last executing test programs:

53.099024863s ago: executing program 1 (id=1949):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)={0x1c, 0x3d, 0x9, 0x0, 0x800, {0x1}, [@typed={0x4}, @nested={0x4, 0x1}]}, 0x1c}}, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x1c, r2, 0xf01, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r4 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000760091"], 0xfe33)

52.938648046s ago: executing program 0 (id=1950):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007911c00000000000850000005100000095000000f8000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe01, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001e00)={'vlan1\x00', <r2=>0x0})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r4 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0)
connect$llc(r4, &(0x7f0000000300)={0x1a, 0x326, 0x2, 0x40, 0x3, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x10)
writev(r3, &(0x7f0000000440)=[{&(0x7f0000000000)="b09aad19b75e0438", 0x8}, {&(0x7f0000000340)="95fcf2b7fcb6c29e1587e58743feaabbfc43244a9cc4b94fc758bd0cd492f55582c22358865ecb432e1c85e2a49a42895f95edae43cbe5372e2b1983d613ef27e117a0cc5b62ceeefe92e65be88181f5da71539ed302b0c25b0bace798c33ad6", 0x60}, {&(0x7f00000001c0)="d861c57a0c9f917641502a7160d174d9a8a3758a4b59c7ea104abad451bb8450cd0a35a851be060791485dc20bfb4ccc66320a52a337525d3ff5ecc0849419043fb6e2aab38b760de069ec5cbafb645e96216f49733107ef8f", 0x59}], 0x3)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r5, 0x10d, 0xc, 0x0, &(0x7f00000000c0))
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x3, 0x6, @remote}, 0x10)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001e00)={'vlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b0}]}]}]}, 0x34}}, 0x0)
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000006c0)={r7, 0x3, 0x6, @local}, 0x10)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x200080a5)
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000200)=0x314020, 0x4)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r12}}, 0x24}}, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10)

52.728063898s ago: executing program 1 (id=1954):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110780000000000630123000000000095000000000000008f6a138c9e4eb32e71d7754e127d8d87525e8d57dc3c002fa721249c4cdfd87788947190b59b5af99eaaecbf2ba57aa6ffd750ffd3bef751c89264a6a9ec3b188b69dc1b6a12211cbf01e697342cf987ca2161e2a58904"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="68000000020605000000000000100000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000200007800c00018004000140000000000800084000000000080006400000000005000500020000000500010006"], 0x68}}, 0x0)

52.540126397s ago: executing program 1 (id=1957):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0x2, 0xa, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1b\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r1}]}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002d40)=@newtfilter={0x38, 0x2c, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x6, 0xd}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffdf2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60350005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)

52.469825651s ago: executing program 0 (id=1958):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20)

52.237883194s ago: executing program 0 (id=1962):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'batadv_slave_0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x100, './file0\x00'}})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)

52.201785387s ago: executing program 1 (id=1965):
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) (async)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0xffffffffffffff37}}]}, 0x3c}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)

52.097753976s ago: executing program 2 (id=1966):
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x10) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x10)
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)
socket$inet(0x2, 0x2, 0x0) (async)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0)
writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r6 = socket$inet(0x2, 0xa, 0x0)
setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57)
setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@private=0xa010100, @loopback, @empty}, 0xc) (async)
setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@private=0xa010100, @loopback, @empty}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
r8 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000140019010000a0e3a584c655434c40816f9695345952c311000100115aa5e9d0c8e22babc259d2ac0000000000"], 0x28}}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a0000021c000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e00000010500030000000000240001"], 0x21c}}, 0x0) (async)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a0000021c000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e00000010500030000000000240001"], 0x21c}}, 0x0)

52.097381757s ago: executing program 3 (id=1967):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00'})
bind$qrtr(r1, &(0x7f0000000500)={0x2a, 0x1}, 0xc)
connect$qrtr(r1, &(0x7f0000000280)={0x2a, 0x2, 0x8000}, 0xc)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000180)=0x3, 0x4)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x4000000, @loopback, 0x1}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="35052abd7000fddbdf251000000008000300", @ANYRES32=0x0, @ANYBLOB="ef1f1d84206ef867c1f6938e6bf5179c0527e7d961dd36a6d129901a6553cb9789a787eab11c041e5bdcac2af8d7936110405bfbc9dfbb368449a082f4c61c3a4826419c82e63f2683d941"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$qrtr(0x2a, 0x2, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) (async)
bind$qrtr(r1, &(0x7f0000000500)={0x2a, 0x1}, 0xc) (async)
connect$qrtr(r1, &(0x7f0000000280)={0x2a, 0x2, 0x8000}, 0xc) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000180)=0x3, 0x4) (async)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x4000000, @loopback, 0x1}, 0x1c) (async)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="35052abd7000fddbdf251000000008000300", @ANYRES32=0x0, @ANYBLOB="ef1f1d84206ef867c1f6938e6bf5179c0527e7d961dd36a6d129901a6553cb9789a787eab11c041e5bdcac2af8d7936110405bfbc9dfbb368449a082f4c61c3a4826419c82e63f2683d941"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async)

52.090160246s ago: executing program 4 (id=1968):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
listen(r0, 0x6)
getsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000004800)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null]}) (async)
ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000004800)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null]})
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r3, 0x107, 0xe, 0x0, &(0x7f0000000040))
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) (async)
bind$alg(r4, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58)
r5 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000540)=@bpq0, 0x10) (async)
setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000540)=@bpq0, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r8=>0x0})
pipe(&(0x7f0000000600)) (async)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1c}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1c}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000640)={'ip6erspan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async)
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000640)={'ip6erspan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x24, r6, 0x121, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}}, 0x4000040) (async)
sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x24, r6, 0x121, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}}, 0x4000040)
socket$nl_route(0x10, 0x3, 0x0) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280080040"], 0x3c}}, 0x0)
sendto$ax25(r5, &(0x7f0000000000)="9e9245a457c7d4afeadd5cb43223e5fe75f82e517ec1710c44f7889979ae3446ff9eece716815a48a1e7e95601406be3b99e07224f45172b3c0d08a9126fbcf562a96ec9f0421e0f126542b1cc3e9ae5c436a262fac1815ded8fd9465756d65173c692d0b392ba721395acd6846bb30c1b4444333a3fc7eba829d0468c50779937287b11027a6dbc2d", 0x89, 0x810, &(0x7f00000000c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48)
sendmsg$alg(r5, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000440)="a79fc2128ff09db4d393cfd4e5caac7eeb7a930a80da0e900f0d91dd4d1b987e5aec717f5a47b96cef1262722a2af8e64b3cad2a628b0e5edbea281f05684aa2dfb6681b47a90c1884fd8b219ef84e0b6a4997473f154b6f6eb8275ec82b810380951484d34f5bb0915a053ca3c3165615f2dae37a062e5eb03a608ba9aef99ce240f339378f943cbd802de4cff4cc0b85e0a5c5260fa850", 0x98}, {&(0x7f0000000800)="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", 0x298}, {&(0x7f0000000780)="02000000751acbc37e3f3c975ca42f625a061e2eba33f9eaca612497c4490d2f6f5c815bfdd938e5474531a3210bcf0d99b96375692e0ce6bfb89eb2a07d3645c0", 0x41}, {&(0x7f0000000500)="38c5014e5b96392e9bff01b6d84b6b560777d15f600fb903000000ff7fe20000002e9df3e341bee24ccf8ef3b17c2343ac3bfa2955", 0x35}, {&(0x7f0000000340)="48df269cb89fd6283aa0086c315c3e93ab083b1caa48c33ee68544cc6ffaa03538504b091b1c8f5d46f16bc998d3140ca76ee79317c68922e07dcdb88e264325eb21085794f7c516438fe7d482d6db83f697425026d0f4f679f83a76382fc770b662fcce68ac9c12738f65ca810d2370b0bac857d4aeda9cdbfb284c63fe01ff644a1bfdfd997e18e227b61f7fcb68225a036fdd6a41dc757ac92d1eafd83fbdf7773151bd571f822173619642343d3a82fca37ed2c54b9e60c829b7c11bdaf8cbe433af5c4c389f0b21", 0xca}], 0x5, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x1d, 0x100, 0x70bd26, 0x25dfdbfb, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x488c9}, 0x20004800)

52.08471846s ago: executing program 0 (id=1969):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000001c00088004000c8014"], 0x44}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x0, 0x2b8, 0x25c, 0x0, 0x7, 0x2e0, 0x3a8, 0x3a8, 0x2e0, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x180, 0x1a8, 0xa010000, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private0, @loopback, @mcast2}}, @common=@dst={{0x48}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x3}}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'sit0\x00', 'veth0_vlan\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"7f47"}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xa8, r4, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x68}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x11}, @NL80211_ATTR_IE={0x61, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x4, 0x9}}, @random_vendor={0xdd, 0x13, "6bba66610ed9ca37f2a33e793f2c6f692e6695"}, @mic={0x8c, 0x10, {0xe4a, "49d23d983b77", @short="338f827e1276f06c"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @gcr_ga={0xbd, 0x6, @device_b}, @rann={0x7e, 0x15, {{0x0, 0x4f}, 0x50, 0x72, @device_a, 0x0, 0xfffffff7, 0x6}}, @challenge={0x10, 0x1, 0xcc}, @dsss={0x3, 0x1, 0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="f0000000100001000000000000000008fe8000000000000000080000000000aa00000000292938887af48b000000000000ffff0a0101004e2300000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1e01010000000000000000000000008c000000000000000000000000000000000000000000000000000000000000000400000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xf0}, 0x1, 0x0, 0x0, 0x4c080}, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000440)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x44, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, [@hopopts={0x11}], "bf0c7de8ed8f6ec5402a1859"}}}}}}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000000)=@getlink={0x34, 0x12, 0x13, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x30a, 0x4000}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_batadv\x00'}]}, 0x34}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000001c00088004000c8014"], 0x44}}, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x0, 0x2b8, 0x25c, 0x0, 0x7, 0x2e0, 0x3a8, 0x3a8, 0x2e0, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x180, 0x1a8, 0xa010000, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private0, @loopback, @mcast2}}, @common=@dst={{0x48}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x3}}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'sit0\x00', 'veth0_vlan\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@mh={{0x28}, {"7f47"}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xa8, r4, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x68}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x11}, @NL80211_ATTR_IE={0x61, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x4, 0x9}}, @random_vendor={0xdd, 0x13, "6bba66610ed9ca37f2a33e793f2c6f692e6695"}, @mic={0x8c, 0x10, {0xe4a, "49d23d983b77", @short="338f827e1276f06c"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @gcr_ga={0xbd, 0x6, @device_b}, @rann={0x7e, 0x15, {{0x0, 0x4f}, 0x50, 0x72, @device_a, 0x0, 0xfffffff7, 0x6}}, @challenge={0x10, 0x1, 0xcc}, @dsss={0x3, 0x1, 0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="f0000000100001000000000000000008fe8000000000000000080000000000aa00000000292938887af48b000000000000ffff0a0101004e2300000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1e01010000000000000000000000008c000000000000000000000000000000000000000000000000000000000000000400000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xf0}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) (async)
syz_emit_ethernet(0x7e, &(0x7f0000000440)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x44, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, [@hopopts={0x11}], "bf0c7de8ed8f6ec5402a1859"}}}}}}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000000)=@getlink={0x34, 0x12, 0x13, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x30a, 0x4000}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_batadv\x00'}]}, 0x34}}, 0x0) (async)

51.781936723s ago: executing program 4 (id=1970):
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x2000, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x8004)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x685, 0x4)

51.781585468s ago: executing program 3 (id=1971):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r2, @in6={{0xa, 0xce23, 0xb7a9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, 0x27c0, 0x2}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e20, 0x0, @private2, 0x9}}, 0x0, 0xfffe}, 0x90)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r4, 0x4}, &(0x7f0000000180)=0x8)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000080), 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f0000000100)="b5bc06adf4", 0x5, 0x8005, 0x0, 0x0)

51.764771652s ago: executing program 0 (id=1972):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}})
getsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000100)=""/81, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@getchain={0x34, 0x66, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff1, 0xfff3}, {0x10, 0xfff3}, {0x5, 0xfff3}}, [{0x8, 0xb, 0xfc}, {0x8, 0xb, 0x5}]}, 0x34}}, 0x6801)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r6, 0x400454cd, 0x304)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
close(r7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x20)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r9, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x34, 0x28, 0xd27, 0x1004001, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x4, 0x9}, {}, {0x2, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x48c0)
sendmsg$AUDIT_USER(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000080)={0xb, 0x3ed, 0x200, 0x70bd30, 0x25dfdbfd, "3eb2ebdd4d5908270871c939f31a97367d8c3e9034c16ef34c7e3bcab4fd4a3dee51f4c3ed9a5351f818173efd40dc9df593608d5bc7bc9953b8bd22d482e3d1e2f35de1702caa3327b50ea5e98377030199a641a83688cb8acf", ["", "", "", "", "", "", ""]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x48040)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@RTM_DELMDB={0x18, 0x55, 0x701}, 0x18}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r10, 0xc020f509, &(0x7f0000000200)={<r12=>r10, 0x4, 0x7, 0xff})
getsockopt$llc_int(r12, 0x10c, 0x9, &(0x7f0000000240), &(0x7f0000000280)=0x4)

51.664196391s ago: executing program 2 (id=1973):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90)
sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000140)="02", 0x1}], 0x1}}], 0x1, 0x20048040) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x81)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x34, 0x4, 0x8, 0x103, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x6, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x200}]}]}, 0x34}}, 0x40)

51.58051263s ago: executing program 4 (id=1974):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140))
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000051421060000000000000000100001"], 0x20}}, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, &(0x7f0000000740))
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x18, r5, 0x209, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x4040000)
sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x1e8, r5, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x11c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5f4b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6fd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4bb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xccc6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0xa4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe5e1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x88}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd27c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x225}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40000}, 0x880)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x7c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg0\x00'}}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004110}, 0x51)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd2b}, 0x14}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)

51.579650822s ago: executing program 3 (id=1975):
socket(0xf, 0x1, 0x5)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x101}, 0x1c)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0xc045, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
listen(r1, 0x78000000)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9)
shutdown(r1, 0x1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x1, &(0x7f0000000400)=""/134, 0x86}, &(0x7f0000000240)=0x40)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz1\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x20}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b704000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r7}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES64=r5], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x200000be, &(0x7f00000000c0)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "779e060000008000000092f94413582b", "ecf0ff19", "4e67cb72f328ac2f"}, 0x28)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000580)="afae01fcf6f835d45dbf8501d8f712c83ca9e9bd5b7c0fb8a45fd587b04e5d", 0x1f}], 0x1)

51.559945573s ago: executing program 2 (id=1976):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00@', @ANYRES32=0x0, @ANYBLOB="000000001814000008002c0001800000"], 0x28}}, 0x0)

51.337104181s ago: executing program 4 (id=1977):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x5c, r0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x51}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x30, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x8}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x6, 0x17, 0x0, 0x0, @str='\x80\n'}]}]}, 0x30}}, 0xc000)

51.281872351s ago: executing program 2 (id=1978):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0)
close(r2)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20, 'TRACE\x00', 0xe}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x3, 0x2, 0x70, @mcast1, @remote, 0x10, 0x7800, 0xffffffff, 0x5d8d}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x7a, 0x0, &(0x7f00000000c0))
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0)

51.281452037s ago: executing program 0 (id=1979):
r0 = socket$kcm(0xa, 0x2, 0x3a)
setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x4)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="521b68a7e0e454f99f41c440435a8e070c058b3f8b835441", 0x18}], 0x1}}], 0x1, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2)
sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r6)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fedbdf251100000008000300", @ANYRES32=r8], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4080)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000003"], 0x28}}, 0x0)
recvmmsg(r0, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000022, 0x0)

51.128333453s ago: executing program 4 (id=1980):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
r1 = epoll_create(0x7fff)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1000, 0x4)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r4=>0x0})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aec110000060a0104000000000000000002000000c0110480bc1101800e000100696d6d656469617465000000a81102809c1102801600010058bc49c1118ce47114ee8a595eb997d63b060000e50001002ed05f89378c372e455861188104371f6ea53a13c046a60332c7878365eb78c59db9cea8c89d803309bc923e8bfeeb99bbad6b8f193acc0799386e256c4c1e1a85c965d3586824b09b7da33858b8fb1e98930debac3d6ee04f367a9f8dcf183e65417632108b40ee1017f581b26b8164ed7bde2ec62e33955e70413cd899aea54508a4eb3d5865d7e75c505aa08ed2657fb4b18106eaffe21a729be8253d4699cacf6e28dbbfb76f4030fd114694e980882d31919d6e6ca41ad8250858d038a4613521f07af39ca66ba5c768d62bc293ca2450c28b700d7c3232a81718188e8af2000000440002800900020073797a32000000000900020073797a320000000008000340000000040900020073797a31000000000900020073797a320000000008000340000000011800028008000340000000030900020073797a3000000000041001006f74361198f068c4254115fcde207e9cdc7a55e8cf66baf2fb77ce60e19863d2d10d0f9384e4d98bc013f2922876b13027f1eb28a73f0ce65058f639ffbc03f50c73a0a4225c15867fd4a3d43cfe8d8d157091b89ca097ea52fb61dffd09677674101c9cae2fd26ad3bef365cda7fba7c218e7fe1f7c5b8a19b7c337c3e157fc24642ff9ccb76ee1ff88cb03c4c4d0a3e26decbe86f1f1e0dae5ceb8c8af9081cfee19e2b585ff064b0830b2d2e8097d6b8656a3a6fe45902fedbf354d1667d4d6e6692b80375c4b99e3dc7d3e578b6b6e2155214d489a7ead2f01f02be8eaa240915898cc039ebcba5b08b60235572549bb8d1362501a39f15a4c423a7a898a0a2e8a409a9703f8958d7b23d666edf0279e467814c9f42609d0d327549a693fae695fc7fcbdf11351b50ea49be8c3447622f5f1c2544363c24d4a20d880d7c9b22b280a974d7920a796fef96cc644865bf8ec6541dc2abd4f1c55d6def991cc18145c2a74490b26048cc8697835788de3c02f36227795a6c33ce2a4014a4b34007a140696b38947375625a387f95bf789f47d6e5e0e2da0f18bc8b914dcba51554eee51ab01d01fa70918641638f1cc59689cbe28bd2aeb43a46e079a2e39641dfa59bb225bafc69719eda14fc0b24ff9142d03f650a68426589a4bbe6f559db2020bd6aa7a7a2b1c1b9ba50a030df3fa10cafcf902248e37aef7af21a8fcbffb747e20de86a0dcc46167c9746c22a0a322bc153343f81d26764633582710127c7451602576f21d10a8c9701af81c6c4e1e1c1f647be5b02807406bc8267ff2ca3ebb3a7016123ec9a289783eb8cbd5740a44d8228d7a7760532b3fc992c5b3fa91098456aaa04fff641833f65c966e476efc2b912e3c079ed2eda902db084a9bf254b41afc0256bab5cf0b1ab27b7225eba3bb45a39ada9f2d9025608bef686b2a999fca7494ad75945f05b7a169cfc1e7078af143ec221b09e8166d7eaf65dd76054aeefb28fda937093baf96d5fc7d05f978387de5c87e5b51b082a7bdd7b4290df9bb6431a50cf25b5f108e12380a9fc092c79b5b5511ead464559a84dce114f37f82f90870976761c9982b2568465117251f2317cfc98496b5e0db41f9870d4e3d4c8f8e920003f3858be3927e34d1969ea8c0f59f4c1198f559049a5cfda7b7e82203379f0b30bd42a01f4bc8ae57521e8a8a4f039816e4c4f3c843d503ff4bdf7026860f05dc7701a6b782ec52410a1e4e4bd0aa20d28b6dce609c45d7a635f8e982418dbdac778991c5207e6c91e417095e60c5a305d6a78cf17b2d9e4ef63a08bfc341719e26fceba4114a605790db7cf532e4c9ca6b3eff496e81e31e127bd4fd6af0aee472614ce60c93260dac28c284a2eb398cdc0a85fbcad676910c8f2cc2c51d1fa4fed8a9de9f47cb31976c08e8052330d5ab6f3bcadf6887f9f06c9397bb035e2a4eea9d4767de457ed31b3dace54c14056ffcf7d29043639f0d3a80cfeaafe8b625e675932b3a0eb510448df313b5ea9a4eb1f4e080448040a7401922eb11bbe8b7a2f866f8956cc7a4b0eb47916e4e02e0dfeb9ddf473d2c7830a52b66146400e058311668e7f8bf147f236843ad854c10cf28b6cafe61a3a130944068e153ea43a665ebcceb63f3c69973ce336a95fd183fb011b7eabd28cc542d1b9d29672d7e156057c7f038e32718c8833624959cdef08eb0580cdc69dce6851c453148e2fe619b95b7b6efdf49a4a9100508c39c8d743d5430a8867bc1c725c5da5ca10998f7bd016eefc1194d5133c69c644aafc95f6399460b7165d162e09c957bb890da6311a499a1508e83e2af7fbad70c4640bc684dad44544bc9c21766a98f831e411f92cdce0d495c1845b86697680a3967a88e326adf631bafcba9bf9820a746f95f4007188be341d26fdc7477fcfc8f4c0d3d7d43daaa604726aaf3b729d5b0cb780b1106259855529854bcfa3098fbb5c034720ff0f446fd610eb1fb43b079d19bb3bb34fecff74249f089e0b4f3ebdf9daaff47ca921adce89cab6e3e9a5240b95ffbd965420f4657df7c1e36404bf271dda42dcaf083c2973f4f923b010d9e84a7109daa4de6882a3156c76504d44fcdc137da8f5c24d73226eb9ec2b53a261f3a5dd39d396a92ca25858b7e6277b024e8392f0d3eb7545510f7080e0371abb50475e3a76201404d5713805f4523cfd9ac80267cbf630a58e01a7069bb7ea88ca275e0d45101738c46b951e31c6028c71a5ca3449e55ec44077d83b60d081211872e793610fb87b7b4afe3c9f553b635291f6f9f84d4ae65079878d6264a090000005c88597d7c85d2903fcb2f45acc34a9b5569c4a68fd3673e6be3e7bee12b535fad1da5058b8a542267e6deff2bc57b3300b53f77385c6cdb9b9b9caa8ed803a395b49236cbc8302e19bc417b322b563e421792bb3feb824690833620a42387468b268a0402e50082fd188711dcc73a710eff4eef161c6b99371a4f487ab5b88d233e8322be4b01595533c0cd7ad630f14890c505bfbfe5c2aff2abe08c117cb02967f065d01dd9471b9eaae1613a665c82c0113fe8c5699d45c94144846a6f6436155b0907b469e522330549f3e5e1d21d664f13c898512116f2edb457e6c8894c655eeca71f0ba4e2ce66d66876aacd39eb9be15d68544a2a9b5acfb6c8d9c2c0c02e08b65ee5c16f841c6706e23702e8b1d3234093eb7c1fc3e970643e9118a99ec5dcec473affa7751c4e67705ebe3e113954d1344aed430e2dd85e6bcc94bfe4f711e714d0e4d8972be9b8cb55477d3f14d95d76bbe758ef6c0df33d3d5d64db6ce55394a77d76297fece0d8969736806c87661197fbc6ad9159ac8f826f70def6903807a64b4e2a062fe525b50058b558600b5bf66f98f0860087d9d20a578ba00b5c9e3c04f8ef3e9e5169b5a97b1aebb3fc0f6c6b831dab4965094a0306d0a6996a191b3103499d911146a24af3933a333b2e9f07a8d76d2c682d43b57056d1e2ddee1edc9f78699ed9401ff7978a1db342b81713b2e540128c6cec8e759beddb2eb57cd5aa70be2aa96349ff3f802339609678552a2b03c5f3a85817d63ab247af864c3d603b2312377e9b345d48f4b221f3c5beb5b57e2f60ee9ed8f44e0cc10c86e42db73861e30d888b3c3443b8a577eeac49baffe1a4d30d6fb2d0d7bd905f2f06fbb3873418d03ed992c62982fcb8bad213605ee76118343843b4dc85f812bb34fee1a5adbd1f28c38325af562feda5e341e7ead59407e9c84ab4eaec24283b8a102bd96bb82cde181521ea46e0f6dfe5cd882f0fe3c1d9b041cf051fee98fd9269840b2e8710a07b590254bfbdb5d5b3534b53911846cad4c58876b5f97e3c88f53a68a5e802981f8b46355c90a2c3b1cdcf4b59f6af55f0495e87f0edd01bff32b25dc6a14cf2c86f4e86dbd5a19853c19eecb4429519c77f159b892aedc97c9a883074f7aad57b757e264d7be000a8622f4df07af9ff08e79abc349bd22c98a78c1c8be7a50abcd7c390306a2a60d10ec9120818ace64a4cfc634b6f035db01ccdd766e8870a105863a4fafd234bac25be9df79957615783318c066e44f3b97a897dad4fd176f27654ee31572d5da9770d0e7d0c29ecbc82671cc13d43bd89bcd812d38e605c304689c9c4499ae323e3ff98e65ff6693b7cf08ed099749e5c5cf6071cf0bc5870e7c13c8d850030f858171664db179310ec38f9e5f8c55c21027d5282773dfcca2c7be1d6c15575ac20e6c0682cc2d4a37716e641b92fdec7aabc0ee9aa5f65ff6b634a3becfd3d8683505da62cab97f5cf3ff51f45efbcc9560a3c7dc6893763ba1350cec5598dd12572f65cdd24ed8aebcc4f082b69fedd47db99ebc9ba18f69f72b76f7653e9404a8ccc2e175391993173b06c5e20a6357b7e873cb27bf5e68acc209cac067cb2db47d19c5a91df22e69315eba98470880c61e2b02e17f296b4cb253e276209b16f2f08ac0d3d6f4fe7c561af3ddd118b60b06ff28a94b428f1c620c2392cf00643bbbab7a69bd00f011e47592379a0dfd76a34b1b79dcffc01a6738a895447b2bcbade693424f49b25c34634a040342fdafdc4d38303db16359c8e28d29ea89d09ec53e6896006467f166805fefde085d7f95179950adae9c4625dc6389814ab50d9cbf2ab830fa6cf718238d4ea8fa60b8e7ee5b7cd26f0f824ffb3d51ba31015a99c55c4915dfdeb30c9494d02e1830c8d17de5e764379d02128dfaaee1acbad93348f9b1fab61552762a53f91531bf2a7526e7a091c00e7b74e860df67367d46733cad1cb4275fc25564b8a7683163b0bbcc8462f0c55a00ce190cbaa2cd3b859515da92e20d9307100c01054fab03e8bbbef5218f9471277f5cbd99eae1f5473b8889f71df002554128fc696dc0cd41a22a23fb1ab2972a518447d6f25c69d7562cd0819f4532d8eace1cf7c0ec23b3a672e3aab176af013f59d61fee9ac3de97ad0fc6fc05e7e525dcb6c902764761bc0e147e6914dd048dab1a0e221c38570e0b06ffe4557da5332f73ad6f470a258f5bbae03f3f6670bff073804e2e8be21f359fd4add1229f109f878313ca58d672b1493c05b8978cd078a9fc2ae0169cdf644a03319bb90b662e10f89b6c487bc7ddfef001e16c49f624ea27d18d66c504e7f1912ffeb40ddd79475cac0ca7211e5f953092efd884cf41ba41747a88932689aec34b9f821f0150cfaca8874ae52451b18c224bf4be7e07714f994443c0bbad343e4b12abac3e354eb80d4299edbaf6a03945869cd46f1bf964249b754a5b77c331ed392bc8890c1c8eef83128802690e5faafa81f52ccd343d82d7ef143e7756baafaff3052c3337b73894a5cacdb0565b198b1249e1497f85c976b2030d2677c17f5926b17a2fe2a41c1f82db921984d3ffb47fd4ddebb4b8289b12b81c12ae0a29f18baae409f486c34bde682f5775cd86113aeb71adc9621cf4592e14eb5759907dba0e0d305877f4786fbbb468b4e7b1dde1dee7d9a792335079e53ae2962ffa6ed8846d8373832232365ea36054c4002f80f4090adaf18dad5730f66aa8bb0061a2d5196411d859b5336a011c61030ae8a1949d0bffb15953508e3e2e03ac3237ae7ad8d2008681587ec8f7935dd5fe599e2094af14a5fe7a891d2a68136460a548e23917b35195985c3116efdac4074739f9e195c6cf5c1b08b7addcfbe05d4e0191f13dd273d886b0aad333a8d64f10d77251e9cd12993debd14347a7644b2be06372edb2dd4696c8642d3121828406737835b206e50085f6e908729b1429228d5a92ead375a44c4ec93affcd5f80d902caf4ca29e321971a66053f1e71d37e0650c83876dbe85456152c2959b06e7d7237b9273e7a842ccf6db6bb68a94d3f7314fe5b7716e94d75f930e5c2c56f60ef8874e103b1b1ae1455844335029532cea193909dfebbd683d9f24f96be63a7fe835dc3504cb8604202de5b1fa2aeb3f407b2bdf48b1d91cf285c2d1e158dae71949fc2f9d213e81d83b0f9347dd4b2676ba9dbfbb0b295ab976ccf98a654393a1833f35937dc1e2b72bab5b3266389564b4aa1326f4697003d095f591e3c51fc8fa9628d7bc82c577c480761e3f8facd05a790a1ca55332b96d7f380fcfad8005f7f6c41d778cbe123dbf0731ecbafdf0c845240e668130df94206d2360ebb17ba27d728665d83608d3081ba7cff73de3efe2c715277d751d8166b8a380cf5c7e7aa37be40529a57634ba3fad909953efc67abdb5a9a170861774b9f585dcd145100a280002800900020073797a31000000000900020073797a32000000000900020073797a300000000010000100b23d02e304f6cf2aaf314f4908000140000000030900010073797a30000000000900020073797a320000000014000000110001"], 0x1214}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a01080000000000000000020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0xa, r4}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0x5})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401fd, @void, @value}, 0x94)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "ecf0ff19", "4e67cb72f328ac2f"}, 0x28)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000580)="afae01fcf6f835d45dbf8501d8f712", 0x4000}], 0x1)

51.105745466s ago: executing program 3 (id=1981):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="e3ce5677bba8e0242a321208", 0xc}, {&(0x7f00000003c0)="351b8f2b8d8b0d55dde431b581ac6363d5763f897989115bd576d93d7431dc1f4465a9c2a5906460f45730b30d742f903b06f397af32b6d7d12c31b0d200fc36c4020fbd4e2bb0839362217e2cd031cc5adc52bf2e1dae613bd22a165fb05b1dbdf34cc4f5ea4f18ce447a1be2eded237c549f64", 0x74}, {&(0x7f0000000480)="86b9e0", 0x3}], 0x3, &(0x7f0000000d00)=ANY=[], 0xa0}}], 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8}, @TCA_CAKE_ATM={0x8}]}}]}, 0x44}}, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r6, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r7 = socket$inet(0x2, 0x3, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0)
setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0)
syz_emit_ethernet(0x44, &(0x7f0000000040)={@empty, @remote, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@mpls_uc={0x8847, {[], @ipv4=@igmp={{0x8, 0x4, 0x1, 0x3a, 0x12, 0x65, 0x0, 0x2, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1, {[@noop, @ra={0x94, 0x4}, @cipso={0x86, 0x0, 0x2, [{0x5, 0x0, "715d35e0"}]}, @lsrr={0x83, 0x3, 0x4f}]}}, {0x16, 0x3, 0x0, @private=0xa010102, "2aa651ece68e"}}}}}}, 0x0)
setsockopt$inet_int(r5, 0x0, 0x18, 0x0, 0x0)

50.91789926s ago: executing program 1 (id=1982):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', <r1=>0x0})
r2 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000140)=0x2, 0x4)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)={0x1c, 0x5, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x5}]}, 0x1c}}, 0x0) (async)
ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x38, 0xffffff45}, {0x6, 0x0, 0x0, 0x3}]}) (async)
ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f00000000c0)=0xfff)
write$ppp(r3, &(0x7f00000010c0)="1e00", 0x2) (async)
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a0000000000000000070d0000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) (async)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r6, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) (async)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010102, @remote}, 0x10)

50.905792694s ago: executing program 2 (id=1983):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'netdevsim0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x1c, r3, 0x101, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000090)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYBLOB="050000000000feffffff2e00000008000300", @ANYRESOCT=r1, @ANYBLOB="050034008b0100000c004900"], 0x30}, 0x1, 0x0, 0x0, 0x20004001}, 0x40)

50.828553938s ago: executing program 4 (id=1984):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = socket(0x2, 0x3, 0xff)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x15c, r0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x140, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x376}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9f}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xb8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80000000}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x100}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xda6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x400}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4c15}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000001}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x447}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x57de}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x51}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x100}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xb}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20000000}, 0x5)
r6 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000240)={'vxcan0\x00', <r7=>0x0})
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r9=>0x0})
r10 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r10, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r10, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r9, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r8, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0)
sendmsg$can_bcm(r10, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r7, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$unix(r2, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a40)="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", 0x22a}], 0x1}}], 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r11=>0x0})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff2809b40e}, 0x0)

50.827142257s ago: executing program 3 (id=1985):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="010000000100000000000000000000000000000000000000000000009489ef6131185c2e33ef3dc5c24f5b1d879400bdb4691a8981b4032f97466b088b46757895123e859ad818dbd55f62e91438e28b2e8de64d29f95c41a8c62dae8731fc9f4491552c8a5ebd75364fb41969"], 0x50)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f00000000c0), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r3=>0x0})
sendmsg$can_bcm(r2, &(0x7f0000000c80)={&(0x7f0000000000)={0x1d, r3}, 0x40, &(0x7f00000018c0)={&(0x7f0000000c00)={0x4, 0x1ac, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x1f, 0x2, 0x0, 0x0, "b0dea4111397a612a7fa4e76494ef3977bd0a2f78ce9fdadb54d3647d318666f4a8f5859bfdb21df9689a47f7f4bcbc64769da666301a195796d99ba51d02f16"}}, 0x80}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r1, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffd5, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

50.617806883s ago: executing program 3 (id=1986):
unshare(0xa020480)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000022000106000200ea6356b50000000000000000000000aa"], 0x1c}], 0x1}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = gettid()
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18010000210001000000000000000000e0000002000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b3ef7995000000e0f3240f1a3a7363f40ac0ffdf37002c001300ac1414aa0000000000000000000d5aaa0000000000000000000000000000000000000000000000000000009c001100ac1414bb000000000018000000000000fc020000000000000000000000000001fc00000000000000f9fffffffffffffffc0100000000000000007448388a613c2d25bf1ecfbc000000000001000000000000000000000000fc000000000000000000000000000001fe8000000000000000000000000000000000ac141400"/218], 0x118}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/cgroup\x00')
unshare(0x6020400)
close(0x4)
r3 = socket$unix(0x1, 0x5, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x20010, r3, 0xaafcc000)
r4 = socket$inet6(0xa, 0x4, 0x80000001)
setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0x300, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1ff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc4014}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

50.615528735s ago: executing program 1 (id=1987):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050026bd7000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="38000e0080000000ffffffffffff080210fffff908021100000000000000000000000000640001000006020202020202720603030303030308000c0064000000"], 0x5c}}, 0x20000014)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000080)={0x53, 0x0, 0xb, 0xa, 0x7ff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$alg(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000140)=ANY=[], 0x12f4}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0)

37.321497474s ago: executing program 2 (id=1988):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pS    \x00'}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000280)={'syztnl0\x00', <r4=>0x0, 0x893e37b294a6d3f4, 0x8000, 0x8, 0x3, {{0x1c, 0x4, 0x2, 0x4, 0x70, 0x65, 0x0, 0x5b, 0x2f, 0x0, @local, @empty, {[@timestamp_prespec={0x44, 0xc, 0xf1, 0x3, 0x8, [{@local, 0x2}]}, @generic={0x83, 0x6, "0e6a788d"}, @timestamp={0x44, 0x1c, 0x75, 0x0, 0xe, [0x10, 0x8, 0x9, 0x0, 0xe, 0x0]}, @ra={0x94, 0x4}, @generic={0x86, 0xc, "2d8c114de1711b1e1264"}, @cipso={0x86, 0x1e, 0x3, [{0x2, 0x11, "e8f3cdf97b855f0afd4de73e7e23ca"}, {0x0, 0x7, "474b09ddb4"}]}]}}}}})
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)=""/254, 0xbd, 0xfe, 0x0, 0x4, 0x10000, @value=r2}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x1, 0x1, 0x1, 0x5000, r3, 0x9987, '\x00', r4, r5, 0x4, 0x1, 0x1, 0x6, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x4000000000021, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x80}, 0x0, 0x0, 0x1}, {{@in, 0x4d5, 0x33}, 0x2, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x81}}, 0xe8)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)

31.244880314s ago: executing program 32 (id=1979):
r0 = socket$kcm(0xa, 0x2, 0x3a)
setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x4)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="521b68a7e0e454f99f41c440435a8e070c058b3f8b835441", 0x18}], 0x1}}], 0x1, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2)
sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r6)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fedbdf251100000008000300", @ANYRES32=r8], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4080)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000003"], 0x28}}, 0x0)
recvmmsg(r0, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000022, 0x0)

11.433137061s ago: executing program 33 (id=1987):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050026bd7000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="38000e0080000000ffffffffffff080210fffff908021100000000000000000000000000640001000006020202020202720603030303030308000c0064000000"], 0x5c}}, 0x20000014)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000080)={0x53, 0x0, 0xb, 0xa, 0x7ff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$alg(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000140)=ANY=[], 0x12f4}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0)

6.536938745s ago: executing program 34 (id=1986):
unshare(0xa020480)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000022000106000200ea6356b50000000000000000000000aa"], 0x1c}], 0x1}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = gettid()
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18010000210001000000000000000000e0000002000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b3ef7995000000e0f3240f1a3a7363f40ac0ffdf37002c001300ac1414aa0000000000000000000d5aaa0000000000000000000000000000000000000000000000000000009c001100ac1414bb000000000018000000000000fc020000000000000000000000000001fc00000000000000f9fffffffffffffffc0100000000000000007448388a613c2d25bf1ecfbc000000000001000000000000000000000000fc000000000000000000000000000001fe8000000000000000000000000000000000ac141400"/218], 0x118}}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/cgroup\x00')
unshare(0x6020400)
close(0x4)
r3 = socket$unix(0x1, 0x5, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x20010, r3, 0xaafcc000)
r4 = socket$inet6(0xa, 0x4, 0x80000001)
setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0x300, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1ff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc4014}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

1.522323778s ago: executing program 35 (id=1984):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = socket(0x2, 0x3, 0xff)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x15c, r0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x140, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x376}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9f}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xb8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80000000}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x100}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xda6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x400}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4c15}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000001}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x447}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x57de}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x51}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x100}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xb}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20000000}, 0x5)
r6 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000240)={'vxcan0\x00', <r7=>0x0})
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r9=>0x0})
r10 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r10, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r10, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r9, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r8, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0)
sendmsg$can_bcm(r10, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r7, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$unix(r2, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a40)="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", 0x22a}], 0x1}}], 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r11=>0x0})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff2809b40e}, 0x0)

0s ago: executing program 36 (id=1988):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pS    \x00'}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000280)={'syztnl0\x00', <r4=>0x0, 0x893e37b294a6d3f4, 0x8000, 0x8, 0x3, {{0x1c, 0x4, 0x2, 0x4, 0x70, 0x65, 0x0, 0x5b, 0x2f, 0x0, @local, @empty, {[@timestamp_prespec={0x44, 0xc, 0xf1, 0x3, 0x8, [{@local, 0x2}]}, @generic={0x83, 0x6, "0e6a788d"}, @timestamp={0x44, 0x1c, 0x75, 0x0, 0xe, [0x10, 0x8, 0x9, 0x0, 0xe, 0x0]}, @ra={0x94, 0x4}, @generic={0x86, 0xc, "2d8c114de1711b1e1264"}, @cipso={0x86, 0x1e, 0x3, [{0x2, 0x11, "e8f3cdf97b855f0afd4de73e7e23ca"}, {0x0, 0x7, "474b09ddb4"}]}]}}}}})
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)=""/254, 0xbd, 0xfe, 0x0, 0x4, 0x10000, @value=r2}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x1, 0x1, 0x1, 0x5000, r3, 0x9987, '\x00', r4, r5, 0x4, 0x1, 0x1, 0x6, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x4000000000021, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x80}, 0x0, 0x0, 0x1}, {{@in, 0x4d5, 0x33}, 0x2, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x81}}, 0xe8)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)

kernel console output (not intermixed with test programs):

dge_slave_0: entered promiscuous mode
[   60.982473][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.989729][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.997057][ T5835] bridge_slave_1: entered allmulticast mode
[   61.003653][ T5835] bridge_slave_1: entered promiscuous mode
[   61.024533][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.031711][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.058967][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.087657][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.094876][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.104830][ T5839] bridge_slave_0: entered allmulticast mode
[   61.112739][ T5839] bridge_slave_0: entered promiscuous mode
[   61.121041][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.128873][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.136709][ T5839] bridge_slave_1: entered allmulticast mode
[   61.144133][ T5839] bridge_slave_1: entered promiscuous mode
[   61.152163][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.159929][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.168142][ T5833] bridge_slave_0: entered allmulticast mode
[   61.175061][ T5833] bridge_slave_0: entered promiscuous mode
[   61.184565][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.193007][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.222961][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.259769][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.267057][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.274363][ T5833] bridge_slave_1: entered allmulticast mode
[   61.281790][ T5833] bridge_slave_1: entered promiscuous mode
[   61.307302][ T5829] team0: Port device team_slave_0 added
[   61.315768][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.335627][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.360988][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.374065][ T5829] team0: Port device team_slave_1 added
[   61.383149][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.394158][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.406807][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.481962][ T5838] hsr_slave_0: entered promiscuous mode
[   61.488636][ T5838] hsr_slave_1: entered promiscuous mode
[   61.504671][ T5835] team0: Port device team_slave_0 added
[   61.522472][ T5833] team0: Port device team_slave_0 added
[   61.532722][ T5833] team0: Port device team_slave_1 added
[   61.539448][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.546997][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.573378][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.586111][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.593155][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.619307][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.631770][ T5835] team0: Port device team_slave_1 added
[   61.650013][ T5839] team0: Port device team_slave_0 added
[   61.658876][ T5839] team0: Port device team_slave_1 added
[   61.717836][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.724821][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.751335][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.763649][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.770737][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.797512][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.809381][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.817730][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.845242][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.846207][ T5832] Bluetooth: hci2: command tx timeout
[   61.857889][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.868329][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.894284][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.913973][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.921076][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.925404][ T5832] Bluetooth: hci3: command tx timeout
[   61.947247][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.953490][ T5845] Bluetooth: hci0: command tx timeout
[   61.985837][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.992915][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.009648][ T5845] Bluetooth: hci4: command tx timeout
[   62.020853][ T5832] Bluetooth: hci1: command tx timeout
[   62.030977][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.061736][ T5829] hsr_slave_0: entered promiscuous mode
[   62.068017][ T5829] hsr_slave_1: entered promiscuous mode
[   62.073967][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.081974][ T5829] Cannot create hsr debugfs directory
[   62.140245][ T5835] hsr_slave_0: entered promiscuous mode
[   62.147040][ T5835] hsr_slave_1: entered promiscuous mode
[   62.153358][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.161424][ T5835] Cannot create hsr debugfs directory
[   62.202468][ T5833] hsr_slave_0: entered promiscuous mode
[   62.210002][ T5833] hsr_slave_1: entered promiscuous mode
[   62.219232][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.227408][ T5833] Cannot create hsr debugfs directory
[   62.273050][ T5839] hsr_slave_0: entered promiscuous mode
[   62.279268][ T5839] hsr_slave_1: entered promiscuous mode
[   62.286066][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.293762][ T5839] Cannot create hsr debugfs directory
[   62.563307][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   62.573847][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   62.606950][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   62.630415][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   62.663628][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.686117][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.699469][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.710122][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.810526][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.836161][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.848990][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.868701][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.893993][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.907122][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.917702][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.929943][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.993434][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.044733][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.052340][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   63.071021][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   63.088020][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   63.110982][ T2976] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.118469][ T2976] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.146819][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   63.166109][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   63.180040][ T2976] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.187177][ T2976] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.218189][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   63.241217][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.248378][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.288107][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.295265][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.334131][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.383863][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   63.411836][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.436056][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.443132][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.462027][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.489585][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.496764][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.515069][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   63.548768][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.577649][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   63.589770][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.623206][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.630394][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.642937][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.650216][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.660687][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.667806][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.710812][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.717995][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.746998][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.772743][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.935819][ T5832] Bluetooth: hci2: command tx timeout
[   64.003346][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.015395][ T5832] Bluetooth: hci0: command tx timeout
[   64.016049][ T5845] Bluetooth: hci3: command tx timeout
[   64.072355][ T5833] veth0_vlan: entered promiscuous mode
[   64.087421][ T5845] Bluetooth: hci4: command tx timeout
[   64.087739][ T5832] Bluetooth: hci1: command tx timeout
[   64.121422][ T5833] veth1_vlan: entered promiscuous mode
[   64.180341][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.202301][ T5833] veth0_macvtap: entered promiscuous mode
[   64.238474][ T5833] veth1_macvtap: entered promiscuous mode
[   64.291639][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.313275][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.334658][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.348462][ T5829] veth0_vlan: entered promiscuous mode
[   64.365654][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.374638][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.384076][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.393138][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.415984][ T5829] veth1_vlan: entered promiscuous mode
[   64.424947][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.537809][ T5838] veth0_vlan: entered promiscuous mode
[   64.554764][ T5829] veth0_macvtap: entered promiscuous mode
[   64.581329][ T5835] veth0_vlan: entered promiscuous mode
[   64.593138][ T5838] veth1_vlan: entered promiscuous mode
[   64.603433][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.607258][ T5829] veth1_macvtap: entered promiscuous mode
[   64.617480][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.659608][ T5835] veth1_vlan: entered promiscuous mode
[   64.681301][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.693058][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.708055][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.721579][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.736081][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.747023][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.764850][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.776202][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.793060][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.803010][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.813165][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.823488][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.834523][ T5839] veth0_vlan: entered promiscuous mode
[   64.846656][ T5838] veth0_macvtap: entered promiscuous mode
[   64.876520][ T5838] veth1_macvtap: entered promiscuous mode
[   64.887051][ T5839] veth1_vlan: entered promiscuous mode
[   64.921911][ T5835] veth0_macvtap: entered promiscuous mode
[   64.977743][ T5835] veth1_macvtap: entered promiscuous mode
[   64.994912][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.011484][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.024038][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.036504][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.048360][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.059798][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.093316][ T5839] veth0_macvtap: entered promiscuous mode
[   65.133705][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.146346][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.159696][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.170845][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.182306][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.198106][ T5019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.206862][ T5019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.221989][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.241534][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.254516][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.284618][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.287194][ T5920] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.304952][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.316624][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.326865][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.338226][ T5920] xt_cgroup: path and classid specified
[   65.344293][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.354271][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.366730][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.378639][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.389795][ T5839] veth1_macvtap: entered promiscuous mode
[   65.414375][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.426003][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.436800][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.447824][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.459402][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.470428][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.480742][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.492066][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.514377][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.547563][ T5922] Zero length message leads to an empty skb
[   65.563595][   T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.570873][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.572159][   T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.590340][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.600384][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.613148][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.623203][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.634141][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.647059][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.655135][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.666721][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.676938][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.688105][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.700841][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.711624][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.721969][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.733012][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.744770][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.755133][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.764359][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.773560][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.782431][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.828188][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.844553][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.854828][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.863899][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.005638][ T5832] Bluetooth: hci2: command tx timeout
[   66.057710][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.067092][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.085335][ T5832] Bluetooth: hci0: command tx timeout
[   66.095643][ T5832] Bluetooth: hci3: command tx timeout
[   66.107238][ T5019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.128296][ T5019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.161552][ T2211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.165477][ T5832] Bluetooth: hci1: command tx timeout
[   66.170360][ T5845] Bluetooth: hci4: command tx timeout
[   66.186590][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.194455][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.203292][ T2211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.317188][ T5019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.329834][ T5019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.348944][ T5019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.369306][ T5019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.556552][ T5937] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5'.
[   66.849616][ T5952] Bluetooth: MGMT ver 1.23
[   66.993599][ T5954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11'.
[   67.016074][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'.
[   67.029618][ T5958] xt_TCPMSS: Only works on TCP SYN packets
[   67.056592][ T5958] tc_dump_action: action bad kind
[   67.064903][ T5954] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11'.
[   67.178439][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13'.
[   67.508887][ T5977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'.
[   67.856909][ T5997] netlink: 'syz.1.21': attribute type 32 has an invalid length.
[   68.086775][ T5845] Bluetooth: hci2: command tx timeout
[   68.165390][ T5845] Bluetooth: hci3: command tx timeout
[   68.165620][ T5832] Bluetooth: hci0: command tx timeout
[   68.237735][ T6023] netlink: 104 bytes leftover after parsing attributes in process `syz.2.26'.
[   68.247482][ T5832] Bluetooth: hci1: command tx timeout
[   68.255322][ T5832] Bluetooth: hci4: command tx timeout
[   68.614581][ T6032] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.894719][ T6039] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.926694][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.31'.
[   68.957470][ T6037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.31'.
[   69.009954][ T6039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.32'.
[   69.231623][ T6052] netlink: 'syz.2.35': attribute type 33 has an invalid length.
[   69.339557][ T6039] bridge_slave_1: left allmulticast mode
[   69.345636][ T6039] bridge_slave_1: left promiscuous mode
[   69.352725][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.376093][ T6039] bridge_slave_0: left allmulticast mode
[   69.385086][ T6039] bridge_slave_0: left promiscuous mode
[   69.399417][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.629687][ T6068] netlink: 'syz.3.41': attribute type 12 has an invalid length.
[   69.669944][ T6068] netlink: 'syz.3.41': attribute type 29 has an invalid length.
[   69.694987][ T6068] netlink: 'syz.3.41': attribute type 2 has an invalid length.
[   69.705450][ T6068] netlink: 'syz.3.41': attribute type 2 has an invalid length.
[   69.823293][ T6068] netlink: 'syz.3.41': attribute type 1 has an invalid length.
[   69.852433][ T6068] netlink: 'syz.3.41': attribute type 37 has an invalid length.
[   69.864835][ T6068] netlink: 'syz.3.41': attribute type 2 has an invalid length.
[   69.873758][ T6068] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.887444][ T6077] netlink: 'syz.4.39': attribute type 12 has an invalid length.
[   70.189550][ T6096] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   70.380037][ T6094] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[   70.456348][ T6115] syz.0.53 uses obsolete (PF_INET,SOCK_PACKET)
[   70.469643][ T6114] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   70.992410][ T6139] veth3: entered allmulticast mode
[   71.360905][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.446846][ T6155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.461112][ T6155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.528110][ T6155] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.540436][ T6155] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.549820][ T6155] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.559294][ T6155] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.673310][ T6155] syz.3.67 (6155) used greatest stack depth: 18768 bytes left
[   71.774911][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[   71.785395][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[   71.816282][ T6170] __nla_validate_parse: 8 callbacks suppressed
[   71.816300][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72'.
[   71.882713][ T6179] sctp: [Deprecated]: syz.0.75 (pid 6179) Use of int in max_burst socket option.
[   71.882713][ T6179] Use struct sctp_assoc_value instead
[   71.900562][ T6180] sctp: [Deprecated]: syz.0.75 (pid 6180) Use of int in max_burst socket option.
[   71.900562][ T6180] Use struct sctp_assoc_value instead
[   71.985042][ T6180] xt_cluster: you have exceeded the maximum number of cluster nodes (768 > 32)
[   72.490704][ T6209] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.85'.
[   72.651081][ T6221] netlink: 16 bytes leftover after parsing attributes in process `syz.4.89'.
[   72.658564][ T6220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.88'.
[   72.660733][ T6214] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[   72.700422][ T6214] warning: `syz.2.86' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   72.773803][ T6221] vlan2: entered allmulticast mode
[   72.779991][ T6221] bond0: entered allmulticast mode
[   72.786424][ T6221] bond_slave_0: entered allmulticast mode
[   72.792374][ T6221] bond_slave_1: entered allmulticast mode
[   72.802572][ T6221] bond0: left allmulticast mode
[   72.815979][ T6221] bond_slave_0: left allmulticast mode
[   72.822656][ T6221] bond_slave_1: left allmulticast mode
[   72.875267][ T6229] netlink: 16 bytes leftover after parsing attributes in process `syz.0.90'.
[   72.918794][ T6227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.91'.
[   73.491167][ T6260] delete_channel: no stack
[   73.546721][ T6264] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.782368][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'.
[   73.832459][ T6280] netlink: 48 bytes leftover after parsing attributes in process `syz.0.108'.
[   73.852712][ T6285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.110'.
[   73.874790][ T6280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.108'.
[   75.157001][ T6358] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[   75.626007][ T6383] sctp: [Deprecated]: syz.4.140 (pid 6383) Use of struct sctp_assoc_value in delayed_ack socket option.
[   75.626007][ T6383] Use struct sctp_sack_info instead
[   76.204520][ T6414] validate_nla: 1 callbacks suppressed
[   76.204538][ T6414] netlink: 'syz.1.152': attribute type 4 has an invalid length.
[   76.328947][ T6422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.346662][ T6422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.805357][ T5845] Bluetooth: hci4: command 0x0405 tx timeout
[   77.729844][ T6521] block nbd2: not configured, cannot reconfigure
[   77.959224][ T6532] gre1: entered promiscuous mode
[   78.005659][ T6532] gre1: entered allmulticast mode
[   78.066938][ T6536] __nla_validate_parse: 4 callbacks suppressed
[   78.066960][ T6536] netlink: 68 bytes leftover after parsing attributes in process `syz.4.175'.
[   79.218925][ T6591] wlan0 speed is unknown, defaulting to 1000
[   79.256119][ T6591] wlan0 speed is unknown, defaulting to 1000
[   79.308165][ T6591] wlan0 speed is unknown, defaulting to 1000
[   79.366806][ T6591] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   79.420466][ T6603] netlink: 'syz.2.194': attribute type 32 has an invalid length.
[   79.441693][ T6591] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   79.553574][ T6591] wlan0 speed is unknown, defaulting to 1000
[   79.619093][ T6591] wlan0 speed is unknown, defaulting to 1000
[   79.635696][ T6591] wlan0 speed is unknown, defaulting to 1000
[   79.642981][ T6591] wlan0 speed is unknown, defaulting to 1000
[   79.668275][ T6591] wlan0 speed is unknown, defaulting to 1000
[   79.781934][ T6624] xt_hashlimit: size too large, truncated to 1048576
[   79.859416][ T6631] xt_hashlimit: size too large, truncated to 1048576
[   79.951171][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'.
[   80.027325][ T6637] netlink: 108 bytes leftover after parsing attributes in process `syz.2.199'.
[   80.154344][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'.
[   80.244439][ T6631] netlink: 16 bytes leftover after parsing attributes in process `syz.2.199'.
[   80.479232][ T6660] netlink: 'syz.1.205': attribute type 3 has an invalid length.
[   80.695454][ T6673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'.
[   80.913545][ T6686] netlink: 24 bytes leftover after parsing attributes in process `syz.4.211'.
[   80.927472][ T6682] xt_policy: too many policy elements
[   81.136040][ T6702] netlink: 64 bytes leftover after parsing attributes in process `syz.2.213'.
[   81.158563][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.214'.
[   81.183559][ T6706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.214'.
[   81.880940][ T6742] lo speed is unknown, defaulting to 1000
[   81.894413][ T6742] lo speed is unknown, defaulting to 1000
[   81.921355][ T6742] lo speed is unknown, defaulting to 1000
[   82.015654][   T46] cfg80211: failed to load regulatory.db
[   82.466998][    T9] lo speed is unknown, defaulting to 1000
[   82.484161][ T6742] infiniband syz0: set active
[   82.499973][ T6742] infiniband syz0: added lo
[   82.562748][ T6742] RDS/IB: syz0: added
[   82.576231][ T6742] smc: adding ib device syz0 with port count 1
[   82.582752][ T6742] smc:    ib device syz0 port 1 has pnetid 
[   82.591417][    T9] lo speed is unknown, defaulting to 1000
[   82.600755][ T6742] lo speed is unknown, defaulting to 1000
[   82.659495][ T6779] netlink: 'syz.3.235': attribute type 4 has an invalid length.
[   82.967837][ T6742] lo speed is unknown, defaulting to 1000
[   83.217124][ T6802] netlink: 'syz.3.242': attribute type 1 has an invalid length.
[   83.368070][ T6802] 8021q: adding VLAN 0 to HW filter on device bond1
[   83.402883][ T6742] lo speed is unknown, defaulting to 1000
[   83.452570][ T6806] bond1: (slave ip6gretap1): making interface the new active one
[   83.489175][ T6802] No such timeout policy "syz0"
[   83.532277][ T6806] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   83.592078][ T6819] tipc: Started in network mode
[   83.608195][ T6819] tipc: Node identity f6150801d798, cluster identity 4711
[   83.641372][ T6819] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.779768][ T6814] tipc: Resetting bearer <eth:syzkaller0>
[   83.865590][ T6807] tipc: Resetting bearer <eth:syzkaller0>
[   83.977078][ T6847] netlink: 'syz.3.251': attribute type 178 has an invalid length.
[   84.710855][    T9] tipc: Node number set to 562890753
[   85.263572][ T6807] tipc: Disabling bearer <eth:syzkaller0>
[   85.283885][ T6742] lo speed is unknown, defaulting to 1000
[   85.704283][ T6742] lo speed is unknown, defaulting to 1000
[   85.936956][ T6886] __nla_validate_parse: 8 callbacks suppressed
[   85.936974][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.260'.
[   85.951069][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'.
[   85.982244][ T6880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.258'.
[   86.101724][ T6890] netlink: 88 bytes leftover after parsing attributes in process `syz.1.261'.
[   86.126345][ T6889] netlink: 192 bytes leftover after parsing attributes in process `syz.4.262'.
[   86.286227][ T6898] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[   86.349315][ T6903] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.265'.
[   86.400351][ T6902] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.265'.
[   86.571969][ T6912] netlink: 'syz.2.269': attribute type 4 has an invalid length.
[   86.607690][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.273'.
[   86.695624][ T6916] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   86.997366][ T6940] IPVS: length: 69 != 24
[   87.146358][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.280'.
[   87.234770][ T6956] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0
[   87.298576][ T6961] netlink: 40 bytes leftover after parsing attributes in process `syz.3.280'.
[   89.074239][ T6982] netlink: 'syz.3.286': attribute type 1 has an invalid length.
[   89.164363][ T6986] xt_hashlimit: max too large, truncated to 1048576
[   89.957147][ T7030] nft_compat: unsupported protocol 0
[   90.170588][ T7033] delete_channel: no stack
[   90.825528][ T7079] netlink: 'syz.3.309': attribute type 1 has an invalid length.
[   90.833773][ T7076] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component
[   90.857734][ T7085] netlink: 'syz.3.309': attribute type 3 has an invalid length.
[   90.876192][ T7085] netlink: 'syz.3.309': attribute type 2 has an invalid length.
[   90.905651][ T7079] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[   90.915741][ T7079] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.153837][ T7099] netlink: 'syz.4.311': attribute type 1 has an invalid length.
[   91.168523][ T7094] af_packet: tpacket_rcv: packet too big, clamped from 2932 to 2928. macoff=96
[   91.182755][ T7099] 8021q: adding VLAN 0 to HW filter on device bond2
[   91.215991][ T7100] netlink: 'syz.3.312': attribute type 10 has an invalid length.
[   91.236580][ T7100] bridge0: port 3(team0) entered blocking state
[   91.245386][ T7100] bridge0: port 3(team0) entered disabled state
[   91.263900][ T7100] team0: entered allmulticast mode
[   91.269450][ T7100] team_slave_0: entered allmulticast mode
[   91.275875][ T7100] team_slave_1: entered allmulticast mode
[   91.317086][ T7100] team0: entered promiscuous mode
[   91.322168][ T7100] team_slave_0: entered promiscuous mode
[   91.362153][ T7100] team_slave_1: entered promiscuous mode
[   91.738305][ T7138] netlink: 'syz.4.315': attribute type 1 has an invalid length.
[   91.854616][ T7138] bond3: entered promiscuous mode
[   91.903340][ T7138] 8021q: adding VLAN 0 to HW filter on device bond3
[   92.017756][ T7150] __nla_validate_parse: 8 callbacks suppressed
[   92.017773][ T7150] netlink: 28 bytes leftover after parsing attributes in process `syz.2.318'.
[   92.062227][ T7157] Bluetooth: MGMT ver 1.23
[   92.093393][ T7150] netlink: 28 bytes leftover after parsing attributes in process `syz.2.318'.
[   92.609194][ T7179] xt_cluster: you have exceeded the maximum number of cluster nodes (768 > 32)
[   92.630709][ T7181] trusted_key: syz.3.330 sent an empty control message without MSG_MORE.
[   92.737380][ T7190] netlink: 60 bytes leftover after parsing attributes in process `syz.0.333'.
[   93.114832][ T7213] siw: device registration error -23
[   93.172938][ T7217] IPVS: set_ctl: invalid protocol: 46 172.20.20.45:20003
[   93.181625][ T7213] netlink: 'syz.3.338': attribute type 9 has an invalid length.
[   93.200546][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.338'.
[   93.211978][ T7217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.339'.
[   93.223429][ T7217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.339'.
[   93.300194][ T7222] netlink: 132 bytes leftover after parsing attributes in process `syz.2.341'.
[   93.361602][ T7226] netlink: 'syz.0.342': attribute type 4 has an invalid length.
[   93.392424][ T7226] netlink: 'syz.0.342': attribute type 4 has an invalid length.
[   93.653832][ T7238] 8021q: adding VLAN 0 to HW filter on device bond1
[   93.829638][ T7239] 8021q: adding VLAN 0 to HW filter on device bond1
[   93.844875][ T7239] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[   93.864936][ T7239] bond1: (slave wireguard0): Error -95 calling set_mac_address
[   93.897720][ T7244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.345'.
[   94.325970][ T7258] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) !
[   94.817676][ T7294] validate_nla: 1 callbacks suppressed
[   94.817696][ T7294] netlink: 'syz.3.360': attribute type 1 has an invalid length.
[   94.989929][ T7301] netlink: 132 bytes leftover after parsing attributes in process `syz.2.362'.
[   95.258342][ T7308] netlink: 32 bytes leftover after parsing attributes in process `syz.2.365'.
[   95.486930][ T7314] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.554184][ T7316] xt_hashlimit: max too large, truncated to 1048576
[   95.615674][ T5845] Bluetooth: hci4: command 0x0405 tx timeout
[   95.991302][ T7331] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[   96.032196][ T7331] netlink: 'syz.2.374': attribute type 2 has an invalid length.
[   97.217892][ T7393] __nla_validate_parse: 7 callbacks suppressed
[   97.217909][ T7393] netlink: 24 bytes leftover after parsing attributes in process `syz.3.393'.
[   97.269103][ T7393] netlink: 272 bytes leftover after parsing attributes in process `syz.3.393'.
[   97.326824][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'.
[   97.606621][ T7419] netlink: 'syz.3.399': attribute type 4 has an invalid length.
[   97.655962][ T7419] netlink: 152 bytes leftover after parsing attributes in process `syz.3.399'.
[   97.954030][ T7437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.405'.
[   97.977876][ T7437] (unnamed net_device) (uninitialized): (slave batadv_slave_0): Device is not bonding slave
[   98.006166][ T7437] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv_slave_0)
[   98.067598][ T7441] netlink: 'syz.4.407': attribute type 10 has an invalid length.
[   98.092292][ T7441] team0: Port device netdevsim0 added
[   98.130521][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.408'.
[   98.155385][ T7445] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.168487][ T7445] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.223373][ T7450] netlink: 23 bytes leftover after parsing attributes in process `syz.4.410'.
[   98.239209][ T7450] netlink: 23 bytes leftover after parsing attributes in process `syz.4.410'.
[   98.531218][ T7462] netlink: 16 bytes leftover after parsing attributes in process `syz.4.416'.
[   98.583865][ T7467] mac80211_hwsim hwsim9 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   98.647012][ T5845] Bluetooth: hci4: command 0x0405 tx timeout
[   98.755822][ T7474] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.418'.
[   98.764947][ T7474] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[   98.901095][ T7483] netlink: 'syz.4.420': attribute type 21 has an invalid length.
[   98.931139][ T7482] mac80211_hwsim hwsim3 ÿ
: renamed from wlan1 (while UP)
[   99.209810][   T46] wlan0 speed is unknown, defaulting to 1000
[   99.701586][ T7524] netlink: 'syz.2.433': attribute type 1 has an invalid length.
[   99.748668][ T7524] netlink: 'syz.2.433': attribute type 1 has an invalid length.
[   99.949194][ T7535] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.326970][ T7535] bridge_slave_0 (unregistering): left allmulticast mode
[  100.370399][ T7535] bridge_slave_0 (unregistering): left promiscuous mode
[  100.387809][ T7535] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.506109][ T7553] xt_bpf: check failed: parse error
[  100.977487][ T7567] netlink: 'syz.4.447': attribute type 1 has an invalid length.
[  101.001007][ T7567] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.113426][ T7572] delete_channel: no stack
[  101.723211][ T5883] wlan0 speed is unknown, defaulting to 1000
[  102.059654][ T7617] tls_set_device_offload: netdev not found
[  102.078177][ T7617] netlink: 'syz.1.462': attribute type 1 has an invalid length.
[  102.221254][ T7626] No such timeout policy "syz0"
[  102.391150][ T7634] __nla_validate_parse: 13 callbacks suppressed
[  102.391169][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.466'.
[  102.418191][ T7637] veth1_macvtap: left promiscuous mode
[  102.465309][ T7637] macsec0: entered allmulticast mode
[  102.670929][ T7650] netlink: 4932 bytes leftover after parsing attributes in process `syz.1.472'.
[  103.546545][ T7696] netlink: 16 bytes leftover after parsing attributes in process `syz.3.483'.
[  103.573459][ T7699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.483'.
[  103.643616][ T7702] geneve2: entered promiscuous mode
[  103.668492][ T7702] geneve2: entered allmulticast mode
[  103.840865][ T7705] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  104.003141][ T7716] netlink: 'syz.1.490': attribute type 1 has an invalid length.
[  104.144582][ T7722] tipc: Failed to remove unknown binding: 66,1,1/0:1226707965/1226707967
[  104.188068][ T7725] netlink: 'syz.2.493': attribute type 4 has an invalid length.
[  104.195312][ T7722] tipc: Failed to remove unknown binding: 66,1,1/0:1226707965/1226707967
[  104.222578][ T7725] netlink: 'syz.2.493': attribute type 21 has an invalid length.
[  104.251283][ T7725] netlink: 132 bytes leftover after parsing attributes in process `syz.2.493'.
[  104.618012][ T7740] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.704993][ T7748] netlink: 48 bytes leftover after parsing attributes in process `syz.4.498'.
[  104.785512][ T7748] netlink: 48 bytes leftover after parsing attributes in process `syz.4.498'.
[  104.826072][ T7740] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.826354][ T7748] netlink: 48 bytes leftover after parsing attributes in process `syz.4.498'.
[  104.904382][ T7754] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  104.944965][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'.
[  104.963952][ T7754] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  104.974334][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.502'.
[  105.007887][ T7754] gretap1: entered promiscuous mode
[  105.025337][ T7754] gretap1: entered allmulticast mode
[  105.081733][ T7740] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.175825][ T7740] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.380794][ T7740] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.428645][ T7740] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.463261][ T7740] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.551520][ T7740] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.691717][ T7852] sctp: [Deprecated]: syz.4.522 (pid 7852) Use of struct sctp_assoc_value in delayed_ack socket option.
[  106.691717][ T7852] Use struct sctp_sack_info instead
[  106.743775][ T7852] sctp: [Deprecated]: syz.4.522 (pid 7852) Use of struct sctp_assoc_value in delayed_ack socket option.
[  106.743775][ T7852] Use struct sctp_sack_info instead
[  107.122959][ T7876] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526
[  107.849818][ T7883] __nla_validate_parse: 6 callbacks suppressed
[  107.849836][ T7883] netlink: 28 bytes leftover after parsing attributes in process `syz.3.529'.
[  107.871989][ T7883] netlink: 28 bytes leftover after parsing attributes in process `syz.3.529'.
[  108.470539][ T7880] netlink: 60 bytes leftover after parsing attributes in process `syz.4.528'.
[  108.821004][ T7901] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  108.830698][ T7901] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.839717][ T7901] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.848704][ T7901] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  108.919744][ T7900] netlink: 188 bytes leftover after parsing attributes in process `syz.0.533'.
[  108.940036][ T7901] vxlan1: entered promiscuous mode
[  108.947022][ T7910] netlink: 16 bytes leftover after parsing attributes in process `syz.4.536'.
[  108.963065][ T7901] vxlan1: entered allmulticast mode
[  108.968489][ T7900] netlink: 'syz.0.533': attribute type 1 has an invalid length.
[  109.071101][ T7919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.535'.
[  109.083654][ T7901] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.092726][ T7901] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.101776][ T7901] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.110755][ T7901] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.324814][ T7927] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.386735][ T7912] veth1_virt_wifi: mtu less than device minimum
[  109.398546][ T7929] C: renamed from lo (while UP)
[  109.411640][ T7929] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  109.663813][ T7940] netlink: 'syz.0.541': attribute type 1 has an invalid length.
[  109.769773][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.544'.
[  109.803199][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.544'.
[  109.918945][ T7953] netlink: 9 bytes leftover after parsing attributes in process `syz.3.543'.
[  109.949126][ T7953] gretap0: entered promiscuous mode
[  109.987725][ T7947] netlink: 5 bytes leftover after parsing attributes in process `syz.3.543'.
[  110.007065][ T7947] 0ªî{X¹¦: renamed from gretap0
[  110.032742][ T7947] 0ªî{X¹¦: left promiscuous mode
[  110.079750][ T7955] netlink: 'syz.2.547': attribute type 10 has an invalid length.
[  110.085449][ T7947] 0ªî{X¹¦: entered allmulticast mode
[  110.120457][ T7947] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  110.177213][ T7965] bridge2: entered promiscuous mode
[  110.182788][ T7965] bridge2: entered allmulticast mode
[  110.210886][ T7955] hsr0: entered promiscuous mode
[  110.229514][ T7955] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  110.265598][ T7955] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  110.335610][ T7955] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  110.357238][ T7975] netlink: 'syz.0.550': attribute type 30 has an invalid length.
[  110.416694][ T7975] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  110.425551][ T7975] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  110.434261][ T7975] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  110.443075][ T7975] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.605704][ T7988] netlink: 'syz.0.550': attribute type 30 has an invalid length.
[  111.014322][ T8012] wlan0 speed is unknown, defaulting to 1000
[  111.047399][ T8012] lo speed is unknown, defaulting to 1000
[  112.353259][ T8089] netlink: 'syz.4.581': attribute type 12 has an invalid length.
[  112.910591][ T8124] __nla_validate_parse: 11 callbacks suppressed
[  112.910612][ T8124] netlink: 16 bytes leftover after parsing attributes in process `syz.0.588'.
[  113.043269][ T8128] bond0: entered promiscuous mode
[  113.087317][ T8128] bond_slave_0: entered promiscuous mode
[  113.156090][ T8128] bond_slave_1: entered promiscuous mode
[  113.247328][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.591'.
[  113.348707][ T8135] team0: left allmulticast mode
[  113.369944][ T8135] team_slave_0: left allmulticast mode
[  113.388248][ T8135] team_slave_1: left allmulticast mode
[  113.415339][ T8135] team0: left promiscuous mode
[  113.423181][ T8135] team_slave_0: left promiscuous mode
[  113.447601][ T8135] team_slave_1: left promiscuous mode
[  113.470208][ T8135] bridge0: port 3(team0) entered disabled state
[  113.496995][ T8135] bridge_slave_1: left allmulticast mode
[  113.522171][ T8135] bridge_slave_1: left promiscuous mode
[  113.533278][ T8135] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.567584][ T8135] bridge_slave_0: left allmulticast mode
[  113.575519][ T8135] bridge_slave_0: left promiscuous mode
[  113.583001][ T8135] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.863956][ T8169] netlink: 'syz.0.597': attribute type 3 has an invalid length.
[  113.874054][ T8169] netlink: 224 bytes leftover after parsing attributes in process `syz.0.597'.
[  113.942219][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.600'.
[  113.951201][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.600'.
[  113.973671][ T8172] netlink: 'syz.4.600': attribute type 1 has an invalid length.
[  113.988448][ T8172] netlink: 10 bytes leftover after parsing attributes in process `syz.4.600'.
[  114.024174][ T8172] block nbd0: Unsupported socket: shutdown callout must be supported.
[  114.166588][ T8182] netlink: 'syz.1.603': attribute type 1 has an invalid length.
[  114.181276][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.603'.
[  114.190359][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.603'.
[  114.191880][ T8184] netlink: 2 bytes leftover after parsing attributes in process `syz.4.604'.
[  114.591120][ T8204] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0
[  114.623732][ T8200] xt_CT: No such helper "pptp"
[  114.658414][ T8206] x_tables: duplicate underflow at hook 1
[  115.011046][ T8222] openvswitch: netlink: Actions may not be safe on all matching packets
[  115.024024][ T8220] netlink: 'syz.2.614': attribute type 1 has an invalid length.
[  115.056682][ T8220] netlink: 52 bytes leftover after parsing attributes in process `syz.2.614'.
[  115.061309][   T29] audit: type=1107 audit(1741622867.818:2): pid=8226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹�5ž÷Œ•%èÍUýAÊ�ÃËÙ ë0ä�™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›'
[  115.078416][ T8220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  115.112827][ T8227] tc_dump_action: action bad kind
[  115.390147][ T8243] vlan3: entered promiscuous mode
[  115.409003][ T8243] bond0: entered promiscuous mode
[  115.417170][ T8243] bond_slave_0: entered promiscuous mode
[  115.423402][ T8243] bond_slave_1: entered promiscuous mode
[  115.437203][ T8243] bond0: left promiscuous mode
[  115.442111][ T8243] bond_slave_0: left promiscuous mode
[  115.448239][ T8243] bond_slave_1: left promiscuous mode
[  115.654198][ T8257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.353212][ T8331] netlink: 'syz.3.647': attribute type 2 has an invalid length.
[  117.376343][ T5885] IPVS: starting estimator thread 0...
[  117.387944][ T8331] netlink: 'syz.3.647': attribute type 2 has an invalid length.
[  117.495379][ T8333] IPVS: using max 24 ests per chain, 57600 per kthread
[  117.684168][ T8345] x_tables: duplicate underflow at hook 1
[  117.880548][ T8359] wlan0 speed is unknown, defaulting to 1000
[  117.896853][ T8359] lo speed is unknown, defaulting to 1000
[  117.981877][ T8363] tc_dump_action: action bad kind
[  117.997020][ T8363] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  118.010727][ T8364] __nla_validate_parse: 7 callbacks suppressed
[  118.010743][ T8364] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.661'.
[  118.245963][ T8367] openvswitch: netlink: Missing key (keys=40, expected=100)
[  118.983234][ T8407] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.673'.
[  119.369997][ T8425] wlan0 speed is unknown, defaulting to 1000
[  119.461477][ T8425] lo speed is unknown, defaulting to 1000
[  120.122032][ T8453] netlink: 64 bytes leftover after parsing attributes in process `syz.0.685'.
[  120.166105][ T8453] netlink: 64 bytes leftover after parsing attributes in process `syz.0.685'.
[  120.576413][ T8458] netlink: 6 bytes leftover after parsing attributes in process `syz.0.687'.
[  120.982387][ T8481] openvswitch: netlink: Duplicate or invalid key (type 1).
[  121.003745][ T8481] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.064115][ T8481] netlink: 45 bytes leftover after parsing attributes in process `syz.4.691'.
[  121.505797][ T8503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.699'.
[  121.586229][ T8503] sch_tbf: burst 0 is lower than device bridge3 mtu (1514) !
[  121.632042][ T8517] tipc: MTU too low for tipc bearer
[  121.832526][ T8527] netlink: 216 bytes leftover after parsing attributes in process `syz.0.705'.
[  121.986707][ T8533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.707'.
[  122.034312][ T8539] netlink: 'syz.1.710': attribute type 1 has an invalid length.
[  122.042669][ T8539] netlink: 56 bytes leftover after parsing attributes in process `syz.1.710'.
[  122.174776][ T8546] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes
[  122.459594][ T8562] bond4: entered allmulticast mode
[  122.465513][ T8562] 8021q: adding VLAN 0 to HW filter on device bond4
[  122.686681][ T8581] netlink: 'syz.3.724': attribute type 12 has an invalid length.
[  122.694467][ T8581] netlink: 'syz.3.724': attribute type 11 has an invalid length.
[  123.303187][ T8620] netlink: 'syz.3.733': attribute type 14 has an invalid length.
[  123.319420][ T8619] netlink: 'syz.2.734': attribute type 1 has an invalid length.
[  123.327854][ T8619] __nla_validate_parse: 4 callbacks suppressed
[  123.327871][ T8619] netlink: 224 bytes leftover after parsing attributes in process `syz.2.734'.
[  123.353913][ T8620] netlink: 'syz.3.733': attribute type 14 has an invalid length.
[  123.884701][ T8655] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 130, id = 0
[  123.912741][ T8658] netlink: 176 bytes leftover after parsing attributes in process `syz.4.739'.
[  123.940629][ T8658] ip6gretap0: entered promiscuous mode
[  123.959350][ T8658] netlink: 176 bytes leftover after parsing attributes in process `syz.4.739'.
[  124.296600][ T5883] IPVS: starting estimator thread 0...
[  124.371612][ T8685] netlink: 20 bytes leftover after parsing attributes in process `syz.3.747'.
[  124.385906][ T8682] IPVS: using max 22 ests per chain, 52800 per kthread
[  124.666712][ T8699] netlink: 104 bytes leftover after parsing attributes in process `syz.1.752'.
[  125.111591][ T8730] netlink: 28 bytes leftover after parsing attributes in process `syz.3.763'.
[  125.159583][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.764'.
[  125.343649][ T8748] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  125.672747][ T8764] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.771'.
[  126.248062][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.783'.
[  126.386951][ T8797] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.784'.
[  126.498599][ T8803] IPVS: Error connecting to the multicast addr
[  126.549674][ T8805] bond2: entered promiscuous mode
[  126.556513][ T8805] bond2: entered allmulticast mode
[  126.562089][ T8805] 8021q: adding VLAN 0 to HW filter on device bond2
[  126.710315][ T8810] wlan0 speed is unknown, defaulting to 1000
[  126.762039][ T8810] lo speed is unknown, defaulting to 1000
[  126.856369][ T8821] veth1_macvtap: left promiscuous mode
[  126.861905][ T8821] macsec0: entered promiscuous mode
[  126.899072][ T8821] veth1_macvtap: entered promiscuous mode
[  126.926372][ T8821] macsec0: left promiscuous mode
[  128.749335][ T8919] __nla_validate_parse: 4 callbacks suppressed
[  128.749354][ T8919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.820'.
[  128.993205][ T8905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.014673][ T8905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.032370][ T8905] bond0 (unregistering): Released all slaves
[  129.059556][ T8913] pim6reg: entered allmulticast mode
[  129.110170][ T8918] pim6reg: left allmulticast mode
[  129.868083][ T8980] openvswitch: netlink: EtherType 50a is less than min 600
[  130.140789][ T8999] netlink: 5692 bytes leftover after parsing attributes in process `syz.4.840'.
[  130.172651][ T8999] team0: No ports can be present during mode change
[  130.437434][ T9016] netlink: 20 bytes leftover after parsing attributes in process `syz.4.846'.
[  130.501291][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.849'.
[  130.672479][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.852'.
[  130.741453][ T9029] netlink: 14 bytes leftover after parsing attributes in process `syz.3.852'.
[  130.939261][ T9047] netlink: 244 bytes leftover after parsing attributes in process `syz.0.857'.
[  130.950527][ T9047] netlink: 104 bytes leftover after parsing attributes in process `syz.0.857'.
[  131.232667][ T9061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.864'.
[  131.255461][ T9062] netlink: 28 bytes leftover after parsing attributes in process `syz.2.864'.
[  131.303420][ T9070] netlink: 'syz.0.866': attribute type 1 has an invalid length.
[  131.889016][ T9098] netlink: 'syz.4.873': attribute type 29 has an invalid length.
[  131.928040][ T9098] netlink: 'syz.4.873': attribute type 29 has an invalid length.
[  131.950024][ T9106] netlink: 'syz.3.874': attribute type 26 has an invalid length.
[  132.110321][ T9115] veth0: entered promiscuous mode
[  132.187275][ T9114] veth0: left promiscuous mode
[  132.626314][ T9140] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.785002][ T9155] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[  132.938935][ T9163] team0: No ports can be present during mode change
[  133.219116][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  133.514749][ T9195] netlink: 'syz.1.899': attribute type 2 has an invalid length.
[  133.576208][ T9195] netlink: 'syz.1.899': attribute type 3 has an invalid length.
[  133.837714][ T9206] __nla_validate_parse: 16 callbacks suppressed
[  133.837731][ T9206] netlink: 24 bytes leftover after parsing attributes in process `syz.4.901'.
[  134.066882][ T9217] netlink: 'syz.0.904': attribute type 5 has an invalid length.
[  134.116621][ T9217] netlink: 'syz.0.904': attribute type 5 has an invalid length.
[  134.128125][ T9217] netlink: 'syz.0.904': attribute type 5 has an invalid length.
[  134.131641][ T9222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.905'.
[  134.148663][ T9217] netlink: 'syz.0.904': attribute type 5 has an invalid length.
[  134.181169][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.907'.
[  134.400354][   T29] audit: type=1107 audit(1741622887.158:3): pid=9242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�ÃËÙ ë0ä�™l…t¿Ý•/Öÿ Ž6òŠ¨zç›'
[  134.581364][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.911'.
[  134.626220][ T9250] netlink: 16 bytes leftover after parsing attributes in process `syz.3.911'.
[  134.811624][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.916'.
[  134.938776][ T9274] openvswitch: netlink: Actions may not be safe on all matching packets
[  134.984132][ T9276] openvswitch: netlink: Missing key (keys=40, expected=80)
[  135.022568][ T9276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.920'.
[  135.324882][ T9295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.926'.
[  135.768756][    T9] lo speed is unknown, defaulting to 1000
[  135.789834][ T5885] lo speed is unknown, defaulting to 1000
[  135.827299][ T5885] lo speed is unknown, defaulting to 1000
[  135.988970][ T9328] netlink: 48 bytes leftover after parsing attributes in process `syz.2.934'.
[  136.024507][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.935'.
[  136.131960][ T9333] bond2: left allmulticast mode
[  136.366984][ T9350] syzkaller1: entered promiscuous mode
[  136.372493][ T9350] syzkaller1: entered allmulticast mode
[  136.788695][ T9375] validate_nla: 75 callbacks suppressed
[  136.788712][ T9375] netlink: 'syz.3.946': attribute type 10 has an invalid length.
[  136.852013][ T9375] netlink: 'syz.3.946': attribute type 10 has an invalid length.
[  137.231157][ T9399] sctp: [Deprecated]: syz.1.951 (pid 9399) Use of struct sctp_assoc_value in delayed_ack socket option.
[  137.231157][ T9399] Use struct sctp_sack_info instead
[  138.216737][ T5881] IPVS: starting estimator thread 0...
[  138.284671][ T9454] wlan0 speed is unknown, defaulting to 1000
[  138.303229][ T9454] lo speed is unknown, defaulting to 1000
[  138.333510][ T9455] IPVS: using max 25 ests per chain, 60000 per kthread
[  138.643314][ T9469] bridge0: port 3(vlan0) entered blocking state
[  138.682735][ T9469] bridge0: port 3(vlan0) entered disabled state
[  138.723588][ T9469] vlan0: entered allmulticast mode
[  138.787104][ T9469] vlan0: left allmulticast mode
[  139.077791][ T9481] __nla_validate_parse: 20 callbacks suppressed
[  139.077810][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'.
[  139.235617][ T9481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.975'.
[  140.826602][ T9526] netlink: 'syz.3.991': attribute type 1 has an invalid length.
[  140.843636][ T9526] netlink: 236 bytes leftover after parsing attributes in process `syz.3.991'.
[  141.051381][ T9536] netlink: 36 bytes leftover after parsing attributes in process `syz.2.993'.
[  141.503171][ T9551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.997'.
[  141.723289][ T9554] netlink: 'syz.4.998': attribute type 1 has an invalid length.
[  141.873191][ T9423] Set syz1 is full, maxelem 65536 reached
[  142.081559][ T9566] netlink: 'syz.0.1003': attribute type 10 has an invalid length.
[  142.227739][ T9566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.537005][ T9586] netlink: 'syz.1.1010': attribute type 1 has an invalid length.
[  142.598368][ T9595] FAULT_INJECTION: forcing a failure.
[  142.598368][ T9595] name failslab, interval 1, probability 0, space 0, times 1
[  142.658379][ T9595] CPU: 0 UID: 0 PID: 9595 Comm: syz.0.1011 Not tainted 6.14.0-rc5-syzkaller-00129-g505ead7ab77f #0
[  142.658403][ T9595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  142.658417][ T9595] Call Trace:
[  142.658424][ T9595]  <TASK>
[  142.658431][ T9595]  dump_stack_lvl+0x241/0x360
[  142.658464][ T9595]  ? __pfx_dump_stack_lvl+0x10/0x10
[  142.658478][ T9595]  ? __pfx__printk+0x10/0x10
[  142.658495][ T9595]  ? __pfx_validate_chain+0x10/0x10
[  142.658513][ T9595]  should_fail_ex+0x40a/0x550
[  142.658536][ T9595]  should_failslab+0xac/0x100
[  142.658555][ T9595]  __kmalloc_noprof+0xdd/0x4c0
[  142.658572][ T9595]  ? skcipher_next_slow+0xea/0x230
[  142.658592][ T9595]  skcipher_next_slow+0xea/0x230
[  142.658611][ T9595]  sm4_avx_ctr_crypt+0xe7/0x9f0
[  142.658634][ T9595]  ? __virt_addr_valid+0x183/0x530
[  142.658647][ T9595]  ? __pfx_lock_release+0x10/0x10
[  142.658664][ T9595]  ? __pfx_sm4_aesni_avx2_ctr_enc_blk16+0x10/0x10
[  142.658680][ T9595]  ? __pfx_sm4_avx_ctr_crypt+0x10/0x10
[  142.658704][ T9595]  ? scatterwalk_ffwd+0x23a/0x380
[  142.658723][ T9595]  ? __virt_addr_valid+0x183/0x530
[  142.658738][ T9595]  ? crypto_gcm_init_common+0x4d5/0x720
[  142.658755][ T9595]  ? __pfx_crypto_gcm_init_common+0x10/0x10
[  142.658767][ T9595]  ? simd_skcipher_encrypt+0x55/0x130
[  142.658787][ T9595]  ? irq_fpu_usable+0x87/0xa0
[  142.658799][ T9595]  ? cryptd_skcipher_child+0xd/0x40
[  142.658820][ T9595]  crypto_gcm_encrypt+0x341/0x760
[  142.658843][ T9595]  tls_push_record+0x1ba0/0x3a80
[  142.658880][ T9595]  ? __pfx_tls_push_record+0x10/0x10
[  142.658897][ T9595]  ? __pfx_sk_psock_get+0x10/0x10
[  142.658920][ T9595]  bpf_exec_tx_verdict+0xb80/0x1260
[  142.658941][ T9595]  ? get_user_pages_fast+0xcc/0x160
[  142.658960][ T9595]  ? __pfx_bpf_exec_tx_verdict+0x10/0x10
[  142.659026][ T9595]  ? sk_msg_alloc+0xab1/0xb60
[  142.659050][ T9595]  ? __phys_addr+0xba/0x170
[  142.659068][ T9595]  tls_sw_sendmsg+0x1d2f/0x28c0
[  142.659117][ T9595]  ? __pfx_tls_sw_sendmsg+0x10/0x10
[  142.659131][ T9595]  ? aa_sk_perm+0x96d/0xab0
[  142.659153][ T9595]  ? sock_rps_record_flow+0x1a/0x400
[  142.659170][ T9595]  ? inet_send_prepare+0x21/0x260
[  142.659188][ T9595]  ? inet_send_prepare+0x5a/0x260
[  142.659210][ T9595]  __sock_sendmsg+0xef/0x270
[  142.659228][ T9595]  sock_write_iter+0x2d7/0x3f0
[  142.659245][ T9595]  ? __pfx_sock_write_iter+0x10/0x10
[  142.659275][ T9595]  do_iter_readv_writev+0x71a/0x9d0
[  142.659295][ T9595]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  142.659313][ T9595]  ? bpf_lsm_file_permission+0x9/0x10
[  142.659332][ T9595]  ? rw_verify_area+0x243/0x630
[  142.659348][ T9595]  vfs_writev+0x38b/0xbc0
[  142.659375][ T9595]  ? __pfx_vfs_writev+0x10/0x10
[  142.659405][ T9595]  ? do_sys_openat2+0x17a/0x1d0
[  142.659422][ T9595]  ? __fget_files+0x2a/0x410
[  142.659441][ T9595]  ? __fget_files+0x395/0x410
[  142.659457][ T9595]  ? __fget_files+0x2a/0x410
[  142.659480][ T9595]  do_writev+0x1b6/0x360
[  142.659501][ T9595]  ? __pfx_do_writev+0x10/0x10
[  142.659519][ T9595]  ? do_syscall_64+0x100/0x230
[  142.659538][ T9595]  ? do_syscall_64+0xb6/0x230
[  142.659557][ T9595]  do_syscall_64+0xf3/0x230
[  142.659574][ T9595]  ? clear_bhb_loop+0x35/0x90
[  142.659594][ T9595]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.659614][ T9595] RIP: 0033:0x7f3a5298d169
[  142.659629][ T9595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.659639][ T9595] RSP: 002b:00007f3a53858038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  142.659656][ T9595] RAX: ffffffffffffffda RBX: 00007f3a52ba5fa0 RCX: 00007f3a5298d169
[  142.659665][ T9595] RDX: 0000000000000001 RSI: 00004000000003c0 RDI: 0000000000000003
[  142.659673][ T9595] RBP: 00007f3a53858090 R08: 0000000000000000 R09: 0000000000000000
[  142.659681][ T9595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  142.659688][ T9595] R13: 0000000000000000 R14: 00007f3a52ba5fa0 R15: 00007ffcfd957a58
[  142.659708][ T9595]  </TASK>
[  143.173226][ T9604] bridge_slave_0: left allmulticast mode
[  143.223748][ T9604] bridge_slave_0: left promiscuous mode
[  143.255533][ T9604] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.282968][ T9604] bridge_slave_1: left allmulticast mode
[  143.289267][ T9604] bridge_slave_1: left promiscuous mode
[  143.295445][ T9604] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.308860][ T9604] bond0: (slave bond_slave_0): Releasing backup interface
[  143.321605][ T9604] bond0: (slave bond_slave_1): Releasing backup interface
[  143.345109][ T9622] netlink: 'syz.4.1021': attribute type 9 has an invalid length.
[  143.378455][ T9604] team0: Port device team_slave_0 removed
[  143.414024][ T9604] team0: Port device team_slave_1 removed
[  143.422880][ T9604] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.431282][ T9604] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.439943][ T9604] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.448162][ T9604] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.474798][ T9618] netlink: 'syz.1.1020': attribute type 11 has an invalid length.
[  143.673445][ T9632] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1022'.
[  143.729905][ T9641] netlink: 'syz.4.1024': attribute type 142 has an invalid length.
[  143.886766][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'.
[  143.933464][ T9657] FAULT_INJECTION: forcing a failure.
[  143.933464][ T9657] name failslab, interval 1, probability 0, space 0, times 0
[  143.961828][ T9650] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1027'.
[  143.982225][ T9657] CPU: 1 UID: 0 PID: 9657 Comm: syz.4.1029 Not tainted 6.14.0-rc5-syzkaller-00129-g505ead7ab77f #0
[  143.982248][ T9657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  143.982257][ T9657] Call Trace:
[  143.982262][ T9657]  <TASK>
[  143.982270][ T9657]  dump_stack_lvl+0x241/0x360
[  143.982296][ T9657]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.982312][ T9657]  ? __pfx__printk+0x10/0x10
[  143.982341][ T9657]  should_fail_ex+0x40a/0x550
[  143.982368][ T9657]  should_failslab+0xac/0x100
[  143.982390][ T9657]  __kmalloc_noprof+0xdd/0x4c0
[  143.982411][ T9657]  ? ahash_def_finup+0x299/0x710
[  143.982430][ T9657]  ahash_def_finup+0x299/0x710
[  143.982455][ T9657]  gcm_hash_crypt_remain_continue+0x298/0x450
[  143.982473][ T9657]  ? __asan_memset+0x23/0x50
[  143.982493][ T9657]  ? __pfx_gcm_hash_crypt_remain_continue+0x10/0x10
[  143.982509][ T9657]  ? cryptd_shash_desc+0xd/0x20
[  143.982536][ T9657]  ? gcm_hash_assoc_remain_continue+0x417/0x540
[  143.982557][ T9657]  tls_push_record+0x1ba0/0x3a80
[  143.982600][ T9657]  ? __pfx_tls_push_record+0x10/0x10
[  143.982622][ T9657]  ? __pfx_sk_psock_get+0x10/0x10
[  143.982651][ T9657]  bpf_exec_tx_verdict+0xb80/0x1260
[  143.982677][ T9657]  ? get_user_pages_fast+0xcc/0x160
[  143.982703][ T9657]  ? __pfx_bpf_exec_tx_verdict+0x10/0x10
[  143.982789][ T9657]  ? sk_msg_alloc+0xab1/0xb60
[  143.982820][ T9657]  ? __phys_addr+0xba/0x170
[  143.982844][ T9657]  tls_sw_sendmsg+0x1d2f/0x28c0
[  143.982902][ T9657]  ? __pfx_tls_sw_sendmsg+0x10/0x10
[  143.982919][ T9657]  ? aa_sk_perm+0x96d/0xab0
[  143.982947][ T9657]  ? sock_rps_record_flow+0x1a/0x400
[  143.982974][ T9657]  ? inet_send_prepare+0x21/0x260
[  143.982998][ T9657]  ? inet_send_prepare+0x5a/0x260
[  143.983026][ T9657]  __sock_sendmsg+0xef/0x270
[  143.983049][ T9657]  sock_write_iter+0x2d7/0x3f0
[  143.983071][ T9657]  ? __pfx_sock_write_iter+0x10/0x10
[  143.983113][ T9657]  do_iter_readv_writev+0x71a/0x9d0
[  143.983138][ T9657]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  143.983161][ T9657]  ? bpf_lsm_file_permission+0x9/0x10
[  143.983183][ T9657]  ? rw_verify_area+0x243/0x630
[  143.983203][ T9657]  vfs_writev+0x38b/0xbc0
[  143.983237][ T9657]  ? __pfx_vfs_writev+0x10/0x10
[  143.983272][ T9657]  ? do_sys_openat2+0x17a/0x1d0
[  143.983293][ T9657]  ? __fget_files+0x2a/0x410
[  143.983316][ T9657]  ? __fget_files+0x395/0x410
[  143.983336][ T9657]  ? __fget_files+0x2a/0x410
[  143.983364][ T9657]  do_writev+0x1b6/0x360
[  143.983390][ T9657]  ? __pfx_do_writev+0x10/0x10
[  143.983410][ T9657]  ? do_syscall_64+0x100/0x230
[  143.983435][ T9657]  ? do_syscall_64+0xb6/0x230
[  143.983458][ T9657]  do_syscall_64+0xf3/0x230
[  143.983477][ T9657]  ? clear_bhb_loop+0x35/0x90
[  143.983501][ T9657]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.983520][ T9657] RIP: 0033:0x7fa95cb8d169
[  143.983536][ T9657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  143.983547][ T9657] RSP: 002b:00007fa95da2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  143.983565][ T9657] RAX: ffffffffffffffda RBX: 00007fa95cda5fa0 RCX: 00007fa95cb8d169
[  143.983576][ T9657] RDX: 0000000000000001 RSI: 00004000000003c0 RDI: 0000000000000003
[  143.983586][ T9657] RBP: 00007fa95da2a090 R08: 0000000000000000 R09: 0000000000000000
[  143.983595][ T9657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  143.983604][ T9657] R13: 0000000000000000 R14: 00007fa95cda5fa0 R15: 00007ffe3a527a28
[  143.983631][ T9657]  </TASK>
[  144.926036][ T9702] netlink: 'syz.2.1038': attribute type 39 has an invalid length.
[  144.950869][ T9702] veth0_macvtap: left promiscuous mode
[  144.972716][ T9705] FAULT_INJECTION: forcing a failure.
[  144.972716][ T9705] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  145.027909][ T9705] CPU: 0 UID: 0 PID: 9705 Comm: syz.3.1042 Not tainted 6.14.0-rc5-syzkaller-00129-g505ead7ab77f #0
[  145.027933][ T9705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  145.027941][ T9705] Call Trace:
[  145.027947][ T9705]  <TASK>
[  145.027953][ T9705]  dump_stack_lvl+0x241/0x360
[  145.027976][ T9705]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.027990][ T9705]  ? __pfx__printk+0x10/0x10
[  145.028011][ T9705]  ? snprintf+0xda/0x120
[  145.028028][ T9705]  should_fail_ex+0x40a/0x550
[  145.028050][ T9705]  _copy_to_user+0x31/0xb0
[  145.028069][ T9705]  simple_read_from_buffer+0xca/0x150
[  145.028088][ T9705]  proc_fail_nth_read+0x1e9/0x250
[  145.028108][ T9705]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  145.028126][ T9705]  ? rw_verify_area+0x243/0x630
[  145.028139][ T9705]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  145.028157][ T9705]  vfs_read+0x1f8/0xb40
[  145.028170][ T9705]  ? fdget_pos+0x254/0x320
[  145.028189][ T9705]  ? __pfx___mutex_lock+0x10/0x10
[  145.028207][ T9705]  ? __pfx_vfs_read+0x10/0x10
[  145.028217][ T9705]  ? do_sys_openat2+0x17a/0x1d0
[  145.028237][ T9705]  ? __fget_files+0x2a/0x410
[  145.028255][ T9705]  ? __fget_files+0x395/0x410
[  145.028271][ T9705]  ? __fget_files+0x2a/0x410
[  145.028294][ T9705]  ksys_read+0x18f/0x2b0
[  145.028308][ T9705]  ? __pfx_ksys_read+0x10/0x10
[  145.028321][ T9705]  ? do_syscall_64+0x100/0x230
[  145.028340][ T9705]  ? do_syscall_64+0xb6/0x230
[  145.028359][ T9705]  do_syscall_64+0xf3/0x230
[  145.028376][ T9705]  ? clear_bhb_loop+0x35/0x90
[  145.028396][ T9705]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.028412][ T9705] RIP: 0033:0x7fb4b1f8bb7c
[  145.028424][ T9705] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  145.028435][ T9705] RSP: 002b:00007fb4b2d93030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  145.028449][ T9705] RAX: ffffffffffffffda RBX: 00007fb4b21a5fa0 RCX: 00007fb4b1f8bb7c
[  145.028458][ T9705] RDX: 000000000000000f RSI: 00007fb4b2d930a0 RDI: 0000000000000004
[  145.028466][ T9705] RBP: 00007fb4b2d93090 R08: 0000000000000000 R09: 0000000000000000
[  145.028474][ T9705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  145.028481][ T9705] R13: 0000000000000000 R14: 00007fb4b21a5fa0 R15: 00007ffd9ab63038
[  145.028501][ T9705]  </TASK>
[  145.264207][ T5845] Bluetooth: hci4: command 0x0405 tx timeout
[  145.287795][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1043'.
[  145.300852][ T9714] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.529526][ T9724] netlink: 'syz.2.1047': attribute type 10 has an invalid length.
[  145.593777][ T9724] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  145.710126][ T9734] netlink: 'syz.1.1052': attribute type 1 has an invalid length.
[  145.753239][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1052'.
[  145.775455][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1052'.
[  145.839755][ T9743] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1055'.
[  145.884214][ T9742] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1055'.
[  146.079567][ T9758] netlink: 'syz.4.1059': attribute type 11 has an invalid length.
[  146.281007][ T9770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1064'.
[  146.336503][ T9772] netlink: 'syz.1.1065': attribute type 4 has an invalid length.
[  146.639840][ T9792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1068'.
[  147.127404][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1073'.
[  147.343013][ T9827] xt_TCPMSS: Only works on TCP SYN packets
[  147.390427][ T9833] netlink: 'syz.0.1079': attribute type 10 has an invalid length.
[  147.400766][ T9827] netlink: 38 bytes leftover after parsing attributes in process `syz.3.1077'.
[  147.426619][ T9827] xt_cluster: you have exceeded the maximum number of cluster nodes (768 > 32)
[  147.450649][ T9835] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1080'.
[  147.694894][ T9847] : entered promiscuous mode
[  148.127158][ T9875] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  148.191600][ T9878] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  148.400556][ T9887] openvswitch: netlink: Multiple metadata blocks provided
[  148.577019][ T9899] Driver unsupported XDP return value 0 on prog  (id 266) dev N/A, expect packet loss!
[  148.861885][ T9888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  148.877150][ T9888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.892018][ T9888] bond0 (unregistering): Released all slaves
[  148.921734][ T9915] (unnamed net_device) (uninitialized): (slave batadv_slave_0): Device is not bonding slave
[  148.934188][ T9915] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv_slave_0)
[  149.294516][ T9936] netlink: 'syz.3.1113': attribute type 6 has an invalid length.
[  149.336284][ T9938] nbd: must specify a size in bytes for the device
[  150.066729][ T9962] IPv6: NLM_F_CREATE should be specified when creating new route
[  150.235976][ T9993] netlink: 'syz.0.1129': attribute type 1 has an invalid length.
[  150.465612][T10005] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20000
[  150.631815][T10015] __nla_validate_parse: 14 callbacks suppressed
[  150.631834][T10015] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1135'.
[  150.714105][T10024] ip6t_REJECT: ECHOREPLY is not supported
[  151.245934][T10049] netlink: 'syz.3.1142': attribute type 1 has an invalid length.
[  151.487189][T10066] netlink: 'syz.4.1146': attribute type 4 has an invalid length.
[  151.539749][T10066] netlink: 'syz.4.1146': attribute type 11 has an invalid length.
[  151.589309][T10066] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1146'.
[  151.647805][T10076] pim6reg527: entered allmulticast mode
[  152.247598][T10112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1160'.
[  152.279381][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1160'.
[  152.306567][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1160'.
[  152.316083][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1160'.
[  152.480898][T10127] xt_hashlimit: max too large, truncated to 1048576
[  152.781939][T10142] xt_CT: No such helper "pptp"
[  152.851857][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'.
[  153.065917][T10169] tipc: Started in network mode
[  153.083518][T10169] tipc: Node identity 1e14b81835a2, cluster identity 4711
[  153.136993][T10169] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.171475][T10171] syzkaller0: entered promiscuous mode
[  153.203348][T10171] syzkaller0: entered allmulticast mode
[  153.234424][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'.
[  153.257206][T10169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1176'.
[  153.283119][T10169] netlink: 'syz.4.1176': attribute type 14 has an invalid length.
[  153.357928][T10171] tipc: Resetting bearer <eth:syzkaller0>
[  153.395737][T10168] tipc: Resetting bearer <eth:syzkaller0>
[  153.464046][T10168] tipc: Disabling bearer <eth:syzkaller0>
[  153.652977][T10195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1185'.
[  153.882325][T10210] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  153.903235][T10212] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  153.918668][T10213] netlink: 'syz.4.1191': attribute type 1 has an invalid length.
[  153.953619][T10213] 8021q: adding VLAN 0 to HW filter on device bond5
[  153.996713][T10213] gretap2: entered promiscuous mode
[  154.046342][T10213] bond5: (slave gretap2): making interface the new active one
[  154.065121][T10213] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  154.084133][T10213] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  154.363625][T10240] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  155.756296][T10312] netlink: 'syz.0.1226': attribute type 7 has an invalid length.
[  155.941873][T10322] IPv4: Oversized IP packet from 172.20.20.24
[  155.950523][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  155.957281][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  156.005896][T10323] netlink: 'syz.1.1228': attribute type 10 has an invalid length.
[  156.031936][T10328] __nla_validate_parse: 7 callbacks suppressed
[  156.031954][T10328] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1231'.
[  156.056657][T10326] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1229'.
[  156.124354][T10326] nbd: socks must be embedded in a SOCK_ITEM attr
[  156.136097][ T5848] block nbd64: NBD_DISCONNECT
[  156.359254][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1232'.
[  156.396966][T10328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1231'.
[  156.844587][T10367] netlink: 'syz.2.1241': attribute type 5 has an invalid length.
[  157.022816][T10371] syzkaller0: entered promiscuous mode
[  157.038905][T10371] syzkaller0: entered allmulticast mode
[  157.133302][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1246'.
[  157.152806][T10381] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1248'.
[  157.162833][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1248'.
[  157.173155][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1246'.
[  157.196833][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1246'.
[  157.248542][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1246'.
[  158.536714][T10455] xt_time: invalid argument - start or stop time greater than 23:59:59
[  159.033160][T10492] netlink: 'syz.0.1275': attribute type 1 has an invalid length.
[  159.052033][T10492] netlink: 'syz.0.1275': attribute type 2 has an invalid length.
[  159.233914][T10504] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  159.256729][T10501] xt_CT: You must specify a L4 protocol and not use inversions on it
[  159.615242][ T5832] Bluetooth: hci4: command 0x0405 tx timeout
[  159.939932][T10543] 8021q: adding VLAN 0 to HW filter on device bond7
[  161.176256][T10630] __nla_validate_parse: 70 callbacks suppressed
[  161.176370][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1321'.
[  161.428232][T10643] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1325'.
[  161.525352][T10646] netlink: 'syz.2.1327': attribute type 8 has an invalid length.
[  161.925797][T10649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.168100][T10659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  162.289847][T10657] syz.2.1329 (10657) used greatest stack depth: 17552 bytes left
[  162.642589][T10679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1338'.
[  162.694642][T10679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1338'.
[  162.827600][T10693] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1340'.
[  163.231502][T10715] openvswitch: netlink: Multiple metadata blocks provided
[  163.341417][T10722] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1347'.
[  163.543569][T10727] can: request_module (can-proto-0) failed.
[  163.626305][T10740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1353'.
[  163.819867][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1355'.
[  163.830055][T10752] macsec0: entered promiscuous mode
[  163.835362][T10752] macsec0: left allmulticast mode
[  163.841901][T10752] veth1_macvtap: entered promiscuous mode
[  163.849948][T10752] macsec0: left promiscuous mode
[  164.088159][T10763] netlink: 'syz.1.1360': attribute type 6 has an invalid length.
[  164.145603][T10768] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1361'.
[  164.237589][T10775] syzkaller1: entered promiscuous mode
[  164.249702][T10775] syzkaller1: entered allmulticast mode
[  164.912246][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1370'.
[  165.099290][T10824] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  165.577466][T10850] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.199903][T10888] syzkaller0: entered allmulticast mode
[  166.327438][T10895] __nla_validate_parse: 1 callbacks suppressed
[  166.327455][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1387'.
[  167.190477][T10954] vlan3: entered promiscuous mode
[  167.205451][T10954] bridge0: entered promiscuous mode
[  167.300159][T10959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1399'.
[  167.513878][T10965] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  167.588288][T10974] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  167.854237][T10991] IPVS: Unknown mcast interface: vlan1
[  168.204535][T11019] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1410'.
[  168.464605][T11029] openvswitch: netlink: IP tunnel dst address not specified
[  168.473266][T11027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1413'.
[  168.476112][T11031] xt_ipcomp: unknown flags B
[  168.876990][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1419'.
[  168.935329][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1419'.
[  169.351461][T11086] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1425'.
[  170.362716][T11135] ieee802154 phy1 wpan1: encryption failed: -22
[  170.530583][T11150] netlink: 'syz.0.1439': attribute type 25 has an invalid length.
[  170.741173][T11150] xt_hashlimit: invalid interval
[  170.774277][T11160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1442'.
[  170.861161][T11169] tipc: Started in network mode
[  170.868538][T11169] tipc: Node identity 128e989ae239, cluster identity 4711
[  170.882784][T11169] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.907059][T11160] syzkaller0: entered promiscuous mode
[  170.923888][T11160] syzkaller0: entered allmulticast mode
[  170.987478][T11157] tipc: Resetting bearer <eth:syzkaller0>
[  171.031662][T11157] tipc: Disabling bearer <eth:syzkaller0>
[  171.608388][T11210] batadv_slave_1: default FDB implementation only supports local addresses
[  171.748247][T11217] netlink: 'syz.1.1455': attribute type 1 has an invalid length.
[  171.826212][T11217] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.939960][T11220] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  171.976590][T11225] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.983843][T11225] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address
[  171.996570][T11225] bond0: (slave wireguard0): Error -95 calling set_mac_address
[  172.029221][T11212] tipc: Resetting bearer <eth:syzkaller0>
[  173.010129][ T5881] tipc: Node number set to 733394968
[  173.687563][T11212] tipc: Disabling bearer <eth:syzkaller0>
[  173.888816][ T5832] Bluetooth: hci4: link tx timeout
[  173.894320][ T5832] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  173.904096][ T5845] Bluetooth: hci4: link tx timeout
[  173.909390][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  173.926724][ T5845] Bluetooth: hci4: link tx timeout
[  173.930979][T11254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1464'.
[  173.931909][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  174.029393][T11261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1465'.
[  174.055591][T11264] ªªªªªªo]Uü.ž: renamed from lo (while UP)
[  174.108455][T11261] syzkaller0: refused to change device tx_queue_len
[  174.255064][T11274] xt_CT: You must specify a L4 protocol and not use inversions on it
[  174.690519][T11297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1476'.
[  174.715955][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1475'.
[  174.830996][T11297] netlink: 'syz.1.1476': attribute type 1 has an invalid length.
[  175.158736][T11323] netlink: 'syz.1.1480': attribute type 1 has an invalid length.
[  175.434878][T11344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1485'.
[  175.460978][T11344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1485'.
[  175.544126][T11352] netlink: 'syz.4.1488': attribute type 2 has an invalid length.
[  175.928015][ T5845] Bluetooth: hci4: command 0x0405 tx timeout
[  176.167913][T11393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1497'.
[  176.176346][T11395] netlink: 'syz.2.1496': attribute type 30 has an invalid length.
[  176.218527][T11395] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  176.265532][T11395] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  176.666796][T11424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.866892][T11431] bond1: entered promiscuous mode
[  176.872161][T11431] bond1: entered allmulticast mode
[  176.879631][T11431] 8021q: adding VLAN 0 to HW filter on device bond1
[  177.224130][T11458] xt_TPROXY: Can be used only with -p tcp or -p udp
[  177.403370][T11463] netlink: 'syz.3.1511': attribute type 5 has an invalid length.
[  177.424728][T11468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1513'.
[  177.453387][T11470] netlink: 'syz.2.1514': attribute type 281 has an invalid length.
[  177.461820][T11468] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1513'.
[  177.665364][T11474] dvmrp1: entered allmulticast mode
[  177.817080][T11493] SET target dimension over the limit!
[  177.840977][T11496] SET target dimension over the limit!
[  177.850719][T11498] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1520'.
[  178.033702][T11504] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  178.582480][T11537] bond0: entered promiscuous mode
[  178.588364][T11537] bond_slave_0: entered promiscuous mode
[  178.614572][T11537] bond_slave_1: entered promiscuous mode
[  178.639380][T11537] bond0: entered allmulticast mode
[  178.661213][T11537] bond_slave_0: entered allmulticast mode
[  178.697968][T11537] bond_slave_1: entered allmulticast mode
[  178.742194][T11537] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.775890][T11549] syzkaller1: entered promiscuous mode
[  178.792022][T11549] syzkaller1: entered allmulticast mode
[  179.025397][T11562] __nla_validate_parse: 5 callbacks suppressed
[  179.025415][T11562] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1544'.
[  179.068875][T11562] team0: Port device team_slave_0 removed
[  179.115578][T11562] team0: Port device team_slave_1 removed
[  179.126462][T11562] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.136240][T11562] batman_adv: batadv0: Removing interface: batadv_slave_0
[  179.161538][T11562] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.170098][T11562] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.708792][T11600] IPv6: sit1: Disabled Multicast RS
[  179.896732][T11608] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1558'.
[  179.926047][T11612] unsupported nla_type 174
[  180.085993][T11608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1558'.
[  180.180545][T11628] netlink: 'syz.3.1565': attribute type 1 has an invalid length.
[  180.190614][T11626] netlink: 'syz.1.1564': attribute type 4 has an invalid length.
[  180.191684][T11628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1565'.
[  180.286274][T11630] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  180.312286][T11631] ipt_REJECT: TCP_RESET invalid for non-tcp
[  180.444797][T11637] netlink: 'syz.3.1570': attribute type 1 has an invalid length.
[  181.095001][T11673] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1579'.
[  181.216558][T11680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1582'.
[  181.236321][T11681] ieee802154 phy1 wpan1: encryption failed: -90
[  181.244015][T11684] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1582'.
[  181.670826][T11703] netlink: 'syz.2.1590': attribute type 10 has an invalid length.
[  181.698646][T11703] team0: Cannot enslave team device to itself
[  181.935720][T11717] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1597'.
[  182.038679][T11717] wlan0 speed is unknown, defaulting to 1000
[  182.131337][T11717] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000
[  182.180854][T11732] x_tables: duplicate underflow at hook 1
[  182.573380][T11748] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1603'.
[  182.681787][T11751] tc_dump_action: action bad kind
[  182.954565][T11760] wlan0 speed is unknown, defaulting to 1000
[  182.990688][T11760] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000
[  183.223213][T11775] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1612'.
[  183.243586][T11774] netlink: 'syz.4.1611': attribute type 1 has an invalid length.
[  183.271738][T11778] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  183.718956][T11798] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ¯HcUØîÑË•‚Ž¹+ÕuµJÙÊVú?zlIèƒ
[  184.378947][T11834] netlink: 'syz.0.1626': attribute type 1 has an invalid length.
[  184.400669][T11834] __nla_validate_parse: 1 callbacks suppressed
[  184.400688][T11834] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1626'.
[  184.637686][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1628'.
[  184.656992][T11840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1629'.
[  184.668311][T11848] netlink: 'syz.1.1631': attribute type 39 has an invalid length.
[  185.187309][T11873] rdma_rxe: rxe_newlink: failed to add wg1
[  185.244880][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1641'.
[  185.481684][T11888] openvswitch: netlink: Actions may not be safe on all matching packets
[  185.742743][T11898] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1646'.
[  185.905010][T11907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1650'.
[  185.960594][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1651'.
[  186.190769][T11927] openvswitch: netlink: IPv6 tunnel dst address is zero
[  186.269147][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1656'.
[  186.317151][T11933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1656'.
[  186.503209][ T5840] Bluetooth: hci1: command 0x0406 tx timeout
[  186.503268][ T5146] Bluetooth: hci3: command 0x0406 tx timeout
[  186.520986][ T5836] Bluetooth: hci2: command 0x0406 tx timeout
[  187.097082][T11957] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1664'.
[  187.873098][T12006] macsec0: entered promiscuous mode
[  187.955670][T12013] macsec0: left promiscuous mode
[  188.337987][T12029] veth0_to_team: entered promiscuous mode
[  188.355276][T12029] veth0_to_team: entered allmulticast mode
[  188.625783][T12042] netlink: 'syz.0.1692': attribute type 4 has an invalid length.
[  188.766878][T12054] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  188.938495][T12059] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  188.976274][T12064] openvswitch: netlink: Flow actions attr not present in new flow.
[  189.035774][T12064] openvswitch: netlink: Flow actions attr not present in new flow.
[  189.287602][T12088] openvswitch: netlink: IP tunnel dst address not specified
[  189.438847][T12093] ip6gre1: entered promiscuous mode
[  189.518541][T12099] openvswitch: netlink: IP tunnel dst address not specified
[  189.583434][T12106] netlink: 'syz.3.1706': attribute type 1 has an invalid length.
[  189.602372][T12098] __nla_validate_parse: 9 callbacks suppressed
[  189.602389][T12098] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1705'.
[  189.652464][T12098] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1705'.
[  189.688930][T12106] wlan0 speed is unknown, defaulting to 1000
[  189.701987][T12100] netlink: 'syz.3.1706': attribute type 1 has an invalid length.
[  189.855448][T12115] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1709'.
[  189.980402][T12121] vlan0: entered promiscuous mode
[  190.027094][T12128] netlink: 'syz.2.1711': attribute type 10 has an invalid length.
[  190.125750][T12128] bridge0: entered promiscuous mode
[  190.167043][T12128] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  190.311980][T12140] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1715'.
[  190.588096][T12155] netlink: 'syz.0.1721': attribute type 27 has an invalid length.
[  190.666394][T12161] netlink: 'syz.3.1722': attribute type 1 has an invalid length.
[  190.684690][T12161] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1722'.
[  190.699955][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1722'.
[  190.715064][T12165] netlink: 4448 bytes leftover after parsing attributes in process `syz.2.1719'.
[  190.861833][T12169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1723'.
[  191.365039][T12155] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.392626][T12155] bridge0: left promiscuous mode
[  191.580948][T12155] veth0_to_team: left promiscuous mode
[  191.595464][T12155] veth0_to_team: left allmulticast mode
[  191.635330][T12155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.668242][T12155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.876627][T12155] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.890597][T12155] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.900219][T12155] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.909281][T12155] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.977150][T12155] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.986680][T12155] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.995912][T12155] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.005031][T12155] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.026494][T12155] bond2: left promiscuous mode
[  192.036207][T12155] vlan3: left promiscuous mode
[  192.068843][T12160] 8021q: adding VLAN 0 to HW filter on device team0
[  192.079279][T12160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  192.132815][T12169] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  194.312063][T12218] netlink: 'syz.1.1734': attribute type 12 has an invalid length.
[  194.334186][T12218] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1734'.
[  194.462009][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1736'.
[  194.649217][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  194.713679][T12238] __nla_validate_parse: 2 callbacks suppressed
[  194.713697][T12238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1740'.
[  194.780157][T12251] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1743'.
[  195.266612][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1751'.
[  195.521162][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1755'.
[  195.541826][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1758'.
[  195.596778][T12286] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1759'.
[  195.893329][T12297] xt_CONNSECMARK: invalid mode: 0
[  195.938233][T12301] x_tables: unsorted entry at hook 1
[  196.168472][T12313] netlink: 'syz.4.1768': attribute type 4 has an invalid length.
[  196.177860][T12316] xt_cluster: node mask cannot exceed total number of nodes
[  196.211449][T12315] sit3: entered promiscuous mode
[  196.228254][T12315] sit3: entered allmulticast mode
[  196.323367][T12322] bond0: entered allmulticast mode
[  196.326435][T12324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1771'.
[  196.343322][T12322] bond_slave_0: entered allmulticast mode
[  196.352628][T12322] bond_slave_1: entered allmulticast mode
[  196.370366][T12322] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.427992][T12329] sctp: [Deprecated]: syz.3.1774 (pid 12329) Use of struct sctp_assoc_value in delayed_ack socket option.
[  196.427992][T12329] Use struct sctp_sack_info instead
[  196.474895][T12333] netlink: 'syz.1.1775': attribute type 11 has an invalid length.
[  196.502643][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1772'.
[  196.632692][T12345] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.750682][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1780'.
[  196.765366][T12348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1780'.
[  196.921719][T12353] tun0: tun_chr_ioctl cmd 1074025675
[  196.935571][T12353] tun0: persist disabled
[  196.940631][T12353] tun0: tun_chr_ioctl cmd 3222336776
[  197.242575][T12363] netlink: 'syz.3.1787': attribute type 28 has an invalid length.
[  197.282886][T12363] netlink: 'syz.3.1787': attribute type 3 has an invalid length.
[  197.311716][T12368] xt_ecn: cannot match TCP bits for non-tcp packets
[  197.436533][T12374] netlink: 'syz.1.1790': attribute type 11 has an invalid length.
[  198.177013][T12415] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  198.284115][T12421] Cannot find del_set index 65531 as target
[  198.335755][T12424] 0·: renamed from hsr_slave_1 (while UP)
[  198.349155][T12424] 0·: entered allmulticast mode
[  198.364686][T12424] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  198.445532][T12424] 1·: renamed from 
c0· (while UP)
[  198.456483][T12424] A link change request failed with some changes committed already. Interface 
c1· may have been left with an inconsistent configuration, please check.
[  198.531190][T12424] 0·: renamed from 
c1· (while UP)
[  198.538700][T12424] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  198.596735][T12424] 1·: renamed from 
c0· (while UP)
[  198.643171][T12424] A link change request failed with some changes committed already. Interface 
c1· may have been left with an inconsistent configuration, please check.
[  198.697874][T12424] 0·: renamed from 
c1· (while UP)
[  198.730535][T12424] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  198.767681][T12424] 1·: renamed from 
c0· (while UP)
[  198.789134][T12424] A link change request failed with some changes committed already. Interface 
c1· may have been left with an inconsistent configuration, please check.
[  198.869899][T12424] 0·: renamed from 
c1· (while UP)
[  198.877546][T12424] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  198.898532][T12424] 1·: renamed from 
c0· (while UP)
[  198.908025][T12424] A link change request failed with some changes committed already. Interface 
c1· may have been left with an inconsistent configuration, please check.
[  198.924170][T12424] 0·: renamed from 
c1· (while UP)
[  198.964644][T12424] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  199.041409][T12424] 1·: renamed from 
c0· (while UP)
[  199.057984][T12424] A link change request failed with some changes committed already. Interface 
c1· may have been left with an inconsistent configuration, please check.
[  199.102009][T12424] 0·: renamed from 
c1· (while UP)
[  199.132366][T12424] 1·: renamed from 
c0· (while UP)
[  199.444912][T12475] xt_CT: You must specify a L4 protocol and not use inversions on it
[  199.783637][T12494] dummy0: entered allmulticast mode
[  199.927854][T12502] netlink: 'syz.1.1830': attribute type 10 has an invalid length.
[  199.965712][T12499] wlan0 speed is unknown, defaulting to 1000
[  199.992579][T12499] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000
[  200.061791][T12510] __nla_validate_parse: 20 callbacks suppressed
[  200.061808][T12510] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1833'.
[  200.099573][T12509] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1833'.
[  200.122551][T12509] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1833'.
[  200.174888][T12509] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  200.989480][T12544] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1842'.
[  201.054410][T12541] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1842'.
[  201.826853][T12596] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1858'.
[  201.859221][T12597] tap0: tun_chr_ioctl cmd 1074025677
[  201.864688][T12597] tap0: linktype set to 778
[  201.934984][T12604] veth0_to_team: entered promiscuous mode
[  201.941255][T12604] veth0_to_team: entered allmulticast mode
[  202.099252][T12609] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  202.504823][T12633] netlink: 'syz.3.1871': attribute type 19 has an invalid length.
[  202.633835][T12644] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1875'.
[  202.916400][T12662] netlink: 'syz.3.1880': attribute type 58 has an invalid length.
[  202.931114][T12664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'.
[  202.946423][T12662] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1880'.
[  203.937130][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1901'.
[  204.307730][T12740] netlink: 'syz.1.1908': attribute type 1 has an invalid length.
[  205.404670][T12806] gtp0: entered promiscuous mode
[  205.412229][T12806] gtp0: entered allmulticast mode
[  205.477773][T12808] wlan0 speed is unknown, defaulting to 1000
[  205.505546][T12808] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000
[  205.570760][T12812] __nla_validate_parse: 2 callbacks suppressed
[  205.570778][T12812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1927'.
[  205.634099][T12813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1927'.
[  205.863457][T12816] netlink: 'syz.3.1928': attribute type 1 has an invalid length.
[  205.890441][T12816] IPVS: Error connecting to the multicast addr
[  206.100671][T12826] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1930'.
[  206.227930][T12836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1930'.
[  206.499731][T12846] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1932'.
[  206.585329][T12844] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  206.852779][T12868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1943'.
[  206.887173][T12870] xt_hashlimit: size too large, truncated to 1048576
[  206.994341][T12876] 
: renamed from bond0 (while UP)
[  207.207307][T12891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1947'.
[  207.237312][T12891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1947'.
[  207.262895][T12894] net_ratelimit: 3 callbacks suppressed
[  207.262912][T12894] openvswitch: netlink: Flow actions attr not present in new flow.
[  207.469438][T12901] netdevsim netdevsim3: Firmware load for './file0/../file0' refused, path contains '..' component
[  207.604867][T12912] netlink: 'syz.1.1954': attribute type 1 has an invalid length.
[  207.751683][T12919] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1956'.
[  207.867687][T12923] netlink: 'syz.1.1957': attribute type 9 has an invalid length.
[  207.900948][T12923] netlink: 201384 bytes leftover after parsing attributes in process `syz.1.1957'.
[  207.927137][T12923] openvswitch: netlink: Message has 6 unknown bytes.
[  208.271308][T12957] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  208.291242][T12943] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.376634][T12959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  208.535427][T12943] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.645307][ T5832] Bluetooth: hci0: command tx timeout
[  208.779878][T12983] netlink: 'syz.4.1974': attribute type 1 has an invalid length.
[  208.807665][T12943] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.837032][T12984] syzkaller0: entered allmulticast mode
[  208.848661][T12983] wlan0 speed is unknown, defaulting to 1000
[  208.918432][T12943] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.985736][T12990] Cannot find set identified by id 0 to match
[  209.004966][T12993] openvswitch: netlink: Message has 2 unknown bytes.
[  209.024220][T12993] openvswitch: netlink: Actions may not be safe on all matching packets
[  209.092048][T12943] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.126398][T12997] netlink: 'syz.2.1978': attribute type 12 has an invalid length.
[  209.140088][T12943] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.157060][T12997] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255)
[  209.194453][T12943] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.231976][T12943] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  214.375178][    C0] sched: DL replenish lagged too much
[  256.845722][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  282.289502][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  282.399481][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  282.619506][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  282.653503][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  282.718430][   T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  282.909030][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  285.147380][   T54] Bluetooth: hci0: command tx timeout
[  285.300921][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  285.340719][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  285.353234][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  285.370195][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  285.386342][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  285.397075][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  287.208802][   T54] Bluetooth: hci0: command tx timeout
[  287.690858][   T54] Bluetooth: hci1: command tx timeout
[  288.572575][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  288.598484][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  288.738601][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  288.752141][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  288.764133][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  288.779507][ T5845] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  288.799538][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  289.019184][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  289.032133][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  289.069407][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  289.080469][ T5832] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  289.113964][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  289.296228][ T5832] Bluetooth: hci0: command tx timeout
[  289.788005][ T5832] Bluetooth: hci1: command tx timeout
[  291.147800][ T5832] Bluetooth: hci3: command tx timeout
[  291.220229][ T5832] Bluetooth: hci2: command tx timeout
[  291.370181][ T5832] Bluetooth: hci0: command tx timeout
[  291.852107][ T5832] Bluetooth: hci1: command tx timeout
[  293.305929][ T5832] Bluetooth: hci3: command tx timeout
[  293.311399][ T5832] Bluetooth: hci2: command tx timeout
[  294.034037][   T54] Bluetooth: hci1: command tx timeout
[  295.388199][   T54] Bluetooth: hci2: command tx timeout
[  295.393663][   T54] Bluetooth: hci3: command tx timeout
[  295.622727][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  295.660788][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  295.672700][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  296.082841][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  296.116754][ T5832] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  296.127761][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  297.446367][   T54] Bluetooth: hci3: command tx timeout
[  297.451840][   T54] Bluetooth: hci2: command tx timeout
[  298.615787][ T5832] Bluetooth: hci4: command tx timeout
[  300.648475][ T5832] Bluetooth: hci4: command tx timeout
[  302.787065][ T5832] Bluetooth: hci4: command tx timeout
[  304.810627][ T5832] Bluetooth: hci4: command tx timeout
[  317.726667][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  324.628967][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  324.659533][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  324.671990][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  324.790444][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  324.809609][   T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  324.821325][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  326.908715][   T54] Bluetooth: hci5: command tx timeout
[  329.086255][   T54] Bluetooth: hci5: command tx timeout
[  331.138457][ T5832] Bluetooth: hci5: command tx timeout
[  333.209014][ T5832] Bluetooth: hci5: command tx timeout
[  334.310669][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  334.497275][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  334.714375][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  336.388506][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  337.078799][   T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  337.492986][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  340.408909][   T54] Bluetooth: hci6: command tx timeout
[  342.003831][ T5845] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  342.039791][ T5845] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  342.052298][ T5845] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  342.283921][ T5845] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  342.300334][ T5845] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  342.320046][ T5845] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  342.348136][ T5845] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  342.431031][ T5845] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  342.454548][ T5845] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  342.486802][ T5845] Bluetooth: hci6: command tx timeout
[  342.570071][ T5845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  342.603014][ T5845] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  342.625407][ T5845] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  344.597212][ T5845] Bluetooth: hci8: command tx timeout
[  344.603561][ T5845] Bluetooth: hci6: command tx timeout
[  345.042151][   T54] Bluetooth: hci7: command tx timeout
[  346.652815][ T5845] Bluetooth: hci6: command tx timeout
[  346.661379][ T5845] Bluetooth: hci8: command tx timeout
[  347.185272][ T5845] Bluetooth: hci7: command tx timeout
[  347.480442][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  347.579821][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  347.591677][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  347.748805][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  347.764150][   T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  347.790004][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  348.731500][   T54] Bluetooth: hci8: command tx timeout
[  348.743158][T13064] wlan0 speed is unknown, defaulting to 1000
[  348.822624][T13064] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000
[  348.834044][T13066] wlan0 speed is unknown, defaulting to 1000
[  348.977000][T13060] wlan0 speed is unknown, defaulting to 1000
[  349.206234][   T54] Bluetooth: hci7: command tx timeout
[  349.926547][   T54] Bluetooth: hci0: command tx timeout
[  350.239685][T13067] wlan0 speed is unknown, defaulting to 1000
[  350.802687][T13072] wlan0 speed is unknown, defaulting to 1000
[  350.820028][   T54] Bluetooth: hci8: command tx timeout
[  351.289269][   T54] Bluetooth: hci7: command tx timeout
[  352.010853][   T54] Bluetooth: hci0: command tx timeout
[  354.098583][   T54] Bluetooth: hci0: command tx timeout
[  356.189728][   T54] Bluetooth: hci0: command tx timeout
[  359.907072][   T12] bridge_slave_1: left allmulticast mode
[  359.921575][   T12] bridge_slave_1: left promiscuous mode
[  359.942919][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.067760][   T12] bridge_slave_0: left allmulticast mode
[  360.076652][   T12] bridge_slave_0: left promiscuous mode
[  360.246875][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.366377][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  440.656233][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  448.409440][ T5845] Bluetooth: hci5: command 0x0406 tx timeout
[  463.054753][ T5845] Bluetooth: hci6: command 0x0406 tx timeout
[  468.358878][ T5832] Bluetooth: hci8: command 0x0406 tx timeout
[  468.365013][ T5832] Bluetooth: hci7: command 0x0406 tx timeout
[  473.179307][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  473.192732][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  473.204472][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  473.261359][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  473.374269][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  473.609521][ T5832] Bluetooth: hci0: command 0x0406 tx timeout
[  474.007578][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  474.032995][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  474.121629][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  474.250870][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  474.299297][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  474.311172][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  474.350444][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  476.428603][ T5832] Bluetooth: hci1: command tx timeout
[  476.508753][ T5832] Bluetooth: hci2: command tx timeout
[  478.545942][ T5832] Bluetooth: hci1: command tx timeout
[  478.579260][ T5832] Bluetooth: hci2: command tx timeout
[  480.639951][ T5832] Bluetooth: hci1: command tx timeout
[  480.646509][ T5836] Bluetooth: hci2: command tx timeout
[  482.946942][ T5832] Bluetooth: hci2: command tx timeout
[  482.955607][ T5836] Bluetooth: hci1: command tx timeout
[  484.102170][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  484.251782][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  484.264077][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  484.398276][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  484.419258][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  484.429985][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  486.916540][ T5836] Bluetooth: hci3: command tx timeout
[  488.969415][ T5836] Bluetooth: hci3: command tx timeout
[  491.257806][ T5836] Bluetooth: hci3: command tx timeout
[  493.369951][ T5836] Bluetooth: hci3: command tx timeout
[  495.537246][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  495.553587][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  495.621599][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  495.632910][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  495.643772][ T5832] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  495.654314][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  498.408911][ T5832] Bluetooth: hci4: command tx timeout
[  500.489318][ T5832] Bluetooth: hci4: command tx timeout
[  501.947507][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  502.587895][ T5832] Bluetooth: hci4: command tx timeout
[  504.727688][ T5832] Bluetooth: hci4: command tx timeout
[  508.097687][ T5845] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  508.099837][   T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  508.128729][   T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  508.144559][   T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  508.156481][   T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  508.163669][   T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  508.180720][   T54] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  508.193547][   T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  508.289059][   T30] INFO: task kworker/1:4:5881 blocked for more than 143 seconds.
[  508.321973][ T5845] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  508.325728][   T30]       Not tainted 6.14.0-rc5-syzkaller-00129-g505ead7ab77f #0
[  508.364365][   T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  508.555964][   T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  508.570763][ T5836] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  508.581742][ T5836] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  508.581780][ T5146] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  508.630091][ T5832] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  508.648000][ T5832] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  508.660113][ T5832] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  508.670985][ T5836] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  508.682172][ T5836] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  508.693368][ T5836] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  508.713418][ T5836] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  508.880811][T13113] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  508.980773][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  509.293658][T13113] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  509.813644][T13113] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  510.037564][   T30] task:kworker/1:4     state:D stack:22552 pid:5881  tgid:5881  ppid:2      task_flags:0x4208060 flags:0x00004000
[  510.120169][   T30] Workqueue: events switchdev_deferred_process_work
[  510.146819][   T30] Call Trace:
[  510.150150][   T30]  <TASK>
[  510.153107][   T30]  __schedule+0x190e/0x4c90
[  510.386220][   T30]  ? try_to_wake_up+0x959/0x1470
[  510.391251][   T30]  ? schedule+0x90/0x320
[  510.406697][T13113] Bluetooth: hci10: command tx timeout
[  510.413302][   T30]  ? __pfx___schedule+0x10/0x10
[  510.426803][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  510.432844][   T30]  ? __pfx_lock_release+0x10/0x10
[  511.279248][T13113] Bluetooth: hci9: command tx timeout
[  511.318132][   T30]  ? kick_pool+0x45c/0x620
[  511.322625][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  511.757647][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  511.762915][   T30]  ? schedule+0x90/0x320
[  512.058541][   T30]  schedule+0x14b/0x320
[  512.062764][   T30]  schedule_preempt_disabled+0x13/0x30
[  512.088719][T13113] Bluetooth: hci11: command tx timeout
[  512.276057][ T5845] Bluetooth: hci12: command tx timeout
[  512.476428][   T30]  __mutex_lock+0x817/0x1010
[  512.481101][   T30]  ? __mutex_lock+0x602/0x1010
[  512.489321][T13113] Bluetooth: hci10: command tx timeout
[  512.768338][   T30]  ? switchdev_deferred_process_work+0xe/0x20
[  512.774473][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  512.795436][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  512.801496][   T30]  ? process_scheduled_works+0x9c6/0x18e0
[  513.368618][T13113] Bluetooth: hci9: command tx timeout
[  513.547640][   T30]  switchdev_deferred_process_work+0xe/0x20
[  514.157581][   T30]  process_scheduled_works+0xabe/0x18e0
[  514.163230][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  514.188014][   T30]  ? assign_work+0x364/0x3d0
[  514.192772][   T30]  worker_thread+0x870/0xd30
[  514.368073][T13113] Bluetooth: hci11: command tx timeout
[  514.373629][T13113] Bluetooth: hci12: command tx timeout
[  514.470546][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  514.507803][   T30]  ? __kthread_parkme+0x169/0x1d0
[  514.512894][   T30]  ? __pfx_worker_thread+0x10/0x10
[  514.719806][T13113] Bluetooth: hci10: command tx timeout
[  514.949672][   T30]  kthread+0x7a9/0x920
[  514.953810][   T30]  ? __pfx_kthread+0x10/0x10
[  515.006425][   T30]  ? __pfx_worker_thread+0x10/0x10
[  515.011611][   T30]  ? __pfx_kthread+0x10/0x10
[  515.330561][   T30]  ? __pfx_kthread+0x10/0x10
[  515.368999][   T30]  ? __pfx_kthread+0x10/0x10
[  515.373656][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  515.530033][T13113] Bluetooth: hci9: command tx timeout
[  515.599234][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  515.604507][   T30]  ? __pfx_kthread+0x10/0x10
[  515.658577][   T30]  ret_from_fork+0x4b/0x80
[  515.663064][   T30]  ? __pfx_kthread+0x10/0x10
[  515.687173][   T30]  ret_from_fork_asm+0x1a/0x30
[  515.692023][   T30]  </TASK>
[  516.298840][   T30] INFO: task syz-executor:13060 blocked for more than 151 seconds.
[  516.328590][   T30]       Not tainted 6.14.0-rc5-syzkaller-00129-g505ead7ab77f #0
[  516.360587][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  516.372272][   T30] task:syz-executor    state:D stack:22912 pid:13060 tgid:13060 ppid:1      task_flags:0x400140 flags:0x00004006
[  516.409923][T13113] Bluetooth: hci12: command tx timeout
[  516.420507][ T5845] Bluetooth: hci11: command tx timeout
[  516.809815][T13113] Bluetooth: hci10: command tx timeout
[  516.869567][   T30] Call Trace:
[  516.872896][   T30]  <TASK>
[  516.949209][   T30]  __schedule+0x190e/0x4c90
[  516.953805][   T30]  ? __pfx___schedule+0x10/0x10
[  516.967438][   T30]  ? __pfx_lock_release+0x10/0x10
[  516.972525][   T30]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  517.177074][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  517.183043][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  517.439241][   T30]  ? schedule+0x90/0x320
[  517.443545][   T30]  schedule+0x14b/0x320
[  517.476466][   T30]  schedule_preempt_disabled+0x13/0x30
[  517.481984][   T30]  __mutex_lock+0x817/0x1010
[  517.508300][   T30]  ? __mutex_lock+0x602/0x1010
[  517.513302][   T30]  ? add_one_compat_dev+0x10d/0x710
[  517.608980][T13113] Bluetooth: hci9: command tx timeout
[  517.620109][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  517.677456][   T30]  ? xa_find_after+0x648/0x700
[  517.682295][   T30]  ? xa_find_after+0x1b1/0x700
[  517.696176][   T30]  ? __pfx_down_read+0x10/0x10
[  517.701021][   T30]  add_one_compat_dev+0x10d/0x710