last executing test programs:

2m22.494339578s ago: executing program 0 (id=433):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff) (async)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$PPPIOCSACTIVE(r1, 0x40047459, 0x0) (async)
read(r1, 0x0, 0x5d) (async)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac04a8169c5940010c0a3cdcd"], 0x0) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
unshare(0x6a040000) (async)
r2 = socket(0x840000000002, 0x3, 0xff) (async)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000003c0)={0x0, 0x0, 0xb, 0x0, 0x3}, 0xc) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req={0x7, 0x9, 0xe6, 0x7}, 0x10) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000006c0))
setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000140)=0x9, 0x4) (async)
sendmmsg$inet(r2, &(0x7f0000002ec0)=[{{&(0x7f00000001c0)={0x2, 0x4, @loopback}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000001bc0)}, {0x0}], 0x2}}], 0x4, 0x0)
unshare(0x6a040000) (async)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
socket$kcm(0x2, 0xa, 0x2)

2m22.440189444s ago: executing program 0 (id=436):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$bt_sco(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r2 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@ethernet={0x0, @random}, &(0x7f0000000040)=0x80)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r5)
sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffd}, 0xe)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$netlink(0x10, 0x3, 0xf)
bind$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ffc}, 0xe)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x62040200)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r1, 0x0, 0x0}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x2300}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x3fff}]}}]}, 0x40}}, 0x0)
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x8, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x4048800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
socket$rds(0x15, 0x5, 0x0)

2m22.203184414s ago: executing program 0 (id=438):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000), 0xe)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000a0000000000000001450000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRES8=0x0], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdc01, {{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x80, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r6, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
listen(r0, 0x0)
close(0x4)
socket(0x22, 0x6, 0x5)

2m21.29264884s ago: executing program 0 (id=443):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0xa, 0x89c8, 0x40401, 0xffffffffffffffff, 0x7f, '\x00', r1, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x2}, 0x50)
ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000840)={0x3, {0x18, 0x2, 0x6, 0x2, 0x9b3}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000040000904000000001cdbdf25022000cb", @ANYRES32=r8, @ANYBLOB="0800040064010101080008001000000008000100ffffffff08000200ffffffff0800090031000000080002007f000001"], 0x48}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x8804)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, <r9=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)}, 0x20)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0201000004000000edffffff01000000903aee81", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="03000000010000000300"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, <r11=>0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20)
r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0xe, &(0x7f00000004c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x6, 0x1, 0x0, r10}, @alu={0x4, 0x0, 0x7, 0x2, 0x6, 0xef, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}], &(0x7f0000000540)='GPL\x00', 0xfffffff9, 0xa9, &(0x7f0000000580)=""/169, 0x40f00, 0x0, '\x00', r8, @fallback=0x24, r12, 0x8, &(0x7f00000006c0)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000700)=[{0x3, 0x2, 0x4, 0xa}], 0x10, 0x4}, 0x94)
bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x1, {0x1, 0x0, 0x1}, 0x1}, 0x18)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x4, 0x4)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005)
readv(r4, &(0x7f0000000140)=[{&(0x7f00000018c0)=""/4112, 0x1010}], 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000800)={'vxcan0\x00'})
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {0x7ffe}, @device_b, @device_a, @initial, {0x0, 0x1}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x81, 0xad, 0x40}, @val={0x76, 0x6, {0x3, 0x6, 0x18, 0x6}}}}}}]}, 0x48}}, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x83)

2m20.419896911s ago: executing program 0 (id=449):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
r1 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_buf(r1, 0x29, 0x44, 0x0, &(0x7f0000000900))
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x28, r4, 0x201, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x28}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r4, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000))

2m20.341954731s ago: executing program 0 (id=451):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002580)=ANY=[@ANYBLOB], 0x8)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r1, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113900000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48)
unshare(0x400)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10000, @value=r2}, 0x28)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000001a240)=ANY=[@ANYBLOB="240000001900010000000000000000121c060000fe000001000000f7070001"], 0x24}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000108fdffffff00000008000000006d85dcd6163776a1fe1c0f408191cd2cbcbeffe42d744552148b66a0b6bcbc0eae67819ffffb2ea2924ff094df403b987ed890137fe765707bbe1803cd6f8d16a4138fbc1b32570e4d0746749d843f1ebd15a56aca58c12aa577c5389a10b1af1722eafe6c2732b1ba4817d765cd860fc78111", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b000000000018001a80100002800c00018008000f000500000056002d80"], 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000a00)=[{0x2, 0x3, {0x2, 0x0, 0x1}, {0x2, 0xff, 0xf7a59104b40dfa67}, 0xfd}, {0x0, 0x0, {0x2, 0xf0}, {0x0, 0x0, 0x2}, 0xff, 0x2}, {0x1, 0x3, {0x2, 0x0, 0x4}, {0x0, 0x1, 0x4}, 0x1, 0xfe}, {0x1, 0x0, {0x1, 0x1, 0x7}, {0x2, 0xff}, 0x2, 0xfe}, {0x2, 0x1, {0x1, 0xf, 0x4}, {0x1, 0x1}, 0xff, 0xff}], 0xa0)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20010)
r10 = socket$can_bcm(0x1d, 0x2, 0x2)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
write(r11, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000340)={'vxcan0\x00'})

2m4.752248596s ago: executing program 32 (id=451):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002580)=ANY=[@ANYBLOB], 0x8)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r1, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113900000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48)
unshare(0x400)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10000, @value=r2}, 0x28)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000001a240)=ANY=[@ANYBLOB="240000001900010000000000000000121c060000fe000001000000f7070001"], 0x24}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000108fdffffff00000008000000006d85dcd6163776a1fe1c0f408191cd2cbcbeffe42d744552148b66a0b6bcbc0eae67819ffffb2ea2924ff094df403b987ed890137fe765707bbe1803cd6f8d16a4138fbc1b32570e4d0746749d843f1ebd15a56aca58c12aa577c5389a10b1af1722eafe6c2732b1ba4817d765cd860fc78111", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b000000000018001a80100002800c00018008000f000500000056002d80"], 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000a00)=[{0x2, 0x3, {0x2, 0x0, 0x1}, {0x2, 0xff, 0xf7a59104b40dfa67}, 0xfd}, {0x0, 0x0, {0x2, 0xf0}, {0x0, 0x0, 0x2}, 0xff, 0x2}, {0x1, 0x3, {0x2, 0x0, 0x4}, {0x0, 0x1, 0x4}, 0x1, 0xfe}, {0x1, 0x0, {0x1, 0x1, 0x7}, {0x2, 0xff}, 0x2, 0xfe}, {0x2, 0x1, {0x1, 0xf, 0x4}, {0x1, 0x1}, 0xff, 0xff}], 0xa0)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20010)
r10 = socket$can_bcm(0x1d, 0x2, 0x2)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
write(r11, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000340)={'vxcan0\x00'})

52.768380241s ago: executing program 1 (id=843):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x420, 0x3f4, 0x8, 0x70bd2d, 0x25dfdbfb, {0x5, 0x1, 0x19, [0x1, 0x6, 0x5, 0x7, 0x8001, 0xf594, 0x0, 0x8, 0xff, 0x4, 0x7, 0xe6e, 0xc, 0xe, 0x8001, 0x1a6, 0x1000, 0x6, 0x3, 0x9, 0x6, 0x8000, 0x4fd, 0xfffffff9, 0x8, 0xc4, 0x727, 0x1, 0x7, 0x8, 0xfff, 0x1ff, 0x5bf6, 0x800, 0x9, 0x4, 0x3ff80, 0x8, 0xf, 0x61, 0x8, 0x5, 0x1, 0x8, 0x401, 0x6, 0x6, 0x88f, 0x5e1, 0x7ac9, 0xfffffffb, 0xdab, 0x4, 0x7, 0x3, 0x7, 0x1, 0x5, 0x5, 0x1, 0x4, 0x2, 0xfff, 0x80000040], [0xcd4, 0xbbc, 0x8001, 0x1, 0x1, 0xb3e, 0x3, 0x84b, 0x17, 0x10000, 0x5, 0x7f, 0xfffeffff, 0x9, 0xf, 0x5, 0x6, 0x0, 0x3, 0x3, 0x7ff, 0x8, 0x7fff, 0x8, 0x1, 0x2, 0x0, 0x3ff, 0xc, 0xd, 0x81, 0x10000, 0x8, 0x0, 0x8, 0x5, 0x1, 0x7fffffff, 0x2, 0x9, 0x5, 0x7fffffff, 0x10000, 0xff39, 0x28, 0x1, 0x1, 0x5f, 0x8001, 0x2, 0x0, 0x7, 0x4, 0x0, 0x9, 0x10, 0x2, 0x1, 0xfffffffe, 0x1, 0x7, 0x80000004, 0x4], [0x6, 0x4, 0x140000, 0x101, 0x6a26, 0x81, 0x49b, 0x4, 0x10, 0x3, 0x1, 0x1, 0x1ff, 0x170c00, 0x4, 0xfffff801, 0x1000, 0x1, 0x6, 0xffff, 0x15, 0x7, 0x9, 0x9, 0x8, 0x0, 0x4, 0x5, 0x0, 0x6a54, 0x3, 0x80000000, 0xd2, 0xcf80, 0x8, 0x1ff, 0xee09, 0x10001, 0xfffffff8, 0x0, 0xfffeffff, 0x1, 0x9, 0xfffffc91, 0xa42, 0x3, 0x1, 0x48, 0x1, 0x6, 0x5, 0x7fffffff, 0x4, 0xffff, 0x10001, 0xb, 0x0, 0xfff, 0x40, 0x10001, 0x9, 0x2, 0x5, 0x101], [0x8, 0x2, 0x7, 0x80000000, 0x6, 0x5, 0x0, 0x100, 0x3, 0x0, 0x3, 0x8080, 0x8, 0x7f, 0x9, 0x3, 0xb, 0xffffffff, 0x22ecaf89, 0xffff, 0x7, 0x3, 0xfffffff8, 0x0, 0x257f, 0xfffffffe, 0x6, 0x4, 0x8, 0x0, 0x2, 0x0, 0x2061, 0x0, 0xb408, 0x0, 0xed, 0x76aa, 0x0, 0x1000, 0x5, 0x6, 0x75, 0xd, 0x3, 0xffffffff, 0x3600000, 0x101, 0x401, 0x5, 0x0, 0x5, 0x1000, 0x4fe3, 0x0, 0xfffffffe, 0x2, 0x9, 0x6, 0x8, 0xa, 0x1, 0x8, 0x2]}}, 0x420}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040)
sendmmsg$alg(r1, &(0x7f0000006740)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}], 0x1, 0x811)
recvmsg$unix(r1, &(0x7f0000000740)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000140)=""/25, 0x19}, {&(0x7f00000002c0)=""/81, 0x51}, {&(0x7f0000000340)=""/246, 0xf6}, {&(0x7f0000000440)=""/47, 0x2f}, {&(0x7f0000000480)=""/44, 0x2c}, {&(0x7f00000004c0)=""/30, 0x1e}, {&(0x7f0000000500)=""/37, 0x25}, {&(0x7f0000000540)=""/210, 0xd2}], 0x8, &(0x7f00000006c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x3)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000200)={@void, @void, @eth={@multicast, @remote, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x64, 0x11, 0x0, @empty, @empty, {[], {0x4f1c, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x2, "d8c1a75b45c5d04c8e25fe4f8453b477a986c6bee7409272232f1ad62869de31", "49b1dce65a8f68a89ec4827f14c576e2", {"3289c5a3a189a20146784d8d20e96d1b", "4b7b80cd71f0be30fafaf191fd843de1"}}}}}}}}}, 0x9e)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmmsg$sock(r2, 0x0, 0x0, 0x4004)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004081)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

47.309893107s ago: executing program 1 (id=843):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x420, 0x3f4, 0x8, 0x70bd2d, 0x25dfdbfb, {0x5, 0x1, 0x19, [0x1, 0x6, 0x5, 0x7, 0x8001, 0xf594, 0x0, 0x8, 0xff, 0x4, 0x7, 0xe6e, 0xc, 0xe, 0x8001, 0x1a6, 0x1000, 0x6, 0x3, 0x9, 0x6, 0x8000, 0x4fd, 0xfffffff9, 0x8, 0xc4, 0x727, 0x1, 0x7, 0x8, 0xfff, 0x1ff, 0x5bf6, 0x800, 0x9, 0x4, 0x3ff80, 0x8, 0xf, 0x61, 0x8, 0x5, 0x1, 0x8, 0x401, 0x6, 0x6, 0x88f, 0x5e1, 0x7ac9, 0xfffffffb, 0xdab, 0x4, 0x7, 0x3, 0x7, 0x1, 0x5, 0x5, 0x1, 0x4, 0x2, 0xfff, 0x80000040], [0xcd4, 0xbbc, 0x8001, 0x1, 0x1, 0xb3e, 0x3, 0x84b, 0x17, 0x10000, 0x5, 0x7f, 0xfffeffff, 0x9, 0xf, 0x5, 0x6, 0x0, 0x3, 0x3, 0x7ff, 0x8, 0x7fff, 0x8, 0x1, 0x2, 0x0, 0x3ff, 0xc, 0xd, 0x81, 0x10000, 0x8, 0x0, 0x8, 0x5, 0x1, 0x7fffffff, 0x2, 0x9, 0x5, 0x7fffffff, 0x10000, 0xff39, 0x28, 0x1, 0x1, 0x5f, 0x8001, 0x2, 0x0, 0x7, 0x4, 0x0, 0x9, 0x10, 0x2, 0x1, 0xfffffffe, 0x1, 0x7, 0x80000004, 0x4], [0x6, 0x4, 0x140000, 0x101, 0x6a26, 0x81, 0x49b, 0x4, 0x10, 0x3, 0x1, 0x1, 0x1ff, 0x170c00, 0x4, 0xfffff801, 0x1000, 0x1, 0x6, 0xffff, 0x15, 0x7, 0x9, 0x9, 0x8, 0x0, 0x4, 0x5, 0x0, 0x6a54, 0x3, 0x80000000, 0xd2, 0xcf80, 0x8, 0x1ff, 0xee09, 0x10001, 0xfffffff8, 0x0, 0xfffeffff, 0x1, 0x9, 0xfffffc91, 0xa42, 0x3, 0x1, 0x48, 0x1, 0x6, 0x5, 0x7fffffff, 0x4, 0xffff, 0x10001, 0xb, 0x0, 0xfff, 0x40, 0x10001, 0x9, 0x2, 0x5, 0x101], [0x8, 0x2, 0x7, 0x80000000, 0x6, 0x5, 0x0, 0x100, 0x3, 0x0, 0x3, 0x8080, 0x8, 0x7f, 0x9, 0x3, 0xb, 0xffffffff, 0x22ecaf89, 0xffff, 0x7, 0x3, 0xfffffff8, 0x0, 0x257f, 0xfffffffe, 0x6, 0x4, 0x8, 0x0, 0x2, 0x0, 0x2061, 0x0, 0xb408, 0x0, 0xed, 0x76aa, 0x0, 0x1000, 0x5, 0x6, 0x75, 0xd, 0x3, 0xffffffff, 0x3600000, 0x101, 0x401, 0x5, 0x0, 0x5, 0x1000, 0x4fe3, 0x0, 0xfffffffe, 0x2, 0x9, 0x6, 0x8, 0xa, 0x1, 0x8, 0x2]}}, 0x420}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040)
sendmmsg$alg(r1, &(0x7f0000006740)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}], 0x1, 0x811)
recvmsg$unix(r1, &(0x7f0000000740)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000140)=""/25, 0x19}, {&(0x7f00000002c0)=""/81, 0x51}, {&(0x7f0000000340)=""/246, 0xf6}, {&(0x7f0000000440)=""/47, 0x2f}, {&(0x7f0000000480)=""/44, 0x2c}, {&(0x7f00000004c0)=""/30, 0x1e}, {&(0x7f0000000500)=""/37, 0x25}, {&(0x7f0000000540)=""/210, 0xd2}], 0x8, &(0x7f00000006c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x3)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000200)={@void, @void, @eth={@multicast, @remote, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x64, 0x11, 0x0, @empty, @empty, {[], {0x4f1c, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x2, "d8c1a75b45c5d04c8e25fe4f8453b477a986c6bee7409272232f1ad62869de31", "49b1dce65a8f68a89ec4827f14c576e2", {"3289c5a3a189a20146784d8d20e96d1b", "4b7b80cd71f0be30fafaf191fd843de1"}}}}}}}}}, 0x9e)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmmsg$sock(r2, 0x0, 0x0, 0x4004)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004081)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

41.751467444s ago: executing program 1 (id=843):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x420, 0x3f4, 0x8, 0x70bd2d, 0x25dfdbfb, {0x5, 0x1, 0x19, [0x1, 0x6, 0x5, 0x7, 0x8001, 0xf594, 0x0, 0x8, 0xff, 0x4, 0x7, 0xe6e, 0xc, 0xe, 0x8001, 0x1a6, 0x1000, 0x6, 0x3, 0x9, 0x6, 0x8000, 0x4fd, 0xfffffff9, 0x8, 0xc4, 0x727, 0x1, 0x7, 0x8, 0xfff, 0x1ff, 0x5bf6, 0x800, 0x9, 0x4, 0x3ff80, 0x8, 0xf, 0x61, 0x8, 0x5, 0x1, 0x8, 0x401, 0x6, 0x6, 0x88f, 0x5e1, 0x7ac9, 0xfffffffb, 0xdab, 0x4, 0x7, 0x3, 0x7, 0x1, 0x5, 0x5, 0x1, 0x4, 0x2, 0xfff, 0x80000040], [0xcd4, 0xbbc, 0x8001, 0x1, 0x1, 0xb3e, 0x3, 0x84b, 0x17, 0x10000, 0x5, 0x7f, 0xfffeffff, 0x9, 0xf, 0x5, 0x6, 0x0, 0x3, 0x3, 0x7ff, 0x8, 0x7fff, 0x8, 0x1, 0x2, 0x0, 0x3ff, 0xc, 0xd, 0x81, 0x10000, 0x8, 0x0, 0x8, 0x5, 0x1, 0x7fffffff, 0x2, 0x9, 0x5, 0x7fffffff, 0x10000, 0xff39, 0x28, 0x1, 0x1, 0x5f, 0x8001, 0x2, 0x0, 0x7, 0x4, 0x0, 0x9, 0x10, 0x2, 0x1, 0xfffffffe, 0x1, 0x7, 0x80000004, 0x4], [0x6, 0x4, 0x140000, 0x101, 0x6a26, 0x81, 0x49b, 0x4, 0x10, 0x3, 0x1, 0x1, 0x1ff, 0x170c00, 0x4, 0xfffff801, 0x1000, 0x1, 0x6, 0xffff, 0x15, 0x7, 0x9, 0x9, 0x8, 0x0, 0x4, 0x5, 0x0, 0x6a54, 0x3, 0x80000000, 0xd2, 0xcf80, 0x8, 0x1ff, 0xee09, 0x10001, 0xfffffff8, 0x0, 0xfffeffff, 0x1, 0x9, 0xfffffc91, 0xa42, 0x3, 0x1, 0x48, 0x1, 0x6, 0x5, 0x7fffffff, 0x4, 0xffff, 0x10001, 0xb, 0x0, 0xfff, 0x40, 0x10001, 0x9, 0x2, 0x5, 0x101], [0x8, 0x2, 0x7, 0x80000000, 0x6, 0x5, 0x0, 0x100, 0x3, 0x0, 0x3, 0x8080, 0x8, 0x7f, 0x9, 0x3, 0xb, 0xffffffff, 0x22ecaf89, 0xffff, 0x7, 0x3, 0xfffffff8, 0x0, 0x257f, 0xfffffffe, 0x6, 0x4, 0x8, 0x0, 0x2, 0x0, 0x2061, 0x0, 0xb408, 0x0, 0xed, 0x76aa, 0x0, 0x1000, 0x5, 0x6, 0x75, 0xd, 0x3, 0xffffffff, 0x3600000, 0x101, 0x401, 0x5, 0x0, 0x5, 0x1000, 0x4fe3, 0x0, 0xfffffffe, 0x2, 0x9, 0x6, 0x8, 0xa, 0x1, 0x8, 0x2]}}, 0x420}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040)
sendmmsg$alg(r1, &(0x7f0000006740)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}], 0x1, 0x811)
recvmsg$unix(r1, &(0x7f0000000740)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000140)=""/25, 0x19}, {&(0x7f00000002c0)=""/81, 0x51}, {&(0x7f0000000340)=""/246, 0xf6}, {&(0x7f0000000440)=""/47, 0x2f}, {&(0x7f0000000480)=""/44, 0x2c}, {&(0x7f00000004c0)=""/30, 0x1e}, {&(0x7f0000000500)=""/37, 0x25}, {&(0x7f0000000540)=""/210, 0xd2}], 0x8, &(0x7f00000006c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x3)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000200)={@void, @void, @eth={@multicast, @remote, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x64, 0x11, 0x0, @empty, @empty, {[], {0x4f1c, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x2, "d8c1a75b45c5d04c8e25fe4f8453b477a986c6bee7409272232f1ad62869de31", "49b1dce65a8f68a89ec4827f14c576e2", {"3289c5a3a189a20146784d8d20e96d1b", "4b7b80cd71f0be30fafaf191fd843de1"}}}}}}}}}, 0x9e)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmmsg$sock(r2, 0x0, 0x0, 0x4004)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004081)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

36.190242735s ago: executing program 1 (id=843):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x420, 0x3f4, 0x8, 0x70bd2d, 0x25dfdbfb, {0x5, 0x1, 0x19, [0x1, 0x6, 0x5, 0x7, 0x8001, 0xf594, 0x0, 0x8, 0xff, 0x4, 0x7, 0xe6e, 0xc, 0xe, 0x8001, 0x1a6, 0x1000, 0x6, 0x3, 0x9, 0x6, 0x8000, 0x4fd, 0xfffffff9, 0x8, 0xc4, 0x727, 0x1, 0x7, 0x8, 0xfff, 0x1ff, 0x5bf6, 0x800, 0x9, 0x4, 0x3ff80, 0x8, 0xf, 0x61, 0x8, 0x5, 0x1, 0x8, 0x401, 0x6, 0x6, 0x88f, 0x5e1, 0x7ac9, 0xfffffffb, 0xdab, 0x4, 0x7, 0x3, 0x7, 0x1, 0x5, 0x5, 0x1, 0x4, 0x2, 0xfff, 0x80000040], [0xcd4, 0xbbc, 0x8001, 0x1, 0x1, 0xb3e, 0x3, 0x84b, 0x17, 0x10000, 0x5, 0x7f, 0xfffeffff, 0x9, 0xf, 0x5, 0x6, 0x0, 0x3, 0x3, 0x7ff, 0x8, 0x7fff, 0x8, 0x1, 0x2, 0x0, 0x3ff, 0xc, 0xd, 0x81, 0x10000, 0x8, 0x0, 0x8, 0x5, 0x1, 0x7fffffff, 0x2, 0x9, 0x5, 0x7fffffff, 0x10000, 0xff39, 0x28, 0x1, 0x1, 0x5f, 0x8001, 0x2, 0x0, 0x7, 0x4, 0x0, 0x9, 0x10, 0x2, 0x1, 0xfffffffe, 0x1, 0x7, 0x80000004, 0x4], [0x6, 0x4, 0x140000, 0x101, 0x6a26, 0x81, 0x49b, 0x4, 0x10, 0x3, 0x1, 0x1, 0x1ff, 0x170c00, 0x4, 0xfffff801, 0x1000, 0x1, 0x6, 0xffff, 0x15, 0x7, 0x9, 0x9, 0x8, 0x0, 0x4, 0x5, 0x0, 0x6a54, 0x3, 0x80000000, 0xd2, 0xcf80, 0x8, 0x1ff, 0xee09, 0x10001, 0xfffffff8, 0x0, 0xfffeffff, 0x1, 0x9, 0xfffffc91, 0xa42, 0x3, 0x1, 0x48, 0x1, 0x6, 0x5, 0x7fffffff, 0x4, 0xffff, 0x10001, 0xb, 0x0, 0xfff, 0x40, 0x10001, 0x9, 0x2, 0x5, 0x101], [0x8, 0x2, 0x7, 0x80000000, 0x6, 0x5, 0x0, 0x100, 0x3, 0x0, 0x3, 0x8080, 0x8, 0x7f, 0x9, 0x3, 0xb, 0xffffffff, 0x22ecaf89, 0xffff, 0x7, 0x3, 0xfffffff8, 0x0, 0x257f, 0xfffffffe, 0x6, 0x4, 0x8, 0x0, 0x2, 0x0, 0x2061, 0x0, 0xb408, 0x0, 0xed, 0x76aa, 0x0, 0x1000, 0x5, 0x6, 0x75, 0xd, 0x3, 0xffffffff, 0x3600000, 0x101, 0x401, 0x5, 0x0, 0x5, 0x1000, 0x4fe3, 0x0, 0xfffffffe, 0x2, 0x9, 0x6, 0x8, 0xa, 0x1, 0x8, 0x2]}}, 0x420}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040)
sendmmsg$alg(r1, &(0x7f0000006740)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}], 0x1, 0x811)
recvmsg$unix(r1, &(0x7f0000000740)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000140)=""/25, 0x19}, {&(0x7f00000002c0)=""/81, 0x51}, {&(0x7f0000000340)=""/246, 0xf6}, {&(0x7f0000000440)=""/47, 0x2f}, {&(0x7f0000000480)=""/44, 0x2c}, {&(0x7f00000004c0)=""/30, 0x1e}, {&(0x7f0000000500)=""/37, 0x25}, {&(0x7f0000000540)=""/210, 0xd2}], 0x8, &(0x7f00000006c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x3)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000200)={@void, @void, @eth={@multicast, @remote, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x64, 0x11, 0x0, @empty, @empty, {[], {0x4f1c, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x2, "d8c1a75b45c5d04c8e25fe4f8453b477a986c6bee7409272232f1ad62869de31", "49b1dce65a8f68a89ec4827f14c576e2", {"3289c5a3a189a20146784d8d20e96d1b", "4b7b80cd71f0be30fafaf191fd843de1"}}}}}}}}}, 0x9e)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmmsg$sock(r2, 0x0, 0x0, 0x4004)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004081)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

30.831057591s ago: executing program 1 (id=843):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x420, 0x3f4, 0x8, 0x70bd2d, 0x25dfdbfb, {0x5, 0x1, 0x19, [0x1, 0x6, 0x5, 0x7, 0x8001, 0xf594, 0x0, 0x8, 0xff, 0x4, 0x7, 0xe6e, 0xc, 0xe, 0x8001, 0x1a6, 0x1000, 0x6, 0x3, 0x9, 0x6, 0x8000, 0x4fd, 0xfffffff9, 0x8, 0xc4, 0x727, 0x1, 0x7, 0x8, 0xfff, 0x1ff, 0x5bf6, 0x800, 0x9, 0x4, 0x3ff80, 0x8, 0xf, 0x61, 0x8, 0x5, 0x1, 0x8, 0x401, 0x6, 0x6, 0x88f, 0x5e1, 0x7ac9, 0xfffffffb, 0xdab, 0x4, 0x7, 0x3, 0x7, 0x1, 0x5, 0x5, 0x1, 0x4, 0x2, 0xfff, 0x80000040], [0xcd4, 0xbbc, 0x8001, 0x1, 0x1, 0xb3e, 0x3, 0x84b, 0x17, 0x10000, 0x5, 0x7f, 0xfffeffff, 0x9, 0xf, 0x5, 0x6, 0x0, 0x3, 0x3, 0x7ff, 0x8, 0x7fff, 0x8, 0x1, 0x2, 0x0, 0x3ff, 0xc, 0xd, 0x81, 0x10000, 0x8, 0x0, 0x8, 0x5, 0x1, 0x7fffffff, 0x2, 0x9, 0x5, 0x7fffffff, 0x10000, 0xff39, 0x28, 0x1, 0x1, 0x5f, 0x8001, 0x2, 0x0, 0x7, 0x4, 0x0, 0x9, 0x10, 0x2, 0x1, 0xfffffffe, 0x1, 0x7, 0x80000004, 0x4], [0x6, 0x4, 0x140000, 0x101, 0x6a26, 0x81, 0x49b, 0x4, 0x10, 0x3, 0x1, 0x1, 0x1ff, 0x170c00, 0x4, 0xfffff801, 0x1000, 0x1, 0x6, 0xffff, 0x15, 0x7, 0x9, 0x9, 0x8, 0x0, 0x4, 0x5, 0x0, 0x6a54, 0x3, 0x80000000, 0xd2, 0xcf80, 0x8, 0x1ff, 0xee09, 0x10001, 0xfffffff8, 0x0, 0xfffeffff, 0x1, 0x9, 0xfffffc91, 0xa42, 0x3, 0x1, 0x48, 0x1, 0x6, 0x5, 0x7fffffff, 0x4, 0xffff, 0x10001, 0xb, 0x0, 0xfff, 0x40, 0x10001, 0x9, 0x2, 0x5, 0x101], [0x8, 0x2, 0x7, 0x80000000, 0x6, 0x5, 0x0, 0x100, 0x3, 0x0, 0x3, 0x8080, 0x8, 0x7f, 0x9, 0x3, 0xb, 0xffffffff, 0x22ecaf89, 0xffff, 0x7, 0x3, 0xfffffff8, 0x0, 0x257f, 0xfffffffe, 0x6, 0x4, 0x8, 0x0, 0x2, 0x0, 0x2061, 0x0, 0xb408, 0x0, 0xed, 0x76aa, 0x0, 0x1000, 0x5, 0x6, 0x75, 0xd, 0x3, 0xffffffff, 0x3600000, 0x101, 0x401, 0x5, 0x0, 0x5, 0x1000, 0x4fe3, 0x0, 0xfffffffe, 0x2, 0x9, 0x6, 0x8, 0xa, 0x1, 0x8, 0x2]}}, 0x420}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040)
sendmmsg$alg(r1, &(0x7f0000006740)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}], 0x1, 0x811)
recvmsg$unix(r1, &(0x7f0000000740)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000140)=""/25, 0x19}, {&(0x7f00000002c0)=""/81, 0x51}, {&(0x7f0000000340)=""/246, 0xf6}, {&(0x7f0000000440)=""/47, 0x2f}, {&(0x7f0000000480)=""/44, 0x2c}, {&(0x7f00000004c0)=""/30, 0x1e}, {&(0x7f0000000500)=""/37, 0x25}, {&(0x7f0000000540)=""/210, 0xd2}], 0x8, &(0x7f00000006c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x3)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000200)={@void, @void, @eth={@multicast, @remote, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x64, 0x11, 0x0, @empty, @empty, {[], {0x4f1c, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x2, "d8c1a75b45c5d04c8e25fe4f8453b477a986c6bee7409272232f1ad62869de31", "49b1dce65a8f68a89ec4827f14c576e2", {"3289c5a3a189a20146784d8d20e96d1b", "4b7b80cd71f0be30fafaf191fd843de1"}}}}}}}}}, 0x9e)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmmsg$sock(r2, 0x0, 0x0, 0x4004)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004081)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

25.162415023s ago: executing program 1 (id=843):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x420, 0x3f4, 0x8, 0x70bd2d, 0x25dfdbfb, {0x5, 0x1, 0x19, [0x1, 0x6, 0x5, 0x7, 0x8001, 0xf594, 0x0, 0x8, 0xff, 0x4, 0x7, 0xe6e, 0xc, 0xe, 0x8001, 0x1a6, 0x1000, 0x6, 0x3, 0x9, 0x6, 0x8000, 0x4fd, 0xfffffff9, 0x8, 0xc4, 0x727, 0x1, 0x7, 0x8, 0xfff, 0x1ff, 0x5bf6, 0x800, 0x9, 0x4, 0x3ff80, 0x8, 0xf, 0x61, 0x8, 0x5, 0x1, 0x8, 0x401, 0x6, 0x6, 0x88f, 0x5e1, 0x7ac9, 0xfffffffb, 0xdab, 0x4, 0x7, 0x3, 0x7, 0x1, 0x5, 0x5, 0x1, 0x4, 0x2, 0xfff, 0x80000040], [0xcd4, 0xbbc, 0x8001, 0x1, 0x1, 0xb3e, 0x3, 0x84b, 0x17, 0x10000, 0x5, 0x7f, 0xfffeffff, 0x9, 0xf, 0x5, 0x6, 0x0, 0x3, 0x3, 0x7ff, 0x8, 0x7fff, 0x8, 0x1, 0x2, 0x0, 0x3ff, 0xc, 0xd, 0x81, 0x10000, 0x8, 0x0, 0x8, 0x5, 0x1, 0x7fffffff, 0x2, 0x9, 0x5, 0x7fffffff, 0x10000, 0xff39, 0x28, 0x1, 0x1, 0x5f, 0x8001, 0x2, 0x0, 0x7, 0x4, 0x0, 0x9, 0x10, 0x2, 0x1, 0xfffffffe, 0x1, 0x7, 0x80000004, 0x4], [0x6, 0x4, 0x140000, 0x101, 0x6a26, 0x81, 0x49b, 0x4, 0x10, 0x3, 0x1, 0x1, 0x1ff, 0x170c00, 0x4, 0xfffff801, 0x1000, 0x1, 0x6, 0xffff, 0x15, 0x7, 0x9, 0x9, 0x8, 0x0, 0x4, 0x5, 0x0, 0x6a54, 0x3, 0x80000000, 0xd2, 0xcf80, 0x8, 0x1ff, 0xee09, 0x10001, 0xfffffff8, 0x0, 0xfffeffff, 0x1, 0x9, 0xfffffc91, 0xa42, 0x3, 0x1, 0x48, 0x1, 0x6, 0x5, 0x7fffffff, 0x4, 0xffff, 0x10001, 0xb, 0x0, 0xfff, 0x40, 0x10001, 0x9, 0x2, 0x5, 0x101], [0x8, 0x2, 0x7, 0x80000000, 0x6, 0x5, 0x0, 0x100, 0x3, 0x0, 0x3, 0x8080, 0x8, 0x7f, 0x9, 0x3, 0xb, 0xffffffff, 0x22ecaf89, 0xffff, 0x7, 0x3, 0xfffffff8, 0x0, 0x257f, 0xfffffffe, 0x6, 0x4, 0x8, 0x0, 0x2, 0x0, 0x2061, 0x0, 0xb408, 0x0, 0xed, 0x76aa, 0x0, 0x1000, 0x5, 0x6, 0x75, 0xd, 0x3, 0xffffffff, 0x3600000, 0x101, 0x401, 0x5, 0x0, 0x5, 0x1000, 0x4fe3, 0x0, 0xfffffffe, 0x2, 0x9, 0x6, 0x8, 0xa, 0x1, 0x8, 0x2]}}, 0x420}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040)
sendmmsg$alg(r1, &(0x7f0000006740)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}], 0x1, 0x811)
recvmsg$unix(r1, &(0x7f0000000740)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000140)=""/25, 0x19}, {&(0x7f00000002c0)=""/81, 0x51}, {&(0x7f0000000340)=""/246, 0xf6}, {&(0x7f0000000440)=""/47, 0x2f}, {&(0x7f0000000480)=""/44, 0x2c}, {&(0x7f00000004c0)=""/30, 0x1e}, {&(0x7f0000000500)=""/37, 0x25}, {&(0x7f0000000540)=""/210, 0xd2}], 0x8, &(0x7f00000006c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x3)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000200)={@void, @void, @eth={@multicast, @remote, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x64, 0x11, 0x0, @empty, @empty, {[], {0x4f1c, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x2, "d8c1a75b45c5d04c8e25fe4f8453b477a986c6bee7409272232f1ad62869de31", "49b1dce65a8f68a89ec4827f14c576e2", {"3289c5a3a189a20146784d8d20e96d1b", "4b7b80cd71f0be30fafaf191fd843de1"}}}}}}}}}, 0x9e)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmmsg$sock(r2, 0x0, 0x0, 0x4004)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004081)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

1.15103841s ago: executing program 2 (id=1439):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0xb45, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x20040004, &(0x7f0000000080)={0x11, 0xf8, r1, 0x1, 0x1f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14)
recvfrom$packet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0)

1.150222851s ago: executing program 2 (id=1440):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000200000000000000000000009500000000020000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100))
r2 = socket(0x10, 0x3, 0x0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000000100)={'ip6gretap0\x00'}) (async, rerun: 32)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, 0x0, 0x0) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r3)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0x4, &(0x7f0000000500)=ANY=[@ANYRES8=r2], &(0x7f0000000040)='GPL\x00', 0x100, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={<r7=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000340)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x81, 0x8c}, 0x9c) (async, rerun: 32)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'bond0\x00', @link_local})
write$tun(r8, &(0x7f0000000440)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r8], 0xfdef)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c001100ada414d8c2155b275deee1da05b6fca9709f8b5e1e530a6296531ada7b52fb71a0b87a26dc48e09412f44ef1221f4d6b8c09e4ce3bd68b34b8ef4bca31e6a829b3974034682f4a2fffba7f1c405173ef05cd3f3a6dd0cebf0b801b14c6999c1b0d69fdab840a67129fe916e3f59383d382a4f4cc438a24d1beb46bc2232b1ef62a13cb426e965b35bf6bfd6dfefc854a1510c629f1ff0d6331d2d73ecf648972dfc23390f71480cd5a8fb92e8e6729d82d9e5b7a689569c91831517a6b74f28b6414c37215fe08a71c5c32f3a60e2f388bc781f2b84cfb57b50b4c21e64475f0b240adc571aad2326fdd1152", @ANYRES16=r5, @ANYBLOB="010000004000000000000100000006000b000f000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x90) (async)
syz_genetlink_get_family_id$nl802154(0x0, r3) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00'})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000380)={'veth1_to_bridge\x00', &(0x7f0000000680)=@ethtool_sfeatures={0x3b, 0x8, [{0xa, 0x1}, {0x4, 0x5}, {0x3, 0x8}, {0x1, 0x7fff}, {0x9, 0x6bb0}, {0x8, 0x8}, {0x8000, 0x7}, {0xfff, 0xfff}]}})
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r2)

1.080731353s ago: executing program 2 (id=1441):
syz_emit_ethernet(0xe6, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
write(r1, &(0x7f0000000080)="240000091a005f02149504205a2094dc5921e63b375fb607000901000000000000000605f1ae1a58034fdee4e86e60e94451b2cc8f5f11eb1c1e825dad457220da81f47ca7da81da1dd936eab68713383603a64f52ce88526b3d240028ba7091a68a8fd82d146be4ae3e472fb3167483417a5dec10c48275a8b6ac2c32402e89acb146bf69e97c", 0x87)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0, 0x0], 0x0, 0xb9, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000740)}}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000980)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=@getnexthop={0x48, 0x6a, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, 0xa)
shutdown(r3, 0x1)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800030000000000050000000000000095000000000000007981d675a65ed9705779c0cb10796d32ee6c342b4fa4955587714635c704294f862a62c58522381cf7a9d7580180e4d48851f4d524b7c2cc546682"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r5)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}}, 0x0)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r6, 0x325}, 0x14}}, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0xefb, 0x4)

1.079882407s ago: executing program 3 (id=1442):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000020642500000000002020207b1af8ff00000000bfa108000000000047010000f6ffffffb702000008000000b70b000000000000850000000500000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x17, &(0x7f0000000000)=""/23}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x12000, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x4a8000, 0x0)
r4 = epoll_create1(0x0)
ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000280)='netdevsim0\x00')
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0x10000001})
close(r3)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a0000000000000000070200002004681efa361595f6937420563b4b2a881877da027f90f0c42a621756c5656408d9979a40b7230c1fc399cc8aef53e454b2a0334c41f13bfc57f543fcc539d3bd6f558515dbf7ba74136f46a40db01903cd94f37a991a"], 0x14}}, 0x10)
ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)
sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x21, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180600000200000000000000040000009500008000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r8 = socket$kcm(0x10, 0x2, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000000), 0x0)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000540)="00d90b36f1b4cb61cd044f0e597b30e050ec652cef2e32671c3a9354136d995472778095a87d77f279931a63f5d9932552f117958a254d5b8039ac6c9c7b82bf81e406749b6328e32b243fc920eed199c8e7d5a2b307c99d0dd5afe98c64cf04c1bd7fd0ddf7ea4261b5b047df1a6ff48635e205ea8fe37e01f8a25c87a06a10aab54b342b9e9bf589deb90f38f22b1a700937d80cc3ead33520e07fb222b38ca1a13888882a9ed9ba"}, {&(0x7f0000000780)="bb2f95bb415827f8c631ecabacfb8fe72ea2e4935f5fcba4dcdfc03d04295a603477005cd3fc8c2a1936827f942f4a02a9f878b78347e3a61b6db3a241ad381c6301385833f48496f505d87a9f971b5470466c4b55d633b5a2a4776d81a334fe3df1b5c76bf38a47e8e4a45d13bf9d7cd154b0f2753f554eebfbfce393d7b435a727e07a89d153940c3e7b6a8c44608f654e3b7e6f96f10e48b495ceaf41b37c0420e9489541d6674d3ce545c678e69966bf51380cf70e0ab527400e603d8b11493f2dcb20373fbac1d30edcca07f8f6f01c2ff12f6b356618c8aff829b45fbfc74223dc46"}], 0x1, 0x0, 0x1f}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a30000000007c000000060a010400000000000000000100000008000b400000000054000480400001800e000100696d6d6564696174650000002c0002800800014002000000040002801c0002801800028008000180fffffffc0900020073797a3000000000100001800a0001006c696d69740000000900010073797a30"], 0xf0}, 0x1, 0x0, 0x0, 0x11}, 0x24000084)

1.03046015s ago: executing program 3 (id=1443):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0xb)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000780)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x9, 0x156d4fe6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x10, 0x3, 0xd}})
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001300a7cc4affeeaf541d0020070000ef", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x14040050}, 0x0)

1.029407332s ago: executing program 3 (id=1444):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
unshare(0x68040200)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18)
mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x3000004, 0x40010, r5, 0x3f38e000)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f7}, {0x6, 0x0, 0x6, 0x1}]}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x28, 0x5, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x404c894)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000140)="24000000010006", 0x7)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r3)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x14, r9, 0x200, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$sock(r8, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
shutdown(r8, 0x1)

277.916324ms ago: executing program 2 (id=1445):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_emit_ethernet(0x4e, &(0x7f0000000340)={@random="cd1242bdc9ea", @empty, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @broadcast, {[@noop, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}, @dest_unreach={0x3, 0x8, 0x0, 0x0, 0x6, 0x7f43, {0x5, 0x4, 0x3, 0x5, 0xfff, 0x65, 0xb9f9, 0xf5, 0x29, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x4}}}}}}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x401, 0x170bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x801}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x2000000)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$inet(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="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", 0x26d}, {&(0x7f0000000100)="b0fef28adda62f55a0000000000000001abe0a88f67472c3cd975c9884ae3f95e35b6301084df2b71b56e2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb28946223165c906e2bed2", 0x6f}], 0x2}, 0x8000)
recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0)
close(r1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x1c, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0)
connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, 0xa)
shutdown(r0, 0x1)

140.400791ms ago: executing program 3 (id=1446):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0xb45, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x20040004, &(0x7f0000000080)={0x11, 0xf8, r1, 0x1, 0x1f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14)
recvfrom$packet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0)

139.852146ms ago: executing program 2 (id=1447):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
recvmsg(r1, &(0x7f0000000200)={&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000840)=""/210, 0xd2}, 0x40000040)
ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000080)={{0x2, 0x4e23, @private=0xa010100}, {0x306, @broadcast}, 0x2e, {0x2, 0x4e21, @empty}, 'ip6gretap0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2}, 0x18)
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
r3 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r3, 0x0, 0x400c010)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = socket(0x29, 0x2, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x460, 0x180, 0x180, 0x288, 0x98, 0x0, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x61}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @TTL={0x28}}, {{@ip={@remote, @local, 0xffffff00, 0xffffff00, 'veth1_vlan\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x8, 0x0, 0x5c}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x100, 0x900}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0x9}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'lo\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140), 0x4)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200000000f70007404884b24b02a8a7758a688958ed60ecfd057e10926ba77e5596b13e43cd4488e4aa68af5f7236ec205b6e4cac2a0d86c336bf07dbe861f4f57bcef92dcf818d532d4475b5daa4dadc1690f228e860bba5a0b5d9bde86862e8f7fc08f0debd4974c6fae7d737a0007ec948ac4d8714ebff6b25648fb910e0d6d07f023cf5fa4051627b9c5b69e265538f9ba683bf172a5ff815afa543c12e550a1bcc9287080c7c12cc89d216c56febb0b06134672ea6b0077c846396169475f271319988f49ec94f2996e5d0e1cb151fb223e556f10fb681d068e055eb34e5f8fc7a524ffe5f4632a6c74ad0fe0b1542497d76a5a4416c47805e001c0005800800014008000008"], 0x1ec}}, 0x0)
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xffff, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
socket$inet_sctp(0x2, 0x5, 0x84)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x90}}, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)

139.636604ms ago: executing program 3 (id=1448):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000080)}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

68.235036ms ago: executing program 2 (id=1449):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {0x6}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@li, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x2}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0xfff9}, 0xe)
shutdown(r0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000), 0xe)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc89e00360db70100000040fad95667e006dcabced7ad654fac9609f4fb", 0xd8}], 0x1}, 0x4004)
sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x1)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, &(0x7f0000000580))
ioctl$BTRFS_IOC_FS_INFO(r6, 0x8400941f, &(0x7f00000001c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3)
getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000600)=0x3, &(0x7f0000000640)=0x2)

0s ago: executing program 3 (id=1450):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x44, r1, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x24}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8001}, 0x10}, 0x50)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x2c, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x90)
socket(0x1, 0x803, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x3, 0x1, 0x10, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x7, 0x5, 0x4}})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4084)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000000fc000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000240)={0x0, <r12=>0x0}, &(0x7f0000000400)=0xc)
sendmsg$kcm(r6, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001740)="65513f50c91637167918a116eecea9d80133e797e70b2b68d7402baaae9f9d3af6ab2e6342586984648380283342573f4ad661277bed2c77ff9824a26051ff41a42edde2d1f7ed4944f8e52398e0c38bd6685736578581089de1b2ff5fb34ede984244fc87219edde2bd1b0c3b69d09414a5836ed0cdd18b074831604a1e6b3f22cca068aec8a961e083a2c00f8fd1d5a2cdaaaf05215b44bd3765557e9cef", 0x9f}], 0x1, &(0x7f0000001800)=[{0x100, 0x110, 0x1, "fe1885c85707128514d7fb7d477e4d4045abe4f8dc7408f01d98ed6fb9e1e012c35934124a157ac0e064d08601c3650ac1b39f04c93eb695e601ba03477cf404c89a1b8d556a0cf0b26fec7f585853f08650493bdd6ff85347f02991686cc203154b7f8a016e6e28b1f937278edbff3b1278bbeb221900be3a8bdabc22d13350554c9d4bcade70ea4d2cd1198880628940e709e653a32a866cf0981d0180a80b941817b512f1886faac948a372480c6aec6ebef2f7cc25a31814297ab7668dad0acd38091916c62342d1b4f72714291a13320102a60b679e77cd6c064ab0e304d63ee752116e931ddd9bb9cbfe557a"}], 0x100}, 0x80)
sendmsg$netlink(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r12}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)=@allocspi={0xe40, 0x16, 0x10, 0x70bd2d, 0x25dfdbfe, {{{@in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x0, 0x4e21, 0x0, 0x2, 0xa0, 0x80, 0x87, r8, r12}, {@in6=@empty, 0x4d3, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3d}, {0xffffffffffffffc0, 0x3, 0x7, 0x7fffffffffffffff, 0x7fff, 0x1, 0x94, 0x1}, {0x7fff, 0x4, 0x9, 0x4ba15d0a}, {0x200, 0x401, 0x3}, 0x70bd25, 0x0, 0x2, 0x0, 0x20, 0x3a}, 0x13b, 0x8}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7}, @extra_flags={0x8, 0x18, 0xe2}, @sec_ctx={0xd0a, 0x8, {0xd06, 0x8, 0x1, 0xc, 0xcfe, "95bafb23ab6bdcdf0ee16e99ac24006ab8f99061cc65c4f6ff7754fb8b48312db885d91e1b5dac7ba31c91f250fc3b31610f0b1a88d03255fefca6088ef768704097ed78ffcf8edbaf6603eb7e37df82d92e5b63149fa1e98fb462cb80637071042c0dac3b967fb04a37083ac5c730b5bc8ca5ef6ed146b01e49bb62e79aa0fd0219ccb52e3a146433ba5ebd2942de7250ab2083114e55249f431758a45a02be867a6486b7a22db00322fc58837eb74725f7868a3a1d0b550c289c87fdb5052c31c61defd0e40c4613d6258d6eb3680a056b69c8c049c2544ad2cf4081d196e4c1b1a7eed27a624a5e6c4304c76f2ec06cc12ea298fa35901bacbfbc1869e1399771cb9e0652efd9d52c829e6bc70dc9d5cda82ad73c2c1b59c5473560b5f19b43abc44707ea4e17609873b4926f08fa99398577ab245722a327a8f7a86e793c8268996580e825dacc30790ad12dc02886c85ecf85a0d24989c59a08f396f1d711b8e22bddccae6b3da23bdbbfe52d616e11c42f5a477ff1e9fb617afdc579d9bf957b0f2ce4dbbcb67fa81adb161cc04281a0c7a8e8817cf5dbd57f6855bc7c07212538f6fcccd75607fb182d79a5cf6f48ffc8aba12477bcefa21aa600d59d2a59fa638198bf25637f9215a066e0686a513d032b77d36083597fb3a81d89e6382e0e6dda6d9e5e11ea303df2f7866e39878970b0f44fc92c899af0bcfc84a04c163a5bc6ad85fef2f1723f8f0a031483726f1df0cfd1081906ad86c2d5fc5cbad4af7461bd60a841bfa39badfa9c3fdf0d4f6cb98e61680cfa64e0e7dafae86efaac31adfbba6f28b53c9f286757f37ecc5ed47632c6751b65e008efd7c055e381ec0a3b6180e12af85f472df301aad0a21aae90a2c2ade3929ec723f112e5e64730e08c06c3230e7beeb27638f6dae9cbb003df5e39dab85d88371143875c5830f9a09636c331e3f8c753b647d895ab638539d798e65c8bb9d27c7b9debaafb7df43b5f2a526fafc42968e2d6b59129d0496835c848dd6f1fe279af4063e38237076c3e40dc061be116a9f58690da9259b120bb30913da22943d598f5b60de89d0d4112dea453ec28e11d6e7444aa97d2a17578d20292268e7870f4953634dba0614002fc16e4df3e931b392ae002c8249d6fbe2411ab7a1100246c44df5ef087fb22e61cd8c0d54fff2c50169b67aa9c9c452be38bd51ce772550909a0ee65496a6426660b9ca29e044bcffca095238bacc347687dd9a6712ebffc1e8e445594e92299deb92345564630372cebac1f6cbedb04e429664ab6729620f0747843823031ec0538060b32675965d26c0d24b7ff7f4069804df77d01baeaa81eea4d8d8e6205860423fec7949261a8ff59bbbfac4e83de1c3b6a103f262e5cb07527a5df754d1084ff5d1839bd90cc01a66422feb054c0bdd1e2f0607ffeb20398fcb791a81c8808e8459d41704e3dc42556e866b9e3375561428f43871d44126e049235230d37f86511b9a419d7d4fda18618a38db8d65d993e5ff23c39c3111930d79278dc5c822396ab4ef21bf3b318e67af7ab1636e6054a703fbc28d4b7e77ee5f762f2b1e17ec68f26025f0c1e2361d5675b34f86e25a24f24c620cb595b6ad2000d80a711bf99490ddcb9985e6e52a501a3b0fa47c51daa372e0b32155aa6cc9d6cd7bf54511c87569bfd78e4f345a156a663b27b536beb3a573025274f8f10c13be1c04aab4656c52eadeb52ef8d683c1f04c834e7b69c8fb783748ee5a1ec9f395546022ab659c2b65f25379940d8a8bed487eb3d5ce64f4b01172959d65ec395e618f1a0caaa4417c6d747aefb81f0694102e493a11819bc0e3ae7c0a24a23c6e335a604256cf8255ed3d63c3e4dfa6beb56156785f332545a3bb780d98e84e1ce94dd787b5508e8c3c99ea372e2f74ea86e9a254cd980e6e8d1019cb6f3bb0a8abb89d22d2c8dae316d7e4eb91f5b7034f443080c3fff1a979641f9c3c2156a574bdd4e63366b5ef100ce227f0741bf3192528bd0996e792099f74ff54ec8e8bf89bb1d141dd68745a699bff64211c94f639470398edc5fa49d664a3db0067d0c6f4f1df26f360953d1bb4bdb3bd409a35e9af11d7416c14d3c30a883778bd5fdbdeb7a3efdcdc6e36f20ae5260c8a41d7fac4ce029efe3a6d49e7a1c710994c30c8df670c440b41d6d254d10d5dd03ff6765e91ecc652fbfe5c1953c8ae4f6ef4526e35a35aa7b650d93a37f4e99a6a5ff711115649326820e48fee11ec3477b7056737fbfb1c3205be11ca3d73ed9a18b65bf69dcd4069ac6629b5a038b13d6b056dfc38e4acf23acf757841dad9e41df1ccc6170b4abf343dc83e0ef4268a82c5a55c1b158d7ef9538c8126750cd40b5e41bad5572a4220219fff9117f1e1bb4b5e8371e8c896dd3b1ddc9edfadf1ea68e068d54d9ff5cfc8d17a5eea5047a31e15bff60913b6cc3c0c71fa40b3a757b94f16d173657d5ac2c261ddc4954b0b41d333b2a50d05aabaa824d851a3bd045820924752cd9f8f8cac77aefcc9f6471d0c9d336c4ec5b8bc8e31b73186d473f60f8e1aa1b70da45bcb55ed211bec44a12ab3fe3fa121b12d54ffd78a9e8be242cdd80eaed2eeff4f3358f1f87efeda72a286ad71af34bb9a889d68adc97ce67aeb259cf0ab2da49b5b77b666d25f1932b306aaef39bdee1755e1d4a6ccc16bb44f8f7dc4b580a0b6c9aa1a8e390d4e8e442395996127ec9801bd0db5a2ebfbd94df49f305b312a715115797491f611d2d6070b63d356ec1a58be1f15f288db5da02c2b805745b6e6f68d185f7849aa878bc321a030a6cdb4b4637005ed9f8be39ee9bff7b29d2adbd848a340f638552caf827d8762858a4cfac2d5f9b7ae60340edcda9a4716952fa9fd0166ddac58b629726fbfd717f92b8c10a8cb91c02f8e20a57b096698ac2d5059322f124dd965d526818b46e42959098f033dbb41d5e3c302056a4484e4bbb59c6894da7a6aa9e6ada4eb0d19e10a3459557c4a56e99f40a515abbc1c8e933c5fbe01ea0a45c5d1e769983281f0097c58d58696c8d567c49fccfddb381a076b1e801415c113d9e9f2da258b1669daeece83b4f889045faf9a7cd7f1821c7c761399423d59e1531149ffab7260ef3c4b8e89670ebaac7dd973c44bdd7fcd05c008f6d0536d8e4959d900c88292053c6f4857e243963b775d92de6c5f74d485e2c35796906065314fa9ff3d66abe0a76cfecdb024f186a6e784d9a7d982a71a3c8bdac7eb62f9ceb780c593311441b2fc48ccaf58c805391efecfffa5a6e0da95dafaf90334de354e16ae9eb022d4b8af5aa9e5d67a07188ca6a9f6f8a1b6ebbae7439878c693a92775a7026fff3f8ce08dee0c41eec28b3c2e00727a9c968d81d3561f728173f62c7411646164d90cc4f38134e66e005553ec9920a5e6edcb5f6989e172eb6a002bc2df7e2f9c656ef742991e9ff803e1a1f891bd048a55ad23d0b702a3c30ba6d65d1c2c0cbd1c9519eeb162cf23c4cc88be3aaac926fc4ab3f1e56bc617fd6f7474630df9bb9712e794bfb391bf11ddc8c7adb6592348ded689c690ff82248faaf33c3f844c0ce632f088fa728c49a335deea5a7e812d31ccd6635fa636d46cbde2e8bd0eb5ad0fd85ba1dd50b6c099ead3012ce8f80b4830149844e8f35f810c40af00a6735ba53e05e0e8988f287d1efe1e612beb0eacf1529b901e2ba6a69b0a3e0c7c72eeb1ae90d0fb46d8faa285f21fee18f51ee989f1f4cba8aa94ec0dabddd79a73b8229e2a9ee7efa21f949ba78d780d1d92396607129372bfd3d58bd567e014df3ff75a6297353348df2d02212d13f304581afb5fd77388faa1ea9f46d3aec6e58499f6895d01598d624c5bfbf8c8388b4058f4c7f0ab7d04e9a6a3f2566d2cc92078a389788c249b8fb20f31723e3613b2f22177b8c584b5890bc0a2ed28ccb30e379d6a3ecf2a03e1d41a17cb2dc1a0b882f9dc32b65463ef6aed257a5cbb6dcd68c0563d721a52b4bdd0723eb63ccbcb6d08cf2bf54aeef01a62ebab83beee247a909806ebeb247aad23daad0e758af94e6895ac7158fdb068171e3b750d0c826b9bcf12b091a4d28e3b74a2078f139d1b4d8968bc5e40a7b2235b9551026ab80b2256a14d83bdd3b3eadd9b837e7b4e5e0d9923922ccde75dbb4a463daad1c631840fece90d89c8507c25dc5081cbbafade9e0b0ffbd6f1f6a2a9339d13329138a8e96c29525b85de089fb94e3b6d73166d4c98df82dd738ec07d506a3d1198154c75fcd7097d6a3d834d130c441a847fd22d7afb679e9bbb84deaf91daab72aa44ba8648cd88972b04525fe1a322503218546cd28225aac8212633c7eaee45d261bb3ef1da2920681917c04373a7a8715aa5b1f39a07c2293233803861c3deb301b882cda46cbcc8d200a1f4b707cd0af45739067e0fa41590501a314a82613c3ee1902efda290f6470168aa063a4e5f420f2ec8f7760180611431a0cd2c236566ef66b9732eea829534787e491db2f82fca9b8a40d34eeff489de41f6da208c63ee71bc21453af65bd9ab6228b97ec7941fa00b14b430635aba2248d3708d699bbf8941e8f67977f8c2975c82221c2b2a9da514c3f7479389e67753b1f38001410c34887192621f364df56d77cf4afe1c5f197f86ed42e612fb2d27db8401eed26962ae3436cb9ddcb1f2a2a622b67"}}, @user_kmaddress={0x2c, 0x13, {@in=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x2}}]}, 0xe40}, 0x1, 0x0, 0x0, 0x40000}, 0x48001)

kernel console output (not intermixed with test programs):

T6643] C: renamed from team_slave_0 (while UP)
[   63.995424][ T6643] netlink: 'syz.1.199': attribute type 1 has an invalid length.
[   63.998317][ T6643] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   64.449802][ T5831] Bluetooth: hci2: command 0x0405 tx timeout
[   64.647801][ T5298] IPVS: starting estimator thread 0...
[   64.747501][ T6692] batman_adv: batadv0: Adding interface: dummy0
[   64.749525][ T6692] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.749716][ T6684] IPVS: using max 62 ests per chain, 148800 per kthread
[   64.760431][ T6692] batman_adv: batadv0: Interface activated: dummy0
[   64.853887][ T6699] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[   65.045993][ T6705] __nla_validate_parse: 31 callbacks suppressed
[   65.046006][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'.
[   65.915913][ T6720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'.
[   66.227060][ T6718] netlink: 'syz.2.221': attribute type 4 has an invalid length.
[   66.230668][ T6719] netlink: 'syz.2.221': attribute type 4 has an invalid length.
[   66.541430][ T5831] Bluetooth: hci2: command 0x0405 tx timeout
[   66.570153][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'.
[   66.808113][ T6751] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   66.879099][ T6754] netlink: 28 bytes leftover after parsing attributes in process `syz.2.234'.
[   66.909295][ T6758] bpq0: left allmulticast mode
[   66.979122][ T6756] tipc: Started in network mode
[   66.984371][ T6756] tipc: Node identity 0a1fa8c53259, cluster identity 4711
[   66.987197][ T6756] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.059282][ T6756] tipc: Resetting bearer <eth:syzkaller0>
[   67.072827][ T6755] tipc: Disabling bearer <eth:syzkaller0>
[   67.086127][ T6764] netlink: 'syz.2.237': attribute type 4 has an invalid length.
[   67.185755][ T6768] syz.0.238: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   67.192483][ T6768] CPU: 0 UID: 0 PID: 6768 Comm: syz.0.238 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   67.192495][ T6768] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   67.192500][ T6768] Call Trace:
[   67.192504][ T6768]  <TASK>
[   67.192508][ T6768]  dump_stack_lvl+0x189/0x250
[   67.192524][ T6768]  ? __pfx_dump_stack_lvl+0x10/0x10
[   67.192533][ T6768]  ? __pfx__printk+0x10/0x10
[   67.192544][ T6768]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   67.192560][ T6768]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   67.192571][ T6768]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   67.192581][ T6768]  warn_alloc+0x214/0x310
[   67.192595][ T6768]  ? __pfx_warn_alloc+0x10/0x10
[   67.192609][ T6768]  ? __get_vm_area_node+0x28f/0x300
[   67.192619][ T6768]  ? hash_netportnet_create+0x354/0xf90
[   67.192632][ T6768]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   67.192669][ T6768]  ? do_syscall_64+0xfa/0x3b0
[   67.192691][ T6768]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   67.192703][ T6768]  ? rcu_is_watching+0x15/0xb0
[   67.192713][ T6768]  ? hash_netportnet_create+0x354/0xf90
[   67.192722][ T6768]  ? hash_netportnet_create+0x354/0xf90
[   67.192730][ T6768]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   67.192740][ T6768]  ? hash_netportnet_create+0x354/0xf90
[   67.192750][ T6768]  ? hash_netportnet_create+0x2fa/0xf90
[   67.192761][ T6768]  hash_netportnet_create+0x354/0xf90
[   67.192773][ T6768]  ? __nla_parse+0x40/0x60
[   67.192781][ T6768]  ? __pfx_hash_netportnet_create+0x10/0x10
[   67.192792][ T6768]  ip_set_create+0xa97/0x1940
[   67.192799][ T6768]  ? ip_set_create+0x4a2/0x1940
[   67.192811][ T6768]  ? __pfx_ip_set_create+0x10/0x10
[   67.192834][ T6768]  nfnetlink_rcv_msg+0xb4d/0x1130
[   67.192846][ T6768]  ? nfnetlink_rcv_msg+0x20d/0x1130
[   67.192866][ T6768]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   67.192876][ T6768]  ? kasan_save_free_info+0x46/0x50
[   67.192909][ T6768]  netlink_rcv_skb+0x208/0x470
[   67.192919][ T6768]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   67.192931][ T6768]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   67.192945][ T6768]  ? bpf_lsm_capable+0x9/0x20
[   67.192953][ T6768]  ? security_capable+0x7e/0x2e0
[   67.192968][ T6768]  nfnetlink_rcv+0x26a/0x2520
[   67.192980][ T6768]  ? __dev_queue_xmit+0x1cd7/0x3a70
[   67.192993][ T6768]  ? kmem_cache_alloc_noprof+0x1c1/0x3c0
[   67.193003][ T6768]  ? __dev_queue_xmit+0x27e/0x3a70
[   67.193013][ T6768]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.193025][ T6768]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   67.193036][ T6768]  ? __pfx___dev_queue_xmit+0x10/0x10
[   67.193052][ T6768]  ? ref_tracker_free+0x63a/0x7d0
[   67.193062][ T6768]  ? __copy_skb_header+0xa7/0x550
[   67.193073][ T6768]  ? __pfx_ref_tracker_free+0x10/0x10
[   67.193092][ T6768]  ? skb_clone+0x246/0x3a0
[   67.193104][ T6768]  ? __netlink_deliver_tap+0x807/0x850
[   67.193112][ T6768]  ? netlink_deliver_tap+0x2e/0x1b0
[   67.193124][ T6768]  ? netlink_deliver_tap+0x2e/0x1b0
[   67.193132][ T6768]  ? netlink_deliver_tap+0x2e/0x1b0
[   67.193143][ T6768]  netlink_unicast+0x75c/0x8e0
[   67.193156][ T6768]  netlink_sendmsg+0x805/0xb30
[   67.193169][ T6768]  ? __pfx_netlink_sendmsg+0x10/0x10
[   67.193180][ T6768]  ? aa_sock_msg_perm+0x94/0x160
[   67.193192][ T6768]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   67.193204][ T6768]  ? __pfx_netlink_sendmsg+0x10/0x10
[   67.193213][ T6768]  __sock_sendmsg+0x21c/0x270
[   67.193222][ T6768]  ____sys_sendmsg+0x505/0x830
[   67.193234][ T6768]  ? __pfx_____sys_sendmsg+0x10/0x10
[   67.193248][ T6768]  ? import_iovec+0x74/0xa0
[   67.193258][ T6768]  ___sys_sendmsg+0x21f/0x2a0
[   67.193269][ T6768]  ? __pfx____sys_sendmsg+0x10/0x10
[   67.193294][ T6768]  ? __fget_files+0x2a/0x420
[   67.193303][ T6768]  ? __fget_files+0x3a0/0x420
[   67.193323][ T6768]  __x64_sys_sendmsg+0x19b/0x260
[   67.193334][ T6768]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   67.193349][ T6768]  ? do_user_addr_fault+0xc8a/0x1390
[   67.193358][ T6768]  ? do_syscall_64+0xbe/0x3b0
[   67.193367][ T6768]  do_syscall_64+0xfa/0x3b0
[   67.193374][ T6768]  ? lockdep_hardirqs_on+0x9c/0x150
[   67.193385][ T6768]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.193392][ T6768]  ? exc_page_fault+0x9f/0xf0
[   67.193404][ T6768]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.193411][ T6768] RIP: 0033:0x7f2f6bb8e929
[   67.193420][ T6768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   67.193426][ T6768] RSP: 002b:00007f2f6c94f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   67.193435][ T6768] RAX: ffffffffffffffda RBX: 00007f2f6bdb6080 RCX: 00007f2f6bb8e929
[   67.193440][ T6768] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000005
[   67.193446][ T6768] RBP: 00007f2f6bc10b39 R08: 0000000000000000 R09: 0000000000000000
[   67.193450][ T6768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   67.193454][ T6768] R13: 0000000000000001 R14: 00007f2f6bdb6080 R15: 00007fffaea3f1c8
[   67.193467][ T6768]  </TASK>
[   67.193471][ T6768] Mem-Info:
[   67.369677][ T6768] active_anon:9247 inactive_anon:13 isolated_anon:0
[   67.369677][ T6768]  active_file:850 inactive_file:24602 isolated_file:0
[   67.369677][ T6768]  unevictable:1768 dirty:1462 writeback:0
[   67.369677][ T6768]  slab_reclaimable:9323 slab_unreclaimable:50313
[   67.369677][ T6768]  mapped:18248 shmem:5318 pagetables:1250
[   67.369677][ T6768]  sec_pagetables:0 bounce:0
[   67.369677][ T6768]  kernel_misc_reclaimable:0
[   67.369677][ T6768]  free:213761 free_pcp:26161 free_cma:0
[   67.405110][ T6768] Node 0 active_anon:17760kB inactive_anon:52kB active_file:2424kB inactive_file:78004kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32596kB dirty:5544kB writeback:0kB shmem:6872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6544kB pagetables:1812kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   67.429705][ T6768] Node 1 active_anon:14876kB inactive_anon:0kB active_file:976kB inactive_file:20404kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40396kB dirty:304kB writeback:0kB shmem:10184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5032kB pagetables:2984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   67.452881][ T6768] Node 0 DMA free:3972kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:752kB local_pcp:360kB free_cma:0kB
[   67.472344][ T6768] lowmem_reserve[]: 0 812 812 812 812
[   67.475223][ T6768] Node 0 DMA32 free:180712kB boost:4096kB min:37752kB low:46164kB high:54576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16060kB inactive_anon:52kB active_file:2424kB inactive_file:78004kB unevictable:3536kB writepending:5544kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:37968kB local_pcp:20772kB free_cma:0kB
[   67.503259][ T6768] lowmem_reserve[]: 0 0 0 0 0
[   67.506087][ T6768] Node 1 DMA32 free:439872kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:0kB writepending:96kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:18152kB local_pcp:10084kB free_cma:0kB
[   67.540539][ T6768] lowmem_reserve[]: 0 0 854 854 854
[   67.542183][ T6768] Node 1 Normal free:265872kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9432kB inactive_anon:0kB active_file:780kB inactive_file:20404kB unevictable:3536kB writepending:208kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:57320kB local_pcp:33840kB free_cma:0kB
[   67.559894][ T6768] lowmem_reserve[]: 0 0 0 0 0
[   67.570347][ T6768] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 1*2048kB (U) 0*4096kB = 3972kB
[   67.574505][ T6768] Node 0 DMA32: 891*4kB (UME) 898*8kB (UE) 431*16kB (UME) 106*32kB (UME) 63*64kB (UME) 52*128kB (UME) 66*256kB (UME) 57*512kB (UME) 38*1024kB (UM) 21*2048kB (UM) 13*4096kB (UM) = 212972kB
[   67.600005][ T6768] Node 1 DMA32: 46*4kB (UE) 49*8kB (U) 50*16kB (U) 47*32kB (U) 48*64kB (U) 52*128kB (UE) 49*256kB (UME) 44*512kB (UME) 43*1024kB (UME) 2*2048kB (ME) 84*4096kB (M) = 439872kB
[   67.605258][ T6768] Node 1 Normal: 359*4kB (U) 676*8kB (UM) 10*16kB (UME) 5*32kB (UE) 2*64kB (UE) 4*128kB (UME) 4*256kB (UM) 92*512kB (U) 177*1024kB (UME) 2*2048kB (UM) 6*4096kB (UM) = 265852kB
[   67.620152][ T6768] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   67.622997][ T6768] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   67.625798][ T6768] 27914 total pagecache pages
[   67.627247][ T6768] 0 pages in swap cache
[   67.628522][ T6768] Free swap  = 124996kB
[   67.640302][ T6768] Total swap = 124996kB
[   67.641637][ T6768] 786301 pages RAM
[   67.642796][ T6768] 0 pages HighMem/MovableOnly
[   67.644226][ T6768] 241085 pages reserved
[   67.645501][ T6768] 0 pages cma reserved
[   68.481442][ T6804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.640547][ T6814] netlink: 'syz.1.251': attribute type 10 has an invalid length.
[   68.643255][ T6814] netlink: 40 bytes leftover after parsing attributes in process `syz.1.251'.
[   68.648300][ T6814] dummy0: entered promiscuous mode
[   68.652563][ T6814] bridge0: port 3(dummy0) entered blocking state
[   68.654786][ T6814] bridge0: port 3(dummy0) entered disabled state
[   68.660122][ T6814] dummy0: entered allmulticast mode
[   68.668474][ T6814] bridge0: port 3(dummy0) entered blocking state
[   68.670584][ T6814] bridge0: port 3(dummy0) entered forwarding state
[   69.036975][   T33] audit: type=1800 audit(1752507351.813:3): pid=6828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.258" name="blkio.bfq.time_recursive" dev="tmpfs" ino=434 res=0 errno=0
[   69.094141][ T6828] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.177318][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.261'.
[   70.080290][ T6854] netlink: 504 bytes leftover after parsing attributes in process `syz.1.265'.
[   70.193681][ T6876] netlink: 'syz.0.271': attribute type 4 has an invalid length.
[   70.262911][ T6874] dummy0: left allmulticast mode
[   70.264676][ T6874] bridge0: port 3(dummy0) entered disabled state
[   70.492220][   T33] audit: type=1800 audit(1752507353.273:4): pid=6896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.277" name="blkio.bfq.time_recursive" dev="tmpfs" ino=385 res=0 errno=0
[   70.524342][ T6896] netlink: 100 bytes leftover after parsing attributes in process `syz.0.277'.
[   70.578419][ T6903] batman_adv: batadv0: Adding interface: dummy0
[   70.581309][ T6903] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.589285][ T6903] batman_adv: batadv0: Interface activated: dummy0
[   70.854206][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.856265][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.075640][ T6937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.288'.
[   71.093538][ T6937] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9
[   71.132947][ T6937] netlink: 80 bytes leftover after parsing attributes in process `syz.2.288'.
[   71.254434][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'.
[   71.456838][ T6946] netlink: 'syz.2.291': attribute type 4 has an invalid length.
[   71.459480][ T6945] netlink: 'syz.2.291': attribute type 4 has an invalid length.
[   71.635397][ T6957] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.643318][ T6957] netlink: 72 bytes leftover after parsing attributes in process `syz.2.294'.
[   71.742850][ T6963] Illegal XDP return value 4294967294 on prog  (id 98) dev N/A, expect packet loss!
[   71.808534][ T6960] netlink: 'syz.2.295': attribute type 4 has an invalid length.
[   72.032099][ T6972] netlink: 48 bytes leftover after parsing attributes in process `syz.0.298'.
[   72.163432][ T6994] x_tables: duplicate underflow at hook 2
[   72.222885][ T6999] netlink: 48 bytes leftover after parsing attributes in process `syz.0.305'.
[   72.283220][ T6989] netlink: 16 bytes leftover after parsing attributes in process `syz.2.302'.
[   72.346904][ T7007] bpq0: entered allmulticast mode
[   72.721633][ T7026] dvmrp1: entered allmulticast mode
[   72.726280][ T7026] dvmrp1: left allmulticast mode
[   72.781968][ T7028] netlink: 48 bytes leftover after parsing attributes in process `syz.0.313'.
[   73.260176][ T7067] netlink: 'syz.1.329': attribute type 49 has an invalid length.
[   73.540548][ T7091] netlink: 'syz.2.336': attribute type 4 has an invalid length.
[   73.583518][ T7098] bpq0: entered promiscuous mode
[   73.603545][ T7098] syzkaller1: entered promiscuous mode
[   73.605227][ T7098] syzkaller1: entered allmulticast mode
[   73.861587][ T7117] vxcan3: entered allmulticast mode
[   73.880261][ T7118] vxcan3: entered allmulticast mode
[   74.290907][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   75.318909][ T7161] ip6t_srh: unknown srh match flags  4000
[   75.496738][ T7168] bridge0: port 3(gretap0) entered disabled state
[   75.536103][ T7168] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.538670][ T7168] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.555272][ T7168] batman_adv: batadv0: Interface deactivated: dummy0
[   75.605972][ T7168] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.614337][ T7168] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.663802][ T7168] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.666706][ T7168] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.669512][ T7168] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.672934][ T7168] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.753388][ T7180] __nla_validate_parse: 2 callbacks suppressed
[   75.753399][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'.
[   76.196382][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.368'.
[   76.237155][ T7208] bridge: RTM_NEWNEIGH with invalid ether address
[   76.357331][ T7215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.372'.
[   76.497796][ T7220] bpq0: left promiscuous mode
[   76.933244][ T7231] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10
[   77.044326][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'.
[   77.150818][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.381'.
[   77.308533][ T7246] netlink: 104 bytes leftover after parsing attributes in process `syz.1.383'.
[   77.342198][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'.
[   77.350937][ T7243] bpq0: left allmulticast mode
[   77.418583][ T7253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.386'.
[   77.488849][ T7257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.387'.
[   77.491976][ T7257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.387'.
[   79.255264][ T7338] bpq0: entered allmulticast mode
[   79.500207][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   79.898711][ T7366] syzkaller1: tun_chr_ioctl cmd 1074025677
[   79.901934][ T7366] syzkaller1: linktype set to 6
[   81.023906][ T7390] __nla_validate_parse: 7 callbacks suppressed
[   81.023924][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.429'.
[   81.093556][   T47] cfg80211: failed to load regulatory.db
[   81.252319][ T7407] netlink: 56 bytes leftover after parsing attributes in process `syz.2.434'.
[   81.391232][ T7415] netlink: 48 bytes leftover after parsing attributes in process `syz.0.436'.
[   82.267386][ T3569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.269962][ T3569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.329122][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.441'.
[   82.421551][ T7436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.442'.
[   83.072146][ T7440] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input11
[   83.378529][ T7454] netlink: 48 bytes leftover after parsing attributes in process `syz.1.448'.
[   83.399112][ T7460] netlink: 'syz.0.451': attribute type 1 has an invalid length.
[   83.403095][ T7460] netlink: 32 bytes leftover after parsing attributes in process `syz.0.451'.
[   83.410772][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.451'.
[   83.808249][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.454'.
[   83.813357][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.454'.
[   83.934104][ T7479] macvlan0: entered allmulticast mode
[   83.938944][ T7479] netlink: 'syz.1.455': attribute type 1 has an invalid length.
[   83.943070][ T7479] netlink: 'syz.1.455': attribute type 2 has an invalid length.
[   84.166817][ T7489] netlink: 'syz.1.458': attribute type 4 has an invalid length.
[   84.259280][ T7493] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input12
[   84.482993][ T7503] bpq0: entered promiscuous mode
[   84.694472][ T7518] bpq0: left promiscuous mode
[   85.376120][ T7527] netlink: 'syz.2.470': attribute type 7 has an invalid length.
[   85.378561][ T7527] netlink: 'syz.2.470': attribute type 8 has an invalid length.
[   85.479705][ T7526] netlink: 'syz.2.470': attribute type 1 has an invalid length.
[   85.482439][ T7526] nbd: error processing sock list
[   85.484583][ T7526] block nbd0: shutting down sockets
[   86.514238][ T7554] __nla_validate_parse: 10 callbacks suppressed
[   86.514250][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'.
[   86.518944][ T7554] 8021q: VLANs not supported on nlmon0
[   86.543296][ T7556] nft_compat: unsupported protocol 0
[   86.825334][ T7570] netlink: 'syz.2.486': attribute type 3 has an invalid length.
[   86.940926][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.488'.
[   87.879057][ T7604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.498'.
[   88.299189][ T7616] netlink: 830 bytes leftover after parsing attributes in process `syz.1.502'.
[   88.399183][ T7616] netlink: 'syz.1.502': attribute type 4 has an invalid length.
[   88.974718][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'.
[   89.582427][ T7650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   89.665958][ T7661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.514'.
[   89.670923][ T7661] netlink: 32 bytes leftover after parsing attributes in process `syz.1.514'.
[   89.675733][ T7661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.514'.
[   89.680837][ T7661] netlink: 32 bytes leftover after parsing attributes in process `syz.1.514'.
[   89.684903][ T7661] bpq0: left allmulticast mode
[   90.292585][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.523'.
[   90.295537][ T7702] netlink: 'syz.1.523': attribute type 11 has an invalid length.
[   90.401619][ T7706] ipt_REJECT: TCP_RESET invalid for non-tcp
[   90.881120][ T7745] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input13
[   91.977069][ T7776] netlink: 'syz.2.547': attribute type 5 has an invalid length.
[   91.979800][ T7776] netlink: 'syz.2.547': attribute type 7 has an invalid length.
[   91.988830][ T7776] : entered promiscuous mode
[   92.059122][ T7789] __nla_validate_parse: 6 callbacks suppressed
[   92.059135][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'.
[   92.097087][ T7793] netlink: 'syz.1.552': attribute type 8 has an invalid length.
[   92.222411][   T54] Bluetooth: hci2: link tx timeout
[   92.224878][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[   92.227835][ T5831] Bluetooth: hci2: link tx timeout
[   92.229418][ T5831] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[   92.238283][   T13] : left promiscuous mode
[   92.305692][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'.
[   92.428941][ T7817] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   92.469060][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.561'.
[   93.381084][ T7839] netlink: 20 bytes leftover after parsing attributes in process `syz.1.568'.
[   93.816634][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.576'.
[   93.849418][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'.
[   94.289707][ T7807] Bluetooth: hci2: command 0x0405 tx timeout
[   94.476499][ T7878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.582'.
[   94.637990][ T7883] netlink: 48 bytes leftover after parsing attributes in process `syz.2.583'.
[   95.856429][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.597'.
[   96.369749][ T7807] Bluetooth: hci2: command 0x0405 tx timeout
[   97.911158][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'.
[   98.022323][ T7975] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.024744][ T7975] syzkaller0: entered promiscuous mode
[   98.026463][ T7975] syzkaller0: entered allmulticast mode
[   98.033914][ T7976] tipc: Resetting bearer <eth:syzkaller0>
[   98.037158][ T7974] tipc: Resetting bearer <eth:syzkaller0>
[   98.044995][ T7974] tipc: Disabling bearer <eth:syzkaller0>
[   99.049322][ T7996] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input14
[   99.140512][ T7997] netlink: 'syz.2.619': attribute type 4 has an invalid length.
[   99.271751][ T7807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   99.274512][ T7807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   99.277774][ T7807] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   99.282651][ T7807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   99.287907][ T7807] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   99.309433][ T8007] netlink: 48 bytes leftover after parsing attributes in process `syz.1.622'.
[   99.535762][ T8006] chnl_net:caif_netlink_parms(): no params data found
[   99.608367][ T8034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.629'.
[   99.676736][ T8006] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.678968][ T8006] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.681979][ T8006] bridge_slave_0: entered allmulticast mode
[   99.684623][ T8006] bridge_slave_0: entered promiscuous mode
[   99.700664][ T8006] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.703228][ T8006] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.705406][ T8006] bridge_slave_1: entered allmulticast mode
[   99.708189][ T8006] bridge_slave_1: entered promiscuous mode
[   99.750682][ T8006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.763921][ T8006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.808090][ T8006] team0: Port device team_slave_0 added
[   99.815993][ T8006] team0: Port device team_slave_1 added
[   99.837030][ T8006] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.839158][ T8006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.846984][ T8006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.852082][ T8006] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.854163][ T8006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.865720][ T8006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.879809][ T8053] netlink: 'syz.1.632': attribute type 4 has an invalid length.
[   99.906575][ T8006] hsr_slave_0: entered promiscuous mode
[   99.908892][ T8006] hsr_slave_1: entered promiscuous mode
[   99.913517][ T8006] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   99.917531][ T8006] Cannot create hsr debugfs directory
[  100.571086][ T8006] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  100.583233][ T8006] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  100.596153][ T8006] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  100.611095][ T8006] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  100.628865][ T8064] netlink: 16 bytes leftover after parsing attributes in process `syz.1.635'.
[  100.634177][ T8064] netlink: 108 bytes leftover after parsing attributes in process `syz.1.635'.
[  100.636910][ T8064] netlink: 16 bytes leftover after parsing attributes in process `syz.1.635'.
[  100.703783][ T8006] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.728700][ T8006] 8021q: adding VLAN 0 to HW filter on device team0
[  100.742463][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.744663][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.748283][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.750497][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.785937][ T8072] netlink: 'syz.1.636': attribute type 4 has an invalid length.
[  100.966181][ T8006] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.042893][ T8006] veth0_vlan: entered promiscuous mode
[  101.052251][ T8006] veth1_vlan: entered promiscuous mode
[  101.073417][ T8006] veth0_macvtap: entered promiscuous mode
[  101.078748][ T8006] veth1_macvtap: entered promiscuous mode
[  101.120241][ T8006] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.130260][ T8006] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.136877][ T8006] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.141742][ T8006] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.144548][ T8006] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.144925][ T8084] netlink: 'syz.1.638': attribute type 4 has an invalid length.
[  101.147084][ T8006] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.149362][ T8084] netlink: 17 bytes leftover after parsing attributes in process `syz.1.638'.
[  101.203268][ T8084] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  101.245950][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.251825][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.280139][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.282487][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.330229][ T7807] Bluetooth: hci3: command tx timeout
[  101.361623][ T8086] netlink: 'syz.1.639': attribute type 4 has an invalid length.
[  101.760967][  T790] IPVS: starting estimator thread 0...
[  101.834521][ T8117] netlink: 'syz.1.645': attribute type 1 has an invalid length.
[  101.880610][ T8111] IPVS: using max 62 ests per chain, 148800 per kthread
[  101.932511][ T8124] netlink: 'syz.1.648': attribute type 1 has an invalid length.
[  101.934974][ T8124] netlink: 184 bytes leftover after parsing attributes in process `syz.1.648'.
[  101.948224][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.648'.
[  102.258445][ T8136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.652'.
[  102.276174][ T8136] 8021q: VLANs not supported on vxcan0
[  102.825053][ T8128] delete_channel: no stack
[  102.932813][ T8151] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input15
[  103.117051][ T8156] batadv0: entered promiscuous mode
[  103.118992][ T8156] vlan2: entered promiscuous mode
[  103.422403][ T7807] Bluetooth: hci3: command tx timeout
[  103.510927][ T8162] bpq0: entered allmulticast mode
[  104.099121][ T8164] bpq0: left allmulticast mode
[  104.173134][ T8168] __nla_validate_parse: 1 callbacks suppressed
[  104.173147][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.663'.
[  104.892687][ T8212] macvlan0: entered allmulticast mode
[  104.894985][ T8212] netlink: 'syz.2.679': attribute type 1 has an invalid length.
[  104.897450][ T8212] netlink: 'syz.2.679': attribute type 2 has an invalid length.
[  105.071393][ T8215] netlink: 44 bytes leftover after parsing attributes in process `syz.2.680'.
[  105.489662][ T7807] Bluetooth: hci3: command tx timeout
[  105.969019][ T8239] netlink: 48 bytes leftover after parsing attributes in process `syz.2.686'.
[  106.054859][ T8241] netlink: 56 bytes leftover after parsing attributes in process `syz.1.689'.
[  106.157845][ T8247] netlink: 52 bytes leftover after parsing attributes in process `syz.2.691'.
[  106.471129][ T8257] xt_CT: No such helper "snmp"
[  106.659748][ T8265] netlink: 104 bytes leftover after parsing attributes in process `syz.2.695'.
[  106.789519][ T8268] bpq0: entered allmulticast mode
[  107.004944][ T8276] 8021q: VLANs not supported on vxcan1
[  107.115842][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.700'.
[  107.122599][ T8284] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  107.126044][ T8284] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  107.569827][   T54] Bluetooth: hci3: command tx timeout
[  107.924744][ T8304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.704'.
[  107.946721][ T8308] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input16
[  107.982668][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.707'.
[  109.201780][ T8347] netlink: 'syz.3.719': attribute type 2 has an invalid length.
[  109.321721][ T8353] bpq0: left allmulticast mode
[  109.415593][ T8359] Cannot find add_set index 0 as target
[  109.426404][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.724'.
[  109.476083][ T8361] tc_dump_action: action bad kind
[  109.650554][   T54] Bluetooth: hci3: command 0x0405 tx timeout
[  109.659313][ T8366] netlink: 'syz.3.727': attribute type 11 has an invalid length.
[  109.662997][ T8366] netlink: 224 bytes leftover after parsing attributes in process `syz.3.727'.
[  110.208636][ T8404] netlink: 'syz.3.737': attribute type 1 has an invalid length.
[  110.275347][ T8400] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  110.282085][ T8400] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  110.315511][ T8404] gretap1: entered promiscuous mode
[  110.325327][ T8404] bond1: (slave gretap1): making interface the new active one
[  110.342172][ T8404] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  110.670076][ T8428] netlink: 'syz.3.747': attribute type 4 has an invalid length.
[  110.916251][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.754'.
[  110.974165][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.755'.
[  111.177096][ T8483] netlink: 212280 bytes leftover after parsing attributes in process `syz.1.763'.
[  111.568446][ T8511] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input17
[  111.729699][   T54] Bluetooth: hci3: command 0x0405 tx timeout
[  111.782058][ T8518] netlink: 'syz.2.773': attribute type 4 has an invalid length.
[  112.229137][ T8533] netlink: 68 bytes leftover after parsing attributes in process `syz.3.778'.
[  112.673679][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.781'.
[  112.676932][    C0] Unknown status report in ack skb
[  112.990505][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'.
[  113.163786][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.789'.
[  113.185564][    C0] Unknown status report in ack skb
[  113.382607][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.793'.
[  114.182039][ T8628] bpq0: entered allmulticast mode
[  114.477216][ T8643] __nla_validate_parse: 2 callbacks suppressed
[  114.477229][ T8643] netlink: 16 bytes leftover after parsing attributes in process `syz.1.811'.
[  114.831353][ T8652] netlink: 'syz.2.814': attribute type 4 has an invalid length.
[  115.052945][ T8665] netlink: 'syz.1.815': attribute type 4 has an invalid length.
[  115.055294][ T8665] netlink: 152 bytes leftover after parsing attributes in process `syz.1.815'.
[  115.077114][ T8665] : renamed from bond0 (while UP)
[  115.281946][ T8689] netlink: 16 bytes leftover after parsing attributes in process `syz.2.820'.
[  115.461638][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'.
[  115.489864][   T54] Bluetooth: hci3: command 0x0405 tx timeout
[  115.889663][ T7807] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  132.296225][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.298218][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  147.211855][ T8713] nft_compat: unsupported protocol 0
[  147.298144][ T8709] netlink: 'syz.2.826': attribute type 4 has an invalid length.
[  147.339493][ T8725] Cannot find add_set index 2 as target
[  147.507854][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.831'.
[  147.564012][ T8735] batman_adv: batadv0: Adding interface: dummy0
[  147.566180][ T8735] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.575640][ T8735] batman_adv: batadv0: Interface activated: dummy0
[  147.662637][ T8740] bpq0: left allmulticast mode
[  147.666987][ T8737] netlink: 'syz.2.834': attribute type 4 has an invalid length.
[  148.134551][   T54] Bluetooth: hci3: link tx timeout
[  148.136373][   T54] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  148.139336][   T54] Bluetooth: hci3: link tx timeout
[  148.141279][   T54] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  148.437314][ T5871] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.505200][ T5871] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.608288][ T5871] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.659490][ T5226] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  148.663980][ T5226] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  148.666684][ T5226] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  148.670384][ T5226] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  148.672883][ T5226] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  148.702208][ T5871] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.734587][ T8788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.847'.
[  148.844285][ T8777] chnl_net:caif_netlink_parms(): no params data found
[  148.886745][ T8797] netlink: 132 bytes leftover after parsing attributes in process `syz.2.849'.
[  148.894749][ T8797] netlink: 'syz.2.849': attribute type 1 has an invalid length.
[  148.930185][ T5871] bridge_slave_1: left allmulticast mode
[  148.932309][ T5871] bridge_slave_1: left promiscuous mode
[  148.934978][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.939985][ T5871] bridge_slave_0: left allmulticast mode
[  148.941779][ T5871] bridge_slave_0: left promiscuous mode
[  148.943607][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.182259][ T5871]  (unregistering): (slave bond_slave_0): Releasing backup interface
[  149.186460][ T5871]  (unregistering): (slave bond_slave_1): Releasing backup interface
[  149.189874][ T5871]  (unregistering): Released all slaves
[  149.247359][ T8777] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.250402][ T8777] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.254059][ T8777] bridge_slave_0: entered allmulticast mode
[  149.258052][ T8777] bridge_slave_0: entered promiscuous mode
[  149.268506][ T8777] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.277064][ T8777] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.279302][ T8777] bridge_slave_1: entered allmulticast mode
[  149.283032][ T8777] bridge_slave_1: entered promiscuous mode
[  149.291407][ T5871] tipc: Left network mode
[  149.377784][ T8777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.383954][ T8777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.428917][ T8777] team0: Port device team_slave_0 added
[  149.463452][ T8777] team0: Port device team_slave_1 added
[  149.514315][ T8777] batman_adv: batadv0: Adding interface: batadv_slave_0
[  149.516497][ T8777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.528988][ T8777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  149.535499][ T8777] batman_adv: batadv0: Adding interface: batadv_slave_1
[  149.537755][ T8777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.546517][ T8777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  149.569225][ T5871] hsr_slave_0: left promiscuous mode
[  149.571921][ T5871] hsr_slave_1: left promiscuous mode
[  149.588789][ T5871] veth1_macvtap: left promiscuous mode
[  149.591470][ T5871] veth0_macvtap: left promiscuous mode
[  149.594023][ T5871] veth1_vlan: left promiscuous mode
[  149.595719][ T5871] veth0_vlan: left promiscuous mode
[  149.636085][ T8833] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.896647][ T5871] team0 (unregistering): Port device team_slave_1 removed
[  149.926418][ T5871] team0 (unregistering): Port device C removed
[  150.211217][ T5831] Bluetooth: hci3: command 0x0405 tx timeout
[  150.243573][ T8777] hsr_slave_0: entered promiscuous mode
[  150.245951][ T8777] hsr_slave_1: entered promiscuous mode
[  150.254819][ T8777] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  150.257127][ T8777] Cannot create hsr debugfs directory
[  150.326743][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.861'.
[  150.343012][ T8844] netlink: 40 bytes leftover after parsing attributes in process `syz.2.862'.
[  150.434707][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.863'.
[  150.437546][ T8846] netlink: 5 bytes leftover after parsing attributes in process `syz.3.863'.
[  150.440396][ T8846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.863'.
[  150.769832][ T5831] Bluetooth: hci2: command tx timeout
[  150.933637][ T8871] netlink: 'syz.3.870': attribute type 1 has an invalid length.
[  151.002781][ T8873] bond2: (slave vti0): The slave device specified does not support setting the MAC address
[  151.005875][ T8873] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  151.012079][ T8873] bond2: (slave vti0): making interface the new active one
[  151.014856][ T8873] bond2: (slave vti0): Enslaving as an active interface with an up link
[  151.078825][ T8777] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  151.086158][ T8777] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  151.091806][ T8777] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  151.097603][ T8777] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  151.194111][ T8777] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.208830][ T8777] 8021q: adding VLAN 0 to HW filter on device team0
[  151.215531][  T250] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.217755][  T250] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.225418][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.227675][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.345234][ T8777] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.375822][ T8777] veth0_vlan: entered promiscuous mode
[  151.382334][ T8777] veth1_vlan: entered promiscuous mode
[  151.399347][ T8777] veth0_macvtap: entered promiscuous mode
[  151.405930][ T8777] veth1_macvtap: entered promiscuous mode
[  151.418317][ T8777] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.426144][ T8777] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.431069][ T8777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.433840][ T8777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.436508][ T8777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.439131][ T8777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.494930][ T3569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.497392][ T3569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.519070][ T3569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.522199][ T3569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.542494][ T8887] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input18
[  151.683248][ T8895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.873'.
[  151.886421][ T8902] nft_compat: unsupported protocol 0
[  152.289758][ T5831] Bluetooth: hci3: command 0x0405 tx timeout
[  152.859887][   T54] Bluetooth: hci2: command 0x041b tx timeout
[  153.399113][ T8941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.889'.
[  154.256007][ T8947] bridge0: entered allmulticast mode
[  154.261982][ T8947] pim6reg: entered allmulticast mode
[  154.265766][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.891'.
[  154.268860][ T8947] bridge_slave_1: left allmulticast mode
[  154.270934][ T8947] bridge_slave_1: left promiscuous mode
[  154.272914][ T8947] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.278545][ T8947] bridge_slave_0: left allmulticast mode
[  154.280890][ T8947] bridge_slave_0: left promiscuous mode
[  154.282653][ T8947] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.301161][ T8947] bridge0 (unregistering): left allmulticast mode
[  154.442897][ T5879] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.623752][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.897'.
[  154.671276][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.899'.
[  154.767212][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  154.772208][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  154.776142][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  154.779264][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  154.785862][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  154.852305][ T8987] veth0: entered promiscuous mode
[  154.958799][ T8981] chnl_net:caif_netlink_parms(): no params data found
[  155.058107][ T8981] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.060544][ T8981] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.062840][ T8981] bridge_slave_0: entered allmulticast mode
[  155.065562][ T8981] bridge_slave_0: entered promiscuous mode
[  155.070267][ T8981] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.072443][ T8981] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.074596][ T8981] bridge_slave_1: entered allmulticast mode
[  155.077371][ T8981] bridge_slave_1: entered promiscuous mode
[  155.113850][ T8981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.126408][ T8981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.175017][ T8981] team0: Port device team_slave_0 added
[  155.186289][ T8981] team0: Port device team_slave_1 added
[  155.203480][ T5879] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.245022][ T8981] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.252736][ T8981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.278231][ T8981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.313462][ T5879] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.319411][ T8981] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.319420][ T9002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.904'.
[  155.323684][ T8981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.332933][ T8981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.394771][ T5879] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.409231][ T8981] hsr_slave_0: entered promiscuous mode
[  155.415259][ T8981] hsr_slave_1: entered promiscuous mode
[  155.417590][ T8981] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  155.420998][ T8981] Cannot create hsr debugfs directory
[  155.490135][ T9006] netlink: 176 bytes leftover after parsing attributes in process `syz.2.905'.
[  155.556398][ T8978] veth0: left promiscuous mode
[  155.649359][ T5879] bridge_slave_1: left allmulticast mode
[  155.657925][ T5879] bridge_slave_1: left promiscuous mode
[  155.660608][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.671518][ T5879] bridge_slave_0: left allmulticast mode
[  155.673418][ T5879] bridge_slave_0: left promiscuous mode
[  155.675470][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.956476][ T5879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  155.962287][ T5879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.966075][ T5879] bond0 (unregistering): Released all slaves
[  156.220966][ T9037] netlink: 48 bytes leftover after parsing attributes in process `syz.3.913'.
[  156.312207][ T5879] hsr_slave_0: left promiscuous mode
[  156.315105][ T5879] hsr_slave_1: left promiscuous mode
[  156.317206][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.320732][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.323660][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.325980][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.331860][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.918'.
[  156.337814][ T9045] Bluetooth: MGMT ver 1.23
[  156.337900][ T5879] veth1_macvtap: left promiscuous mode
[  156.341592][ T5879] veth0_macvtap: left promiscuous mode
[  156.344258][ T5879] veth1_vlan: left promiscuous mode
[  156.345897][ T5879] veth0_vlan: left promiscuous mode
[  156.649413][ T5879] team0 (unregistering): Port device team_slave_1 removed
[  156.678360][ T5879] team0 (unregistering): Port device team_slave_0 removed
[  156.850057][   T54] Bluetooth: hci2: command tx timeout
[  156.985779][ T8981] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  156.996290][ T8981] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  157.015375][ T8981] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  157.028619][ T8981] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  157.060629][ T9049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.920'.
[  157.081950][ T9049] 8021q: adding VLAN 0 to HW filter on device bond1
[  157.110682][ T9049] 8021q: adding VLAN 0 to HW filter on device bond1
[  157.113220][ T9049] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[  157.117794][ T9049] bond1: (slave vti0): Error -95 calling set_mac_address
[  157.229384][ T8981] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.264753][ T8981] 8021q: adding VLAN 0 to HW filter on device team0
[  157.296254][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.298528][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.321918][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.324182][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.745471][ T8981] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.819253][ T8981] veth0_vlan: entered promiscuous mode
[  157.828347][ T8981] veth1_vlan: entered promiscuous mode
[  157.847981][ T8981] veth0_macvtap: entered promiscuous mode
[  157.852377][ T8981] veth1_macvtap: entered promiscuous mode
[  157.863763][ T8981] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.873618][ T8981] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.879445][ T8981] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.884628][ T8981] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.887399][ T8981] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.890708][ T8981] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.957623][ T3569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.961399][ T3569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.986339][ T3569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.989350][ T3569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.191382][  T250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.193892][  T250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.475167][ T5871] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.772911][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  159.776908][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  159.780158][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  159.783057][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  159.786048][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  159.921056][ T9106] chnl_net:caif_netlink_parms(): no params data found
[  159.986978][ T9106] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.989453][ T9106] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.992190][ T9106] bridge_slave_0: entered allmulticast mode
[  159.995031][ T9106] bridge_slave_0: entered promiscuous mode
[  160.005578][ T9106] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.008147][ T9106] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.010653][ T9106] bridge_slave_1: entered allmulticast mode
[  160.013505][ T9106] bridge_slave_1: entered promiscuous mode
[  160.044502][ T9106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  160.054470][ T9106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  160.085776][ T9106] team0: Port device team_slave_0 added
[  160.089518][ T9106] team0: Port device team_slave_1 added
[  160.112232][ T9106] batman_adv: batadv0: Adding interface: batadv_slave_0
[  160.114551][ T9106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.123536][ T9106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  160.128944][ T9106] batman_adv: batadv0: Adding interface: batadv_slave_1
[  160.131272][ T9106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.139983][ T9106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  160.168521][ T9106] hsr_slave_0: entered promiscuous mode
[  160.171159][ T9106] hsr_slave_1: entered promiscuous mode
[  160.173339][ T9106] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  160.175645][ T9106] Cannot create hsr debugfs directory
[  160.399197][ T9141] netlink: 19 bytes leftover after parsing attributes in process `syz.2.942'.
[  160.476702][ T9143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.943'.
[  160.579904][ T9146] raw_sendmsg: syz.2.944 forgot to set AF_INET. Fix it!
[  160.849990][ T5871] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.031527][ T5871] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.093757][ T5871] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.165823][ T5871] bridge_slave_1: left allmulticast mode
[  161.168028][ T5871] bridge_slave_1: left promiscuous mode
[  161.170654][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.175353][ T5871] bridge_slave_0: left allmulticast mode
[  161.177231][ T5871] bridge_slave_0: left promiscuous mode
[  161.179123][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.388932][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.947'.
[  161.420027][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  161.432206][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  161.436584][ T5871] bond0 (unregistering): Released all slaves
[  161.612665][ T9173] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[  161.617233][ T9173] xt_policy: too many policy elements
[  161.713905][ T9179] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.955'.
[  161.723352][ T9179] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  161.729338][ T9179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.955'.
[  161.807846][ T9106] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  161.811705][   T54] Bluetooth: hci2: command tx timeout
[  161.824939][ T5871] hsr_slave_0: left promiscuous mode
[  161.827247][ T5871] hsr_slave_1: left promiscuous mode
[  161.829451][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.833649][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.836365][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.838724][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.849238][ T5871] veth1_macvtap: left promiscuous mode
[  161.852048][ T5871] veth0_macvtap: left promiscuous mode
[  161.853879][ T5871] veth1_vlan: left promiscuous mode
[  161.855578][ T5871] veth0_vlan: left promiscuous mode
[  162.134166][ T5871] team0 (unregistering): Port device team_slave_1 removed
[  162.157952][ T5871] team0 (unregistering): Port device team_slave_0 removed
[  162.391066][ T9106] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  162.398799][ T9106] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  162.407516][ T9106] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  162.578054][ T9106] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.604801][ T9106] 8021q: adding VLAN 0 to HW filter on device team0
[  162.616132][ T1864] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.618372][ T1864] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.634543][ T1864] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.636727][ T1864] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.788443][ T9106] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.978529][ T9106] veth0_vlan: entered promiscuous mode
[  163.002444][ T9106] veth1_vlan: entered promiscuous mode
[  163.043698][ T9106] veth0_macvtap: entered promiscuous mode
[  163.048208][ T9106] veth1_macvtap: entered promiscuous mode
[  163.113439][ T9106] batman_adv: batadv0: Interface activated: batadv_slave_0
[  163.140164][ T9106] batman_adv: batadv0: Interface activated: batadv_slave_1
[  163.176611][ T9106] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.180952][ T9106] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.183661][ T9106] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.186317][ T9106] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.265187][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.268853][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.291552][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.294316][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.961064][ T5871] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.743730][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  165.746978][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  165.749997][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  165.753491][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  165.757542][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  165.942747][ T9293] chnl_net:caif_netlink_parms(): no params data found
[  166.037208][ T9293] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.040077][ T9293] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.042460][ T9293] bridge_slave_0: entered allmulticast mode
[  166.045237][ T9293] bridge_slave_0: entered promiscuous mode
[  166.049391][ T9293] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.053522][ T9293] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.055789][ T9293] bridge_slave_1: entered allmulticast mode
[  166.058534][ T9293] bridge_slave_1: entered promiscuous mode
[  166.082988][ T9293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.087893][ T9293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.111510][ T9293] team0: Port device team_slave_0 added
[  166.115152][ T9293] team0: Port device team_slave_1 added
[  166.135731][ T9293] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.138026][ T9293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.146076][ T9293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.151355][ T9293] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.153664][ T9293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.162365][ T9293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.193179][ T9293] hsr_slave_0: entered promiscuous mode
[  166.195578][ T9293] hsr_slave_1: entered promiscuous mode
[  166.197813][ T9293] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  166.200366][ T9293] Cannot create hsr debugfs directory
[  166.450746][ T8782] Bluetooth: hci3: command 0x0405 tx timeout
[  166.820126][ T5871] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.880661][ T5871] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.960295][ T5871] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.024959][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'.
[  167.027816][ T9325] netlink: 5 bytes leftover after parsing attributes in process `syz.2.987'.
[  167.031620][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.987'.
[  167.034411][ T9325] netlink: 'syz.2.987': attribute type 2 has an invalid length.
[  167.036825][ T9325] netlink: 'syz.2.987': attribute type 1 has an invalid length.
[  167.039393][ T9325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'.
[  167.050810][ T5871] bridge_slave_1: left allmulticast mode
[  167.052604][ T5871] bridge_slave_1: left promiscuous mode
[  167.054446][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.060903][ T5871] bridge_slave_0: left allmulticast mode
[  167.063075][ T5871] bridge_slave_0: left promiscuous mode
[  167.064879][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.311326][ T9331] netlink: 56 bytes leftover after parsing attributes in process `syz.3.989'.
[  167.328732][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  167.333793][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  167.337385][ T5871] bond0 (unregistering): Released all slaves
[  167.367214][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.990'.
[  167.541516][ T5871] hsr_slave_0: left promiscuous mode
[  167.543782][ T5871] hsr_slave_1: left promiscuous mode
[  167.545905][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.548329][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.553735][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.556100][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.566654][ T5871] veth1_macvtap: left promiscuous mode
[  167.568746][ T5871] veth0_macvtap: left promiscuous mode
[  167.572198][ T5871] veth1_vlan: left promiscuous mode
[  167.573865][ T5871] veth0_vlan: left promiscuous mode
[  167.809731][ T8782] Bluetooth: hci2: command tx timeout
[  167.837058][ T5871] team0 (unregistering): Port device team_slave_1 removed
[  167.858390][ T5871] team0 (unregistering): Port device team_slave_0 removed
[  168.195585][ T9341] bpq0: entered promiscuous mode
[  168.198027][ T9341] bpq0: entered allmulticast mode
[  168.311500][ T9293] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  168.323069][ T9293] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  168.327979][ T9293] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  168.335827][ T9293] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  168.463952][ T9293] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.568600][ T9293] 8021q: adding VLAN 0 to HW filter on device team0
[  168.594072][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.596303][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.642020][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.644269][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.773288][ T9293] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.807645][ T9293] veth0_vlan: entered promiscuous mode
[  168.816549][ T9293] veth1_vlan: entered promiscuous mode
[  168.837338][ T9293] veth0_macvtap: entered promiscuous mode
[  168.844466][ T9293] veth1_macvtap: entered promiscuous mode
[  168.864925][ T9293] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.873943][ T9293] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.883959][ T9293] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.886609][ T9293] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.889207][ T9293] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.892500][ T9293] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.956291][ T1864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.964007][ T1864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.985262][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.989062][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.707838][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1006'.
[  169.721078][ T9394] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1006'.
[  169.723833][ T9394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1006'.
[  169.726596][ T9394] netlink: 'syz.2.1006': attribute type 2 has an invalid length.
[  169.728972][ T9394] netlink: 'syz.2.1006': attribute type 1 has an invalid length.
[  169.734561][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1006'.
[  169.889747][ T5226] Bluetooth: hci2: command 0x041b tx timeout
[  170.211370][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  170.802663][    C1] Unknown status report in ack skb
[  171.031705][ T5871] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.565459][ T9441] netlink: 'syz.2.1023': attribute type 1 has an invalid length.
[  171.725133][ T8782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  171.728666][ T8782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  171.731672][ T8782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  171.734576][ T8782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  171.737985][ T8782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  171.787369][ T9455] netlink: 'syz.2.1027': attribute type 4 has an invalid length.
[  171.806570][    C0] Unknown status report in ack skb
[  171.883839][ T9463] xt_CT: No such helper "pptp"
[  171.886994][ T9463] --map-set only usable from mangle table
[  171.916348][ T9449] chnl_net:caif_netlink_parms(): no params data found
[  171.993503][ T9482] nbd: must specify a size in bytes for the device
[  172.013936][ T9482] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input19
[  172.046759][ T9449] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.049181][ T9449] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.054284][ T9449] bridge_slave_0: entered allmulticast mode
[  172.060214][ T9449] bridge_slave_0: entered promiscuous mode
[  172.067597][ T9449] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.071538][ T9449] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.074749][ T9449] bridge_slave_1: entered allmulticast mode
[  172.088376][ T9449] bridge_slave_1: entered promiscuous mode
[  172.112264][ T9449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.117363][ T9449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.168854][ T9449] team0: Port device team_slave_0 added
[  172.173726][ T9449] team0: Port device team_slave_1 added
[  172.203683][ T9449] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.205867][ T9449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.215914][ T9449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.220333][ T9495] __nla_validate_parse: 9 callbacks suppressed
[  172.220341][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1038'.
[  172.226032][ T9449] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.228232][ T9449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.238244][ T9449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.276164][ T9449] hsr_slave_0: entered promiscuous mode
[  172.278487][ T9449] hsr_slave_1: entered promiscuous mode
[  172.281637][ T9449] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  172.283968][ T9449] Cannot create hsr debugfs directory
[  172.521221][ T5871] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.615136][ T5871] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.663983][ T5871] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.693220][ T9514] xt_cgroup: path and classid specified
[  172.742841][ T9516] netlink: 304 bytes leftover after parsing attributes in process `syz.3.1043'.
[  172.755098][ T5871] bridge_slave_1: left allmulticast mode
[  172.757435][ T5871] bridge_slave_1: left promiscuous mode
[  172.759880][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.764741][ T5871] bridge_slave_0: left allmulticast mode
[  172.766931][ T5871] bridge_slave_0: left promiscuous mode
[  172.769292][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.083378][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.090175][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.096225][ T5871] bond0 (unregistering): Released all slaves
[  173.242820][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1051'.
[  173.248208][ T9536] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1051'.
[  173.257410][ T9534] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1050'.
[  173.261767][ T9536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1051'.
[  173.261891][ T9536] netlink: 'syz.3.1051': attribute type 2 has an invalid length.
[  173.261898][ T9536] netlink: 'syz.3.1051': attribute type 1 has an invalid length.
[  173.261904][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1051'.
[  173.383915][ T5871] hsr_slave_0: left promiscuous mode
[  173.388902][ T5871] hsr_slave_1: left promiscuous mode
[  173.394711][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.399768][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[  173.404236][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.406557][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.426505][ T5871] veth1_macvtap: left promiscuous mode
[  173.428200][ T5871] veth0_macvtap: left promiscuous mode
[  173.430437][ T5871] veth1_vlan: left promiscuous mode
[  173.432173][ T5871] veth0_vlan: left promiscuous mode
[  173.735868][ T5871] team0 (unregistering): Port device team_slave_1 removed
[  173.761717][ T5871] team0 (unregistering): Port device team_slave_0 removed
[  173.820465][ T5831] Bluetooth: hci2: command tx timeout
[  174.127068][ T9449] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  174.144505][ T9449] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  174.151741][ T9449] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  174.162257][ T9449] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  174.236864][ T9449] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.313778][ T9449] 8021q: adding VLAN 0 to HW filter on device team0
[  174.333706][  T250] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.335924][  T250] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.340039][ T9563] netlink: 'syz.2.1057': attribute type 4 has an invalid length.
[  174.350729][  T250] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.352983][  T250] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.427487][ T9449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  174.613654][ T9449] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.652941][ T9449] veth0_vlan: entered promiscuous mode
[  174.663760][ T9449] veth1_vlan: entered promiscuous mode
[  174.682553][ T9449] veth0_macvtap: entered promiscuous mode
[  174.712328][ T9449] veth1_macvtap: entered promiscuous mode
[  174.718152][ T9596] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  174.734851][ T9449] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.751646][ T9449] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.765477][ T9449] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.778510][ T9449] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.781671][ T9449] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.784368][ T9449] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.888473][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1067'.
[  174.898280][  T250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.901313][  T250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.914002][ T9604] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  174.916313][  T250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.917127][ T9604] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.918958][  T250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.996312][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1069'.
[  174.999366][ T9608] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1069'.
[  175.002525][ T9608] netlink: 'syz.3.1069': attribute type 2 has an invalid length.
[  175.005097][ T9608] netlink: 'syz.3.1069': attribute type 1 has an invalid length.
[  175.936649][ T9643] netlink: 'syz.2.1077': attribute type 2 has an invalid length.
[  175.939289][ T9643] netlink: 'syz.2.1077': attribute type 1 has an invalid length.
[  176.189898][ T9655] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  176.511564][ T8837] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.473593][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  177.477178][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  177.481332][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  177.484309][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  177.486944][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  177.650449][ T9692] chnl_net:caif_netlink_parms(): no params data found
[  177.672141][ T9705] __nla_validate_parse: 9 callbacks suppressed
[  177.672153][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'.
[  177.740434][ T9692] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.742984][ T9692] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.745380][ T9692] bridge_slave_0: entered allmulticast mode
[  177.748212][ T9692] bridge_slave_0: entered promiscuous mode
[  177.754340][ T9692] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.756671][ T9692] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.760117][ T9692] bridge_slave_1: entered allmulticast mode
[  177.763224][ T9692] bridge_slave_1: entered promiscuous mode
[  177.786469][ T9692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.792359][ T9692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.833529][ T9692] team0: Port device team_slave_0 added
[  177.838456][ T9692] team0: Port device team_slave_1 added
[  177.875648][ T8837] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.900748][ T9692] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.903054][ T9692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.912178][ T9692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.917095][ T9692] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.919376][ T9692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.929301][ T9692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.961232][ T9692] hsr_slave_0: entered promiscuous mode
[  177.963648][ T9692] hsr_slave_1: entered promiscuous mode
[  177.966124][ T9692] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  177.968879][ T9692] Cannot create hsr debugfs directory
[  178.022091][ T8837] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.084259][ T8837] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.204552][ T8837] bridge_slave_1: left allmulticast mode
[  178.206352][ T8837] bridge_slave_1: left promiscuous mode
[  178.208162][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.215769][ T8837] bridge_slave_0: left allmulticast mode
[  178.217529][ T8837] bridge_slave_0: left promiscuous mode
[  178.219334][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.457961][ T9719] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1096'.
[  178.510743][ T8837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  178.522656][ T8837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  178.526964][ T8837] bond0 (unregistering): Released all slaves
[  178.542824][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1097'.
[  178.545513][ T9721] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1097'.
[  178.604745][ T9723] sctp: [Deprecated]: syz.3.1098 (pid 9723) Use of struct sctp_assoc_value in delayed_ack socket option.
[  178.604745][ T9723] Use struct sctp_sack_info instead
[  178.825598][ T8837] hsr_slave_0: left promiscuous mode
[  178.828287][ T8837] hsr_slave_1: left promiscuous mode
[  178.830880][ T8837] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  178.833839][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_0
[  178.837027][ T8837] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  178.843417][ T8837] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.857969][ T8837] veth1_macvtap: left promiscuous mode
[  178.862479][ T8837] veth0_macvtap: left promiscuous mode
[  178.864635][ T8837] veth1_vlan: left promiscuous mode
[  178.866375][ T8837] veth0_vlan: left promiscuous mode
[  179.257542][ T8837] team0 (unregistering): Port device team_slave_1 removed
[  179.286379][ T8837] team0 (unregistering): Port device team_slave_0 removed
[  179.582183][ T5831] Bluetooth: hci2: command tx timeout
[  179.654748][ T9692] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  179.659335][ T9692] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  179.672903][ T9692] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  179.683200][ T9692] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  179.732958][ T9731] netlink: 'syz.3.1102': attribute type 3 has an invalid length.
[  179.740323][ T9731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1102'.
[  179.798534][ T9692] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.816784][ T9692] 8021q: adding VLAN 0 to HW filter on device team0
[  179.822188][  T250] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.824414][  T250] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.851833][  T250] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.854070][  T250] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.888935][ T9692] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  179.892723][ T9692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  179.911763][   T47] hid-generic 0005:07C0:8002.0001: collection stack underflow
[  179.919791][   T47] hid-generic 0005:07C0:8002.0001: item 0 0 0 12 parsing failed
[  179.922472][   T47] hid-generic 0005:07C0:8002.0001: probe with driver hid-generic failed with error -22
[  180.066674][ T9692] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.098571][ T9692] veth0_vlan: entered promiscuous mode
[  180.107341][ T9692] veth1_vlan: entered promiscuous mode
[  180.164863][ T9692] veth0_macvtap: entered promiscuous mode
[  180.176790][ T9692] veth1_macvtap: entered promiscuous mode
[  180.204501][ T9692] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.223439][ T9692] batman_adv: batadv0: Interface activated: batadv_slave_1
[  180.238984][ T9692] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.243685][ T9692] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.246323][ T9692] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.249056][ T9692] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.327402][ T3586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.333593][ T3586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.350056][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.352374][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.368334][ T9746] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1104'.
[  180.372826][ T9746] batadv_slave_1: entered promiscuous mode
[  180.375081][ T9746] batman_adv: batadv0: Interface activated: batadv_slave_1
[  180.439162][ T9748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1105'.
[  180.461336][ T9748] 8021q: VLANs not supported on vxcan1
[  180.496100][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'.
[  180.782177][ T9765] nft_compat: unsupported protocol 0
[  180.833269][ T9770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1113'.
[  181.262049][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1120'.
[  181.968598][ T5871] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.779421][ T9807] __nla_validate_parse: 1 callbacks suppressed
[  182.779432][ T9807] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1127'.
[  182.917310][ T8782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  182.920775][ T8782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  182.923846][ T8782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  182.926828][ T8782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  182.930242][ T8782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  183.051810][ T9814] chnl_net:caif_netlink_parms(): no params data found
[  183.105167][ T9814] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.107500][ T9814] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.109942][ T9814] bridge_slave_0: entered allmulticast mode
[  183.112667][ T9814] bridge_slave_0: entered promiscuous mode
[  183.117116][ T9814] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.119350][ T9814] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.121684][ T9814] bridge_slave_1: entered allmulticast mode
[  183.124384][ T9814] bridge_slave_1: entered promiscuous mode
[  183.147741][ T9814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.153084][ T9814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  183.178938][ T9814] team0: Port device team_slave_0 added
[  183.184056][ T9814] team0: Port device team_slave_1 added
[  183.204029][ T9814] batman_adv: batadv0: Adding interface: batadv_slave_0
[  183.206148][ T9814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.214748][ T9814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  183.218879][ T9814] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.221115][ T9814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.228631][ T9814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  183.260165][ T9814] hsr_slave_0: entered promiscuous mode
[  183.262445][ T9814] hsr_slave_1: entered promiscuous mode
[  183.264475][ T9814] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  183.266680][ T9814] Cannot create hsr debugfs directory
[  183.294061][ T5871] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.444839][ T5871] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.493467][ T5871] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.562376][ T5871] bridge_slave_1: left allmulticast mode
[  183.564100][ T5871] bridge_slave_1: left promiscuous mode
[  183.565875][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.569450][ T5871] bridge_slave_0: left allmulticast mode
[  183.573998][ T5871] bridge_slave_0: left promiscuous mode
[  183.575811][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.835913][ T9842] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input20
[  183.842967][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  183.847541][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  183.853012][ T5871] bond0 (unregistering): Released all slaves
[  183.941079][ T9847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1137'.
[  184.074316][ T9854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1139'.
[  184.079232][ T9854] netlink: 'syz.3.1139': attribute type 1 has an invalid length.
[  184.081778][ T9854] netlink: 784 bytes leftover after parsing attributes in process `syz.3.1139'.
[  184.116990][ T5871] hsr_slave_0: left promiscuous mode
[  184.121368][ T5871] hsr_slave_1: left promiscuous mode
[  184.123603][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.125916][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.128617][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.132025][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.150965][ T5871] veth1_macvtap: left promiscuous mode
[  184.152847][ T5871] veth0_macvtap: left promiscuous mode
[  184.154719][ T5871] veth1_vlan: left promiscuous mode
[  184.156476][ T5871] veth0_vlan: left promiscuous mode
[  184.436793][ T5871] team0 (unregistering): Port device team_slave_1 removed
[  184.462102][ T5871] team0 (unregistering): Port device team_slave_0 removed
[  184.698046][ T9865] bpq0: left promiscuous mode
[  184.700238][ T9865] bpq0: left allmulticast mode
[  184.768711][ T9814] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  184.780995][ T9814] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  184.785934][ T9814] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  184.803512][ T9814] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  184.880288][ T9814] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.904080][ T9814] 8021q: adding VLAN 0 to HW filter on device team0
[  184.909572][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.911737][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.926865][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.929042][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.942563][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1149'.
[  184.978982][ T9814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  184.983710][ T9814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  185.010570][ T5831] Bluetooth: hci2: command tx timeout
[  185.078982][ T9814] 8021q: adding VLAN 0 to HW filter on device batadv0
[  185.121398][ T9814] veth0_vlan: entered promiscuous mode
[  185.126860][ T9814] veth1_vlan: entered promiscuous mode
[  185.146594][ T9814] veth0_macvtap: entered promiscuous mode
[  185.151411][ T9814] veth1_macvtap: entered promiscuous mode
[  185.162063][ T9814] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.168515][ T9814] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.174994][ T9814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.177907][ T9814] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.181012][ T9814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.183657][ T9814] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.230890][ T3569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.233285][ T3569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.253271][ T3569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.255729][ T3569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.812799][ T9898] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1151'.
[  186.665435][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1154'.
[  186.811577][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1157'.
[  186.825135][ T9915] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1157'.
[  186.827883][ T9915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1157'.
[  186.838409][ T9915] netlink: 'syz.2.1157': attribute type 2 has an invalid length.
[  186.842193][ T9915] netlink: 'syz.2.1157': attribute type 1 has an invalid length.
[  187.214745][ T9931] netlink: 'syz.2.1162': attribute type 4 has an invalid length.
[  187.536407][ T5879] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.653241][ T9951] __nla_validate_parse: 1 callbacks suppressed
[  188.653252][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'.
[  188.657847][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'.
[  188.662362][ T9954] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1169'.
[  188.666919][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'.
[  188.669884][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'.
[  188.672503][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'.
[  188.675097][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'.
[  188.678110][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'.
[  188.681752][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'.
[  188.684462][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'.
[  188.708915][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  188.714104][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  188.716741][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  188.722496][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  188.728479][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  188.854730][ T9955] chnl_net:caif_netlink_parms(): no params data found
[  188.905481][ T9955] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.908054][ T9955] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.910594][ T9955] bridge_slave_0: entered allmulticast mode
[  188.913659][ T9955] bridge_slave_0: entered promiscuous mode
[  188.917571][ T9955] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.919998][ T9955] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.922347][ T9955] bridge_slave_1: entered allmulticast mode
[  188.925156][ T9955] bridge_slave_1: entered promiscuous mode
[  188.950072][ T9955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.954940][ T9955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.982102][ T9955] team0: Port device team_slave_0 added
[  188.987660][ T9955] team0: Port device team_slave_1 added
[  189.008436][ T9955] batman_adv: batadv0: Adding interface: batadv_slave_0
[  189.014873][ T9955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.022854][ T9955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  189.027437][ T9955] batman_adv: batadv0: Adding interface: batadv_slave_1
[  189.029722][ T9955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.037631][ T9955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  189.053702][ T5879] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.088013][ T9955] hsr_slave_0: entered promiscuous mode
[  189.090406][ T9955] hsr_slave_1: entered promiscuous mode
[  189.092581][ T9955] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  189.094835][ T9955] Cannot create hsr debugfs directory
[  189.120874][ T5879] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.173925][ T5879] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.254515][ T5879] bridge_slave_1: left allmulticast mode
[  189.256299][ T5879] bridge_slave_1: left promiscuous mode
[  189.258061][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.263702][ T5879] bridge_slave_0: left allmulticast mode
[  189.265434][ T5879] bridge_slave_0: left promiscuous mode
[  189.267209][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.511979][ T5879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.516623][ T5879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  189.520455][ T5879] bond0 (unregistering): Released all slaves
[  189.846101][ T5879] hsr_slave_0: left promiscuous mode
[  189.851416][ T5879] hsr_slave_1: left promiscuous mode
[  189.853504][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  189.855950][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_0
[  189.861256][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  189.863569][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_1
[  189.879227][ T5879] veth1_macvtap: left promiscuous mode
[  189.884960][ T5879] veth0_macvtap: left promiscuous mode
[  189.886796][ T5879] veth1_vlan: left promiscuous mode
[  189.888736][ T5879] veth0_vlan: left promiscuous mode
[  190.059809][ T9997] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  190.064435][ T9997] IPv6: NLM_F_CREATE should be set when creating new route
[  190.066660][ T9997] IPv6: NLM_F_CREATE should be set when creating new route
[  190.068870][ T9997] IPv6: NLM_F_CREATE should be set when creating new route
[  190.073354][ T9997] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  190.177652][ T5879] team0 (unregistering): Port device team_slave_1 removed
[  190.202690][ T5879] team0 (unregistering): Port device team_slave_0 removed
[  190.536096][ T9955] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  190.549519][ T9955] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  190.569272][ T9955] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  190.592453][ T9955] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  190.752172][ T9955] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.771345][ T5831] Bluetooth: hci2: command tx timeout
[  190.782189][ T9955] 8021q: adding VLAN 0 to HW filter on device team0
[  190.790834][  T250] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.793215][  T250] bridge0: port 1(bridge_slave_0) entered forwarding state
[  190.806249][  T250] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.808641][  T250] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.135653][ T9955] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.173331][ T9955] veth0_vlan: entered promiscuous mode
[  191.179053][ T9955] veth1_vlan: entered promiscuous mode
[  191.208127][ T9955] veth0_macvtap: entered promiscuous mode
[  191.217404][ T9955] veth1_macvtap: entered promiscuous mode
[  191.226602][ T9955] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.235159][ T9955] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.241417][ T9955] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.243996][ T9955] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.246563][ T9955] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.249219][ T9955] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.299127][  T250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.305846][  T250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.321007][ T3586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.323781][ T3586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.774977][T10043] batman_adv: batadv0: Interface deactivated: dummy0
[  191.778972][T10043] batman_adv: batadv0: Removing interface: dummy0
[  191.781757][T10043] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.784447][T10043] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.800080][T10043] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.802464][T10043] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.986768][T10056] netlink: 'syz.3.1195': attribute type 4 has an invalid length.
[  191.994173][T10056] netlink: 'syz.3.1195': attribute type 4 has an invalid length.
[  192.903691][ T5871] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.731808][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  193.734292][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  194.050151][   T54] Bluetooth: hci3: command 0x0405 tx timeout
[  194.090981][ T8782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  194.094535][ T8782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  194.097108][ T8782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  194.101377][ T8782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  194.104341][ T8782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  194.169825][T10094] dvmrp1: entered allmulticast mode
[  194.176257][T10094] dvmrp1: left allmulticast mode
[  194.213753][ T5871] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.230585][T10096] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input21
[  194.276416][T10088] chnl_net:caif_netlink_parms(): no params data found
[  194.338750][T10088] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.342134][T10088] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.345502][T10088] bridge_slave_0: entered allmulticast mode
[  194.348523][T10088] bridge_slave_0: entered promiscuous mode
[  194.352049][T10088] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.354335][T10088] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.356696][T10088] bridge_slave_1: entered allmulticast mode
[  194.359838][T10088] bridge_slave_1: entered promiscuous mode
[  194.392356][T10088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  194.397332][T10088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.421672][T10088] team0: Port device team_slave_0 added
[  194.426288][T10088] team0: Port device team_slave_1 added
[  194.453016][T10088] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.455215][T10088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.463400][T10088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  194.472145][T10088] batman_adv: batadv0: Adding interface: batadv_slave_1
[  194.474326][T10088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.482475][T10088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  194.554429][T10088] hsr_slave_0: entered promiscuous mode
[  194.556899][T10088] hsr_slave_1: entered promiscuous mode
[  194.559157][T10088] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  194.562166][T10088] Cannot create hsr debugfs directory
[  194.575695][ T5871] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.641520][T10113] netlink: 'syz.3.1208': attribute type 4 has an invalid length.
[  194.645754][ T5871] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.771766][ T5871] bridge_slave_1: left allmulticast mode
[  194.773572][ T5871] bridge_slave_1: left promiscuous mode
[  194.775385][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.782218][ T5871] bridge_slave_0: left allmulticast mode
[  194.784004][ T5871] bridge_slave_0: left promiscuous mode
[  194.785895][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.905580][T10124] __nla_validate_parse: 37 callbacks suppressed
[  194.905598][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1210'.
[  194.971252][T10129] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1212'.
[  195.146054][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  195.152337][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  195.156314][ T5871] bond0 (unregistering): Released all slaves
[  195.364540][ T5871] hsr_slave_0: left promiscuous mode
[  195.367332][ T5871] hsr_slave_1: left promiscuous mode
[  195.370230][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  195.372759][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.375647][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  195.378435][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.393272][ T5871] veth1_macvtap: left promiscuous mode
[  195.395344][ T5871] veth0_macvtap: left promiscuous mode
[  195.397242][ T5871] veth1_vlan: left promiscuous mode
[  195.399035][ T5871] veth0_vlan: left promiscuous mode
[  195.695183][ T5871] team0 (unregistering): Port device team_slave_1 removed
[  195.718226][ T5871] team0 (unregistering): Port device team_slave_0 removed
[  196.078738][T10088] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  196.094711][T10088] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  196.099002][T10088] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  196.114740][T10088] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  196.132642][   T54] Bluetooth: hci2: command tx timeout
[  196.134788][   T54] Bluetooth: hci3: command 0x0405 tx timeout
[  196.204835][T10088] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.220864][T10088] 8021q: adding VLAN 0 to HW filter on device team0
[  196.227109][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.229360][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.237317][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.239616][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.480074][T10088] 8021q: adding VLAN 0 to HW filter on device batadv0
[  196.549117][T10183] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.575383][T10088] veth0_vlan: entered promiscuous mode
[  196.598520][T10183] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.613555][T10088] veth1_vlan: entered promiscuous mode
[  196.643433][T10088] veth0_macvtap: entered promiscuous mode
[  196.651948][T10088] veth1_macvtap: entered promiscuous mode
[  196.667782][T10183] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.691647][T10088] batman_adv: batadv0: Interface activated: batadv_slave_0
[  196.701715][T10088] batman_adv: batadv0: Interface activated: batadv_slave_1
[  196.708963][T10088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.713134][T10088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.715963][T10088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.718759][T10088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.739245][T10183] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.811956][ T3586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.817651][ T3586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.826558][T10183] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.844477][T10183] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.857757][T10183] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.861751][ T1864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.864821][ T1864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.867488][T10183] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.257768][T10202] netlink: 'syz.2.1231': attribute type 8 has an invalid length.
[  197.268096][T10202] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1231'.
[  198.406329][T10233] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1241'.
[  198.438434][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1242'.
[  198.549206][ T5879] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.676591][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1244'.
[  199.725408][T10247] netlink: 'syz.3.1247': attribute type 1 has an invalid length.
[  199.728445][T10247] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1247'.
[  199.765109][T10250] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1248'.
[  199.794273][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  199.798389][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  199.801083][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  199.803721][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  199.806336][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  199.854364][T10256] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1250'.
[  199.857680][T10256] batadv_slave_1: entered promiscuous mode
[  199.920944][T10251] chnl_net:caif_netlink_parms(): no params data found
[  199.974854][T10251] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.977217][T10251] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.979510][T10251] bridge_slave_0: entered allmulticast mode
[  199.982845][T10251] bridge_slave_0: entered promiscuous mode
[  199.987012][T10251] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.989305][T10251] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.992745][T10251] bridge_slave_1: entered allmulticast mode
[  199.995432][T10251] bridge_slave_1: entered promiscuous mode
[  200.016531][T10251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.021682][T10251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.046042][T10251] team0: Port device team_slave_0 added
[  200.049493][T10251] team0: Port device team_slave_1 added
[  200.064395][ T5879] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.087093][T10251] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.089287][T10251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.097307][T10251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.102496][T10251] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.104573][T10251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.112366][T10251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.138855][T10251] hsr_slave_0: entered promiscuous mode
[  200.141448][T10251] hsr_slave_1: entered promiscuous mode
[  200.143540][T10251] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  200.146981][T10251] Cannot create hsr debugfs directory
[  200.304201][ T5879] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.362358][ T5879] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.438864][ T5879] bridge_slave_1: left allmulticast mode
[  200.444408][ T5879] bridge_slave_1: left promiscuous mode
[  200.446332][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.450424][ T5879] bridge_slave_0: left allmulticast mode
[  200.453410][ T5879] bridge_slave_0: left promiscuous mode
[  200.455399][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.633920][T10275] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1255'.
[  200.693070][ T5879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.699405][ T5879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.705205][T10277] netlink: del zone limit has 4 unknown bytes
[  200.707164][ T5879] bond0 (unregistering): Released all slaves
[  200.763216][T10279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1257'.
[  200.765932][T10279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1257'.
[  200.894341][T10287] xt_TCPMSS: Only works on TCP SYN packets
[  200.941845][T10291] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1262'.
[  200.947519][ T5879] hsr_slave_0: left promiscuous mode
[  200.949885][ T5879] hsr_slave_1: left promiscuous mode
[  200.953406][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.955696][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.960989][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  200.965108][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.981570][ T5879] veth1_macvtap: left promiscuous mode
[  200.983350][ T5879] veth0_macvtap: left promiscuous mode
[  200.985136][ T5879] veth1_vlan: left promiscuous mode
[  200.986815][ T5879] veth0_vlan: left promiscuous mode
[  201.304980][ T5879] team0 (unregistering): Port device team_slave_1 removed
[  201.329286][ T5879] team0 (unregistering): Port device team_slave_0 removed
[  201.748982][T10251] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  201.756365][T10251] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  201.761973][T10251] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  201.768561][T10251] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  201.889700][   T54] Bluetooth: hci2: command tx timeout
[  201.916591][T10251] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.994613][T10251] 8021q: adding VLAN 0 to HW filter on device team0
[  202.007132][ T3586] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.009659][ T3586] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.022308][ T3586] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.024653][ T3586] bridge0: port 2(bridge_slave_1) entered forwarding state
[  202.028585][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1269'.
[  202.046943][T10324] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1269'.
[  202.052150][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1269'.
[  202.061194][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1269'.
[  202.063897][T10325] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1269'.
[  202.074140][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1269'.
[  202.311824][T10251] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.353329][T10251] veth0_vlan: entered promiscuous mode
[  202.362625][T10251] veth1_vlan: entered promiscuous mode
[  202.384942][T10251] veth0_macvtap: entered promiscuous mode
[  202.389323][T10251] veth1_macvtap: entered promiscuous mode
[  202.401529][T10251] batman_adv: batadv0: Interface activated: batadv_slave_0
[  202.408690][T10251] batman_adv: batadv0: Interface activated: batadv_slave_1
[  202.414471][T10251] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  202.417261][T10251] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  202.421058][T10251] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  202.423870][T10251] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.468549][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.471679][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.483291][ T3569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.485836][ T3569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.886215][    C1] Unknown status report in ack skb
[  203.130114][T10362] netlink: 'syz.2.1280': attribute type 2 has an invalid length.
[  203.133624][T10362] netlink: 'syz.2.1280': attribute type 1 has an invalid length.
[  203.482084][T10391] Unknown status report in ack skb
[  203.523798][T10394] netlink: 'syz.2.1288': attribute type 4 has an invalid length.
[  203.970085][   T54] Bluetooth: hci2: command 0x041b tx timeout
[  204.614610][T10430] bpq0: entered allmulticast mode
[  204.945663][T10443] Unknown status report in ack skb
[  206.108577][T10468] __nla_validate_parse: 13 callbacks suppressed
[  206.108597][T10468] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1317'.
[  206.145527][T10471] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1319'.
[  206.212659][T10477] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1321'.
[  206.273266][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1323'.
[  206.364927][T10487] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1325'.
[  206.475636][T10491] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1327'.
[  206.508385][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1328'.
[  206.511208][T10494] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1328'.
[  206.513835][T10494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1328'.
[  206.516628][T10494] netlink: 'syz.3.1328': attribute type 2 has an invalid length.
[  206.518913][T10494] netlink: 'syz.3.1328': attribute type 1 has an invalid length.
[  206.521256][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1328'.
[  206.716193][T10504] bond0: entered promiscuous mode
[  206.717887][T10504] bond_slave_0: entered promiscuous mode
[  206.719949][T10504] bond_slave_1: entered promiscuous mode
[  206.722891][T10504] macvlan1: entered promiscuous mode
[  206.725513][T10504] hsr1: entered promiscuous mode
[  206.762496][    C1] Unknown status report in ack skb
[  206.924704][T10516] bpq0: left allmulticast mode
[  207.040946][T10527] netlink: 'syz.2.1342': attribute type 3 has an invalid length.
[  207.850292][T10532] netlink: 'syz.3.1343': attribute type 2 has an invalid length.
[  207.852855][T10532] netlink: 'syz.3.1343': attribute type 1 has an invalid length.
[  208.056155][   T33] audit: type=1800 audit(1752507490.833:5): pid=10556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1351" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1734 res=0 errno=0
[  208.948212][T10564] netlink: 'syz.3.1354': attribute type 2 has an invalid length.
[  208.950916][T10564] netlink: 'syz.3.1354': attribute type 1 has an invalid length.
[  208.970893][T10561] netlink: 'syz.2.1353': attribute type 4 has an invalid length.
[  209.969708][ T8782] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  211.941689][T10603] __nla_validate_parse: 16 callbacks suppressed
[  211.941699][T10603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1366'.
[  211.951548][T10603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1366'.
[  212.423642][T10614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  212.961653][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1370'.
[  212.969348][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1370'.
[  213.001477][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1371'.
[  213.056704][T10628] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  213.061857][T10627] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  213.132460][T10623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1373'.
[  214.872764][T10659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1382'.
[  214.878923][T10659] bond0: entered promiscuous mode
[  214.880955][T10659] bond_slave_0: entered promiscuous mode
[  214.882742][T10659] bond_slave_1: entered promiscuous mode
[  214.885752][T10659] bond0: left promiscuous mode
[  214.887232][T10659] bond_slave_0: left promiscuous mode
[  214.888981][T10659] bond_slave_1: left promiscuous mode
[  214.985264][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1384'.
[  215.091266][   T54] Bluetooth: hci3: command 0x0405 tx timeout
[  215.136392][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1389'.
[  215.153173][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1390'.
[  215.156622][T10682] netlink: 'syz.3.1390': attribute type 2 has an invalid length.
[  215.158925][T10682] netlink: 'syz.3.1390': attribute type 1 has an invalid length.
[  215.245163][T10692] trusted_key: syz.2.1393 sent an empty control message without MSG_MORE.
[  215.298953][T10697] netlink: 'syz.2.1395': attribute type 2 has an invalid length.
[  215.302309][T10697] netlink: 'syz.2.1395': attribute type 1 has an invalid length.
[  215.483400][T10705] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  216.520187][T10733] vxcan1: entered allmulticast mode
[  216.522519][T10733] vxcan1: left allmulticast mode
[  217.424340][T10819] __nla_validate_parse: 10 callbacks suppressed
[  217.424350][T10819] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1408'.
[  217.509012][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1411'.
[  217.512126][T10828] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1411'.
[  217.514913][T10828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1411'.
[  217.517754][T10828] netlink: 'syz.2.1411': attribute type 2 has an invalid length.
[  217.521180][T10828] netlink: 'syz.2.1411': attribute type 1 has an invalid length.
[  217.523469][T10828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1411'.
[  217.549742][T10830] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1412'.
[  217.555088][T10830] delete_channel: no stack
[  217.652932][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1414'.
[  217.656192][T10836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1414'.
[  217.940111][T10841] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1415'.
[  219.366129][T10860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1421'.
[  221.440067][    C1] Unknown status report in ack skb
[  221.446824][T10882] delete_channel: no stack
[  222.550613][T10908] __nla_validate_parse: 6 callbacks suppressed
[  222.550624][T10908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1438'.
[  222.609121][T10924] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1442'.
[  223.552328][T10938] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1447'.
[  223.620026][T10940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1448'.
[  223.665197][T10949] C: renamed from team_slave_0
[  223.668048][T10949] netlink: 'syz.2.1449': attribute type 1 has an invalid length.
[  223.670899][T10949] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1449'.
[  223.673561][T10949] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  223.749740][ T7460] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
Connection to localhost closed by remote host.
[  224.056310][ T5871] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.114326][ T5871] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.144382][ T5871] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.184669][ T5871] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.343579][ T5871] bond2 (unregistering): (slave vti0): Releasing backup interface
[  224.364453][ T5871] bond1 (unregistering): (slave gretap1): Releasing active interface
[  224.527912][ T5871] bond0 (unregistering): left promiscuous mode
[  224.530355][ T5871] bond_slave_0: left promiscuous mode
[  224.532073][ T5871] bond_slave_1: left promiscuous mode
[  224.534531][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  224.538427][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  224.545919][ T5871] bond0 (unregistering): Released all slaves
[  224.553249][ T5871] bond1 (unregistering): Released all slaves
[  224.562258][ T5871] bond2 (unregistering): Released all slaves
[  224.790914][ T5871] macvlan1: left promiscuous mode
[  224.795256][ T5871] hsr_slave_0: left promiscuous mode
[  224.797355][ T5871] hsr_slave_1: left promiscuous mode
[  224.807670][ T5871] veth1_macvtap: left promiscuous mode
[  224.809451][ T5871] veth0_macvtap: left promiscuous mode
[  224.811590][ T5871] veth1_vlan: left promiscuous mode
[  224.813311][ T5871] veth0_vlan: left promiscuous mode
[  224.875045][ T5871] pim6reg (unregistering): left allmulticast mode
[  225.088171][ T5871] team0 (unregistering): Port device team_slave_1 removed
[  225.117604][ T5871] team0 (unregistering): Port device team_slave_0 removed
[  225.568171][ T5871] IPVS: stop unused estimator thread 0...
[  225.879189][ T5871] gretap0: left allmulticast mode
[  225.881419][ T5871] gretap0: left promiscuous mode
[  225.884004][ T5871] bridge0: port 3(gretap0) entered disabled state
[  225.888489][ T5871] bridge_slave_1: left allmulticast mode
[  225.892048][ T5871] bridge_slave_1: left promiscuous mode
[  225.894418][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.897744][ T5871] bridge_slave_0: left allmulticast mode
[  225.899964][ T5871] bridge_slave_0: left promiscuous mode
[  225.901829][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.303962][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  226.308101][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  226.311390][ T5871] bond0 (unregistering): Released all slaves
[  226.382570][ T5871] bond1 (unregistering): Released all slaves
[  226.620781][ T5871] hsr_slave_0: left promiscuous mode
[  226.623034][ T5871] hsr_slave_1: left promiscuous mode
[  226.625122][ T5871] batman_adv: batadv0: Removing interface: dummy0
[  226.627557][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0
[  226.631097][ T5871] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  226.633294][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1
[  226.850297][ T5871] team0 (unregistering): Port device team_slave_1 removed
[  226.876482][ T5871] team0 (unregistering): Port device C removed
[  227.338600][ T5871] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
15:38:26  Registers:
info registers vcpu 0

CPU#0
RAX=a2e5559d34f39b00 RBX=ffffffff81976c78 RCX=a2e5559d34f39b00 RDX=0000000000000001
RSI=ffffffff8d998b4f RDI=ffffffff8be29dc0 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1f3f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff2d8aafe8 CR3=000000010e30a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff822ed619 RBX=80000000360da867 RCX=ffff888021a60000 RDX=0000000000000000
RSI=0000000000000001 RDI=00000000000360da RBP=ffffc9000356f890 RSP=ffffc9000356f590
R8 =ffffea0000d83687 R9 =1ffffd40001b06d0 R10=dffffc0000000000 R11=fffff940001b06d1
R12=00000000000360da R13=dffffc0000000000 R14=0000000000000001 R15=80000000360da867
RIP=ffffffff822ed619 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555bfc9500 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0e795c7d58 CR3=0000000046100000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0e78985478 00007f0e78985450 XMM03=00007f0e78985488 00007f0e78985480
XMM04=00007f0e794ed100 00007f0e78985440 XMM05=00007f0e78985458 00007f0e789854a0
XMM06=00007f0e78985498 00007f0e78985490 XMM07=00007f0e78985488 00007f0e78985480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f0e78811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
