last executing test programs:

3.928500374s ago: executing program 1 (id=2275):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f00000004c0)=@tcp6=r0}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0xa, &(0x7f0000000180), 0x4)
recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000043)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4)

3.7855414s ago: executing program 4 (id=2276):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', <r4=>0x0, 0x29, 0x7, 0xb, 0x0, 0x21, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x80, 0x6, 0x233d}})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=<r5=>0x0, &(0x7f0000000280)=0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'nr0\x00', <r6=>0x0})
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x8, 0x80, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r9=>0x0})
r10 = socket$packet(0x11, 0x2, 0x300)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r12, &(0x7f0000000140)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r13, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x0)
sendto$packet(r10, &(0x7f0000000000)='1', 0x26, 0x0, &(0x7f0000000200)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @local}, 0x14)
r14 = socket$igmp6(0xa, 0x3, 0x2)
socket$packet(0x11, 0x2, 0x300) (async)
r15 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r16=>0x0})
ioctl$sock_inet6_SIOCADDRT(r14, 0x890b, &(0x7f0000003600)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0x820020, r16}) (async)
ioctl$sock_inet6_SIOCADDRT(r14, 0x890b, &(0x7f0000003600)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0x820020, r16})
socket$packet(0x11, 0x3, 0x300) (async)
r17 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r17, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r18 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f00000004c0)={'xfrm0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f00000004c0)={'xfrm0\x00', <r19=>0x0})
sendto$packet(r17, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r19}, 0x14)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x1ec, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000080}, 0x80000)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x4c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x8, 0x9}}]}, 0x4c}}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x4c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x8, 0x9}}]}, 0x4c}}, 0x0)

3.731612453s ago: executing program 1 (id=2278):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r1, &(0x7f00000033c0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x8, @local, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)="33c4cc9ae6ad31e2", 0x8}], 0x1}}], 0x1, 0x4000845)
socket$netlink(0x10, 0x3, 0x0)
epoll_create1(0x0)
socket(0x1d, 0x2, 0x6)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x3, 0x10, 0x8001, 0x200}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x7fffffff, 0xfffffffffffffffe}, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$nfc_llcp(r2, 0x6, 0x19, 0x0, 0x2000e803)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0)

3.529569068s ago: executing program 4 (id=2280):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x18, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x6, 0xf1, 0x0, 0x0, @str='+\x00'}]}, 0x18}], 0x1}, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000001600)='\b', 0xfffffffffffffd68, 0x4004095, 0x0, 0xd56888b5705b13c6)
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9203803afffe8000000000000000000000000000bbff020000000000ea000000000000000186009078000000000000000080000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af180200010000000500000000260004001818fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602b74c292343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000180b17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0032107f5000000000000000000000200000000000000000000000000008879e66485201a0015ca8374000000000000000000000000000000000000145e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c0305d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"], 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4012, 0x0, 0x0, 0x0, &(0x7f000001a640)=""/102400, 0x19000, 0x0, 0x0, 0x40020000}, &(0x7f00000008c0)=0x3b)
setsockopt$inet6_buf(r2, 0x29, 0x2a, 0x0, 0x0)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="43d3a1fa292bee"], 0x8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x300}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000c00000008000300", @ANYRES32=r7, @ANYBLOB="7eadb0ac5588b2a9ca9474a2fdaef894ac7d26facb42a1fd7029d818c08b943fbaea9244b5f0f07cb630f15551a520c55d8592dfb12b6f91a42ebe69b6b5eec63aff8ce9845842efa3"], 0x1c}}, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010003785ada2613f1d8111979998fd50339518658b6b01", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800e00010069703665727370616e0000002800028014000700ff02000000000000000000000000000106000200000000000600030040000000"], 0x5c}}, 0x0)
r9 = accept(0xffffffffffffffff, &(0x7f0000000780)=@qipcrtr, &(0x7f0000000100)=0x80)
setsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000800)={0x77, 0x1, 0x4, 0x6, 0x0, 0x7, 0x4, 0x2, 0xf0, 0x4, 0x8, 0x6, 0x8, 0x6}, 0xe)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x4, 0x590, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000190000000a00000000156e727000000000000000000000000000626f6e643000000000000000000000007465616d5f736c6176655f310000000062637366300000000000000000000000ffffffffffffffff00ffffff0180c2000000ffffffffff650000e000000050010000880100007374700000000000000000000000000000000000000000000000000000000000480000000000000002000000020000000000ffffffffffffffffffbc00000000000000003b0a000002000900efb5b7059b3fffffdfff00004e234e21040071ac0600ff7f3828030005005b060000f4f200000000000000000000000000000000000000000000000000000000000000001000000000000000d1f9c15dee9e0000ffffffff000000006172707265706c7900000000dc000000000000000000000000000000000000001000000000000e00aaaaaaaaaa0f0000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa1a0000feffffff00000000030000004000000000117465616d3000000000000000000000006772657461703000000000000000000076657468315f746f5f626f6e64000000626f6e6430000000000000000000000052a1927247eaffff470000006a72dd4b319d0000ffffffff0000e8000000500100008801000069703600000000000000000000000000000000000000000000000000000000005000000000000000fe8000000000000000000000000000bbfe8000000000000000000000e7ff00aa000000ff00000000ffffffff00000000ffffffffff000000ffffffff00000000093b14044e204e234e214e24000000006172707265706c7900000000000000000000000000000000000000000000000010000000000000000180c20000010000feffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000fcffffff00000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff02000000090000004a00000000020000000000000000000000000000000073797a5f747581000000000000000000626f6e6430000000000000000000000069705f767469300000000000000000009f7f83bddffa0000ffffffffffffffffffffff0000ffffff0000c0000000c00000000801000068656c70657200000000000000000004000000000000000000000000000000002800000000000000010000006674702d32303030300000000000000000000000000000000000000000000000000000004552524f520000000000000000000000000000000000000000000000000000002000000000000000c3331f141f48b36a6e8a93c4f2796fab65c75e2fdab6f98342ae6b68a6b900000500000002000000e90d69705f76746930000000000000000000627269646765300000000000000000006966623000000000000000000000000076657468305f746f5f626f6e64000000aaaaaaaaaa11ff0000ffffffffffffffffffffff00ffffff0000b0000000b0000000e800000071756f7461000000000000000000000000000000000000000000000000000000180000000000000000000000307b0000010000000000000007000000000000006172707265706c790008000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000feffffff0000adcc"]}, 0x608)

2.837532516s ago: executing program 1 (id=2283):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@RTM_DELMDB={0x38, 0x55, 0x32f, 0x0, 0x0, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@empty}}}]}, 0x38}}, 0x4000840) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1e, 0x110, 0x70bd26, 0x25dfdbfe, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4054)

1.232131108s ago: executing program 1 (id=2285):
syz_80211_inject_frame(0x0, 0x0, 0x262)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x4, 0x1, 0x7, 0x20002, 0x6, 0x58f, 0x10000}, 0x1c)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, 0x0, 0x7fe, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.201138795s ago: executing program 4 (id=2288):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$SIOCNRDECOBS(r4, 0x89e2)
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, 0x0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000f40)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000f80)=0x15)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010003704000000000000000000000000a38d48c9edd8fd5eacdb4c1c31e2fbbac2044f3183acff555b5b368c9846b9", @ANYRES32=r5, @ANYBLOB="8fd60400000000001c0012800e00010069703665727370616e0000000800028004001200"], 0x3c}}, 0x0)
sendto$packet(r1, &(0x7f0000000080)="8001c83a9c9e2e7312074a27202a", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14)
r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r6)
r7 = gettid()
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
r9 = socket$inet6(0xa, 0x80803, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x0, r5}, {0x8000000000, 0x7, 0x800, 0x3000000, 0x80, 0x0, 0xffffffffffffffff, 0x7ffffffffe}, {0x0, 0x0, 0x9, 0xfffffffffffffff9}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@loopback, 0xff80, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x5, 0x81}}, 0xe8)
connect$inet6(r9, &(0x7f00000000c0), 0x1c)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r7, r6, 0x0, 0x0, 0x0}, 0x30)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f701e2fa3260f024bb2905c999e9c5ed0db623a621fec178408b90180239075a1ccaa23fff954abfa0a5d94f09cf44fe9c190df42080302e971374af4525720af5010b32bf200ecc35883df0853b0fe921b96d6105307a6ed8c4fa1697a03b1934c619dab43f61b050cc7d9a470dd520c24c3f", @ANYRES16=r10, @ANYBLOB="08002dbd7000fcdbdf25070000001400080076657468315f766972745f77696669000500120021000000050022000100000014001f00fe880000000000000000000000000101050007000300000006001c0003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004094}, 0x800)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
vmsplice(r11, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r11)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', <r12=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r12, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0)

1.075147405s ago: executing program 2 (id=2289):
accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000100)=0x80, 0x80800)
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000140)="23e3a7d70736aecab7b89bf120cf138bd8b3d9ffcd915780ca4ecfda9b5755c9cde78376d363f938d72b91e8d0e2f2af98b0098d218034ca909102c4c3092da0afc289f543f5a670d7a91c07c4ab38a9396b1fa04ac57c8ce8041cf017b0800f7e46fd43cb9bfccea8db95e7a340b185fa3b42a813c2de8585cac0873f6711fa973605d68ffb5860cd089bcdfc912eae706c2b408dcb80eadc23b908c9e153")
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}], 0x78}, 0x20000000)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r1, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac)

985.818101ms ago: executing program 3 (id=2291):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8d0}, 0x8804)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x7}, 0x20)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
sendmsg$inet6(r2, &(0x7f0000000040)={&(0x7f0000000340)={0xa, 0x4e24, 0x1000000080000, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@hopopts={{0x18, 0x29, 0x36, {0xc737707c9eb3c4b4}}}], 0x18}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000000053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, <r5=>0x41424344}, 0x1, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)
socket(0x2b, 0x4, 0xfffffff8)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x30, r6, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x101, 0x38}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x9, 0x10, 0x6, 0xb96e, 0x65, 0xe]}, @chandef_params]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x8000)
write$tun(r4, &(0x7f0000000200)={@void, @val={0x1, 0x83, 0x9, 0x3, 0x1}, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "4fa586", 0xe8, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@srh={0x33, 0xc, 0x4, 0x6, 0x7, 0x48, 0xe84, [@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x22}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x17}, @mcast1]}, @routing={0x32, 0x8, 0x2, 0x5, 0x0, [@loopback, @mcast2, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}]}], {{0x4e22, 0x4e24, 0x41424344, r5, 0x1, 0x0, 0xe, 0xc2, 0x4a9, 0x0, 0x7, {[@exp_fastopen={0xfe, 0xa, 0xf989, "0998aad28b3d"}, @generic={0xfe, 0xe, "481044dda708810028c6a9c9"}, @eol, @nop, @mptcp=@generic={0xa3, 0x9, "dca9e5556560ae"}]}}}}}}}}}, 0x128)

952.403421ms ago: executing program 0 (id=2292):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$int_in(r0, 0x5421, &(0x7f0000001100)=0x9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$sock(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000006c0)="67a22b8d97a65b98ab92861752047eb19826b807ced0477dea8b159f3846bc88b7f02011f34d4220e5cf8bacc93164c5d85d0e4b9b45113875dcf4d9e5eab22b255642960d4aeaa2d12560eac7f2143c60ebe5f83a9e741f205a279b04479044fc1d3c3f4edf6b7f78d4b56c147da525b1a48bec3b12ebb7721d61d5d7f77e949d880548d42682415e0e590c9aed4a62101a305f31238afab3a4301be490a3ee149145c53df9a9734891fc8ecf705f9fe1dbc9bc", 0xb4}, {&(0x7f0000000600)="7919b8ed0e84c0175a9ba7cb95b8fa42559b4f4de1178a38da053c37ff918678b43d6b192ff8902ab7bc0d7aab2b7cf51dda65651a65c256f6445dd6459d71df0acbec338be97d8efe4b771472e3e931d16d1b9211", 0x55}, {&(0x7f0000000780)="d5a5f714e01ec11cf94f52ef765abd7e2edc7f7cbcd18a805cdcfdf0caaa1a82275b68d737340446e5d52fb292e877e0f9e0f8a809cd69c223fe5aec561e67d02c0cb390fd89fa203e44626aad3ec7aa01852d22224558", 0x57}, {&(0x7f00000008c0)="73dcb90308906faa0c8a0e3f57a139393ecff17acd4c7a6acf58337ed93979f5f54a60a6d4001139864d6e270b89f49f95e5278e1c212eddf3eb85752f7e69d876c7d7578b1d421137418a0a18b95531fd748823ea57091714df9abe29c34f8691392305fe6d7d9cd0b141c6079d47369e9913a887f480dc6eaea338b9295be6b36f6a203b59dca2f7cfd47c12311209f17369b7812cc8b4caddc215a16288174cec5f0ac5e0af", 0xa7}, {&(0x7f0000000980)="fe11def69a0c3ecf568c4da2d3dd20d12a12ed90a81ce651545bc79df5e4eed4e3fff6c45721f9109dd64199a0c716257271070ca45860749450446221bc392924d65b36d428683ca067d11b37ce374127a4e593cbd1ca7abdb2bd7843273d34f0f28dd6b00cbd1215ffbf90475fcb1e7e5b81788608c4ea9823de9324d8781af4789011af55eacf304b58ff25687c1c5ab811ae5a19007fad1aa258811ac3eb2524ea4e9ec30011cc1ee8cf1a604e76906a75973129e76a8805c91008aea2011baca9e0356ce867111a83930a05a21986684948fb5690aa3300f2e9049a0ccee0c7c2b3dcff16ce54fac32a6e6de8bc0dcd26867a", 0xf5}], 0x5}}], 0x1, 0xc8b0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000500)="b9c5fa3c0db9ced4441eb3a7929d278e3e832dffd0fc0993a4e8c568de3762715e37d6ce818133e47be3d05516fd5adedec322a73ca78d9f2223b04544dabfabbdb5e28b951be7aa783303d102310bf90c788135f679ac6541350a76304ea205e10249c5c6706a470168726c3827a2e232760451f043c8b1ea3bc15ad1e7b51dec170d049c1c6a71bd857fecd003f0a80d81002c7fdc63201a957eea9efb0c693bd0b3c47bbc687b077ad91631cfcf8c2296fe64e46ce076b512556743243ad6c51d12ad0b977f1da0babd9b3a", 0xcd)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7}}, 0x14}}, 0x2000004)
close(r0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000180)="6f11405a7d27b0beff48578c9de035e80cb422b0f764d0d6faffb71f3d922c3d0f30d20cff96f2a4fda4af6e32812949ff5eeb69abd53ee5860db72bb2e0396f3a9793f95fc27e8d4cb6b454856e11b901867b42172301d1e6cef5560b0989c92de89d7f9a4e4eb656b7eae22e1cc39ead47e20c6b6eb301b3f02492ba2d07691569485e21c57b49d8e19f549c6e7d1a1c9e9a26a5b828f7b731f1100ac9fa13b83841e9856623555c56c1871bf022c313c9b052f2bb087809502784f1a5d22ff6bfb652d311c1fea5df3eb2ab4bdf5a8a7c9ed88c93741076c26bc282766a0b3777cb8576290f", &(0x7f0000000280)=""/132}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000850000009e00000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRESHEX=r5, @ANYRESOCT=r0], 0x44}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000680)={0x40, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x1f}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x8}, 0x4000)
syz_emit_ethernet(0x81, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000f00000000000088a80f00810010008848000000000000000000000800000f0f00001f00000000000000000000715569f518ccc3fc84c430149262877362b4b40da489d8cbb13cb36f319c4d08255b57499c6c9f5e2a953810a06bf3777e649fc955265ebf3fb645231903d6bd726c7e38c9507734489785489e05f9"], 0x0)

852.142551ms ago: executing program 2 (id=2293):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000500), 0x4)
setsockopt$MRT_DONE(r2, 0x0, 0xc9, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0xff15)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001600010000000000000000000a0400000000000014000100ff010000000000000000000000000001150002"], 0x44}}, 0x0)

833.874226ms ago: executing program 0 (id=2294):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002a00dbdf"], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000a000000000008000500", @ANYRES32=r2], 0x44}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x4, 0x0, 0x0, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408200000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r4, 0x8b32, &(0x7f0000000040))
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0)

818.674994ms ago: executing program 4 (id=2295):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000040))
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)

752.187563ms ago: executing program 3 (id=2296):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000f0bcb7880000000000720155467390a43795de0000000000004ef9b1ff543e02023805221c16ea51460a654b5a7232b72b822f163b3463e2d4cce39a0142f5e9082948e349fae9066ddf19e4d64b98f34d888fa3a2369db8efa439173361cc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

696.199014ms ago: executing program 2 (id=2297):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x100059, @private0, 0x6}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x7d, &(0x7f00000000c0)=@assoc_value={r1}, 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000000b0601020000000000000000030000000900020073797a300000000005000100070100004c0008800c00078007001a00242e0000100007800c001840fffffffffffffffd100007800c001b4000000000eaff00100c00078008000a400000ffff10000780060014"], 0x74}}, 0x40800)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a0000040502"], 0x528}}, 0xc000)

667.678075ms ago: executing program 3 (id=2298):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="440000001f0001"], 0x44}], 0x1}, 0x0) (async)
sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="440000001f0001"], 0x44}], 0x1}, 0x0)

608.109334ms ago: executing program 0 (id=2299):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ipvlan1\x00', 0x10) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) (async)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'wg1\x00', {0x2, 0x4e23, @loopback=0x7f000000}})

554.866576ms ago: executing program 3 (id=2300):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="100000000400000008000000020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELOBJ={0x38, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1001}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x90}, 0x1, 0x0, 0x0, 0x49010}, 0x80) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELOBJ={0x38, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1001}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x90}, 0x1, 0x0, 0x0, 0x49010}, 0x80)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f80100000003000008100000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f80100000003000008100000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r3=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003900000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003900000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x2a8, 0x13, 0x8, 0x70bd2a, 0x25dfdbfb, {0x9, 0x0, 0x4, 0x6, {0x4e22, 0x4e21, [0x3, 0x3, 0x2, 0x1], [0x0, 0x1, 0x1, 0xffff0001], r3, [0x0, 0x4]}, 0x6, 0x40}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "974bf4b98698d8e96e"}, @INET_DIAG_REQ_BYTECODE={0x30, 0x1, "4dacb7de05b1ab1331e36c3990396ab550f29432362e5eeadf5b75fc7159ddca30c4a244a10d51f2b40e7be9"}, @INET_DIAG_REQ_BYTECODE={0x41, 0x1, "7ee0cb9b367388802aa89d5e406984635e12cf5a7793bd8fef944621f60c0c5e845a87b7b5c25ede6612fca485f1c6c8e6a71ebbc5e75ce52b55671e04"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "4e25282e8c52befa3fbbb9e96ef02c546e076e44bf610d2b998abcb7d8bc202970a5258b1d706f07ae929df415a40244f18a6922b96627eaa89c8de747632d5fb7f05062fbd686cb4fb93bc85d531d5440737c7025e1d8640dc94aad9e75141749dcdf0eed8fcd"}, @INET_DIAG_REQ_BYTECODE={0x6d, 0x1, "16961dcd68e9f2707df4db5e56454bd160fc05a4f01b3ba8740b3a54f0164f28430d6f9c6065fb66750afd2b9b627f3f3002f54d3ebe0d5fa05227aa63f2ec1c723285d2e6794696e13eaec34eaed5fcd783649178da5d0a6774d408ff69c9030038075dfd1adaa2f5"}, @INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "850dfffb0bce90e475e2dca2c509280fa90c8f65ac86e0709aca41794515b2b4997876b40802240b38a56dec7928ccaa108d8d928317bb9edbd97bc7e8dd8fd25252e44d0dfb05cac3794651dd30697864fcd7a2090e3045635224814b046097a281db8fabc33e937ba91e71c4fef743c3713ddf5749fbd1a36e64b1ae794e8f31f3896ed4040e30fabf244c66de9f4185b93d01238a55fad9252b7a329976d1b93cc9203def4b641d58f39b12fab5b39f31fc6c175e735b48a06f9a1d27b5a07547dba33f2bc0b1ce6d5ef13b70f7f31af42e010f7bfe2dcbbb537356107295c496d462ee60b732d9a15ae36fc766edcfa52bd117cd7069"}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x24040080}, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600))
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x3}]}}}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x3}]}}}]}, 0x3c}}, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x4)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r13=>0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r15=>0x0})
sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0xe5, 0x0, 0x0, {0x7, r13}, [@MDBA_SET_ENTRY={0x20, 0x1, {r15, 0x1, 0x0, 0x3, {@ip4=@local, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r16 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r16, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@bridge_dellink={0x20, 0x13, 0x1, 0x70bd2d, 0x0, {0x7, 0x0, 0x0, r10}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x10)

540.575426ms ago: executing program 1 (id=2301):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00\x00\x00'], 0x20) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={<r2=>0x0, 0x4, 0xf51, 0x3d2, 0x1, 0x5b9b}, &(0x7f0000000080)=0x14)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={r2, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f0000000340)=0x84) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4)
sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r5, 0x301, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1c080}, 0x804)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x22)

483.944047ms ago: executing program 0 (id=2302):
r0 = socket(0x2000000000000021, 0x2, 0x2) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x34, r3, 0x1, 0x470bd28, 0x4, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x10}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000094}, 0x80) (async)
r5 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x5ee}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (async)
shutdown(r0, 0x2) (async)
sendmsg$alg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40081}, 0x40000)

423.496744ms ago: executing program 2 (id=2303):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}], 0x78}, 0x20000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000000)=0x8, 0x4)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004dc0)={0x14, 0x1a, 0x229, 0x70bd2d, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000884}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x64, r2, 0x1, 0x3, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x47, 0x33, @probe_response={{{}, {0x1}, @broadcast, @device_a, @initial, {0x7, 0x4}}, 0x6, @random=0x9, 0x8000, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x19}, @void, @void, @val={0x6, 0x2, 0xa}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x49}}}}]}, 0x64}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r0, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac)

401.858712ms ago: executing program 0 (id=2304):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_OKEY={0x8, 0x18, 0x28e}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan1\x00', <r3=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0)

340.011627ms ago: executing program 1 (id=2305):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xa4}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64)
r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x9}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x2}]}}}]}, 0x4c}}, 0x0)

338.977924ms ago: executing program 4 (id=2306):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)

309.016387ms ago: executing program 3 (id=2307):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r0}, 0x38)
syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001040", 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "345f8cf949a01b515682f44cecac91ba"}, @md5sig={0x1d, 0x12, "d243471da14ff23d079da4ca814b7d7b"}]}}}}}}}}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8931, &(0x7f0000000180)={'batadv0\x00'})
syz_emit_ethernet(0x56, &(0x7f0000000000)={@broadcast, @empty, @void, {@canfd={0xd, {{0x3, 0x1, 0x1, 0x1}, 0xb, 0x1, 0x0, 0x0, "bc50a1e551812d69dbe39227d257980c73a78bca5291c18ba72d7938c27ceac7b397b64b60fc10be871b19b649349e6bc383b84712a2180c261fab06f8192f03"}}}}, &(0x7f0000000080)={0x0, 0x4, [0xc81, 0xc2a, 0x43d, 0xe3d]})

246.106585ms ago: executing program 2 (id=2308):
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xfffffffe, @private1, 0x3}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001740)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x54583}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x80)

168.141544ms ago: executing program 4 (id=2309):
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xfffffffe, @private1, 0x3}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001740)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x54583}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x80)

120.02432ms ago: executing program 2 (id=2310):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
socket(0x200000000000011, 0x2, 0x0)
socket$inet6(0xa, 0x3, 0xff)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x34)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f00000002c0)=""/86}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000080), &(0x7f0000000140)=r1}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="19d50000bb12", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000dd0000000000000000ff1700000056985cbada88b6eab770cdc49a00"/41], 0x48) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="19d50000bb12", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000dd0000000000000000ff1700000056985cbada88b6eab770cdc49a00"/41], 0x48)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000028c0)=@filter={'filter\x00', 0x2, 0x4, 0x1420, 0xffffffff, 0x1250, 0x1250, 0x1250, 0xfeffffff, 0xffffffff, 0x1358, 0x1358, 0x1358, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1108, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0xfd, 0x0, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}, @common=@frag={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@mh={{0x28}, {"6bbf"}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth1_vlan\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1488)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r5, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
pipe(&(0x7f0000000500)) (async)
pipe(&(0x7f0000000500))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32=0x1, @ANYBLOB="01000100000000000000000400000000000000001fa1408bfeb65ccfc42dd7249e6bc94e0328e235720652cb3c530d0a9c898bf86087416df51c00054a9d205854db1e9e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000500"/28], 0x50)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0x1, 0x8}, 0xc) (async)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0xffffffffffffffff, 0x1, 0x8}, 0xc)

78.211452ms ago: executing program 0 (id=2311):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd0, &(0x7f0000000000)=0x9, 0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x2, @private1, 0xfff}}, 0x7, 0x3ff}, 0x90)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r3, 0x84, 0x74, 0x0, &(0x7f0000000000)=0x43)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@local, 0x4e23}, {@in=@empty, 0x0, 0x33}, @in6=@private2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8000}, {0x2, 0x0, 0x501}, {}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x42}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}}, 0x4000000)

0s ago: executing program 3 (id=2312):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003580), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000035c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0b012abd7000ffdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="1c002d800a"], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) (async)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7fffffff, 0xc}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8906}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x4801) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff)
r8 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x0) (async)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r9, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r9, &(0x7f00000000c0), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0xfe80}, 0x1c) (async)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f0000000a00)={{r9}, 0x0, 0x18, @inherit={0x50}, @subvolid=0x4}) (async)
shutdown(r9, 0x1)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000980)={&(0x7f0000c57000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/48, 0x30, 0x0, 0x0}, &(0x7f00000009c0)=0x40) (async, rerun: 32)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000019"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000011d000c660e45c6574c5f58cbfed0a0069105d00000000000400000024cc658376b446"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe1b, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd81, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

kernel console output (not intermixed with test programs):

m.
[   62.833131][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.845680][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.852718][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.879214][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.044175][ T5843] hsr_slave_0: entered promiscuous mode
[   63.050543][ T5843] hsr_slave_1: entered promiscuous mode
[   63.056606][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.064429][ T5843] Cannot create hsr debugfs directory
[   63.135431][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.153605][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.183685][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.201945][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.232704][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.246344][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.263664][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.280791][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.359767][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   63.372561][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   63.389520][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   63.401402][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   63.463901][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   63.475061][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   63.484577][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   63.495868][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   63.552055][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.567278][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.585686][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.599416][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.609680][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.645700][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   63.668700][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.675985][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.712053][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.719239][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.741792][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.784649][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   63.800629][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.807788][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.836540][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.843709][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.886604][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.926907][ T5841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   63.939014][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.990423][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   64.021129][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.028291][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.114329][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.131079][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.138260][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.184203][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   64.210126][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.233813][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.256429][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.263612][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.296941][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.313723][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.328652][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.335790][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.396089][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   64.445219][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.465967][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.473143][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.522936][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.530157][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.548037][ T5831] Bluetooth: hci0: command tx timeout
[   64.552290][ T5841] veth0_vlan: entered promiscuous mode
[   64.587069][ T5828] veth0_vlan: entered promiscuous mode
[   64.611528][ T5841] veth1_vlan: entered promiscuous mode
[   64.629404][ T5831] Bluetooth: hci1: command tx timeout
[   64.642381][ T5828] veth1_vlan: entered promiscuous mode
[   64.689616][ T5829] veth0_vlan: entered promiscuous mode
[   64.716398][ T5828] veth0_macvtap: entered promiscuous mode
[   64.731505][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.759816][ T5841] veth0_macvtap: entered promiscuous mode
[   64.782141][ T5841] veth1_macvtap: entered promiscuous mode
[   64.792081][ T5831] Bluetooth: hci3: command tx timeout
[   64.798086][ T5831] Bluetooth: hci2: command tx timeout
[   64.803520][ T5831] Bluetooth: hci4: command tx timeout
[   64.821378][ T5828] veth1_macvtap: entered promiscuous mode
[   64.834481][ T5829] veth1_vlan: entered promiscuous mode
[   64.866952][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.908678][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.930306][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.950774][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.962696][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.993692][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.005645][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.018841][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.028764][ T5829] veth0_macvtap: entered promiscuous mode
[   65.041474][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.055926][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.066378][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.075525][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.090472][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.103522][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.113293][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.124094][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.134034][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.152570][ T5829] veth1_macvtap: entered promiscuous mode
[   65.264280][ T5843] veth0_vlan: entered promiscuous mode
[   65.313308][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.324467][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.335428][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.346080][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.366608][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.378136][ T5843] veth1_vlan: entered promiscuous mode
[   65.388367][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.396356][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.408276][ T5838] veth0_vlan: entered promiscuous mode
[   65.417548][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.429021][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.439136][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.449624][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.460722][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.483046][ T5838] veth1_vlan: entered promiscuous mode
[   65.492337][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.501727][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.512091][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.521282][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.553618][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.569035][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.584240][ T5838] veth0_macvtap: entered promiscuous mode
[   65.613316][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.617810][ T5843] veth0_macvtap: entered promiscuous mode
[   65.629278][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.662263][ T5838] veth1_macvtap: entered promiscuous mode
[   65.687892][ T5843] veth1_macvtap: entered promiscuous mode
[   65.695503][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.702339][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.708068][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.716728][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.733006][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.743785][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.754078][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.764558][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.775507][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.810671][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.823664][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.835699][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.846346][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.856815][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.867659][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.877569][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.888080][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.899976][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.915134][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.932487][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.933488][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.951732][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.956427][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.972330][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.990550][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.000589][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.011293][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.022583][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.035159][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.045522][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.054988][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.063914][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.095931][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.106568][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.116911][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.127689][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.137646][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.148741][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.158619][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.169268][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.180235][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.260565][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.277390][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.286138][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.298330][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.335368][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.344563][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.499632][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.527485][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.590347][ T5919] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6'.
[   66.621018][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.647874][ T5831] Bluetooth: hci0: command tx timeout
[   66.653356][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.682574][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.694409][ T5924] sock: sock_timestamping_bind_phc: sock not bind to device
[   66.695022][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.724863][ T5831] Bluetooth: hci1: command tx timeout
[   66.729096][ T5915] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6'.
[   66.847778][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'.
[   66.860648][ T5932] openvswitch: netlink: IP tunnel dst address not specified
[   66.868861][ T5831] Bluetooth: hci2: command tx timeout
[   66.869431][ T5846] Bluetooth: hci4: command tx timeout
[   66.874292][ T5831] Bluetooth: hci3: command tx timeout
[   66.927201][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.935639][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.027068][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'.
[   67.063748][ T5940] netlink: 'syz.4.5': attribute type 8 has an invalid length.
[   67.148608][ T5940] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.250807][   T25] IPVS: starting estimator thread 0...
[   67.368067][ T5950] IPVS: using max 22 ests per chain, 52800 per kthread
[   67.657273][ T5965] sch_fq: defrate 0 ignored.
[   67.687117][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'.
[   67.707647][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'.
[   67.813406][ T5968] Zero length message leads to an empty skb
[   67.984383][ T5977] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.009976][ T5969] netlink: 48 bytes leftover after parsing attributes in process `syz.1.18'.
[   68.057180][ T5971] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.211497][ T5971] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.274637][ T5985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.23'.
[   68.350959][ T5971] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.571617][ T5971] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.707864][ T5831] Bluetooth: hci0: command tx timeout
[   68.788143][ T5831] Bluetooth: hci1: command tx timeout
[   68.949475][ T5831] Bluetooth: hci4: command tx timeout
[   68.955486][ T5145] Bluetooth: hci2: command tx timeout
[   68.955497][ T5846] Bluetooth: hci3: command tx timeout
[   68.957847][ T5971] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.044587][ T5971] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.116857][ T5971] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.238654][ T5971] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.904083][ T6073] netlink: 32 bytes leftover after parsing attributes in process `syz.3.44'.
[   70.241057][ T6085] netlink: 'syz.1.49': attribute type 21 has an invalid length.
[   70.288086][ T6089] netlink: 'syz.1.49': attribute type 21 has an invalid length.
[   70.407913][ T6097] netlink: 52 bytes leftover after parsing attributes in process `syz.2.52'.
[   70.614438][ T6106] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[   70.629233][ T6106] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[   70.703549][ T6115] netlink: 'syz.0.56': attribute type 7 has an invalid length.
[   70.711938][ T6115] netlink: 'syz.0.56': attribute type 7 has an invalid length.
[   71.177501][ T6147] netlink: 'syz.3.63': attribute type 8 has an invalid length.
[   71.688217][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[   71.913799][ T5145] Bluetooth: hci4: command 0x0405 tx timeout
[   72.038061][ T6207] __nla_validate_parse: 10 callbacks suppressed
[   72.038082][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.76'.
[   72.174862][ T6210] netlink: 'syz.2.77': attribute type 1 has an invalid length.
[   72.208917][ T6210] netlink: 'syz.2.77': attribute type 3 has an invalid length.
[   72.224035][ T6210] netlink: 'syz.2.77': attribute type 8 has an invalid length.
[   72.372629][ T6224] netlink: 'syz.4.82': attribute type 29 has an invalid length.
[   72.425539][ T6220] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   72.445061][ T6230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.83'.
[   72.487635][ T6231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.81'.
[   72.526829][ T6234] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   72.634392][ T6246] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   72.642239][ T6243] netlink: 9 bytes leftover after parsing attributes in process `syz.3.86'.
[   72.670544][ T6243] 0�: renamed from hsr0 (while UP)
[   72.693691][ T6243] 0�: entered promiscuous mode
[   72.703897][ T6243] A link change request failed with some changes committed already. Interface 
70� may have been left with an inconsistent configuration, please check.
[   72.744197][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'.
[   72.776253][ T6250] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   73.043543][ T6265] netlink: 'syz.0.94': attribute type 1 has an invalid length.
[   73.065003][ T6265] netlink: 'syz.0.94': attribute type 8 has an invalid length.
[   73.081093][ T6265] netlink: 134664 bytes leftover after parsing attributes in process `syz.0.94'.
[   73.090596][ T6266] netlink: 104 bytes leftover after parsing attributes in process `syz.2.97'.
[   73.122167][ T6263] veth3: entered allmulticast mode
[   73.293212][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'.
[   73.416861][ T6289] netlink: 24 bytes leftover after parsing attributes in process `syz.4.102'.
[   73.528438][ T6301] netlink: 20 bytes leftover after parsing attributes in process `syz.2.108'.
[   73.636654][ T6311] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[   73.837078][ T6322] TCP: TCP_TX_DELAY enabled
[   74.604201][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.625506][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.636603][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.647966][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.658705][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.679707][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.714103][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.758622][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.782333][ T6388] Bluetooth: MGMT ver 1.23
[   74.816510][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.860915][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.145474][ T6403] netlink: 'syz.1.138': attribute type 4 has an invalid length.
[   75.443924][ T6423] netlink: 'syz.2.142': attribute type 10 has an invalid length.
[   75.487562][ T6423] macvlan0: entered promiscuous mode
[   75.492925][ T6423] macvlan0: entered allmulticast mode
[   75.542444][ T6423] veth1_vlan: entered allmulticast mode
[   75.565519][ T6423] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   75.617699][ T6426] geneve2: entered promiscuous mode
[   75.623151][ T6426] geneve2: entered allmulticast mode
[   75.651708][ T6434] atomic_op ffff88805de65998 conn xmit_atomic 0000000000000000
[   75.908001][  T973] IPVS: starting estimator thread 0...
[   75.996735][ T6451] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT
[   76.013600][ T6449] IPVS: using max 21 ests per chain, 50400 per kthread
[   76.143834][ T6459] pimreg: entered allmulticast mode
[   76.224818][ T6466] dvmrp0: entered allmulticast mode
[   76.417459][ T6475] netlink: 'syz.1.159': attribute type 1 has an invalid length.
[   76.435858][ T6477] netlink: 'syz.2.160': attribute type 11 has an invalid length.
[   76.741426][ T6495] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[   77.199068][ T6526] vxcan1: entered allmulticast mode
[   77.248450][ T6526] vxcan1: left allmulticast mode
[   77.536514][ T6533] lo speed is unknown, defaulting to 1000
[   77.590321][ T6541] __nla_validate_parse: 22 callbacks suppressed
[   77.590340][ T6541] netlink: 36 bytes leftover after parsing attributes in process `syz.0.172'.
[   77.630745][ T6541] C: renamed from lo (while UP)
[   77.633886][ T6533] C speed is unknown, defaulting to 1000
[   77.655429][ T6541] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   77.694753][ T6544] veth0_to_hsr: entered promiscuous mode
[   77.702033][ T6548] openvswitch: netlink: IP tunnel dst address not specified
[   77.704340][ T6533] C speed is unknown, defaulting to 1000
[   77.724592][ T6533] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   77.744428][ T6533] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   77.778989][ T6550] SET target dimension over the limit!
[   77.784678][ T6549] SET target dimension over the limit!
[   77.949356][ T6546] hsr_slave_0 (unregistering): left promiscuous mode
[   77.958192][ T6556] validate_nla: 1 callbacks suppressed
[   77.958211][ T6556] netlink: 'syz.1.180': attribute type 1 has an invalid length.
[   77.982438][ T6533] C speed is unknown, defaulting to 1000
[   77.993268][ T6533] C speed is unknown, defaulting to 1000
[   78.030854][ T6556] 8021q: adding VLAN 0 to HW filter on device bond2
[   78.048161][ T6533] C speed is unknown, defaulting to 1000
[   78.080780][ T6533] C speed is unknown, defaulting to 1000
[   78.106615][ T6556] gretap1: entered promiscuous mode
[   78.122479][ T6564] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.183'.
[   78.149212][ T6556] bond2: (slave gretap1): making interface the new active one
[   78.175443][ T6556] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   78.192228][ T6567] netlink: 40 bytes leftover after parsing attributes in process `syz.2.184'.
[   78.205743][ T6533] C speed is unknown, defaulting to 1000
[   78.265721][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.185'.
[   78.503693][ T6586] warning: `syz.3.190' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   78.645006][ T6593] netlink: 20 bytes leftover after parsing attributes in process `syz.4.192'.
[   78.681762][ T6593] vlan2: entered promiscuous mode
[   78.686852][ T6593] gretap0: entered promiscuous mode
[   79.440537][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'.
[   79.614192][ T6632] netlink: 44 bytes leftover after parsing attributes in process `syz.3.204'.
[   79.667590][ T6633] netlink: 44 bytes leftover after parsing attributes in process `syz.3.204'.
[   79.763689][ T6633] netlink: 24 bytes leftover after parsing attributes in process `syz.3.204'.
[   79.779146][ T6638] netlink: 20 bytes leftover after parsing attributes in process `syz.0.205'.
[   79.860999][ T6645] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x2
[   80.510252][ T6688] netlink: 'syz.4.220': attribute type 4 has an invalid length.
[   80.596736][ T6702] netlink: 'syz.2.224': attribute type 4 has an invalid length.
[   80.642435][ T6702] netlink: 'syz.2.224': attribute type 4 has an invalid length.
[   80.925497][ T6721] dccp_invalid_packet: invalid packet type
[   81.389365][ T6756] C speed is unknown, defaulting to 1000
[   81.471715][ T6750] gtp0: entered promiscuous mode
[   81.477133][ T6750] gtp0: entered allmulticast mode
[   81.772877][ T6782] netlink: 'syz.3.249': attribute type 3 has an invalid length.
[   81.906682][ T6788] Bluetooth: MGMT ver 1.23
[   81.914516][  T975] cfg80211: failed to load regulatory.db
[   82.027566][ T6795] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   82.086437][ T6801] bridge0: port 3(vlan3) entered blocking state
[   82.110167][ T6801] bridge0: port 3(vlan3) entered disabled state
[   82.116644][ T6801] vlan3: entered allmulticast mode
[   82.116709][ T6804] x_tables: duplicate underflow at hook 2
[   82.143811][ T6801] vlan3: left allmulticast mode
[   82.190017][ T6811] netlink: 'syz.2.255': attribute type 1 has an invalid length.
[   82.234425][ T6811] 8021q: adding VLAN 0 to HW filter on device bond2
[   82.275356][ T6805] bond2: (slave veth5): Enslaving as an active interface with a down link
[   82.350279][ T6805] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   82.645611][ T6845] syz.4.267 uses obsolete (PF_INET,SOCK_PACKET)
[   82.731619][ T6849] trusted_key: syz.1.269 sent an empty control message without MSG_MORE.
[   82.816708][ T6855] bond1: entered promiscuous mode
[   82.822138][ T6855] bond1: entered allmulticast mode
[   82.827671][ T6855] 8021q: adding VLAN 0 to HW filter on device bond1
[   82.835276][ T6854] batman_adv: batadv0: Adding interface: dummy0
[   82.841791][ T6854] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.867191][ T6854] batman_adv: batadv0: Interface activated: dummy0
[   83.034593][ T6881] __nla_validate_parse: 15 callbacks suppressed
[   83.034622][ T6881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.276'.
[   83.091882][ T6881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.276'.
[   83.195885][ T5846] Bluetooth: hci4: command 0x0405 tx timeout
[   83.218689][ T6889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.283'.
[   83.273471][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'.
[   83.293272][ T6889] 8021q: adding VLAN 0 to HW filter on device bond3
[   83.325189][ T6895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.284'.
[   83.540783][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.554476][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.582643][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.289'.
[   83.593093][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.289'.
[   83.593176][ T6911] netlink: 40 bytes leftover after parsing attributes in process `syz.0.290'.
[   83.643245][ T6911] netlink: 40 bytes leftover after parsing attributes in process `syz.0.290'.
[   83.717141][ T6919] netlink: 'syz.3.292': attribute type 5 has an invalid length.
[   83.767573][ T6921] geneve2: entered promiscuous mode
[   83.772844][ T6921] geneve2: entered allmulticast mode
[   83.828213][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'.
[   83.987902][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout
[   83.989538][ T6937] IPv6: sit1: Disabled Multicast RS
[   83.994043][ T5145] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   84.222588][ T6950] dvmrp0: entered allmulticast mode
[   84.519827][ T6971] tipc: Started in network mode
[   84.525841][ T6971] tipc: Node identity e66445143e62, cluster identity 4711
[   84.560683][ T6971] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.595030][ T6978] netlink: 'syz.2.313': attribute type 1 has an invalid length.
[   84.604173][ T6979] Unsupported ieee802154 address type: 0
[   84.680707][ T6980] syzkaller0: entered promiscuous mode
[   84.686343][ T6980] syzkaller0: entered allmulticast mode
[   84.693586][ T6980] tipc: Resetting bearer <eth:syzkaller0>
[   84.737109][ T6969] tipc: Resetting bearer <eth:syzkaller0>
[   85.024884][ T7008] Driver unsupported XDP return value 0 on prog  (id 89) dev N/A, expect packet loss!
[   85.611457][ T5877] tipc: Node number set to 3624289556
[   86.295487][ T6969] tipc: Disabling bearer <eth:syzkaller0>
[   86.307597][ T7000] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[   86.601519][ T7027] netlink: 'syz.1.321': attribute type 1 has an invalid length.
[   86.755217][ T7032] syz.0.322 uses old SIOCAX25GETINFO
[   87.073145][ T7050] xt_time: unknown flags 0x4
[   87.136834][ T7048] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   87.161301][ T7046] siw: device registration error -23
[   87.549257][ T7083] netlink: 'syz.1.335': attribute type 1 has an invalid length.
[   87.569341][ T7083] netlink: 'syz.1.335': attribute type 2 has an invalid length.
[   87.589315][ T7083] netlink: 'syz.1.335': attribute type 1 has an invalid length.
[   87.612450][ T7083] netlink: 'syz.1.335': attribute type 2 has an invalid length.
[   87.658848][ T7092] x_tables: duplicate underflow at hook 1
[   87.665946][ T7083] netlink: 'syz.1.335': attribute type 1 has an invalid length.
[   87.863106][ T7109] netlink: 'syz.0.346': attribute type 7 has an invalid length.
[   87.896535][ T7109] netlink: 'syz.0.346': attribute type 7 has an invalid length.
[   88.191338][ T7130] __nla_validate_parse: 16 callbacks suppressed
[   88.191358][ T7130] netlink: 32 bytes leftover after parsing attributes in process `syz.3.353'.
[   88.208403][ T7130] netlink: 20 bytes leftover after parsing attributes in process `syz.3.353'.
[   88.409529][ T7144] lo: entered allmulticast mode
[   88.444799][ T7144] tunl0: entered allmulticast mode
[   88.466284][ T7144] gre0: entered allmulticast mode
[   88.486863][ T7144] gretap0: entered allmulticast mode
[   88.511965][ T7144] erspan0: entered allmulticast mode
[   88.525901][ T7144] ip_vti0: entered allmulticast mode
[   88.552827][ T7144] ip6_vti0: entered allmulticast mode
[   88.574467][ T7144] sit0: entered allmulticast mode
[   88.603416][ T7144] ip6tnl0: entered allmulticast mode
[   88.646704][ T7144] ip6gre0: entered allmulticast mode
[   88.692429][ T7144] syz_tun: entered allmulticast mode
[   88.711438][ T7144] ip6gretap0: entered allmulticast mode
[   88.757053][ T7144] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.766240][ T7144] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.784383][ T7144] bridge0: entered allmulticast mode
[   88.794114][ T7144] vcan0: entered allmulticast mode
[   88.807188][ T7144] bond0: entered allmulticast mode
[   88.813183][ T7144] bond_slave_0: entered allmulticast mode
[   88.824362][ T7144] bond_slave_1: entered allmulticast mode
[   88.874130][ T7144] team0: entered allmulticast mode
[   88.882851][ T7144] team_slave_0: entered allmulticast mode
[   88.897587][ T7144] team_slave_1: entered allmulticast mode
[   88.909604][ T7144] batman_adv: batadv0: Interface deactivated: dummy0
[   88.934308][ T7144] dummy0: entered allmulticast mode
[   88.956642][ T7144] nlmon0: entered allmulticast mode
[   88.975251][ T7144] caif0: entered allmulticast mode
[   88.981478][ T7144] batadv0: entered allmulticast mode
[   88.998118][ T7144] veth0: entered allmulticast mode
[   89.010025][ T7144] veth1: entered allmulticast mode
[   89.051187][ T7144] wg0: entered allmulticast mode
[   89.076149][ T7144] wg1: entered allmulticast mode
[   89.095652][ T7144] wg2: entered allmulticast mode
[   89.109188][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout
[   89.117299][ T7144] veth0_to_bridge: entered allmulticast mode
[   89.158901][ T7144] veth1_to_bridge: entered allmulticast mode
[   89.196920][ T7144] veth0_to_bond: entered allmulticast mode
[   89.222022][ T7144] veth1_to_bond: entered allmulticast mode
[   89.246696][ T7144] veth0_to_team: entered allmulticast mode
[   89.305171][ T7144] veth1_to_team: entered allmulticast mode
[   89.336599][ T7144] veth0_to_batadv: entered allmulticast mode
[   89.339993][ T7168] netlink: 36 bytes leftover after parsing attributes in process `syz.2.363'.
[   89.355856][ T7144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.375299][ T7144] batadv_slave_0: entered allmulticast mode
[   89.395618][ T7144] veth1_to_batadv: entered allmulticast mode
[   89.406278][ T7144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.425243][ T7144] batadv_slave_1: entered allmulticast mode
[   89.440971][ T7144] xfrm0: entered allmulticast mode
[   89.457086][ T7144] veth1_to_hsr: entered allmulticast mode
[   89.467447][ T7144] hsr_slave_1: entered allmulticast mode
[   89.482728][ T7144] 0�: left promiscuous mode
[   89.487267][ T7144] 0�: entered allmulticast mode
[   89.504465][ T7144] veth1_virt_wifi: entered allmulticast mode
[   89.523589][ T7144] veth0_virt_wifi: entered allmulticast mode
[   89.541598][ T7144] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   89.555749][ T7144] veth1_vlan: entered allmulticast mode
[   89.567872][ T7144] veth0_vlan: entered allmulticast mode
[   89.610345][ T7144] vlan0: entered allmulticast mode
[   89.615574][ T7144] vlan1: entered allmulticast mode
[   89.628467][ T7144] macvlan0: entered allmulticast mode
[   89.642101][ T7144] macvlan1: entered allmulticast mode
[   89.655776][ T7144] ipvlan0: entered allmulticast mode
[   89.668228][ T7144] ipvlan1: entered allmulticast mode
[   89.677208][ T7144] veth1_macvtap: entered allmulticast mode
[   89.689321][ T7144] veth0_macvtap: entered allmulticast mode
[   89.708303][ T7144] macvtap0: entered allmulticast mode
[   89.728195][ T7144] macsec0: entered allmulticast mode
[   89.747892][ T7144] geneve0: entered allmulticast mode
[   89.760148][ T7144] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0
[   89.768580][ T7144] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.778844][ T7144] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.788010][ T7144] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.797221][ T7144] geneve1: entered allmulticast mode
[   89.807817][ T7144] netdevsim netdevsim3 : entered allmulticast mode
[   89.824775][ T7144] netdevsim netdevsim3 netdevsim1: entered allmulticast mode
[   89.843494][ T7144] netdevsim netdevsim3 netdevsim2: entered allmulticast mode
[   89.859174][ T7144] netdevsim netdevsim3 netdevsim3: entered allmulticast mode
[   89.891424][ T7144] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   89.914131][ T7144] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   89.929050][ T7144] ip6tnl1: entered allmulticast mode
[   89.934441][ T7144] ip6tnl2: entered allmulticast mode
[   89.951402][ T7144] bond1: left promiscuous mode
[   89.961987][ T7144] bond2: entered allmulticast mode
[   90.112630][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.364'.
[   90.152122][ T7178] netlink: 'syz.1.366': attribute type 18 has an invalid length.
[   90.184932][ T7178] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   90.194329][ T7178] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   90.203211][ T7178] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   90.212019][ T7178] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   90.402244][ T7208] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms
[  112.088637][ T7232] tipc: Started in network mode
[  112.101029][ T7232] tipc: Node identity 965775b77a1b, cluster identity 4711
[  112.109843][ T7232] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.156118][ T7232] syzkaller0: MTU too low for tipc bearer
[  112.167541][ T7232] tipc: Disabling bearer <eth:syzkaller0>
[  112.229047][ T7237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.381'.
[  112.380800][ T7202] tipc: Subscription rejected, illegal request
[  112.539910][ T7260] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  113.144495][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.403'.
[  113.181708][ T7306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.401'.
[  113.436250][ T7322] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  113.466858][ T7326] netlink: 'syz.4.411': attribute type 4 has an invalid length.
[  113.519181][ T7324] netlink: 'syz.2.408': attribute type 2 has an invalid length.
[  113.538467][ T7323] netlink: 'syz.2.408': attribute type 2 has an invalid length.
[  113.551501][ T7326] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.411'.
[  113.593825][ T7330] netlink: 'syz.0.413': attribute type 1 has an invalid length.
[  113.637646][ T7330] netlink: 209800 bytes leftover after parsing attributes in process `syz.0.413'.
[  113.700665][ T7335] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter
[  113.752571][    T8] IPVS: starting estimator thread 0...
[  113.761401][ T7338] IPVS: ip_vs_add_dest(): server weight less than zero
[  113.777205][ T7338] (unnamed net_device) (uninitialized): option mode: invalid value (255)
[  113.814976][ T7350] netlink: 'syz.0.419': attribute type 2 has an invalid length.
[  113.847476][ T7347] IPVS: using max 21 ests per chain, 50400 per kthread
[  113.956796][ T7360] xt_hashlimit: invalid interval
[  113.963673][ T7359] netlink: 'syz.0.423': attribute type 10 has an invalid length.
[  114.051571][ T7359] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  114.119403][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.426'.
[  114.146333][ T7368] C speed is unknown, defaulting to 1000
[  114.160631][ T7367] 8021q: adding VLAN 0 to HW filter on device batadv1
[  114.266720][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.429'.
[  114.382773][ T7387] netlink: 48 bytes leftover after parsing attributes in process `syz.1.431'.
[  114.406319][ T7372] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  114.428635][ T7384] IPv6: sit1: Disabled Multicast RS
[  116.026548][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.451'.
[  116.582438][ T7486] netlink: 36 bytes leftover after parsing attributes in process `syz.1.460'.
[  116.769331][ T7499] sock: sock_set_timeout: `syz.3.466' (pid 7499) tries to set negative timeout
[  117.249954][ T7534] __nla_validate_parse: 9 callbacks suppressed
[  117.249972][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.477'.
[  117.363534][ T7530] : entered promiscuous mode
[  117.421076][ T7540] netlink: 24 bytes leftover after parsing attributes in process `syz.4.478'.
[  117.628447][ T7546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.480'.
[  117.835165][ T7554] netlink: 16 bytes leftover after parsing attributes in process `syz.4.484'.
[  117.956665][ T7558] x_tables: duplicate underflow at hook 3
[  118.107613][ T7558] x_tables: duplicate underflow at hook 3
[  118.115323][ T7558] x_tables: duplicate underflow at hook 3
[  118.146550][ T7558] x_tables: duplicate underflow at hook 3
[  118.164574][ T7558] x_tables: duplicate underflow at hook 3
[  118.179266][ T7558] x_tables: duplicate underflow at hook 3
[  118.190004][ T7558] x_tables: duplicate underflow at hook 3
[  118.195993][ T7558] x_tables: duplicate underflow at hook 3
[  118.210923][ T7558] x_tables: duplicate underflow at hook 3
[  118.221364][ T7558] x_tables: duplicate underflow at hook 3
[  118.305015][ T7579] batman_adv: batadv0: Removing interface: dummy0
[  118.314714][ T7579] bridge_slave_0: left promiscuous mode
[  118.328928][ T7579] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.342563][ T7579] bridge_slave_1: left promiscuous mode
[  118.358001][ T7579] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.374387][ T7579] bond0: (slave bond_slave_0): Releasing backup interface
[  118.384547][ T7579] bond0: (slave bond_slave_1): Releasing backup interface
[  118.422474][ T7579] team0: Port device team_slave_0 removed
[  118.459618][ T7579] team0: Port device team_slave_1 removed
[  118.465714][ T7579] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.500578][ T7579] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.536300][ T7592] tipc: Cannot configure node identity twice
[  118.551949][ T7592] tipc: Cannot configure node identity twice
[  118.689281][ T7602] netlink: 296 bytes leftover after parsing attributes in process `syz.1.498'.
[  118.717947][ T7602] unsupported nlmsg_type 40
[  118.834840][ T7610] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.876201][ T7618] netlink: 'syz.0.503': attribute type 10 has an invalid length.
[  118.884209][ T7618] netlink: 132 bytes leftover after parsing attributes in process `syz.0.503'.
[  118.943000][ T7610] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.025285][ T7610] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.063582][ T7624] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) !
[  119.151880][ T7610] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.276012][ T7610] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.299532][ T7610] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.315581][ T7610] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.333440][ T7610] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.797765][ T7655] netlink: 24 bytes leftover after parsing attributes in process `syz.4.514'.
[  119.813620][ T7657] netlink: 'syz.2.516': attribute type 1 has an invalid length.
[  119.835687][ T7659] netlink: 'syz.3.517': attribute type 4 has an invalid length.
[  119.859416][ T7657] 8021q: adding VLAN 0 to HW filter on device bond5
[  119.914092][ T7661] bond5: (slave gretap1): making interface the new active one
[  119.939838][ T7661] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  119.967575][ T7666] netlink: 44 bytes leftover after parsing attributes in process `syz.4.519'.
[  120.062915][ T7666] netlink: 24 bytes leftover after parsing attributes in process `syz.4.519'.
[  120.077755][ T7666] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.086147][ T7666] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.093355][ T7666] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.099337][ T7672] sctp: [Deprecated]: syz.4.519 (pid 7672) Use of struct sctp_assoc_value in delayed_ack socket option.
[  120.099337][ T7672] Use struct sctp_sack_info instead
[  120.204990][ T7676] netlink: 'syz.2.522': attribute type 1 has an invalid length.
[  120.335127][ T7686] netlink: 48 bytes leftover after parsing attributes in process `syz.4.525'.
[  120.807101][ T7717] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  121.015127][ T7729] vlan3: entered promiscuous mode
[  121.020908][ T7729] vlan3: entered allmulticast mode
[  121.026181][ T7729] hsr_slave_1: entered allmulticast mode
[  121.274021][ T7742] ipip0: entered promiscuous mode
[  121.803466][ T7772] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  121.829230][ T7772] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING
[  121.931206][ T7781] netlink: 'syz.0.560': attribute type 29 has an invalid length.
[  122.395138][ T7817] netlink: 'syz.0.569': attribute type 10 has an invalid length.
[  123.786404][ T7824] __nla_validate_parse: 8 callbacks suppressed
[  123.786424][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'.
[  123.810856][ T7817] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.820320][ T7817] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  123.830104][ T7820] syz_tun: entered allmulticast mode
[  123.836633][ T7820] syz_tun: left allmulticast mode
[  123.958630][ T7830] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.099821][ T7842] Bluetooth: MGMT ver 1.23
[  124.150222][ T7846] netlink: 144 bytes leftover after parsing attributes in process `syz.1.574'.
[  124.165578][ T7832] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.572'.
[  124.199749][ T7848] pim6reg1: entered promiscuous mode
[  124.205108][ T7848] pim6reg1: entered allmulticast mode
[  124.210894][ T7832] openvswitch: netlink: Flow actions attr not present in new flow.
[  124.316320][ T7859] netlink: 40 bytes leftover after parsing attributes in process `syz.1.581'.
[  124.530134][ T7872] xt_ipcomp: unknown flags B
[  125.140328][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.596'.
[  125.240672][ T7911] netlink: 'syz.2.600': attribute type 12 has an invalid length.
[  125.425637][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.599'.
[  125.623217][ T7939] netlink: 16 bytes leftover after parsing attributes in process `syz.3.605'.
[  125.791946][ T7946] syzkaller1: entered promiscuous mode
[  125.800462][ T7946] syzkaller1: entered allmulticast mode
[  126.835911][ T8006] netlink: 40 bytes leftover after parsing attributes in process `syz.3.623'.
[  126.894063][ T8010] netlink: 'syz.4.622': attribute type 32 has an invalid length.
[  126.957775][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.622'.
[  126.999799][ T8010] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  127.075243][ T8025] netlink: 28 bytes leftover after parsing attributes in process `syz.2.627'.
[  127.168686][ T8025] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000
[  127.307750][ T8047] batadv_slave_0: entered promiscuous mode
[  127.335025][ T8047] batadv_slave_0: left promiscuous mode
[  127.437851][ T8051] gtp1: entered promiscuous mode
[  127.444350][ T8055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.929053][ T8099] xt_l2tp: wrong L2TP version: 0
[  128.229914][ T8114] netlink: 'syz.2.649': attribute type 39 has an invalid length.
[  128.436891][ T8131] netlink: 'syz.0.653': attribute type 11 has an invalid length.
[  129.044887][ T8166] __nla_validate_parse: 42 callbacks suppressed
[  129.044907][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.663'.
[  129.149138][ T8169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.663'.
[  129.205282][ T8176] netlink: 16 bytes leftover after parsing attributes in process `syz.2.665'.
[  129.228855][ T8177] netlink: 16 bytes leftover after parsing attributes in process `syz.2.665'.
[  129.412538][ T8185] netlink: 76 bytes leftover after parsing attributes in process `syz.3.666'.
[  129.510259][ T5831] Bluetooth: hci4: command 0x0405 tx timeout
[  129.838528][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.668'.
[  129.865674][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.668'.
[  129.925329][ T8204] netlink: 2 bytes leftover after parsing attributes in process `syz.2.669'.
[  130.067069][ T8219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.674'.
[  130.088861][ T8221] netlink: 'syz.1.675': attribute type 1 has an invalid length.
[  130.132789][ T8221] 8021q: adding VLAN 0 to HW filter on device bond4
[  130.186177][ T8219] 8021q: adding VLAN 0 to HW filter on device bond6
[  130.269679][ T8221] bond4: (slave ip6gretap2): making interface the new active one
[  130.284810][ T8221] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link
[  130.431028][ T8242] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  130.453209][ T8242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.542883][ T8252] netlink: 'syz.0.686': attribute type 13 has an invalid length.
[  130.587934][ T8252] netlink: 152 bytes leftover after parsing attributes in process `syz.0.686'.
[  130.626233][ T8262] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  130.637794][ T8265] netlink: 'syz.4.690': attribute type 11 has an invalid length.
[  130.645628][ T8262] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1)
[  130.664090][ T8252] syz_tun: refused to change device tx_queue_len
[  130.670850][ T8252] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  131.016528][ T8291] netlink: 'syz.4.698': attribute type 1 has an invalid length.
[  131.075314][ T8293] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 60
[  131.431471][ T8327] xt_l2tp: unknown flags: 18
[  131.450129][ T8329] xt_l2tp: unknown flags: 18
[  132.304436][ T8392] netlink: 'syz.2.727': attribute type 1 has an invalid length.
[  132.341713][ T8396] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  132.546302][ T8411] tipc: Started in network mode
[  132.559036][ T8411] tipc: Node identity , cluster identity 4711
[  132.565169][ T8411] tipc: Failed to set node id, please configure manually
[  132.580025][ T8411] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  132.780237][ T8427] netlink: 'syz.2.736': attribute type 3 has an invalid length.
[  133.052207][ T8437] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  133.376377][ T8459] xt_check_table_hooks: 55 callbacks suppressed
[  133.376398][ T8459] x_tables: duplicate underflow at hook 1
[  133.675443][ T8477] netlink: 'syz.4.757': attribute type 13 has an invalid length.
[  133.702986][ T8477] veth0_macvtap: left promiscuous mode
[  133.737631][ T8477] macvtap0: entered allmulticast mode
[  133.783562][ T8477] macvtap0: refused to change device tx_queue_len
[  133.949153][ T8502] netlink: 'syz.2.762': attribute type 9 has an invalid length.
[  134.126523][ T8510] netlink: 'syz.4.769': attribute type 4 has an invalid length.
[  134.176243][ T8510] netlink: 'syz.4.769': attribute type 4 has an invalid length.
[  134.462717][ T8536] netlink: 'syz.4.776': attribute type 1 has an invalid length.
[  134.473826][ T8536] __nla_validate_parse: 14 callbacks suppressed
[  134.473844][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.776'.
[  134.559184][ T8539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.778'.
[  134.654202][ T8544] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  134.700250][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'.
[  134.949312][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.785'.
[  135.099615][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.788'.
[  135.136384][ T8574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.788'.
[  135.509275][ T8597] xt_HMARK: spi-set and port-set can't be combined
[  135.509995][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.795'.
[  135.530030][ T8598] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.795'.
[  135.540244][ T8598] netlink: zone id is out of range
[  135.545634][ T8598] netlink: zone id is out of range
[  135.551524][ T8598] netlink: zone id is out of range
[  135.574153][ T8598] netlink: zone id is out of range
[  135.595186][ T8598] netlink: zone id is out of range
[  135.610945][ T8598] netlink: zone id is out of range
[  135.620341][ T8598] netlink: zone id is out of range
[  135.630273][ T8598] netlink: zone id is out of range
[  135.638557][ T8603] netlink: 1275 bytes leftover after parsing attributes in process `syz.0.798'.
[  135.648467][ T8598] netlink: zone id is out of range
[  135.653673][ T8598] netlink: zone id is out of range
[  136.019544][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.806'.
[  136.054752][ T8622] xt_socket: unknown flags 0x4
[  136.490181][ T8653] C speed is unknown, defaulting to 1000
[  138.139093][ T8753] netlink: 'syz.3.851': attribute type 1 has an invalid length.
[  138.210882][ T8753] bond3 (unregistering): Released all slaves
[  138.239378][ T8767] netlink: 'syz.2.854': attribute type 7 has an invalid length.
[  138.269738][ T8769] ip6t_srh: unknown srh match flags  4001
[  138.621994][ T8782] veth1_to_hsr: entered promiscuous mode
[  138.634998][ T8782] veth1_to_hsr: left promiscuous mode
[  139.180775][ T8810] gretap1: entered promiscuous mode
[  139.183673][ T8815] sctp: [Deprecated]: syz.2.866 (pid 8815) Use of int in max_burst socket option deprecated.
[  139.183673][ T8815] Use struct sctp_assoc_value instead
[  139.186485][ T8810] gretap1: entered allmulticast mode
[  139.223108][ T8810] pim6reg1: entered promiscuous mode
[  139.229415][ T8810] pim6reg1: entered allmulticast mode
[  139.366325][ T8819] netlink: 'syz.1.868': attribute type 1 has an invalid length.
[  139.374151][ T8819] netlink: 'syz.1.868': attribute type 2 has an invalid length.
[  139.427118][ T8821] netlink: 'syz.3.870': attribute type 4 has an invalid length.
[  139.440535][ T8821] netlink: 'syz.3.870': attribute type 4 has an invalid length.
[  139.575361][ T8831] netlink: 'syz.4.869': attribute type 10 has an invalid length.
[  139.677120][ T8831] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  139.693729][ T8835] __nla_validate_parse: 17 callbacks suppressed
[  139.693751][ T8835] netlink: 60 bytes leftover after parsing attributes in process `syz.4.869'.
[  140.008539][ T8859] netlink: 'syz.3.879': attribute type 33 has an invalid length.
[  140.027859][ T8859] netlink: 152 bytes leftover after parsing attributes in process `syz.3.879'.
[  140.269639][ T8871] netlink: 'syz.4.884': attribute type 1 has an invalid length.
[  140.688214][ T8896] netlink: 60 bytes leftover after parsing attributes in process `syz.0.890'.
[  140.719608][ T8850] Bluetooth: hci0: Opcode 0x080f failed: -4
[  140.742006][   T29] audit: type=1107 audit(1736307097.771:2): pid=8900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  140.745021][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'.
[  140.858178][ T8901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.891'.
[  141.141076][ T8911] x_tables: duplicate underflow at hook 1
[  141.147112][ T8912] x_tables: duplicate underflow at hook 1
[  141.638549][ T8931] block nbd1: not configured, cannot reconfigure
[  141.658561][ T8933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.898'.
[  141.677547][ T8933] netlink: 16 bytes leftover after parsing attributes in process `syz.4.898'.
[  141.697717][ T8931] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551615)
[  141.773631][ T8941] netlink: 'syz.3.903': attribute type 4 has an invalid length.
[  141.910009][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout
[  141.992603][ T8953] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.903'.
[  142.010573][ T8953] net_ratelimit: 10 callbacks suppressed
[  142.010595][ T8953] netlink: zone id is out of range
[  142.044670][ T8953] netlink: zone id is out of range
[  142.071399][ T8953] netlink: zone id is out of range
[  142.083625][ T8953] netlink: zone id is out of range
[  142.095770][ T8953] netlink: zone id is out of range
[  142.111577][ T8953] netlink: get zone limit has 8 unknown bytes
[  142.232081][ T8964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.910'.
[  142.589661][ T8991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.918'.
[  142.854072][ T9010] bond5 (unregistering): Released all slaves
[  142.904829][ T9008] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  143.323530][ T9043] 8021q: adding VLAN 0 to HW filter on device bond5
[  143.807894][ T9083] validate_nla: 1 callbacks suppressed
[  143.807912][ T9083] netlink: 'syz.1.949': attribute type 3 has an invalid length.
[  143.929067][ T9089] unknown channel width for channel at 909000KHz?
[  143.935898][ T9089] unknown channel width for channel at 909000KHz?
[  143.961641][ T9089] unknown channel width for channel at 909000KHz?
[  144.034971][ T9093] netlink: 'syz.4.952': attribute type 2 has an invalid length.
[  144.924524][ T9167] __nla_validate_parse: 15 callbacks suppressed
[  144.924543][ T9167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.971'.
[  145.043071][ T9166] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.050612][ T9166] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.219082][ T9183] netlink: 808 bytes leftover after parsing attributes in process `syz.3.975'.
[  145.276488][ T9166] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.303357][ T9166] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.376048][ T9166] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.384981][ T9166] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.394024][ T9166] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.403423][ T9166] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.425451][ T9166] veth3: left allmulticast mode
[  145.435751][ T9166] gretap1: left promiscuous mode
[  145.440959][ T9166] gretap1: left allmulticast mode
[  145.450239][ T5878] C speed is unknown, defaulting to 1000
[  145.738627][ T9208] netlink: 1264 bytes leftover after parsing attributes in process `syz.1.981'.
[  145.861490][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.986'.
[  145.882668][ T9214] netlink: 'syz.4.985': attribute type 4 has an invalid length.
[  145.935640][ T9214] netlink: 32 bytes leftover after parsing attributes in process `syz.4.985'.
[  145.995189][ T9222] syzkaller1: entered promiscuous mode
[  146.021154][ T9222] syzkaller1: entered allmulticast mode
[  146.060160][ T9225] bridge_slave_0: left allmulticast mode
[  146.066025][ T9225] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.103415][ T9225] bridge_slave_1: left allmulticast mode
[  146.109832][ T9225] bridge_slave_1: left promiscuous mode
[  146.116508][ T9225] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.141604][ T9225] bond0: (slave bond_slave_0): Releasing backup interface
[  146.178012][ T9225] bond0: (slave bond_slave_1): Releasing backup interface
[  146.219686][ T9225] team0: Port device team_slave_0 removed
[  146.242646][ T9225] team0: Port device team_slave_1 removed
[  146.249369][ T9225] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  146.256783][ T9225] batman_adv: batadv0: Removing interface: batadv_slave_0
[  146.265204][ T9225] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  146.273083][ T9225] batman_adv: batadv0: Removing interface: batadv_slave_1
[  146.288483][ T9225] bond0: (slave macvlan0): Releasing backup interface
[  146.296609][ T9225] veth1_vlan: left allmulticast mode
[  146.315660][ T9225] bond2: (slave veth5): Releasing active interface
[  146.330832][ T9225] bond5: (slave gretap1): Releasing active interface
[  146.852192][ T9263] IPVS: length: 8 != 1152
[  146.878301][ T9265] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1004'.
[  147.085813][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1007'.
[  147.119270][ T9272] gretap0: entered promiscuous mode
[  147.137764][ T9272] macvtap1: entered promiscuous mode
[  147.143287][ T9272] macvtap1: entered allmulticast mode
[  147.149158][ T9272] gretap0: entered allmulticast mode
[  147.211322][ T9279] IPVS: Error connecting to the multicast addr
[  147.243746][ T9280] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1010'.
[  147.286749][ T9285] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1013'.
[  147.371435][ T9283] netlink: 'syz.3.1012': attribute type 10 has an invalid length.
[  147.393818][ T9283] batadv0: left allmulticast mode
[  147.413178][ T9283] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.434174][ T9295] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1016'.
[  147.450863][ T9283] batadv0: entered allmulticast mode
[  147.456495][ T9283] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  147.485246][ T9298] macvlan0: entered allmulticast mode
[  147.496241][ T9298] veth1_vlan: entered allmulticast mode
[  147.533283][ T9298] veth1_vlan: left allmulticast mode
[  147.591424][ T9303] raw_sendmsg: syz.0.1021 forgot to set AF_INET. Fix it!
[  147.649952][ T9298] macvlan0 (unregistering): left allmulticast mode
[  147.690264][ T9308] ip6t_srh: unknown srh match flags  536B
[  147.789087][ T9314] netlink: 'syz.3.1022': attribute type 1 has an invalid length.
[  147.826284][ T9314] bond3: entered promiscuous mode
[  147.832568][ T9314] bond3: entered allmulticast mode
[  147.842764][ T9314] x_tables: unsorted underflow at hook 4
[  147.857184][ T9314] bond3: (slave ip6gretap1): making interface the new active one
[  147.865988][ T9314] ip6gretap1: entered promiscuous mode
[  147.872312][ T9314] ip6gretap1: entered allmulticast mode
[  147.882162][ T9314] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  148.306484][ T9343] netlink: 'syz.1.1035': attribute type 10 has an invalid length.
[  148.347616][ T9343] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.355607][ T9346] x_tables: duplicate entry at hook 1
[  148.421927][ T9343] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.454785][ T9343] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  148.470071][ T9347] netlink: 'syz.4.1036': attribute type 1 has an invalid length.
[  148.759283][ T9379] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  148.803297][ T9378] tc_dump_action: action bad kind
[  149.686278][ T9442] GUP no longer grows the stack in syz.2.1064 (9442): 20004000-20005000 (20002000)
[  149.716429][ T9442] CPU: 0 UID: 0 PID: 9442 Comm: syz.2.1064 Not tainted 6.13.0-rc5-syzkaller-00148-gfd48f071a3d6 #0
[  149.727163][ T9442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  149.737254][ T9442] Call Trace:
[  149.740560][ T9442]  <TASK>
[  149.743510][ T9442]  dump_stack_lvl+0x241/0x360
[  149.748234][ T9442]  ? __pfx_dump_stack_lvl+0x10/0x10
[  149.753457][ T9442]  ? __pfx__printk+0x10/0x10
[  149.758071][ T9442]  ? find_vma+0xf9/0x170
[  149.762358][ T9442]  __get_user_pages+0x4385/0x49e0
[  149.767421][ T9442]  ? __pfx_lock_acquire+0x10/0x10
[  149.772481][ T9442]  ? mark_lock+0x9a/0x360
[  149.776842][ T9442]  ? __lock_acquire+0x1397/0x2100
[  149.781902][ T9442]  ? __pfx___get_user_pages+0x10/0x10
[  149.787301][ T9442]  ? __gup_longterm_locked+0xd2f/0x17f0
[  149.792873][ T9442]  ? __pfx_down_read_killable+0x10/0x10
[  149.798452][ T9442]  ? __pfx_lock_acquire+0x10/0x10
[  149.803501][ T9442]  ? try_get_folio+0xf1/0x6f0
[  149.808201][ T9442]  ? __pfx_lock_release+0x10/0x10
[  149.813254][ T9442]  __gup_longterm_locked+0xe64/0x17f0
[  149.818658][ T9442]  ? mark_lock+0x9a/0x360
[  149.823011][ T9442]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  149.828994][ T9442]  ? __pfx___gup_longterm_locked+0x10/0x10
[  149.834797][ T9442]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  149.841125][ T9442]  ? gup_fast_fallback+0x207e/0x29c0
[  149.846408][ T9442]  gup_fast_fallback+0x2266/0x29c0
[  149.851536][ T9442]  ? __pfx_gup_fast_fallback+0x10/0x10
[  149.857016][ T9442]  ? __mutex_trylock_common+0x183/0x2e0
[  149.862561][ T9442]  ? __pfx___might_resched+0x10/0x10
[  149.867846][ T9442]  ? is_valid_gup_args+0x124/0x200
[  149.872966][ T9442]  get_user_pages_fast+0xcc/0x160
[  149.878000][ T9442]  ? __pfx_get_user_pages_fast+0x10/0x10
[  149.883624][ T9442]  ? rcu_is_watching+0x15/0xb0
[  149.888391][ T9442]  ? trace_contention_end+0x3c/0x120
[  149.893676][ T9442]  ? __mutex_lock+0x37f/0xee0
[  149.898356][ T9442]  __iov_iter_get_pages_alloc+0x3b4/0x8e0
[  149.904110][ T9442]  iov_iter_get_pages2+0xcf/0x130
[  149.909140][ T9442]  ? __pfx_iov_iter_get_pages2+0x10/0x10
[  149.914780][ T9442]  __se_sys_vmsplice+0x740/0x1490
[  149.919812][ T9442]  ? plist_del+0x3f1/0x410
[  149.924248][ T9442]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  149.929794][ T9442]  ? __pfx_futex_wake+0x10/0x10
[  149.934642][ T9442]  ? ipv6_setsockopt+0xe2/0x170
[  149.939496][ T9442]  ? rawv6_setsockopt+0x327/0x740
[  149.944530][ T9442]  ? do_sock_setsockopt+0x3e2/0x720
[  149.949736][ T9442]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  149.955720][ T9442]  ? do_syscall_64+0x100/0x230
[  149.960488][ T9442]  ? do_syscall_64+0xb6/0x230
[  149.965164][ T9442]  do_syscall_64+0xf3/0x230
[  149.969673][ T9442]  ? clear_bhb_loop+0x35/0x90
[  149.974347][ T9442]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.980256][ T9442] RIP: 0033:0x7fc0f6b85d29
[  149.984672][ T9442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.004272][ T9442] RSP: 002b:00007fc0f49f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  150.012692][ T9442] RAX: ffffffffffffffda RBX: 00007fc0f6d75fa0 RCX: 00007fc0f6b85d29
[  150.020667][ T9442] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000005
[  150.028634][ T9442] RBP: 00007fc0f6c01b08 R08: 0000000000000000 R09: 0000000000000000
[  150.036597][ T9442] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  150.044563][ T9442] R13: 0000000000000000 R14: 00007fc0f6d75fa0 R15: 00007ffd4b172d28
[  150.052544][ T9442]  </TASK>
[  150.113432][ T9453] __nla_validate_parse: 14 callbacks suppressed
[  150.113452][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1069'.
[  150.181242][ T9456] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  150.231693][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1072'.
[  150.845272][ T9500] C speed is unknown, defaulting to 1000
[  150.915177][ T9499] C speed is unknown, defaulting to 1000
[  151.074632][ T9515] netlink: 'syz.2.1090': attribute type 10 has an invalid length.
[  151.088056][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1089'.
[  151.096950][ T9513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1089'.
[  151.128064][ T9515] hsr0: entered promiscuous mode
[  151.141241][ T9515] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  151.181418][ T9515] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  151.204696][ T9515] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  151.721861][ T9533] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  151.743406][ T9533] netlink: 'syz.4.1096': attribute type 16 has an invalid length.
[  151.763286][ T9533] netlink: 'syz.4.1096': attribute type 3 has an invalid length.
[  151.787470][ T9533] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1096'.
[  151.844332][ T5839] IPVS: starting estimator thread 0...
[  151.931543][ T9552] C speed is unknown, defaulting to 1000
[  151.937576][ T9547] IPVS: using max 25 ests per chain, 60000 per kthread
[  152.268874][ T9577] batadv_slave_1: entered allmulticast mode
[  152.285277][ T9576] batadv_slave_1: left allmulticast mode
[  152.868325][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1121'.
[  153.006528][ T9617] vlan3: entered promiscuous mode
[  153.012090][ T9617] erspan0: entered promiscuous mode
[  153.029714][ T9617] erspan0: left promiscuous mode
[  153.108279][ T9619] vlan3: entered promiscuous mode
[  153.118374][ T9619] erspan0: entered promiscuous mode
[  153.134293][ T9619] erspan0: left promiscuous mode
[  153.357457][ T9626] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  153.395355][ T9626] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  153.519602][ T9634] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  154.024616][ T9668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1139'.
[  154.040220][ T9668] x_tables: duplicate underflow at hook 1
[  154.067510][ T5831] Bluetooth: hci4: command 0x0405 tx timeout
[  154.086562][ T9672] xt_socket: unknown flags 0x2
[  154.138350][ T9672] netlink: 'syz.3.1141': attribute type 4 has an invalid length.
[  154.349392][ T9684] xt_CT: No such helper "snmp_trap"
[  154.496365][ T9693] netlink: 'syz.4.1151': attribute type 1 has an invalid length.
[  154.576858][ T9698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1148'.
[  155.006581][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1155'.
[  155.477645][ T9721] netlink: 'syz.2.1158': attribute type 4 has an invalid length.
[  155.643673][ T9737] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1163'.
[  155.980695][ T9740] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  156.004953][ T9747] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1166'.
[  156.116796][ T9754] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1169'.
[  156.147039][ T9754] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1169'.
[  156.545500][ T9783] netlink: 'syz.2.1177': attribute type 1 has an invalid length.
[  156.566075][ T9783] netlink: 'syz.2.1177': attribute type 3 has an invalid length.
[  156.574611][ T9783] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1177'.
[  156.587456][ T9783] NCSI netlink: No device for ifindex 0
[  156.956030][ T9802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1186'.
[  156.974267][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1186'.
[  156.985597][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1186'.
[  157.127762][ T9808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  157.212177][ T7199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.232578][ T7199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.321019][ T9823] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1194'.
[  157.528887][ T9835] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  157.539163][ T9835] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  157.547662][ T9835] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  157.556348][ T9835] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  157.584053][ T9835] geneve2: entered promiscuous mode
[  157.593817][ T9835] geneve2: entered allmulticast mode
[  157.601712][ T9835] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  157.610679][ T9835] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  157.620248][ T9835] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  157.631542][ T9835] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  157.773680][ T9846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1200'.
[  157.808276][ T9846] bridge_slave_1: left allmulticast mode
[  157.819651][ T9846] bridge_slave_1: left promiscuous mode
[  157.837536][ T9846] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.851049][ T9846] bridge3: port 1(bridge_slave_1) entered blocking state
[  157.860171][ T9846] bridge3: port 1(bridge_slave_1) entered disabled state
[  157.875439][ T9846] bridge_slave_1: entered allmulticast mode
[  157.893356][ T9846] bridge_slave_1: entered promiscuous mode
[  158.487952][ T9889] syzkaller0: entered promiscuous mode
[  158.496789][ T9889] syzkaller0: entered allmulticast mode
[  158.529226][ T9901] netlink: 'syz.0.1213': attribute type 10 has an invalid length.
[  160.265597][ T9901] bridge0: port 2(team0) entered blocking state
[  160.272205][ T9901] bridge0: port 2(team0) entered disabled state
[  160.282807][ T9901] team0: entered allmulticast mode
[  160.288414][ T9901] team_slave_0: entered allmulticast mode
[  160.294257][ T9901] team_slave_1: entered allmulticast mode
[  160.301790][ T9901] team0: entered promiscuous mode
[  160.306944][ T9901] team_slave_0: entered promiscuous mode
[  160.323437][ T9901] team_slave_1: entered promiscuous mode
[  160.623525][ T9937] bond0: entered promiscuous mode
[  160.632369][ T9937] bond_slave_0: entered promiscuous mode
[  160.638569][ T9937] bond_slave_1: entered promiscuous mode
[  160.644523][ T9937] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode
[  160.651959][ T9937] batadv0: entered promiscuous mode
[  160.712771][ T9944] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20002 - 0
[  160.723612][ T9944] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20002 - 0
[  160.732299][ T9944] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20002 - 0
[  160.741010][ T9944] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20002 - 0
[  160.750810][ T9944] geneve2: entered promiscuous mode
[  160.757035][ T9944] geneve2: entered allmulticast mode
[  160.988625][ T9961] __nla_validate_parse: 7 callbacks suppressed
[  160.988643][ T9961] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1231'.
[  161.137188][ T9970] netlink: 'syz.3.1235': attribute type 10 has an invalid length.
[  161.555031][ T9984] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  161.596706][ T9984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1242'.
[  161.617823][ T9976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'.
[  161.628094][ T9976] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1238'.
[  161.947191][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1248'.
[  161.996272][T10004] C speed is unknown, defaulting to 1000
[  162.003382][T10005] veth0_to_team: entered promiscuous mode
[  162.009932][T10005] veth0_to_team: entered allmulticast mode
[  162.444483][T10025] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1255'.
[  162.467109][T10027] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  163.589034][ T5831] Bluetooth: hci4: command 0x0405 tx timeout
[  164.466962][T10055] netlink: 'syz.1.1262': attribute type 1 has an invalid length.
[  164.480991][T10055] netlink: 'syz.1.1262': attribute type 8 has an invalid length.
[  164.489779][T10055] netlink: 134664 bytes leftover after parsing attributes in process `syz.1.1262'.
[  164.540558][T10060] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  164.666564][T10052] C speed is unknown, defaulting to 1000
[  164.758945][T10069] netlink: 'syz.2.1264': attribute type 1 has an invalid length.
[  164.783441][T10060] tipc: Started in network mode
[  164.814350][T10060] tipc: Node identity 7f000001, cluster identity 4711
[  164.823594][T10060] tipc: Enabled bearer <udp:syz2>, priority 10
[  165.106655][T10087] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  165.348954][T10096] netlink: 'syz.4.1270': attribute type 1 has an invalid length.
[  165.489765][T10106] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1274'.
[  165.601641][T10106] 8021q: adding VLAN 0 to HW filter on device bond3
[  165.616554][T10106] bond0: (slave bond3): Enslaving as an active interface with an up link
[  165.626834][T10114] netlink: 'syz.3.1276': attribute type 4 has an invalid length.
[  165.656662][T10117] netlink: 'syz.3.1276': attribute type 4 has an invalid length.
[  165.665089][T10117] netlink: 'syz.3.1276': attribute type 4 has an invalid length.
[  165.692846][T10114] netlink: 'syz.3.1276': attribute type 4 has an invalid length.
[  165.705999][T10114] netlink: 'syz.3.1276': attribute type 4 has an invalid length.
[  165.938287][ T5914] tipc: Node number set to 2130706433
[  165.966946][T10135] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  166.100707][T10143] netlink: 'syz.4.1285': attribute type 2 has an invalid length.
[  166.209858][T10156] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1289'.
[  166.228809][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1287'.
[  166.249859][T10158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1287'.
[  166.268633][T10157] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1289'.
[  166.361859][T10167] openvswitch: netlink: EtherType 50a is less than min 600
[  166.390467][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1291'.
[  166.408380][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1291'.
[  166.418227][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1291'.
[  166.452895][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1291'.
[  166.592161][T10183] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1296'.
[  166.623066][T10179] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1294'.
[  166.694787][T10185] netlink: 'syz.3.1297': attribute type 11 has an invalid length.
[  167.028102][ T5145] Bluetooth: hci4: command 0x0405 tx timeout
[  167.846246][T10254] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  167.869509][T10254] sctp: [Deprecated]: syz.3.1323 (pid 10254) Use of struct sctp_assoc_value in delayed_ack socket option.
[  167.869509][T10254] Use struct sctp_sack_info instead
[  168.258277][T10279] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  168.965219][T10333] bridge_slave_1: left allmulticast mode
[  168.973065][T10333] bridge_slave_1: left promiscuous mode
[  168.987078][T10333] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.003875][T10333] bridge_slave_0: left allmulticast mode
[  169.010772][T10333] bridge_slave_0: left promiscuous mode
[  169.018310][T10333] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.038960][ T5878] IPVS: starting estimator thread 0...
[  169.105079][T10339] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present
[  169.114406][T10339] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1)
[  169.127595][T10337] IPVS: using max 20 ests per chain, 48000 per kthread
[  169.173134][T10341] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[  169.784416][T10366] ip6t_srh: unknown srh invflags A757
[  171.275381][T10366] 
: renamed from bond0 (while UP)
[  171.389674][T10378] __nla_validate_parse: 72 callbacks suppressed
[  171.389694][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1356'.
[  171.466115][T10384] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1359'.
[  171.738889][T10399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1364'.
[  171.770904][T10405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1367'.
[  171.980648][T10419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1370'.
[  172.014313][T10421] validate_nla: 4 callbacks suppressed
[  172.014332][T10421] netlink: 'syz.2.1370': attribute type 4 has an invalid length.
[  172.116589][T10415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1368'.
[  172.201968][T10427] team0: left allmulticast mode
[  172.207127][T10427] team_slave_0: left allmulticast mode
[  172.214090][T10427] team_slave_1: left allmulticast mode
[  172.225288][T10427] team0: left promiscuous mode
[  172.234531][T10427] team_slave_0: left promiscuous mode
[  172.244607][T10427] team_slave_1: left promiscuous mode
[  172.253714][T10427] bridge0: port 2(team0) entered disabled state
[  172.276568][T10427] bond0: (slave batadv0): Releasing backup interface
[  172.301786][T10427] batadv0: left promiscuous mode
[  172.314523][T10427] bridge_slave_0: left allmulticast mode
[  172.329724][T10427] bridge_slave_0: left promiscuous mode
[  172.341725][T10427] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.356671][T10427] bridge_slave_1: left allmulticast mode
[  172.372474][T10427] bridge_slave_1: left promiscuous mode
[  172.379142][T10427] bridge3: port 1(bridge_slave_1) entered disabled state
[  172.389869][T10427] bond0: (slave bond_slave_0): Releasing backup interface
[  172.402986][T10427] bond_slave_0: left promiscuous mode
[  172.411631][T10427] bond0: (slave bond_slave_1): Releasing backup interface
[  172.428753][T10427] bond_slave_1: left promiscuous mode
[  172.450180][T10427] team0: Port device team_slave_0 removed
[  172.469291][T10427] team0: Port device team_slave_1 removed
[  172.475329][T10427] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.487118][T10427] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.496437][T10427] bond0: (slave wlan1): Releasing backup interface
[  172.508185][T10427] mac80211_hwsim hwsim4 wlan1: left promiscuous mode
[  172.523457][T10435] bridge2: entered promiscuous mode
[  172.531264][T10435] bridge2: entered allmulticast mode
[  172.669660][T10440] C speed is unknown, defaulting to 1000
[  172.726910][T10445] lo: entered allmulticast mode
[  172.770165][T10445] lo: left allmulticast mode
[  172.770257][T10450] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1379'.
[  172.875040][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1379'.
[  172.901015][T10456] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1379'.
[  173.213946][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1385'.
[  174.057286][T10517] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  174.097422][T10517] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  174.525197][T10541] xt_CT: You must specify a L4 protocol and not use inversions on it
[  175.009661][T10569] netlink: 'syz.4.1414': attribute type 14 has an invalid length.
[  175.017763][T10569] netlink: 'syz.4.1414': attribute type 13 has an invalid length.
[  175.506859][T10598] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame.
[  175.993726][T10632] netlink: 'syz.0.1434': attribute type 1 has an invalid length.
[  176.007993][T10632] netlink: 'syz.0.1434': attribute type 2 has an invalid length.
[  176.064467][T10632] C speed is unknown, defaulting to 1000
[  176.685547][T10682] ip6tnl3: entered promiscuous mode
[  176.715722][T10682] ip6tnl3: entered allmulticast mode
[  176.831419][T10694] sit0: entered promiscuous mode
[  176.880648][T10694] netlink: 'syz.4.1448': attribute type 1 has an invalid length.
[  176.890666][T10694] __nla_validate_parse: 16 callbacks suppressed
[  176.890683][T10694] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1448'.
[  177.175934][T10703] bond0 (unregistering): Released all slaves
[  177.233309][T10716] netlink: 'syz.3.1456': attribute type 1 has an invalid length.
[  177.268278][T10716] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1456'.
[  177.350040][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1458'.
[  177.708255][T10741] netlink: 'syz.0.1464': attribute type 10 has an invalid length.
[  177.814924][T10749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1467'.
[  177.835401][T10749] team1: entered promiscuous mode
[  177.841968][T10749] 8021q: adding VLAN 0 to HW filter on device team1
[  177.924863][T10756] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1468'.
[  178.068328][T10726] netlink: 'syz.2.1459': attribute type 1 has an invalid length.
[  178.100357][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1471'.
[  178.122390][T10726] 8021q: adding VLAN 0 to HW filter on device bond7
[  178.132017][T10767] netlink: 'syz.0.1472': attribute type 10 has an invalid length.
[  178.167822][T10767] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1472'.
[  178.178761][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1473'.
[  178.209222][T10769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1473'.
[  178.260349][T10726] 8021q: adding VLAN 0 to HW filter on device bond7
[  178.260974][T10770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1473'.
[  178.272313][T10726] bond7: (slave vcan1): The slave device specified does not support setting the MAC address
[  178.297128][T10726] bond7: (slave vcan1): Error -95 calling set_mac_address
[  178.453295][T10778] IPVS: Unknown mcast interface: bridge0
[  178.562082][T10783] IPVS: Unknown mcast interface: 
[  178.675884][T10789] netlink: 'syz.4.1480': attribute type 13 has an invalid length.
[  178.734399][T10795] xt_hashlimit: max too large, truncated to 1048576
[  178.974968][T10810] xt_policy: neither incoming nor outgoing policy selected
[  179.003913][T10820] netlink: 'syz.4.1484': attribute type 1 has an invalid length.
[  179.018494][T10814] hsr_slave_0: left promiscuous mode
[  179.062086][T10814] hsr_slave_1: left promiscuous mode
[  179.341577][T10840] IPv6: sit1: Disabled Multicast RS
[  179.425575][T10844] bridge0: port 1(vlan2) entered blocking state
[  179.468694][T10844] bridge0: port 1(vlan2) entered disabled state
[  179.475353][T10844] vlan2: entered allmulticast mode
[  179.523997][T10844] vlan2: left allmulticast mode
[  179.529945][T10851] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20002
[  179.542685][T10851] netlink: 'syz.0.1496': attribute type 8 has an invalid length.
[  179.705190][T10865] netlink: 'syz.0.1502': attribute type 3 has an invalid length.
[  179.719566][T10864] netem: invalid attributes len -24
[  179.727730][T10864] netem: change failed
[  179.850045][T10873] delete_channel: no stack
[  179.857567][T10873] netlink: 'syz.3.1504': attribute type 10 has an invalid length.
[  179.891942][T10873] netlink: 'syz.3.1504': attribute type 10 has an invalid length.
[  179.909045][T10878] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  179.929515][T10872] delete_channel: no stack
[  180.148800][T10893] 8021q: adding VLAN 0 to HW filter on device bond4
[  180.164907][T10893] bond4: entered allmulticast mode
[  180.170710][T10893] bond0: (slave bond4): Enslaving as an active interface with an up link
[  180.597244][T10922] delete_channel: no stack
[  180.602305][T10931] tipc: Started in network mode
[  180.608044][T10931] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  180.616835][T10931] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[  181.297972][T10979] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  181.644878][T11000] 
: entered promiscuous mode
[  181.668166][T11000] bond_slave_0: entered promiscuous mode
[  181.681242][T11000] bond_slave_1: entered promiscuous mode
[  181.698387][T11000] batadv_slave_0: entered promiscuous mode
[  181.728634][   T46] tipc: Node number set to 10136234
[  181.797407][T11007] sch_fq: defrate 0 ignored.
[  181.904593][T11017] syzkaller1: entered promiscuous mode
[  181.913249][T11017] syzkaller1: entered allmulticast mode
[  181.944329][T11017] x_tables: duplicate underflow at hook 2
[  182.004947][T11023] xt_bpf: check failed: parse error
[  182.029747][T11022] __nla_validate_parse: 16 callbacks suppressed
[  182.029767][T11022] netlink: 512 bytes leftover after parsing attributes in process `syz.3.1544'.
[  182.143368][T11028] ip6gre1: entered allmulticast mode
[  182.572639][T11055] validate_nla: 8 callbacks suppressed
[  182.572658][T11055] netlink: 'syz.3.1556': attribute type 1 has an invalid length.
[  182.591936][T11009] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  182.821067][T11069] xt_CT: You must specify a L4 protocol and not use inversions on it
[  183.117296][T11078] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1560'.
[  184.642945][T11054] veth0_to_hsr: entered promiscuous mode
[  184.650208][T11057] veth0_to_hsr: left promiscuous mode
[  184.656304][T11055] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  184.737623][T11058] hsr_slave_0 (unregistering): left promiscuous mode
[  184.942179][T11090] netlink: 'syz.4.1564': attribute type 5 has an invalid length.
[  184.981712][T11094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1567'.
[  184.983137][T11088] C speed is unknown, defaulting to 1000
[  184.993212][T11090] openvswitch: netlink: IP tunnel dst address not specified
[  185.058576][T11094] 8021q: adding VLAN 0 to HW filter on device bond4
[  185.076082][T11101] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  185.086350][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1565'.
[  185.104061][T11100] bond4: (slave bridge5): Enslaving as an active interface with an up link
[  185.196255][T11103] 8021q: adding VLAN 0 to HW filter on device batadv1
[  185.444466][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1571'.
[  185.488537][T11114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1571'.
[  185.511015][T11114] netlink: 'syz.2.1571': attribute type 12 has an invalid length.
[  185.542304][T11114] netlink: 'syz.2.1571': attribute type 11 has an invalid length.
[  185.746800][T11130] netlink: 'syz.4.1572': attribute type 2 has an invalid length.
[  185.788502][T11130] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1572'.
[  186.222367][T11158] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2
[  186.288186][T11163] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1585'.
[  186.391233][ T5834] Bluetooth: hci2: command 0x0406 tx timeout
[  186.397545][   T54] Bluetooth: hci3: command 0x0406 tx timeout
[  186.403662][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  186.404121][T11168] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.1588'.
[  186.420177][T11168] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  186.442076][T11171] smc: net device bond0 applied user defined pnetid SYZ0
[  186.573033][T11170] smc: net device bond0 erased user defined pnetid SYZ0
[  186.895311][T11202] macvtap1: entered promiscuous mode
[  186.902762][T11202] team0: entered promiscuous mode
[  186.915149][T11202] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  186.928916][T11202] team0: Device macvtap1 is already an upper device of the team interface
[  186.956247][T11202] team0: left promiscuous mode
[  187.003057][T11206] geneve2: entered promiscuous mode
[  187.046061][T11208] netlink: 'syz.1.1597': attribute type 1 has an invalid length.
[  187.100828][T11210] netlink: 'syz.4.1599': attribute type 4 has an invalid length.
[  187.115749][T11210] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1599'.
[  187.189214][T11212] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1600'.
[  187.674266][T11237] batadv_slave_1: entered promiscuous mode
[  187.681197][T11237] batadv_slave_1: entered allmulticast mode
[  187.750352][T11235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1607'.
[  187.826318][T11249] syzkaller1: entered promiscuous mode
[  187.886225][T11249] syzkaller1: entered allmulticast mode
[  187.938550][T11262] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1611'.
[  187.972455][T11265] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1611'.
[  188.000373][T11267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1613'.
[  188.066953][T11269] ip6tnl2: entered promiscuous mode
[  188.075791][T11269] ip6tnl2: entered allmulticast mode
[  188.396690][T11284] C speed is unknown, defaulting to 1000
[  188.588117][T11299] netlink: 'syz.1.1626': attribute type 1 has an invalid length.
[  189.002724][T11321] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1632'.
[  189.032353][T11324] C speed is unknown, defaulting to 1000
[  189.053369][T11331] bridge0: port 1(vlan2) entered blocking state
[  189.162963][T11331] bridge0: port 1(vlan2) entered disabled state
[  189.208832][T11331] vlan2: entered allmulticast mode
[  189.261777][T11340] netlink: 'syz.1.1636': attribute type 10 has an invalid length.
[  189.328046][T11336] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  189.542492][T11331] vlan2: left allmulticast mode
[  189.593753][T11284] batadv_slave_1: default FDB implementation only supports local addresses
[  189.612741][T11355] veth0: entered promiscuous mode
[  189.910265][T11349] veth0: left promiscuous mode
[  190.048551][T11374] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1641'.
[  190.073664][T11375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1641'.
[  190.273203][T11381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1644'.
[  190.450473][T11390] netlink: 'syz.1.1646': attribute type 4 has an invalid length.
[  191.769036][T11455] dvmrp0: left allmulticast mode
[  191.774373][T11455] pimreg: left allmulticast mode
[  191.963475][T11468] netlink: 'syz.4.1669': attribute type 1 has an invalid length.
[  191.972754][T11468] netlink: 'syz.4.1669': attribute type 11 has an invalid length.
[  192.056878][T11474] sctp: [Deprecated]: syz.0.1672 (pid 11474) Use of struct sctp_assoc_value in delayed_ack socket option.
[  192.056878][T11474] Use struct sctp_sack_info instead
[  192.204688][T11483] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.206951][T11481] __nla_validate_parse: 10 callbacks suppressed
[  192.206970][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1673'.
[  192.651844][T11503] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1680'.
[  192.720643][T11511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1681'.
[  192.756854][T11511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1681'.
[  192.980648][T11526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1687'.
[  193.113268][T11538] netlink: 'syz.2.1688': attribute type 4 has an invalid length.
[  193.198352][T11542] netlink: 'syz.2.1688': attribute type 4 has an invalid length.
[  193.329211][T11550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1691'.
[  193.388344][T11541] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1691'.
[  193.400976][T11538] netlink: 'syz.2.1688': attribute type 4 has an invalid length.
[  193.525450][T11561] netlink: 'syz.0.1695': attribute type 1 has an invalid length.
[  193.549691][T11555] Can't find ip_set type bitmap:ip,mac
[  193.566313][T11561] netlink: 'syz.0.1695': attribute type 1 has an invalid length.
[  193.704388][T11575] netlink: 'syz.4.1699': attribute type 10 has an invalid length.
[  193.736805][T11575] syz_tun: entered promiscuous mode
[  193.758306][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1700'.
[  193.760932][T11575] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  193.780995][T11580] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.893226][T11584] batadv_slave_1: default FDB implementation only supports local addresses
[  194.748491][T11634] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1720'.
[  194.778953][T11634] macvtap0: entered promiscuous mode
[  194.997092][T11643] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1722'.
[  195.238881][T11650] netlink: 'syz.0.1724': attribute type 9 has an invalid length.
[  195.788600][T11663] netlink: 'syz.3.1730': attribute type 1 has an invalid length.
[  196.123330][T11700] netlink: 'syz.2.1740': attribute type 4 has an invalid length.
[  196.133112][T11700] netlink: 'syz.2.1740': attribute type 4 has an invalid length.
[  196.748655][T11737] netlink: 'syz.2.1749': attribute type 8 has an invalid length.
[  196.937148][T11748] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.962227][T11748] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.086167][T11754] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.448325][T11783] __nla_validate_parse: 8 callbacks suppressed
[  197.448347][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1761'.
[  197.578407][T11789] No such timeout policy "syz0"
[  197.586465][T11789] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1765'.
[  197.681412][T11796] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1766'.
[  197.898532][T11816] netlink: 'syz.1.1769': attribute type 2 has an invalid length.
[  197.936341][T11816] netlink: 'syz.1.1769': attribute type 9 has an invalid length.
[  197.978289][T11816] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1769'.
[  198.007208][T11818] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1764'.
[  198.189604][T11827] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  198.284246][T11834] Cannot find del_set index 65531 as target
[  198.294631][T11831] netlink: 'syz.2.1776': attribute type 12 has an invalid length.
[  198.380737][T11838] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  198.548840][T11851] tap0: tun_chr_ioctl cmd 1074025672
[  198.554205][T11851] tap0: ignored: set checksum disabled
[  198.563057][T11852] xt_CT: You must specify a L4 protocol and not use inversions on it
[  198.673321][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1779'.
[  198.996504][T11873] veth1_macvtap: left promiscuous mode
[  199.561897][T11910] xt_hashlimit: overflow, try lower: 4294967295/0
[  199.829231][T11919] netlink: 'syz.3.1802': attribute type 8 has an invalid length.
[  199.859290][T11922] IPv6: sit1: Disabled Multicast RS
[  199.877942][T11919] netlink: 'syz.3.1802': attribute type 8 has an invalid length.
[  199.878419][T11924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1803'.
[  199.898112][T11919] netlink: 'syz.3.1802': attribute type 8 has an invalid length.
[  199.908227][T11919] netlink: 'syz.3.1802': attribute type 8 has an invalid length.
[  199.947767][T11919] netlink: 'syz.3.1802': attribute type 8 has an invalid length.
[  200.026400][T11919] netlink: 'syz.3.1802': attribute type 8 has an invalid length.
[  200.038441][T11919] netlink: 'syz.3.1802': attribute type 8 has an invalid length.
[  200.048694][T11919] netlink: 'syz.3.1802': attribute type 8 has an invalid length.
[  200.065501][T11931] batadv0: mtu greater than device maximum
[  200.098576][T11919] netlink: 'syz.3.1802': attribute type 8 has an invalid length.
[  200.136370][T11919] netlink: 'syz.3.1802': attribute type 8 has an invalid length.
[  200.204364][T11933] C speed is unknown, defaulting to 1000
[  200.958384][T11933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1807'.
[  201.003671][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1807'.
[  201.015203][T11976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1819'.
[  201.684487][T12013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  202.110891][T12041] openvswitch: netlink: Actions may not be safe on all matching packets
[  202.459366][T12065] __nla_validate_parse: 3 callbacks suppressed
[  202.459385][T12065] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1845'.
[  202.545017][T12070] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1846'.
[  202.682814][T12074] C speed is unknown, defaulting to 1000
[  202.906433][T12080] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1849'.
[  202.928001][T12080] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1849'.
[  202.955152][T12080] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1849'.
[  202.974751][T12085] macsec0: entered allmulticast mode
[  202.983167][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1851'.
[  202.993278][T12089] veth1_macvtap: entered promiscuous mode
[  203.011417][T12089] veth1_macvtap: entered allmulticast mode
[  203.024000][T12089] macsec0: left allmulticast mode
[  203.031366][T12089] veth1_macvtap: left allmulticast mode
[  203.199746][T12096] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1853'.
[  203.544752][T12119] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.578794][T12121] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1862'.
[  203.711400][T12119] syzkaller0: entered promiscuous mode
[  203.723128][T12119] syzkaller0: entered allmulticast mode
[  203.734995][T12132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1864'.
[  203.744588][T12119] tipc: Resetting bearer <eth:syzkaller0>
[  203.836822][T12118] tipc: Resetting bearer <eth:syzkaller0>
[  204.165889][T12161] dccp_invalid_packet: P.Data Offset(0) too small
[  206.099308][T12118] tipc: Disabling bearer <eth:syzkaller0>
[  206.369018][T12163] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.393306][T12178] validate_nla: 29 callbacks suppressed
[  206.393325][T12178] netlink: 'syz.1.1876': attribute type 1 has an invalid length.
[  206.417552][T12178] netlink: 'syz.1.1876': attribute type 3 has an invalid length.
[  206.434244][T12178] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1876'.
[  206.445881][T12178] NCSI netlink: No device for ifindex 813332851
[  206.584036][T12191] sctp: [Deprecated]: syz.4.1880 (pid 12191) Use of int in max_burst socket option deprecated.
[  206.584036][T12191] Use struct sctp_assoc_value instead
[  206.934631][T12210] netlink: 'syz.0.1888': attribute type 10 has an invalid length.
[  206.942817][T12210] syz_tun: entered promiscuous mode
[  207.006171][ T5839] hid-generic 0005:15C2:0006.0001: item fetching failed at offset 0/1
[  207.018209][ T5839] hid-generic 0005:15C2:0006.0001: probe with driver hid-generic failed with error -22
[  207.037078][T12215] netlink: 'syz.1.1891': attribute type 1 has an invalid length.
[  207.048074][T12220] sctp: [Deprecated]: syz.1.1891 (pid 12220) Use of struct sctp_assoc_value in delayed_ack socket option.
[  207.048074][T12220] Use struct sctp_sack_info instead
[  207.066077][T12213] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  207.160125][T12230] Cannot find del_set index 65531 as target
[  207.452503][T12243] netlink: 'syz.2.1898': attribute type 21 has an invalid length.
[  207.478206][T12243] IPv6: NLM_F_CREATE should be specified when creating new route
[  207.479286][T12246] netlink: 'syz.0.1900': attribute type 2 has an invalid length.
[  207.486037][T12243] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  207.501728][T12243] IPv6: NLM_F_CREATE should be set when creating new route
[  207.503420][T12246] __nla_validate_parse: 6 callbacks suppressed
[  207.503435][T12246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1900'.
[  207.509189][T12243] IPv6: NLM_F_CREATE should be set when creating new route
[  207.509210][T12243] IPv6: NLM_F_CREATE should be set when creating new route
[  207.740518][T12258] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1904'.
[  207.762032][T12258] 0����FN�: renamed from bond_slave_0 (while UP)
[  207.772411][T12258] 0����FN�: entered allmulticast mode
[  207.891074][T12268] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.934846][T12272] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.253702][T12289] netlink: 'syz.4.1915': attribute type 1 has an invalid length.
[  208.383478][T12294] netlink: 'syz.0.1918': attribute type 10 has an invalid length.
[  208.452452][T12299] netlink: zone id is out of range
[  208.458613][T12299] netlink: del zone limit has 8 unknown bytes
[  208.461833][T12297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1919'.
[  208.515660][T12303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1919'.
[  208.526604][T12304] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1920'.
[  208.666874][T12302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1921'.
[  208.734640][T12306] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1922'.
[  209.111089][T12332] netlink: 516 bytes leftover after parsing attributes in process `syz.0.1928'.
[  209.365452][T12347] netlink: 'syz.1.1935': attribute type 1 has an invalid length.
[  209.542514][T12360] netlink: 'syz.0.1939': attribute type 3 has an invalid length.
[  209.664897][T12366] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1941'.
[  209.675845][T12366] xt_TCPMSS: Only works on TCP SYN packets
[  209.686433][T12369] netlink: 1100 bytes leftover after parsing attributes in process `syz.0.1942'.
[  209.696943][T12369] openvswitch: netlink: Flow key attr not present in new flow.
[  209.865166][T12377] FAULT_INJECTION: forcing a failure.
[  209.865166][T12377] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  209.882655][T12377] CPU: 1 UID: 0 PID: 12377 Comm: syz.2.1945 Not tainted 6.13.0-rc5-syzkaller-00148-gfd48f071a3d6 #0
[  209.893558][T12377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  209.903765][T12377] Call Trace:
[  209.907145][T12377]  <TASK>
[  209.910097][T12377]  dump_stack_lvl+0x241/0x360
[  209.914820][T12377]  ? __pfx_dump_stack_lvl+0x10/0x10
[  209.920235][T12377]  ? __pfx__printk+0x10/0x10
[  209.922311][T12376] netlink: 'syz.0.1946': attribute type 11 has an invalid length.
[  209.924871][T12377]  ? __pfx_lock_release+0x10/0x10
[  209.937834][T12377]  ? __lock_acquire+0x1397/0x2100
[  209.942874][T12377]  should_fail_ex+0x3b0/0x4e0
[  209.947569][T12377]  _copy_from_user+0x2f/0xc0
[  209.952355][T12377]  kstrtouint_from_user+0xc6/0x190
[  209.957503][T12377]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  209.963319][T12377]  ? __pfx_lock_acquire+0x10/0x10
[  209.968376][T12377]  proc_fail_nth_write+0xaa/0x2d0
[  209.973406][T12377]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  209.979484][T12377]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  209.985644][T12377]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  209.991289][T12377]  vfs_write+0x2a3/0xd30
[  209.995543][T12377]  ? __pfx_vfs_write+0x10/0x10
[  210.000318][T12377]  ? __fget_files+0x2a/0x410
[  210.004919][T12377]  ? __fget_files+0x395/0x410
[  210.009597][T12377]  ? __fget_files+0x2a/0x410
[  210.014204][T12377]  ksys_write+0x18f/0x2b0
[  210.018579][T12377]  ? __pfx_ksys_write+0x10/0x10
[  210.023464][T12377]  ? do_syscall_64+0x100/0x230
[  210.028338][T12377]  ? do_syscall_64+0xb6/0x230
[  210.033062][T12377]  do_syscall_64+0xf3/0x230
[  210.037574][T12377]  ? clear_bhb_loop+0x35/0x90
[  210.042294][T12377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.048199][T12377] RIP: 0033:0x7fc0f6b847df
[  210.052617][T12377] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  210.072309][T12377] RSP: 002b:00007fc0f49f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  210.080836][T12377] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc0f6b847df
[  210.088971][T12377] RDX: 0000000000000001 RSI: 00007fc0f49f60a0 RDI: 0000000000000004
[  210.097068][T12377] RBP: 00007fc0f49f6090 R08: 0000000000000000 R09: 0000000000000000
[  210.105240][T12377] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  210.113831][T12377] R13: 0000000000000000 R14: 00007fc0f6d75fa0 R15: 00007ffd4b172d28
[  210.121841][T12377]  </TASK>
[  210.277402][T12388] veth7: entered allmulticast mode
[  210.289197][T12383] x_tables: duplicate underflow at hook 1
[  210.852095][T12427] veth9: entered allmulticast mode
[  211.134281][T12449] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.585796][T12475] openvswitch: netlink: IP tunnel dst address not specified
[  211.606277][T12476] openvswitch: netlink: IP tunnel dst address not specified
[  212.428901][T12516] dvmrp1: entered allmulticast mode
[  212.447120][T12516] dvmrp1: left allmulticast mode
[  212.559436][T12531] __nla_validate_parse: 6 callbacks suppressed
[  212.559459][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1991'.
[  212.607608][T12531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1991'.
[  212.657228][T12531] validate_nla: 3 callbacks suppressed
[  212.657248][T12531] netlink: 'syz.2.1991': attribute type 11 has an invalid length.
[  213.070586][T12566] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2000'.
[  213.192151][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2003'.
[  213.232679][T12579] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2003'.
[  213.457981][T12590] bridge0: port 1(veth0_to_bridge) entered blocking state
[  213.466256][T12590] bridge0: port 1(veth0_to_bridge) entered disabled state
[  213.509641][T12590] veth0_to_bridge: entered promiscuous mode
[  213.709445][T12608] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2009'.
[  213.722952][T12607] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2009'.
[  213.820765][T12615] netlink: 'syz.0.2010': attribute type 2 has an invalid length.
[  213.841624][T12615] netlink: 'syz.0.2010': attribute type 1 has an invalid length.
[  214.057188][T12629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2015'.
[  214.146246][T12629] vlan0: entered promiscuous mode
[  214.316081][T12643] netlink: 'syz.2.2019': attribute type 1 has an invalid length.
[  214.343001][T12643] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2019'.
[  214.365757][T12652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2022'.
[  214.848880][T12672] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  214.882380][T12672] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  214.958924][T12672] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  215.003748][T12672] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  215.137176][T12672] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  215.152669][T12672] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  215.178169][T12672] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  215.195873][T12672] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  215.242353][T12672] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  215.294419][T12672] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  215.608064][T12715] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  215.781853][T12725] netlink: 'syz.1.2048': attribute type 1 has an invalid length.
[  215.795377][T12725] netlink: 'syz.1.2048': attribute type 1 has an invalid length.
[  216.341477][T12765] netlink: 'syz.1.2057': attribute type 1 has an invalid length.
[  216.394590][T12765] bond7: entered promiscuous mode
[  216.408737][T12765] bond7: entered allmulticast mode
[  216.453103][T12769] bond7: (slave ip6gretap3): making interface the new active one
[  216.458263][T12764] delete_channel: no stack
[  216.466495][T12769] ip6gretap3: entered promiscuous mode
[  216.476748][T12769] ip6gretap3: entered allmulticast mode
[  216.504921][T12769] bond7: (slave ip6gretap3): Enslaving as an active interface with an up link
[  216.654682][T12781] sctp: [Deprecated]: syz.3.2061 (pid 12781) Use of int in max_burst socket option deprecated.
[  216.654682][T12781] Use struct sctp_assoc_value instead
[  217.408749][T12835] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4)
[  217.749074][T12863] __nla_validate_parse: 56 callbacks suppressed
[  217.749096][T12863] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2086'.
[  217.791952][T12864] netlink: 'syz.0.2087': attribute type 1 has an invalid length.
[  217.853353][T12864] 8021q: adding VLAN 0 to HW filter on device bond5
[  217.913291][T12881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2092'.
[  217.959590][T12881] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  218.087948][T12892] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2094'.
[  218.449166][T12916] netlink: 'syz.4.2100': attribute type 2 has an invalid length.
[  218.671867][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2103'.
[  218.890217][T12944] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2109'.
[  218.931305][T12943] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2109'.
[  219.033100][T12950] netlink: 'syz.0.2112': attribute type 1 has an invalid length.
[  219.081148][T12950] bond6: entered promiscuous mode
[  219.092585][T12950] 8021q: adding VLAN 0 to HW filter on device bond6
[  219.114000][T12959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2115'.
[  219.124453][T12959] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2115'.
[  219.134347][T12959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2115'.
[  219.204553][T12964] netlink: 'syz.1.2116': attribute type 1 has an invalid length.
[  219.211554][T12950] 8021q: adding VLAN 0 to HW filter on device bond6
[  219.213618][T12964] netlink: 'syz.1.2116': attribute type 2 has an invalid length.
[  219.238186][T12963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2112'.
[  219.262083][T12950] bond6: (slave ip6gre3): The slave device specified does not support setting the MAC address
[  219.305200][T12950] bond6: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode
[  219.325468][T12950] bond6: (slave ip6gre3): making interface the new active one
[  219.336487][T12950] ip6gre3: entered promiscuous mode
[  219.349165][T12950] bond6: (slave ip6gre3): Enslaving as an active interface with an up link
[  219.470785][T12978] netlink: 'syz.3.2119': attribute type 1 has an invalid length.
[  219.550364][T12963] bond6 (unregistering): (slave ip6gre3): Releasing backup interface
[  219.559347][T12963] ip6gre3: left promiscuous mode
[  219.567279][T12963] bond6 (unregistering): Released all slaves
[  219.781578][T12986] No such timeout policy "syz0"
[  219.800681][T12986] Cannot find del_set index 65531 as target
[  219.916356][T12985] syzkaller0: entered promiscuous mode
[  219.933052][T12985] syzkaller0: entered allmulticast mode
[  220.170956][T13013] netlink: 'syz.2.2126': attribute type 10 has an invalid length.
[  222.770658][T13043] openvswitch: netlink: Key type 34 is out of range max 32
[  222.936344][T13034] __nla_validate_parse: 5 callbacks suppressed
[  222.936365][T13034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2136'.
[  223.215440][T13057] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2142'.
[  223.259363][T13059] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2143'.
[  223.456337][T13073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2148'.
[  223.493934][T13074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2148'.
[  223.505079][T13074] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2148'.
[  223.515908][T13073] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2148'.
[  223.592805][T13080] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.790548][T13095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2155'.
[  223.820303][T13097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2153'.
[  223.842356][T13097] sctp: [Deprecated]: syz.4.2153 (pid 13097) Use of int in maxseg socket option.
[  223.842356][T13097] Use struct sctp_assoc_value instead
[  224.044942][T13109] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2160'.
[  224.182147][T13112] debugfs: Directory 'netdev:nicvf0' with parent 'phy9' already present!
[  224.264292][T13112] netlink: 'syz.4.2161': attribute type 1 has an invalid length.
[  224.319501][T13118] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  224.459727][T13124] xt_l2tp: v2 doesn't support IP mode
[  224.796054][T13148] netlink: 'syz.0.2173': attribute type 4 has an invalid length.
[  225.518320][T13191] vlan4: entered promiscuous mode
[  225.600736][T13198] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (8)
[  225.991284][T13227] ipvlan2: entered allmulticast mode
[  226.009564][T13227] veth0_vlan: entered allmulticast mode
[  226.256806][T13244] netlink: 'syz.2.2203': attribute type 4 has an invalid length.
[  226.402431][T13253] x_tables: duplicate underflow at hook 1
[  226.475327][T13256] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613)
[  227.005549][T13289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  227.827234][T13358] x_tables: duplicate underflow at hook 1
[  227.887132][T13365] netlink: 'syz.0.2242': attribute type 2 has an invalid length.
[  227.899878][T13365] netlink: 'syz.0.2242': attribute type 8 has an invalid length.
[  228.115103][   T46] hid-generic 0005:15C2:0006.0002: item fetching failed at offset 0/1
[  228.131825][   T46] hid-generic 0005:15C2:0006.0002: probe with driver hid-generic failed with error -22
[  228.393423][T13397] ax25_connect(): syz.0.2252 uses autobind, please contact jreuter@yaina.de
[  228.562812][T13408] bond0: (slave syz_tun): Releasing backup interface
[  228.654888][T13408] bridge_slave_0: left allmulticast mode
[  228.696338][T13408] bridge_slave_0: left promiscuous mode
[  228.743623][T13408] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.830659][T13408] bridge_slave_1: left allmulticast mode
[  228.836608][T13408] bridge_slave_1: left promiscuous mode
[  228.843116][T13408] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.855502][T13408] bond0: (slave 
00����FN�): Releasing backup interface
[  228.875484][T13431] netlink: 'syz.0.2261': attribute type 4 has an invalid length.
[  228.901597][T13408] bond0: (slave bond_slave_1): Releasing backup interface
[  228.905914][T13434] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  228.968991][T13408] team0: Port device team_slave_0 removed
[  229.008377][T13408] team0: Port device team_slave_1 removed
[  229.025480][T13408] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  229.036501][T13408] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.056924][T13408] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  229.069513][T13408] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.085752][T13408] bond0: (slave wlan1): Releasing backup interface
[  229.110312][T13408] tipc: Resetting bearer <eth:syzkaller0>
[  229.118567][T13408] bond0: (slave bond3): Releasing backup interface
[  229.141823][T13410] __nla_validate_parse: 13 callbacks suppressed
[  229.141846][T13410] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2255'.
[  229.188756][    T8] C speed is unknown, defaulting to 1000
[  229.316710][T13446] tipc: Started in network mode
[  229.328483][T13446] tipc: Node identity ea52c716bebe, cluster identity 4711
[  229.357238][T13446] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  229.418766][T13455] x_tables: duplicate underflow at hook 1
[  229.454988][T13452] syzkaller0: entered promiscuous mode
[  229.489020][T13452] syzkaller0: entered allmulticast mode
[  229.495406][T13452] tipc: Resetting bearer <eth:syzkaller0>
[  229.550702][T13457] netlink: 'syz.1.2270': attribute type 14 has an invalid length.
[  229.602678][T13459] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2268'.
[  229.616019][T13463] netlink: 'syz.3.2271': attribute type 4 has an invalid length.
[  229.625139][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2268'.
[  229.641614][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2268'.
[  229.992486][T13488] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0
[  230.013923][T13493] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0
[  230.129590][T13445] tipc: Resetting bearer <eth:syzkaller0>
[  230.238706][T13504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2280'.
[  230.386922][T13511] netlink: 'syz.3.2281': attribute type 18 has an invalid length.
[  230.417629][ T5880] tipc: Node number set to 1424803606
[  230.538152][T13516] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2280'.
[  232.337020][T13445] tipc: Disabling bearer <eth:syzkaller0>
[  232.531049][T13525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  232.538517][T13530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2284'.
[  232.579518][T13536] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2288'.
[  232.597754][T13529] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2284'.
[  232.673373][T13540] sock: sock_timestamping_bind_phc: sock not bind to device
[  232.773596][T13545] netlink: 'syz.3.2291': attribute type 1 has an invalid length.
[  232.809997][T13547] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2292'.
[  232.820371][T13547] netlink: 'syz.0.2292': attribute type 1 has an invalid length.
[  232.828433][T13547] netlink: 'syz.0.2292': attribute type 1 has an invalid length.
[  233.152612][T13563] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.360837][T13585] netlink: 'syz.0.2304': attribute type 24 has an invalid length.
[  233.472215][T13590] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  233.623512][T13601] geneve2: entered promiscuous mode
[  234.867806][ T5145] Bluetooth: hci4: command 0x0405 tx timeout
[  234.895071][ T5843] ------------[ cut here ]------------
[  234.902079][ T5843] refcount_t: underflow; use-after-free.
[  234.908913][ T5843] WARNING: CPU: 1 PID: 5843 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0
[  234.918938][ T5843] Modules linked in:
[  234.922865][ T5843] CPU: 1 UID: 0 PID: 5843 Comm: syz-executor Not tainted 6.13.0-rc5-syzkaller-00148-gfd48f071a3d6 #0
[  234.934559][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  234.944793][ T5843] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0
[  234.951032][ T5843] Code: e0 6b 5f 8c e8 77 cb 9d fc 90 0f 0b 90 90 eb 99 e8 5b 27 dd fc c6 05 1f 6e 41 0b 01 90 48 c7 c7 40 6c 5f 8c e8 57 cb 9d fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 38 27 dd fc c6 05 f9 6d 41 0b 01 90
[  234.971599][ T5843] RSP: 0018:ffffc900040af538 EFLAGS: 00010246
[  234.978302][ T5843] RAX: 551f546f797f7a00 RBX: ffff888028d71878 RCX: ffff888012591e00
[  234.986296][ T5843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  234.994567][ T5843] RBP: 0000000000000003 R08: ffffffff81601a82 R09: fffffbfff1cfa210
[  235.002971][ T5843] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff888028d71860
[  235.011502][ T5843] R13: ffffffff86039440 R14: 1ffff110051ae30c R15: ffff888028d71860
[  235.020048][ T5843] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  235.029848][ T5843] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  235.036468][ T5843] CR2: 00007f59adca7d60 CR3: 0000000033bf6000 CR4: 00000000003526f0
[  235.044751][ T5843] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  235.053326][ T5843] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  235.061724][ T5843] Call Trace:
[  235.065001][ T5843]  <TASK>
[  235.068482][ T5843]  ? __warn+0x165/0x4d0
[  235.072676][ T5843]  ? refcount_warn_saturate+0x15a/0x1d0
[  235.078791][ T5843]  ? report_bug+0x2b3/0x500
[  235.083327][ T5843]  ? refcount_warn_saturate+0x15a/0x1d0
[  235.089718][ T5843]  ? handle_bug+0x60/0x90
[  235.094067][ T5843]  ? exc_invalid_op+0x1a/0x50
[  235.099352][ T5843]  ? asm_exc_invalid_op+0x1a/0x20
[  235.104425][ T5843]  ? __pfx_klist_children_put+0x10/0x10
[  235.110661][ T5843]  ? __warn_printk+0x292/0x360
[  235.115459][ T5843]  ? refcount_warn_saturate+0x15a/0x1d0
[  235.121547][ T5843]  ? refcount_warn_saturate+0x159/0x1d0
[  235.127103][ T5843]  klist_dec_and_del+0x3ec/0x3f0
[  235.132318][ T5843]  ? __pfx_klist_children_put+0x10/0x10
[  235.138446][ T5843]  ? __pfx_klist_children_put+0x10/0x10
[  235.144014][ T5843]  ? __pfx_klist_children_put+0x10/0x10
[  235.150440][ T5843]  klist_remove+0x25e/0x480
[  235.154975][ T5843]  ? __pfx_klist_remove+0x10/0x10
[  235.160588][ T5843]  ? __pfx_kobject_move+0x10/0x10
[  235.165641][ T5843]  ? get_device_parent+0x25d/0x410
[  235.171434][ T5843]  device_move+0x1b4/0x710
[  235.175893][ T5843]  ? kasan_quarantine_put+0xdc/0x230
[  235.181601][ T5843]  hci_conn_del_sysfs+0xac/0x160
[  235.186543][ T5843]  hci_conn_del+0x8c4/0xc40
[  235.191280][ T5843]  hci_conn_hash_flush+0x258/0x350
[  235.196543][ T5843]  ? __pfx_hci_conn_hash_flush+0x10/0x10
[  235.202214][ T5843]  ? drain_workqueue+0x2d3/0x3a0
[  235.207174][ T5843]  ? hci_discovery_set_state+0x57/0x180
[  235.212929][ T5843]  hci_dev_close_sync+0xa42/0x11c0
[  235.218615][ T5843]  hci_unregister_dev+0x20b/0x510
[  235.223660][ T5843]  vhci_release+0x80/0xd0
[  235.228563][ T5843]  ? __pfx_vhci_release+0x10/0x10
[  235.233622][ T5843]  __fput+0x23c/0xa50
[  235.238459][ T5843]  task_work_run+0x24f/0x310
[  235.243087][ T5843]  ? __pfx_task_work_run+0x10/0x10
[  235.248746][ T5843]  ? do_exit+0xa25/0x28e0
[  235.253101][ T5843]  ? do_exit+0xa25/0x28e0
[  235.257957][ T5843]  do_exit+0xa2a/0x28e0
[  235.262241][ T5843]  ? __pfx_do_exit+0x10/0x10
[  235.266864][ T5843]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  235.273148][ T5843]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  235.279725][ T5843]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  235.286070][ T5843]  ? _raw_spin_lock_irq+0xdf/0x120
[  235.291512][ T5843]  do_group_exit+0x207/0x2c0
[  235.296101][ T5843]  ? _raw_spin_unlock_irq+0x23/0x50
[  235.302258][ T5843]  ? lockdep_hardirqs_on+0x99/0x150
[  235.308054][ T5843]  get_signal+0x16b2/0x1750
[  235.312601][ T5843]  ? __pfx_get_signal+0x10/0x10
[  235.317991][ T5843]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[  235.323497][ T5843]  arch_do_signal_or_restart+0x96/0x860
[  235.329507][ T5843]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  235.335673][ T5843]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  235.342245][ T5843]  ? syscall_exit_to_user_mode+0xa3/0x340
[  235.348707][ T5843]  syscall_exit_to_user_mode+0xce/0x340
[  235.354287][ T5843]  do_syscall_64+0x100/0x230
[  235.359712][ T5843]  ? clear_bhb_loop+0x35/0x90
[  235.364407][ T5843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.370673][ T5843] RIP: 0033:0x7fc0f6bb85e5
[  235.375082][ T5843] Code: Unable to access opcode bytes at 0x7fc0f6bb85bb.
[  235.382957][ T5843] RSP: 002b:00007ffd4b173050 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  235.391853][ T5843] RAX: fffffffffffffdfc RBX: 0000000000000520 RCX: 00007fc0f6bb85e5
[  235.400502][ T5843] RDX: 00007ffd4b173090 RSI: 0000000000000000 RDI: 0000000000000000
[  235.409096][ T5843] RBP: 00007ffd4b1730ec R08: 0000000000000000 R09: 7fffffffffffffff
[  235.417196][ T5843] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032
[  235.425610][ T5843] R13: 000000000003911b R14: 00007ffd4b173140 R15: 0000000000000bb8
[  235.434332][ T5843]  </TASK>
[  235.437640][ T5843] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  235.444940][ T5843] CPU: 1 UID: 0 PID: 5843 Comm: syz-executor Not tainted 6.13.0-rc5-syzkaller-00148-gfd48f071a3d6 #0
[  235.456053][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  235.466130][ T5843] Call Trace:
[  235.469422][ T5843]  <TASK>
[  235.472366][ T5843]  dump_stack_lvl+0x241/0x360
[  235.477058][ T5843]  ? __pfx_dump_stack_lvl+0x10/0x10
[  235.482350][ T5843]  ? __pfx__printk+0x10/0x10
[  235.486974][ T5843]  ? vscnprintf+0x5d/0x90
[  235.491325][ T5843]  panic+0x349/0x880
[  235.495241][ T5843]  ? __warn+0x174/0x4d0
[  235.499405][ T5843]  ? __pfx_panic+0x10/0x10
[  235.503842][ T5843]  __warn+0x344/0x4d0
[  235.507845][ T5843]  ? refcount_warn_saturate+0x15a/0x1d0
[  235.513437][ T5843]  report_bug+0x2b3/0x500
[  235.517790][ T5843]  ? refcount_warn_saturate+0x15a/0x1d0
[  235.523366][ T5843]  handle_bug+0x60/0x90
[  235.527542][ T5843]  exc_invalid_op+0x1a/0x50
[  235.532605][ T5843]  asm_exc_invalid_op+0x1a/0x20
[  235.537665][ T5843] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0
[  235.544003][ T5843] Code: e0 6b 5f 8c e8 77 cb 9d fc 90 0f 0b 90 90 eb 99 e8 5b 27 dd fc c6 05 1f 6e 41 0b 01 90 48 c7 c7 40 6c 5f 8c e8 57 cb 9d fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 38 27 dd fc c6 05 f9 6d 41 0b 01 90
[  235.563721][ T5843] RSP: 0018:ffffc900040af538 EFLAGS: 00010246
[  235.569814][ T5843] RAX: 551f546f797f7a00 RBX: ffff888028d71878 RCX: ffff888012591e00
[  235.577804][ T5843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  235.585775][ T5843] RBP: 0000000000000003 R08: ffffffff81601a82 R09: fffffbfff1cfa210
[  235.593750][ T5843] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff888028d71860
[  235.601725][ T5843] R13: ffffffff86039440 R14: 1ffff110051ae30c R15: ffff888028d71860
[  235.609730][ T5843]  ? __pfx_klist_children_put+0x10/0x10
[  235.615288][ T5843]  ? __warn_printk+0x292/0x360
[  235.620063][ T5843]  ? refcount_warn_saturate+0x159/0x1d0
[  235.625619][ T5843]  klist_dec_and_del+0x3ec/0x3f0
[  235.630572][ T5843]  ? __pfx_klist_children_put+0x10/0x10
[  235.636122][ T5843]  ? __pfx_klist_children_put+0x10/0x10
[  235.641667][ T5843]  ? __pfx_klist_children_put+0x10/0x10
[  235.647216][ T5843]  klist_remove+0x25e/0x480
[  235.651733][ T5843]  ? __pfx_klist_remove+0x10/0x10
[  235.656765][ T5843]  ? __pfx_kobject_move+0x10/0x10
[  235.661795][ T5843]  ? get_device_parent+0x25d/0x410
[  235.666910][ T5843]  device_move+0x1b4/0x710
[  235.671338][ T5843]  ? kasan_quarantine_put+0xdc/0x230
[  235.676629][ T5843]  hci_conn_del_sysfs+0xac/0x160
[  235.681579][ T5843]  hci_conn_del+0x8c4/0xc40
[  235.686097][ T5843]  hci_conn_hash_flush+0x258/0x350
[  235.691212][ T5843]  ? __pfx_hci_conn_hash_flush+0x10/0x10
[  235.696849][ T5843]  ? drain_workqueue+0x2d3/0x3a0
[  235.701790][ T5843]  ? hci_discovery_set_state+0x57/0x180
[  235.707347][ T5843]  hci_dev_close_sync+0xa42/0x11c0
[  235.712474][ T5843]  hci_unregister_dev+0x20b/0x510
[  235.717498][ T5843]  vhci_release+0x80/0xd0
[  235.721835][ T5843]  ? __pfx_vhci_release+0x10/0x10
[  235.726862][ T5843]  __fput+0x23c/0xa50
[  235.730858][ T5843]  task_work_run+0x24f/0x310
[  235.735455][ T5843]  ? __pfx_task_work_run+0x10/0x10
[  235.740569][ T5843]  ? do_exit+0xa25/0x28e0
[  235.744901][ T5843]  ? do_exit+0xa25/0x28e0
[  235.749232][ T5843]  do_exit+0xa2a/0x28e0
[  235.753391][ T5843]  ? __pfx_do_exit+0x10/0x10
[  235.757982][ T5843]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  235.763359][ T5843]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  235.769344][ T5843]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  235.775675][ T5843]  ? _raw_spin_lock_irq+0xdf/0x120
[  235.780794][ T5843]  do_group_exit+0x207/0x2c0
[  235.785385][ T5843]  ? _raw_spin_unlock_irq+0x23/0x50
[  235.790597][ T5843]  ? lockdep_hardirqs_on+0x99/0x150
[  235.795801][ T5843]  get_signal+0x16b2/0x1750
[  235.800318][ T5843]  ? __pfx_get_signal+0x10/0x10
[  235.805170][ T5843]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[  235.810638][ T5843]  arch_do_signal_or_restart+0x96/0x860
[  235.816191][ T5843]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  235.822350][ T5843]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  235.828344][ T5843]  ? syscall_exit_to_user_mode+0xa3/0x340
[  235.834068][ T5843]  syscall_exit_to_user_mode+0xce/0x340
[  235.839621][ T5843]  do_syscall_64+0x100/0x230
[  235.844218][ T5843]  ? clear_bhb_loop+0x35/0x90
[  235.848898][ T5843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.854794][ T5843] RIP: 0033:0x7fc0f6bb85e5
[  235.859208][ T5843] Code: Unable to access opcode bytes at 0x7fc0f6bb85bb.
[  235.866215][ T5843] RSP: 002b:00007ffd4b173050 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[  235.874649][ T5843] RAX: fffffffffffffdfc RBX: 0000000000000520 RCX: 00007fc0f6bb85e5
[  235.882647][ T5843] RDX: 00007ffd4b173090 RSI: 0000000000000000 RDI: 0000000000000000
[  235.890714][ T5843] RBP: 00007ffd4b1730ec R08: 0000000000000000 R09: 7fffffffffffffff
[  235.899119][ T5843] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032
[  235.907114][ T5843] R13: 000000000003911b R14: 00007ffd4b173140 R15: 0000000000000bb8
[  235.915110][ T5843]  </TASK>
[  235.918516][ T5843] Kernel Offset: disabled
[  235.924425][ T5843] Rebooting in 86400 seconds..