last executing test programs:

1m17.221342314s ago: executing program 2 (id=1253):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2, 0xa000000}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xec, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_USERDATA={0xba, 0xd, 0x1, 0x0, "5b73d43cb48d26f96f238e5d18ec8c8696f293a3b130709c8e9de283d3426b7bb52a2f3b5ba29f27b9debdff88fea012e0a34fcb958bd8b968bce5227331998ecff7638883445138adb8b996d6b4b7b7777706f03e5cb7d58bd1fbd832789cb5434ed9465167d60ea6c3c513eb0fea750c39fa058337e53c023a9d027e06b46676371089eb6b9725384746b008369a2961aac9c710e14d4dce08cd53288dfa6cda7f4aca1428da74efd82dc1168c978cf8b0da538603"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xd}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffef}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x194}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000006c00000008000300", @ANYRES32=r5], 0x2c}}, 0x0)

1m5.53141352s ago: executing program 2 (id=1253):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2, 0xa000000}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xec, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_USERDATA={0xba, 0xd, 0x1, 0x0, "5b73d43cb48d26f96f238e5d18ec8c8696f293a3b130709c8e9de283d3426b7bb52a2f3b5ba29f27b9debdff88fea012e0a34fcb958bd8b968bce5227331998ecff7638883445138adb8b996d6b4b7b7777706f03e5cb7d58bd1fbd832789cb5434ed9465167d60ea6c3c513eb0fea750c39fa058337e53c023a9d027e06b46676371089eb6b9725384746b008369a2961aac9c710e14d4dce08cd53288dfa6cda7f4aca1428da74efd82dc1168c978cf8b0da538603"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xd}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffef}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x194}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000006c00000008000300", @ANYRES32=r5], 0x2c}}, 0x0)

50.285852245s ago: executing program 2 (id=1253):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2, 0xa000000}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xec, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_USERDATA={0xba, 0xd, 0x1, 0x0, "5b73d43cb48d26f96f238e5d18ec8c8696f293a3b130709c8e9de283d3426b7bb52a2f3b5ba29f27b9debdff88fea012e0a34fcb958bd8b968bce5227331998ecff7638883445138adb8b996d6b4b7b7777706f03e5cb7d58bd1fbd832789cb5434ed9465167d60ea6c3c513eb0fea750c39fa058337e53c023a9d027e06b46676371089eb6b9725384746b008369a2961aac9c710e14d4dce08cd53288dfa6cda7f4aca1428da74efd82dc1168c978cf8b0da538603"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xd}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffef}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x194}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000006c00000008000300", @ANYRES32=r5], 0x2c}}, 0x0)

38.045267677s ago: executing program 2 (id=1253):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2, 0xa000000}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xec, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_USERDATA={0xba, 0xd, 0x1, 0x0, "5b73d43cb48d26f96f238e5d18ec8c8696f293a3b130709c8e9de283d3426b7bb52a2f3b5ba29f27b9debdff88fea012e0a34fcb958bd8b968bce5227331998ecff7638883445138adb8b996d6b4b7b7777706f03e5cb7d58bd1fbd832789cb5434ed9465167d60ea6c3c513eb0fea750c39fa058337e53c023a9d027e06b46676371089eb6b9725384746b008369a2961aac9c710e14d4dce08cd53288dfa6cda7f4aca1428da74efd82dc1168c978cf8b0da538603"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xd}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffef}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x194}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000006c00000008000300", @ANYRES32=r5], 0x2c}}, 0x0)

21.310269873s ago: executing program 2 (id=1253):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2, 0xa000000}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xec, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_USERDATA={0xba, 0xd, 0x1, 0x0, "5b73d43cb48d26f96f238e5d18ec8c8696f293a3b130709c8e9de283d3426b7bb52a2f3b5ba29f27b9debdff88fea012e0a34fcb958bd8b968bce5227331998ecff7638883445138adb8b996d6b4b7b7777706f03e5cb7d58bd1fbd832789cb5434ed9465167d60ea6c3c513eb0fea750c39fa058337e53c023a9d027e06b46676371089eb6b9725384746b008369a2961aac9c710e14d4dce08cd53288dfa6cda7f4aca1428da74efd82dc1168c978cf8b0da538603"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xd}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffef}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x194}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000006c00000008000300", @ANYRES32=r5], 0x2c}}, 0x0)

5.586636992s ago: executing program 2 (id=1253):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2, 0xa000000}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xec, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_USERDATA={0xba, 0xd, 0x1, 0x0, "5b73d43cb48d26f96f238e5d18ec8c8696f293a3b130709c8e9de283d3426b7bb52a2f3b5ba29f27b9debdff88fea012e0a34fcb958bd8b968bce5227331998ecff7638883445138adb8b996d6b4b7b7777706f03e5cb7d58bd1fbd832789cb5434ed9465167d60ea6c3c513eb0fea750c39fa058337e53c023a9d027e06b46676371089eb6b9725384746b008369a2961aac9c710e14d4dce08cd53288dfa6cda7f4aca1428da74efd82dc1168c978cf8b0da538603"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xd}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffef}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x194}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000006c00000008000300", @ANYRES32=r5], 0x2c}}, 0x0)

3.302366388s ago: executing program 1 (id=2959):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6(0xa, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r2}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
r3 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3563], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = socket(0x10, 0x3, 0x0)
sendto$inet6(r5, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0043000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160003000a000000000000000000000000080000000eceb6b362bb944c08e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r6, r4, 0x4}, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r7, 0x8b2a, &(0x7f0000000040))
close(0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x4008040)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000000008d"})

2.443702281s ago: executing program 1 (id=2963):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0598000000200000140012800800010067726500080002800400"], 0x34}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f0000000300)={0x1d, r4}, 0x10)
sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x200, {0x60, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x40)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x10, 0xaf9}, &(0x7f00000010c0)=0x18)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r11=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0x130, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11, {0x1}, {0x0, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x6}}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @TCA_RATE={0x6, 0x5, {0x3, 0x6}}, @filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_INDEV={0x14, 0x8, 'syzkaller1\x00'}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc0, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x7d30}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_POLICE={0x8c, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f0, 0x6, 0x7, 0x1000, 0x79, {0x6, 0x1, 0x9, 0xa, 0x100, 0x10000}, {0x0, 0x0, 0x0, 0xf92d, 0x101, 0x80000000}, 0xb, 0x4}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfaf, 0x10000000, 0x2, 0x1000, 0x0, {0x1, 0x2, 0x8, 0xf317, 0x2}, {0x5, 0x2, 0xae1c, 0x7fff, 0x75be}, 0xe, 0x6, 0x9}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x800}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x4}, @TCA_FLOW_XOR={0x8, 0x7, 0x4}]}}]}, 0x130}, 0x1, 0xf0ffffffffffff}, 0x0)
read(r3, &(0x7f0000000240)=""/114, 0x72)

2.396715918s ago: executing program 0 (id=2965):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x7, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x20, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0)

2.129321644s ago: executing program 0 (id=2968):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x150, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x0, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x0, 0x7f}, {0x0, 0x8, 0xcf}, {0xf6}, 0x0, 0x200000, 0x2, 0x1, 0x1}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x40, "629e189e0c9a1441983efec42b494c21dc4216"}}]}, 0x150}, 0x1, 0x0, 0x0, 0xffffff80}, 0x804)

1.985346029s ago: executing program 0 (id=2970):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xc8e}, {0x16}]}, 0x10)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x235, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5d371c61f550e9d86aabda45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b226"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044)
r2 = socket(0x11, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000140)=0x1de, 0x4)
close(r2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f0000000640)=""/132, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r4 = socket(0x3, 0xf, 0x0)
r5 = socket(0x2, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x7d, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r8, 0x0, &(0x7f0000000200)=@tcp6=r5}, 0x20)
syz_genetlink_get_family_id$ipvs(0x0, r4)
tee(r2, r3, 0x7, 0x2)
r9 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x61, &(0x7f0000000340)={'filter\x00', 0x2, [{}, {}]}, 0x48)

1.409497512s ago: executing program 0 (id=2974):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000a00)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x6b3}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x1, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2f, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0xfffffffe, 0x8fc, 0x84, 0x9, 0x3, 0x9, 0x80000001, 0x6, 0x0, 0x8, 0x800, 0x9, 0x1, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x4, 0x1, 0x7f, 0xfffffffc, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x4, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10004, 0x5, 0x1, 0x0, 0x2, 0x7, 0x5, 0x6, 0x5, 0x4, 0x2, 0x81, 0x0, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x4, 0x89, 0x2, 0x6, 0x100, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x2, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xb, 0x8, 0x101, 0x7, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0x1, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x4, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0x0, 0x1, 0x723, 0xfffffffe, 0xe, 0x9, 0x4, 0x6, 0x7, 0x1, 0xfffffbff, 0x7, 0x3, 0x8, 0x57, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000001, 0x0, 0x9, 0xf, 0xfffffffe, 0x928, 0x4, 0xfffffffd, 0x5, 0x6042, 0xb87, 0x6, 0x8d8d, 0x55, 0x101, 0x2, 0x64e8, 0xc, 0x82f, 0x2, 0x80a, 0xfff, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x3, 0x0, 0x3, 0x1, {0xe, 0x2, 0x1, 0x2, 0xbbbc, 0x6}, {0x6, 0x1, 0x2, 0xdc2f, 0xfff9, 0xf}, 0x8, 0xe4ffffff, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xffff, 0x6c57, 0x0, 0x2, 0x4, 0x7fff, 0x400, 0x1ff, 0x5518, 0x9, 0x200, 0x80010000, 0x1, 0x437, 0xdb0, 0x7a2357cd, 0xb05b, 0x2, 0x0, 0xffff, 0x1, 0x4, 0x3ff, 0x7f, 0x5, 0xfffff800, 0x0, 0x9, 0xffffff82, 0x4, 0x401, 0x5eb, 0xa, 0x1ff, 0x9fa, 0x5, 0x8e5, 0x5, 0x5, 0x0, 0x10, 0x80, 0x8001, 0xab, 0xffff1eff, 0x4, 0xfff, 0x2, 0x3, 0xc, 0x4, 0x1, 0x51, 0x3, 0x101, 0x2, 0x5, 0x3, 0x1, 0x2, 0xf6a6, 0x5, 0x5, 0xaf1c, 0xc8, 0x6, 0x40, 0x9, 0x986, 0x10000, 0xe, 0x6, 0x80, 0x245, 0x38b, 0x5, 0xffffff13, 0xc00000, 0x8, 0xd0bd, 0xfffffff8, 0x7, 0x5, 0xc3a, 0x7, 0x3, 0x80000000, 0x0, 0x8, 0x8, 0x7, 0x0, 0x861a, 0x9, 0x5, 0xc605, 0x8eb6, 0x401, 0x0, 0x0, 0x6, 0x1, 0x8, 0x1, 0x1ff, 0xb2d, 0x5, 0xb, 0x0, 0x0, 0xfffffeff, 0x5, 0x2, 0x8, 0xffff, 0x2dd9c5a4, 0x0, 0x9, 0x81, 0xffff, 0x8, 0x2, 0x7, 0x7, 0x5, 0x2, 0x4, 0x57, 0x6, 0x8, 0x5, 0x25, 0x3, 0xe8, 0x1000, 0x0, 0xfe6, 0x50, 0xd3, 0x12cd2b8b, 0x1, 0x9, 0x7f, 0x7, 0x2, 0xb72c, 0x0, 0x80, 0x93, 0x30, 0x7, 0x5, 0x6000000, 0x8, 0xfffffffa, 0x0, 0x5, 0x2, 0x8001, 0xffffffff, 0x6, 0x2, 0x4, 0x80000000, 0x3ff, 0xbd49, 0x8, 0x8, 0x3, 0x5, 0x7, 0x5, 0x2, 0xfffffff8, 0xa2db, 0x400, 0x4, 0x5, 0x0, 0x4, 0xf45, 0x9, 0xc, 0x7fff, 0x3, 0x2, 0x400, 0x501, 0xd, 0xbb, 0x2, 0x402, 0x3, 0x10, 0x10, 0x10, 0xfff, 0x0, 0x5, 0x6, 0x6a, 0x10, 0x8, 0xfffffff7, 0x4, 0x3, 0xff, 0xfffffff8, 0x6, 0xff, 0x79, 0x10000, 0x8, 0x8000000, 0x0, 0x1ff, 0xd5a9, 0xb, 0x6, 0x1, 0x6, 0x8, 0xffffffb0, 0x5, 0x4447, 0x1, 0x4, 0x7, 0x2, 0x6, 0x3, 0x8000, 0xffffff3e, 0xd7b, 0x3, 0x4, 0x4, 0xfd95, 0x6, 0x4, 0xb, 0xea, 0x385a9732, 0x81, 0xfd9, 0xffffffff, 0x97, 0x0, 0x2bb7, 0x2, 0x9c7, 0x7f, 0x78a6, 0x40004, 0x7]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x894}}, 0x0)

1.337784424s ago: executing program 1 (id=2975):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0xffffffd0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1.247192923s ago: executing program 0 (id=2976):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f00800", 0x0, 0xdfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x28, 0x5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@private0, @empty, 0x1a, 0x13}})
sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x4c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7c}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_KEY={0x8}]}}}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x201, 0x0, 0x0, {0x67cdee8ebdba085e, 0x0, 0x8}, [@NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_DELTABLE={0xf4, 0x2, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x87, 0x6, "e0f4ba1942afe84cc07838a827250d79b96acd1ab80e462437962b49926b13a01c68e6f3d6935a7f8f8a21ce81e3ec77c87af0b7888f1e3fa19952203da8bee77901cc32f8cc3f4cd240baa875a93780ef01ad6ce4235fd3c1b832dea0c1f07d9ebdecc4abfb2164587838e67a1f51717d342fa3ddb51eac9734a4e676bf69e95b8626"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x38, 0x12, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_DATA={0x24, 0x4, 0x0, 0x1, [@NFTA_TUNNEL_KEY_DPORT={0x6, 0x8, 0x1, 0x0, 0x4e22}, @NFTA_TUNNEL_KEY_TOS={0x5, 0x5, 0x3}, @NFTA_TUNNEL_KEY_ID={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_TUNNEL_KEY_TTL={0x5, 0x6, 0x7}]}}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x274}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000104008000"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="274d107749f17dff"], 0x48}}, 0x0)

1.244106645s ago: executing program 4 (id=2977):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)

1.177238156s ago: executing program 1 (id=2978):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x33, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x0, &(0x7f0000000240)="a06ad876d56a0070fc96e1ef6a2080a836a28781266e53ce09ebb492b9423695158b6e1c8efc20d9ab669396e2ea10", 0x0, 0x5, 0x4000000, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5f3}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440), 0x0, 0xff, r1}, 0x38)
socket$kcm(0x21, 0x2, 0x2)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18)
r3 = socket(0x2a, 0x80000, 0x100)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket(0x18, 0x4, 0x4)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000040)={0x1, &(0x7f0000000300)=[{}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, 0x0, 0x0, 0x3, 0x1, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10002568, @void, @value}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000002060500000000000000000003000007050004000100000005000100070000000c0007804b0006000000000005000500020000000900020073797a300000000005000500000000008483927d27343e704dd7f60d175743f7a4ace53d20bddc69"], 0x4c}, 0x1, 0x0, 0x0, 0x40080c1}, 0x4000810)
socket(0x22, 0x2, 0x2)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="700000000206010200000000000000000000000005000100070000000500050002000000120003006269746d61703a69702c6d61630000000900020073797a30000000000500040000000000240007800c00018008000100ffffffff0c00028008000140ffffffff08000640"], 0x70}}, 0x0)
bind$bt_hci(r6, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025557000fddbdf253e0000000c009900060000006b000000"], 0x20}}, 0x60000014)
recvmmsg(r6, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0)
setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, 0x0, 0x0)
r8 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r8, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x27, @mcast1, 0x1}}, 0x53)
write$bt_hci(r6, &(0x7f0000000200)=ANY=[], 0x6)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000080)=0x7, 0x4)
socket(0x6, 0x800, 0xfff)
close(r6)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)

1.17261499s ago: executing program 3 (id=2979):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x6000000, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001e0100000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000800feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138)

1.088690465s ago: executing program 4 (id=2980):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@broadcast, @in=@private, 0x0, 0x5d, 0x4e20, 0x2, 0xa, 0x0, 0x0, 0x16}, {0x0, 0x100000000000, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x2f, 0x5}, 0x0, 0x6e6bb0}, {{@in=@remote, 0x4d3, 0x3c}, 0xa, @in=@broadcast, 0x10000, 0x0, 0x0, 0x81, 0x1000000}}, 0xe8)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x3f7, 0x100, 0x70bd2b, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000884}, 0x890)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newaddr={0x48, 0x14, 0x1, 0xfffffffc, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x402}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x7, 0x77eb488a, 0x5}}]}, 0x48}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fcffffb702000005000000b703000000000000850000007500000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x18)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@ifindex, 0x33, 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], <r5=>0x0}, 0x40)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100fffd08000a40000000000900020073797a32000000200900010073797a3000000000080005400000001f08000340000000042c0000000e0a01020000000000000000010000000900020010170273fc9b14040900010073797a30"], 0xb8}}, 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200), 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup=r7, r4, 0x24, 0x2010, 0x0, @value=r8, @void, @void, @void, r5}, 0x20)

985.181707ms ago: executing program 3 (id=2981):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7050000080000003c24ff800000000045040400010000001704000001000a00b7040000000100006a0af2fe000000008500000044000000b70000000000000095000000000000009e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9171e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62dd7c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18568136207304e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d74800000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100d33128954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e117e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3feec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f864b0ba45efbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c73acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90104c48e41d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b81da301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3040000002e334319c8979c322e92fbc2c400009f2404b941553843de114fdb03c19d606bd760c40f7f28360820b82d548198041562bcbd9edce223b54cf3c35823f3c446f0a20160ac"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x20000080)
socket$nl_route(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket(0x1e, 0x5, 0x0)
socket(0x1e, 0x805, 0x0)
socket(0x1, 0x803, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x6a040000)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = gettid()
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)

830.161615ms ago: executing program 4 (id=2982):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="660a00000000df0061114c0000000000850000001900030095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

727.560888ms ago: executing program 4 (id=2983):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001800ffff00000000000000000a000000fe00fd090000"], 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff0000c3ffffff000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc"], 0x8c}}, 0x4000000)

641.258936ms ago: executing program 1 (id=2984):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf253600000008000300", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000c0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r9, @ANYBLOB="080002"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="04002bbd7000fcdbdf257600000008000300", @ANYRES32=r9, @ANYBLOB="0c009900040000004e0000000c00580003804d04b59b7200"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000202010400000000000000000a0000003c0002800c00028005000100000000002c000180140003"], 0x50}}, 0x4030)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r11, &(0x7f0000000b80)=[{{&(0x7f0000000340)={0xa, 0x4e22, 0x14a4, @remote, 0xe}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000480)=']', 0x1}], 0x1}}], 0x1, 0x20000004)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r12, &(0x7f0000000000)={0xa, 0x8001, 0x5, @loopback, 0xfffffffe}, 0x1c)
r13 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket(0x10, 0x803, 0x0)
setsockopt$inet_int(r13, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
listen(r13, 0x2)
setsockopt$inet_sctp6_SCTP_EVENTS(r11, 0x84, 0xb, 0x0, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000100000000000200012800b000100697036746e6c0000100002800500090004000000040013000800040000050000"], 0x48}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000)
sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000d0a05000000000000000000000000030900020073797a300000e2ff0800010073797a3000000010"], 0x2c}, 0x1, 0x0, 0x0, 0x4000880}, 0x24000030)

640.019383ms ago: executing program 0 (id=2985):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0598000000200000140012800800010067726500080002800400"], 0x34}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f0000000300)={0x1d, r4}, 0x10)
sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x200, {0x60, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x40)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x10, 0xaf9}, &(0x7f00000010c0)=0x18)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r11=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0x130, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11, {0x1}, {0x0, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x6}}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @TCA_RATE={0x6, 0x5, {0x3, 0x6}}, @filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_INDEV={0x14, 0x8, 'syzkaller1\x00'}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc0, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x7d30}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_POLICE={0x8c, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f0, 0x6, 0x7, 0x1000, 0x79, {0x6, 0x1, 0x9, 0xa, 0x100, 0x10000}, {0x0, 0x0, 0x0, 0xf92d, 0x101, 0x80000000}, 0xb, 0x4}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfaf, 0x10000000, 0x2, 0x1000, 0x0, {0x1, 0x2, 0x8, 0xf317, 0x2}, {0x5, 0x2, 0xae1c, 0x7fff, 0x75be}, 0xe, 0x6, 0x9}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x800}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x4}, @TCA_FLOW_XOR={0x8, 0x7, 0x4}]}}]}, 0x130}, 0x1, 0xf0ffffffffffff}, 0x0)
read(r3, &(0x7f0000000240)=""/114, 0x72)

431.875569ms ago: executing program 4 (id=2986):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000006000000850000009a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x4000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

338.341375ms ago: executing program 4 (id=2987):
r0 = socket$packet(0x11, 0x3, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x13}}}, 0x24}}, 0x20044810)

289.734095ms ago: executing program 3 (id=2988):
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0xe0, @broadcast}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000}}], 0x2, 0x6080)

177.47461ms ago: executing program 3 (id=2989):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac000000120001050000000000000000000000014000"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000feffffff0000000000040002005c0001000058"], 0xac}}, 0x4000)

125.307829ms ago: executing program 3 (id=2990):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)

66.802058ms ago: executing program 1 (id=2991):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0)

0s ago: executing program 3 (id=2992):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000020", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000080015000000"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0)

kernel console output (not intermixed with test programs):

cal_addr_list+0x10/0x10
[  341.000435][T13041]  ? sctp_v4_is_any+0x35/0x60
[  341.000459][T13041]  ? sctp_copy_one_addr+0x93/0x360
[  341.000489][T13041]  sctp_bind_addr_copy+0xb3/0x3c0
[  341.000514][T13041]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  341.000541][T13041]  sctp_connect_new_asoc+0x2e0/0x690
[  341.000583][T13041]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  341.000615][T13041]  ? __local_bh_enable_ip+0x12d/0x1c0
[  341.000645][T13041]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  341.000672][T13041]  ? security_sctp_bind_connect+0x7e/0x2e0
[  341.000698][T13041]  sctp_sendmsg+0x155c/0x2810
[  341.000742][T13041]  ? __pfx_sctp_sendmsg+0x10/0x10
[  341.000777][T13041]  ? aa_sk_perm+0x81e/0x950
[  341.000806][T13041]  ? __pfx_aa_sk_perm+0x10/0x10
[  341.000832][T13041]  ? sock_rps_record_flow+0x19/0x410
[  341.000860][T13041]  ? inet_sendmsg+0x2f4/0x370
[  341.000888][T13041]  __sock_sendmsg+0x19c/0x270
[  341.000917][T13041]  ____sys_sendmsg+0x52d/0x830
[  341.000955][T13041]  ? __pfx_____sys_sendmsg+0x10/0x10
[  341.000998][T13041]  ? import_iovec+0x74/0xa0
[  341.001034][T13041]  ___sys_sendmsg+0x21f/0x2a0
[  341.001069][T13041]  ? __pfx____sys_sendmsg+0x10/0x10
[  341.001146][T13041]  ? __fget_files+0x2a/0x420
[  341.001173][T13041]  ? __fget_files+0x3a0/0x420
[  341.001214][T13041]  __sys_sendmmsg+0x227/0x430
[  341.001253][T13041]  ? __pfx___sys_sendmmsg+0x10/0x10
[  341.001297][T13041]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  341.001342][T13041]  ? ksys_write+0x1f0/0x250
[  341.001365][T13041]  ? rcu_is_watching+0x15/0xb0
[  341.001398][T13041]  __x64_sys_sendmmsg+0xa0/0xc0
[  341.001432][T13041]  do_syscall_64+0xf6/0x210
[  341.001458][T13041]  ? clear_bhb_loop+0x60/0xb0
[  341.001485][T13041]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  341.001505][T13041] RIP: 0033:0x7f4cc1b8e969
[  341.001523][T13041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  341.001540][T13041] RSP: 002b:00007f4cc296b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  341.001567][T13041] RAX: ffffffffffffffda RBX: 00007f4cc1db5fa0 RCX: 00007f4cc1b8e969
[  341.001582][T13041] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003
[  341.001595][T13041] RBP: 00007f4cc296b090 R08: 0000000000000000 R09: 0000000000000000
[  341.001607][T13041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  341.001619][T13041] R13: 0000000000000000 R14: 00007f4cc1db5fa0 R15: 00007ffd5bd3a418
[  341.001652][T13041]  </TASK>
[  341.397583][T12992] team0: Port device team_slave_0 added
[  341.435441][T12992] team0: Port device team_slave_1 added
[  341.674103][T12992] batman_adv: batadv0: Adding interface: batadv_slave_0
[  341.713218][T12992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.753950][T12992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  341.792972][T12992] batman_adv: batadv0: Adding interface: batadv_slave_1
[  341.810960][T12992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.853584][T12992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  342.152693][T12992] hsr_slave_0: entered promiscuous mode
[  342.170285][T12992] hsr_slave_1: entered promiscuous mode
[  342.249776][T13060] pimreg: entered allmulticast mode
[  342.546667][ T9760] Bluetooth: hci0: command tx timeout
[  342.615890][T13069] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2267'.
[  342.872594][T13078] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2270'.
[  342.965057][T13078] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  343.151536][T12992] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  343.169716][T12992] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  343.199199][T12992] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  343.215319][T12992] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  343.237443][   T30] audit: type=1800 audit(1748197771.254:3): pid=13080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2271" name=8001 dev="tmpfs" ino=2471 res=0 errno=0
[  343.293194][   T30] audit: type=1800 audit(1748197771.294:4): pid=13081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2271" name=8001 dev="tmpfs" ino=2471 res=0 errno=0
[  343.358905][   T30] audit: type=1804 audit(1748197771.294:5): pid=13080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2271" name=2F6E6577726F6F742F3438322F8001 dev="tmpfs" ino=2471 res=1 errno=0
[  343.447685][T12992] 8021q: adding VLAN 0 to HW filter on device bond0
[  343.478895][T12992] 8021q: adding VLAN 0 to HW filter on device team0
[  343.503763][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.511073][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[  343.533587][T13086] macsec1: entered allmulticast mode
[  343.541310][T13086] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  343.552271][T13086] batman_adv: batadv0: Adding interface: macsec1
[  343.560026][T13086] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.588763][T13086] batman_adv: batadv0: Interface activated: macsec1
[  343.598274][T13092] Bluetooth: MGMT ver 1.23
[  343.662311][T13089] gtp0: entered promiscuous mode
[  343.669085][T13089] team0: Port device gtp0 added
[  343.686713][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[  343.693927][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[  343.826613][ T2920] wlan1: Trigger new scan to find an IBSS to join
[  344.636041][ T9760] Bluetooth: hci0: command tx timeout
[  344.827928][ T6775] wlan1: Creating new IBSS network, BSSID a6:0b:8f:12:5f:a4
[  345.570178][T13096] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2277'.
[  345.983612][T13116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2280'.
[  346.217280][T13124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2286'.
[  346.387280][T12992] 8021q: adding VLAN 0 to HW filter on device batadv0
[  346.439476][T13129] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2287'.
[  346.514295][T13129] syzkaller1: entered promiscuous mode
[  346.524313][T13129] syzkaller1: entered allmulticast mode
[  346.627286][T12992] veth0_vlan: entered promiscuous mode
[  346.681063][T12992] veth1_vlan: entered promiscuous mode
[  346.707052][ T9760] Bluetooth: hci0: command tx timeout
[  346.771754][T12992] veth0_macvtap: entered promiscuous mode
[  346.782768][T12992] veth1_macvtap: entered promiscuous mode
[  346.804489][T12992] batman_adv: batadv0: Interface activated: batadv_slave_0
[  346.850521][T12992] batman_adv: batadv0: Interface activated: batadv_slave_1
[  346.872384][T12992] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  346.875429][T13138] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2292'.
[  346.898794][T12992] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  346.908180][T12992] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  346.917444][T12992] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  346.946153][T13138] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2292'.
[  346.955277][T13138] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2292'.
[  347.248592][ T3011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.320401][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.388351][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.400409][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.718258][T13157] bridge8: entered promiscuous mode
[  347.723646][T13157] bridge8: entered allmulticast mode
[  347.756259][T13157] team0: Device bridge8 is of different type
[  347.965213][T13161] gtp0: left promiscuous mode
[  347.990092][T13161] team0: Port device gtp0 removed
[  348.018890][T13161] vxlan0: left allmulticast mode
[  348.047256][T13161] vxlan0: left promiscuous mode
[  348.067250][T13161] bridge0: port 1(vxlan0) entered disabled state
[  348.089442][T13161] gtp1: left promiscuous mode
[  348.131396][T13161] team0: Port device gtp1 removed
[  348.331316][ T6773] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.359995][T13165] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  348.472135][ T6773] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.557749][ T6773] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.876267][ T6775] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  348.902285][ T6773] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.167125][ T6773] bridge_slave_1: left allmulticast mode
[  349.172838][ T6773] bridge_slave_1: left promiscuous mode
[  349.178814][ T6773] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.188836][ T6773] bridge_slave_0: left allmulticast mode
[  349.194530][ T6773] bridge_slave_0: left promiscuous mode
[  349.200790][ T6773] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.539849][ T6773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  349.551233][ T6773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  349.562016][ T6773] bond0 (unregistering): Released all slaves
[  349.756998][T13179] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2303'.
[  349.924291][T13189] xt_hashlimit: size too large, truncated to 1048576
[  350.684682][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  350.697797][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  350.708664][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  350.721143][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  350.730269][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  350.878284][ T6773] hsr_slave_0: left promiscuous mode
[  350.930911][ T6773] hsr_slave_1: left promiscuous mode
[  350.943775][ T6773] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  350.963080][ T6773] batman_adv: batadv0: Removing interface: batadv_slave_0
[  350.983246][ T6773] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  350.993403][ T6773] batman_adv: batadv0: Removing interface: batadv_slave_1
[  351.044643][T13211] Bluetooth: MGMT ver 1.23
[  351.047861][ T6773] veth1_macvtap: left promiscuous mode
[  351.054951][ T6773] veth0_macvtap: left promiscuous mode
[  351.064705][ T6773] veth1_vlan: left promiscuous mode
[  351.071326][ T6773] veth0_vlan: left promiscuous mode
[  351.098852][T13212] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2313'.
[  351.661204][ T6773] team0 (unregistering): Port device team_slave_1 removed
[  351.702262][ T6773] team0 (unregistering): Port device team_slave_0 removed
[  352.778704][T13203] chnl_net:caif_netlink_parms(): no params data found
[  352.788291][ T5828] Bluetooth: hci0: command tx timeout
[  352.981654][T13230] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode
[  352.990483][T13230] macvtap1: entered allmulticast mode
[  353.005043][T13230] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode
[  353.029728][T13230] mac80211_hwsim hwsim9 wlan0: left allmulticast mode
[  353.051580][T13230] mac80211_hwsim hwsim9 wlan0: left promiscuous mode
[  353.163577][T13233] 8021q: VLANs not supported on team0
[  353.405634][T13203] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.413663][T13203] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.421537][T13203] bridge_slave_0: entered allmulticast mode
[  353.438302][T13203] bridge_slave_0: entered promiscuous mode
[  353.517401][T13203] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.540896][T13203] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.558887][T13203] bridge_slave_1: entered allmulticast mode
[  353.596881][T13203] bridge_slave_1: entered promiscuous mode
[  353.617336][T13250] FAULT_INJECTION: forcing a failure.
[  353.617336][T13250] name failslab, interval 1, probability 0, space 0, times 0
[  353.634814][T13252] netlink: 'syz.0.2326': attribute type 20 has an invalid length.
[  353.646098][T13250] CPU: 0 UID: 0 PID: 13250 Comm: syz.3.2325 Not tainted 6.15.0-rc7-syzkaller-01671-gd09a8a4ab578 #0 PREEMPT(full) 
[  353.646129][T13250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  353.646141][T13250] Call Trace:
[  353.646150][T13250]  <TASK>
[  353.646158][T13250]  dump_stack_lvl+0x189/0x250
[  353.646198][T13250]  ? __pfx_dump_stack_lvl+0x10/0x10
[  353.646228][T13250]  ? __pfx__printk+0x10/0x10
[  353.646266][T13250]  should_fail_ex+0x414/0x560
[  353.646295][T13250]  should_failslab+0xa8/0x100
[  353.646325][T13250]  __kmalloc_cache_noprof+0x70/0x3d0
[  353.646351][T13250]  ? sctp_add_bind_addr+0x8c/0x370
[  353.646380][T13250]  sctp_add_bind_addr+0x8c/0x370
[  353.646410][T13250]  sctp_copy_local_addr_list+0x30b/0x4e0
[  353.646439][T13250]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  353.646464][T13250]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  353.646494][T13250]  ? sctp_v4_is_any+0x35/0x60
[  353.646519][T13250]  ? sctp_copy_one_addr+0x93/0x360
[  353.646547][T13250]  sctp_bind_addr_copy+0xb3/0x3c0
[  353.646573][T13250]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  353.646598][T13250]  sctp_connect_new_asoc+0x2e0/0x690
[  353.646633][T13250]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  353.646661][T13250]  ? __local_bh_enable_ip+0x12d/0x1c0
[  353.646691][T13250]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  353.646717][T13250]  ? security_sctp_bind_connect+0x7e/0x2e0
[  353.646741][T13250]  sctp_sendmsg+0x155c/0x2810
[  353.646794][T13250]  ? __pfx_sctp_sendmsg+0x10/0x10
[  353.646827][T13250]  ? aa_sk_perm+0x81e/0x950
[  353.646856][T13250]  ? __pfx_aa_sk_perm+0x10/0x10
[  353.646882][T13250]  ? sock_rps_record_flow+0x19/0x410
[  353.646910][T13250]  ? inet_sendmsg+0x2f4/0x370
[  353.646937][T13250]  __sock_sendmsg+0x19c/0x270
[  353.646966][T13250]  ____sys_sendmsg+0x52d/0x830
[  353.647004][T13250]  ? __pfx_____sys_sendmsg+0x10/0x10
[  353.647047][T13250]  ? import_iovec+0x74/0xa0
[  353.647081][T13250]  ___sys_sendmsg+0x21f/0x2a0
[  353.647115][T13250]  ? __pfx____sys_sendmsg+0x10/0x10
[  353.647191][T13250]  ? __fget_files+0x2a/0x420
[  353.647217][T13250]  ? __fget_files+0x3a0/0x420
[  353.647258][T13250]  __sys_sendmmsg+0x227/0x430
[  353.647296][T13250]  ? __pfx___sys_sendmmsg+0x10/0x10
[  353.647338][T13250]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  353.647382][T13250]  ? ksys_write+0x1f0/0x250
[  353.647405][T13250]  ? rcu_is_watching+0x15/0xb0
[  353.647436][T13250]  __x64_sys_sendmmsg+0xa0/0xc0
[  353.647469][T13250]  do_syscall_64+0xf6/0x210
[  353.647494][T13250]  ? clear_bhb_loop+0x60/0xb0
[  353.647520][T13250]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.647541][T13250] RIP: 0033:0x7f4cc1b8e969
[  353.647558][T13250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  353.647576][T13250] RSP: 002b:00007f4cc296b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  353.647598][T13250] RAX: ffffffffffffffda RBX: 00007f4cc1db5fa0 RCX: 00007f4cc1b8e969
[  353.647613][T13250] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003
[  353.647626][T13250] RBP: 00007f4cc296b090 R08: 0000000000000000 R09: 0000000000000000
[  353.647639][T13250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  353.647650][T13250] R13: 0000000000000000 R14: 00007f4cc1db5fa0 R15: 00007ffd5bd3a418
[  353.647685][T13250]  </TASK>
[  354.145030][T13203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  354.214833][T13203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  354.565573][T13203] team0: Port device team_slave_0 added
[  354.589389][T13203] team0: Port device team_slave_1 added
[  354.721910][T13203] batman_adv: batadv0: Adding interface: batadv_slave_0
[  354.736097][T13203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.793768][T13203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.824016][T13203] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.842607][T13203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.869664][ T5828] Bluetooth: hci0: command tx timeout
[  354.910448][T13203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  355.116522][T13203] hsr_slave_0: entered promiscuous mode
[  355.145395][T13203] hsr_slave_1: entered promiscuous mode
[  355.942401][   T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  356.064711][T13319] veth0_to_bond: entered allmulticast mode
[  356.113403][T13321] netlink: 'syz.4.2352': attribute type 15 has an invalid length.
[  356.137110][T13321] netlink: 'syz.4.2352': attribute type 3 has an invalid length.
[  356.148335][T13321] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2352'.
[  356.473052][T13339] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2357'.
[  356.648248][T13203] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  356.699113][T13203] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  356.774088][T13203] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  356.808523][T13203] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  356.949097][ T5828] Bluetooth: hci0: command tx timeout
[  357.012771][T13203] 8021q: adding VLAN 0 to HW filter on device bond0
[  357.120078][T13359] netlink: 'syz.0.2365': attribute type 4 has an invalid length.
[  357.146265][T13203] 8021q: adding VLAN 0 to HW filter on device team0
[  357.192912][ T6775] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.200158][ T6775] bridge0: port 1(bridge_slave_0) entered forwarding state
[  357.289484][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.296845][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  357.400917][T13373] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2371'.
[  357.773265][T13389] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.807228][T13389] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 35379 - 0
[  357.821800][T13389] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 47764 - 0
[  357.873571][T13394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2375'.
[  357.930026][T13203] 8021q: adding VLAN 0 to HW filter on device batadv0
[  357.958400][T13389] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.972905][T13389] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 35379 - 0
[  358.000767][T13389] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 47764 - 0
[  358.144536][T13389] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.156799][T13389] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 35379 - 0
[  358.180623][T13389] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 47764 - 0
[  358.263920][T13389] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  358.282638][T13389] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 35379 - 0
[  358.304849][T13389] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 47764 - 0
[  358.344494][T13203] veth0_vlan: entered promiscuous mode
[  358.351581][T13399] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  358.413750][T13203] veth1_vlan: entered promiscuous mode
[  358.505428][T13203] veth0_macvtap: entered promiscuous mode
[  358.548037][T13389] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 47764 - 0
[  358.557774][T13389] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 35379 - 0
[  358.567682][T13389] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  358.581558][T13203] veth1_macvtap: entered promiscuous mode
[  358.686838][T13389] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 47764 - 0
[  358.715682][T13389] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 35379 - 0
[  358.724616][T13389] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  358.766906][T13406] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2383'.
[  358.774886][T13389] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 47764 - 0
[  358.806307][T13389] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 35379 - 0
[  358.815151][T13389] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  358.849198][T13203] batman_adv: batadv0: Interface activated: batadv_slave_0
[  358.866449][   T13] wlan1: Trigger new scan to find an IBSS to join
[  358.911888][T13389] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 47764 - 0
[  358.940774][T13389] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 35379 - 0
[  358.955941][T13389] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  358.977479][T13203] batman_adv: batadv0: Interface activated: batadv_slave_1
[  359.030232][ T5828] Bluetooth: hci0: command tx timeout
[  359.123242][T13409] syzkaller0: entered promiscuous mode
[  359.150767][T13409] syzkaller0: entered allmulticast mode
[  359.153026][T13420] netlink: 'syz.4.2387': attribute type 12 has an invalid length.
[  359.170777][T13420] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.2387'.
[  359.268584][T13422] vlan3: entered promiscuous mode
[  359.308696][T13203] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  359.317839][T13203] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  359.329177][T13203] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  359.338158][T13203] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  361.051202][T13427] netlink: 'syz.4.2390': attribute type 12 has an invalid length.
[  361.059607][T13427] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.2390'.
[  361.111128][T13429] vlan3: entered allmulticast mode
[  361.118496][T13429] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  361.196039][T13425] FAULT_INJECTION: forcing a failure.
[  361.196039][T13425] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  361.237610][T13425] CPU: 1 UID: 0 PID: 13425 Comm: syz.3.2389 Not tainted 6.15.0-rc7-syzkaller-01671-gd09a8a4ab578 #0 PREEMPT(full) 
[  361.237642][T13425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  361.237654][T13425] Call Trace:
[  361.237662][T13425]  <TASK>
[  361.237672][T13425]  dump_stack_lvl+0x189/0x250
[  361.237702][T13425]  ? __lock_acquire+0xaac/0xd20
[  361.237734][T13425]  ? __pfx_dump_stack_lvl+0x10/0x10
[  361.237776][T13425]  ? __pfx__printk+0x10/0x10
[  361.237797][T13425]  ? __might_fault+0xb0/0x130
[  361.237835][T13425]  should_fail_ex+0x414/0x560
[  361.237863][T13425]  set_fd_set+0x3a/0xa0
[  361.237887][T13425]  core_sys_select+0x731/0x990
[  361.237925][T13425]  ? __pfx_core_sys_select+0x10/0x10
[  361.237978][T13425]  ? __pfx_set_user_sigmask+0x10/0x10
[  361.238011][T13425]  __se_sys_pselect6+0x27a/0x300
[  361.238044][T13425]  ? __pfx___se_sys_pselect6+0x10/0x10
[  361.238076][T13425]  ? __x64_sys_pselect6+0x21/0xf0
[  361.238105][T13425]  do_syscall_64+0xf6/0x210
[  361.238128][T13425]  ? clear_bhb_loop+0x60/0xb0
[  361.238153][T13425]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.238172][T13425] RIP: 0033:0x7f4cc1b8e969
[  361.238189][T13425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  361.238205][T13425] RSP: 002b:00007f4cc294a038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  361.238227][T13425] RAX: ffffffffffffffda RBX: 00007f4cc1db6080 RCX: 00007f4cc1b8e969
[  361.238242][T13425] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040
[  361.238255][T13425] RBP: 00007f4cc294a090 R08: 0000000000000000 R09: 0000000000000000
[  361.238268][T13425] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[  361.238280][T13425] R13: 0000000000000000 R14: 00007f4cc1db6080 R15: 00007ffd5bd3a418
[  361.238313][T13425]  </TASK>
[  361.512877][ T2920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.539106][ T2920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.553147][T13435] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2394'.
[  361.823041][T13440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2396'.
[  363.112843][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.121880][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.132690][T13440] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  363.374235][T13446] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2399'.
[  363.555859][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2400'.
[  363.668062][T13448] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2400'.
[  363.778701][T13465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2405'.
[  363.813112][T13465] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2405'.
[  363.826443][ T2920] wlan1: Trigger new scan to find an IBSS to join
[  363.855495][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2405'.
[  363.911862][T13471] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2408'.
[  363.922815][T13466] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2405'.
[  364.020120][   T82] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.117020][   T82] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.199717][   T82] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.273619][   T82] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.394195][   T82] bridge_slave_1: left allmulticast mode
[  364.400184][   T82] bridge_slave_1: left promiscuous mode
[  364.406203][   T82] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.416730][   T82] bridge_slave_0: left allmulticast mode
[  364.422414][   T82] bridge_slave_0: left promiscuous mode
[  364.428339][   T82] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.800195][   T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  364.811616][   T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  364.821999][   T82] bond0 (unregistering): Released all slaves
[  364.907439][ T2920] wlan1: Creating new IBSS network, BSSID 6e:fb:88:cf:8c:9d
[  365.052190][   T82] hsr_slave_0: left promiscuous mode
[  365.059209][   T82] hsr_slave_1: left promiscuous mode
[  365.065125][   T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  365.072800][   T82] batman_adv: batadv0: Removing interface: batadv_slave_0
[  365.083043][   T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  365.090700][   T82] batman_adv: batadv0: Removing interface: batadv_slave_1
[  365.113154][   T82] veth1_macvtap: left promiscuous mode
[  365.119030][   T82] veth0_macvtap: left promiscuous mode
[  365.124680][   T82] veth1_vlan: left promiscuous mode
[  365.130288][   T82] veth0_vlan: left promiscuous mode
[  365.808155][   T82] team0 (unregistering): Port device team_slave_1 removed
[  365.940900][   T82] team0 (unregistering): Port device team_slave_0 removed
[  366.064717][ T9760] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  366.089979][ T9760] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  366.111315][ T9760] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  366.122190][ T9760] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  366.142198][ T9760] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  366.501269][T13477] vlan4: entered promiscuous mode
[  366.737144][T13504] __nla_validate_parse: 1 callbacks suppressed
[  366.737163][T13504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2416'.
[  366.818248][T13510] netlink: 'syz.4.2417': attribute type 15 has an invalid length.
[  366.855670][T13510] netlink: 'syz.4.2417': attribute type 3 has an invalid length.
[  366.886522][T13510] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2417'.
[  366.908437][T13516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2416'.
[  366.920172][T13516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2416'.
[  366.930403][T13516] netlink: 'syz.1.2416': attribute type 6 has an invalid length.
[  367.049102][T13501] veth0_to_bond: left allmulticast mode
[  367.219169][T13501] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  367.228353][T13501] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  367.237520][T13501] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  367.246514][T13501] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  367.264080][T13501] gtp0: left promiscuous mode
[  367.269191][T13501] gtp0: left allmulticast mode
[  367.276583][T13501] macsec1: left promiscuous mode
[  367.281573][T13501] macsec1: left allmulticast mode
[  367.291174][T13501] vlan4: left promiscuous mode
[  367.297074][T13501] macsec0: left promiscuous mode
[  367.315355][T13501] gretap1: left promiscuous mode
[  367.321158][T13501] gretap1: left allmulticast mode
[  367.329527][T13501] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  367.338813][T13501] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  367.347381][T13501] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  367.356422][T13501] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  367.390434][T13508] bridge7: the hash_elasticity option has been deprecated and is always 16
[  367.416227][ T3011] wlan1: Selected IBSS BSSID 6e:fb:88:cf:8c:9d based on configured SSID
[  367.552794][T13528] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2419'.
[  367.657171][T13532] netlink: 'syz.4.2420': attribute type 10 has an invalid length.
[  367.767944][T13542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2420'.
[  367.913681][T13548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2423'.
[  368.024998][T13495] chnl_net:caif_netlink_parms(): no params data found
[  368.161394][T13560] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.234897][T13560] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.247922][ T9760] Bluetooth: hci0: command tx timeout
[  368.367447][T13576] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2434'.
[  368.389934][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2434'.
[  368.460909][T13560] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.611822][T13495] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.626430][T13495] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.633762][T13495] bridge_slave_0: entered allmulticast mode
[  368.647684][T13495] bridge_slave_0: entered promiscuous mode
[  368.663662][T13495] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.671738][T13495] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.679282][T13495] bridge_slave_1: entered allmulticast mode
[  368.687457][T13495] bridge_slave_1: entered promiscuous mode
[  368.697716][T13560] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.812904][T13584] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2436'.
[  368.821997][T13495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  368.829706][T13495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  368.906446][T13560] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  368.958114][T13495] team0: Port device team_slave_0 added
[  368.991809][T13560] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  369.035474][T13560] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  369.068277][T13495] team0: Port device team_slave_1 added
[  369.190329][T13590] netlink: 'syz.3.2438': attribute type 11 has an invalid length.
[  369.241850][T13560] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  369.343760][T13595] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode
[  369.356660][T13595] macvtap1: entered allmulticast mode
[  369.362161][T13595] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode
[  369.401587][T13595] mac80211_hwsim hwsim9 wlan0: left allmulticast mode
[  369.408939][T13595] mac80211_hwsim hwsim9 wlan0: left promiscuous mode
[  369.465094][T13495] batman_adv: batadv0: Adding interface: batadv_slave_0
[  369.473978][T13495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  369.506226][T13495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  369.533631][T13495] batman_adv: batadv0: Adding interface: batadv_slave_1
[  369.543684][T13495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  369.572949][T13495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  369.715340][T13611] sctp: [Deprecated]: syz.4.2443 (pid 13611) Use of struct sctp_assoc_value in delayed_ack socket option.
[  369.715340][T13611] Use struct sctp_sack_info instead
[  369.761250][T13495] hsr_slave_0: entered promiscuous mode
[  369.769179][T13495] hsr_slave_1: entered promiscuous mode
[  370.319021][ T9760] Bluetooth: hci0: command tx timeout
[  370.464140][T13635] gtp1: entered promiscuous mode
[  370.477074][T13635] team0: Port device gtp1 added
[  370.862114][T13495] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  370.913844][T13495] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  370.948262][T13495] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  370.981173][T13657] openvswitch: netlink: IP tunnel TTL not specified.
[  370.990864][T13495] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  371.385140][T13495] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.430623][T13495] 8021q: adding VLAN 0 to HW filter on device team0
[  371.468119][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.475391][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state
[  371.514042][ T6773] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.521933][ T6773] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.609551][T13688] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.765113][T13693] __nla_validate_parse: 7 callbacks suppressed
[  371.765135][T13693] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2471'.
[  371.852144][T13693] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  371.920427][T13693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2471'.
[  372.000648][T13693] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2471'.
[  372.040710][T13495] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.180668][T13495] veth0_vlan: entered promiscuous mode
[  372.218421][T13495] veth1_vlan: entered promiscuous mode
[  372.316532][T13495] veth0_macvtap: entered promiscuous mode
[  372.342652][T13495] veth1_macvtap: entered promiscuous mode
[  372.385974][ T9760] Bluetooth: hci0: command tx timeout
[  372.449647][T13495] batman_adv: batadv0: Interface activated: batadv_slave_0
[  372.531006][T13495] batman_adv: batadv0: Interface activated: batadv_slave_1
[  372.557498][T13719] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2474'.
[  372.582911][T13719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2474'.
[  372.680604][T13495] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.698761][T13495] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  372.711214][T13495] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  372.723267][T13495] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.096693][T13727] FAULT_INJECTION: forcing a failure.
[  373.096693][T13727] name failslab, interval 1, probability 0, space 0, times 0
[  373.167381][ T6783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.176009][T13727] CPU: 0 UID: 0 PID: 13727 Comm: syz.4.2481 Not tainted 6.15.0-rc7-syzkaller-01671-gd09a8a4ab578 #0 PREEMPT(full) 
[  373.176038][T13727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  373.176050][T13727] Call Trace:
[  373.176058][T13727]  <TASK>
[  373.176067][T13727]  dump_stack_lvl+0x189/0x250
[  373.176106][T13727]  ? __pfx_dump_stack_lvl+0x10/0x10
[  373.176136][T13727]  ? __pfx__printk+0x10/0x10
[  373.176171][T13727]  should_fail_ex+0x414/0x560
[  373.176201][T13727]  should_failslab+0xa8/0x100
[  373.176232][T13727]  __kmalloc_cache_noprof+0x70/0x3d0
[  373.176259][T13727]  ? sctp_add_bind_addr+0x8c/0x370
[  373.176290][T13727]  sctp_add_bind_addr+0x8c/0x370
[  373.176319][T13727]  sctp_copy_local_addr_list+0x30b/0x4e0
[  373.176348][T13727]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  373.176373][T13727]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  373.176403][T13727]  ? sctp_v4_is_any+0x35/0x60
[  373.176428][T13727]  ? sctp_copy_one_addr+0x93/0x360
[  373.176456][T13727]  sctp_bind_addr_copy+0xb3/0x3c0
[  373.176482][T13727]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  373.176507][T13727]  sctp_connect_new_asoc+0x2e0/0x690
[  373.176541][T13727]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  373.176568][T13727]  ? __local_bh_enable_ip+0x12d/0x1c0
[  373.176597][T13727]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  373.176623][T13727]  ? security_sctp_bind_connect+0x7e/0x2e0
[  373.176648][T13727]  sctp_sendmsg+0x155c/0x2810
[  373.176692][T13727]  ? __pfx_sctp_sendmsg+0x10/0x10
[  373.176726][T13727]  ? aa_sk_perm+0x81e/0x950
[  373.176766][T13727]  ? __pfx_aa_sk_perm+0x10/0x10
[  373.176793][T13727]  ? sock_rps_record_flow+0x19/0x410
[  373.176821][T13727]  ? inet_sendmsg+0x2f4/0x370
[  373.176849][T13727]  __sock_sendmsg+0x19c/0x270
[  373.176878][T13727]  ____sys_sendmsg+0x52d/0x830
[  373.176916][T13727]  ? __pfx_____sys_sendmsg+0x10/0x10
[  373.176958][T13727]  ? import_iovec+0x74/0xa0
[  373.176993][T13727]  ___sys_sendmsg+0x21f/0x2a0
[  373.177028][T13727]  ? __pfx____sys_sendmsg+0x10/0x10
[  373.177103][T13727]  ? __fget_files+0x2a/0x420
[  373.177130][T13727]  ? __fget_files+0x3a0/0x420
[  373.177172][T13727]  __sys_sendmmsg+0x227/0x430
[  373.177211][T13727]  ? __pfx___sys_sendmmsg+0x10/0x10
[  373.177254][T13727]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  373.177299][T13727]  ? ksys_write+0x1f0/0x250
[  373.177322][T13727]  ? rcu_is_watching+0x15/0xb0
[  373.177354][T13727]  __x64_sys_sendmmsg+0xa0/0xc0
[  373.177389][T13727]  do_syscall_64+0xf6/0x210
[  373.177414][T13727]  ? clear_bhb_loop+0x60/0xb0
[  373.177439][T13727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.177459][T13727] RIP: 0033:0x7f263558e969
[  373.177478][T13727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  373.177495][T13727] RSP: 002b:00007f2636442038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  373.177517][T13727] RAX: ffffffffffffffda RBX: 00007f26357b5fa0 RCX: 00007f263558e969
[  373.177532][T13727] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003
[  373.177545][T13727] RBP: 00007f2636442090 R08: 0000000000000000 R09: 0000000000000000
[  373.177559][T13727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  373.177571][T13727] R13: 0000000000000000 R14: 00007f26357b5fa0 R15: 00007ffe40509738
[  373.177606][T13727]  </TASK>
[  373.193077][ T6783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.581751][ T6783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.593038][ T6783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.866477][T13750] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2492'.
[  373.878910][T13750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2492'.
[  374.055331][T13762] FAULT_INJECTION: forcing a failure.
[  374.055331][T13762] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  374.072984][T13762] CPU: 1 UID: 0 PID: 13762 Comm: syz.3.2494 Not tainted 6.15.0-rc7-syzkaller-01671-gd09a8a4ab578 #0 PREEMPT(full) 
[  374.073013][T13762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  374.073027][T13762] Call Trace:
[  374.073035][T13762]  <TASK>
[  374.073043][T13762]  dump_stack_lvl+0x189/0x250
[  374.073085][T13762]  ? __lock_acquire+0xaac/0xd20
[  374.073118][T13762]  ? __pfx_dump_stack_lvl+0x10/0x10
[  374.073147][T13762]  ? __pfx__printk+0x10/0x10
[  374.073169][T13762]  ? __might_fault+0xb0/0x130
[  374.073209][T13762]  should_fail_ex+0x414/0x560
[  374.073238][T13762]  _copy_from_user+0x2d/0xb0
[  374.073270][T13762]  ___sys_sendmsg+0x158/0x2a0
[  374.073303][T13762]  ? __pfx____sys_sendmsg+0x10/0x10
[  374.073385][T13762]  ? __might_fault+0xb0/0x130
[  374.073417][T13762]  __sys_sendmmsg+0x227/0x430
[  374.073455][T13762]  ? __pfx___sys_sendmmsg+0x10/0x10
[  374.073497][T13762]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  374.073541][T13762]  ? ksys_write+0x1f0/0x250
[  374.073563][T13762]  ? rcu_is_watching+0x15/0xb0
[  374.073595][T13762]  __x64_sys_sendmmsg+0xa0/0xc0
[  374.073629][T13762]  do_syscall_64+0xf6/0x210
[  374.073653][T13762]  ? clear_bhb_loop+0x60/0xb0
[  374.073679][T13762]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.073698][T13762] RIP: 0033:0x7f4cc1b8e969
[  374.073717][T13762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  374.073735][T13762] RSP: 002b:00007f4cc296b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  374.073756][T13762] RAX: ffffffffffffffda RBX: 00007f4cc1db5fa0 RCX: 00007f4cc1b8e969
[  374.073771][T13762] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004
[  374.073783][T13762] RBP: 00007f4cc296b090 R08: 0000000000000000 R09: 0000000000000000
[  374.073796][T13762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  374.073808][T13762] R13: 0000000000000000 R14: 00007f4cc1db5fa0 R15: 00007ffd5bd3a418
[  374.073841][T13762]  </TASK>
[  374.422454][T13773] netlink: 'syz.1.2500': attribute type 15 has an invalid length.
[  374.432953][T13773] netlink: 'syz.1.2500': attribute type 3 has an invalid length.
[  374.449850][T13773] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2500'.
[  374.500055][T13775] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.579169][T13775] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.653619][T13783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2504'.
[  374.675396][T13775] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.763495][T13787] netlink: 'syz.3.2506': attribute type 5 has an invalid length.
[  374.785260][T13787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2506'.
[  374.830257][T13775] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.977437][T13775] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  375.013203][T13775] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  375.071433][T13775] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  375.113622][T13775] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  375.134048][T13800] netlink: 'syz.3.2509': attribute type 2 has an invalid length.
[  375.373669][T13806] netlink: 'syz.4.2513': attribute type 12 has an invalid length.
[  377.350955][ T6783] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.584194][ T6783] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.636935][T13823] __nla_validate_parse: 4 callbacks suppressed
[  377.636957][T13823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2519'.
[  377.784655][ T6783] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.939008][ T6783] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.957156][T13843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2526'.
[  378.178172][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  378.193690][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  378.204695][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  378.214720][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  378.224073][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  378.550510][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  378.689523][T13854] vlan4: entered promiscuous mode
[  378.813291][ T6783] bridge_slave_1: left allmulticast mode
[  378.826272][ T6783] bridge_slave_1: left promiscuous mode
[  378.838067][ T6783] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.882173][ T6783] bridge_slave_0: left allmulticast mode
[  378.895030][ T6783] bridge_slave_0: left promiscuous mode
[  378.907309][ T6783] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.356923][T13874] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  379.593692][ T6783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  379.609266][ T6783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  379.622526][ T6783] bond0 (unregistering): Released all slaves
[  380.306042][ T9760] Bluetooth: hci0: command tx timeout
[  380.400896][ T6783] hsr_slave_0: left promiscuous mode
[  380.422382][ T6783] hsr_slave_1: left promiscuous mode
[  380.441491][ T6783] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  380.451458][ T6783] batman_adv: batadv0: Removing interface: batadv_slave_0
[  380.467048][ T6783] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  380.489804][ T6783] batman_adv: batadv0: Removing interface: batadv_slave_1
[  380.569675][T13895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2541'.
[  380.592996][ T6783] veth1_macvtap: left promiscuous mode
[  380.601940][ T6783] veth0_macvtap: left promiscuous mode
[  380.611716][ T6783] veth1_vlan: left promiscuous mode
[  380.631064][ T6783] veth0_vlan: left promiscuous mode
[  381.178902][ T6783] team0 (unregistering): Port device team_slave_1 removed
[  381.228835][ T6783] team0 (unregistering): Port device team_slave_0 removed
[  381.790568][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2542'.
[  381.813371][T13898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2542'.
[  381.893450][T13847] chnl_net:caif_netlink_parms(): no params data found
[  382.071090][T13908] netem: incorrect gi model size
[  382.081323][T13908] netem: change failed
[  382.312271][T13920] Cannot find del_set index 2 as target
[  382.340526][T13847] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.353710][T13847] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.362443][T13847] bridge_slave_0: entered allmulticast mode
[  382.375627][T13847] bridge_slave_0: entered promiscuous mode
[  382.385295][T13847] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.395621][ T9760] Bluetooth: hci0: command tx timeout
[  382.410899][T13847] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.419119][T13847] bridge_slave_1: entered allmulticast mode
[  382.429170][T13847] bridge_slave_1: entered promiscuous mode
[  382.628062][T13847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  382.675518][T13925] netlink: 'syz.4.2549': attribute type 11 has an invalid length.
[  382.752777][T13933] Bluetooth: MGMT ver 1.23
[  382.856395][T13847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  383.074564][T13847] team0: Port device team_slave_0 added
[  383.199080][T13847] team0: Port device team_slave_1 added
[  383.238680][T13943] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  383.452395][T13943] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  383.470389][T13847] batman_adv: batadv0: Adding interface: batadv_slave_0
[  383.478198][T13847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  383.505561][T13847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  383.548457][T13847] batman_adv: batadv0: Adding interface: batadv_slave_1
[  383.555552][T13847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  383.618349][T13847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  383.654117][T13943] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  383.656596][T13951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2555'.
[  383.674899][T13943] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  384.011173][T13847] hsr_slave_0: entered promiscuous mode
[  384.049721][T13847] hsr_slave_1: entered promiscuous mode
[  384.466425][ T9760] Bluetooth: hci0: command tx timeout
[  384.667017][T13991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2567'.
[  385.377684][T14011] bridge_slave_0: left allmulticast mode
[  385.384366][T14011] bridge_slave_0: left promiscuous mode
[  385.398890][T14011] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.417226][T14011] bridge_slave_1: left allmulticast mode
[  385.422946][T14011] bridge_slave_1: left promiscuous mode
[  385.493248][T14011] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.511502][T14011] bond0: (slave bond_slave_0): Releasing backup interface
[  385.524961][T14011] bond_slave_0: left promiscuous mode
[  385.549707][T14011] bond0: (slave bond_slave_1): Releasing backup interface
[  385.590966][T14011] bond_slave_1: left promiscuous mode
[  385.604086][T14011] batman_adv: batadv0: Removing interface: batadv_slave_0
[  385.617276][T14011] batman_adv: batadv0: Removing interface: batadv_slave_1
[  385.639520][T14011] vxlan0: left allmulticast mode
[  385.644799][T14011] vxlan0: left promiscuous mode
[  385.655747][T14011] bridge0: port 3(vxlan0) entered disabled state
[  385.669947][T14011] batman_adv: batadv0: Interface deactivated: macsec1
[  385.684396][T14011] batman_adv: batadv0: Removing interface: macsec1
[  386.133158][T14029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  386.385904][T14043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  386.484954][T13847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  386.660957][T13847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  386.720549][T14057] sctp: [Deprecated]: syz.3.2588 (pid 14057) Use of struct sctp_assoc_value in delayed_ack socket option.
[  386.720549][T14057] Use struct sctp_sack_info instead
[  386.782142][T13847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  386.797673][T14057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2588'.
[  386.809447][T14057] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2588'.
[  386.828858][T13847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  387.070305][ T2920] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  387.150770][T13847] 8021q: adding VLAN 0 to HW filter on device bond0
[  387.183162][T13847] 8021q: adding VLAN 0 to HW filter on device team0
[  387.243565][ T6783] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.250874][ T6783] bridge0: port 1(bridge_slave_0) entered forwarding state
[  387.295746][ T6783] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.303393][ T6783] bridge0: port 2(bridge_slave_1) entered forwarding state
[  387.458727][T14075] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  387.542690][T14075] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  387.627022][T14084] FAULT_INJECTION: forcing a failure.
[  387.627022][T14084] name failslab, interval 1, probability 0, space 0, times 0
[  387.658592][T14084] CPU: 1 UID: 0 PID: 14084 Comm: syz.0.2598 Not tainted 6.15.0-rc7-syzkaller-01671-gd09a8a4ab578 #0 PREEMPT(full) 
[  387.658616][T14084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  387.658626][T14084] Call Trace:
[  387.658632][T14084]  <TASK>
[  387.658638][T14084]  dump_stack_lvl+0x189/0x250
[  387.658669][T14084]  ? __pfx_dump_stack_lvl+0x10/0x10
[  387.658698][T14084]  ? __pfx__printk+0x10/0x10
[  387.658736][T14084]  should_fail_ex+0x414/0x560
[  387.658766][T14084]  should_failslab+0xa8/0x100
[  387.658797][T14084]  __kmalloc_cache_noprof+0x70/0x3d0
[  387.658818][T14084]  ? sctp_add_bind_addr+0x8c/0x370
[  387.658839][T14084]  sctp_add_bind_addr+0x8c/0x370
[  387.658860][T14084]  sctp_copy_local_addr_list+0x30b/0x4e0
[  387.658881][T14084]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  387.658898][T14084]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  387.658929][T14084]  ? sctp_v4_is_any+0x35/0x60
[  387.658954][T14084]  ? sctp_copy_one_addr+0x93/0x360
[  387.658983][T14084]  sctp_bind_addr_copy+0xb3/0x3c0
[  387.659009][T14084]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  387.659028][T14084]  sctp_connect_new_asoc+0x2e0/0x690
[  387.659052][T14084]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  387.659072][T14084]  ? __local_bh_enable_ip+0x12d/0x1c0
[  387.659093][T14084]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  387.659112][T14084]  ? security_sctp_bind_connect+0x7e/0x2e0
[  387.659129][T14084]  sctp_sendmsg+0x155c/0x2810
[  387.659160][T14084]  ? __pfx_sctp_sendmsg+0x10/0x10
[  387.659184][T14084]  ? aa_sk_perm+0x81e/0x950
[  387.659204][T14084]  ? __pfx_aa_sk_perm+0x10/0x10
[  387.659223][T14084]  ? sock_rps_record_flow+0x19/0x410
[  387.659242][T14084]  ? inet_sendmsg+0x2f4/0x370
[  387.659262][T14084]  __sock_sendmsg+0x19c/0x270
[  387.659282][T14084]  ____sys_sendmsg+0x52d/0x830
[  387.659314][T14084]  ? __pfx_____sys_sendmsg+0x10/0x10
[  387.659344][T14084]  ? import_iovec+0x74/0xa0
[  387.659369][T14084]  ___sys_sendmsg+0x21f/0x2a0
[  387.659393][T14084]  ? __pfx____sys_sendmsg+0x10/0x10
[  387.659445][T14084]  ? __fget_files+0x2a/0x420
[  387.659464][T14084]  ? __fget_files+0x3a0/0x420
[  387.659521][T14084]  __sys_sendmmsg+0x227/0x430
[  387.659548][T14084]  ? __pfx___sys_sendmmsg+0x10/0x10
[  387.659578][T14084]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  387.659610][T14084]  ? ksys_write+0x1f0/0x250
[  387.659626][T14084]  ? rcu_is_watching+0x15/0xb0
[  387.659649][T14084]  __x64_sys_sendmmsg+0xa0/0xc0
[  387.659673][T14084]  do_syscall_64+0xf6/0x210
[  387.659691][T14084]  ? clear_bhb_loop+0x60/0xb0
[  387.659710][T14084]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.659724][T14084] RIP: 0033:0x7fd74f38e969
[  387.659738][T14084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  387.659751][T14084] RSP: 002b:00007fd74d1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  387.659767][T14084] RAX: ffffffffffffffda RBX: 00007fd74f5b5fa0 RCX: 00007fd74f38e969
[  387.659779][T14084] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003
[  387.659788][T14084] RBP: 00007fd74d1f6090 R08: 0000000000000000 R09: 0000000000000000
[  387.659797][T14084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  387.659809][T14084] R13: 0000000000000000 R14: 00007fd74f5b5fa0 R15: 00007ffc7483b3d8
[  387.659844][T14084]  </TASK>
[  387.662847][T14075] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  388.090589][T14075] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  388.323231][T14097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2601'.
[  388.451004][T14075] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  388.493162][T14075] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  388.517579][T14090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2599'.
[  388.544041][T14075] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  388.594948][T13847] 8021q: adding VLAN 0 to HW filter on device batadv0
[  388.622171][T14075] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  388.965980][T13847] veth0_vlan: entered promiscuous mode
[  389.027949][T13847] veth1_vlan: entered promiscuous mode
[  389.218626][T14124] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2608'.
[  389.236424][T14124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2608'.
[  389.295322][T13847] veth0_macvtap: entered promiscuous mode
[  389.349629][T13847] veth1_macvtap: entered promiscuous mode
[  389.555614][T13847] batman_adv: batadv0: Interface activated: batadv_slave_0
[  389.601067][T13847] batman_adv: batadv0: Interface activated: batadv_slave_1
[  389.623121][T13847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  389.638841][T13847] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  389.650892][T13847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  389.663232][T13847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  389.954988][T14142] netlink: 'syz.4.2612': attribute type 15 has an invalid length.
[  389.963546][T14142] netlink: 'syz.4.2612': attribute type 3 has an invalid length.
[  389.971413][T14142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2612'.
[  389.991809][   T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.021504][   T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.163763][ T6783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.172924][ T6783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.183865][T14153] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2617'.
[  390.215436][T14153] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2617'.
[  390.243783][T14153] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2617'.
[  390.334527][T14155] x_tables: duplicate underflow at hook 1
[  390.823665][T14181] 8021q: VLANs not supported on team0
[  391.012287][T14185] netlink: 'syz.1.2627': attribute type 15 has an invalid length.
[  391.032008][T14185] netlink: 'syz.1.2627': attribute type 3 has an invalid length.
[  391.047597][T14185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2627'.
[  391.084160][ T2920] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.327015][ T2920] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.425523][ T2920] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.502122][ T2920] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.693403][ T2920] bridge_slave_1: left allmulticast mode
[  391.699232][ T2920] bridge_slave_1: left promiscuous mode
[  391.706677][ T2920] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.717102][ T2920] bridge_slave_0: left allmulticast mode
[  391.722791][ T2920] bridge_slave_0: left promiscuous mode
[  391.728831][ T2920] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.081873][ T2920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  392.095353][ T2920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  392.105900][ T2920] bond0 (unregistering): Released all slaves
[  392.294260][ T2920] hsr_slave_0: left promiscuous mode
[  392.300768][ T2920] hsr_slave_1: left promiscuous mode
[  392.307355][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  392.314824][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_0
[  392.323101][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  392.331713][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_1
[  392.354001][ T2920] veth1_macvtap: left promiscuous mode
[  392.359675][ T2920] veth0_macvtap: left promiscuous mode
[  392.365319][ T2920] veth1_vlan: left promiscuous mode
[  392.370878][ T2920] veth0_vlan: left promiscuous mode
[  392.890664][T14190] FAULT_INJECTION: forcing a failure.
[  392.890664][T14190] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  392.936406][T14196] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2631'.
[  392.946050][T14190] CPU: 0 UID: 0 PID: 14190 Comm: syz.0.2628 Not tainted 6.15.0-rc7-syzkaller-01671-gd09a8a4ab578 #0 PREEMPT(full) 
[  392.946081][T14190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  392.946093][T14190] Call Trace:
[  392.946101][T14190]  <TASK>
[  392.946109][T14190]  dump_stack_lvl+0x189/0x250
[  392.946142][T14190]  ? __lock_acquire+0xaac/0xd20
[  392.946181][T14190]  ? __pfx_dump_stack_lvl+0x10/0x10
[  392.946212][T14190]  ? __pfx__printk+0x10/0x10
[  392.946233][T14190]  ? __might_fault+0xb0/0x130
[  392.946274][T14190]  should_fail_ex+0x414/0x560
[  392.946303][T14190]  _copy_from_iter+0x1db/0x15a0
[  392.946347][T14190]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  392.946372][T14190]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  392.946401][T14190]  ? __pfx__copy_from_iter+0x10/0x10
[  392.946431][T14190]  ? __build_skb_around+0x257/0x3e0
[  392.946464][T14190]  ? netlink_sendmsg+0x642/0xb30
[  392.946492][T14190]  ? skb_put+0x11b/0x210
[  392.946531][T14190]  netlink_sendmsg+0x6b2/0xb30
[  392.946572][T14190]  ? __pfx_netlink_sendmsg+0x10/0x10
[  392.946606][T14190]  ? aa_sock_msg_perm+0x94/0x160
[  392.946633][T14190]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  392.946657][T14190]  ? __pfx_netlink_sendmsg+0x10/0x10
[  392.946688][T14190]  __sock_sendmsg+0x21c/0x270
[  392.946715][T14190]  ____sys_sendmsg+0x505/0x830
[  392.946753][T14190]  ? __pfx_____sys_sendmsg+0x10/0x10
[  392.946795][T14190]  ? import_iovec+0x74/0xa0
[  392.946829][T14190]  ___sys_sendmsg+0x21f/0x2a0
[  392.946863][T14190]  ? __pfx____sys_sendmsg+0x10/0x10
[  392.946936][T14190]  ? __fget_files+0x2a/0x420
[  392.946964][T14190]  ? __fget_files+0x3a0/0x420
[  392.947003][T14190]  __x64_sys_sendmsg+0x19b/0x260
[  392.947038][T14190]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  392.947090][T14190]  ? do_syscall_64+0xba/0x210
[  392.947117][T14190]  do_syscall_64+0xf6/0x210
[  392.947141][T14190]  ? clear_bhb_loop+0x60/0xb0
[  392.947167][T14190]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.947187][T14190] RIP: 0033:0x7fd74f38e969
[  392.947205][T14190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  392.947224][T14190] RSP: 002b:00007fd74d1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  392.947246][T14190] RAX: ffffffffffffffda RBX: 00007fd74f5b5fa0 RCX: 00007fd74f38e969
[  392.947261][T14190] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  392.947273][T14190] RBP: 00007fd74d1f6090 R08: 0000000000000000 R09: 0000000000000000
[  392.947285][T14190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  392.947297][T14190] R13: 0000000000000000 R14: 00007fd74f5b5fa0 R15: 00007ffc7483b3d8
[  392.947340][T14190]  </TASK>
[  393.260944][ T2920] team0 (unregistering): Port device team_slave_1 removed
[  393.336589][ T2920] team0 (unregistering): Port device team_slave_0 removed
[  393.562775][T14207] netlink: 'syz.0.2633': attribute type 13 has an invalid length.
[  393.662845][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  393.687367][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  393.695617][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  393.710974][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  393.729299][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  394.147265][T14211] gtp2: entered promiscuous mode
[  394.153323][T14211] team0: Port device gtp2 added
[  394.304811][T14215] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2635'.
[  394.487204][T14222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2637'.
[  394.610647][T14222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2637'.
[  394.694786][T14222] vlan3: entered promiscuous mode
[  394.703915][T14222] macsec0: entered promiscuous mode
[  395.150314][T14208] chnl_net:caif_netlink_parms(): no params data found
[  395.512606][T14208] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.528066][T14259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  395.533584][T14208] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.565062][T14208] bridge_slave_0: entered allmulticast mode
[  395.592680][T14208] bridge_slave_0: entered promiscuous mode
[  395.626943][T14208] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.656126][T14208] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.664029][T14208] bridge_slave_1: entered allmulticast mode
[  395.689873][T14208] bridge_slave_1: entered promiscuous mode
[  395.748854][T14267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2655'.
[  395.794212][T14267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2655'.
[  395.831493][ T5828] Bluetooth: hci0: command tx timeout
[  395.843937][T14208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  395.909216][T14276] netlink: 'syz.3.2658': attribute type 15 has an invalid length.
[  395.909555][T14208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  395.917682][T14276] netlink: 'syz.3.2658': attribute type 3 has an invalid length.
[  395.917703][T14276] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2658'.
[  396.228572][T14208] team0: Port device team_slave_0 added
[  396.272518][T14208] team0: Port device team_slave_1 added
[  396.638961][T14208] batman_adv: batadv0: Adding interface: batadv_slave_0
[  396.663133][T14208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  396.734564][T14208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  396.780156][T14208] batman_adv: batadv0: Adding interface: batadv_slave_1
[  396.799510][T14208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  396.831845][T14208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  397.002891][T14208] hsr_slave_0: entered promiscuous mode
[  397.014654][T14208] hsr_slave_1: entered promiscuous mode
[  397.836496][   T13] wlan0: Trigger new scan to find an IBSS to join
[  397.852767][T14341] netlink: 'syz.3.2673': attribute type 15 has an invalid length.
[  397.875279][T14341] netlink: 'syz.3.2673': attribute type 3 has an invalid length.
[  397.894251][T14341] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2673'.
[  397.916191][ T5828] Bluetooth: hci0: command tx timeout
[  398.143007][T14352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2678'.
[  398.187638][T14355] netlink: 'syz.1.2677': attribute type 4 has an invalid length.
[  398.263283][T14356] netlink: 'syz.1.2677': attribute type 4 has an invalid length.
[  398.686244][T14208] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  398.708863][T14368] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2682'.
[  398.722904][T14208] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  398.761141][T14208] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  398.806022][T14369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2680'.
[  398.847044][T14208] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  398.990431][T14378] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 47764 - 0
[  399.008839][T14378] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 35379 - 0
[  399.022705][T14378] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  399.115384][T14378] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 47764 - 0
[  399.130544][T14378] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 35379 - 0
[  399.149609][T14378] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  399.250344][T14378] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 47764 - 0
[  399.265403][T14378] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 35379 - 0
[  399.285906][T14378] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  399.398591][T14378] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 47764 - 0
[  399.414209][T14378] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 35379 - 0
[  399.432046][T14387] __nla_validate_parse: 2 callbacks suppressed
[  399.432067][T14387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2689'.
[  399.446126][T14378] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  399.552581][T14389] netlink: 'syz.1.2690': attribute type 15 has an invalid length.
[  399.561424][T14389] netlink: 'syz.1.2690': attribute type 3 has an invalid length.
[  399.571319][T14389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2690'.
[  399.611278][T14208] 8021q: adding VLAN 0 to HW filter on device bond0
[  399.657475][T14208] 8021q: adding VLAN 0 to HW filter on device team0
[  399.697240][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.704451][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  399.727503][T14378] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 47764 - 0
[  399.750624][T14378] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 35379 - 0
[  399.769215][T14378] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  399.800500][T14378] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 47764 - 0
[  399.809152][T14378] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 35379 - 0
[  399.826442][T14378] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  399.847991][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.855266][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  399.873642][T14392] vlan0: entered promiscuous mode
[  399.900891][T14392] bond0: entered promiscuous mode
[  399.904246][T14397] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2691'.
[  399.926470][T14397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2691'.
[  399.935511][T14397] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2691'.
[  399.953749][T14378] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 47764 - 0
[  399.975954][T14378] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 35379 - 0
[  399.991242][ T5828] Bluetooth: hci0: command tx timeout
[  399.997411][T14378] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  400.088702][T14378] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 47764 - 0
[  400.102085][T14378] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 35379 - 0
[  400.113027][T14378] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  400.170901][T14402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2695'.
[  400.378475][T14413] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2699'.
[  400.557340][T14423] netlink: 'syz.3.2703': attribute type 15 has an invalid length.
[  400.660824][T14423] netlink: 'syz.3.2703': attribute type 3 has an invalid length.
[  400.718628][T14423] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2703'.
[  400.849796][T14208] 8021q: adding VLAN 0 to HW filter on device batadv0
[  400.867045][T14434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2706'.
[  400.877967][T14433] vlan0: entered promiscuous mode
[  401.304773][T14208] veth0_vlan: entered promiscuous mode
[  401.331310][T14208] veth1_vlan: entered promiscuous mode
[  401.429155][T14208] veth0_macvtap: entered promiscuous mode
[  401.479847][T14208] veth1_macvtap: entered promiscuous mode
[  401.691186][T14208] batman_adv: batadv0: Interface activated: batadv_slave_0
[  401.711514][T14208] batman_adv: batadv0: Interface activated: batadv_slave_1
[  401.858421][T14208] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  401.872348][T14208] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.882135][T14208] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.897277][T14208] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  401.991373][T14479] netlink: 'syz.0.2719': attribute type 15 has an invalid length.
[  402.001411][T14479] netlink: 'syz.0.2719': attribute type 3 has an invalid length.
[  402.010282][T14479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2719'.
[  402.065986][ T5828] Bluetooth: hci0: command tx timeout
[  402.451736][T14494] netlink: 'syz.1.2727': attribute type 12 has an invalid length.
[  402.486303][ T6783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  402.494576][ T6783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.663357][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  402.692491][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.774846][T14504] netlink: 'syz.1.2730': attribute type 15 has an invalid length.
[  402.783064][T14504] netlink: 'syz.1.2730': attribute type 3 has an invalid length.
[  402.796793][   T82] wlan0: Trigger new scan to find an IBSS to join
[  403.035119][T14512] bond4: entered allmulticast mode
[  403.042119][T14512] 8021q: adding VLAN 0 to HW filter on device bond4
[  403.107182][T14516] vlan6: entered promiscuous mode
[  403.177195][T14512] hsr0: entered promiscuous mode
[  403.188755][T14512] hsr0: entered allmulticast mode
[  403.204073][T14512] hsr_slave_0: entered allmulticast mode
[  403.214209][T14512] hsr_slave_1: entered allmulticast mode
[  403.226983][T14512] bond4: (slave hsr0): The slave device specified does not support setting the MAC address
[  403.247015][T14512] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  403.265615][T14512] bond4: (slave hsr0): Error -22 calling dev_set_mtu
[  403.390597][ T6783] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.592792][ T6783] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.818029][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  403.872368][ T6783] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.930962][ T6783] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.039867][ T6783] bridge_slave_1: left allmulticast mode
[  404.045575][ T6783] bridge_slave_1: left promiscuous mode
[  404.051471][ T6783] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.061056][ T6783] bridge_slave_0: left allmulticast mode
[  404.067409][ T6783] bridge_slave_0: left promiscuous mode
[  404.074015][ T6783] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.395017][ T6783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  404.409473][ T6783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  404.420031][ T6783] bond0 (unregistering): Released all slaves
[  404.654429][ T6783] hsr_slave_0: left promiscuous mode
[  404.660975][ T6783] hsr_slave_1: left promiscuous mode
[  404.667489][ T6783] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  404.674917][ T6783] batman_adv: batadv0: Removing interface: batadv_slave_0
[  404.685006][ T6783] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  404.692537][ T6783] batman_adv: batadv0: Removing interface: batadv_slave_1
[  404.714231][ T6783] veth1_macvtap: left promiscuous mode
[  404.720125][ T6783] veth0_macvtap: left promiscuous mode
[  404.725777][ T6783] veth1_vlan: left promiscuous mode
[  404.731095][ T6783] veth0_vlan: left promiscuous mode
[  405.125607][T14526] __nla_validate_parse: 4 callbacks suppressed
[  405.125626][T14526] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2738'.
[  405.142497][T14524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2736'.
[  405.682055][T14543] netlink: 'syz.4.2743': attribute type 15 has an invalid length.
[  405.706285][T14543] netlink: 'syz.4.2743': attribute type 3 has an invalid length.
[  405.719551][T14543] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2743'.
[  405.733674][ T6783] team0 (unregistering): Port device team_slave_1 removed
[  405.821898][ T6783] team0 (unregistering): Port device team_slave_0 removed
[  405.835075][ T9760] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  405.855133][ T9760] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  405.867108][ T9760] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  405.891357][ T9760] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  405.912572][ T9760] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  406.599853][T14558] gtp2: entered promiscuous mode
[  406.619008][T14558] team0: Port device gtp2 added
[  406.748086][T14566] FAULT_INJECTION: forcing a failure.
[  406.748086][T14566] name failslab, interval 1, probability 0, space 0, times 0
[  406.761840][T14566] CPU: 0 UID: 0 PID: 14566 Comm: syz.4.2749 Not tainted 6.15.0-rc7-syzkaller-01671-gd09a8a4ab578 #0 PREEMPT(full) 
[  406.761869][T14566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  406.761883][T14566] Call Trace:
[  406.761892][T14566]  <TASK>
[  406.761901][T14566]  dump_stack_lvl+0x189/0x250
[  406.761941][T14566]  ? __pfx_dump_stack_lvl+0x10/0x10
[  406.761972][T14566]  ? __pfx__printk+0x10/0x10
[  406.762010][T14566]  should_fail_ex+0x414/0x560
[  406.762039][T14566]  should_failslab+0xa8/0x100
[  406.762070][T14566]  __kmalloc_cache_noprof+0x70/0x3d0
[  406.762097][T14566]  ? sctp_add_bind_addr+0x8c/0x370
[  406.762127][T14566]  sctp_add_bind_addr+0x8c/0x370
[  406.762160][T14566]  sctp_copy_local_addr_list+0x30b/0x4e0
[  406.762187][T14566]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  406.762208][T14566]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  406.762232][T14566]  ? sctp_v4_is_any+0x35/0x60
[  406.762256][T14566]  ? sctp_copy_one_addr+0x93/0x360
[  406.762284][T14566]  sctp_bind_addr_copy+0xb3/0x3c0
[  406.762310][T14566]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  406.762336][T14566]  sctp_connect_new_asoc+0x2e0/0x690
[  406.762370][T14566]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  406.762399][T14566]  ? __local_bh_enable_ip+0x12d/0x1c0
[  406.762427][T14566]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  406.762452][T14566]  ? security_sctp_bind_connect+0x7e/0x2e0
[  406.762477][T14566]  sctp_sendmsg+0x155c/0x2810
[  406.762523][T14566]  ? __pfx_sctp_sendmsg+0x10/0x10
[  406.762556][T14566]  ? aa_sk_perm+0x81e/0x950
[  406.762583][T14566]  ? __pfx_aa_sk_perm+0x10/0x10
[  406.762609][T14566]  ? sock_rps_record_flow+0x19/0x410
[  406.762636][T14566]  ? inet_sendmsg+0x2f4/0x370
[  406.762664][T14566]  __sock_sendmsg+0x19c/0x270
[  406.762692][T14566]  ____sys_sendmsg+0x52d/0x830
[  406.762730][T14566]  ? __pfx_____sys_sendmsg+0x10/0x10
[  406.762771][T14566]  ? import_iovec+0x74/0xa0
[  406.762805][T14566]  ___sys_sendmsg+0x21f/0x2a0
[  406.762839][T14566]  ? __pfx____sys_sendmsg+0x10/0x10
[  406.762914][T14566]  ? __fget_files+0x2a/0x420
[  406.762942][T14566]  ? __fget_files+0x3a0/0x420
[  406.762981][T14566]  __sys_sendmmsg+0x227/0x430
[  406.763018][T14566]  ? __pfx___sys_sendmmsg+0x10/0x10
[  406.763055][T14566]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  406.763099][T14566]  ? ksys_write+0x1f0/0x250
[  406.763122][T14566]  ? rcu_is_watching+0x15/0xb0
[  406.763175][T14566]  __x64_sys_sendmmsg+0xa0/0xc0
[  406.763210][T14566]  do_syscall_64+0xf6/0x210
[  406.763235][T14566]  ? clear_bhb_loop+0x60/0xb0
[  406.763261][T14566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.763281][T14566] RIP: 0033:0x7f263558e969
[  406.763300][T14566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  406.763318][T14566] RSP: 002b:00007f2636442038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  406.763340][T14566] RAX: ffffffffffffffda RBX: 00007f26357b5fa0 RCX: 00007f263558e969
[  406.763355][T14566] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003
[  406.763368][T14566] RBP: 00007f2636442090 R08: 0000000000000000 R09: 0000000000000000
[  406.763381][T14566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  406.763393][T14566] R13: 0000000000000000 R14: 00007f26357b5fa0 R15: 00007ffe40509738
[  406.763428][T14566]  </TASK>
[  407.380267][T14574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2752'.
[  407.596316][T14560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2745'.
[  407.759834][T14596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2758'.
[  407.782916][T14595] netlink: 'syz.3.2760': attribute type 1 has an invalid length.
[  407.786418][T14596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2758'.
[  407.969255][T14595] 8021q: adding VLAN 0 to HW filter on device bond5
[  407.986749][ T5828] Bluetooth: hci0: command tx timeout
[  408.020494][T14597] ip6erspan0: entered promiscuous mode
[  408.058947][T14597] bond5: (slave ip6erspan0): making interface the new active one
[  408.091663][T14597] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link
[  408.144353][T14546] chnl_net:caif_netlink_parms(): no params data found
[  408.340206][T14614] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2764'.
[  408.506627][T14546] bridge0: port 1(bridge_slave_0) entered blocking state
[  408.520339][T14546] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.537474][T14546] bridge_slave_0: entered allmulticast mode
[  408.551375][T14546] bridge_slave_0: entered promiscuous mode
[  408.619120][T14546] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.626956][T14546] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.634237][T14546] bridge_slave_1: entered allmulticast mode
[  408.642646][T14546] bridge_slave_1: entered promiscuous mode
[  408.784377][T14546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  408.821561][T14634] Bluetooth: MGMT ver 1.23
[  408.830530][T14634] FAULT_INJECTION: forcing a failure.
[  408.830530][T14634] name failslab, interval 1, probability 0, space 0, times 0
[  408.863638][T14634] CPU: 0 UID: 0 PID: 14634 Comm: syz.4.2770 Not tainted 6.15.0-rc7-syzkaller-01671-gd09a8a4ab578 #0 PREEMPT(full) 
[  408.863669][T14634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  408.863681][T14634] Call Trace:
[  408.863689][T14634]  <TASK>
[  408.863699][T14634]  dump_stack_lvl+0x189/0x250
[  408.863737][T14634]  ? __pfx_dump_stack_lvl+0x10/0x10
[  408.863773][T14634]  ? __pfx__printk+0x10/0x10
[  408.863811][T14634]  should_fail_ex+0x414/0x560
[  408.863840][T14634]  should_failslab+0xa8/0x100
[  408.863871][T14634]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  408.863900][T14634]  ? __alloc_skb+0x112/0x2d0
[  408.863933][T14634]  __alloc_skb+0x112/0x2d0
[  408.863966][T14634]  create_monitor_ctrl_event+0x38/0x480
[  408.864001][T14634]  mgmt_cmd_complete+0x20f/0x590
[  408.864039][T14634]  get_phy_configuration+0x4e9/0x690
[  408.864076][T14634]  ? __pfx_get_phy_configuration+0x10/0x10
[  408.864119][T14634]  hci_mgmt_cmd+0x9c6/0xef0
[  408.864165][T14634]  hci_sock_sendmsg+0x6ca/0xef0
[  408.864201][T14634]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  408.864231][T14634]  ? aa_sock_msg_perm+0x94/0x160
[  408.864258][T14634]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  408.864283][T14634]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  408.864313][T14634]  __sock_sendmsg+0x21c/0x270
[  408.864342][T14634]  sock_write_iter+0x258/0x330
[  408.864367][T14634]  ? __pfx_sock_write_iter+0x10/0x10
[  408.864402][T14634]  ? bpf_lsm_file_permission+0x9/0x20
[  408.864428][T14634]  ? security_file_permission+0x75/0x290
[  408.864459][T14634]  vfs_write+0x548/0xa90
[  408.864490][T14634]  ? __pfx_sock_write_iter+0x10/0x10
[  408.864513][T14634]  ? __pfx_vfs_write+0x10/0x10
[  408.864550][T14634]  ? __fget_files+0x2a/0x420
[  408.864589][T14634]  ksys_write+0x145/0x250
[  408.864613][T14634]  ? rcu_is_watching+0x15/0xb0
[  408.864635][T14634]  ? __pfx_ksys_write+0x10/0x10
[  408.864665][T14634]  ? do_syscall_64+0xba/0x210
[  408.864693][T14634]  do_syscall_64+0xf6/0x210
[  408.864716][T14634]  ? clear_bhb_loop+0x60/0xb0
[  408.864742][T14634]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.864787][T14634] RIP: 0033:0x7f263558e969
[  408.864807][T14634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  408.864826][T14634] RSP: 002b:00007f2636442038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  408.864848][T14634] RAX: ffffffffffffffda RBX: 00007f26357b5fa0 RCX: 00007f263558e969
[  408.864863][T14634] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000005
[  408.864875][T14634] RBP: 00007f2636442090 R08: 0000000000000000 R09: 0000000000000000
[  408.864889][T14634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  408.864901][T14634] R13: 0000000000000000 R14: 00007f26357b5fa0 R15: 00007ffe40509738
[  408.864935][T14634]  </TASK>
[  409.217213][T14546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  409.593063][T14639] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2769'.
[  409.719277][T14546] team0: Port device team_slave_0 added
[  410.083372][ T5828] Bluetooth: hci0: command tx timeout
[  410.850190][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2781'.
[  411.814554][T14546] team0: Port device team_slave_1 added
[  411.973791][T14701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2783'.
[  412.014307][T14546] batman_adv: batadv0: Adding interface: batadv_slave_0
[  412.037182][T14546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  412.103857][T14546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  412.146668][ T5828] Bluetooth: hci0: command tx timeout
[  412.174968][T14706] gtp3: entered promiscuous mode
[  412.182169][T14706] team0: Port device gtp3 added
[  412.188890][T14546] batman_adv: batadv0: Adding interface: batadv_slave_1
[  412.196513][T14546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  412.233163][T14546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  412.326021][T14713] netpci0: tun_chr_ioctl cmd 1074025681
[  412.335662][T14710] netlink: 'syz.0.2788': attribute type 1 has an invalid length.
[  412.725936][T14725] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2792'.
[  412.979397][T14732] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2792'.
[  414.226944][ T5828] Bluetooth: hci0: command tx timeout
[  414.241820][T14546] hsr_slave_0: entered promiscuous mode
[  414.248483][T14546] hsr_slave_1: entered promiscuous mode
[  414.429115][T14734] netlink: 'syz.1.2793': attribute type 15 has an invalid length.
[  414.437544][T14734] netlink: 'syz.1.2793': attribute type 3 has an invalid length.
[  414.445286][T14734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2793'.
[  414.862965][T14747] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2797'.
[  415.217310][T14768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2804'.
[  415.372746][T14778] netlink: 'syz.1.2808': attribute type 15 has an invalid length.
[  415.386217][T14778] netlink: 'syz.1.2808': attribute type 3 has an invalid length.
[  415.393259][T14775] vlan0: entered promiscuous mode
[  415.393981][T14778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2808'.
[  415.530307][T14768] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2804'.
[  415.789284][T14546] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  415.811893][T14546] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  416.018223][T14798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2809'.
[  416.051329][T14546] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  416.115359][T14546] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  416.322520][T14546] 8021q: adding VLAN 0 to HW filter on device bond0
[  416.332813][T14815] FAULT_INJECTION: forcing a failure.
[  416.332813][T14815] name failslab, interval 1, probability 0, space 0, times 0
[  416.375845][T14815] CPU: 1 UID: 0 PID: 14815 Comm: syz.3.2815 Not tainted 6.15.0-rc7-syzkaller-01671-gd09a8a4ab578 #0 PREEMPT(full) 
[  416.375877][T14815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  416.375890][T14815] Call Trace:
[  416.375899][T14815]  <TASK>
[  416.375908][T14815]  dump_stack_lvl+0x189/0x250
[  416.375947][T14815]  ? __pfx_dump_stack_lvl+0x10/0x10
[  416.375978][T14815]  ? __pfx__printk+0x10/0x10
[  416.376016][T14815]  should_fail_ex+0x414/0x560
[  416.376046][T14815]  should_failslab+0xa8/0x100
[  416.376077][T14815]  __kmalloc_cache_noprof+0x70/0x3d0
[  416.376113][T14815]  ? sctp_add_bind_addr+0x8c/0x370
[  416.376143][T14815]  sctp_add_bind_addr+0x8c/0x370
[  416.376174][T14815]  sctp_copy_local_addr_list+0x30b/0x4e0
[  416.376204][T14815]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  416.376229][T14815]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  416.376260][T14815]  ? sctp_v4_is_any+0x35/0x60
[  416.376283][T14815]  ? sctp_copy_one_addr+0x93/0x360
[  416.376312][T14815]  sctp_bind_addr_copy+0xb3/0x3c0
[  416.376337][T14815]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  416.376362][T14815]  sctp_connect_new_asoc+0x2e0/0x690
[  416.376394][T14815]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  416.376421][T14815]  ? __local_bh_enable_ip+0x12d/0x1c0
[  416.376448][T14815]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  416.376475][T14815]  ? security_sctp_bind_connect+0x7e/0x2e0
[  416.376499][T14815]  sctp_sendmsg+0x155c/0x2810
[  416.376544][T14815]  ? __pfx_sctp_sendmsg+0x10/0x10
[  416.376578][T14815]  ? aa_sk_perm+0x81e/0x950
[  416.376607][T14815]  ? __pfx_aa_sk_perm+0x10/0x10
[  416.376633][T14815]  ? sock_rps_record_flow+0x19/0x410
[  416.376661][T14815]  ? inet_sendmsg+0x2f4/0x370
[  416.376690][T14815]  __sock_sendmsg+0x19c/0x270
[  416.376718][T14815]  ____sys_sendmsg+0x52d/0x830
[  416.376757][T14815]  ? __pfx_____sys_sendmsg+0x10/0x10
[  416.376799][T14815]  ? import_iovec+0x74/0xa0
[  416.376835][T14815]  ___sys_sendmsg+0x21f/0x2a0
[  416.376870][T14815]  ? __pfx____sys_sendmsg+0x10/0x10
[  416.376945][T14815]  ? __fget_files+0x2a/0x420
[  416.376973][T14815]  ? __fget_files+0x3a0/0x420
[  416.377040][T14815]  __sys_sendmmsg+0x227/0x430
[  416.377079][T14815]  ? __pfx___sys_sendmmsg+0x10/0x10
[  416.377129][T14815]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  416.377174][T14815]  ? ksys_write+0x1f0/0x250
[  416.377197][T14815]  ? rcu_is_watching+0x15/0xb0
[  416.377229][T14815]  __x64_sys_sendmmsg+0xa0/0xc0
[  416.377262][T14815]  do_syscall_64+0xf6/0x210
[  416.377285][T14815]  ? clear_bhb_loop+0x60/0xb0
[  416.377311][T14815]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.377330][T14815] RIP: 0033:0x7f4cc1b8e969
[  416.377351][T14815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  416.377367][T14815] RSP: 002b:00007f4cc296b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  416.377388][T14815] RAX: ffffffffffffffda RBX: 00007f4cc1db5fa0 RCX: 00007f4cc1b8e969
[  416.377403][T14815] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003
[  416.377415][T14815] RBP: 00007f4cc296b090 R08: 0000000000000000 R09: 0000000000000000
[  416.377428][T14815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  416.377431][T14817] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2816'.
[  416.377439][T14815] R13: 0000000000000000 R14: 00007f4cc1db5fa0 R15: 00007ffd5bd3a418
[  416.377473][T14815]  </TASK>
[  416.481740][T14820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2817'.
[  416.492011][T14546] 8021q: adding VLAN 0 to HW filter on device team0
[  416.630926][T14825] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2817'.
[  416.678798][T14546] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  416.765869][T14825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2817'.
[  416.780410][T14825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2817'.
[  416.803239][T14830] netlink: 'syz.3.2820': attribute type 15 has an invalid length.
[  416.805874][T14546] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  416.813344][T14830] netlink: 'syz.3.2820': attribute type 3 has an invalid length.
[  416.851512][T14830] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2820'.
[  416.872799][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.880070][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state
[  416.913049][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.920315][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state
[  416.961999][T14823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2817'.
[  417.053248][T14840] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2821'.
[  417.335649][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2824'.
[  417.766228][T14546] 8021q: adding VLAN 0 to HW filter on device batadv0
[  417.873152][T14546] veth0_vlan: entered promiscuous mode
[  417.890472][T14546] veth1_vlan: entered promiscuous mode
[  417.947820][T14546] veth0_macvtap: entered promiscuous mode
[  417.982137][T14546] veth1_macvtap: entered promiscuous mode
[  418.050295][T14546] batman_adv: batadv0: Interface activated: batadv_slave_0
[  418.088856][T14546] batman_adv: batadv0: Interface activated: batadv_slave_1
[  418.122604][T14546] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  418.160541][T14546] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  418.171497][T14546] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  418.180633][T14546] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  418.501683][ T6783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.534642][ T6783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.656562][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.731062][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  419.314639][T14929] FAULT_INJECTION: forcing a failure.
[  419.314639][T14929] name failslab, interval 1, probability 0, space 0, times 0
[  419.343474][T14929] CPU: 1 UID: 0 PID: 14929 Comm: syz.4.2847 Not tainted 6.15.0-rc7-syzkaller-01671-gd09a8a4ab578 #0 PREEMPT(full) 
[  419.343523][T14929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  419.343546][T14929] Call Trace:
[  419.343560][T14929]  <TASK>
[  419.343575][T14929]  dump_stack_lvl+0x189/0x250
[  419.343640][T14929]  ? __pfx_dump_stack_lvl+0x10/0x10
[  419.343682][T14929]  ? __pfx__printk+0x10/0x10
[  419.343710][T14929]  ? __pfx___might_resched+0x10/0x10
[  419.343730][T14929]  ? fs_reclaim_acquire+0x7d/0x100
[  419.343767][T14929]  should_fail_ex+0x414/0x560
[  419.343797][T14929]  should_failslab+0xa8/0x100
[  419.343827][T14929]  __kmalloc_noprof+0xcb/0x4f0
[  419.343852][T14929]  ? kfree+0x4d/0x440
[  419.343874][T14929]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  419.343908][T14929]  tomoyo_realpath_from_path+0xe3/0x5d0
[  419.343938][T14929]  ? tomoyo_domain+0xda/0x130
[  419.343973][T14929]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  419.343996][T14929]  tomoyo_path_number_perm+0x1e8/0x5a0
[  419.344022][T14929]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  419.344065][T14929]  ? __lock_acquire+0xaac/0xd20
[  419.344124][T14929]  ? __fget_files+0x2a/0x420
[  419.344157][T14929]  ? __fget_files+0x3a0/0x420
[  419.344183][T14929]  ? __fget_files+0x2a/0x420
[  419.344216][T14929]  security_file_ioctl+0xcb/0x2d0
[  419.344241][T14929]  __se_sys_ioctl+0x47/0x170
[  419.344267][T14929]  do_syscall_64+0xf6/0x210
[  419.344292][T14929]  ? clear_bhb_loop+0x60/0xb0
[  419.344318][T14929]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.344337][T14929] RIP: 0033:0x7f263558e969
[  419.344356][T14929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  419.344374][T14929] RSP: 002b:00007f2636442038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  419.344396][T14929] RAX: ffffffffffffffda RBX: 00007f26357b5fa0 RCX: 00007f263558e969
[  419.344411][T14929] RDX: 0000200000000080 RSI: 000000000000890c RDI: 0000000000000004
[  419.344424][T14929] RBP: 00007f2636442090 R08: 0000000000000000 R09: 0000000000000000
[  419.344436][T14929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  419.344448][T14929] R13: 0000000000000000 R14: 00007f26357b5fa0 R15: 00007ffe40509738
[  419.344483][T14929]  </TASK>
[  419.572736][T14929] ERROR: Out of memory at tomoyo_realpath_from_path.
[  420.134790][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.448285][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.603599][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.711044][ T9760] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  420.720884][ T9760] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  420.730249][ T9760] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  420.738538][ T9760] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  420.746870][ T9760] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  420.820379][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.999178][   T13] bridge_slave_1: left allmulticast mode
[  421.004903][   T13] bridge_slave_1: left promiscuous mode
[  421.010716][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.021275][   T13] bridge_slave_0: left allmulticast mode
[  421.027348][   T13] bridge_slave_0: left promiscuous mode
[  421.033100][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.412806][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  421.424006][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  421.437532][   T13] bond0 (unregistering): Released all slaves
[  421.573035][T14954] chnl_net:caif_netlink_parms(): no params data found
[  421.753350][T14954] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.764193][T14954] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.772081][T14954] bridge_slave_0: entered allmulticast mode
[  421.781056][T14954] bridge_slave_0: entered promiscuous mode
[  421.792587][   T13] hsr_slave_0: left promiscuous mode
[  421.799362][   T13] hsr_slave_1: left promiscuous mode
[  421.805337][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  421.813822][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  421.822116][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  421.829779][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  421.851193][   T13] veth1_macvtap: left promiscuous mode
[  421.857159][   T13] veth0_macvtap: left promiscuous mode
[  421.862784][   T13] veth1_vlan: left promiscuous mode
[  421.868147][   T13] veth0_vlan: left promiscuous mode
[  422.646726][   T13] team0 (unregistering): Port device team_slave_1 removed
[  422.721259][ T9760] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  422.731831][   T13] team0 (unregistering): Port device team_slave_0 removed
[  422.732643][ T9760] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  422.751095][ T9760] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  422.761985][ T9760] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  422.782602][ T9760] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  422.796089][ T9760] Bluetooth: hci0: command tx timeout
[  423.264977][T14954] bridge0: port 2(bridge_slave_1) entered blocking state
[  423.272934][T14954] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.284027][T14954] bridge_slave_1: entered allmulticast mode
[  423.292571][T14954] bridge_slave_1: entered promiscuous mode
[  423.365615][T14974] vxlan1: left allmulticast mode
[  423.374552][T14974] vxlan1: left promiscuous mode
[  423.380053][T14974] bridge0: port 1(vxlan1) entered disabled state
[  423.415256][T14974] gtp1: left promiscuous mode
[  423.439052][T14974] team0: Port device gtp1 removed
[  423.450428][T14974] gtp2: left promiscuous mode
[  423.464905][T14974] team0: Port device gtp2 removed
[  423.474100][T14974] bond5: (slave ip6erspan0): Releasing active interface
[  423.503982][T14974] gtp3: left promiscuous mode
[  423.514293][T14974] team0: Port device gtp3 removed
[  423.554911][T14954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  423.584728][T14954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  423.755431][T14954] team0: Port device team_slave_0 added
[  423.777362][T14954] team0: Port device team_slave_1 added
[  423.938748][T14954] batman_adv: batadv0: Adding interface: batadv_slave_0
[  423.982057][T14954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  424.032873][T15001] __nla_validate_parse: 11 callbacks suppressed
[  424.032893][T15001] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2865'.
[  424.086181][T14954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  424.132236][T14954] batman_adv: batadv0: Adding interface: batadv_slave_1
[  424.152205][T14954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  424.203871][T14954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  424.476934][T14954] hsr_slave_0: entered promiscuous mode
[  424.484002][T14954] hsr_slave_1: entered promiscuous mode
[  424.687934][T15024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2872'.
[  424.763871][T15022] netlink: 'syz.0.2874': attribute type 1 has an invalid length.
[  424.775425][T15022] Bluetooth: MGMT ver 1.23
[  424.866444][ T5828] Bluetooth: hci0: command tx timeout
[  424.869531][ T9760] Bluetooth: hci2: command tx timeout
[  424.967093][T14975] chnl_net:caif_netlink_parms(): no params data found
[  425.029468][T15039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2878'.
[  425.253232][ T6783] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.424946][ T6783] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.554722][ T6783] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.597308][T14975] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.611260][T14975] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.635818][T14975] bridge_slave_0: entered allmulticast mode
[  425.664179][T14975] bridge_slave_0: entered promiscuous mode
[  425.707351][T14975] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.726216][T14975] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.734944][T15053] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2880'.
[  425.748096][T14975] bridge_slave_1: entered allmulticast mode
[  425.764577][T14975] bridge_slave_1: entered promiscuous mode
[  425.817757][ T6783] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.986839][T14975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  426.021277][T14975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  426.212430][T14975] team0: Port device team_slave_0 added
[  426.242804][T14975] team0: Port device team_slave_1 added
[  426.946380][ T9760] Bluetooth: hci2: command tx timeout
[  426.955928][ T9760] Bluetooth: hci0: command tx timeout
[  427.123060][T15081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2885'.
[  427.138544][T15081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2885'.
[  427.153560][T15081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2885'.
[  427.344024][T14975] batman_adv: batadv0: Adding interface: batadv_slave_0
[  427.371392][T14975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  427.417147][T14975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  427.438766][T14975] batman_adv: batadv0: Adding interface: batadv_slave_1
[  427.446129][T14975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  427.513822][T14975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  427.788986][T15102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2890'.
[  427.802655][T15102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2890'.
[  428.002584][ T6783] gtp1 (unregistering): left promiscuous mode
[  428.012991][ T6783] team0: Port device gtp1 removed
[  428.030831][ T6783] gtp0 (unregistering): left promiscuous mode
[  428.038269][ T6783] team0: Port device gtp0 removed
[  428.503467][ T6783] bond0 (unregistering): Released all slaves
[  428.595113][T14975] hsr_slave_0: entered promiscuous mode
[  428.606318][T14975] hsr_slave_1: entered promiscuous mode
[  428.612818][T14975] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  428.628260][T14975] Cannot create hsr debugfs directory
[  428.906291][T15118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2895'.
[  429.026343][ T9760] Bluetooth: hci0: command tx timeout
[  429.031614][ T5828] Bluetooth: hci2: command tx timeout
[  429.183957][T15124] xt_CT: No such helper "snmp"
[  429.479990][T15134] FAULT_INJECTION: forcing a failure.
[  429.479990][T15134] name failslab, interval 1, probability 0, space 0, times 0
[  429.501884][T14954] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  429.519573][T15134] CPU: 0 UID: 0 PID: 15134 Comm: syz.0.2901 Not tainted 6.15.0-rc7-syzkaller-01671-gd09a8a4ab578 #0 PREEMPT(full) 
[  429.519604][T15134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  429.519624][T15134] Call Trace:
[  429.519632][T15134]  <TASK>
[  429.519641][T15134]  dump_stack_lvl+0x189/0x250
[  429.519680][T15134]  ? __pfx_dump_stack_lvl+0x10/0x10
[  429.519710][T15134]  ? __pfx__printk+0x10/0x10
[  429.519747][T15134]  should_fail_ex+0x414/0x560
[  429.519777][T15134]  should_failslab+0xa8/0x100
[  429.519806][T15134]  __kmalloc_cache_noprof+0x70/0x3d0
[  429.519834][T15134]  ? sctp_add_bind_addr+0x8c/0x370
[  429.519863][T15134]  sctp_add_bind_addr+0x8c/0x370
[  429.519894][T15134]  sctp_copy_local_addr_list+0x30b/0x4e0
[  429.519923][T15134]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  429.519948][T15134]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  429.519975][T15134]  ? sctp_v4_is_any+0x35/0x60
[  429.519999][T15134]  ? sctp_copy_one_addr+0x93/0x360
[  429.520027][T15134]  sctp_bind_addr_copy+0xb3/0x3c0
[  429.520053][T15134]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  429.520080][T15134]  sctp_connect_new_asoc+0x2e0/0x690
[  429.520108][T15134]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  429.520129][T15134]  ? __local_bh_enable_ip+0x12d/0x1c0
[  429.520157][T15134]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  429.520188][T15134]  ? security_sctp_bind_connect+0x7e/0x2e0
[  429.520205][T15134]  sctp_sendmsg+0x155c/0x2810
[  429.520254][T15134]  ? __pfx_sctp_sendmsg+0x10/0x10
[  429.520278][T15134]  ? aa_sk_perm+0x81e/0x950
[  429.520299][T15134]  ? __pfx_aa_sk_perm+0x10/0x10
[  429.520330][T15134]  ? sock_rps_record_flow+0x19/0x410
[  429.520349][T15134]  ? inet_sendmsg+0x2f4/0x370
[  429.520368][T15134]  __sock_sendmsg+0x19c/0x270
[  429.520388][T15134]  ____sys_sendmsg+0x52d/0x830
[  429.520434][T15134]  ? __pfx_____sys_sendmsg+0x10/0x10
[  429.520465][T15134]  ? import_iovec+0x74/0xa0
[  429.520490][T15134]  ___sys_sendmsg+0x21f/0x2a0
[  429.520514][T15134]  ? __pfx____sys_sendmsg+0x10/0x10
[  429.520566][T15134]  ? __fget_files+0x2a/0x420
[  429.520585][T15134]  ? __fget_files+0x3a0/0x420
[  429.520613][T15134]  __sys_sendmmsg+0x227/0x430
[  429.520640][T15134]  ? __pfx___sys_sendmmsg+0x10/0x10
[  429.520671][T15134]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  429.520702][T15134]  ? ksys_write+0x1f0/0x250
[  429.520719][T15134]  ? rcu_is_watching+0x15/0xb0
[  429.520741][T15134]  __x64_sys_sendmmsg+0xa0/0xc0
[  429.520765][T15134]  do_syscall_64+0xf6/0x210
[  429.520782][T15134]  ? clear_bhb_loop+0x60/0xb0
[  429.520800][T15134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.520815][T15134] RIP: 0033:0x7fd74f38e969
[  429.520828][T15134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  429.520840][T15134] RSP: 002b:00007fd74d1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  429.520856][T15134] RAX: ffffffffffffffda RBX: 00007fd74f5b5fa0 RCX: 00007fd74f38e969
[  429.520866][T15134] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003
[  429.520876][T15134] RBP: 00007fd74d1f6090 R08: 0000000000000000 R09: 0000000000000000
[  429.520884][T15134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  429.520893][T15134] R13: 0000000000000000 R14: 00007fd74f5b5fa0 R15: 00007ffc7483b3d8
[  429.520918][T15134]  </TASK>
[  429.523123][T15136] Cannot find del_set index 2 as target
[  429.550174][T14954] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  429.902086][T15138] __nla_validate_parse: 1 callbacks suppressed
[  429.902107][T15138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2903'.
[  429.952262][T14954] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  429.975470][T14954] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  430.161767][T15148] 8021q: VLANs not supported on team0
[  430.213371][T15149] netlink: 'syz.1.2906': attribute type 4 has an invalid length.
[  430.380952][T15153] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2910'.
[  430.538335][T15162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2914'.
[  430.559543][T15163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2913'.
[  430.573141][T15163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2913'.
[  430.605659][T14975] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  430.607683][T15163] netlink: 'syz.3.2913': attribute type 14 has an invalid length.
[  430.631138][T15159] netlink: 'syz.3.2913': attribute type 11 has an invalid length.
[  430.641671][T15159] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2913'.
[  430.654398][T15163] netlink: 'syz.3.2913': attribute type 11 has an invalid length.
[  430.755132][T14975] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  430.778275][T15169] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2914'.
[  430.784256][T14975] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  431.106236][ T5828] Bluetooth: hci2: command tx timeout
[  431.196582][T14954] 8021q: adding VLAN 0 to HW filter on device bond0
[  431.204265][T14975] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  431.432652][T14954] 8021q: adding VLAN 0 to HW filter on device team0
[  431.489270][ T6783] mac80211_hwsim hwsim11 wlan0 (unregistering): left allmulticast mode
[  431.625497][ T6783] hsr_slave_0: left promiscuous mode
[  431.637262][ T6783] hsr_slave_1: left promiscuous mode
[  431.664027][ T6783] veth1_macvtap: left promiscuous mode
[  431.696379][ T6783] veth0_macvtap: left promiscuous mode
[  432.645274][T15191] vlan4: entered promiscuous mode
[  432.707956][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  432.715229][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  432.782869][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  432.790254][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  432.860189][T15197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2926'.
[  433.065565][T15205] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2926'.
[  433.091669][T14975] 8021q: adding VLAN 0 to HW filter on device bond0
[  433.206249][T14975] 8021q: adding VLAN 0 to HW filter on device team0
[  433.247885][ T6775] bridge0: port 1(bridge_slave_0) entered blocking state
[  433.255081][ T6775] bridge0: port 1(bridge_slave_0) entered forwarding state
[  433.339947][ T6775] bridge0: port 2(bridge_slave_1) entered blocking state
[  433.347232][ T6775] bridge0: port 2(bridge_slave_1) entered forwarding state
[  433.430752][ T6783] IPVS: stop unused estimator thread 0...
[  433.585551][T15225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2932'.
[  433.622675][T14954] 8021q: adding VLAN 0 to HW filter on device batadv0
[  433.990375][T14975] 8021q: adding VLAN 0 to HW filter on device batadv0
[  434.147448][T14975] veth0_vlan: entered promiscuous mode
[  434.172442][T14975] veth1_vlan: entered promiscuous mode
[  434.278878][T14975] veth0_macvtap: entered promiscuous mode
[  434.310986][T14975] veth1_macvtap: entered promiscuous mode
[  434.369580][T14975] batman_adv: batadv0: Interface activated: batadv_slave_0
[  434.418413][T14975] batman_adv: batadv0: Interface activated: batadv_slave_1
[  434.500609][T14975] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  434.527207][T14975] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  434.539939][T14975] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  434.550731][T14975] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  434.798149][T14954] veth0_vlan: entered promiscuous mode
[  434.852494][T15274] Cannot find del_set index 2 as target
[  434.884616][ T6783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  434.922001][ T6783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  434.938439][T14954] veth1_vlan: entered promiscuous mode
[  435.006132][ T6775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.032916][ T6775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.065705][T14954] veth0_macvtap: entered promiscuous mode
[  435.089232][T14954] veth1_macvtap: entered promiscuous mode
[  435.153717][T15283] __nla_validate_parse: 2 callbacks suppressed
[  435.153744][T15283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2951'.
[  435.177965][T14954] batman_adv: batadv0: Interface activated: batadv_slave_0
[  435.192128][T14954] batman_adv: batadv0: Interface activated: batadv_slave_1
[  435.284016][T14954] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  435.301397][T14954] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  435.310725][T14954] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  435.320195][T14954] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  435.588499][T15295] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2954'.
[  435.591821][ T6773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.626817][ T6773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.694065][ T2957] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.697659][T15302] netlink: 'syz.0.2954': attribute type 11 has an invalid length.
[  435.848981][ T6783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.863370][ T6783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.971643][ T2957] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.102078][ T2957] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.146965][   T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  436.373518][ T2957] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.518284][ T2957] bridge_slave_1: left allmulticast mode
[  436.523978][ T2957] bridge_slave_1: left promiscuous mode
[  436.531495][ T2957] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.540895][ T2957] bridge_slave_0: left allmulticast mode
[  436.547260][ T2957] bridge_slave_0: left promiscuous mode
[  436.552994][ T2957] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.909122][ T2957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  436.922469][ T2957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  436.932728][ T2957] bond0 (unregistering): Released all slaves
[  437.164530][ T2957] hsr_slave_0: left promiscuous mode
[  437.170688][ T2957] hsr_slave_1: left promiscuous mode
[  437.179544][ T2957] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  437.188461][ T2957] batman_adv: batadv0: Removing interface: batadv_slave_0
[  437.199784][ T2957] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  437.207333][ T2957] batman_adv: batadv0: Removing interface: batadv_slave_1
[  437.229310][ T2957] veth1_macvtap: left promiscuous mode
[  437.234871][ T2957] veth0_macvtap: left promiscuous mode
[  437.241208][ T2957] veth1_vlan: left promiscuous mode
[  437.247327][ T2957] veth0_vlan: left promiscuous mode
[  437.692633][ T2957] team0 (unregistering): Port device team_slave_1 removed
[  437.736065][ T2957] team0 (unregistering): Port device team_slave_0 removed
[  437.912590][T15309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2960'.
[  437.928986][T15310] netlink: 'syz.1.2959': attribute type 15 has an invalid length.
[  437.956337][T15310] netlink: 'syz.1.2959': attribute type 3 has an invalid length.
[  437.964416][T15310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2959'.
[  437.983646][T15309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2960'.
[  438.011742][T15309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2960'.
[  438.065878][T15309] netlink: 'syz.3.2960': attribute type 19 has an invalid length.
[  438.294153][ T9760] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  438.315471][ T9760] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  438.332453][ T9760] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  438.342149][ T9760] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  438.354005][ T9760] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  439.014331][T15343] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2963'.
[  439.514084][T15362] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2971'.
[  439.575237][T15321] chnl_net:caif_netlink_parms(): no params data found
[  439.656032][T15364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2971'.
[  439.680609][T15364] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2971'.
[  439.738051][T15364] netlink: 'syz.3.2971': attribute type 6 has an invalid length.
[  439.753233][T15370] IPv6: Can't replace route, no match found
[  439.784890][T15369] bond0: option ad_select: unable to set because the bond device is up
[  439.990253][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  440.272356][T15389] vxcan0: entered promiscuous mode
[  440.332463][T15321] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.342140][T15321] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.376476][T15321] bridge_slave_0: entered allmulticast mode
[  440.386677][ T9760] Bluetooth: hci2: command tx timeout
[  440.406789][T15321] bridge_slave_0: entered promiscuous mode
[  440.420307][T15321] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.427875][T15321] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.435568][T15321] bridge_slave_1: entered allmulticast mode
[  440.444055][T15321] bridge_slave_1: entered promiscuous mode
[  440.514983][T15400] __nla_validate_parse: 2 callbacks suppressed
[  440.515003][T15400] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2983'.
[  440.553738][T15400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2983'.
[  440.579956][T15399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2984'.
[  440.605635][T15321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  440.677042][T15321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  440.708287][T15409] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2985'.
[  440.740003][T15407] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2984'.
[  440.872968][T15418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2987'.
[  441.047434][T15413] team0: entered promiscuous mode
[  441.052654][T15413] team_slave_0: entered promiscuous mode
[  441.061009][T15413] team_slave_1: entered promiscuous mode
[  441.189218][T15426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2992'.
[  441.253057][T15418] team0 (unregistering): left promiscuous mode
[  441.259614][T15418] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:578
[  441.269592][T15418] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 15418, name: syz.4.2987
[  441.279316][T15418] preempt_count: 0, expected: 0
[  441.284685][T15418] RCU nest depth: 1, expected: 0
[  441.290220][T15418] 2 locks held by syz.4.2987/15418:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  441.299394][T15418]  #0: ffffffff8f2fac08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710
[  441.308776][T15418]  #1: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: packet_notifier+0x78/0xa60
[  441.320386][T15418] CPU: 1 UID: 0 PID: 15418 Comm: syz.4.2987 Not tainted 6.15.0-rc7-syzkaller-01671-gd09a8a4ab578 #0 PREEMPT(full) 
[  441.320416][T15418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  441.320429][T15418] Call Trace:
[  441.320438][T15418]  <TASK>
[  441.320448][T15418]  dump_stack_lvl+0x189/0x250
[  441.320489][T15418]  ? __pfx_dump_stack_lvl+0x10/0x10
[  441.320529][T15418]  ? print_lock_name+0xde/0x100
[  441.320557][T15418]  __might_resched+0x495/0x610
[  441.320584][T15418]  ? __wake_up_klogd+0x1c/0x110
[  441.320610][T15418]  ? __pfx___might_resched+0x10/0x10
[  441.320654][T15418]  __mutex_lock+0x106/0xe80
[  441.320682][T15418]  ? __pfx__printk+0x10/0x10
[  441.320707][T15418]  ? team_change_rx_flags+0x38/0x220
[  441.320726][T15418]  ? __netdev_printk+0x1bf/0x4d0
[  441.320752][T15418]  ? __pfx___mutex_lock+0x10/0x10
[  441.320777][T15418]  ? netdev_info+0x10a/0x160
[  441.320810][T15418]  ? __pfx_netdev_info+0x10/0x10
[  441.320846][T15418]  team_change_rx_flags+0x38/0x220
[  441.320872][T15418]  ? __pfx_team_change_rx_flags+0x10/0x10
[  441.320891][T15418]  __dev_set_promiscuity+0x534/0x740
[  441.320941][T15418]  netif_set_promiscuity+0x50/0xe0
[  441.320975][T15418]  dev_set_promiscuity+0x126/0x260
[  441.321012][T15418]  packet_notifier+0x292/0xa60
[  441.321047][T15418]  ? packet_notifier+0x78/0xa60
[  441.321079][T15418]  notifier_call_chain+0x1b6/0x3e0
[  441.321112][T15418]  unregister_netdevice_many_notify+0x15d8/0x2320
[  441.321153][T15418]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  441.321181][T15418]  ? rtnl_dellink+0x331/0x710
[  441.321216][T15418]  ? unregister_netdevice_queue+0x1b3/0x380
[  441.321248][T15418]  ? __nla_parse+0x40/0x60
[  441.321280][T15418]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  441.321300][T15418]  rtnl_dellink+0x488/0x710
[  441.321335][T15418]  ? __pfx_rtnl_dellink+0x10/0x10
[  441.321375][T15418]  ? kasan_quarantine_put+0xdd/0x220
[  441.321404][T15418]  ? lockdep_hardirqs_on+0x9c/0x150
[  441.321526][T15418]  ? __pfx_rtnl_dellink+0x10/0x10
[  441.321552][T15418]  rtnetlink_rcv_msg+0x7cf/0xb70
[  441.321585][T15418]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  441.321612][T15418]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  441.321637][T15418]  ? ref_tracker_free+0x63a/0x7d0
[  441.321660][T15418]  ? __copy_skb_header+0xa7/0x550
[  441.321683][T15418]  ? __pfx_ref_tracker_free+0x10/0x10
[  441.321722][T15418]  netlink_rcv_skb+0x205/0x470
[  441.321753][T15418]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  441.321783][T15418]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  441.321829][T15418]  ? netlink_deliver_tap+0x2e/0x1b0
[  441.321858][T15418]  ? netlink_deliver_tap+0x2e/0x1b0
[  441.321895][T15418]  netlink_unicast+0x758/0x8d0
[  441.321942][T15418]  netlink_sendmsg+0x805/0xb30
[  441.321985][T15418]  ? __pfx_netlink_sendmsg+0x10/0x10
[  441.322020][T15418]  ? aa_sock_msg_perm+0x94/0x160
[  441.322049][T15418]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  441.322074][T15418]  ? __pfx_netlink_sendmsg+0x10/0x10
[  441.322106][T15418]  __sock_sendmsg+0x21c/0x270
[  441.322136][T15418]  ____sys_sendmsg+0x505/0x830
[  441.322175][T15418]  ? __pfx_____sys_sendmsg+0x10/0x10
[  441.322220][T15418]  ? import_iovec+0x74/0xa0
[  441.322256][T15418]  ___sys_sendmsg+0x21f/0x2a0
[  441.322292][T15418]  ? __pfx____sys_sendmsg+0x10/0x10
[  441.322369][T15418]  ? __fget_files+0x2a/0x420
[  441.322397][T15418]  ? __fget_files+0x3a0/0x420
[  441.322439][T15418]  __x64_sys_sendmsg+0x19b/0x260
[  441.322476][T15418]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  441.322529][T15418]  ? do_syscall_64+0xba/0x210
[  441.322558][T15418]  do_syscall_64+0xf6/0x210
[  441.322583][T15418]  ? clear_bhb_loop+0x60/0xb0
[  441.322610][T15418]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.322631][T15418] RIP: 0033:0x7fdb20b8e969
[  441.322652][T15418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  441.322670][T15418] RSP: 002b:00007fdb21a99038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  441.322694][T15418] RAX: ffffffffffffffda RBX: 00007fdb20db6080 RCX: 00007fdb20b8e969
[  441.322710][T15418] RDX: 0000000020044810 RSI: 00002000000003c0 RDI: 0000000000000006
[  441.322724][T15418] RBP: 00007fdb20c10ab1 R08: 0000000000000000 R09: 0000000000000000
[  441.322738][T15418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  441.322751][T15418] R13: 0000000000000001 R14: 00007fdb20db6080 R15: 00007fffe994ee38
[  441.322788][T15418]  </TASK>
[  441.322890][T15418] 
[  441.748697][T15418] =============================
[  441.753551][T15418] [ BUG: Invalid wait context ]
[  441.758404][T15418] 6.15.0-rc7-syzkaller-01671-gd09a8a4ab578 #0 Tainted: G        W          
[  441.767082][T15418] -----------------------------
[  441.771939][T15418] syz.4.2987/15418 is trying to lock:
[  441.777330][T15418] ffff888023a78e00 (team->team_lock_key#6){+.+.}-{4:4}, at: team_change_rx_flags+0x38/0x220
[  441.787456][T15418] other info that might help us debug this:
[  441.793346][T15418] context-{5:5}
[  441.796809][T15418] 2 locks held by syz.4.2987/15418:
[  441.802004][T15418]  #0: ffffffff8f2fac08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710
[  441.810990][T15418]  #1: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: packet_notifier+0x78/0xa60
[  441.820414][T15418] stack backtrace:
[  441.824137][T15418] CPU: 1 UID: 0 PID: 15418 Comm: syz.4.2987 Tainted: G        W           6.15.0-rc7-syzkaller-01671-gd09a8a4ab578 #0 PREEMPT(full) 
[  441.824163][T15418] Tainted: [W]=WARN
[  441.824169][T15418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  441.824181][T15418] Call Trace:
[  441.824189][T15418]  <TASK>
[  441.824202][T15418]  dump_stack_lvl+0x189/0x250
[  441.824231][T15418]  ? __pfx_dump_stack_lvl+0x10/0x10
[  441.824255][T15418]  ? __pfx__printk+0x10/0x10
[  441.824273][T15418]  ? print_lock_name+0xde/0x100
[  441.824291][T15418]  __lock_acquire+0xbcf/0xd20
[  441.824319][T15418]  ? team_change_rx_flags+0x38/0x220
[  441.824334][T15418]  lock_acquire+0x120/0x360
[  441.824357][T15418]  ? team_change_rx_flags+0x38/0x220
[  441.824379][T15418]  __mutex_lock+0x182/0xe80
[  441.824397][T15418]  ? team_change_rx_flags+0x38/0x220
[  441.824414][T15418]  ? __pfx__printk+0x10/0x10
[  441.824431][T15418]  ? team_change_rx_flags+0x38/0x220
[  441.824446][T15418]  ? __netdev_printk+0x1bf/0x4d0
[  441.824465][T15418]  ? __pfx___mutex_lock+0x10/0x10
[  441.824484][T15418]  ? netdev_info+0x10a/0x160
[  441.824504][T15418]  ? __pfx_netdev_info+0x10/0x10
[  441.824527][T15418]  team_change_rx_flags+0x38/0x220
[  441.824544][T15418]  ? __pfx_team_change_rx_flags+0x10/0x10
[  441.824560][T15418]  __dev_set_promiscuity+0x534/0x740
[  441.824589][T15418]  netif_set_promiscuity+0x50/0xe0
[  441.824614][T15418]  dev_set_promiscuity+0x126/0x260
[  441.824641][T15418]  packet_notifier+0x292/0xa60
[  441.824666][T15418]  ? packet_notifier+0x78/0xa60
[  441.824689][T15418]  notifier_call_chain+0x1b6/0x3e0
[  441.824711][T15418]  unregister_netdevice_many_notify+0x15d8/0x2320
[  441.824737][T15418]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  441.824757][T15418]  ? rtnl_dellink+0x331/0x710
[  441.824781][T15418]  ? unregister_netdevice_queue+0x1b3/0x380
[  441.824802][T15418]  ? __nla_parse+0x40/0x60
[  441.824825][T15418]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  441.824842][T15418]  rtnl_dellink+0x488/0x710
[  441.824866][T15418]  ? __pfx_rtnl_dellink+0x10/0x10
[  441.824891][T15418]  ? kasan_quarantine_put+0xdd/0x220
[  441.824910][T15418]  ? lockdep_hardirqs_on+0x9c/0x150
[  441.824962][T15418]  ? __pfx_rtnl_dellink+0x10/0x10
[  441.824983][T15418]  rtnetlink_rcv_msg+0x7cf/0xb70
[  441.825007][T15418]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  441.825028][T15418]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  441.825049][T15418]  ? ref_tracker_free+0x63a/0x7d0
[  441.825068][T15418]  ? __copy_skb_header+0xa7/0x550
[  441.825084][T15418]  ? __pfx_ref_tracker_free+0x10/0x10
[  441.825109][T15418]  netlink_rcv_skb+0x205/0x470
[  441.825134][T15418]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  441.825156][T15418]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  441.825185][T15418]  ? netlink_deliver_tap+0x2e/0x1b0
[  441.825213][T15418]  ? netlink_deliver_tap+0x2e/0x1b0
[  441.825240][T15418]  netlink_unicast+0x758/0x8d0
[  441.825266][T15418]  netlink_sendmsg+0x805/0xb30
[  441.825294][T15418]  ? __pfx_netlink_sendmsg+0x10/0x10
[  441.825320][T15418]  ? aa_sock_msg_perm+0x94/0x160
[  441.825353][T15418]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  441.825373][T15418]  ? __pfx_netlink_sendmsg+0x10/0x10
[  441.825396][T15418]  __sock_sendmsg+0x21c/0x270
[  441.825416][T15418]  ____sys_sendmsg+0x505/0x830
[  441.825443][T15418]  ? __pfx_____sys_sendmsg+0x10/0x10
[  441.825472][T15418]  ? import_iovec+0x74/0xa0
[  441.825497][T15418]  ___sys_sendmsg+0x21f/0x2a0
[  441.825523][T15418]  ? __pfx____sys_sendmsg+0x10/0x10
[  441.825563][T15418]  ? __fget_files+0x2a/0x420
[  441.825585][T15418]  ? __fget_files+0x3a0/0x420
[  441.825611][T15418]  __x64_sys_sendmsg+0x19b/0x260
[  441.825637][T15418]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  441.825669][T15418]  ? do_syscall_64+0xba/0x210
[  441.825692][T15418]  do_syscall_64+0xf6/0x210
[  441.825714][T15418]  ? clear_bhb_loop+0x60/0xb0
[  441.825736][T15418]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.825756][T15418] RIP: 0033:0x7fdb20b8e969
[  441.825773][T15418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  441.825791][T15418] RSP: 002b:00007fdb21a99038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  441.825812][T15418] RAX: ffffffffffffffda RBX: 00007fdb20db6080 RCX: 00007fdb20b8e969
[  441.825828][T15418] RDX: 0000000020044810 RSI: 00002000000003c0 RDI: 0000000000000006
[  441.825841][T15418] RBP: 00007fdb20c10ab1 R08: 0000000000000000 R09: 0000000000000000
[  441.825853][T15418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  441.825865][T15418] R13: 0000000000000001 R14: 00007fdb20db6080 R15: 00007fffe994ee38
[  441.825884][T15418]  </TASK>
[  442.292360][T15418] team_slave_0: left promiscuous mode
[  442.298037][T15418] team_slave_1: left promiscuous mode
[  442.349115][T15418] team0 (unregistering): Port device team_slave_0 removed
[  442.405029][T15418] team0 (unregistering): Port device team_slave_1 removed
[  442.436226][T15321] team0: Port device team_slave_0 added
[  442.442260][T15424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2991'.
[  442.452137][T15424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2991'.
[  442.463029][T15424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2991'.
[  442.474438][ T9760] Bluetooth: hci2: command tx timeout
[  442.499656][T15424] netlink: 'syz.1.2991': attribute type 6 has an invalid length.
[  442.702866][ T2957] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 47764 - 0
[  442.755969][ T2957] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 35379 - 0
[  442.806705][ T2957] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  442.887776][ T2957] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 47764 - 0
[  442.900287][ T2957] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 35379 - 0
[  442.920594][ T2957] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  443.000506][ T2957] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 47764 - 0
[  443.013262][ T2957] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 35379 - 0
[  443.023177][ T2957] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  443.091536][ T2957] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 47764 - 0
[  443.101470][ T2957] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 35379 - 0
[  443.111529][ T2957] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  443.317911][ T2957] gtp2 (unregistering): left promiscuous mode
[  443.324526][ T2957] team0: Port device gtp2 removed
[  443.860897][ T2957] bond1 (unregistering): Released all slaves
[  443.963556][ T2957] bond0 (unregistering): Released all slaves
[  444.109527][ T2957] IPVS: stopping master sync thread 7033 ...
[  444.403233][ T2957] hsr_slave_0: left promiscuous mode
[  444.410269][ T2957] hsr_slave_1: left promiscuous mode
[  444.418028][ T2957] veth1_macvtap: left promiscuous mode
[  444.423540][ T2957] veth0_macvtap: left promiscuous mode
[  444.429479][ T2957] veth1_vlan: left promiscuous mode
[  444.434904][ T2957] veth0_vlan: left promiscuous mode
[  444.742351][ T2957] batadv0 (unregistering): left allmulticast mode
[  445.125320][ T2957] IPVS: stop unused estimator thread 0...
[  445.172673][ T2957] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.231125][ T2957] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.280451][ T2957] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.330540][ T2957] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.386497][ T2957] bridge_slave_1: left allmulticast mode
[  445.392182][ T2957] bridge_slave_1: left promiscuous mode
[  445.398935][ T2957] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.408196][ T2957] bridge_slave_0: left allmulticast mode
[  445.413938][ T2957] bridge_slave_0: left promiscuous mode
[  445.420088][ T2957] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.430986][ T2957] bridge_slave_1: left allmulticast mode
[  445.436747][ T2957] bridge_slave_1: left promiscuous mode
[  445.442471][ T2957] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.451045][ T2957] bridge_slave_0: left allmulticast mode
[  445.456936][ T2957] bridge_slave_0: left promiscuous mode
[  445.462591][ T2957] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.565332][ T2957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  445.575576][ T2957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  445.585452][ T2957] bond0 (unregistering): Released all slaves
[  445.643594][ T2957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  445.653871][ T2957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  445.663745][ T2957] bond0 (unregistering): Released all slaves
[  445.833399][ T2957] hsr_slave_0: left promiscuous mode
[  445.839415][ T2957] hsr_slave_1: left promiscuous mode
[  445.845151][ T2957] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  445.852788][ T2957] batman_adv: batadv0: Removing interface: batadv_slave_0
[  445.860732][ T2957] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  445.870092][ T2957] batman_adv: batadv0: Removing interface: batadv_slave_1
[  445.885209][ T2957] veth1_macvtap: left promiscuous mode
[  445.891402][ T2957] veth0_macvtap: left promiscuous mode
[  445.897172][ T2957] veth1_vlan: left promiscuous mode
[  445.902445][ T2957] veth0_vlan: left promiscuous mode
[  446.118062][ T2957] team0 (unregistering): Port device team_slave_0 removed