: 'syz.1.310': attribute type 8 has an invalid length.
[   85.978666][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'.
[   86.163775][ T6871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.346514][ T6907] netlink: 'syz.0.316': attribute type 4 has an invalid length.
[   86.552086][ T6915] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   86.950967][ T6933] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   87.273960][ T6952] netlink: 'syz.2.335': attribute type 7 has an invalid length.
[   87.294005][ T6952] netlink: 'syz.2.335': attribute type 8 has an invalid length.
[   87.334727][ T6952] gretap0: entered promiscuous mode
[   87.338362][ T6952] batadv_slave_1: entered promiscuous mode
[   87.341877][ T6952] erspan0: entered promiscuous mode
[   87.588038][ T6976] netlink: 'syz.2.344': attribute type 10 has an invalid length.
[   87.601298][ T6976] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.604861][ T6976] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.623963][ T6976] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.626804][ T6976] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.629890][ T6976] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.632907][ T6976] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.652022][ T6976] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   87.727921][ T6984] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[   88.037392][ T7010] x_tables: duplicate underflow at hook 1
[   88.109077][ T7012] xt_CT: No such helper "pptp"
[   88.112256][ T7012] x_tables: duplicate underflow at hook 1
[   88.174495][ T7023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.184650][ T7023] __nla_validate_parse: 10 callbacks suppressed
[   88.184659][ T7023] netlink: 44 bytes leftover after parsing attributes in process `syz.0.359'.
[   88.193167][ T7024] netlink: 44 bytes leftover after parsing attributes in process `syz.0.359'.
[   88.312058][ T7026] netlink: 180 bytes leftover after parsing attributes in process `syz.1.360'.
[   88.732668][ T7033] netlink: 132 bytes leftover after parsing attributes in process `syz.2.363'.
[   88.772647][ T7035] netlink: 'syz.0.364': attribute type 1 has an invalid length.
[   88.815657][ T7035] gretap1: entered promiscuous mode
[   88.927717][ T7048] netlink: 76 bytes leftover after parsing attributes in process `syz.0.369'.
[   89.096347][ T7060] netlink: 100 bytes leftover after parsing attributes in process `syz.2.373'.
[   89.099968][ T7060] netlink: 100 bytes leftover after parsing attributes in process `syz.2.373'.
[   89.356919][ T7087] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   89.361238][ T7087] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   89.464434][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.384'.
[   89.767909][ T7120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.393'.
[   89.771518][ T7120] netlink: 'syz.2.393': attribute type 7 has an invalid length.
[   89.775601][ T7120] netlink: 'syz.2.393': attribute type 8 has an invalid length.
[   89.778564][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'.
[   89.880025][ T7123] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   89.961373][ T7123] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.964238][ T7123] batadv_slave_0: entered promiscuous mode
[   90.265270][ T7156] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   90.407800][ T7154] ip6gre1: entered allmulticast mode
[   90.461312][ T7171] netlink: 'syz.0.410': attribute type 29 has an invalid length.
[   90.464326][ T7171] netlink: 'syz.0.410': attribute type 29 has an invalid length.
[   90.466968][ T7171] netlink: 'syz.0.410': attribute type 29 has an invalid length.
[   90.725024][ T7200] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up
[   91.290949][ T7234] xt_hashlimit: size too large, truncated to 1048576
[   91.359016][ T7239] validate_nla: 28 callbacks suppressed
[   91.359029][ T7239] netlink: 'syz.0.431': attribute type 7 has an invalid length.
[   91.384854][ T7239] netlink: 'syz.0.431': attribute type 8 has an invalid length.
[   91.701867][ T7261] netlink: 'syz.1.437': attribute type 4 has an invalid length.
[   91.791875][ T7269] netlink: 'syz.0.441': attribute type 7 has an invalid length.
[   91.803045][ T7269] netlink: 'syz.0.441': attribute type 8 has an invalid length.
[   92.034182][ T7293] netlink: 'syz.0.452': attribute type 7 has an invalid length.
[   92.036814][ T7293] netlink: 'syz.0.452': attribute type 8 has an invalid length.
[   92.391878][ T7311] xt_hashlimit: size too large, truncated to 1048576
[   92.712075][ T7329] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   92.784631][ T7341] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20002
[   92.943507][ T7353] bond1: entered promiscuous mode
[   92.945178][ T7353] bond1: entered allmulticast mode
[   92.947307][ T7353] 8021q: adding VLAN 0 to HW filter on device bond1
[   93.031669][ T7365] xt_l2tp: missing protocol rule (udp|l2tpip)
[   93.398751][ T7396] __nla_validate_parse: 15 callbacks suppressed
[   93.398765][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.485'.
[   93.409134][ T7396] netlink: 'syz.0.485': attribute type 1 has an invalid length.
[   93.412192][ T7396] netlink: 108 bytes leftover after parsing attributes in process `syz.0.485'.
[   93.571953][ T7417] tun0: tun_chr_ioctl cmd 1074025677
[   93.577663][ T7417] tun0: linktype set to 778
[   93.600101][ T7422] nbd: must specify a device to reconfigure
[   93.669580][ T7426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.494'.
[   93.679914][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'.
[   93.770252][ T7435] xt_HMARK: proto mask must be zero with L3 mode
[   93.840749][ T7441] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   93.924965][ T7444] block nbd2: NBD_DISCONNECT
[   94.206401][ T7460] netlink: 'syz.0.507': attribute type 2 has an invalid length.
[   94.233427][ T7462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.508'.
[   94.246761][ T7462] IPv4: Oversized IP packet from 172.20.20.24
[   94.250099][    C0] IPv4: Oversized IP packet from 172.20.20.24
[   94.252369][    C0] IPv4: Oversized IP packet from 172.20.20.24
[   95.253506][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'.
[   95.256179][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'.
[   95.271731][ T7487] netlink: 52 bytes leftover after parsing attributes in process `syz.0.515'.
[   95.275408][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'.
[   95.342445][ T7496] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   95.380971][ T7499] netlink: 201916 bytes leftover after parsing attributes in process `syz.0.519'.
[   95.490589][ T7497] unknown channel width for channel at 909000KHz?
[   95.582658][ T7510] netlink: 'syz.1.524': attribute type 15 has an invalid length.
[   95.905810][ T7533] IPVS: sync thread started: state = BACKUP, mcast_ifn = xfrm0, syncid = 1, id = 0
[   95.909793][ T7531] IPVS: stopping backup sync thread 7533 ...
[   96.373072][ T7573] veth1_to_team: entered allmulticast mode
[   96.384595][ T7573] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[   96.528954][ T7589] validate_nla: 4 callbacks suppressed
[   96.528967][ T7589] netlink: 'syz.2.554': attribute type 1 has an invalid length.
[   96.543199][ T7590] netlink: 'syz.2.554': attribute type 1 has an invalid length.
[   96.562360][ T7592] netlink: 'syz.1.555': attribute type 2 has an invalid length.
[   96.594394][ T7592] netlink: 'syz.1.555': attribute type 1 has an invalid length.
[   96.597180][ T7592] netlink: 'syz.1.555': attribute type 2 has an invalid length.
[   96.646176][ T7599] 8021q: adding VLAN 0 to HW filter on device bond2
[   98.421707][ T7663] __nla_validate_parse: 13 callbacks suppressed
[   98.421720][ T7663] netlink: 28 bytes leftover after parsing attributes in process `syz.2.574'.
[   98.426904][ T7663] netlink: 'syz.2.574': attribute type 7 has an invalid length.
[   98.429513][ T7663] netlink: 'syz.2.574': attribute type 8 has an invalid length.
[   98.431801][ T7663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'.
[   98.518496][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'.
[   98.537566][ T7669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.577'.
[   99.043265][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.581'.
[   99.127647][ T7703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.583'.
[   99.131111][ T7703] netlink: 'syz.0.583': attribute type 7 has an invalid length.
[   99.139900][ T7703] netlink: 'syz.0.583': attribute type 8 has an invalid length.
[   99.152939][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'.
[   99.281808][ T7713] netlink: 28 bytes leftover after parsing attributes in process `syz.1.586'.
[   99.294535][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'.
[   99.342621][ T7719] tipc: Started in network mode
[   99.347529][ T7719] tipc: Node identity ac14142a, cluster identity 4711
[   99.351229][ T7719] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   99.546057][ T7732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.594'.
[   99.548849][ T7732] netlink: 'syz.0.594': attribute type 7 has an invalid length.
[   99.571736][ T7736] !: renamed from dummy0 (while UP)
[  100.210478][ T7774] bond0: (slave bridge0): Releasing backup interface
[  100.210695][ T7784] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma?
[  100.232377][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.235688][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.276097][ T7774] team0: Port device bond0 removed
[  100.283715][ T7774] bridge_slave_0: left allmulticast mode
[  100.286047][ T7774] bridge_slave_0: left promiscuous mode
[  100.288457][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.298958][ T7774] bridge_slave_1: left allmulticast mode
[  100.301329][ T7774] bridge_slave_1: left promiscuous mode
[  100.305689][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.328699][ T7774] bond0: (slave bond_slave_0): Releasing backup interface
[  100.342263][ T7774] bond0: (slave bond_slave_1): Releasing backup interface
[  100.358361][ T7774] team0: Port device team_slave_0 removed
[  100.371050][ T7774] team0: Port device team_slave_1 removed
[  100.374934][ T7774] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.377974][ T7774] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.383668][ T7774] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.386693][ T7774] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.415826][ T7774] team0: Port device batadv1 removed
[  102.283816][ T7868] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  102.360097][ T7875] validate_nla: 1 callbacks suppressed
[  102.360114][ T7875] netlink: 'syz.1.612': attribute type 10 has an invalid length.
[  102.369303][ T7875] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up
[  102.509943][ T7884] netlink: 'syz.2.616': attribute type 10 has an invalid length.
[  102.528320][ T7884] team0: Port device geneve0 added
[  102.541871][ T7884] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  102.621076][ T7888] can: request_module (can-proto-0) failed.
[  102.714441][ T7901] smc: net device bond0 applied user defined pnetid SYZ2
[  102.869416][ T7916] x_tables: duplicate underflow at hook 3
[  102.878773][ T7916] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.076870][ T7923] netlink: 'syz.0.628': attribute type 4 has an invalid length.
[  103.100415][ T7923] netlink: 'syz.0.628': attribute type 4 has an invalid length.
[  103.293242][ T7935] netlink: 'syz.2.631': attribute type 1 has an invalid length.
[  103.437273][ T7947] __nla_validate_parse: 10 callbacks suppressed
[  103.437289][ T7947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.636'.
[  103.505935][ T7955] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  103.510981][ T7953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.640'.
[  103.513885][ T7953] netlink: 'syz.2.640': attribute type 7 has an invalid length.
[  103.516681][ T7953] netlink: 'syz.2.640': attribute type 8 has an invalid length.
[  103.518938][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'.
[  103.561526][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.641'.
[  103.708016][ T7971] netlink: 104 bytes leftover after parsing attributes in process `syz.1.642'.
[  103.709364][ T7970] dvmrp0: entered allmulticast mode
[  103.715348][ T7971] netlink: 'syz.1.642': attribute type 1 has an invalid length.
[  103.718450][ T7971] netlink: 36 bytes leftover after parsing attributes in process `syz.1.642'.
[  103.731236][ T7969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.646'.
[  103.740182][ T7969] nbd: illegal input index -381222912
[  103.788597][ T7975] netlink: 48 bytes leftover after parsing attributes in process `syz.2.648'.
[  103.806345][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.649'.
[  103.818325][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.649'.
[  103.880813][ T7983] netlink: 'syz.0.651': attribute type 7 has an invalid length.
[  103.886967][ T7983] netlink: 'syz.0.651': attribute type 8 has an invalid length.
[  104.058551][ T7995] syzkaller0: entered allmulticast mode
[  104.465494][ T8033] C: renamed from team_slave_0 (while UP)
[  104.469562][ T8033] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  104.669343][ T8045] openvswitch: netlink: Message has 5 unknown bytes.
[  105.143037][ T8077] : entered promiscuous mode
[  105.847345][ T8085] gretap0: entered promiscuous mode
[  105.850511][ T8085] batadv_slave_1: entered promiscuous mode
[  105.853764][ T8085] erspan0: entered promiscuous mode
[  105.856604][ T8085] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  105.859179][ T8085] Cannot create hsr debugfs directory
[  105.861188][ T8085] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network
[  106.012457][ T8096] vlan3: entered allmulticast mode
[  106.016617][ T8096] bridge_slave_0: entered allmulticast mode
[  106.447974][ T8131] dummy0: entered promiscuous mode
[  106.449624][ T8131] dummy0: entered allmulticast mode
[  106.452614][ T8131] bridge0: port 3(dummy0) entered blocking state
[  106.455362][ T8131] bridge0: port 3(dummy0) entered disabled state
[  106.459036][ T8131] bridge0: port 3(dummy0) entered blocking state
[  106.461046][ T8131] bridge0: port 3(dummy0) entered forwarding state
[  106.578712][ T8141] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  106.753250][ T8152] Cannot find add_set index 2 as target
[  106.780540][ T8147] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  106.788993][ T8147] tipc: Enabled bearer <udp:syz1>, priority 10
[  106.875136][ T8161] xt_CT: No such helper "pptp"
[  106.965258][ T8174] openvswitch: netlink: Message has 12 unknown bytes.
[  106.979285][ T8173] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  107.049644][ T8181] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  107.087972][ T8187] sctp: [Deprecated]: syz.2.716 (pid 8187) Use of int in maxseg socket option.
[  107.087972][ T8187] Use struct sctp_assoc_value instead
[  107.456777][ T8194] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  107.460406][ T8194] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  107.905255][ T5893] tipc: Node number set to 3545469669
[  108.021018][ T8200] validate_nla: 10 callbacks suppressed
[  108.021031][ T8200] netlink: 'syz.2.720': attribute type 25 has an invalid length.
[  108.124341][ T8203] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  108.127513][ T8203] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  108.149007][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811175d400: rx timeout, send abort
[  108.154135][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811175d400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  108.160998][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888027601000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  108.421613][ T8221] lo speed is unknown, defaulting to 1000
[  108.425767][ T8221] lo speed is unknown, defaulting to 1000
[  108.431005][ T8221] lo speed is unknown, defaulting to 1000
[  108.491627][ T8225] __nla_validate_parse: 24 callbacks suppressed
[  108.491640][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.728'.
[  108.500028][ T8225] nbd: couldn't find a device at index 65546
[  108.511496][ T8228] netlink: 76 bytes leftover after parsing attributes in process `syz.2.731'.
[  108.515809][ T8228] nbd: illegal input index 65508
[  108.655798][ T5295] lo speed is unknown, defaulting to 1000
[  108.658104][ T8221] infiniband syz0: set active
[  108.660193][ T8221] infiniband syz0: added lo
[  108.700900][ T8235] netlink: 88 bytes leftover after parsing attributes in process `syz.2.733'.
[  108.706849][ T8221] RDS/IB: syz0: added
[  108.721036][ T8221] smc: adding ib device syz0 with port count 1
[  108.725850][ T8221] smc:    ib device syz0 port 1 has pnetid 
[  108.730889][ T5893] lo speed is unknown, defaulting to 1000
[  108.738472][ T8235] lo speed is unknown, defaulting to 1000
[  108.777119][ T8238] tipc: Cannot configure node identity twice
[  108.779968][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'.
[  108.857186][ T8221] lo speed is unknown, defaulting to 1000
[  108.968367][ T8241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'.
[  109.053142][ T8221] lo speed is unknown, defaulting to 1000
[  109.172937][ T8221] lo speed is unknown, defaulting to 1000
[  109.388432][ T8252] netlink: 44 bytes leftover after parsing attributes in process `syz.1.739'.
[  109.471168][ T8255] tipc: Invalid UDP bearer configuration
[  109.471214][ T8255] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  109.589625][ T8263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.744'.
[  109.597716][ T8263] netlink: 'syz.1.744': attribute type 7 has an invalid length.
[  109.601078][ T8263] netlink: 'syz.1.744': attribute type 8 has an invalid length.
[  109.604736][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'.
[  109.626324][ T8266] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.648949][ T8268] tipc: Disabling bearer <eth:syzkaller0>
[  109.770834][ T8284] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  109.852314][ T8290] tipc: Invalid UDP bearer configuration
[  109.866318][ T8290] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  109.986573][ T8299] netlink: 'syz.2.753': attribute type 11 has an invalid length.
[  109.991448][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.752'.
[  110.001189][ T8297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.752'.
[  110.210546][ T8313] block nbd1: not configured, cannot reconfigure
[  110.620843][ T8338] raw_sendmsg: syz.2.761 forgot to set AF_INET. Fix it!
[  110.818253][ T8361] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  110.948448][ T8381] bond0: entered promiscuous mode
[  110.961713][ T8382] netlink: 'syz.1.775': attribute type 1 has an invalid length.
[  111.154681][ T8394] netlink: 'syz.2.780': attribute type 10 has an invalid length.
[  111.157093][ T8394] bond0: left promiscuous mode
[  111.159605][ T8394] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.183432][ T8394] team0: Port device bond0 added
[  111.229419][ T8398] bond3: entered promiscuous mode
[  111.231214][ T8398] bond3: entered allmulticast mode
[  111.241672][ T8402] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  111.249758][ T8402] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  111.254542][ T8402] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  111.258340][ T8402] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  111.262244][ T8402] geneve2: entered promiscuous mode
[  111.268382][ T8402] geneve2: entered allmulticast mode
[  111.481951][ T8424] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.486865][ T8424] syzkaller0: entered promiscuous mode
[  111.489233][ T8424] syzkaller0: entered allmulticast mode
[  111.505884][ T8424] tipc: Resetting bearer <eth:syzkaller0>
[  111.513600][ T8423] tipc: Resetting bearer <eth:syzkaller0>
[  111.527493][ T8423] tipc: Disabling bearer <eth:syzkaller0>
[  111.727546][ T8434] netlink: 'syz.2.796': attribute type 1 has an invalid length.
[  111.730644][ T8434] netlink: 'syz.2.796': attribute type 2 has an invalid length.
[  111.740955][ T8434] netlink: 'syz.2.796': attribute type 1 has an invalid length.
[  111.744477][ T8434] netlink: 'syz.2.796': attribute type 2 has an invalid length.
[  111.757843][ T8434] veth1_macvtap: left promiscuous mode
[  112.002663][ T8461] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  112.011902][ T8464] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  112.028167][ T8464] netlink: 'syz.2.804': attribute type 21 has an invalid length.
[  112.070886][ T8477] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  113.436950][ T8601] validate_nla: 4 callbacks suppressed
[  113.436962][ T8601] netlink: 'syz.0.841': attribute type 4 has an invalid length.
[  113.468772][ T8601] netlink: 'syz.0.841': attribute type 4 has an invalid length.
[  113.495555][ T8601] __nla_validate_parse: 75 callbacks suppressed
[  113.495567][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.841'.
[  113.546324][ T8609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.844'.
[  113.549044][ T8609] netlink: 'syz.1.844': attribute type 7 has an invalid length.
[  113.551577][ T8609] netlink: 'syz.1.844': attribute type 8 has an invalid length.
[  113.555162][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.844'.
[  113.651928][ T8615] netlink: 'syz.1.845': attribute type 10 has an invalid length.
[  113.721183][ T8623] netlink: 'syz.0.847': attribute type 3 has an invalid length.
[  113.725501][ T8623] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.847'.
[  113.730270][ T8626] netlink: 'syz.0.847': attribute type 3 has an invalid length.
[  113.732666][ T8626] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.847'.
[  113.780756][ T8629] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  113.846962][ T8634] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  113.904374][ T8639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.854'.
[  113.907125][ T8639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.854'.
[  113.976348][ T8645] netlink: 176 bytes leftover after parsing attributes in process `syz.1.855'.
[  113.991367][ T8645] netlink: 'syz.1.855': attribute type 1 has an invalid length.
[  114.042610][ T8645] 8021q: adding VLAN 0 to HW filter on device bond3
[  114.088216][ T8652] 8021q: adding VLAN 0 to HW filter on device bond3
[  114.091294][ T8652] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  114.105546][ T8652] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  114.167799][ T8645] veth3: entered promiscuous mode
[  114.171504][ T8645] bond3: (slave veth3): Enslaving as an active interface with a down link
[  114.195810][ T7835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.198617][ T7835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.935589][ T8679] netlink: 'syz.2.862': attribute type 1 has an invalid length.
[  115.978119][ T8679] 8021q: adding VLAN 0 to HW filter on device bond4
[  116.021398][ T8678] lo speed is unknown, defaulting to 1000
[  116.030316][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.865'.
[  116.099394][ T8692] tipc: Can't bind to reserved service type 0
[  116.136147][ T8693] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  116.437006][ T8707] netlink: 24 bytes leftover after parsing attributes in process `syz.0.869'.
[  116.759410][ T5859] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.832566][ T5859] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.908187][ T5859] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.035721][ T5859] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.117322][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  117.120988][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  117.122299][ T8727] lo speed is unknown, defaulting to 1000
[  117.130863][ T8731] netlink: 'syz.1.877': attribute type 7 has an invalid length.
[  117.131440][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  117.137928][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  117.145553][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  117.289515][ T5859] bridge0: port 3(dummy0) entered disabled state
[  117.307524][ T5859] bridge_slave_1: left allmulticast mode
[  117.310162][ T5859] bridge_slave_1: left promiscuous mode
[  117.312063][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.320807][ T5859] bridge_slave_0: left allmulticast mode
[  117.322604][ T5859] bridge_slave_0: left promiscuous mode
[  117.338046][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.579485][ T5859] erspan0 (unregistering): left promiscuous mode
[  117.592419][ T5859] gretap0 (unregistering): left promiscuous mode
[  117.629871][ T5859] dvmrp0 (unregistering): left allmulticast mode
[  117.930357][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  117.939297][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.945506][ T5859] bond0 (unregistering): Released all slaves
[  118.047589][ T5859] bond1 (unregistering): Released all slaves
[  118.060812][ T5859] bond2 (unregistering): Released all slaves
[  118.074314][ T5859] bond3 (unregistering): Released all slaves
[  118.132096][ T8728] lo speed is unknown, defaulting to 1000
[  118.210767][ T5859] tipc: Disabling bearer <udp:syz1>
[  118.214542][ T5859] tipc: Left network mode
[  118.319606][ T8746] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[  118.699924][ T8757] ieee802154 phy0 wpan0: encryption failed: -22
[  118.772909][ T8757] bond3: (slave veth3): Releasing active interface
[  118.797394][ T5879] lo speed is unknown, defaulting to 1000
[  118.806594][ T8757] validate_nla: 1 callbacks suppressed
[  118.806611][ T8757] netlink: 'syz.1.881': attribute type 10 has an invalid length.
[  118.811762][ T8757] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  118.821922][ T8757] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  118.862384][ T8757] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  118.882506][ T8757] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  119.071713][ T8767] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  119.111055][ T5859] batadv_slave_1: left promiscuous mode
[  119.126056][ T5859] hsr_slave_0: left promiscuous mode
[  119.128502][ T5859] hsr_slave_1: left promiscuous mode
[  119.131142][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.140751][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.144539][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.187679][ T5859] veth1_macvtap: left promiscuous mode
[  119.190384][ T5859] veth0_macvtap: left promiscuous mode
[  119.194432][ T5859] veth1_vlan: left promiscuous mode
[  119.196828][ T5859] veth0_vlan: left promiscuous mode
[  119.213360][ T5833] Bluetooth: hci0: command tx timeout
[  119.761280][ T8776] __nla_validate_parse: 3 callbacks suppressed
[  119.761297][ T8776] netlink: 48 bytes leftover after parsing attributes in process `syz.1.884'.
[  119.782633][ T5859] team0 (unregistering): Port device team_slave_1 removed
[  119.828112][ T5859] team0 (unregistering): Port device C removed
[  120.231039][ T8728] chnl_net:caif_netlink_parms(): no params data found
[  120.400517][ T8792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.888'.
[  120.400725][ T8728] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.408676][ T8728] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.411442][ T8728] bridge_slave_0: entered allmulticast mode
[  120.415950][ T8728] bridge_slave_0: entered promiscuous mode
[  120.419230][ T8728] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.421693][ T8728] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.426428][ T8728] bridge_slave_1: entered allmulticast mode
[  120.429529][ T8728] bridge_slave_1: entered promiscuous mode
[  120.511388][ T8728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.528653][ T8792] netlink: 68 bytes leftover after parsing attributes in process `syz.1.888'.
[  120.540283][ T8728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.639252][ T8728] team0: Port device team_slave_0 added
[  120.649249][ T8728] team0: Port device team_slave_1 added
[  120.692432][ T8728] batman_adv: batadv0: Adding interface: batadv_slave_0
[  120.695143][ T8728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.704894][ T8728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  120.710227][ T8728] batman_adv: batadv0: Adding interface: batadv_slave_1
[  120.712339][ T8728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.721897][ T8728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  120.776739][ T8810] 8021q: VLANs not supported on ip6gre0
[  120.783426][ T8728] hsr_slave_0: entered promiscuous mode
[  120.785659][ T8728] hsr_slave_1: entered promiscuous mode
[  120.787739][ T8728] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  120.790057][ T8728] Cannot create hsr debugfs directory
[  121.019533][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.896'.
[  121.283830][ T5833] Bluetooth: hci0: command tx timeout
[  121.306675][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.900'.
[  121.343390][ T8847] netlink: 16 bytes leftover after parsing attributes in process `syz.1.900'.
[  121.389334][ T8847] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  121.409974][ T8847] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  121.647920][ T8728] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  121.743028][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.904'.
[  121.811476][ T8728] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  121.820588][ T8728] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  121.826108][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  121.828988][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  121.860415][   T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  121.961755][ T8728] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  121.963068][   T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  121.971680][ T8874] netlink: 'syz.2.907': attribute type 1 has an invalid length.
[  122.141303][ T8728] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.167139][ T8890] netlink: 116 bytes leftover after parsing attributes in process `syz.2.910'.
[  122.178820][ T8728] 8021q: adding VLAN 0 to HW filter on device team0
[  122.190407][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.192628][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.203183][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.205657][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.237884][ T8728] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  122.241102][ T8728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  122.348285][ T8728] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.385943][ T8728] veth0_vlan: entered promiscuous mode
[  122.391248][ T8728] veth1_vlan: entered promiscuous mode
[  122.429682][ T8728] veth0_macvtap: entered promiscuous mode
[  122.435430][ T8728] veth1_macvtap: entered promiscuous mode
[  122.453441][ T8728] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.462354][ T8728] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.477030][ T8728] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.480885][ T8728] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.494019][ T8728] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.497373][ T8728] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.594364][ T8908] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  122.644125][   T95] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  122.701923][ T7835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.717240][ T7835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.778500][ T8919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.914'.
[  122.804352][ T8526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.807350][ T8526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.043873][ T8934] netlink: 'syz.1.917': attribute type 1 has an invalid length.
[  123.103705][ T8934] 8021q: adding VLAN 0 to HW filter on device bond4
[  123.128406][ T8937] veth7: entered promiscuous mode
[  123.136937][ T8937] bond4: (slave veth7): Enslaving as an active interface with a down link
[  123.226491][ T8934] syz.1.917: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  123.235263][ T8934] CPU: 0 UID: 0 PID: 8934 Comm: syz.1.917 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  123.235277][ T8934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  123.235284][ T8934] Call Trace:
[  123.235288][ T8934]  <TASK>
[  123.235293][ T8934]  dump_stack_lvl+0x189/0x250
[  123.235312][ T8934]  ? __pfx_dump_stack_lvl+0x10/0x10
[  123.235324][ T8934]  ? __pfx__printk+0x10/0x10
[  123.235338][ T8934]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  123.235352][ T8934]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  123.235363][ T8934]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  123.235374][ T8934]  warn_alloc+0x214/0x310
[  123.235388][ T8934]  ? stack_depot_save_flags+0x40/0x900
[  123.235402][ T8934]  ? __pfx_warn_alloc+0x10/0x10
[  123.235416][ T8934]  ? kasan_save_track+0x4f/0x80
[  123.235429][ T8934]  ? xskq_create+0x56/0x170
[  123.235451][ T8934]  ? xsk_init_queue+0xb0/0x110
[  123.235492][ T8934]  ? xsk_setsockopt+0x43f/0x710
[  123.235508][ T8934]  ? do_sock_setsockopt+0x25a/0x3e0
[  123.235523][ T8934]  ? __x64_sys_setsockopt+0x18b/0x220
[  123.235540][ T8934]  ? do_syscall_64+0xfa/0x3b0
[  123.235552][ T8934]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.235570][ T8934]  __vmalloc_node_range_noprof+0x125/0x12f0
[  123.235638][ T8934]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  123.235658][ T8934]  ? xskq_create+0x56/0x170
[  123.235682][ T8934]  ? __kasan_kmalloc+0x93/0xb0
[  123.235698][ T8934]  vmalloc_user_noprof+0xad/0xf0
[  123.235714][ T8934]  ? xskq_create+0xbf/0x170
[  123.235733][ T8934]  xskq_create+0xbf/0x170
[  123.235753][ T8934]  xsk_init_queue+0xb0/0x110
[  123.235773][ T8934]  xsk_setsockopt+0x43f/0x710
[  123.235794][ T8934]  ? __pfx_xsk_setsockopt+0x10/0x10
[  123.235810][ T8934]  ? __lock_acquire+0xab9/0xd20
[  123.235832][ T8934]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  123.235855][ T8934]  ? __pfx_xsk_setsockopt+0x10/0x10
[  123.235878][ T8934]  do_sock_setsockopt+0x25a/0x3e0
[  123.235900][ T8934]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  123.235921][ T8934]  ? __fget_files+0x2a/0x420
[  123.235948][ T8934]  __x64_sys_setsockopt+0x18b/0x220
[  123.235971][ T8934]  do_syscall_64+0xfa/0x3b0
[  123.235985][ T8934]  ? lockdep_hardirqs_on+0x9c/0x150
[  123.236008][ T8934]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.236022][ T8934]  ? exc_page_fault+0x9f/0xf0
[  123.236046][ T8934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.236059][ T8934] RIP: 0033:0x7ff39078e929
[  123.236075][ T8934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  123.236097][ T8934] RSP: 002b:00007ff391548038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  123.236113][ T8934] RAX: ffffffffffffffda RBX: 00007ff3909b5fa0 RCX: 00007ff39078e929
[  123.236125][ T8934] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c
[  123.236134][ T8934] RBP: 00007ff390810b39 R08: 0000000000000004 R09: 0000000000000000
[  123.236144][ T8934] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  123.236154][ T8934] R13: 0000000000000000 R14: 00007ff3909b5fa0 R15: 00007fff3367d3a8
[  123.236177][ T8934]  </TASK>
[  123.236209][ T8934] Mem-Info:
[  123.337056][ T8934] active_anon:5898 inactive_anon:0 isolated_anon:0
[  123.337056][ T8934]  active_file:1046 inactive_file:38231 isolated_file:0
[  123.337056][ T8934]  unevictable:1768 dirty:111 writeback:0
[  123.337056][ T8934]  slab_reclaimable:9297 slab_unreclaimable:57350
[  123.337056][ T8934]  mapped:18460 shmem:2424 pagetables:998
[  123.337056][ T8934]  sec_pagetables:0 bounce:0
[  123.337056][ T8934]  kernel_misc_reclaimable:0
[  123.337056][ T8934]  free:297384 free_pcp:13577 free_cma:0
[  123.351114][ T8934] Node 0 active_anon:14136kB inactive_anon:0kB active_file:3456kB inactive_file:97988kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:41308kB dirty:380kB writeback:0kB shmem:4788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6408kB pagetables:2116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  123.361320][ T8934] Node 1 active_anon:9524kB inactive_anon:0kB active_file:728kB inactive_file:54936kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32532kB dirty:64kB writeback:0kB shmem:4908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5880kB pagetables:1876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  123.371967][ T8934] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  123.384512][ T8934] lowmem_reserve[]: 0 812 812 812 812
[  123.389052][ T8934] Node 0 DMA32 free:330936kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14136kB inactive_anon:0kB active_file:3456kB inactive_file:97988kB unevictable:3536kB writepending:380kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:23528kB local_pcp:7100kB free_cma:0kB
[  123.401704][ T8934] lowmem_reserve[]: 0 0 0 0 0
[  123.404458][ T8934] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  123.414615][ T8934] lowmem_reserve[]: 0 0 854 854 854
[  123.416481][ T8934] Node 1 Normal free:384336kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9456kB inactive_anon:0kB active_file:728kB inactive_file:54936kB unevictable:3536kB writepending:64kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:30724kB local_pcp:20836kB free_cma:0kB
[  123.426789][ T8934] lowmem_reserve[]: 0 0 0 0 0
[  123.428452][ T8934] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  123.433825][ T8934] Node 0 DMA32: 2*4kB (UE) 266*8kB (UME) 197*16kB (ME) 197*32kB (UME) 69*64kB (UM) 40*128kB (UM) 36*256kB (UM) 19*512kB (UM) 10*1024kB (UME) 5*2048kB (UM) 66*4096kB (M) = 330888kB
[  123.440493][ T8934] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  123.446828][ T8934] Node 1 Normal: 830*4kB (UM) 733*8kB (UM) 383*16kB (UME) 71*32kB (UM) 25*64kB (M) 3*128kB (UM) 4*256kB (UME) 4*512kB (ME) 5*1024kB (UE) 14*2048kB (UME) 80*4096kB (UM) = 384112kB
[  123.453263][ T8934] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  123.456516][ T8934] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  123.459949][ T8934] 41684 total pagecache pages
[  123.461519][ T8934] 0 pages in swap cache
[  123.463468][ T8934] Free swap  = 124996kB
[  123.464911][ T8934] Total swap = 124996kB
[  123.466609][ T8934] 786301 pages RAM
[  123.467941][ T8934] 0 pages HighMem/MovableOnly
[  123.469593][ T8934] 241085 pages reserved
[  123.471024][ T8934] 0 pages cma reserved
[  123.581071][ T8954] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.921'.
[  123.590013][ T8956] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0
[  123.590052][ T8954] IPVS: stopping backup sync thread 8956 ...
[  125.041548][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  125.054193][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  125.058088][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  125.064024][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  125.067534][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  125.116690][ T9037] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  125.157397][ T9029] lo speed is unknown, defaulting to 1000
[  125.200632][ T9040] ipt_REJECT: ECHOREPLY no longer supported.
[  125.587727][ T9061] __nla_validate_parse: 1 callbacks suppressed
[  125.587745][ T9061] netlink: 16 bytes leftover after parsing attributes in process `syz.2.944'.
[  125.596736][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.944'.
[  125.618915][ T9029] chnl_net:caif_netlink_parms(): no params data found
[  125.751327][ T9029] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.757947][ T9029] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.760615][ T9029] bridge_slave_0: entered allmulticast mode
[  125.767290][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.946'.
[  125.770443][ T9073] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  125.774402][ T9073] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.776048][ T9029] bridge_slave_0: entered promiscuous mode
[  125.780813][ T9029] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.793138][ T9029] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.795679][ T9029] bridge_slave_1: entered allmulticast mode
[  125.804698][ T9029] bridge_slave_1: entered promiscuous mode
[  125.847055][ T9029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.853333][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.947'.
[  125.860072][ T9029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.899413][ T9029] team0: Port device team_slave_0 added
[  125.904773][ T9029] team0: Port device team_slave_1 added
[  125.927623][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.950'.
[  125.950994][ T9087] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  125.956836][ T9087] team0: Device ipvlan0 is already an upper device of the team interface
[  125.991527][ T9029] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.997271][ T9029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.003179][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  126.007204][ T9029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.013103][ T9029] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.015701][ T9029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.023680][ T9029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.093104][ T9029] hsr_slave_0: entered promiscuous mode
[  126.096652][ T9029] hsr_slave_1: entered promiscuous mode
[  126.098794][ T9029] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  126.101142][ T9029] Cannot create hsr debugfs directory
[  126.124676][ T9097] netlink: 44 bytes leftover after parsing attributes in process `syz.2.953'.
[  126.127645][ T9097] netlink: 43 bytes leftover after parsing attributes in process `syz.2.953'.
[  126.130224][ T9097] netlink: 'syz.2.953': attribute type 5 has an invalid length.
[  126.132565][ T9097] netlink: 43 bytes leftover after parsing attributes in process `syz.2.953'.
[  126.140709][ T9098] syz.1.952 uses old SIOCAX25GETINFO
[  126.302558][ T9029] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.325434][ T9104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.955'.
[  126.328884][ T9104] netlink: 'syz.1.955': attribute type 7 has an invalid length.
[  126.331821][ T9104] netlink: 'syz.1.955': attribute type 8 has an invalid length.
[  126.335205][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.955'.
[  126.387935][ T9029] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.445460][ T9029] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.477606][ T9114] syzkaller0: entered promiscuous mode
[  126.479309][ T9114] syzkaller0: entered allmulticast mode
[  126.493886][ T9114] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.522245][ T9029] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.533190][ T9113] tipc: Resetting bearer <eth:syzkaller0>
[  126.547442][ T9113] tipc: Disabling bearer <eth:syzkaller0>
[  126.684542][ T9029] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  126.690027][ T9029] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  126.697409][ T9029] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  126.702492][ T9029] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  126.741658][ T9134] Cannot find del_set index 0 as target
[  126.799322][ T9138] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  126.836457][ T9029] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.847777][ T9029] 8021q: adding VLAN 0 to HW filter on device team0
[  126.872210][ T7835] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.874705][ T7835] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.891562][ T7835] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.894724][ T7835] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.123409][   T54] Bluetooth: hci0: command tx timeout
[  127.245894][ T9029] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.325978][ T9029] veth0_vlan: entered promiscuous mode
[  127.335291][ T9029] veth1_vlan: entered promiscuous mode
[  127.379668][ T9029] veth0_macvtap: entered promiscuous mode
[  127.394448][ T9029] veth1_macvtap: entered promiscuous mode
[  127.427675][ T9029] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.437634][ T9029] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.449865][ T9029] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.453406][ T9029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.455991][ T9029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.458587][ T9029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.543986][ T7835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.547654][ T7835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.571297][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.579025][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.832050][ T9205] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  128.167096][ T9246] netlink: 'syz.2.995': attribute type 7 has an invalid length.
[  128.170025][ T9246] netlink: 'syz.2.995': attribute type 8 has an invalid length.
[  128.316836][ T9264] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.460230][ T9270] lo speed is unknown, defaulting to 1000
[  128.760659][ T9292] netlink: 'syz.2.1005': attribute type 1 has an invalid length.
[  128.770944][ T9292] netlink: 'syz.2.1005': attribute type 4 has an invalid length.
[  128.921101][ T9302] openvswitch: netlink: Tunnel attr 12 has unexpected len 9 expected 16
[  129.259409][ T9320] netlink: 'syz.1.1017': attribute type 1 has an invalid length.
[  129.263285][ T9320] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.305707][ T9322] xt_l2tp: v2 sid > 0xffff: 4294901760
[  129.396186][ T9325] netlink: 'syz.2.1019': attribute type 14 has an invalid length.
[  129.943945][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  129.950878][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  129.959357][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  129.965391][ T9344] netlink: 'syz.2.1022': attribute type 4 has an invalid length.
[  129.968436][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  129.975252][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  130.046700][ T9341] lo speed is unknown, defaulting to 1000
[  130.330377][ T9341] chnl_net:caif_netlink_parms(): no params data found
[  130.482284][ T9341] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.490488][ T9341] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.496998][ T9341] bridge_slave_0: entered allmulticast mode
[  130.511380][ T9341] bridge_slave_0: entered promiscuous mode
[  130.520405][ T9341] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.533089][ T9341] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.539596][ T9341] bridge_slave_1: entered allmulticast mode
[  130.544324][ T9341] bridge_slave_1: entered promiscuous mode
[  130.609619][ T9341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  130.625525][ T9341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  130.680546][ T9341] team0: Port device team_slave_0 added
[  130.685555][ T9341] team0: Port device team_slave_1 added
[  130.733889][ T9341] batman_adv: batadv0: Adding interface: batadv_slave_0
[  130.736614][ T9341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.762870][ T9341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  130.772067][ T9341] batman_adv: batadv0: Adding interface: batadv_slave_1
[  130.780136][ T9341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.788845][ T9341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.846663][ T9341] hsr_slave_0: entered promiscuous mode
[  130.849182][ T9371] __nla_validate_parse: 23 callbacks suppressed
[  130.849196][ T9371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1028'.
[  130.851783][ T9341] hsr_slave_1: entered promiscuous mode
[  130.854520][ T9371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1028'.
[  130.857634][ T9341] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  130.861931][ T9341] Cannot create hsr debugfs directory
[  130.996932][ T9341] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.050164][ T9375] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1030'.
[  131.080603][ T9341] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.145328][ T9341] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.221668][ T9341] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.354785][ T9341] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  131.359645][ T9341] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  131.365052][ T9341] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  131.369670][ T9341] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  131.425583][ T9341] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.437632][ T9341] 8021q: adding VLAN 0 to HW filter on device team0
[  131.443094][ T7826] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.445303][ T7826] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.454767][ T7826] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.456992][ T7826] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.573508][ T9341] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.622147][ T9341] veth0_vlan: entered promiscuous mode
[  131.634566][ T9341] veth1_vlan: entered promiscuous mode
[  131.667966][ T9341] veth0_macvtap: entered promiscuous mode
[  131.676517][ T9341] veth1_macvtap: entered promiscuous mode
[  131.700405][ T9341] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.708303][ T9341] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.718261][ T9341] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.721706][ T9341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.726390][ T9341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.729740][ T9341] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.810184][ T8527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.821930][ T8527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.875942][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.880359][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.920076][ T9398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1034'.
[  131.941774][ T9399] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 4, id = 0
[  131.946198][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1034'.
[  132.076396][ T9402] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1035'.
[  132.130784][ T9405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1036'.
[  132.136225][ T9405] validate_nla: 2 callbacks suppressed
[  132.136240][ T9405] netlink: 'syz.2.1036': attribute type 7 has an invalid length.
[  132.141602][ T9405] netlink: 'syz.2.1036': attribute type 8 has an invalid length.
[  132.146454][ T9405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1036'.
[  132.335583][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'.
[  132.565581][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.737833][ T9436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1044'.
[  132.741084][ T9436] netlink: 'syz.1.1044': attribute type 7 has an invalid length.
[  132.745477][ T9436] netlink: 'syz.1.1044': attribute type 8 has an invalid length.
[  133.139010][ T9456] netlink: 'syz.2.1051': attribute type 7 has an invalid length.
[  133.143610][ T9456] netlink: 'syz.2.1051': attribute type 8 has an invalid length.
[  133.454224][ T9476] xt_l2tp: v2 doesn't support IP mode
[  133.834038][ T9493] xt_bpf: check failed: parse error
[  134.483100][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  134.598519][ T9506] xt_TCPMSS: Only works on TCP SYN packets
[  134.602119][ T9506] xt_TCPMSS: Only works on TCP SYN packets
[  134.607449][ T9506] xt_TCPMSS: Only works on TCP SYN packets
[  134.609874][ T9506] xt_TCPMSS: Only works on TCP SYN packets
[  134.611847][ T9506] xt_TCPMSS: Only works on TCP SYN packets
[  134.614387][ T9506] xt_TCPMSS: Only works on TCP SYN packets
[  134.616397][ T9506] xt_TCPMSS: Only works on TCP SYN packets
[  134.618408][ T9506] xt_TCPMSS: Only works on TCP SYN packets
[  134.620362][ T9506] xt_TCPMSS: Only works on TCP SYN packets
[  134.622277][ T9506] xt_TCPMSS: Only works on TCP SYN packets
[  134.747183][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  134.750174][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  134.753354][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  134.757742][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  134.762168][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  134.792308][ T9512] lo speed is unknown, defaulting to 1000
[  135.063909][ T9512] chnl_net:caif_netlink_parms(): no params data found
[  135.137433][ T9512] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.141623][ T9512] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.144793][ T9512] bridge_slave_0: entered allmulticast mode
[  135.147689][ T9512] bridge_slave_0: entered promiscuous mode
[  135.154720][ T9512] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.159338][ T9512] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.161767][ T9512] bridge_slave_1: entered allmulticast mode
[  135.165288][ T9512] bridge_slave_1: entered promiscuous mode
[  135.208612][ T9540] netlink: 'syz.1.1077': attribute type 7 has an invalid length.
[  135.210294][ T9512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.214412][ T9540] netlink: 'syz.1.1077': attribute type 8 has an invalid length.
[  135.230971][ T9512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.267170][ T9512] team0: Port device team_slave_0 added
[  135.275276][ T9512] team0: Port device team_slave_1 added
[  135.312105][ T9512] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.317632][ T9512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.329232][ T9512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  135.337318][ T9512] batman_adv: batadv0: Adding interface: batadv_slave_1
[  135.341228][ T9512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.352264][ T9512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.421058][ T9512] hsr_slave_0: entered promiscuous mode
[  135.426934][ T9512] hsr_slave_1: entered promiscuous mode
[  135.431824][ T9512] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  135.435325][ T9512] Cannot create hsr debugfs directory
[  135.453092][ T9549] xt_NFQUEUE: number of total queues is 0
[  135.655011][ T9557] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  135.658510][ T9557] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  135.736778][ T9512] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.819782][ T9512] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.894130][ T9512] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.982355][ T9512] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.160759][ T9512] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  136.177419][ T9512] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  136.185590][ T9512] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  136.197376][ T9512] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  136.230293][ T9582] __nla_validate_parse: 17 callbacks suppressed
[  136.230305][ T9582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1093'.
[  136.235820][ T9582] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1093'.
[  136.328320][ T9512] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.352332][ T9512] 8021q: adding VLAN 0 to HW filter on device team0
[  136.369445][ T8526] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.372236][ T8526] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.386143][ T8526] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.389012][ T8526] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.571174][ T9592] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072284733443)
[  136.584239][ T9592] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  136.588606][ T9591] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072284733443)
[  136.594017][ T9591] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  136.641466][ T9512] 8021q: adding VLAN 0 to HW filter on device batadv0
[  136.681595][ T9512] veth0_vlan: entered promiscuous mode
[  136.686930][ T9512] veth1_vlan: entered promiscuous mode
[  136.710808][ T9600] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1096'.
[  136.716181][ T9512] veth0_macvtap: entered promiscuous mode
[  136.720247][ T9602] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1097'.
[  136.731836][ T9512] veth1_macvtap: entered promiscuous mode
[  136.745740][ T9512] batman_adv: batadv0: Interface activated: batadv_slave_0
[  136.764592][ T9512] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.770100][ T9512] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.773425][ T9512] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.776181][ T9512] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.778781][ T9512] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.805439][ T5833] Bluetooth: hci0: command tx timeout
[  136.875110][ T8526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.877540][ T8526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.902237][ T8526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.905626][ T8526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.081746][ T9625] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1102'.
[  137.086246][ T9625] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1102'.
[  137.425571][ T9645] xt_NFQUEUE: number of total queues is 0
[  137.425598][ T9646] xt_NFQUEUE: number of total queues is 0
[  137.866318][ T9665] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1116'.
[  137.869662][ T9665] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1116'.
[  138.172346][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'.
[  138.241366][ T9686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1123'.
[  138.289331][ T9689] syzkaller1: entered promiscuous mode
[  138.291205][ T9689] syzkaller1: entered allmulticast mode
[  139.544067][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  139.552386][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  139.557471][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  139.562552][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  139.566817][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  139.606535][ T9720] lo speed is unknown, defaulting to 1000
[  139.753444][ T9734] x_tables: duplicate underflow at hook 1
[  139.902400][ T9720] chnl_net:caif_netlink_parms(): no params data found
[  139.986748][ T9720] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.988961][ T9720] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.001606][ T9720] bridge_slave_0: entered allmulticast mode
[  140.018022][ T9720] bridge_slave_0: entered promiscuous mode
[  140.026730][ T9720] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.032057][ T9720] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.042527][ T9720] bridge_slave_1: entered allmulticast mode
[  140.046980][ T9720] bridge_slave_1: entered promiscuous mode
[  140.094366][ T9720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.101407][ T9720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  140.132430][ T9720] team0: Port device team_slave_0 added
[  140.137494][ T9720] team0: Port device team_slave_1 added
[  140.159388][ T9720] batman_adv: batadv0: Adding interface: batadv_slave_0
[  140.161858][ T9720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.174007][ T9720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  140.179330][ T9720] batman_adv: batadv0: Adding interface: batadv_slave_1
[  140.181810][ T9720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.191717][ T9720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  140.223869][ T9720] hsr_slave_0: entered promiscuous mode
[  140.226721][ T9720] hsr_slave_1: entered promiscuous mode
[  140.229620][ T9720] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  140.232669][ T9720] Cannot create hsr debugfs directory
[  140.425360][ T9720] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.503636][ T9720] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.575743][ T9720] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.640493][ T9720] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.745650][ T9720] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  140.750954][ T9720] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  140.757198][ T9720] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  140.761977][ T9720] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  140.842429][ T9720] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.865003][ T9720] 8021q: adding VLAN 0 to HW filter on device team0
[  140.871466][ T8526] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.873999][ T8526] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.888749][ T8526] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.891415][ T8526] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.042279][ T9720] 8021q: adding VLAN 0 to HW filter on device batadv0
[  141.072149][ T9720] veth0_vlan: entered promiscuous mode
[  141.078684][ T9720] veth1_vlan: entered promiscuous mode
[  141.112332][ T9720] veth0_macvtap: entered promiscuous mode
[  141.118744][ T9720] veth1_macvtap: entered promiscuous mode
[  141.131438][ T9720] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.141132][ T9720] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.151068][ T9720] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.154200][ T9720] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.157019][ T9720] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.159892][ T9720] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.250468][  T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.254083][  T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.262948][ T9758] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  141.337139][ T9783] bond5: entered promiscuous mode
[  141.338814][ T9783] bond5: entered allmulticast mode
[  141.380449][ T9785] bond6: entered promiscuous mode
[  141.382567][ T9785] bond6: entered allmulticast mode
[  141.385787][  T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.388490][  T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.613987][ T9807] __nla_validate_parse: 8 callbacks suppressed
[  141.613999][ T9807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1155'.
[  141.621513][ T9807] tipc: Invalid UDP bearer configuration
[  141.621548][ T9807] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  141.737353][ T9822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1160'.
[  142.010447][ T9836] netlink: 'syz.1.1163': attribute type 15 has an invalid length.
[  142.014240][ T9836] netlink: 'syz.1.1163': attribute type 12 has an invalid length.
[  142.254279][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'.
[  142.328237][ T9865] team0: Port device bond0 removed
[  142.349323][ T9865] team0: Port device geneve0 removed
[  142.623768][ T9881] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1175'.
[  142.745250][ T9893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1179'.
[  142.769928][ T9893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1179'.
[  142.999319][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1182'.
[  143.839258][ T9912] ipt_REJECT: ECHOREPLY no longer supported.
[  143.927605][ T9914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1186'.
[  143.932275][ T9914] Driver unsupported XDP return value 0 on prog  (id 526) dev N/A, expect packet loss!
[  144.076699][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  144.081184][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  144.085714][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  144.088697][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  144.091961][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  144.110709][ T9931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1189'.
[  144.141095][ T9928] lo speed is unknown, defaulting to 1000
[  144.188821][ T9931] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1189'.
[  144.374317][ T9928] chnl_net:caif_netlink_parms(): no params data found
[  144.454236][ T9928] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.457454][ T9928] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.460669][ T9928] bridge_slave_0: entered allmulticast mode
[  144.466311][ T9928] bridge_slave_0: entered promiscuous mode
[  144.470459][ T9928] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.477741][ T9928] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.480305][ T9928] bridge_slave_1: entered allmulticast mode
[  144.484964][ T9928] bridge_slave_1: entered promiscuous mode
[  144.521059][ T9928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.526528][ T9928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.553283][ T9928] team0: Port device team_slave_0 added
[  144.558888][ T9928] team0: Port device team_slave_1 added
[  144.583764][ T9928] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.586061][ T9928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.599168][ T9928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.605195][ T9928] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.607946][ T9928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.618809][ T9928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.656058][ T9928] hsr_slave_0: entered promiscuous mode
[  144.658536][ T9928] hsr_slave_1: entered promiscuous mode
[  144.661009][ T9928] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  144.663951][ T9928] Cannot create hsr debugfs directory
[  144.785429][ T9928] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.860463][ T9928] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.948140][ T9928] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.009027][ T9948] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  145.040140][ T9928] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.119247][  T790] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  145.286173][ T9928] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  145.291808][ T9928] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  145.297440][ T9928] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  145.310543][ T9928] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  145.380295][ T9928] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.382613][ T9928] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.385062][ T9928] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.387242][ T9928] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.445386][  T992] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.449088][  T992] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.500819][ T9928] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.526998][ T9928] 8021q: adding VLAN 0 to HW filter on device team0
[  145.541185][ T7835] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.543584][ T7835] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.559843][ T7835] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.562097][ T7835] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.604215][ T9969] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072284733443)
[  145.617763][ T9969] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  145.809050][ T9928] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.862601][ T9981] 8021q: adding VLAN 0 to HW filter on device bond6
[  145.917315][ T9981] bond0: (slave wlan1): Releasing backup interface
[  145.931231][ T9981] bond4: (slave veth7): Releasing active interface
[  145.945423][ T9928] veth0_vlan: entered promiscuous mode
[  145.963401][   T95] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  145.976758][ T9928] veth1_vlan: entered promiscuous mode
[  146.004775][ T9928] veth0_macvtap: entered promiscuous mode
[  146.010831][ T9928] veth1_macvtap: entered promiscuous mode
[  146.029185][ T9928] batman_adv: batadv0: Interface activated: batadv_slave_0
[  146.038746][ T9928] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.046460][ T9928] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.049084][ T9928] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.049335][  T790] hid-generic 0005:10CF:0007.0002: collection stack underflow
[  146.051622][ T9928] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.051660][ T9928] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.069920][  T790] hid-generic 0005:10CF:0007.0002: item 0 0 0 12 parsing failed
[  146.080943][  T790] hid-generic 0005:10CF:0007.0002: probe with driver hid-generic failed with error -22
[  146.163535][ T5833] Bluetooth: hci0: command tx timeout
[  146.180972][ T8527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.191777][ T8527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.235620][ T8527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.238025][ T8527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.303755][   T95] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  146.362501][ T9995] ==================================================================
[  146.365786][ T9995] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80
[  146.368745][ T9995] Read of size 8 at addr ffff88803d8240a0 by task khidpd_10cf0007/9995
[  146.372444][ T9995] 
[  146.373830][ T9995] CPU: 1 UID: 0 PID: 9995 Comm: khidpd_10cf0007 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  146.373849][ T9995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  146.373858][ T9995] Call Trace:
[  146.373865][ T9995]  <TASK>
[  146.373872][ T9995]  dump_stack_lvl+0x189/0x250
[  146.373893][ T9995]  ? __virt_addr_valid+0x1c8/0x5c0
[  146.373912][ T9995]  ? rcu_is_watching+0x15/0xb0
[  146.373928][ T9995]  ? __kasan_check_byte+0x12/0x40
[  146.373946][ T9995]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.373961][ T9995]  ? rcu_is_watching+0x15/0xb0
[  146.373975][ T9995]  ? lock_release+0x4b/0x3e0
[  146.373990][ T9995]  ? __virt_addr_valid+0x1c8/0x5c0
[  146.374006][ T9995]  ? __virt_addr_valid+0x4a5/0x5c0
[  146.374022][ T9995]  print_report+0xd2/0x2b0
[  146.374035][ T9995]  ? __mutex_lock+0x738/0xe80
[  146.374046][ T9995]  kasan_report+0x118/0x150
[  146.374063][ T9995]  ? __mutex_lock+0x738/0xe80
[  146.374077][ T9995]  __mutex_lock+0x738/0xe80
[  146.374091][ T9995]  ? __mutex_lock+0x51b/0xe80
[  146.374104][ T9995]  ? l2cap_unregister_user+0x6a/0x1b0
[  146.374126][ T9995]  ? __pfx___mutex_lock+0x10/0x10
[  146.374141][ T9995]  ? __pfx___timer_delete_sync+0x10/0x10
[  146.374163][ T9995]  l2cap_unregister_user+0x6a/0x1b0
[  146.374184][ T9995]  hidp_session_thread+0x3c9/0x410
[  146.374199][ T9995]  ? __pfx_hidp_session_thread+0x10/0x10
[  146.374210][ T9995]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  146.374228][ T9995]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  146.374243][ T9995]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  146.374256][ T9995]  ? __kthread_parkme+0x7b/0x200
[  146.374271][ T9995]  ? __kthread_parkme+0x1a1/0x200
[  146.374287][ T9995]  kthread+0x711/0x8a0
[  146.374305][ T9995]  ? __pfx_hidp_session_thread+0x10/0x10
[  146.374316][ T9995]  ? __pfx_kthread+0x10/0x10
[  146.374333][ T9995]  ? _raw_spin_unlock_irq+0x23/0x50
[  146.374350][ T9995]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.374369][ T9995]  ? __pfx_kthread+0x10/0x10
[  146.374392][ T9995]  ret_from_fork+0x3fc/0x770
[  146.374407][ T9995]  ? __pfx_ret_from_fork+0x10/0x10
[  146.374421][ T9995]  ? __switch_to_asm+0x39/0x70
[  146.374436][ T9995]  ? __switch_to_asm+0x33/0x70
[  146.374450][ T9995]  ? __pfx_kthread+0x10/0x10
[  146.374465][ T9995]  ret_from_fork_asm+0x1a/0x30
[  146.374486][ T9995]  </TASK>
[  146.374492][ T9995] 
[  146.449821][ T9995] Allocated by task 9928:
[  146.451216][ T9995]  kasan_save_track+0x3e/0x80
[  146.452676][ T9995]  __kasan_kmalloc+0x93/0xb0
[  146.454132][ T9995]  __kmalloc_noprof+0x27a/0x4f0
[  146.455585][ T9995]  hci_alloc_dev_priv+0x28/0x2040
[  146.457067][ T9995]  vhci_create_device+0x120/0x6e0
[  146.458640][ T9995]  vhci_write+0x3ce/0x4a0
[  146.459997][ T9995]  vfs_write+0x54b/0xa90
[  146.461277][ T9995]  ksys_write+0x145/0x250
[  146.462553][ T9995]  do_syscall_64+0xfa/0x3b0
[  146.464093][ T9995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.465854][ T9995] 
[  146.466605][ T9995] Freed by task 9928:
[  146.467813][ T9995]  kasan_save_track+0x3e/0x80
[  146.469206][ T9995]  kasan_save_free_info+0x46/0x50
[  146.470747][ T9995]  __kasan_slab_free+0x62/0x70
[  146.472185][ T9995]  kfree+0x18e/0x440
[  146.473352][ T9995]  bt_host_release+0x82/0x90
[  146.474759][ T9995]  device_release+0x9c/0x1c0
[  146.476143][ T9995]  kobject_put+0x22b/0x480
[  146.477491][ T9995]  vhci_release+0x88/0xd0
[  146.478802][ T9995]  __fput+0x44c/0xa70
[  146.479997][ T9995]  task_work_run+0x1d4/0x260
[  146.481378][ T9995]  do_exit+0x6b5/0x22e0
[  146.482624][ T9995]  do_group_exit+0x21c/0x2d0
[  146.483966][ T9995]  __x64_sys_exit_group+0x3f/0x40
[  146.485480][ T9995]  x64_sys_call+0x21ba/0x21c0
[  146.486916][ T9995]  do_syscall_64+0xfa/0x3b0
[  146.488314][ T9995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.490058][ T9995] 
[  146.490806][ T9995] Last potentially related work creation:
[  146.492659][ T9995]  kasan_save_stack+0x3e/0x60
[  146.494428][ T9995]  kasan_record_aux_stack+0xbd/0xd0
[  146.496054][ T9995]  insert_work+0x3d/0x330
[  146.497444][ T9995]  __queue_work+0xbd9/0xfe0
[  146.498805][ T9995]  queue_work_on+0x181/0x270
[  146.500166][ T9995]  process_scheduled_works+0xae1/0x17b0
[  146.501833][ T9995]  worker_thread+0x8a0/0xda0
[  146.503255][ T9995]  kthread+0x711/0x8a0
[  146.504857][ T9995]  ret_from_fork+0x3fc/0x770
[  146.506327][ T9995]  ret_from_fork_asm+0x1a/0x30
[  146.508125][ T9995] 
[  146.508966][ T9995] Second to last potentially related work creation:
[  146.511079][ T9995]  kasan_save_stack+0x3e/0x60
[  146.512654][ T9995]  kasan_record_aux_stack+0xbd/0xd0
[  146.514455][ T9995]  insert_work+0x3d/0x330
[  146.515825][ T9995]  __queue_work+0xcfc/0xfe0
[  146.517597][ T9995]  call_timer_fn+0x17e/0x5f0
[  146.518989][ T9995]  __run_timer_base+0x646/0x860
[  146.520499][ T9995]  run_timer_softirq+0xb7/0x180
[  146.522393][ T9995]  handle_softirqs+0x286/0x870
[  146.523867][ T9995]  __irq_exit_rcu+0xca/0x1f0
[  146.525270][ T9995]  irq_exit_rcu+0x9/0x30
[  146.526566][ T9995]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  146.528495][ T9995]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  146.530280][ T9995] 
[  146.531006][ T9995] The buggy address belongs to the object at ffff88803d824000
[  146.531006][ T9995]  which belongs to the cache kmalloc-8k of size 8192
[  146.535769][ T9995] The buggy address is located 160 bytes inside of
[  146.535769][ T9995]  freed 8192-byte region [ffff88803d824000, ffff88803d826000)
[  146.539766][ T9995] 
[  146.540481][ T9995] The buggy address belongs to the physical page:
[  146.542382][ T9995] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3d820
[  146.545199][ T9995] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  146.547965][ T9995] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  146.550248][ T9995] page_type: f5(slab)
[  146.551493][ T9995] raw: 00fff00000000040 ffff88801a442280 ffffea000475a200 0000000000000004
[  146.554187][ T9995] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  146.556713][ T9995] head: 00fff00000000040 ffff88801a442280 ffffea000475a200 0000000000000004
[  146.559438][ T9995] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  146.562624][ T9995] head: 00fff00000000003 ffffea0000f60801 00000000ffffffff 00000000ffffffff
[  146.565828][ T9995] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  146.568386][ T9995] page dumped because: kasan: bad access detected
[  146.570318][ T9995] page_owner tracks the page as allocated
[  146.572092][ T9995] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9720, tgid 9720 (syz-executor), ts 140350857235, free_ts 0
[  146.578659][ T9995]  post_alloc_hook+0x240/0x2a0
[  146.580117][ T9995]  get_page_from_freelist+0x21e4/0x22c0
[  146.581774][ T9995]  __alloc_frozen_pages_noprof+0x181/0x370
[  146.583493][ T9995]  alloc_pages_mpol+0x232/0x4a0
[  146.584929][ T9995]  allocate_slab+0x8a/0x3b0
[  146.586333][ T9995]  ___slab_alloc+0xbfc/0x1480
[  146.587752][ T9995]  __kmalloc_cache_noprof+0x296/0x3d0
[  146.589330][ T9995]  macvlan_common_newlink+0x5a3/0x1980
[  146.591016][ T9995]  macvtap_newlink+0x13c/0x1b0
[  146.592440][ T9995]  rtnl_newlink_create+0x310/0xb00
[  146.594002][ T9995]  rtnl_newlink+0x16d6/0x1c70
[  146.595475][ T9995]  rtnetlink_rcv_msg+0x7cf/0xb70
[  146.597088][ T9995]  netlink_rcv_skb+0x208/0x470
[  146.598598][ T9995]  netlink_unicast+0x75c/0x8e0
[  146.600078][ T9995]  netlink_sendmsg+0x805/0xb30
[  146.601621][ T9995]  __sock_sendmsg+0x21c/0x270
[  146.603066][ T9995] page_owner free stack trace missing
[  146.604711][ T9995] 
[  146.605504][ T9995] Memory state around the buggy address:
[  146.607276][ T9995]  ffff88803d823f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  146.609731][ T9995]  ffff88803d824000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  146.612254][ T9995] >ffff88803d824080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  146.614735][ T9995]                                ^
[  146.616393][ T9995]  ffff88803d824100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  146.618863][ T9995]  ffff88803d824180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  146.621369][ T9995] ==================================================================
[  146.626679][ T9995] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  146.628979][ T9995] CPU: 1 UID: 0 PID: 9995 Comm: khidpd_10cf0007 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  146.632961][ T9995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  146.636277][ T9995] Call Trace:
[  146.637462][ T9995]  <TASK>
[  146.638484][ T9995]  dump_stack_lvl+0x99/0x250
[  146.639935][ T9995]  ? __asan_memcpy+0x40/0x70
[  146.641453][ T9995]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.643187][ T9995]  ? __pfx__printk+0x10/0x10
[  146.644677][ T9995]  panic+0x2db/0x790
[  146.646029][ T9995]  ? __pfx_panic+0x10/0x10
[  146.647548][ T9995]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  146.649419][ T9995]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  146.651276][ T9995]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  146.653229][ T9995]  ? print_memory_metadata+0x314/0x400
[  146.654902][ T9995]  ? __mutex_lock+0x738/0xe80
[  146.656353][ T9995]  check_panic_on_warn+0x89/0xb0
[  146.657847][ T9995]  ? __mutex_lock+0x738/0xe80
[  146.659278][ T9995]  end_report+0x78/0x160
[  146.660587][ T9995]  kasan_report+0x129/0x150
[  146.661983][ T9995]  ? __mutex_lock+0x738/0xe80
[  146.663405][ T9995]  __mutex_lock+0x738/0xe80
[  146.664768][ T9995]  ? __mutex_lock+0x51b/0xe80
[  146.666217][ T9995]  ? l2cap_unregister_user+0x6a/0x1b0
[  146.667863][ T9995]  ? __pfx___mutex_lock+0x10/0x10
[  146.669368][ T9995]  ? __pfx___timer_delete_sync+0x10/0x10
[  146.671055][ T9995]  l2cap_unregister_user+0x6a/0x1b0
[  146.672629][ T9995]  hidp_session_thread+0x3c9/0x410
[  146.674187][ T9995]  ? __pfx_hidp_session_thread+0x10/0x10
[  146.675884][ T9995]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  146.678058][ T9995]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  146.680125][ T9995]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  146.682384][ T9995]  ? __kthread_parkme+0x7b/0x200
[  146.684176][ T9995]  ? __kthread_parkme+0x1a1/0x200
[  146.685802][ T9995]  kthread+0x711/0x8a0
[  146.687052][ T9995]  ? __pfx_hidp_session_thread+0x10/0x10
[  146.688730][ T9995]  ? __pfx_kthread+0x10/0x10
[  146.690117][ T9995]  ? _raw_spin_unlock_irq+0x23/0x50
[  146.691726][ T9995]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.693441][ T9995]  ? __pfx_kthread+0x10/0x10
[  146.695213][ T9995]  ret_from_fork+0x3fc/0x770
[  146.696851][ T9995]  ? __pfx_ret_from_fork+0x10/0x10
[  146.698477][ T9995]  ? __switch_to_asm+0x39/0x70
[  146.699937][ T9995]  ? __switch_to_asm+0x33/0x70
[  146.701487][ T9995]  ? __pfx_kthread+0x10/0x10
[  146.703048][ T9995]  ret_from_fork_asm+0x1a/0x30
[  146.704614][ T9995]  </TASK>
[  146.706384][ T9995] Kernel Offset: disabled
[  146.707887][ T9995] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:11:02  Registers:
info registers vcpu 0

CPU#0
RAX=e98586587a7c6d00 RBX=ffffffff81976c78 RCX=e98586587a7c6d00 RDX=0000000000000001
RSI=ffffffff8d998b14 RDI=ffffffff8be29dc0 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1f3f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3011fffc CR3=0000000023222000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f677c811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005b RBX=000000000000005b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900031cf370
R8 =ffff888108d60237 R9 =1ffff110211ac046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af9881 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fdca8794ba8 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffff0000 0000000000000000
XMM02=ffff000000000000 ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
