last executing test programs:

2.218078686s ago: executing program 1 (id=2085):
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="3c005a80380000800c0001000202"], 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008810)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) (async)
r3 = socket(0x10, 0x3, 0x0) (async)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc) (async)
getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9)
sendto$inet6(r3, &(0x7f0000000080), 0x0, 0x80, 0x0, 0x0) (async)
accept$unix(r3, &(0x7f0000001340), 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0) (async)
r6 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1}, 0xc) (async)
r7 = socket$qrtr(0x2a, 0x2, 0x0) (async)
recvmmsg(r6, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) (async)
r8 = socket(0x1d, 0x2, 0x6)
ppoll(&(0x7f0000000380)=[{r8, 0x100}], 0x1, 0x0, 0x0, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r6, 0x5411, 0x0)
connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async)
socket(0x2, 0x80805, 0x0) (async)
writev(r7, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1)

2.168669866s ago: executing program 2 (id=2086):
r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@ethernet={0x0, @broadcast}, &(0x7f0000000000)=0x80)
syz_genetlink_get_family_id$SEG6(0x0, r0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008810)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000002c0))
r1 = socket(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x80, 0x0, 0x0)
accept$unix(r1, &(0x7f0000001340), 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1}, 0xc)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0)
r5 = socket(0x1d, 0x2, 0x6)
ppoll(&(0x7f0000000380)=[{r5, 0x100}], 0x1, 0x0, 0x0, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r3, 0x5411, 0x0)
connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
socket(0x2, 0x80805, 0x0)
writev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1)

2.167171665s ago: executing program 1 (id=2087):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
readv(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000001080)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edccedb4dad0c81d194610b6663533a758c4e657f3a7920100000011b4e82ea800ad7afe03c851a8", 0x7e}, {&(0x7f0000000200)="a68cde0d56b170df7710796df1cef9382ea800000000", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000479c6e38a56ef0c1320000000000000018010000202070250000008800002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000009db700009500000018000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x11, 0x4, 0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
connect$unix(r3, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e)
r4 = socket$xdp(0x2c, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6)
recvmmsg(r6, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, &(0x7f00000002c0)=0x48, 0x800)

1.88056527s ago: executing program 1 (id=2088):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/244, 0xf4}], 0x1, 0x0, 0x0)
readv(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r6)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x8, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d03000008009f"], 0x40}}, 0x0)
r9 = socket(0x2a, 0x2, 0x0)
accept4(r9, 0x0, 0x0, 0x800)
r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
write$nci(r10, &(0x7f0000000000)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x9, {0x1, 0x6b, "628386f8e7042b388b8271827c243baa9664e57fc4ec559f2527724b2042aa0a7b4922ce5144c30dcf22a320e32a10afde35297f3089c91d68fa5fc11357597b99d59bc3cae9cc326a367990403d199dc2154c70b5c42a0a0eda0a419b67428dc8692306931b306cb01288"}}, 0x70)
r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r12 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r12, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58)
r13 = accept4(r12, 0x0, 0x0, 0x80800)
sendmsg$key(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0xe, 0x8, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfb}, 0x10}}, 0x8000)
write$cgroup_int(r11, 0x0, 0x0)
recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)

1.580426875s ago: executing program 1 (id=2089):
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008810)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000002c0))
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x80, 0x0, 0x0)
accept$unix(r0, &(0x7f0000001340), 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1}, 0xc)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0)
r4 = socket(0x1d, 0x2, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000000200000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
ppoll(&(0x7f0000000380)=[{r4, 0x100}], 0x1, 0x0, 0x0, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r2, 0x5411, 0x0)
connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
socket(0x2, 0x80805, 0x0)
writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1)

1.420590202s ago: executing program 0 (id=2090):
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRESDEC=r0, @ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB="cb5b7255ec90e97a86a54a6b24660d270438eaadb014f32f72d6d463d9842fe45d7a152355146cdaf33e2387e0ee4d884120159fbe1e2cff5080644f67feb3fc5d2a3efcb59e8285d8365034bfa3ed79821cea31cda20bcc3078e9e3db46850a13"], 0x30}}, 0x801)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x4aa4)
r3 = socket$pppoe(0x18, 0x1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x3a)
sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0xa0, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x0, 0xe2, 0x9d, &(0x7f0000000940)="36c7b30a334055c4b120a607e484f41ea0354b1e62cd16566d3b72db1ebb96ce2961cc0e88538c311e671f3c024760f6200cead083a086136bf4e8951f8a8bf498d241bcf94e60df5a0b1900b07d6b499e4bb5c22451dd874af7798d28ad7e9c454b67237d59e43cbc953982e668faf1ba676e0fc5bbb10587cc2250753d30a8bbc569f346cf2ea2fa72c3ee47ae28f7d0312c4a42552feb81c46eee9bcf00621fac9388e32ab4f337ee88dd736c13e99d1b6386d9f1d10f12724ca9bfaa31c7db3918013deb3946a7bb332e64fd9f1ed7febf849cd4aece6dbad81652042c44b04f", &(0x7f0000000a40)=""/157, 0x7, 0x0, 0xef, 0x50, &(0x7f0000000b00)="9c48379b4a100ffe3dd5f193b1d9d29a066cb594d4f21cf834b28e82ee95c0bbfa9f11e8483f2462667741dafa2461556b6693da60ea9bef1b551ce7dfaa5eaa933abb1a6ad86d3cdc653d5d9d52089128f4b75e88acd407f309829032530c0005ce944e36f99220132b605ec973746a2735dc46f1ef0913247a6942869fb40794ead75f403e712dc776e807f760fefcc56e5be4916a9d24ab5cff1e6ecc540e93c8b1cb9e637c22393370524e4051647f9ee684d4b266ba8735f468271cd26236aa0038b0d37ae25baf9ab095500c8f7008dd2a9a282980c3ad760e726c9415d9a085ff18c91fbc02889efc2dafe4", &(0x7f0000000c00)="18e91b658daee6451e9646854cefda15b6eb2af82523a9a58dba5cba03ef789847c1b2f46bd52a906322ceb5a1b4afedb2bdf4a0149e0bb01100b90aa1137d867904170ba010ab5843a9d2993b5cc5dd", 0x6, 0x0, 0x4}, 0x50)
bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$qrtr(0x2a, 0x2, 0x0)
bind$qrtr(r6, &(0x7f0000000040)={0x2a, 0x0, 0x4001}, 0xc)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
unshare(0x26020480)
bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0)
r8 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x408dc}, 0x4000080)
connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], <r11=>0x0, 0x55, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xdd, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r12)
ioctl$SIOCSIFHWADDR(r12, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x17, 0x1, &(0x7f0000000180)=@raw=[@exit], &(0x7f00000001c0)='GPL\x00', 0x10000, 0x5f, &(0x7f0000000200)=""/95, 0x40f00, 0x10, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r11, r2, 0x9, &(0x7f0000000640)=[r7, r7, r7, r7, r12, r7], &(0x7f0000000680)=[{0x2, 0x4, 0x8, 0x1}, {0x5, 0x2, 0x2, 0x2}, {0x2, 0x2, 0xe}, {0x3, 0x4, 0xe, 0x3}, {0x1, 0x3, 0x10, 0xa}, {0x2, 0x2, 0xb, 0x6}, {0x1, 0x3, 0x7, 0xa}, {0x1, 0x2, 0x0, 0xb}, {0x3, 0x3, 0xe, 0xc}], 0x10, 0x634}, 0x94)
sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)

1.318389302s ago: executing program 2 (id=2091):
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c40)=[{0x0, 0xf5}, {&(0x7f0000000800)="0981b705", 0x4}], 0x2, 0x0, 0x0, 0x240400c0}, 0x4004800)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x20000, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0xfd, 0x0, 0x5, 0x4, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x50}}, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1}, 0xc)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0)
getsockname$qrtr(r1, &(0x7f0000000000), &(0x7f00000000c0)=0xc)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'\x00', 0x400})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000440)=ANY=[], 0x3e)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1)

1.260143286s ago: executing program 0 (id=2092):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'vxcan1\x00', <r0=>0x0})
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r0, 0x0, {0x0, 0x1, 0x4}, 0x1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000000)={0x2a, 0xffffffffffffffff, 0x1}, 0xc)
bind$qrtr(r3, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x6)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0xa, 0x4)
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[], 0x20)
r5 = socket(0x10, 0x5, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0xffffffff, {0xa, 0x4e23, 0x9, @loopback, 0x97}}}, 0x80, 0x0}, 0x2000f765)
ioctl$SIOCSIFHWADDR(r6, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @remote})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0800000008c8d89f707a0d06", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r8}, 0x70)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x3, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x6, 0xfff0}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x2000440c)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000ffdbdf25010000001c000480050003000000000005000300000000000500030006000000080002000200000008000200030000003c000c800c000b80084c146a2c000b80080009007803d25f08000a000ef4000008000a0078380000080009005b5728320800090058c277320c0004800500030001000000"], 0x88}}, 0x4)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="aea809c6294738a528ae4b3abb7400", @ANYRES16=0x0, @ANYBLOB="0100fdffffff00000000010000002000018006000100020000000c00070004000000000000000800080000000000"], 0x34}}, 0x0)
sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000340001000000000000000000010100800c"], 0x114}], 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

1.258398621s ago: executing program 0 (id=2093):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003006f56053021e3db5e31a40955c600d35da9e6ac400166db480a0001"], 0xc8}}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
close(r2) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002d0004802800018007000100637400001c0002800800014000000002080002400000001105000300b6000000140000001100010000000000000008000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) (async)
sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000010a0103000000000000000001000003"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x2004c810)
bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc)

1.210500569s ago: executing program 0 (id=2094):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (rerun: 64)
sendmsg$802154_raw(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)="f60c32504c18d1db514f7833ade7", 0xe}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) (async)
listen(r1, 0x0) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="0f000000040000000400000012000000000000006187dd874d29e85ba6a10ae302ad637933787d2cb4cdf307db0e3676728e048f225685e02ead1673a851a5a47bd82092d3695f24dba4fdafb434fc1f0780a5aedbca31abf337473af8984d27e1d5eb094672e39f1355eb64ae4ae40260892df1e3ed64c6fcf150a583499f4d1cedeb33c474b7dc545b69d2ac6a538e98c76e86c2520c7978c15f446fcd7f41b8856e8a0f0d4e725d24201dc45ca9f94eebe3818a221c39472a6ae8c827e0aef7924cdcc85924819b0e221d4867a2a7eab9131cc77dfe37ec30", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 64)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) (rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000001b40)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="a1ab0000000002000000b220000008000100600000000000c2cd", @ANYRES32=r6, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) (async)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff030}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) (async, rerun: 64)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20) (async, rerun: 64)
recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10051, 0x0)
r8 = socket(0x2b, 0x1, 0x7)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000001500)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}, @in6={0xa, 0x4e24, 0x5, @remote, 0x2}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @local}], 0x4c)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x68b5, 0xffffffffffffffbe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r9}, 0x10) (async)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r11, 0x400448ca, 0x0) (async)
r12 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r12, &(0x7f0000000200)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=ANY=[@ANYBLOB="280000003e000100fcff075f5d8807aa6b440c0000fa00"/40], 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0xa}, {0xffff, 0xffff}}}, 0x24}}, 0x0)

1.140450516s ago: executing program 0 (id=2095):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
socket$igmp(0x2, 0x3, 0x2)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0))
socket(0x11, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e921", 0x38}], 0x1}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c001)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r3, &(0x7f00000000c0), 0x9)
sendfile(r3, r2, 0x0, 0x10000)
socket(0x2a, 0x800, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYRES32=r3], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00')
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000740)=0x8)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/pid_for_children\x00')
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x468, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3d0, 0x2a8, 0x2a8, 0x3d0, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0xffffff00, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2c8, 0x338, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@socket3={{0x28}, 0x4}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4c8)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)

728.53123ms ago: executing program 1 (id=2096):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0xcd, "41e981f55f817c02b4813241db5e36b06e87e529124c9f71f1813102f179788064e5e7c3b4e3fd0927d1cef01e5694c8958d035e6eb57710c0a820b51b8d599adaf970b07172d1455eaf4ef38fb56346475617162736d8c526351438905ebdf38bfdd45231c28364c3d95cce8ad91634eccb24d622e341643f4264936a79d523f0fcbe76c0cdd70b2e370e9b72012a92a724c18d51e7d7aa1d4c41ad519031da08779ee1b6491425afce3f2929f39df47e614998befa9b49ee019870855f761974d2d1f1b63a68c84d14458d38"}, &(0x7f0000000100)=0xf1)
r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0}, &(0x7f0000000180)=0x14, 0x80000)
getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14)
r4 = socket(0x29, 0x1, 0x8001)
bind$can_raw(r4, &(0x7f0000000240)={0x1d, r2}, 0x10)
connect$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb}, 0x1c)
sendmsg$nl_route_sched(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=@newqdisc={0x120, 0x24, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x6, 0x8}, {0x9, 0x6}, {0xa, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x9, 0x120, 0x6, 0x1, 0x2, 0x6, 0x8}}, {0x14, 0x2, [0x0, 0x4, 0x7, 0xffff, 0x1, 0x9, 0x5, 0x4]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x1, "1cdb9433a32393de04094ff9b954d8bd"}}}, @qdisc_kind_options=@q_red={{0x8}, {0x88, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x8}}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1}, @TCA_RED_PARMS={0x14, 0x1, {0xab, 0x81, 0x4, 0x1a, 0x8, 0x1d, 0x2}}, @TCA_RED_MAX_P={0x8, 0x3, 0xeb}, @TCA_RED_PARMS={0x14, 0x1, {0x5, 0x8, 0x1, 0x18, 0xf, 0x1d}}, @TCA_RED_MARK_BLOCK={0x8}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x3}, @TCA_RED_PARMS={0x14, 0x1, {0x2, 0x1, 0x3, 0x12, 0xe, 0x1a, 0x2}}, @TCA_RED_PARMS={0x14, 0x1, {0xa04, 0xaf34, 0x7fff, 0x4, 0x2, 0x3, 0x3}}, @TCA_RED_MAX_P={0x8, 0x3, 0xcc6}]}}, @qdisc_kind_options=@q_drr={0x8}]}, 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x4)
connect$ax25(r4, &(0x7f00000004c0)={{0x3, @bcast, 0x2}, [@bcast, @default, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
r6 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000540)={<r7=>r5})
r8 = socket(0xb, 0x80000, 0xfff)
getpeername$ax25(r8, &(0x7f0000000580)={{}, [@rose, @null, @netrom, @bcast, @bcast, @default, @default]}, &(0x7f0000000600)=0x48)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000640)={@none, 0x5, 0x9, 0x6, 0x0, 0xf, "dcd463ac3fb6c47e15f2093efd5d34d14af33e1f2c70c83912d3cd51f1e8ad64ee24ac6f9494f9875c607c00ff569679e8d5b20238991278cd9f881ff58efa5f9a7318c4b98851d106edab6743a3e37645b9557d97721fab59e71f4b7c15303536edce9b6e6cf314a317f8f8fbd00344a28397ef1d20835a7efb22ff36c7ab4d"})
socket$inet6_sctp(0xa, 0x5, 0x84)
r10 = socket$netlink(0x10, 0x3, 0xf)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r10)
r11 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@private1, @in=@initdev}}, {{@in6=@private0}, 0x0, @in=@multicast1}}, &(0x7f0000000840)=0xe8)
sendmsg$NFT_MSG_GETTABLE(r8, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x80, 0x1, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x63, 0x6, "8a79aabdd4aa64b214f093756251b75a739cb9d8d25729f07fb899dd35653f165ee09a12f41df7bb9e58a0b5f7399bbc9c9d72d5eeab62c9a86c4c72df7674e956acf1a894f3eecf2ce254c05c11245e0ae5b4b11169377cf8dcf1704d82d0"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x144)
shutdown(r1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f00000009c0)={{0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, {0xa, 0x4e21, 0x3, @local, 0xd9e}, 0x0, {[0x81, 0x2e8, 0x1, 0x8, 0x1, 0x1, 0x4, 0x80]}}, 0x5c)
epoll_create(0xfffffffe)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xaa, 0x38}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x4b}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1000}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x50}, 0x1, 0x0, 0x0, 0x10000044}, 0x4040)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r4)
sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xe8, r12, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x58, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x48140)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000f40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}, @CTA_NAT_SRC={0x90, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}]}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_TUPLE_MASTER={0x48, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4044}, 0x0)

628.48646ms ago: executing program 1 (id=2097):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$rds(0x15, 0x5, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0x8)
r8 = accept4(r7, 0x0, 0x0, 0x80000)
setsockopt(r8, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8)
recvmmsg(r8, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x1b, 0x4, 0x1, 0x1, 0x6c, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @timestamp={0x44, 0xc, 0x8e, 0x0, 0x2, [0x9, 0x6]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @timestamp={0x44, 0x10, 0x79, 0x0, 0x4, [0x0, 0x0, 0xfff]}]}}}}})
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0)

289.706521ms ago: executing program 0 (id=2098):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
socket$igmp(0x2, 0x3, 0x2)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0))
socket(0x11, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e921", 0x38}], 0x1}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c001)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r3, &(0x7f00000000c0), 0x9)
sendfile(r3, r2, 0x0, 0x10000)
socket(0x2a, 0x800, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYRES32=r3], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000740), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)={0x24, r7, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
setsockopt(0xffffffffffffffff, 0x5, 0x71, &(0x7f0000000700)="03040000008002ff0df4f28d244d2fa3777d95c9824f75f34a946bc76c27dcd6d06e15a026347087e78658a48498633a0e7a0e9f1a16", 0x36)

188.03741ms ago: executing program 2 (id=2099):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
r1 = socket$inet(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000240)='blkio.bfq.empty_time\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/244, 0xf4}], 0x1, 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001000)={r4, &(0x7f00000010c0)="ed45685f2792723555f1687ca70990a3303a04fec79c596364320255a39c027534e29a2257e1c19b3a4af43856ef9636c53623046a7bf3d5b36d44dd89c55fbf6b74326b6c25844b0913a0246f21a7327e08a80f2803d9a894ecac34dff502886eecbf138c26dd5f41efcec7a2bef4e29d76b79f5a09f593aeee720a8816841cf51cf288100a796f503cd10c3a33ef6ce7d358d9199c6b2fb97bebe81619d1d0c2", &(0x7f0000001180)=""/248}, 0x20)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0x46, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xa4}}, 0x0)
writev(r6, &(0x7f0000000000)=[{&(0x7f00000006c0)="5ba58a09", 0xffffffffffffff47}, {0x0, 0xfffffffffffffd2a}], 0x2)

140.076873ms ago: executing program 2 (id=2100):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
sendmmsg$sock(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x24, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}, @TCA_GRED_DPS={0x10, 0x3, {0x0, 0x0, 0x0, 0x4}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x51}, 0x0)
connect$llc(r2, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1, 0x16bf5125}, 0x1c)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xdc}, 0x1c)
setsockopt$inet6_int(r6, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4)
sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x400, 0x0, @private2}, 0x1c)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8)
sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0)
unshare(0x20000400)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r7, 0x58, &(0x7f00000002c0)}, 0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000180)=0x8)
r8 = socket(0x200000100000011, 0x803, 0x0)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000100), 0x4)
sendmsg$nl_generic(r8, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x160, 0x25, 0x800, 0x70bd2d, 0x25dfdbfe, {0xc}, [@nested={0x38, 0xff, 0x0, 0x1, [@nested={0x4, 0xb1}, @nested={0x4, 0x12b}, @typed={0x1c, 0xa9, 0x0, 0x0, @binary="3e261818b5b6eb3dcf6557a92b12ad43a42a1b22dad15aaf"}, @typed={0x4, 0xf}, @nested={0x4, 0xc9}, @typed={0x8, 0x100, 0x0, 0x0, @ipv4=@multicast1}]}, @generic="1bacd28689d66297825278c6e1b8e90b1c05a53025166258ab473e00d9e7a7f3267f79d06089a171787d7b2efe8a3cdbaadd90", @nested={0xe0, 0x132, 0x0, 0x1, [@typed={0xbd, 0xfc, 0x0, 0x0, @binary="edbf777ee27ddc06ee2147493498d26bfa9afba51173d233f422f7dc323a433c967d59e84f1ff6fe68feb77bacd958666830481100b0b29952a4aa52c7a04231a2764de1fe80c1eabff3cc7fb0a20828cb74c6dbb7468576f928c16714283ab11445a1c17440c05db45d7f29a7f7c25d563f7d37344844dbfa5585d4d73552be31bd4cc02343c1446bfc54c46b3acf60f67cfd6a6d1579ef814b610b73059c50f85ac380ead814bb3bb154480f71f5ffd210607d0eef903b91"}, @nested={0x4, 0x10d}, @typed={0x14, 0x9f, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @nested={0x4, 0x6f}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000004}, 0x4)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x7, 0x2f, "e3b8aa2d613f202e8d90b4b1426af6415f0df6ed85c6fb2fa6017902dff9d90425357effff0000000000003e88d3da"}})

347.577µs ago: executing program 2 (id=2101):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx  \x00'}, 0x20)
r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=<r2=>0x0)
r3 = getuid()
r4 = getgid()
r5 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, &(0x7f0000002200)=0xc0100100)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1b, 0x6}})
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4)
setsockopt$inet6_buf(r7, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4)
sendto$inet6(r7, &(0x7f0000000b80)="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", 0x5ad, 0x0, &(0x7f0000000180)={0xa, 0x5e64, 0x100000, @mcast2}, 0x1c)
read(r7, &(0x7f0000000040)=""/244, 0xf4)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="d3ab9247923d4af5725ffe2db5807ffd9c688532c45616d2ef442d61d523036649605370", 0x24}], 0x1, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r6, r0, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0xa0, 0x24000040}, 0x2000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
r8 = socket(0x6, 0x2, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000000000002000000300004802c0001800b0001006e756d67656e00001c000280080001400000000408000240000000940800034000fd00000900010073797a30000000000900020073797a32"], 0x84}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x891f, &(0x7f0000001000)={'syztnl1\x00', 0x0})

0s ago: executing program 2 (id=2102):
getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000000)=0xfffffffb, &(0x7f0000000040)=0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@gettaction={0x134, 0x32, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbdf1}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfff}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6d}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000002c0)={0x8000000000000000, 0x30, '\x00', 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller1\x00'})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000380)=@gcm_256={{0x7}, "4579eaaf49677650", "8a05bf090c3805e1030a17f06981ce1400d75fb243c86457b0118553e4344d9f", "906390ec", "364d64190fb33013"}, 0x38)
setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000003c0)={0x0, {{0x2, 0x4e24, @remote}}}, 0x88)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000780)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x8, @mcast1, 0x5}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000004c0)="50ade9720bda9cdc7347ae6d79abd07547c2ebce1a18af6ea5b2ca57b704ab4afecee66b00b4a0ed69810f1ca28372f3e2ba543f5bc769aefe3f0edadfcf75d2ec19ae8a5c490fc80acd545d55fb73f86b32526a7d48a19ca3194f4d8299f25a7a87f483c6feb26bbb212a6512772c4aebc52f257efb0229919cbbeac71108b4083bcfeac84ed383cdf206dd12efb97695abeef50f47bca357c6c93930fe38530c445eb73bef4bb330", 0xa9}, {&(0x7f0000000580)="dd7235548ad9836dbab59c61395288c04cffe77c531ad6174003f396523a34f460171f96b16bf01e532781e74841f20306a7de307092d97e0a21c91b3e48ee3b6f36738164f1b3fa3d56bc897ad2e3571a363b016652cfd1a37ba5", 0x5b}, {&(0x7f0000000600)="bdb66fd957c6141e68c6c4e66bb4fe912a0b1aedd3fab18ed965b11bbf5be72dce9efe8bddb432754a05ec98238389007a6af66de23f89a00208d09fdbb7bf38df", 0x41}], 0x3, &(0x7f00000006c0)=[@dstopts_2292={{0x70, 0x29, 0x4, {0x21, 0xa, '\x00', [@generic={0x94, 0x53, "4c334be29477e44302c8b9e23c58660b792d5a10ddf8e0b8037b6650cba3e2324485bbe6b7488e3c5a4ec9f8118a63bda4d5313c9ee0c9a8806cde50eb7da31336024220c2898ea698e78d4e8fa59bea9b9692"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x160d}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0xa0}}], 0x1, 0x40008000)
sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4000081}, 0x4404)
r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000840)={0x1f, 0x0, @none}, &(0x7f0000000880)=0xe, 0x80800)
getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x4)
sendmsg(r3, &(0x7f0000001fc0)={&(0x7f0000000940)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000001d80)=[{&(0x7f00000009c0)="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", 0xfa}, {&(0x7f0000000ac0)="ca39042efa63b18806195974cb18fbf8be40643c96f947a5e96d8b8eb4b0f2553c7981cc833defe02a8b426707fe5c0a9a38f27c73c8d3f08ea32602351c5afbb0128ac670393f99c0c9faa85b5ae8d40174e3f412a3f6469e4e2429e884ca176c823a1782310f241eb9e2809319b1a9b51c562300f5796030565fb500e2cbe15a6afc7379fe30141a46df5b9f3fdfa0d7907b202de0bfa33a3dcec94be924824d2df30293733437341123be32680f1cef8fba9d2b3592d46ba83fd21a790d36c35a4d5a", 0xc4}, {&(0x7f0000000bc0)="43f6145df5fb92b66c1861bc4d181be3b1a2f602ba53aa7583c82227740c9105b16f61f506a2d339a7268607f237515464a1e02dc028d397e6bf35b3977a1cd63f3d2e44b4c25c1b4c669f638d299b69396a8d135059a6e69887b6798a211e86530cd1a935266f32078ef6fe41e4877a367650506fbd11a8abe6a9a6a19cf68c76665a081d41f6f3fdada4d9f916e121c241c8a4f34f2c9740effb18d93510ad32619a2956121cf6295af0173c972ce81902930de79f47f7612060acc7dbba491a21e1bcaa6c7fee7d15df1c8042396733faa438737f8dd4a0853a7813fc86ac1316d54cede347954cd537e185132cb439e83f5a3784", 0xf6}, {&(0x7f0000000cc0)="ea121545201e84a9aa7fa719ce5cf8bf73fdf4a9fe5cb1f779a0d2e1b0937aa6fecbaf7d89bf02d34c215e5767f1b4a1ae11d35f50ddbb9da7d484801cde0bc4e65d6071e12a8ab91eb815f085d05b97e450c172035b5546c601ed388a65cbfc9cd66793f2362a2939e2c0fb3c4ec970d86e747beb38a34cb17ffe4496f91a00cff74d8e5cd9fdedd1974f980aced1ef5bfc0c9c10097738972f41432bc1babd37b2d2d35cc76a27", 0xa8}, {&(0x7f0000000d80)="700c4b2455815337afd27cb597a0ed28de07047232a3dbbd9a7a870c12a545fb15e5fb52919a13dc2090aeaad7be48e3f2c6c77b9f909fa68dba82d327fdf54c94cd6761d614692f8bb6f2cc4b613aff3572ad5f01ce104e64b72351d2f2cabfed5036edafc54135153b9a7eb5ff0934a7fc993e532970716ea82e71cb3d59fb72209034523779ecdc5e48623c111beaa9408c7302cea11466d28414f0aeca93b7e82cfbfb54a1fa8ca773fef5615d8b306a93061ef131ab4543fa9e4b5b24f6e8ca40d2e35d592480aed5e8cd1f3b9d14a5b2d2929200e2810df0e913aea786a018cfa14086d6ea85dfb13e9eceff57786ca2b591240f9487b8e749b566dbe403a0470d215d9a3ffb6ec601d5b5eeeb9617f2e3ac0cfade59cd59d0c16949224f4d3a0b0029a11ca221f5bd8362f5b4b8278ea6393b40b479161d251032c66525e8b9c428436998bd6edb4415f0a2e99cc064a851d22d42649b64252ee58a91115269d7b9f2e54ce5909f3d546600b25f3547980e10720910d084b59f96bbb4a127ea17543346f0b4a810626c6f76cc7bfff530b98daf8ce8620a5b78125d09cdf1d6d84839b027289387befc2f090217fbe2d4e60d69e71baa2b1da9750977598c62537a1ce6dba9a2f4f118ec2d05a77b45e7d0af0cd6ad3fb1a934ee7d9204055a5380a3655f335ec88d91e73227a27f2494889de748cbaf6a6a5c56e3efdd48c73999e2e58297e20d2e10b754146e696b43a9f7c52d323299ef3ab876ea27e5e063bc1a8176c99171a68241678eb848683adbf7772f797b1ee28e1ab28ebe87f87d023547ddc5838e56bc3f730991e6a277fbdb153df585d9031fb02c13f5e7e5ba29a50add15e151fcc51b0d689916c49c7a95b080c76c9db2e2996115975a87d83221ec929abf7a5c73e77aae7a68a289a7f4d9d4aa367c375f61bb0a99e261cc4522bc3b42da2f55bdb311937b7b50d8a7598714de4be55ab1c7eff6524ee8929a27427f23b529e11cb3a9b173f2cbb67dea8d5484d813bf2e71e79f2638b0981e499be934f6a1edba50d927d391785c2222b8cc32b873b83c5c7be90fcf7a1fe82a9873f03fae5fccbae1135a704fe52acb8d2bc59180598934ad3cdfaf3b4fa1021b45dc071a670e75558a90d9b772f5bcfd0283ba7b845429c708a688eaa8c1b2e2fc0f2ab9bdb18e712afa613c8aa112c9ce95accc44bc982477a9d8f3c3d4961a11acbc86aeb80e9bc32ae8ca91c7248363ab6fb113650f3e5cb6d422c4c51bb152a2bc2a2014d84d1a3d2501c01473d566a9b8e48b8f394d9f96342dcbcd108d9642867a9228014a58cbfe8bb39e736520d6a7005d3a484522e5e5520acb8da56da47e8839c0b2794e2c9ae6f7a20c31534fa76ac977d8674bd95e0a20e9c3da41fd943a7f2fa43e639f1c696a25ced5834c3f521aff1859a619aa6ac195d249e160b97670e8455e92e4f2a4612c5111b31e1c5c58d5d5313aa0bcc3c90210a737cdb9829945b73955b825970cfeaed8c9848db14f558c085a8fea2d38165b1b30614c480d6c86506a87ca1c7245a8fbaeac79941614947d4e72c19ad66c879461b0a3dbdcfb11ad93e1151c9dbb99c34c4445abc1662ef9c3a80a4b87ac489a4df51d153354cd9df7a51e0ffdbc3c4a2bcec09fb93bc7660ca236a204f65b509ae9370ea1cb0243df8639ab29a6e34d831c1c899a4254143f3fb0b9b558a8517a0227a3c57948b1df39aa81cc9f7c0d6dd941306bd222c811a9b47318188f9ecb12ca04ddb1f186e1b37ce8b114c298857779cc99e1ebafd74501e8af8de109185e7b940fce11abd5226983111a1ce7272d45142737d73cb0e1cd843e886fd1356847fd790b7e86a42d6c7240b38f652b0fe179b10b2d56608d68bdb5559a970dbf267a6b9f2fb4dceb08464f5ace284ee9d4058469e770603a02ea059cdd1cebed5bd960d0f6a8d7bfc2a7c4a2fab259f231fd6410a84d8c431c65be9fd6de9f545eadba37bcb9899d607d4143aa4b1e0871a16a5d1cd5447f8fc7d0b09e395955887e5047acf1616ddfc04416bf2ae647b67bcb39ef7aedb779fd7fbfc1f4fa3fa3cb42a8de183f280a4280d9dc0bfde9b33a09d5b7a567b35b6f47e751ceaf2904624444203d0536aa74878ceef64783f6559317fe911d15e147b5c2a259da0cf10bf49b2b437ad6d0b48622f202e0c05fd8cf57133491bb74744e9ec0898ba5b57ed4d9b126694bc7c4274ab9c220ddd310745172ca5f03388c5c048ed163c04961a8564990f67df6d2e2832b1de34c11417a83f9d5cd8755c9dc22a3b088085f44edcac77a5452de631757ae913b074ab3ae3602304994828baad54932801375ca431c4afe06b1da28646d789f632c05ae024740164873ca98939c5fdbac6a507e0ef0ad875d0e9c020d79ab4ce6d2ea9e92e5c5fb642208b52dcbaa21da8a229276dce6825b03d416b819830d3940eb643270a1a2c0497391eec87429011affe78fd672ae4a86c3592b84327c9d70c9bd9d0bab2de03bd8ae6be3dd89e07f929720965add1756c10aee980f2576f7958b4e49b06b832b8f860c2f746d04086424511808f36d3b3c4113caac2d63cdd62151f7a1c2cf1dbee0ddb7e985d5eae1b1c166d8547ddbebe9a11f9c1449dc8ce342940621d6f765a55fc38d447c5fe1210f8b2fcff8370a66e4f809cbddcd1c877cc507775b22d71cec8628e3fa8205c3be2cbda65eb607c33e3a3b7541618d27d57072aa8b6f6e8f7efe04855e8aa7704e32fb1c0151ba19f262c4adc48070d5e7f5610dc160f9a29feb96963a41ab4b6f888e9dbb26cacc58287e04130c8887a31f2a73c5786993b68ff8236297eda69bee2a2b3f20c6b4d59813923172bc6944acacb62eda4d9409cabd8cd225ee1a044afd0c9bbffb1dc52b0dc3d196fa5dd110114895905440caaf8d0a6519c2d7342d61ef938d6d0f5fe93a7157b8436df909bd70a6c9aa832965995c57672f1a657135a7f87992456dccad3009cb4074c8c0f7f66a5f23a0ab437877203be8817e6dd780f7a7acecc852c66d04db37b17923bfc08a6dab5805a4829571934cf1612dec70c223e6fe67a64949c1cd93791531f71caa974263c8cc0b9e358bc2367d1f01692782415013a91ce8d270cc22f44807c9a3571b963b96124db523c55e9fae6fb55fa0c410f94e7cd19e85f55a8171b9d7313eb174a2a15afe1889d7cba3ed1d3024a0a1cd002e2f5c4f6746f0eddc05739f09b95a513473c0fd82f1ca5af2340ac5cbdd5b0eb417a45fbdc481ffc946622fa37529e86f4ce84ef429713ab8926c4b6aa70d5a4dbdc64a517df448d6d02239071f5cd8d3123c8b56a0d3446cb808f76922d6075ce236cc2024cd26109e16e2d128fd284a558daf9b63600b229e0e4d2b691239bb69ee6fb6c737cb2fd95bac872db91b3cbfca76680089c982162cfbc7aebf23b2d2e56247b49de903f0bb8d8103c3b6502b1e34a27e54dfee8674f89580e48265e1547bc26e04ca8340d8608d28a114a0ee9848b491dcad23180001aebdff8f4562f01bd2ab4124a626cbd737bdb09622327654a349b3873e18188d3901f0afdd179b60a5b0ad3c1698a99f932f20cc05b48ee6f7d89422e9f806c45a23acbc15e138406d57d8bfbbfff66abe6d7c46a44b52e50a0934098e660188f96fcd5167745ff4d67ccc90642b58e5b4fd5d9c5270205e37f719e372020f43ffbcf4f5ec6644af47bfe57ff023e7e345fe2ca0c5e8b55cbb3a2917241c39d5deefed28360e2723aaf935701c6b339fa16c34c2c7c5ce07318dfb652c1e6de91a968ca256ae1683b9d6fa9387f2bdf6a64bd824bc0e294d92621a0f1eaae8351fc77190638135ea74174615d7e4f1d31b362c27fbdd01906344ed72a204377f0d79f1f3db0ef27480650a006de4a36dac06c3a411dad48367c30c6f1016e9eebe362457e06bf344e71d5fe57e5bc2afd09dcabdba7c4d2622dc2dcc3e7fc02ce1e443cae8ed87feb319cddd2ab39c5ddff05f43cf63975b06ccf6872f715f962fcf66cac276e9d7da658ba5c266983f3a6e126fab668de9cba220b9ae9450f98782fd8ccbaec087a527e5f5e8e5a119fc5a0d2969ac64c6a01219d7b4fae9b2c0a00ce1b7694772213c3af35e864cdd4b07d75d741e5c1b4c1b33ed0389b69d47aec7817f8d0f1f8526d6d2354f577408776f60b592396d248c1a664c8fea27197c533406f3db4a7260892bae348cba5e1cf0bbe6f130d14ed52269b3e5311d3d2e70e790ea4cb7579a0f1c4cfdb0beacc6952eb3a6845b740a2f8c169ae06a1b6c2a7676f73d1c3805ac0f5fcba46af282ec7483ff9f95c23cfd4d6bf254572fb420309e0ff70f9527a7b10c16e04d5482f9e3b881363b908fc7f0f52ab54a1bdf80a4a6bf7e690748f09dadfa499653e06689fc39ca8d208eeccabedaf4d2412a1df08647c6339979de37525734e328a74e02415995b8603949cfeeefaafb3ca917230ba1edd21e79d1d5d7aa65a81f3de6b02c094f527c5546c8595f0f454c18583fd2d412339819ac97195c6f6a9ba54a19f2a0ec47179f0949d444925730fd6c5bc7f942812c090c0a8a33732f25451d181cbb5097859b77ae48e80a6aa94c4426c90d14dbca83453fd4e684d38972f037ad5ff27e4553003c3ab9e6cb553968ebdcca293e326e9db77fd49086b6f390e7849f45cf7f5215cbba4801c33163124ff5b8e913ad0951d4325cc6708e5bdc1c0d9f9f5a54829a49b54495edc74676d4f2abf5b6a19a8f35d598976151df83917e7a42e62d13b700b497e907cd783746f4ef7db1aa7f746a258089c46f0be8d86cd36de90fc7451cb6128315c76c7137f0c85748d22d1773838b4d89ec9bece686a3fdf39e15010146364194778608a92716e12ab707fb082ff29e49b45f8804a55fbdded5b8d25b2c6955f6ed983116c8b327916efd94f22e765e8fb13e26d6072bc0e39346e0c00573e633cf3127d482632e71d4bf8ed63494c5557281aab944262961f7fd7149c88b84cb8151f470c5bd7f78a41b25358b922eef42c59a1d7e16374dca4cd5e94769fba903092797da60e9b730097ec3ff47035fe0211ff840268938e8cf7204b96479049efe436d065957f6f5649ee747660342b35d742a7a76076ac0d127a6cfb503b3ce7c55f989bb977aebd92317cc5801db8ab9ecba4694853feea7cde05d79d8b9798f3b86e763e30311b67852329760d898c04f29b92603e8d89a1e0c9e38d568696c3f92a5040d043b8eb2affb8fcd9474dd0f04e2f1a401b9a3d1b9e323c4df74d14f0e4b6b925657b3ef24b2604c7e9d3b9a726f5e6b88cbb8cc83e1d9719a38c8613277f4fdde5c651cb86a6a1c0571b6e254ded2b5aac71a88e83543da126ecbc17c8d5759c17aa4958aa537f61f70cc6ae610b1049617ae65fa7a1ee95fedaf206117c0976457d657601dba9921ef202244532af86f53a8b7c6ab0ab2adab2547e805550154bb2e0f47eb3e3703768e35f1ccf9d79c49f5a0d8a02e32597b1c4850f4a4b439d95d88a77a603bb9a75e63da99ce8b17cd00a5de5fcd1c333f9c09e2732fa832493f7b003d24ea661555ac492687be3785ac002e97c884271e0f9442d5afdca58267cff3a5359a2748ecfebe0de8ea3a18f28f6746e5979a0dab2404f460a34e812e0df73a6de833eb5daabbe1b955a21d9dd0a637367613ea0f738a3bc7a63db5e22c500e2e635d3625afe8d574e89cf45d6662efacfe938c795f0a6bbffd6cb2c222b8dbd48d8e", 0x1000}], 0x5, &(0x7f0000001e00)=[{0x108, 0x1, 0x1, "fb2ee3b8a2e2339938427393aca09470d8ad9b9d1485288dd8a32bab38975cd403ee695317f5a5a7819ccc2ee17eec5b7160242e55de8c0e2eb7f9522c78d8d2700ab8546afefaaf4b717cb86f2b2c6bcf1e741e1539c7672bf27f86af47cf11760a3fc2cff53e3a8385bb204cc4a525622dfc545e954a09fd689102bb443564b728886459c2b2a37d7eb49b239347949a0a388593390fb9dc199c76aa0e9ea8a8e968a39de68779a563d6143b095bc047c12154f9666a987a9f92f64f0e6a71122661c327e3921ec5bc665896f0023d970f0ed43a392cb13faf7fd7d3efca88e497ccca76b855ede279232aa60c62f2bc4072"}, {0x98, 0x10a, 0x4, "7c06db9fb30260c0041bd26fa08de26872b1223f79cc1e5215529105c00e2c602f826de173e664ff46fc1d8bb70091c7f002c7f0095f1f366bd4775d2c63e6b7cab3303583cfeff0d26be368f0329de7b71d0fc8907b85bf510eacb4e2892a1d69a54a542e0b233e775188ff904956dd0f6589aa98fa5fe513496932f2d863d81370af"}], 0x1a0}, 0x4008000)
r4 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r4, &(0x7f0000002000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002040)=0x14)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000002080)={0x0, 0x3}, &(0x7f00000020c0)=0x8)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000002100), 0x8)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002380)={0x5, <r7=>0x0}, 0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002440)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f00000023c0), &(0x7f0000002400)}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000024c0)=@bpf_lsm={0x1d, 0x19, &(0x7f00000021c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x6}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @jmp={0x5, 0x0, 0x4, 0x2, 0x9, 0xffffffffffffffc0, 0xfffffffffffffffc}], &(0x7f00000022c0)='GPL\x00', 0x6, 0x1d, &(0x7f0000002300)=""/29, 0x41000, 0x60, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f0000002340)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, r7, 0x0, 0x0, &(0x7f0000002480)=[r8], 0x0, 0x10, 0x81}, 0x94)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x2c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfffeffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
r10 = accept4(r4, &(0x7f0000002680)=@can, &(0x7f0000002700)=0x80, 0xffbccf0a1ccab5f0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r9, 0x8983, &(0x7f0000002740)={0x1, 'macsec0\x00'})
setsockopt$inet_int(r10, 0x0, 0x1, &(0x7f0000002780)=0xfffffe1c, 0x4)
setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f00000027c0)=0x4, 0x4)
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000002800), 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:54480' (ED25519) to the list of known hosts.
syzkaller login: [   40.999355][ T5756] cgroup: Unknown subsys name 'net'
[   41.126600][ T5756] cgroup: Unknown subsys name 'cpuset'
[   41.136385][ T5756] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.382806][ T5756] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.536683][ T5224] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.539574][ T5224] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.544010][ T5224] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.546895][ T5224] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.549363][ T5224] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.580946][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.584085][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.586583][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.589525][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.592210][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.625675][ T5224] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.628391][ T5224] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.630884][ T5224] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.633657][ T5224] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.636107][ T5224] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.802470][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   45.858081][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   45.891707][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   45.949063][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.952121][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.955257][ T5833] bridge_slave_0: entered allmulticast mode
[   45.957964][ T5833] bridge_slave_0: entered promiscuous mode
[   45.978651][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.980936][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.983228][ T5833] bridge_slave_1: entered allmulticast mode
[   45.986051][ T5833] bridge_slave_1: entered promiscuous mode
[   45.997009][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.999933][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.003065][ T5828] bridge_slave_0: entered allmulticast mode
[   46.007382][ T5828] bridge_slave_0: entered promiscuous mode
[   46.032629][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.036148][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.039153][ T5828] bridge_slave_1: entered allmulticast mode
[   46.043190][ T5828] bridge_slave_1: entered promiscuous mode
[   46.047127][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.049519][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.052012][ T5836] bridge_slave_0: entered allmulticast mode
[   46.055091][ T5836] bridge_slave_0: entered promiscuous mode
[   46.058202][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.060538][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.062901][ T5836] bridge_slave_1: entered allmulticast mode
[   46.066416][ T5836] bridge_slave_1: entered promiscuous mode
[   46.103985][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.108247][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.112501][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.117214][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.121527][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.139201][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.157829][ T5833] team0: Port device team_slave_0 added
[   46.161484][ T5833] team0: Port device team_slave_1 added
[   46.171315][ T5828] team0: Port device team_slave_0 added
[   46.175496][ T5828] team0: Port device team_slave_1 added
[   46.191884][ T5836] team0: Port device team_slave_0 added
[   46.207885][ T5836] team0: Port device team_slave_1 added
[   46.210477][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.212823][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.221640][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.232345][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.234721][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.243014][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.254528][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.256833][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.266044][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.270072][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.272379][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.280988][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.299753][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.302001][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.310449][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.315014][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.317278][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.325798][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.365363][ T5828] hsr_slave_0: entered promiscuous mode
[   46.367697][ T5828] hsr_slave_1: entered promiscuous mode
[   46.372883][ T5833] hsr_slave_0: entered promiscuous mode
[   46.375432][ T5833] hsr_slave_1: entered promiscuous mode
[   46.377579][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.380145][ T5833] Cannot create hsr debugfs directory
[   46.414699][ T5836] hsr_slave_0: entered promiscuous mode
[   46.417172][ T5836] hsr_slave_1: entered promiscuous mode
[   46.419316][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.421746][ T5836] Cannot create hsr debugfs directory
[   46.600030][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.606178][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.610969][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.616090][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.657624][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.660050][ T5828] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.662678][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.665030][ T5828] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.669170][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.678124][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.685518][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.698006][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.739057][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.743082][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.753260][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.758459][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.765417][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.767760][ T5833] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.770236][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.772460][ T5833] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.786363][ T4487] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.789440][ T4487] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.792726][ T4487] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.796122][ T4487] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.832144][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.856401][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   46.869605][ T4487] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.871991][ T4487] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.876049][ T4487] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.878414][ T4487] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.897897][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.909200][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.929190][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   46.932647][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   46.945039][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.947443][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.951138][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.953531][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.962136][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.964666][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.985278][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.987638][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.009648][ T5833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   47.013018][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.050200][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.097086][ T5828] veth0_vlan: entered promiscuous mode
[   47.107127][ T5828] veth1_vlan: entered promiscuous mode
[   47.131419][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.141944][ T5828] veth0_macvtap: entered promiscuous mode
[   47.152466][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.156272][ T5828] veth1_macvtap: entered promiscuous mode
[   47.177311][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.187626][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.200391][ T5856] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.205389][ T5856] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.208238][ T5856] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.210927][ T5856] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.220572][ T5836] veth0_vlan: entered promiscuous mode
[   47.231961][ T5833] veth0_vlan: entered promiscuous mode
[   47.238431][ T5836] veth1_vlan: entered promiscuous mode
[   47.245553][ T5833] veth1_vlan: entered promiscuous mode
[   47.278050][ T5836] veth0_macvtap: entered promiscuous mode
[   47.282572][ T5833] veth0_macvtap: entered promiscuous mode
[   47.291774][ T5836] veth1_macvtap: entered promiscuous mode
[   47.299974][ T5833] veth1_macvtap: entered promiscuous mode
[   47.311565][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.314842][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.315625][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.329982][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.342951][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.346674][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.351186][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.360716][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.363221][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.370996][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.374674][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.378381][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.394748][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.400994][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.406015][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.409097][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.430495][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.481728][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.484970][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.485262][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.487799][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.516464][ T4487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.519376][ T4487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.521647][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.524748][ T5894] netlink: zone id is out of range
[   47.526891][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.530113][ T5894] netlink: zone id is out of range
[   47.534779][ T5894] netlink: zone id is out of range
[   47.542000][ T5894] netlink: zone id is out of range
[   47.551231][ T5894] netlink: zone id is out of range
[   47.553053][ T5894] netlink: zone id is out of range
[   47.561773][ T5894] netlink: zone id is out of range
[   47.567273][ T5894] netlink: zone id is out of range
[   47.569586][ T5894] netlink: zone id is out of range
[   47.571273][ T5894] netlink: zone id is out of range
[   47.574202][ T5224] Bluetooth: hci0: command tx timeout
[   47.584666][ T5897] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2'.
[   47.654127][ T5224] Bluetooth: hci2: command tx timeout
[   47.656063][ T5224] Bluetooth: hci1: command tx timeout
[   47.816798][ T5914] : entered promiscuous mode
[   47.856826][ T5923] Zero length message leads to an empty skb
[   48.063812][ T5953] batadv0: entered promiscuous mode
[   48.108551][ T5957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17'.
[   48.311821][ T5975] warning: `syz.2.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   48.327097][ T5975] netlink: 'syz.2.23': attribute type 7 has an invalid length.
[   48.329599][ T5975] netlink: 'syz.2.23': attribute type 8 has an invalid length.
[   48.332062][ T5975] netlink: 'syz.2.23': attribute type 4 has an invalid length.
[   48.341223][ T5975] netlink: 204 bytes leftover after parsing attributes in process `syz.2.23'.
[   48.397055][ T5980] netlink: 'syz.1.25': attribute type 7 has an invalid length.
[   48.399992][ T5980] netlink: 'syz.1.25': attribute type 8 has an invalid length.
[   48.402719][ T5980] netlink: 'syz.1.25': attribute type 4 has an invalid length.
[   48.405823][ T5980] netlink: 204 bytes leftover after parsing attributes in process `syz.1.25'.
[   48.461772][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'.
[   48.704698][ T6000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.31'.
[   48.847123][ T6007] veth0_macvtap: left promiscuous mode
[   48.849570][ T6007] macvtap0: entered allmulticast mode
[   48.869000][ T6011] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.879257][ T6010] netlink: 'syz.0.35': attribute type 10 has an invalid length.
[   48.882024][ T6010] batadv0: left promiscuous mode
[   48.882534][ T6007] syz.1.34 (6007) used greatest stack depth: 20832 bytes left
[   48.896640][ T6010] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.902192][ T6010] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   48.968466][ T6017] netlink: 'syz.0.37': attribute type 7 has an invalid length.
[   48.971141][ T6017] netlink: 'syz.0.37': attribute type 8 has an invalid length.
[   48.975729][ T6017] netlink: 224 bytes leftover after parsing attributes in process `syz.0.37'.
[   49.018179][ T6013] batadv0: entered promiscuous mode
[   49.315481][ T6033] : entered promiscuous mode
[   49.471739][ T6048] : entered promiscuous mode
[   49.552326][ T6057] netlink: 'syz.1.47': attribute type 1 has an invalid length.
[   49.556976][ T6057] netlink: 180 bytes leftover after parsing attributes in process `syz.1.47'.
[   49.592214][ T6054] syz.0.46 uses obsolete (PF_INET,SOCK_PACKET)
[   49.653758][   T55] Bluetooth: hci0: command tx timeout
[   49.664031][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.48'.
[   49.669891][ T6066] netlink: 204 bytes leftover after parsing attributes in process `syz.0.49'.
[   49.734557][   T55] Bluetooth: hci1: command tx timeout
[   49.736539][   T55] Bluetooth: hci2: command tx timeout
[   50.810256][ T6154] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.917447][ T6161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   51.007923][ T6173] syzkaller0: entered promiscuous mode
[   51.011447][ T6173] syzkaller0: entered allmulticast mode
[   51.051168][ T6172] ip6gre1: entered allmulticast mode
[   51.214568][ T5700] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d
[   51.217658][ T6190] batadv0: left promiscuous mode
[   51.221784][ T6190] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.226939][ T6190] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   51.734161][   T55] Bluetooth: hci0: command tx timeout
[   51.814327][   T55] Bluetooth: hci2: command tx timeout
[   51.816620][   T55] Bluetooth: hci1: command tx timeout
[   52.275802][ T6242] sctp: [Deprecated]: syz.2.97 (pid 6242) Use of int in maxseg socket option.
[   52.275802][ T6242] Use struct sctp_assoc_value instead
[   52.385765][ T6242] sctp: [Deprecated]: syz.2.97 (pid 6242) Use of int in maxseg socket option.
[   52.385765][ T6242] Use struct sctp_assoc_value instead
[   52.430678][ T6242] sctp: [Deprecated]: syz.2.97 (pid 6242) Use of int in max_burst socket option.
[   52.430678][ T6242] Use struct sctp_assoc_value instead
[   52.775372][ T6292] __nla_validate_parse: 11 callbacks suppressed
[   52.775381][ T6292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.111'.
[   53.213143][ T6311] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.217047][ T6311] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   53.238728][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'.
[   53.279687][ T5890] IPVS: starting estimator thread 0...
[   53.281713][ T6318] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[   53.393497][ T6319] IPVS: using max 78 ests per chain, 187200 per kthread
[   53.687552][ T6345] net_ratelimit: 1622 callbacks suppressed
[   53.687562][ T6345] netlink: zone id is out of range
[   53.692232][ T6345] netlink: zone id is out of range
[   53.705188][ T6345] netlink: zone id is out of range
[   53.706977][ T6345] netlink: zone id is out of range
[   53.708654][ T6345] netlink: zone id is out of range
[   53.710340][ T6345] netlink: zone id is out of range
[   53.712009][ T6345] netlink: zone id is out of range
[   53.714915][ T6345] netlink: zone id is out of range
[   53.716581][ T6345] netlink: zone id is out of range
[   53.718349][ T6345] netlink: zone id is out of range
[   53.813514][ T5830] Bluetooth: hci0: command tx timeout
[   53.893494][ T5830] Bluetooth: hci1: command tx timeout
[   53.895288][ T5830] Bluetooth: hci2: command 0x0419 tx timeout
[   54.168589][ T6356] raw_sendmsg: syz.2.128 forgot to set AF_INET. Fix it!
[   54.893310][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.140'.
[   54.939622][ T6407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.141'.
[   54.945882][ T6407] netlink: 48 bytes leftover after parsing attributes in process `syz.0.141'.
[   54.950659][ T6407] validate_nla: 9 callbacks suppressed
[   54.950666][ T6407] netlink: 'syz.0.141': attribute type 7 has an invalid length.
[   54.955685][ T6411] netlink: 'syz.0.141': attribute type 7 has an invalid length.
[   54.958308][ T6411] netlink: 'syz.0.141': attribute type 8 has an invalid length.
[   54.960996][ T6407] netlink: 'syz.0.141': attribute type 8 has an invalid length.
[   54.963992][ T6411] netlink: 'syz.0.141': attribute type 4 has an invalid length.
[   54.966631][ T6407] netlink: 'syz.0.141': attribute type 4 has an invalid length.
[   54.969266][ T6411] netlink: 204 bytes leftover after parsing attributes in process `syz.0.141'.
[   54.972333][ T6407] netlink: 204 bytes leftover after parsing attributes in process `syz.0.141'.
[   55.003519][ T6410] netlink: 'syz.1.142': attribute type 10 has an invalid length.
[   55.055514][ T5890] IPVS: starting estimator thread 0...
[   55.154748][ T6423] IPVS: using max 77 ests per chain, 184800 per kthread
[   55.217822][ T6435] netlink: 'syz.0.148': attribute type 10 has an invalid length.
[   55.641994][ T6457] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34)
[   55.822373][ T6485] ip6erspan0: entered allmulticast mode
[   55.973640][ T5224] Bluetooth: hci2: command 0x0419 tx timeout
[   56.010116][ T6502] netlink: 240 bytes leftover after parsing attributes in process `syz.0.164'.
[   56.323984][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'.
[   56.537521][ T6531] netlink: 'syz.2.173': attribute type 1 has an invalid length.
[   56.540085][ T6531] netlink: 92 bytes leftover after parsing attributes in process `syz.2.173'.
[   56.637007][ T6544] netlink: 'syz.1.177': attribute type 1 has an invalid length.
[   56.828743][ T6567] trusted_key: syz.0.183 sent an empty control message without MSG_MORE.
[   57.209177][ T6619] Bluetooth: MGMT ver 1.23
[   57.479096][ T6635] bridge_slave_1: default FDB implementation only supports local addresses
[   58.026509][ T6653] __nla_validate_parse: 4 callbacks suppressed
[   58.026519][ T6653] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.205'.
[   58.070091][ T6656] netlink: 204 bytes leftover after parsing attributes in process `syz.1.206'.
[   58.109315][ T6658] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   58.533487][ T5224] Bluetooth: hci2: command 0x0419 tx timeout
[   58.622583][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'.
[   58.984939][ T6696] net_ratelimit: 969 callbacks suppressed
[   58.984948][ T6696] netlink: zone id is out of range
[   58.988617][ T6696] netlink: zone id is out of range
[   58.992907][ T6696] netlink: zone id is out of range
[   58.999869][ T6696] netlink: zone id is out of range
[   59.001530][ T6696] netlink: zone id is out of range
[   59.003206][ T6696] netlink: zone id is out of range
[   59.005258][ T6696] netlink: zone id is out of range
[   59.006830][ T6696] netlink: zone id is out of range
[   59.008443][ T6696] netlink: zone id is out of range
[   59.010604][ T6696] netlink: zone id is out of range
[   59.162305][ T6716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.227'.
[   59.212651][ T6719] batadv0: entered promiscuous mode
[   59.216614][ T6719] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.336189][ T6732] batadv0: entered promiscuous mode
[   59.338282][ T6732] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.454045][ T6751] batadv0: left promiscuous mode
[   59.456745][ T6751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.234'.
[   60.316805][ T6809] netlink: 'syz.1.249': attribute type 11 has an invalid length.
[   60.319347][ T6809] netlink: 'syz.1.249': attribute type 11 has an invalid length.
[   60.321828][ T6809] netlink: 224 bytes leftover after parsing attributes in process `syz.1.249'.
[   61.054582][ T6833] validate_nla: 10 callbacks suppressed
[   61.054591][ T6833] netlink: 'syz.0.255': attribute type 7 has an invalid length.
[   61.059151][ T6833] netlink: 'syz.0.255': attribute type 8 has an invalid length.
[   61.061785][ T6833] netlink: 'syz.0.255': attribute type 4 has an invalid length.
[   61.065867][ T6833] netlink: 204 bytes leftover after parsing attributes in process `syz.0.255'.
[   61.342287][ T6854] netlink: 9988 bytes leftover after parsing attributes in process `syz.2.261'.
[   61.401411][ T6855] tipc: Started in network mode
[   61.404073][ T6855] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711
[   61.407667][ T6855] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   61.573206][ T6861] netlink: 'syz.1.263': attribute type 10 has an invalid length.
[   61.585027][ T6861] team0: Cannot enslave team device to itself
[   61.641799][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'.
[   61.858878][ T6891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.271'.
[   62.948773][ T6951] bond0: (slave batadv0): Releasing backup interface
[   62.955584][ T6951] bridge_slave_0: left allmulticast mode
[   62.957535][ T6951] bridge_slave_0: left promiscuous mode
[   62.959541][ T6951] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.966360][ T6951] bridge_slave_1: left allmulticast mode
[   62.968311][ T6951] bridge_slave_1: left promiscuous mode
[   62.970263][ T6951] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.977342][ T6951] bond0: (slave bond_slave_0): Releasing backup interface
[   62.982069][ T6951] bond0: (slave bond_slave_1): Releasing backup interface
[   62.989044][ T6951] team0: Port device team_slave_0 removed
[   62.996048][ T6951] team0: Port device team_slave_1 removed
[   62.998521][ T6951] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.001028][ T6951] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.021176][ T6951] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.024499][ T6951] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.107713][ T6959] __nla_validate_parse: 1 callbacks suppressed
[   63.107723][ T6959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.288'.
[   63.227351][ T6965] batadv0: entered promiscuous mode
[   63.230064][ T6965] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.126926][ T7016] netlink: 164 bytes leftover after parsing attributes in process `syz.2.306'.
[   64.151892][ T7018] netlink: 'syz.2.307': attribute type 7 has an invalid length.
[   64.154792][ T7018] netlink: 'syz.2.307': attribute type 8 has an invalid length.
[   64.175617][ T7021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.308'.
[   64.186799][ T7020] syz.1.308: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   64.193032][ T7020] CPU: 1 UID: 0 PID: 7020 Comm: syz.1.308 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[   64.193043][ T7020] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   64.193048][ T7020] Call Trace:
[   64.193051][ T7020]  <TASK>
[   64.193054][ T7020]  dump_stack_lvl+0x189/0x250
[   64.193067][ T7020]  ? __pfx_dump_stack_lvl+0x10/0x10
[   64.193076][ T7020]  ? __pfx__printk+0x10/0x10
[   64.193085][ T7020]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   64.193095][ T7020]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   64.193110][ T7020]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   64.193119][ T7020]  warn_alloc+0x214/0x310
[   64.193132][ T7020]  ? __pfx_warn_alloc+0x10/0x10
[   64.193146][ T7020]  ? __get_vm_area_node+0x28f/0x300
[   64.193156][ T7020]  ? xskq_create+0xbf/0x170
[   64.193165][ T7020]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   64.193186][ T7020]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   64.193198][ T7020]  ? __kasan_kmalloc+0x93/0xb0
[   64.193208][ T7020]  vmalloc_user_noprof+0xad/0xf0
[   64.193218][ T7020]  ? xskq_create+0xbf/0x170
[   64.193225][ T7020]  xskq_create+0xbf/0x170
[   64.193232][ T7020]  xsk_init_queue+0xb0/0x110
[   64.193244][ T7020]  xsk_setsockopt+0x57b/0x8d0
[   64.193255][ T7020]  ? __pfx_xsk_setsockopt+0x10/0x10
[   64.193266][ T7020]  ? __pfx_aa_sk_perm+0x10/0x10
[   64.193278][ T7020]  ? __fget_files+0x2a/0x420
[   64.193289][ T7020]  ? aa_sock_opt_perm+0x74/0x110
[   64.193297][ T7020]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   64.193304][ T7020]  ? __pfx_xsk_setsockopt+0x10/0x10
[   64.193314][ T7020]  do_sock_setsockopt+0x17c/0x1b0
[   64.193325][ T7020]  __x64_sys_setsockopt+0x13f/0x1b0
[   64.193354][ T7020]  do_syscall_64+0xfa/0x3b0
[   64.193362][ T7020]  ? lockdep_hardirqs_on+0x9c/0x150
[   64.193369][ T7020]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.193376][ T7020]  ? exc_page_fault+0x9f/0xf0
[   64.193383][ T7020]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.193390][ T7020] RIP: 0033:0x7fd808f8e9a9
[   64.193397][ T7020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   64.193403][ T7020] RSP: 002b:00007fd809dad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   64.193412][ T7020] RAX: ffffffffffffffda RBX: 00007fd8091b5fa0 RCX: 00007fd808f8e9a9
[   64.193417][ T7020] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[   64.193421][ T7020] RBP: 00007fd809010d69 R08: 0000000000000004 R09: 0000000000000000
[   64.193425][ T7020] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
[   64.193430][ T7020] R13: 0000000000000000 R14: 00007fd8091b5fa0 R15: 00007ffc79bd6a78
[   64.193441][ T7020]  </TASK>
[   64.285065][ T7026] netlink: 'syz.2.309': attribute type 10 has an invalid length.
[   64.288620][ T7026] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.292157][ T7026] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   64.297172][ T7020] Mem-Info:
[   64.298270][ T7020] active_anon:8437 inactive_anon:0 isolated_anon:0
[   64.298270][ T7020]  active_file:1109 inactive_file:38210 isolated_file:0
[   64.298270][ T7020]  unevictable:1768 dirty:1515 writeback:0
[   64.298270][ T7020]  slab_reclaimable:9428 slab_unreclaimable:53194
[   64.298270][ T7020]  mapped:20985 shmem:5317 pagetables:941
[   64.298270][ T7020]  sec_pagetables:0 bounce:0
[   64.298270][ T7020]  kernel_misc_reclaimable:0
[   64.298270][ T7020]  free:304336 free_pcp:14368 free_cma:0
[   64.313766][ T7020] Node 0 active_anon:23192kB inactive_anon:0kB active_file:3404kB inactive_file:144088kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34748kB dirty:3896kB writeback:0kB shmem:15824kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7512kB pagetables:1992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   64.325418][ T7020] Node 1 active_anon:10080kB inactive_anon:0kB active_file:1032kB inactive_file:8752kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37768kB dirty:2164kB writeback:0kB shmem:4968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4796kB pagetables:1772kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   64.335826][ T7020] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   64.346006][ T7020] lowmem_reserve[]: 0 812 812 812 812
[   64.347732][ T7020] Node 0 DMA32 free:280812kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16460kB inactive_anon:0kB active_file:3404kB inactive_file:144088kB unevictable:3536kB writepending:3896kB present:1556484kB managed:831980kB mlocked:0kB bounce:0kB free_pcp:26444kB local_pcp:13600kB free_cma:0kB
[   64.357718][ T7020] lowmem_reserve[]: 0 0 0 0 0
[   64.359259][ T7020] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   64.369396][ T7020] lowmem_reserve[]: 0 0 854 854 854
[   64.371081][ T7020] Node 1 Normal free:462176kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10080kB inactive_anon:0kB active_file:1032kB inactive_file:8752kB unevictable:3536kB writepending:2164kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:38688kB local_pcp:22764kB free_cma:0kB
[   64.381292][ T7020] lowmem_reserve[]: 0 0 0 0 0
[   64.382866][ T7020] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   64.388089][ T7020] Node 0 DMA32: 77*4kB (ME) 71*8kB (UME) 196*16kB (UME) 380*32kB (UME) 113*64kB (UME) 31*128kB (UME) 7*256kB (UME) 6*512kB (UME) 4*1024kB (UM) 7*2048kB (UME) 56*4096kB (M) = 280044kB
[   64.395082][ T7020] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   64.400415][ T7020] Node 1 Normal: 408*4kB (UME) 320*8kB (UME) 362*16kB (UME) 233*32kB (UME) 145*64kB (UM) 100*128kB (UME) 25*256kB (UME) 9*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 99*4096kB (M) = 462176kB
[   64.407175][ T7020] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   64.410080][ T7020] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   64.413064][ T7020] 42851 total pagecache pages
[   64.414888][ T7020] 0 pages in swap cache
[   64.416226][ T7020] Free swap  = 124996kB
[   64.417632][ T7020] Total swap = 124996kB
[   64.418967][ T7020] 786301 pages RAM
[   64.420181][ T7020] 0 pages HighMem/MovableOnly
[   64.421678][ T7020] 241058 pages reserved
[   64.423028][ T7020] 0 pages cma reserved
[   64.570520][ T7034] net_ratelimit: 977 callbacks suppressed
[   64.570530][ T7034] netlink: zone id is out of range
[   64.576347][ T7034] netlink: zone id is out of range
[   64.589541][ T7034] netlink: zone id is out of range
[   64.591262][ T7034] netlink: zone id is out of range
[   64.592907][ T7034] netlink: zone id is out of range
[   64.602275][ T7034] netlink: zone id is out of range
[   64.604311][ T7034] netlink: zone id is out of range
[   64.606014][ T7034] netlink: zone id is out of range
[   64.607729][ T7034] netlink: zone id is out of range
[   64.609377][ T7034] netlink: zone id is out of range
[   64.795107][ T7063] netlink: 'syz.1.320': attribute type 4 has an invalid length.
[   64.799428][ T7063] netlink: 236 bytes leftover after parsing attributes in process `syz.1.320'.
[   64.802431][ T7064] netlink: 'syz.0.318': attribute type 10 has an invalid length.
[   64.813493][ T7064] batadv0: left promiscuous mode
[   64.832521][ T7067] tipc: Can't bind to reserved service type 2
[   64.952139][ T7073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.322'.
[   64.957142][ T7073] netlink: 124 bytes leftover after parsing attributes in process `syz.2.322'.
[   65.121683][ T7075] netlink: 'syz.0.323': attribute type 12 has an invalid length.
[   65.259131][ T7081] netlink: 204 bytes leftover after parsing attributes in process `syz.0.325'.
[   65.399872][ T7092] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[   65.406497][ T7092] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[   65.439393][ T7094] netlink: 208 bytes leftover after parsing attributes in process `syz.0.330'.
[   65.442779][ T7094] netlink: 208 bytes leftover after parsing attributes in process `syz.0.330'.
[   65.533941][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'.
[   65.537016][ T7098] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   65.876174][ T7126] batadv0: left promiscuous mode
[   66.250323][ T7140] syzkaller1: entered promiscuous mode
[   66.252165][ T7140] syzkaller1: entered allmulticast mode
[   66.416638][ T7158] validate_nla: 8 callbacks suppressed
[   66.416647][ T7158] netlink: 'syz.1.351': attribute type 5 has an invalid length.
[   66.428362][ T7158] ip6erspan0: entered promiscuous mode
[   66.756217][ T7191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   66.893081][ T7207] DL<Y: renamed from lo (while UP)
[   67.615917][ T7255] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   67.776779][ T7265] tipc: Started in network mode
[   67.780058][ T7265] tipc: Node identity 5eefb6f429d9, cluster identity 4711
[   67.792309][ T7265] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.799436][ T7265] syzkaller0: entered promiscuous mode
[   67.802336][ T7265] syzkaller0: entered allmulticast mode
[   67.816235][ T7264] tipc: Resetting bearer <eth:syzkaller0>
[   67.828283][ T7264] tipc: Disabling bearer <eth:syzkaller0>
[   67.873294][ T7254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.519405][ T7302] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[   68.838169][ T7323] netlink: 'syz.0.393': attribute type 8 has an invalid length.
[   68.908064][ T7332] netlink: 'syz.2.395': attribute type 7 has an invalid length.
[   69.168898][ T7343] syz_tun: entered allmulticast mode
[   69.171518][ T7345] syz_tun: left allmulticast mode
[   69.196124][ T7348] __nla_validate_parse: 7 callbacks suppressed
[   69.196134][ T7348] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.399'.
[   69.673630][ T7377] net_ratelimit: 1228 callbacks suppressed
[   69.673641][ T7377] netlink: zone id is out of range
[   69.677256][ T7377] netlink: zone id is out of range
[   69.678927][ T7377] netlink: zone id is out of range
[   69.680689][ T7377] netlink: zone id is out of range
[   69.683167][ T7377] netlink: zone id is out of range
[   69.686465][ T7377] netlink: zone id is out of range
[   69.688332][ T7377] netlink: zone id is out of range
[   69.690302][ T7377] netlink: zone id is out of range
[   69.693302][ T7377] netlink: zone id is out of range
[   69.695358][ T7377] netlink: zone id is out of range
[   69.755671][ T7383] netlink: 'syz.1.407': attribute type 1 has an invalid length.
[   69.772578][ T7383] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.777497][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'.
[   69.828674][ T7386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.408'.
[   70.038942][ T7401] netlink: 'syz.2.412': attribute type 10 has an invalid length.
[   70.056510][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'.
[   70.856800][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   70.925797][ T7443] netlink: 3 bytes leftover after parsing attributes in process `syz.0.424'.
[   70.937398][ T7443] batadv1: entered promiscuous mode
[   70.939282][ T7443] batadv1: entered allmulticast mode
[   71.019910][ T7443] netlink: 48 bytes leftover after parsing attributes in process `syz.0.424'.
[   71.192525][ T7448] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   71.531459][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'.
[   71.796690][ T7473] batadv0: entered promiscuous mode
[   71.799355][ T7473] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.860651][ T7478] netlink: 'syz.2.434': attribute type 7 has an invalid length.
[   71.867375][ T7478] netlink: 'syz.2.434': attribute type 8 has an invalid length.
[   71.871923][ T7478] netlink: 'syz.2.434': attribute type 4 has an invalid length.
[   71.875535][ T7478] netlink: 204 bytes leftover after parsing attributes in process `syz.2.434'.
[   71.908139][ T7481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.435'.
[   71.987228][ T7448] syz.0.426 (7448) used greatest stack depth: 20824 bytes left
[   72.017574][ T7488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.438'.
[   72.068701][ T7488] netlink: 'syz.2.438': attribute type 1 has an invalid length.
[   72.423420][ T7535] IPVS: set_ctl: invalid protocol: 181 10.1.1.0:20004
[   72.476305][ T7541] sch_fq: defrate 4294967295 ignored.
[   73.365264][ T7584] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[   73.368347][ T7584] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[   73.492674][ T7592] bond0: (slave batadv0): Releasing backup interface
[   73.549024][ T7597] netlink: 'syz.2.467': attribute type 11 has an invalid length.
[   73.651129][ T7603] netlink: 'syz.2.468': attribute type 10 has an invalid length.
[   73.654603][ T7603] batadv0: left promiscuous mode
[   73.657312][ T7603] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.661262][ T7603] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   73.827600][    C1] vcan0: j1939_tp_rxtimer: 0xffff888111058400: rx timeout, send abort
[   73.831247][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888111058400: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session.
[   74.881443][ T7639] __nla_validate_parse: 5 callbacks suppressed
[   74.881453][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'.
[   74.889933][ T7639] netlink: 52 bytes leftover after parsing attributes in process `syz.0.479'.
[   74.912480][ T7642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.480'.
[   74.920885][ T7639] net_ratelimit: 992 callbacks suppressed
[   74.920896][ T7639] netlink: zone id is out of range
[   74.928635][ T7642] netlink: 64 bytes leftover after parsing attributes in process `syz.2.480'.
[   74.931733][ T7639] netlink: zone id is out of range
[   74.934001][ T7639] netlink: zone id is out of range
[   74.935706][ T7639] netlink: zone id is out of range
[   74.937333][ T7639] netlink: zone id is out of range
[   74.939680][ T7639] netlink: zone id is out of range
[   74.942423][ T7639] netlink: zone id is out of range
[   74.955782][ T7639] netlink: zone id is out of range
[   74.957467][ T7639] netlink: zone id is out of range
[   74.959249][ T7639] netlink: zone id is out of range
[   75.041809][ T7653] netlink: 64 bytes leftover after parsing attributes in process `syz.0.483'.
[   75.129681][ T7660] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3942. macoff=106
[   75.220803][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.487'.
[   75.287359][ T7663] netlink: 776 bytes leftover after parsing attributes in process `syz.1.487'.
[   75.376582][ T7678] netlink: 64 bytes leftover after parsing attributes in process `syz.2.491'.
[   75.381383][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'.
[   75.417282][ T7678] sch_tbf: burst 0 is lower than device bridge4 mtu (1514) !
[   75.503143][ T7681] tipc: Started in network mode
[   75.506710][ T7681] tipc: Node identity be578671583f, cluster identity 4711
[   75.508952][ T7681] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.511335][ T7681] syzkaller0: entered promiscuous mode
[   75.513289][ T7681] syzkaller0: entered allmulticast mode
[   75.517382][ T7680] tipc: Resetting bearer <eth:syzkaller0>
[   75.536181][ T7680] tipc: Disabling bearer <eth:syzkaller0>
[   75.642772][ T7708] netlink: 32 bytes leftover after parsing attributes in process `syz.2.500'.
[   77.284617][ T7828] netlink: 'syz.2.534': attribute type 10 has an invalid length.
[   77.310125][ T7830] netlink: 'syz.1.537': attribute type 10 has an invalid length.
[   77.350180][ T5890] IPVS: starting estimator thread 0...
[   77.377093][ T6912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.384021][ T6912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.434640][ T7834] IPVS: using max 77 ests per chain, 184800 per kthread
[   77.441107][ T7841] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   77.458489][ T7832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.792535][ T7908] syz.1.553 (7908) used greatest stack depth: 20008 bytes left
[   79.660109][ T7968] netlink: 'syz.2.570': attribute type 10 has an invalid length.
[   79.976496][ T7977] __nla_validate_parse: 15 callbacks suppressed
[   79.976506][ T7977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.574'.
[   80.045361][ T5856] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   80.096332][ T7987] netlink: 'syz.1.576': attribute type 2 has an invalid length.
[   80.205263][ T7996] GUP no longer grows the stack in syz.0.578 (7996): 200000006000-20000000a000 (200000005000)
[   80.208860][ T7996] CPU: 0 UID: 0 PID: 7996 Comm: syz.0.578 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[   80.208873][ T7996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   80.208879][ T7996] Call Trace:
[   80.208884][ T7996]  <TASK>
[   80.208888][ T7996]  dump_stack_lvl+0x189/0x250
[   80.208905][ T7996]  ? __pfx_dump_stack_lvl+0x10/0x10
[   80.208915][ T7996]  ? __pfx__printk+0x10/0x10
[   80.208925][ T7996]  ? find_vma+0xe7/0x160
[   80.208942][ T7996]  __get_user_pages+0x2a60/0x30b0
[   80.208967][ T7996]  ? __pfx___get_user_pages+0x10/0x10
[   80.208976][ T7996]  ? __gup_longterm_locked+0xbf7/0x15b0
[   80.208985][ T7996]  ? down_read_killable+0x1d1/0x350
[   80.208994][ T7996]  ? try_get_folio+0x633/0x660
[   80.209005][ T7996]  __gup_longterm_locked+0xd66/0x15b0
[   80.209015][ T7996]  ? try_grab_folio_fast+0x1be/0x4f0
[   80.209029][ T7996]  ? gup_fast_fallback+0x1afc/0x2260
[   80.209041][ T7996]  gup_fast_fallback+0x1cd4/0x2260
[   80.209071][ T7996]  ? __pfx_gup_fast_fallback+0x10/0x10
[   80.209079][ T7996]  ? trace_contention_end+0x39/0x120
[   80.209089][ T7996]  ? __mutex_lock+0x330/0xe80
[   80.209096][ T7996]  ? futex_unqueue+0x22/0x240
[   80.209106][ T7996]  ? futex_unqueue+0x22/0x240
[   80.209115][ T7996]  ? futex_unqueue+0x22/0x240
[   80.209123][ T7996]  ? is_valid_gup_args+0x11f/0x200
[   80.209133][ T7996]  ? get_user_pages_fast+0x4d/0xb0
[   80.209143][ T7996]  __iov_iter_get_pages_alloc+0x39a/0xb40
[   80.209158][ T7996]  ? __pfx_pipe_clear_nowait+0x10/0x10
[   80.209168][ T7996]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   80.209178][ T7996]  ? wait_for_space+0x24d/0x2d0
[   80.209189][ T7996]  iov_iter_get_pages2+0x5e/0xa0
[   80.209200][ T7996]  __se_sys_vmsplice+0x548/0x10d0
[   80.209218][ T7996]  ? __pfx___se_sys_vmsplice+0x10/0x10
[   80.209228][ T7996]  ? __pfx_futex_wait+0x10/0x10
[   80.209243][ T7996]  ? __lock_acquire+0xab9/0xd20
[   80.209264][ T7996]  ? do_pipe2+0xf7/0x170
[   80.209279][ T7996]  ? do_syscall_64+0xbe/0x3b0
[   80.209289][ T7996]  do_syscall_64+0xfa/0x3b0
[   80.209296][ T7996]  ? lockdep_hardirqs_on+0x9c/0x150
[   80.209303][ T7996]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.209310][ T7996]  ? exc_page_fault+0x9f/0xf0
[   80.209318][ T7996]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.209325][ T7996] RIP: 0033:0x7fc6f898e9a9
[   80.209333][ T7996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   80.209339][ T7996] RSP: 002b:00007fc6f97cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[   80.209349][ T7996] RAX: ffffffffffffffda RBX: 00007fc6f8bb6080 RCX: 00007fc6f898e9a9
[   80.209354][ T7996] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000e
[   80.209358][ T7996] RBP: 00007fc6f8a10d69 R08: 0000000000000000 R09: 0000000000000000
[   80.209363][ T7996] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[   80.209367][ T7996] R13: 0000000000000000 R14: 00007fc6f8bb6080 R15: 00007ffdea0467f8
[   80.209379][ T7996]  </TASK>
[   81.094134][ T1276] cfg80211: failed to load regulatory.db
[   81.126718][ T8022] net_ratelimit: 973 callbacks suppressed
[   81.126728][ T8022] netlink: zone id is out of range
[   81.132041][ T8022] netlink: zone id is out of range
[   81.136680][ T8022] netlink: zone id is out of range
[   81.140332][ T8022] netlink: zone id is out of range
[   81.160558][ T8022] netlink: set zone limit has 4 unknown bytes
[   81.264379][ T8031] Bluetooth: hci1: Opcode 0x080f failed: -4
[   81.353895][ T8036] netlink: 'syz.0.590': attribute type 10 has an invalid length.
[   81.414262][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.591'.
[   81.672651][ T8046] netlink: 'syz.2.593': attribute type 10 has an invalid length.
[   82.196146][ T8053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.596'.
[   82.267694][ T8053] netlink: 16 bytes leftover after parsing attributes in process `syz.0.596'.
[   82.272931][ T8056] netlink: zone id is out of range
[   82.276035][ T8056] netlink: zone id is out of range
[   82.295606][ T8056] netlink: zone id is out of range
[   82.297350][ T8056] netlink: zone id is out of range
[   82.299982][ T8056] netlink: zone id is out of range
[   82.450339][ T8072] syz_tun: entered allmulticast mode
[   82.461277][ T8072] dvmrp8: entered allmulticast mode
[   82.470980][ T8071] syz_tun: left allmulticast mode
[   83.333556][ T5224] Bluetooth: hci1: command 0x080f tx timeout
[   83.434883][ T8109] bridge0: entered allmulticast mode
[   83.437968][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.613'.
[   83.442646][ T8109] bridge_slave_1: left allmulticast mode
[   83.444959][ T8109] bridge_slave_1: left promiscuous mode
[   83.447317][ T8109] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.452788][ T8109] bridge_slave_0: left allmulticast mode
[   83.459137][ T8109] bridge_slave_0: left promiscuous mode
[   83.461261][ T8109] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.476331][ T8109] bridge0 (unregistering): left allmulticast mode
[   83.502026][ T8114] netlink: 64 bytes leftover after parsing attributes in process `syz.0.614'.
[   83.516460][ T8110] syz_tun: entered promiscuous mode
[   83.518219][ T8110] syz_tun: entered allmulticast mode
[   83.704455][ T8137] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[   83.752793][ T8137] netlink: 'syz.0.623': attribute type 7 has an invalid length.
[   83.756107][ T8137] netlink: 'syz.0.623': attribute type 8 has an invalid length.
[   83.758618][ T8137] netlink: 'syz.0.623': attribute type 4 has an invalid length.
[   83.761282][ T8137] netlink: 204 bytes leftover after parsing attributes in process `syz.0.623'.
[   84.792847][ T8200] netlink: 816 bytes leftover after parsing attributes in process `syz.0.636'.
[   84.882892][ T8210] netlink: 64 bytes leftover after parsing attributes in process `syz.0.639'.
[   85.103254][ T8227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.645'.
[   85.110137][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'.
[   85.114858][ T8231] netlink: 44 bytes leftover after parsing attributes in process `syz.0.643'.
[   85.134564][ T8227] macsec0: entered promiscuous mode
[   85.136349][ T8227] macvlan1: entered promiscuous mode
[   85.140370][ T8227] macsec0: entered allmulticast mode
[   85.142236][ T8227] macvlan1: entered allmulticast mode
[   85.145193][ T8227] veth1_vlan: entered allmulticast mode
[   85.179700][ T8233] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.646'.
[   85.301676][ T8248] netlink: 'syz.1.649': attribute type 10 has an invalid length.
[   85.907377][ T8266] netlink: 20 bytes leftover after parsing attributes in process `syz.0.653'.
[   85.915367][ T8266] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   86.431520][ T8281] net_ratelimit: 577 callbacks suppressed
[   86.431531][ T8281] netlink: zone id is out of range
[   86.439244][ T8281] netlink: zone id is out of range
[   86.452397][ T8281] netlink: zone id is out of range
[   86.456688][ T8281] netlink: zone id is out of range
[   86.458476][ T8281] netlink: zone id is out of range
[   86.460162][ T8281] netlink: zone id is out of range
[   86.461910][ T8281] netlink: zone id is out of range
[   86.463815][ T8281] netlink: zone id is out of range
[   86.465466][ T8281] netlink: zone id is out of range
[   86.467110][ T8281] netlink: zone id is out of range
[   86.681064][ T8297] netlink: 256 bytes leftover after parsing attributes in process `syz.1.661'.
[   86.918597][ T8313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.666'.
[   86.921529][ T8313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.666'.
[   87.037473][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'.
[   87.886091][ T8363] Bluetooth: MGMT ver 1.23
[   88.002174][ T8373] netlink: 'syz.1.679': attribute type 7 has an invalid length.
[   88.005011][ T8373] netlink: 'syz.1.679': attribute type 8 has an invalid length.
[   88.007673][ T8373] netlink: 'syz.1.679': attribute type 4 has an invalid length.
[   88.010804][ T8373] netlink: 204 bytes leftover after parsing attributes in process `syz.1.679'.
[   88.487331][ T8414] netlink: 'syz.2.690': attribute type 7 has an invalid length.
[   88.489911][ T8414] netlink: 'syz.2.690': attribute type 8 has an invalid length.
[   88.492430][ T8414] netlink: 'syz.2.690': attribute type 4 has an invalid length.
[   88.647078][ T8445] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.653110][ T8445] syzkaller0: entered promiscuous mode
[   88.655754][ T8445] syzkaller0: entered allmulticast mode
[   88.671533][ T8445] tipc: Resetting bearer <eth:syzkaller0>
[   88.696786][ T8445] tipc: Disabling bearer <eth:syzkaller0>
[   89.208107][ T8499] validate_nla: 5 callbacks suppressed
[   89.208115][ T8499] netlink: 'syz.1.713': attribute type 7 has an invalid length.
[   89.212639][ T8499] netlink: 'syz.1.713': attribute type 8 has an invalid length.
[   90.048003][ T8522] bond0: (slave batadv0): Releasing backup interface
[   90.058444][ T8524] netlink: 'syz.1.720': attribute type 10 has an invalid length.
[   90.196730][ T8534] netlink: 'syz.1.723': attribute type 21 has an invalid length.
[   90.199317][ T8534] __nla_validate_parse: 5 callbacks suppressed
[   90.199324][ T8534] netlink: 128 bytes leftover after parsing attributes in process `syz.1.723'.
[   90.207983][ T8534] netlink: 3 bytes leftover after parsing attributes in process `syz.1.723'.
[   90.337643][ T8542] netlink: 48 bytes leftover after parsing attributes in process `syz.1.725'.
[   91.117397][ T8591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.211561][ T8606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.257382][ T8603] batadv0: entered promiscuous mode
[   91.260100][ T8603] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.273070][ T8603] syz.2.743 (8603) used greatest stack depth: 19896 bytes left
[   91.648438][ T8620] netlink: 56 bytes leftover after parsing attributes in process `syz.1.748'.
[   91.654928][ T8620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.748'.
[   91.663169][ T8620] netlink: 'syz.1.748': attribute type 9 has an invalid length.
[   91.666843][ T8620] netlink: 'syz.1.748': attribute type 7 has an invalid length.
[   91.669470][ T8620] netlink: 'syz.1.748': attribute type 8 has an invalid length.
[   91.672602][ T8620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.748'.
[   91.675904][ T8620] netlink: 16 bytes leftover after parsing attributes in process `syz.1.748'.
[   91.846778][ T8634] netlink: 'syz.0.752': attribute type 10 has an invalid length.
[   91.944567][ T8639] bond2 (unregistering): Released all slaves
[   91.973085][ T8641] netlink: 28 bytes leftover after parsing attributes in process `syz.1.754'.
[   92.064858][ T8643] netlink: 'syz.1.755': attribute type 1 has an invalid length.
[   92.067489][ T8643] netlink: 'syz.1.755': attribute type 1 has an invalid length.
[   92.070002][ T8643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.755'.
[   92.074296][ T8643] block nbd1: shutting down sockets
[   92.246680][ T8661] batadv0: left promiscuous mode
[   92.254910][ T8661] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.258170][ T8661] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   92.678938][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'.
[   93.322320][ T8705] net_ratelimit: 1218 callbacks suppressed
[   93.322330][ T8705] netlink: zone id is out of range
[   93.325266][ T8704] netlink: zone id is out of range
[   93.330025][ T8704] netlink: zone id is out of range
[   93.330425][ T8705] netlink: zone id is out of range
[   93.331905][ T8704] netlink: zone id is out of range
[   93.333596][ T8705] netlink: zone id is out of range
[   93.333601][ T8705] netlink: zone id is out of range
[   93.333604][ T8705] netlink: zone id is out of range
[   93.333607][ T8705] netlink: zone id is out of range
[   93.333611][ T8705] netlink: zone id is out of range
[   93.341445][ T8674] wlan0: Trigger new scan to find an IBSS to join
[   94.251274][ T8768] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   96.376255][ T8674] wlan0: Trigger new scan to find an IBSS to join
[   96.408395][ T8843] __nla_validate_parse: 3 callbacks suppressed
[   96.408405][ T8843] netlink: 16 bytes leftover after parsing attributes in process `syz.0.807'.
[   96.651566][ T8855] validate_nla: 2 callbacks suppressed
[   96.651575][ T8855] netlink: 'syz.2.810': attribute type 21 has an invalid length.
[   96.656926][ T8855] netlink: 36 bytes leftover after parsing attributes in process `syz.2.810'.
[   97.117091][ T8891] netlink: 20 bytes leftover after parsing attributes in process `syz.0.821'.
[   97.135807][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.821'.
[   97.941039][ T8908] vti0: entered promiscuous mode
[   97.951350][ T8910] netlink: 'syz.2.828': attribute type 7 has an invalid length.
[   97.955913][ T8910] netlink: 'syz.2.828': attribute type 8 has an invalid length.
[   97.958640][ T8910] netlink: 'syz.2.828': attribute type 4 has an invalid length.
[   97.961264][ T8910] netlink: 204 bytes leftover after parsing attributes in process `syz.2.828'.
[   97.994988][ T8914] batadv_slave_1: entered promiscuous mode
[   97.998291][ T8913] batadv_slave_1: left promiscuous mode
[   98.022876][ T8916] netlink: 'syz.2.830': attribute type 7 has an invalid length.
[   98.026977][ T8916] netlink: 'syz.2.830': attribute type 8 has an invalid length.
[   98.030035][ T8916] netlink: 'syz.2.830': attribute type 4 has an invalid length.
[   98.032607][ T8916] netlink: 204 bytes leftover after parsing attributes in process `syz.2.830'.
[   98.336301][ T8952] geneve2: entered promiscuous mode
[   98.346271][ T8952] netlink: 160 bytes leftover after parsing attributes in process `syz.2.843'.
[   98.351978][ T8952] NCSI netlink: No device for ifindex 0
[   98.380895][ T8957] netlink: 'syz.2.845': attribute type 7 has an invalid length.
[   98.385431][ T8957] netlink: 'syz.2.845': attribute type 8 has an invalid length.
[   98.388320][ T8957] netlink: 'syz.2.845': attribute type 4 has an invalid length.
[   98.390797][ T8957] netlink: 204 bytes leftover after parsing attributes in process `syz.2.845'.
[   98.429960][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.846'.
[   98.579653][ T8968] net_ratelimit: 1240 callbacks suppressed
[   98.579667][ T8968] netlink: zone id is out of range
[   98.592048][ T8968] netlink: zone id is out of range
[   98.609091][ T8968] netlink: zone id is out of range
[   98.611047][ T8968] netlink: zone id is out of range
[   98.612914][ T8968] netlink: zone id is out of range
[   98.615985][ T8968] netlink: zone id is out of range
[   98.617886][ T8968] netlink: zone id is out of range
[   98.619732][ T8968] netlink: zone id is out of range
[   98.621568][ T8968] netlink: zone id is out of range
[   98.623582][ T8968] netlink: zone id is out of range
[   98.654244][ T8971] netlink: 72 bytes leftover after parsing attributes in process `syz.0.849'.
[   98.721034][ T8973] sctp: [Deprecated]: syz.0.850 (pid 8973) Use of struct sctp_assoc_value in delayed_ack socket option.
[   98.721034][ T8973] Use struct sctp_sack_info instead
[   99.322161][ T9012] !: renamed from dummy0 (while UP)
[   99.333492][ T8674] wlan0: Trigger new scan to find an IBSS to join
[  100.275462][ T8674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.681066][ T9136] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  101.282837][ T9191] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  101.288025][ T9191] syzkaller0: entered promiscuous mode
[  101.289918][ T9191] syzkaller0: entered allmulticast mode
[  101.468069][ T9209] __nla_validate_parse: 4 callbacks suppressed
[  101.468078][ T9209] netlink: 72 bytes leftover after parsing attributes in process `syz.2.887'.
[  101.596060][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.888'.
[  102.337083][ T9271] validate_nla: 6 callbacks suppressed
[  102.337093][ T9271] netlink: 'syz.0.906': attribute type 7 has an invalid length.
[  102.341334][ T9271] netlink: 'syz.0.906': attribute type 8 has an invalid length.
[  102.353499][ T9271] netlink: 'syz.0.906': attribute type 4 has an invalid length.
[  102.356999][ T9271] netlink: 204 bytes leftover after parsing attributes in process `syz.0.906'.
[  102.931796][ T9292] netlink: 'syz.1.913': attribute type 10 has an invalid length.
[  102.958694][ T9298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.916'.
[  103.234845][ T9314] netlink: 'syz.2.919': attribute type 10 has an invalid length.
[  103.421997][ T9330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.926'.
[  103.671232][ T9370] netlink: 'syz.1.939': attribute type 7 has an invalid length.
[  103.674085][ T9370] netlink: 'syz.1.939': attribute type 8 has an invalid length.
[  103.676796][ T9370] netlink: 'syz.1.939': attribute type 4 has an invalid length.
[  103.679349][ T9370] netlink: 204 bytes leftover after parsing attributes in process `syz.1.939'.
[  103.718734][ T9374] netlink: 56 bytes leftover after parsing attributes in process `syz.2.940'.
[  103.731682][ T9375] net_ratelimit: 1279 callbacks suppressed
[  103.731691][ T9375] netlink: zone id is out of range
[  103.736706][ T9374] netlink: zone id is out of range
[  103.738458][ T9375] netlink: zone id is out of range
[  103.738476][ T9374] netlink: zone id is out of range
[  103.742171][ T9374] netlink: zone id is out of range
[  103.746108][ T9374] netlink: zone id is out of range
[  103.747925][ T9374] netlink: zone id is out of range
[  103.749702][ T9374] netlink: zone id is out of range
[  103.750117][ T9375] netlink: zone id is out of range
[  103.751839][ T9374] netlink: zone id is out of range
[  104.181740][ T9421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.953'.
[  104.198444][ T9421] netlink: 68 bytes leftover after parsing attributes in process `syz.2.953'.
[  104.321063][ T9437] netlink: 176 bytes leftover after parsing attributes in process `syz.0.957'.
[  106.134639][ T9511] netlink: 'syz.1.977': attribute type 10 has an invalid length.
[  106.180032][ T9517] batadv_slave_1: entered promiscuous mode
[  106.185043][ T9516] batadv_slave_1: left promiscuous mode
[  106.483231][ T9529] netlink: 'syz.0.981': attribute type 10 has an invalid length.
[  107.305852][ T9576] __nla_validate_parse: 7 callbacks suppressed
[  107.305861][ T9576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.994'.
[  107.311409][ T9576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.994'.
[  107.384343][ T9579] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  107.435627][ T9578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.995'.
[  107.716154][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1006'.
[  107.720691][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1006'.
[  107.725687][ T9615] validate_nla: 2 callbacks suppressed
[  107.725695][ T9615] netlink: 'syz.2.1006': attribute type 15 has an invalid length.
[  107.730899][ T9615] netlink: 'syz.2.1006': attribute type 18 has an invalid length.
[  107.742972][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1006'.
[  107.746761][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1006'.
[  107.750219][ T9615] netlink: 'syz.2.1006': attribute type 15 has an invalid length.
[  107.753250][ T9615] netlink: 'syz.2.1006': attribute type 18 has an invalid length.
[  107.757482][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1006'.
[  107.763557][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1006'.
[  107.766403][ T9615] netlink: 'syz.2.1006': attribute type 15 has an invalid length.
[  107.769734][ T9615] netlink: 'syz.2.1006': attribute type 18 has an invalid length.
[  107.772899][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1006'.
[  107.776758][ T9615] netlink: 'syz.2.1006': attribute type 15 has an invalid length.
[  107.779267][ T9615] netlink: 'syz.2.1006': attribute type 18 has an invalid length.
[  107.782396][ T9615] netlink: 'syz.2.1006': attribute type 15 has an invalid length.
[  107.786895][ T9615] netlink: 'syz.2.1006': attribute type 18 has an invalid length.
[  109.228034][ T9706] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  109.239251][ T9703] net_ratelimit: 787 callbacks suppressed
[  109.239261][ T9703] netlink: zone id is out of range
[  109.245023][ T9703] netlink: zone id is out of range
[  109.257385][ T9703] netlink: zone id is out of range
[  109.259119][ T9703] netlink: zone id is out of range
[  109.260750][ T9703] netlink: zone id is out of range
[  109.262373][ T9703] netlink: zone id is out of range
[  109.264171][ T9703] netlink: zone id is out of range
[  109.265821][ T9703] netlink: zone id is out of range
[  109.267434][ T9703] netlink: zone id is out of range
[  109.269028][ T9703] netlink: zone id is out of range
[  109.875579][ T9682] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  109.878449][ T9682] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  110.216754][ T9739] macvlan1: left allmulticast mode
[  110.218503][ T9739] veth1_vlan: left allmulticast mode
[  110.220301][ T9739] macvlan1: left promiscuous mode
[  110.222180][ T9739] macsec0: left promiscuous mode
[  110.230900][ T9739] macsec0: left allmulticast mode
[  110.256412][ T9741] tap0: tun_chr_ioctl cmd 1074025677
[  110.260560][ T9741] tap0: linktype set to 780
[  110.264483][ T9741] tap0: tun_chr_ioctl cmd 35108
[  110.271116][ T9741] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  110.369786][ T5856] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  111.325235][ T9791] netpci0: tun_chr_ioctl cmd 1074025681
[  112.117640][ T9834] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  112.973128][ T9869] __nla_validate_parse: 170 callbacks suppressed
[  112.973140][ T9869] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1083'.
[  113.055041][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1083'.
[  113.118891][ T9872] validate_nla: 201 callbacks suppressed
[  113.118902][ T9872] netlink: 'syz.1.1084': attribute type 1 has an invalid length.
[  113.191838][ T9881] delete_channel: no stack
[  113.226187][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1086'.
[  113.229179][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1086'.
[  113.232206][ T9881] netlink: 'syz.1.1086': attribute type 7 has an invalid length.
[  113.241071][ T9881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1086'.
[  113.488038][ T5856] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  113.492441][ T9903] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1093'.
[  114.461568][ T9935] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1102'.
[  114.577427][ T9950] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1107'.
[  114.798077][   T33] audit: type=1800 audit(1753729715.727:2): pid=9977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1112" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1949 res=0 errno=0
[  114.806310][   T33] audit: type=1800 audit(1753729715.737:3): pid=9977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1112" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1949 res=0 errno=0
[  114.840249][ T9981] netlink: 'syz.0.1113': attribute type 8 has an invalid length.
[  115.748052][   T33] audit: type=1107 audit(1753729716.677:4): pid=10021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  115.863900][T10025] net_ratelimit: 1041 callbacks suppressed
[  115.863912][T10025] netlink: zone id is out of range
[  115.899102][T10025] netlink: zone id is out of range
[  115.900873][T10025] netlink: zone id is out of range
[  115.903020][T10025] netlink: zone id is out of range
[  115.905167][T10025] netlink: zone id is out of range
[  115.906944][T10025] netlink: zone id is out of range
[  115.908677][T10025] netlink: zone id is out of range
[  115.910482][T10025] netlink: zone id is out of range
[  115.912494][T10025] netlink: zone id is out of range
[  115.915551][T10025] netlink: zone id is out of range
[  116.056588][ T5830] Bluetooth: hci2: link tx timeout
[  116.060440][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.065924][ T5830] Bluetooth: hci2: link tx timeout
[  116.067869][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.362314][T10053] nbd: must specify a device to reconfigure
[  116.875711][T10118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1143'.
[  117.250712][T10166] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1161'.
[  117.351713][T10174] Driver unsupported XDP return value 0 on prog  (id 325) dev N/A, expect packet loss!
[  117.383941][T10174] bond0: entered promiscuous mode
[  117.385642][T10174] bond_slave_0: entered promiscuous mode
[  117.388301][T10174] bond_slave_1: entered promiscuous mode
[  117.390456][T10174] batadv0: entered promiscuous mode
[  117.394485][T10174] bond0: left promiscuous mode
[  117.396006][T10174] bond_slave_0: left promiscuous mode
[  117.397773][T10174] bond_slave_1: left promiscuous mode
[  117.399573][T10174] batadv0: left promiscuous mode
[  117.408294][T10175] netlink: 'syz.2.1163': attribute type 10 has an invalid length.
[  118.134098][ T5830] Bluetooth: hci2: command 0x0419 tx timeout
[  118.408610][T10246] netlink: 'syz.0.1181': attribute type 7 has an invalid length.
[  118.411317][T10246] netlink: 'syz.0.1181': attribute type 8 has an invalid length.
[  118.416101][T10246] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1181'.
[  118.500604][T10258] : renamed from bond_slave_0 (while UP)
[  118.729268][T10277] netlink: 'syz.2.1190': attribute type 7 has an invalid length.
[  118.732033][T10277] netlink: 'syz.2.1190': attribute type 8 has an invalid length.
[  118.736155][T10277] netlink: 'syz.2.1190': attribute type 4 has an invalid length.
[  118.739641][T10277] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1190'.
[  118.777898][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1192'.
[  118.806996][T10286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1194'.
[  118.872436][T10293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1197'.
[  118.920553][T10298] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1198'.
[  118.953151][T10303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1199'.
[  119.161762][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1209'.
[  119.164857][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1209'.
[  119.167872][T10333] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071844200453)
[  119.171336][T10333] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  119.255360][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1210'.
[  120.085999][T10368] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  120.090169][T10368] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  120.158714][T10374] netlink: 'syz.2.1220': attribute type 7 has an invalid length.
[  120.161284][T10374] netlink: 'syz.2.1220': attribute type 8 has an invalid length.
[  120.166753][T10375] netlink: 'syz.0.1222': attribute type 11 has an invalid length.
[  121.182560][T10406] net_ratelimit: 2510 callbacks suppressed
[  121.182570][T10406] netlink: zone id is out of range
[  121.189932][T10406] netlink: zone id is out of range
[  121.191646][T10406] netlink: zone id is out of range
[  121.193265][T10406] netlink: zone id is out of range
[  121.195887][T10406] netlink: zone id is out of range
[  121.199976][T10406] netlink: zone id is out of range
[  121.202233][T10406] netlink: zone id is out of range
[  121.213243][T10409] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  121.216084][T10406] netlink: zone id is out of range
[  121.218293][T10406] netlink: zone id is out of range
[  121.219949][T10406] netlink: zone id is out of range
[  121.241950][T10411] netlink: 'syz.2.1234': attribute type 32 has an invalid length.
[  121.255117][T10411] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  122.165410][T10472] veth1: entered promiscuous mode
[  122.171918][T10472] netlink: 'syz.1.1251': attribute type 1 has an invalid length.
[  123.339096][T10516] batadv0: entered promiscuous mode
[  123.341263][T10516] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.415324][T10534] syzkaller1: entered promiscuous mode
[  123.417163][T10534] syzkaller1: entered allmulticast mode
[  123.503895][T10541] netlink: 'syz.1.1272': attribute type 2 has an invalid length.
[  123.558024][T10547] netlink: 'syz.1.1275': attribute type 10 has an invalid length.
[  123.561404][T10547] __nla_validate_parse: 18 callbacks suppressed
[  123.561412][T10547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1275'.
[  123.823696][ T5700] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.829478][ T5700] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.834009][ T5700] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.843506][ T5700] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.939682][T10589] netlink: 'syz.0.1287': attribute type 7 has an invalid length.
[  124.942297][T10589] netlink: 'syz.0.1287': attribute type 8 has an invalid length.
[  124.946441][T10589] netlink: 'syz.0.1287': attribute type 4 has an invalid length.
[  124.949051][T10589] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1287'.
[  124.976319][T10592] netlink: 'syz.0.1288': attribute type 7 has an invalid length.
[  124.978834][T10592] netlink: 'syz.0.1288': attribute type 3 has an invalid length.
[  124.981435][T10592] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1288'.
[  125.089823][T10598] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1290'.
[  125.242346][T10606] sctp: [Deprecated]: syz.0.1292 (pid 10606) Use of struct sctp_assoc_value in delayed_ack socket option.
[  125.242346][T10606] Use struct sctp_sack_info instead
[  125.267402][T10606] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.346843][T10617] netlink: 'syz.0.1295': attribute type 1 has an invalid length.
[  125.360352][T10617] 8021q: adding VLAN 0 to HW filter on device bond2
[  125.375684][T10617] bond2: (slave veth3): Enslaving as an active interface with a down link
[  125.386180][T10617] 8021q: adding VLAN 0 to HW filter on device batadv1
[  125.388457][T10617] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  125.623075][T10628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1299'.
[  125.841618][T10650] netlink: 'syz.2.1304': attribute type 10 has an invalid length.
[  125.845123][T10650] batadv0: left promiscuous mode
[  126.170050][T10661] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1309'.
[  126.639751][T10675] netlink: 'syz.1.1312': attribute type 15 has an invalid length.
[  126.826582][T10690] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1317'.
[  126.829655][T10690] unsupported nlmsg_type 40
[  127.682110][T10697] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1319'.
[  128.717462][T10730] net_ratelimit: 527 callbacks suppressed
[  128.717472][T10730] netlink: zone id is out of range
[  128.723128][T10730] netlink: zone id is out of range
[  128.739391][T10730] netlink: zone id is out of range
[  128.741125][T10730] netlink: zone id is out of range
[  128.742826][T10730] netlink: zone id is out of range
[  128.746674][T10730] netlink: zone id is out of range
[  128.748990][T10730] netlink: zone id is out of range
[  128.750769][T10730] netlink: zone id is out of range
[  128.752507][T10730] netlink: zone id is out of range
[  128.754293][T10730] netlink: zone id is out of range
[  128.761840][T10730] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1331'.
[  128.796531][T10736] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1333'.
[  128.800356][T10735] delete_channel: no stack
[  129.332434][T10763] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1342'.
[  129.375888][T10769] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1343'.
[  129.486032][T10786] validate_nla: 3 callbacks suppressed
[  129.486045][T10786] netlink: 'syz.1.1348': attribute type 2 has an invalid length.
[  129.815329][T10808] netlink: 'syz.2.1354': attribute type 7 has an invalid length.
[  129.817991][T10808] netlink: 'syz.2.1354': attribute type 8 has an invalid length.
[  129.823036][T10808] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1354'.
[  129.841890][T10813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1352'.
[  129.861011][T10813] netlink: 'syz.1.1352': attribute type 1 has an invalid length.
[  129.864107][T10813] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1352'.
[  129.869016][T10815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1356'.
[  129.874615][T10815] netlink: 'syz.2.1356': attribute type 15 has an invalid length.
[  129.885448][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  129.888426][T10815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1356'.
[  129.891633][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  129.894657][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  129.897630][T10815] netlink: 'syz.2.1356': attribute type 15 has an invalid length.
[  129.900326][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  129.922202][T10819] netlink: 'syz.0.1357': attribute type 6 has an invalid length.
[  129.932058][T10822] netlink: 'syz.2.1358': attribute type 10 has an invalid length.
[  129.935563][T10822] batman_adv: batadv0: Adding interface: netdevsim0
[  129.937992][T10822] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.947808][T10822] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  130.061461][T10834] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1363'.
[  130.412550][T10855] netlink: 'syz.0.1369': attribute type 11 has an invalid length.
[  131.464688][T10901] bond0: (slave batadv0): Releasing backup interface
[  131.468920][T10901] bridge_slave_0: left allmulticast mode
[  131.470757][T10901] bridge_slave_0: left promiscuous mode
[  131.472620][T10901] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.477723][T10901] bridge_slave_1: left allmulticast mode
[  131.479698][T10901] bridge_slave_1: left promiscuous mode
[  131.481650][T10901] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.486906][T10901] bond0: (slave 77): Releasing backup interface
[  131.491128][T10901] bond0: (slave bond_slave_1): Releasing backup interface
[  131.499517][T10901] team0: Port device team_slave_0 removed
[  131.504661][T10901] team0: Port device team_slave_1 removed
[  131.507354][T10901] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.509687][T10901] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.512899][T10901] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.516326][T10901] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.525228][T10901] bond2: (slave veth3): Releasing active interface
[  131.702344][T10910] netlink: 'syz.0.1385': attribute type 10 has an invalid length.
[  131.707501][T10910] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.711297][T10910] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  132.288738][T10930] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  132.294957][T10930] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  132.306251][T10108] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  132.390012][T10933] pim6reg1: entered promiscuous mode
[  132.392467][T10933] pim6reg1: entered allmulticast mode
[  132.837532][T10950] batadv0: entered promiscuous mode
[  132.839497][T10950] batadv0: entered allmulticast mode
[  132.842639][T10950] bond0: (slave batadv0): Releasing backup interface
[  132.846739][T10950] bridge0: port 1(batadv0) entered blocking state
[  132.848963][T10950] bridge0: port 1(batadv0) entered disabled state
[  132.923522][ T5856] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  132.926507][ T5856] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  132.995749][ T5856] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d
[  132.997301][T10959] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  133.099711][T10974] batadv0: left allmulticast mode
[  133.104749][T10974] batadv0: left promiscuous mode
[  133.106669][T10974] bridge0: port 1(batadv0) entered disabled state
[  133.111457][T10974] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.114641][T10974] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  133.254587][T10981] block nbd1: shutting down sockets
[  133.391243][T10989] syzkaller1: entered promiscuous mode
[  133.393143][T10989] syzkaller1: entered allmulticast mode
[  133.445724][T10992] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.448620][T10992] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  133.450960][T10992] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  133.810414][T11034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.398944][T11054] can: request_module (can-proto-0) failed.
[  134.465718][T11058] net_ratelimit: 883 callbacks suppressed
[  134.465730][T11058] netlink: zone id is out of range
[  134.471090][T11058] netlink: zone id is out of range
[  134.482257][T11058] netlink: zone id is out of range
[  134.485738][T11058] netlink: zone id is out of range
[  134.487444][T11058] netlink: zone id is out of range
[  134.489079][T11058] netlink: zone id is out of range
[  134.490825][T11058] netlink: zone id is out of range
[  134.492453][T11058] netlink: zone id is out of range
[  134.496727][T11058] netlink: zone id is out of range
[  134.500744][T11058] netlink: zone id is out of range
[  134.564683][  T788] tipc: Node number set to 2000074484
[  134.845485][T11066] __nla_validate_parse: 20 callbacks suppressed
[  134.845500][T11066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1431'.
[  134.856659][T11066] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1431'.
[  134.918372][T11070] validate_nla: 14 callbacks suppressed
[  134.918383][T11070] netlink: 'syz.1.1433': attribute type 7 has an invalid length.
[  134.922831][T11070] netlink: 'syz.1.1433': attribute type 8 has an invalid length.
[  134.926206][T11070] netlink: 'syz.1.1433': attribute type 4 has an invalid length.
[  134.928927][T11070] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1433'.
[  135.018036][T11075] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1435'.
[  135.020945][T11075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1435'.
[  135.025425][T11075] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1435'.
[  135.029375][T11075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1435'.
[  135.032385][T11075] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1435'.
[  135.038288][T11075] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1435'.
[  135.041446][T11075] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1435'.
[  135.131010][T11080] syzkaller1: entered promiscuous mode
[  135.132839][T11080] syzkaller1: entered allmulticast mode
[  136.287459][T11126] netlink: 'syz.2.1449': attribute type 4 has an invalid length.
[  137.190192][T11175] sctp: [Deprecated]: syz.0.1464 (pid 11175) Use of struct sctp_assoc_value in delayed_ack socket option.
[  137.190192][T11175] Use struct sctp_sack_info instead
[  137.718320][T11201] netlink: 'syz.1.1472': attribute type 21 has an invalid length.
[  137.720964][T11201] netlink: 'syz.1.1472': attribute type 5 has an invalid length.
[  137.724714][T11201] netlink: 'syz.1.1472': attribute type 6 has an invalid length.
[  138.630862][T11222] netlink: 'syz.0.1475': attribute type 10 has an invalid length.
[  138.714087][T11230] delete_channel: no stack
[  138.903732][T11248] netlink: 'syz.2.1485': attribute type 4 has an invalid length.
[  139.159483][T11263] batadv0: entered promiscuous mode
[  139.161965][T11263] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.922224][T11317] netlink: 'syz.0.1506': attribute type 7 has an invalid length.
[  139.924943][T11317] netlink: 'syz.0.1506': attribute type 8 has an invalid length.
[  139.927520][T11317] netlink: 'syz.0.1506': attribute type 4 has an invalid length.
[  139.930116][T11317] __nla_validate_parse: 14 callbacks suppressed
[  139.930124][T11317] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1506'.
[  139.969846][T11320] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  139.976820][T11320] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  139.987461][T11320] tipc: Resetting bearer <eth:syzkaller0>
[  139.993925][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1502'.
[  140.083046][T11332] dvmrp1: entered allmulticast mode
[  140.097878][T11331] dvmrp1: left allmulticast mode
[  140.188663][T11340] tun0: tun_chr_ioctl cmd 2147767507
[  140.424591][T11358] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1517'.
[  140.450253][T11365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1518'.
[  140.621803][T11373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1521'.
[  140.632097][T11374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1521'.
[  140.712002][T11379] net_ratelimit: 744 callbacks suppressed
[  140.712014][T11379] netlink: zone id is out of range
[  140.718840][T11379] netlink: zone id is out of range
[  140.730726][T11379] netlink: zone id is out of range
[  140.732880][T11379] netlink: zone id is out of range
[  140.736989][T11379] netlink: zone id is out of range
[  140.739088][T11379] netlink: zone id is out of range
[  140.740753][T11379] netlink: zone id is out of range
[  140.742374][T11379] netlink: zone id is out of range
[  140.744351][T11379] netlink: zone id is out of range
[  140.746149][T11379] netlink: zone id is out of range
[  140.854093][T11396] netlink: 'syz.2.1528': attribute type 4 has an invalid length.
[  141.178819][T11423] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1534'.
[  141.246163][T11429] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  141.426872][T11446] netlink: 'syz.1.1540': attribute type 10 has an invalid length.
[  141.430074][T11446] netlink: 'syz.1.1540': attribute type 10 has an invalid length.
[  141.432673][T11446] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1540'.
[  141.438096][T11446] batadv0: entered promiscuous mode
[  141.440930][T11446] batadv0: entered allmulticast mode
[  141.444035][T11446] bond0: (slave batadv0): Releasing backup interface
[  141.452947][T11448] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.456645][T11448] syzkaller0: entered promiscuous mode
[  141.458624][T11448] syzkaller0: entered allmulticast mode
[  141.481007][T11448] tipc: Resetting bearer <eth:syzkaller0>
[  141.486248][T11447] tipc: Resetting bearer <eth:syzkaller0>
[  141.494870][T11447] tipc: Disabling bearer <eth:syzkaller0>
[  141.595105][T11452] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1542'.
[  141.999419][T11474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1547'.
[  142.147951][T11483] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  142.501305][T11487] netlink: 'syz.2.1551': attribute type 7 has an invalid length.
[  142.509236][T11487] netlink: 'syz.2.1551': attribute type 8 has an invalid length.
[  142.799990][T11515] netlink: 'syz.2.1559': attribute type 4 has an invalid length.
[  142.802637][T11515] netlink: 'syz.2.1559': attribute type 2 has an invalid length.
[  142.830626][T11517] netlink: 'syz.0.1558': attribute type 10 has an invalid length.
[  142.833287][T11517] batadv0: left promiscuous mode
[  143.135188][    T9] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  144.479542][T11651] 8021q: adding VLAN 0 to HW filter on device bond3
[  145.767919][T11708] validate_nla: 1 callbacks suppressed
[  145.767931][T11708] netlink: 'syz.0.1615': attribute type 16 has an invalid length.
[  145.835020][T11710] IPVS: Error connecting to the multicast addr
[  145.865651][T11710] netlink: 'syz.2.1616': attribute type 16 has an invalid length.
[  145.868160][T11710] netlink: 'syz.2.1616': attribute type 17 has an invalid length.
[  145.878506][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  145.882813][T11710] __nla_validate_parse: 12 callbacks suppressed
[  145.882822][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1616'.
[  145.891446][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  145.894662][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  145.897598][   T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  149.561038][T11722] vlan2: entered promiscuous mode
[  149.562894][T11722] vlan2: entered allmulticast mode
[  149.567455][T11722] hsr_slave_1: entered allmulticast mode
[  149.626310][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1622'.
[  149.722332][T11751] net_ratelimit: 878 callbacks suppressed
[  149.722344][T11751] netlink: zone id is out of range
[  149.727297][T11751] netlink: zone id is out of range
[  149.731654][T11754] netlink: zone id is out of range
[  149.736756][T11754] netlink: zone id is out of range
[  149.738542][T11754] netlink: zone id is out of range
[  149.740304][T11754] netlink: zone id is out of range
[  149.745567][T11751] netlink: zone id is out of range
[  149.747288][T11751] netlink: zone id is out of range
[  149.748957][T11751] netlink: zone id is out of range
[  149.750623][T11751] netlink: zone id is out of range
[  149.791534][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1630'.
[  150.347620][T11793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1640'.
[  150.350670][T11793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1640'.
[  150.786680][T11825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1648'.
[  150.889640][T11784] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  151.145851][T11847] sctp: [Deprecated]: syz.0.1655 (pid 11847) Use of struct sctp_assoc_value in delayed_ack socket option.
[  151.145851][T11847] Use struct sctp_sack_info instead
[  151.245313][T11854] netlink: 'syz.1.1657': attribute type 10 has an invalid length.
[  151.248050][T11854] batadv0: left promiscuous mode
[  151.249807][T11854] batadv0: left allmulticast mode
[  151.252523][T11854] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.257257][T11854] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  151.911571][T11882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1664'.
[  152.169544][T11914] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1673'.
[  152.218309][T11925] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1676'.
[  152.368981][T11946] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  152.373072][T11945] IPVS: stopping master sync thread 11946 ...
[  153.151220][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1687'.
[  153.501720][T11994] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1699'.
[  153.732900][T12003] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1701'.
[  153.771299][T12007] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1703'.
[  153.982264][T12031] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  154.572588][T12079] syzkaller1: entered promiscuous mode
[  154.583097][T12079] syzkaller1: entered allmulticast mode
[  154.872304][T12106] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1736'.
[  154.914974][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1739'.
[  155.690843][T12131] netlink: 'syz.2.1743': attribute type 7 has an invalid length.
[  155.694557][T12130] netlink: 'syz.2.1743': attribute type 7 has an invalid length.
[  155.697032][T12130] netlink: 'syz.2.1743': attribute type 8 has an invalid length.
[  155.699711][T12131] netlink: 'syz.2.1743': attribute type 8 has an invalid length.
[  155.702182][T12131] netlink: 'syz.2.1743': attribute type 4 has an invalid length.
[  155.705024][T12130] netlink: 'syz.2.1743': attribute type 4 has an invalid length.
[  155.707546][T12130] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1743'.
[  155.902732][T12139] netlink: 'syz.0.1746': attribute type 1 has an invalid length.
[  157.152484][T12217] team0: Device DL<Y is loopback device. Loopback devices can't be added as a team port
[  157.157183][T12217] net_ratelimit: 1258 callbacks suppressed
[  157.157192][T12217] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  157.167646][T12219] team0: Device DL<Y is loopback device. Loopback devices can't be added as a team port
[  157.171405][T12219] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  157.213139][T12224] netlink: zone id is out of range
[  157.216366][T12224] netlink: zone id is out of range
[  157.218516][T12224] netlink: zone id is out of range
[  157.220368][T12224] netlink: zone id is out of range
[  157.232683][T12224] netlink: zone id is out of range
[  157.236855][T12224] netlink: zone id is out of range
[  157.238549][T12224] netlink: zone id is out of range
[  157.240360][T12224] netlink: zone id is out of range
[  157.244117][T12224] sctp: [Deprecated]: syz.0.1770 (pid 12224) Use of int in max_burst socket option.
[  157.244117][T12224] Use struct sctp_assoc_value instead
[  157.248963][T12225] sctp: [Deprecated]: syz.0.1770 (pid 12225) Use of int in max_burst socket option.
[  157.248963][T12225] Use struct sctp_assoc_value instead
[  158.081827][T12245] netlink: 'syz.1.1773': attribute type 10 has an invalid length.
[  158.424242][T12265] netlink: 'syz.2.1780': attribute type 10 has an invalid length.
[  158.427007][T12265] __nla_validate_parse: 3 callbacks suppressed
[  158.427016][T12265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1780'.
[  158.977445][T12294] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1789'.
[  159.029456][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1791'.
[  159.032280][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1791'.
[  159.040217][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1791'.
[  159.042996][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1791'.
[  159.215273][T12329] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1798'.
[  159.228330][T12329] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1798'.
[  159.231655][T12329] netlink: 'syz.2.1798': attribute type 6 has an invalid length.
[  159.238517][T12329] netlink: 'syz.2.1798': attribute type 5 has an invalid length.
[  159.241160][T12329] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1798'.
[  159.249278][T12329] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1798'.
[  159.316412][T12336] netlink: 'syz.2.1798': attribute type 1 has an invalid length.
[  160.233078][T12368] netlink: 'syz.1.1812': attribute type 30 has an invalid length.
[  160.360909][T12386] netlink: 'syz.1.1818': attribute type 7 has an invalid length.
[  160.364563][T12386] netlink: 'syz.1.1818': attribute type 8 has an invalid length.
[  160.613289][T12416] netlink: 'syz.1.1825': attribute type 4 has an invalid length.
[  160.841737][T12430] netlink: 'syz.1.1831': attribute type 13 has an invalid length.
[  161.250044][T12486] bond0: (slave batadv0): Releasing backup interface
[  161.252866][T12486] batman_adv: batadv0: Removing interface: netdevsim0
[  162.320249][T12528] bond0: (slave batadv0): Releasing backup interface
[  162.355403][T12528] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  162.357034][   T52] net_ratelimit: 952 callbacks suppressed
[  162.357049][   T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.412836][   T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.485932][T12546] netlink: zone id is out of range
[  162.487889][T12546] netlink: zone id is out of range
[  162.489493][T12546] netlink: zone id is out of range
[  162.491915][T12546] netlink: zone id is out of range
[  162.521216][T12546] netlink: zone id is out of range
[  162.522974][T12546] netlink: zone id is out of range
[  162.534115][T12546] netlink: zone id is out of range
[  162.536241][T12546] netlink: zone id is out of range
[  163.285105][T12606] netpci0: tun_chr_ioctl cmd 1074025681
[  163.291278][T12606] validate_nla: 1 callbacks suppressed
[  163.291288][T12606] netlink: 'syz.1.1878': attribute type 4 has an invalid length.
[  163.610603][T12621] netlink: 'syz.2.1883': attribute type 7 has an invalid length.
[  163.614748][T12621] netlink: 'syz.2.1883': attribute type 8 has an invalid length.
[  163.617642][T12621] __nla_validate_parse: 12 callbacks suppressed
[  163.617681][T12621] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1883'.
[  163.685225][T12634] netlink: 'syz.1.1887': attribute type 4 has an invalid length.
[  163.772111][T12636] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1888'.
[  164.519027][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1895'.
[  164.539446][T12658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1896'.
[  164.542418][T12658] netlink: 'syz.0.1896': attribute type 20 has an invalid length.
[  164.549678][ T5700] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  164.549740][T12658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1896'.
[  164.555640][T12658] netlink: 'syz.0.1896': attribute type 20 has an invalid length.
[  164.558659][ T5700] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  164.584661][ T5700] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  164.590856][T12658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1896'.
[  164.605000][ T5700] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  166.438344][T12768] netlink: 'syz.2.1926': attribute type 11 has an invalid length.
[  166.447878][T12768] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1926'.
[  166.453076][T12770] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1927'.
[  166.525426][T12783] netlink: 'syz.1.1930': attribute type 7 has an invalid length.
[  166.528060][T12783] netlink: 'syz.1.1930': attribute type 8 has an invalid length.
[  166.530510][T12783] netlink: 'syz.1.1930': attribute type 4 has an invalid length.
[  166.532991][T12783] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1930'.
[  166.706232][T12799] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1936'.
[  166.742810][T12804] 8021q: adding VLAN 0 to HW filter on device team0
[  166.758218][T12804] bond0: (slave team0): Enslaving as an active interface with an up link
[  167.578892][T12836] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  167.971367][T12848] net_ratelimit: 1675 callbacks suppressed
[  167.971382][T12848] netlink: zone id is out of range
[  167.977568][T12848] netlink: zone id is out of range
[  167.979650][T12848] netlink: zone id is out of range
[  167.981518][T12848] netlink: zone id is out of range
[  167.983210][T12848] netlink: zone id is out of range
[  167.984988][T12848] netlink: zone id is out of range
[  167.986621][T12848] netlink: zone id is out of range
[  167.988350][T12848] netlink: zone id is out of range
[  167.990009][T12848] netlink: zone id is out of range
[  167.991633][T12848] netlink: zone id is out of range
[  168.597622][T12875] validate_nla: 1 callbacks suppressed
[  168.597631][T12875] netlink: 'syz.0.1959': attribute type 1 has an invalid length.
[  168.607487][T12882] netlink: 'syz.2.1958': attribute type 13 has an invalid length.
[  168.618356][T12882] netlink: 'syz.2.1958': attribute type 17 has an invalid length.
[  168.620840][T12882] netlink: 'syz.2.1958': attribute type 27 has an invalid length.
[  168.640633][T12886] netlink: 'syz.1.1961': attribute type 1 has an invalid length.
[  168.645371][T12886] netlink: 'syz.1.1961': attribute type 1 has an invalid length.
[  168.649040][T12886] __nla_validate_parse: 8 callbacks suppressed
[  168.649048][T12886] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1961'.
[  168.695979][T12891] netlink: 'syz.0.1964': attribute type 10 has an invalid length.
[  168.706729][T12882] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.714883][T12882] 8021q: adding VLAN 0 to HW filter on device team0
[  168.729681][T12891] 8021q: adding VLAN 0 to HW filter on device team0
[  168.734700][T12891] bond0: (slave team0): Enslaving as an active interface with an up link
[  168.882152][T12901] tipc: Enabled bearer <udp:syz0>, priority 10
[  169.375496][T12882] syz.2.1958 (12882) used greatest stack depth: 19872 bytes left
[  169.994874][  T788] tipc: Node number set to 3865609841
[  170.213573][ T5830] Bluetooth: hci1: command 0x080f tx timeout
[  170.237153][T12959] syzkaller1: entered promiscuous mode
[  170.238992][T12959] syzkaller1: entered allmulticast mode
[  170.245705][T12959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1982'.
[  170.338373][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1987'.
[  170.365676][T12978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1988'.
[  171.240950][T13008] syzkaller0: entered promiscuous mode
[  171.243167][T13008] syzkaller0: entered allmulticast mode
[  172.095834][T13029] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  172.166110][T13040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2007'.
[  172.180933][T13040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2007'.
[  172.260223][T13050] netlink: 'syz.1.2010': attribute type 4 has an invalid length.
[  172.315840][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2013'.
[  172.625774][T13095] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2023'.
[  172.630416][T13095] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2023'.
[  172.634017][T13095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2023'.
[  173.443112][T13145] netlink: 'syz.1.2036': attribute type 10 has an invalid length.
[  173.522426][T13154] net_ratelimit: 1281 callbacks suppressed
[  173.522436][T13154] netlink: zone id is out of range
[  173.527171][T13154] netlink: zone id is out of range
[  173.539613][T13154] netlink: zone id is out of range
[  173.541290][T13154] netlink: zone id is out of range
[  173.553600][T13154] netlink: zone id is out of range
[  173.555322][T13154] netlink: zone id is out of range
[  173.563511][T13154] netlink: zone id is out of range
[  173.565147][T13154] netlink: zone id is out of range
[  173.566729][T13154] netlink: zone id is out of range
[  173.568374][T13154] netlink: zone id is out of range
[  173.625776][T13158] ip6tnl3: entered promiscuous mode
[  173.627585][T13158] ip6tnl3: entered allmulticast mode
[  173.630176][T13158] team0: Device ip6tnl3 is up. Set it down before adding it as a team port
[  173.922003][T13173] delete_channel: no stack
[  174.014260][T13183] __nla_validate_parse: 4 callbacks suppressed
[  174.014269][T13183] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2048'.
[  174.339074][T13194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2052'.
[  174.349250][T13194] sch_tbf: burst 2 is lower than device bridge7 mtu (1514) !
[  174.546967][T13202] netlink: 212364 bytes leftover after parsing attributes in process `syz.0.2054'.
[  174.771108][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2060'.
[  174.776204][T13220] netlink: 404 bytes leftover after parsing attributes in process `syz.0.2060'.
[  174.779199][T13220] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2060'.
[  174.782210][T13220] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2060'.
[  174.786230][T13220] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2060'.
[  174.789238][T13220] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2060'.
[  175.840945][T13257] netlink: 'syz.0.2070': attribute type 10 has an invalid length.
[  175.851546][T13257] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.854805][T13257] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  175.859795][T13259] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2071'.
[  177.925091][T13365] netlink: 'syz.0.2095': attribute type 10 has an invalid length.
[  178.731010][T13381] netlink: 'syz.0.2098': attribute type 10 has an invalid length.
[  179.082201][T13395] 
[  179.083120][T13395] ============================================
[  179.085225][T13395] WARNING: possible recursive locking detected
[  179.087348][T13395] 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 Not tainted
[  179.090592][T13395] --------------------------------------------
[  179.092617][T13395] syz.2.2103/13395 is trying to acquire lock:
[  179.094627][T13395] ffff888119394d20 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1be0
[  179.098208][T13395] 
[  179.098208][T13395] but task is already holding lock:
[  179.100627][T13395] ffff888119394d20 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0
[  179.103879][T13395] and the lock comparison function returns 0:
[  179.105885][T13395] 
[  179.105885][T13395] other info that might help us debug this:
[  179.108518][T13395]  Possible unsafe locking scenario:
[  179.108518][T13395] 
[  179.110983][T13395]        CPU0
[  179.112105][T13395]        ----
[  179.113237][T13395]   lock(&dev_instance_lock_key#20);
[  179.115016][T13395]   lock(&dev_instance_lock_key#20);
[  179.116793][T13395] 
[  179.116793][T13395]  *** DEADLOCK ***
[  179.116793][T13395] 
[  179.119457][T13395]  May be due to missing lock nesting notation
[  179.119457][T13395] 
[  179.122190][T13395] 2 locks held by syz.2.2103/13395:
[  179.123930][T13395]  #0: ffffffff8f51f748 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19b0
[  179.126874][T13395]  #1: ffff888119394d20 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0
[  179.130265][T13395] 
[  179.130265][T13395] stack backtrace:
[  179.132241][T13395] CPU: 0 UID: 0 PID: 13395 Comm: syz.2.2103 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  179.132252][T13395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  179.132257][T13395] Call Trace:
[  179.132261][T13395]  <TASK>
[  179.132265][T13395]  dump_stack_lvl+0x189/0x250
[  179.132276][T13395]  ? __pfx_dump_stack_lvl+0x10/0x10
[  179.132284][T13395]  ? __pfx__printk+0x10/0x10
[  179.132294][T13395]  ? print_lock_name+0xde/0x100
[  179.132303][T13395]  print_deadlock_bug+0x28b/0x2a0
[  179.132314][T13395]  validate_chain+0x1a3f/0x2140
[  179.132324][T13395]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  179.132339][T13395]  ? arch_stack_walk+0xfc/0x150
[  179.132351][T13395]  __lock_acquire+0xab9/0xd20
[  179.132358][T13395]  ? __netdev_update_features+0xcb1/0x1be0
[  179.132367][T13395]  lock_acquire+0x120/0x360
[  179.132373][T13395]  ? __netdev_update_features+0xcb1/0x1be0
[  179.132382][T13395]  ? ethnl_multicast+0xb6/0x100
[  179.132389][T13395]  ? ethnl_netdev_event+0xe2/0x160
[  179.132398][T13395]  __mutex_lock+0x182/0xe80
[  179.132407][T13395]  ? __netdev_update_features+0xcb1/0x1be0
[  179.132417][T13395]  ? do_raw_spin_lock+0x121/0x290
[  179.132427][T13395]  ? __netdev_update_features+0xcb1/0x1be0
[  179.132437][T13395]  ? __pfx___mutex_lock+0x10/0x10
[  179.132444][T13395]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  179.132454][T13395]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.132463][T13395]  __netdev_update_features+0xcb1/0x1be0
[  179.132475][T13395]  ? __pfx___netdev_update_features+0x10/0x10
[  179.132484][T13395]  ? cfg80211_netdev_notifier_call+0x1ea/0x13c0
[  179.132494][T13395]  ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10
[  179.132502][T13395]  ? __lock_acquire+0xab9/0xd20
[  179.132509][T13395]  ? do_raw_spin_lock+0x121/0x290
[  179.132519][T13395]  netdev_update_features+0x6d/0xe0
[  179.132526][T13395]  ? __pfx_netdev_update_features+0x10/0x10
[  179.132534][T13395]  macsec_notify+0x2f5/0x660
[  179.132545][T13395]  ? __pfx_macsec_notify+0x10/0x10
[  179.132556][T13395]  notifier_call_chain+0x1b6/0x3e0
[  179.132566][T13395]  netdev_features_change+0x85/0xc0
[  179.132577][T13395]  ? __pfx_netdev_features_change+0x10/0x10
[  179.132587][T13395]  ? security_capable+0x7e/0x2e0
[  179.132596][T13395]  dev_ethtool+0x1536/0x19b0
[  179.132606][T13395]  ? __pfx_dev_ethtool+0x10/0x10
[  179.132616][T13395]  ? dev_load+0x21/0x1f0
[  179.132623][T13395]  dev_ioctl+0x392/0x1150
[  179.132630][T13395]  sock_do_ioctl+0x22c/0x300
[  179.132640][T13395]  ? __pfx_sock_do_ioctl+0x10/0x10
[  179.132649][T13395]  ? do_futex+0x333/0x420
[  179.132662][T13395]  sock_ioctl+0x576/0x790
[  179.132671][T13395]  ? __pfx_sock_ioctl+0x10/0x10
[  179.132683][T13395]  ? bpf_lsm_file_ioctl+0x9/0x20
[  179.132691][T13395]  ? __pfx_sock_ioctl+0x10/0x10
[  179.132700][T13395]  __se_sys_ioctl+0xfc/0x170
[  179.132708][T13395]  do_syscall_64+0xfa/0x3b0
[  179.132716][T13395]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.132722][T13395]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.132729][T13395]  ? exc_page_fault+0x9f/0xf0
[  179.132735][T13395]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.132765][T13395] RIP: 0033:0x7f73ac98e9a9
[  179.132775][T13395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  179.132783][T13395] RSP: 002b:00007f73ad862038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  179.132792][T13395] RAX: ffffffffffffffda RBX: 00007f73acbb5fa0 RCX: 00007f73ac98e9a9
[  179.132798][T13395] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004
[  179.132803][T13395] RBP: 00007f73aca10d69 R08: 0000000000000000 R09: 0000000000000000
[  179.132808][T13395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  179.132813][T13395] R13: 0000000000000000 R14: 00007f73acbb5fa0 R15: 00007ffc3bf59098
[  179.132822][T13395]  </TASK>

VM DIAGNOSIS:
19:09:40  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001d7d RDI=0000000000001d7e RBP=00000000000003f8 RSP=ffffc9000ad46bb0
R8 =ffff888107d30237 R9 =1ffff11020fa6046 R10=dffffc0000000000 R11=ffffffff85464660
R12=dffffc0000000000 R13=ffffffff99af18b1 R14=ffffffff99df64c0 R15=0000000000000000
RIP=ffffffff854646dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f73ad8626c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c26ad2f CR3=000000004042c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=000000000000306d 697376656474656e
XMM02=00007f73acb86478 00007f73acb86450 XMM03=00007f73acb86488 00007f73acb86480
XMM04=00007f73ad6ed100 00007f73acb86440 XMM05=00007f73acb86458 00007f73acb864a0
XMM06=00007f73acb86498 00007f73acb86490 XMM07=00007f73acb86488 00007f73acb86480
XMM08=0000000000000000 00007f73aca11de3 XMM09=0000000000000000 00007f73aca11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff8241fdc0 RBX=0000000000000001 RCX=0000000000080000 RDX=ffffc900035b1000
RSI=ffffc9000af77c40 RDI=ffff888024fd4800 RBP=ffffc9000af77bf0 RSP=ffffc9000af77a78
R8 =ffffffff8fa1f8f7 R9 =1ffffffff1f43f1e R10=dffffc0000000000 R11=ffffffff82420790
R12=00000000000013c9 R13=ffff888110671a40 R14=ffffc9000af77c60 R15=0000000000000009
RIP=ffffffff82420790 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc6f97f06c0 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f73ad840fc8 CR3=00000001113fe000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 0000555583c4f488
XMM02=02de00080006a003 0c08000698030008 XMM03=061870de02a81000 0480040a10000601
XMM04=b800080009800304 0800061000041000 XMM05=010980040fffffff ffffff0442080000
XMM06=0800010000180806 0a010bb800080009 XMM07=8003040800061000 041000061870de02
XMM08=a810000480040a10 00060102de000800 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
