last executing test programs:

1m39.206532922s ago: executing program 0 (id=558):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'netpci0\x00', 0x200})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
socket$kcm(0x29, 0x5, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, 0x0, 0x0)
connect$inet6(r1, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0)
mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket(0x2a, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendto$inet6(r1, &(0x7f00000003c0)="e237b896f3cd680ae578e427ed3b3cbdba8cba09f14482e5e10025babbecb759781e2db22cf61724d2039ab18c531fc3ee1c018818d394ee38bbb871cb2fa4c3d739863b342db7b8cfd3732f3e27b7edbce7415372b46a5e65ed5750ca3f7cfc9720d2cd52985c3bbd29823a52b17ca5362acb9d93f47e14d55ad81873ec81ecf51d163c95aecedc64ab808066ce1f065e4b8b62b6d746aaaa00f3c15f5a8a934c50837799e95637d0b3eb", 0xab, 0x4000010, &(0x7f00000001c0)={0xa, 0x4e22, 0x6c0ce9d8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c)
write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xfdef)

1m35.86229477s ago: executing program 4 (id=674):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x200}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7f0bb2bf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x408c1}, 0x44000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000000a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30"], 0xfc}}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x9, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x4080)

1m26.715649668s ago: executing program 3 (id=744):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x3, 0x2}}, 0x14}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x17c, 0x1, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_EXP={0x1c, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8000}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x79}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x40}}, @NFQA_PAYLOAD={0x1b, 0xa, "2b9eb36edaa28f0f67cc0844068e244a1556b6daeed992"}, @NFQA_EXP={0xbc, 0xf, 0x0, 0x1, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_MASTER={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x4c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_MASTER={0x14, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @NFQA_CT={0x24, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}]}]}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x18300}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8000}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x44141}, 0x8000)

1m18.006492393s ago: executing program 0 (id=558):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'netpci0\x00', 0x200})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
socket$kcm(0x29, 0x5, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, 0x0, 0x0)
connect$inet6(r1, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0)
mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket(0x2a, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendto$inet6(r1, &(0x7f00000003c0)="e237b896f3cd680ae578e427ed3b3cbdba8cba09f14482e5e10025babbecb759781e2db22cf61724d2039ab18c531fc3ee1c018818d394ee38bbb871cb2fa4c3d739863b342db7b8cfd3732f3e27b7edbce7415372b46a5e65ed5750ca3f7cfc9720d2cd52985c3bbd29823a52b17ca5362acb9d93f47e14d55ad81873ec81ecf51d163c95aecedc64ab808066ce1f065e4b8b62b6d746aaaa00f3c15f5a8a934c50837799e95637d0b3eb", 0xab, 0x4000010, &(0x7f00000001c0)={0xa, 0x4e22, 0x6c0ce9d8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c)
write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xfdef)

1m15.532422036s ago: executing program 4 (id=674):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x200}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7f0bb2bf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x408c1}, 0x44000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000000a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30"], 0xfc}}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x9, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x4080)

1m12.622352927s ago: executing program 3 (id=744):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x3, 0x2}}, 0x14}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x17c, 0x1, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_EXP={0x1c, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8000}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x79}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x40}}, @NFQA_PAYLOAD={0x1b, 0xa, "2b9eb36edaa28f0f67cc0844068e244a1556b6daeed992"}, @NFQA_EXP={0xbc, 0xf, 0x0, 0x1, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_MASTER={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x4c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_MASTER={0x14, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @NFQA_CT={0x24, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}]}]}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x18300}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8000}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x44141}, 0x8000)

1m0.118732768s ago: executing program 0 (id=558):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'netpci0\x00', 0x200})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
socket$kcm(0x29, 0x5, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, 0x0, 0x0)
connect$inet6(r1, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0)
mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket(0x2a, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendto$inet6(r1, &(0x7f00000003c0)="e237b896f3cd680ae578e427ed3b3cbdba8cba09f14482e5e10025babbecb759781e2db22cf61724d2039ab18c531fc3ee1c018818d394ee38bbb871cb2fa4c3d739863b342db7b8cfd3732f3e27b7edbce7415372b46a5e65ed5750ca3f7cfc9720d2cd52985c3bbd29823a52b17ca5362acb9d93f47e14d55ad81873ec81ecf51d163c95aecedc64ab808066ce1f065e4b8b62b6d746aaaa00f3c15f5a8a934c50837799e95637d0b3eb", 0xab, 0x4000010, &(0x7f00000001c0)={0xa, 0x4e22, 0x6c0ce9d8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c)
write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xfdef)

57.405767312s ago: executing program 4 (id=674):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x200}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7f0bb2bf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x408c1}, 0x44000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000000a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30"], 0xfc}}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x9, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x4080)

55.165044188s ago: executing program 3 (id=744):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x3, 0x2}}, 0x14}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x17c, 0x1, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_EXP={0x1c, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8000}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x79}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x40}}, @NFQA_PAYLOAD={0x1b, 0xa, "2b9eb36edaa28f0f67cc0844068e244a1556b6daeed992"}, @NFQA_EXP={0xbc, 0xf, 0x0, 0x1, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_MASTER={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x4c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_MASTER={0x14, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @NFQA_CT={0x24, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}]}]}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x18300}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8000}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x44141}, 0x8000)

43.298219157s ago: executing program 0 (id=558):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'netpci0\x00', 0x200})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
socket$kcm(0x29, 0x5, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, 0x0, 0x0)
connect$inet6(r1, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0)
mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket(0x2a, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendto$inet6(r1, &(0x7f00000003c0)="e237b896f3cd680ae578e427ed3b3cbdba8cba09f14482e5e10025babbecb759781e2db22cf61724d2039ab18c531fc3ee1c018818d394ee38bbb871cb2fa4c3d739863b342db7b8cfd3732f3e27b7edbce7415372b46a5e65ed5750ca3f7cfc9720d2cd52985c3bbd29823a52b17ca5362acb9d93f47e14d55ad81873ec81ecf51d163c95aecedc64ab808066ce1f065e4b8b62b6d746aaaa00f3c15f5a8a934c50837799e95637d0b3eb", 0xab, 0x4000010, &(0x7f00000001c0)={0xa, 0x4e22, 0x6c0ce9d8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c)
write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xfdef)

40.609694182s ago: executing program 4 (id=674):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x200}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7f0bb2bf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x408c1}, 0x44000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000000a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30"], 0xfc}}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x9, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x4080)

38.922381764s ago: executing program 3 (id=744):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x3, 0x2}}, 0x14}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x17c, 0x1, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_EXP={0x1c, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8000}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x79}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x40}}, @NFQA_PAYLOAD={0x1b, 0xa, "2b9eb36edaa28f0f67cc0844068e244a1556b6daeed992"}, @NFQA_EXP={0xbc, 0xf, 0x0, 0x1, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_MASTER={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x4c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_MASTER={0x14, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @NFQA_CT={0x24, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}]}]}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x18300}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8000}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x44141}, 0x8000)

26.001486631s ago: executing program 0 (id=558):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'netpci0\x00', 0x200})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
socket$kcm(0x29, 0x5, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, 0x0, 0x0)
connect$inet6(r1, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0)
mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket(0x2a, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendto$inet6(r1, &(0x7f00000003c0)="e237b896f3cd680ae578e427ed3b3cbdba8cba09f14482e5e10025babbecb759781e2db22cf61724d2039ab18c531fc3ee1c018818d394ee38bbb871cb2fa4c3d739863b342db7b8cfd3732f3e27b7edbce7415372b46a5e65ed5750ca3f7cfc9720d2cd52985c3bbd29823a52b17ca5362acb9d93f47e14d55ad81873ec81ecf51d163c95aecedc64ab808066ce1f065e4b8b62b6d746aaaa00f3c15f5a8a934c50837799e95637d0b3eb", 0xab, 0x4000010, &(0x7f00000001c0)={0xa, 0x4e22, 0x6c0ce9d8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c)
write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xfdef)

24.637978202s ago: executing program 4 (id=674):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x200}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7f0bb2bf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x408c1}, 0x44000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000000a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30"], 0xfc}}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x9, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x4080)

23.62584056s ago: executing program 3 (id=744):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x3, 0x2}}, 0x14}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x17c, 0x1, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_EXP={0x1c, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8000}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x79}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x40}}, @NFQA_PAYLOAD={0x1b, 0xa, "2b9eb36edaa28f0f67cc0844068e244a1556b6daeed992"}, @NFQA_EXP={0xbc, 0xf, 0x0, 0x1, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_MASTER={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x4c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_MASTER={0x14, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @NFQA_CT={0x24, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}]}]}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x18300}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8000}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x44141}, 0x8000)

8.633087587s ago: executing program 0 (id=558):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'netpci0\x00', 0x200})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
socket$kcm(0x29, 0x5, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, 0x0, 0x0)
connect$inet6(r1, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0)
mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket(0x2a, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendto$inet6(r1, &(0x7f00000003c0)="e237b896f3cd680ae578e427ed3b3cbdba8cba09f14482e5e10025babbecb759781e2db22cf61724d2039ab18c531fc3ee1c018818d394ee38bbb871cb2fa4c3d739863b342db7b8cfd3732f3e27b7edbce7415372b46a5e65ed5750ca3f7cfc9720d2cd52985c3bbd29823a52b17ca5362acb9d93f47e14d55ad81873ec81ecf51d163c95aecedc64ab808066ce1f065e4b8b62b6d746aaaa00f3c15f5a8a934c50837799e95637d0b3eb", 0xab, 0x4000010, &(0x7f00000001c0)={0xa, 0x4e22, 0x6c0ce9d8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c)
write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xfdef)

6.015285355s ago: executing program 4 (id=674):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x200}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7f0bb2bf}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x408c1}, 0x44000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000000a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30"], 0xfc}}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x9, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x4080)

5.21707181s ago: executing program 3 (id=744):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x3, 0x2}}, 0x14}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x17c, 0x1, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_EXP={0x1c, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8000}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x79}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x40}}, @NFQA_PAYLOAD={0x1b, 0xa, "2b9eb36edaa28f0f67cc0844068e244a1556b6daeed992"}, @NFQA_EXP={0xbc, 0xf, 0x0, 0x1, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_MASTER={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x4c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_MASTER={0x14, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @NFQA_CT={0x24, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}]}]}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x18300}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8000}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x44141}, 0x8000)

3.915094379s ago: executing program 1 (id=1399):
r0 = socket(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
sendmsg$tipc(r0, &(0x7f0000000640)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x4, 0x4}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000040)="25f41842c81e7a77ed96d34136b1d4becce894b7ed72158539d2dad0475970b3745437d5f7fbbf472ead4e279c216b54660ed6dad9e3177eb1dc0b86cd24db95ce719a9097e17f3a0189", 0x4a}, {&(0x7f00000000c0)="9ed956e32404e9dd445c9304ec43d49d3a915b3b8f5e98c5470ef625ce96f49d1f20806ac483d5f1257694abb9f33d7a3e2b7176291e3ab3a346b45f39ef3635a283d8a7a952d9e4e9ac65984fd5e01fdf055fa9ce68b86c76f54b02b1e609eb5b41", 0x62}, {&(0x7f0000000300)="dc55947af03aca3fbe7b56e3712105888cb84ffff6f5636a85039ed9b53afee17a2b346fb453810264f0b1d258cfacab22081bfe0029aac26778518785a1e53bfd645245b5b76f7e2f8abf3651af774cd8629f404353711162b98d8b7315665f3b134596b74b1efe71d4ba8d79b68a3f24bd1e4e50efc3413303f7656a1c9f078538d1704c2e8c25c819a55638ed56c71d795559f4c00777a5af9ad15f6407c0b0c4ad97c4315ebea17bbe4de44c8b61258ba8dcfb3b428e2a7cb52a64b6038dabbfad995c8c3ac54ecd3b95d3481fc4b7a718eee577b9fe", 0xd8}, {&(0x7f0000000140)="308588aa8efd658de54f2cefea6e1cdc2004cef246b78fccb2382f6dd12fa715bf1ecccd7229d3002fad6901ff81b6ab226be8faac8607b8d0f5b680e309fc6981ff7b33393bfa89db235f3804d327e0c76b06cf4db078ce48dec7c34272f299", 0x60}, {&(0x7f0000000400)="42c719873dc60c584bdb29400aef20642e742059df8e3ce96b837ef03c73cf0ca96d60f24c2fcc90ea2f8e9fa1a0416b68f944f1dddf951b97b4c8fca6fed7c883e2ba1289fec8a9af9c133e164f8aa6cf00e30125e18c3cb1105ed04603d720210691d7f089e459fb85c56930831b85591f0278e2280fb2c832ffd82c930bb0351f1813fdbe62350d1d5f72d526ddd90a3a62a2ba6de18b3988edebeea7e93956f69e908a306d9754c4851d953cc653fa441e94470c2050b5a6d0d1bab577e8f2f73094d428453d1cb1a6cde1a71b5a5c2b0aee", 0xd4}, {&(0x7f0000000280)="d33798f41ed6cca2d5ac7e82782c2f64a0707320843a94f375a45273ee9dcf908299283b09c9", 0x26}], 0x6, &(0x7f0000000580)="212795617bad7616992292d19f6ec8a2ab8086fe32120f0932e4149b4ba89a3d0bcab5d4d0c907282afed4d3ae95d4953625b0f2422430fa70332d7857db404ce22479609232161efba57aceffce8473a6ead5118a27726c171565c69cf170e1cc643547da98fbbae19b1e0798b24e6cf969311834dc566b5d3e52f5a39882e59432480e9a732db03907ba65a64a95ef59dd36624dad2576402057d740437ce18f733413069b6db002a2924127953f", 0xaf, 0x40800}, 0x41)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x9, '\x00', r1, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000a40)=[0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r4=>0x0, 0xc2, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000b00), &(0x7f0000000b40), 0x8, 0xc8, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x30, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008510000006000000bfa3fcff0800000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70800000000008c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000610400007b8a9ec952255a38f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000018420000000000000000000000000000950000000000000018390000040000000000000000000000185500000b0000000000000000000000180000000600000000000000a3000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000e80)='syzkaller\x00', 0x7fffffff, 0x45, &(0x7f0000000ec0)=""/69, 0x1b12a698bd9205a9, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000f80)={0x1, 0x2, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000fc0)=[0xffffffffffffffff], &(0x7f0000001000)=[{0x2, 0x5, 0x5, 0x7}, {0x4, 0x0, 0x6, 0x9}, {0x4, 0x5, 0x9, 0x3}, {0x3, 0x4, 0xb, 0xa}, {0x2, 0x3, 0xf, 0x6}, {0x2, 0x4, 0x6, 0x3}, {0x0, 0x2, 0x8, 0x2}, {0x2, 0x5, 0xe}, {0x0, 0x2, 0x0, 0xd}], 0x10, 0x6}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001200)={{r2, <r6=>0xffffffffffffffff}, &(0x7f0000001180), &(0x7f00000011c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x4, 0x2a, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7dd9, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query, @call={0x85, 0x0, 0x0, 0xb2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000880)='syzkaller\x00', 0x5, 0xe2, &(0x7f00000008c0)=""/226, 0x41100, 0xd, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x5, 0x2, 0x5, 0x4}, 0x10, r4, r5, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, r6, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94)

2.631932275s ago: executing program 1 (id=1402):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01f71800000000000000240000002400000002000000000000000000000400000003000000000000000000000000000000000000000d0200000000000006"], 0xffffffffffffffff, 0x3e, 0x0, 0xa}, 0x28)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r0 = socket$netlink(0x10, 0x3, 0xf)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0xfe}]}, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r2, 0xa11, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c084}, 0x48420)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r3)
r4 = socket$l2tp(0x2, 0x2, 0x73)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000140)={0x5, 0x4, 0xc, 0x2, @vifc_lcl_ifindex, @remote}, 0x10)
setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4)
readv(r4, &(0x7f0000000340)=[{0x0}, {&(0x7f0000004980)=""/4096, 0x1000}, {0x0}, {0x0}], 0x4)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000000000000000880045d90024000000000073907800000300e000620f00000000000090780200000000000000"], 0x0)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x5, @loopback}], 0x1c)
sendto$inet6(r6, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
setsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, 0x0, 0x5f)
getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x3, 0x71, 0x8, 0x200, 0xdbc, 0x3, 0x0, {0x0, @in6={{0xa, 0x4e22, 0xfffeffff, @local, 0x5977}}, 0x3, 0x5, 0x6, 0x9, 0x2357}}, &(0x7f00000004c0)=0xb0)

1.691204946s ago: executing program 1 (id=1407):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="720000000000000000000000000000000000000000000000000000000000000002"], 0x48)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r4, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff}, 0xc)
bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc)
getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140), 0x10)
unshare(0x20000400)
r5 = socket(0x1d, 0x3, 0x1)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x40000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r7, 0xff, 0x30}, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000080), 0x2, 0x0)
sendfile(r9, r9, 0x0, 0x200)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={<r10=>r7, 0x800}, &(0x7f0000000080)=0x8)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=0x2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48)
r12 = socket$igmp6(0xa, 0x3, 0x2)
sendmmsg$inet6(r12, &(0x7f00000066c0)=[{{&(0x7f00000019c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x5efe)
pipe(&(0x7f0000000280)={<r13=>0xffffffffffffffff})
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r13, 0x84, 0x18, &(0x7f0000000300)={r10, 0x7}, 0x8)
sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYRES64=r2], 0x404}}, 0x0)

1.340546332s ago: executing program 1 (id=1411):
r0 = socket$inet6(0xa, 0x5, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x0, 0x400, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r5)
sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r6, 0x1203}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES8=r5, @ANYRES16=r6, @ANYRES32=r3, @ANYBLOB="0800050000000000"], 0x24}}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000002fffef0030000000020000000000000b01000000fcffffff01000004fdffff0000000000040000000200400000000000000000000000000000000000000062ae69c6829176987ee451cb279b75991793849fa3cd9a478d085bfa1fb5eb988cff2b8bf1c2b59ce800a52c15230e59474ae06950413c1ddb9cb40984287429dd9c76ccf37556e373f6b36cafde686e8770f652b6d60000dca35a8af80080cb55a0c6b1621efecf381bd9ce12ef61811c38ec8f61ef1a602699be9bec4fc5d156ed013591f820fd3f99264e0c165f0000657863f2fd6c1b1d487921b698dbe89ad91d6e76fd8dd55443dbb290014579b2761508cec6efb0487f9267e79a4a678104ae70bc057832"], 0x0, 0x4a}, 0x28)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r9 = socket(0x10, 0x3, 0x0)
r10 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r11=>0x0})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="79088e12ce2ceab37e72dbfda68c87ddcd95987d02dc49b6102d1176413fcdf246e2497623480ac75fbd704d7ee6e5c3495b0c75067aa7080000009254d637f0eb853867d2a015cd28c3605d71abda66dff720061318b68ce1324d3da27293ec41f138d5e9168cb6b7c4fdce2faba166365a3044baa586d24cb131070000000000000051b49f", @ANYRES16=r13, @ANYBLOB="030100000000000000001a0000000600210061000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4)
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xffffffffffffff35, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x0, 0x2}}]}}]}, 0x44}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001440)={'gretap0\x00'})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x98, r7, 0x6a98047402e98331, 0xfffffffc, 0xffbffffe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x24}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8040}, 0x40160c4)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0xffffffff}, 0x8)
ioctl$SIOCX25GSUBSCRIP(r9, 0x89e0, &(0x7f0000001500)={'pim6reg1\x00', 0x3ff, 0x6})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000012c0)={'ip6gre0\x00', &(0x7f0000001240)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0xfa, 0x4, 0x2, @loopback, @private1, 0x80, 0x20, 0x6, 0x7fffffff}})
socket$inet6_sctp(0xa, 0x1, 0x84)

933.439484ms ago: executing program 1 (id=1413):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x40}, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x38}}, 0x0) (async)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x64, r1, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe8f, 0x59}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="4bd1295dd494"}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000055}, 0x200040c0) (async, rerun: 64)
r4 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$inet_mreqn(r5, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'netpci0\x00', 0x2})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000980)=ANY=[@ANYBLOB="000088b5bbbbbbbbbbbbbbbbbbbbbbbb0800472200b800640000081190"], 0xca) (async)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000000) (async, rerun: 64)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (rerun: 64)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) (async)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f00000002c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 32)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xfffffffe}) (async, rerun: 32)
write$bt_hci(r9, &(0x7f0000000080)=ANY=[], 0x6) (async)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x63, 0x0, &(0x7f0000000080)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'})

805.129879ms ago: executing program 2 (id=1414):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @dev}}}, 0x84)
getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x11, 0x4, 0x0, 0x1000000000000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[], &(0x7f0000000280)=""/265, 0x41, 0x109, 0x1}, 0x28)
socketpair(0x2c, 0x2, 0xfb, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'gre0\x00', <r2=>0x0, 0xa0, 0x40, 0x5, 0x3, {{0xc, 0x4, 0x2, 0x3b, 0x30, 0x65, 0x0, 0x1, 0x2f, 0x0, @multicast2, @empty, {[@noop, @lsrr={0x83, 0x7, 0xf9, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x7, 0x60, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0xc, 0xb7, 0x3, 0x0, [{@rand_addr=0x64010101, 0x4}]}]}}}}})
socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)=@RTM_GETMDB={0x18, 0x56, 0x300, 0x70bd2a, 0x25dfdbff, {0x7, r2}, ["", "", "", ""]}, 0x18}}, 0x80)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r4, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x0)

541.836788ms ago: executing program 2 (id=1415):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x55, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @broadcast}, 0x10)
getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x0, [0xffff7fff, 0xa, 0x3ff]}, &(0x7f00000000c0)=0x44)

394.639089ms ago: executing program 2 (id=1416):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x0, 0x6, 0x5, 0x3, 0x5, "249523"}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001, 0x3}, 0x10) (async)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001, 0x3}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0xffffffb9, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000001600156f00000000ffffffff0a001000a17d565e3e", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0xffffffb9, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000001600156f00000000ffffffff0a001000a17d565e3e", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
connect$netlink(r2, &(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x40000}, 0xc) (async)
connect$netlink(r2, &(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x40000}, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x18, r9, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0)
sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r0, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x60000000, 0x5}}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004054}, 0x8000) (async)
sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r0, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x60000000, 0x5}}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004054}, 0x8000)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r0, 0xb01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0)

235.012716ms ago: executing program 1 (id=1417):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params]}, 0x28}}, 0x0)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r5=>0xffffffffffffffff})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000480)={0x3c, r7, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
socket$inet6(0xa, 0x80803, 0x87)
syz_emit_ethernet(0x88, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x52, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@hopopts={0x87}, @routing={0x87, 0x0, 0x2}], {0x4e21, 0x4e23, 0x42, 0x0, @opaque="d6463ba23299207baa15d678a68182b1a5baf2a5c4f496edfc710754e796183f353d63ef142694fda9a1ee0002393368e4e1452ef2af9252951a"}}}}}}, 0x0)

206.590934ms ago: executing program 2 (id=1418):
r0 = socket$inet6(0xa, 0x80002, 0x88)
setsockopt$sock_int(r0, 0x1, 0x28, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x82, 0x0, 0x1}, 0x28)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_0\x00', 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xfe33)
bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r3, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x200000000000000)

70.705641ms ago: executing program 2 (id=1419):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0)
r1 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x44080)
sendmsg(r1, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0)

0s ago: executing program 2 (id=1420):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@restrict={0x3, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x61, 0x2e]}}, 0x0, 0x28, 0x0, 0x1, 0x2}, 0x28)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x44}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x2c, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x58, &(0x7f0000000340)={0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={r7, 0x7f, 0x10}, 0xc)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0)
ioctl$TUNSETIFF(r10, 0x400454da, &(0x7f0000000140)={'batadv0\x00'})
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1})
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272})
sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r5}, 0x14)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r9, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r13=>0x0}}, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r11, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000b40)=ANY=[@ANYBLOB="90010000", @ANYRES16=r12, @ANYBLOB="000229bd7000fedbdf25040000003400018008000100", @ANYRES32=r8, @ANYBLOB="1400020076657468305f746f5f7465616d000000140002007465616d5f736c6176655f300000000004000180200001801400020076657468315f746f5f62617461647600080003000300000044000180140002007866726d300000000000000000000000080003000100000008000100", @ANYRES32=r5, @ANYBLOB="14000200626f6e642f72c1daa3eca5938b0e000008000300010000004400018008000100", @ANYRES32=r5, @ANYBLOB="1400020070696d3672656730000000000000000008000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020077673100000000000000000000000000180001801400020070696d726567300000000000000000003c0001801400020077673200000000000000000000000000080003000100000014000200626174616476300000000000000000000800030001000000280001800800030000000000140002006e72300000000000000000000000000008000300030000002000018008000100", @ANYRES32=r5, @ANYBLOB="14000200766574683000"/20], 0x190}, 0x1, 0x0, 0x0, 0xc011}, 0x4000)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8800)
r14 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0020000000060000580012800b00010067726574617000004800028006000e0002000000050017000100000006000300070000000800050008002200050008148000000005001600010000000500080005000000040012"], 0x78}}, 0x0)
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0)

kernel console output (not intermixed with test programs):

66623][ T3589] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.984990][ T3589] bridge_slave_0: left allmulticast mode
[  233.994116][ T3589] bridge_slave_0: left promiscuous mode
[  234.000907][ T3589] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.413509][ T3589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  234.424842][ T3589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  234.435402][ T3589] bond0 (unregistering): Released all slaves
[  234.466987][T10149] netlink: 256 bytes leftover after parsing attributes in process `syz.2.993'.
[  234.480029][T10149] ksmbd: Unknown IPC event: 3, ignore.
[  234.544088][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.565836][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.624015][T10151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  234.631729][T10151] IPv6: NLM_F_CREATE should be set when creating new route
[  234.639095][T10151] IPv6: NLM_F_CREATE should be set when creating new route
[  234.646381][T10151] IPv6: NLM_F_CREATE should be set when creating new route
[  234.827495][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.835384][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.942861][ T9937] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  235.122920][ T9937] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  235.256220][ T9937] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  235.291572][ T9937] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  235.430246][T10168] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1002'.
[  235.456291][T10168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1002'.
[  235.714758][ T3589] hsr_slave_0: left promiscuous mode
[  235.729061][ T3589] hsr_slave_1: left promiscuous mode
[  235.735261][ T3589] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  235.744051][ T3589] batman_adv: batadv0: Removing interface: batadv_slave_0
[  235.752226][ T3589] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  235.760153][ T3589] batman_adv: batadv0: Removing interface: batadv_slave_1
[  235.778982][ T3589] veth1_macvtap: left promiscuous mode
[  235.784526][ T3589] veth0_macvtap: left promiscuous mode
[  235.790564][ T3589] veth1_vlan: left promiscuous mode
[  235.795868][ T3589] veth0_vlan: left promiscuous mode
[  235.806241][ T5852] Bluetooth: hci0: command tx timeout
[  236.222282][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1003'.
[  236.252266][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1003'.
[  236.275214][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1003'.
[  236.395220][T10182] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1005'.
[  236.426469][T10182] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1005'.
[  236.463312][ T3589] team0 (unregistering): Port device team_slave_1 removed
[  236.559629][ T3589] team0 (unregistering): Port device team_slave_0 removed
[  236.701131][ T5169] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  236.712032][ T5169] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  236.723394][ T5169] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  236.732696][ T5169] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  236.742307][ T5169] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  237.488534][ T9937] 8021q: adding VLAN 0 to HW filter on device bond0
[  237.505467][T10204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1012'.
[  237.535310][T10205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1011'.
[  237.564230][ T9937] 8021q: adding VLAN 0 to HW filter on device team0
[  237.600384][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.607607][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.665125][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.672405][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.713076][T10135] chnl_net:caif_netlink_parms(): no params data found
[  237.889865][ T5852] Bluetooth: hci0: command tx timeout
[  238.291354][T10224] Bluetooth: MGMT ver 1.23
[  238.376789][ T3589] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.426597][T10135] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.449723][T10135] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.464207][T10135] bridge_slave_0: entered allmulticast mode
[  238.479138][T10135] bridge_slave_0: entered promiscuous mode
[  238.492179][T10135] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.500431][T10135] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.514831][T10135] bridge_slave_1: entered allmulticast mode
[  238.539663][T10135] bridge_slave_1: entered promiscuous mode
[  238.630194][ T3589] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.693649][T10135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  238.730968][T10135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  238.823716][ T3589] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.847052][ T5852] Bluetooth: hci3: command tx timeout
[  238.860927][ T9937] 8021q: adding VLAN 0 to HW filter on device batadv0
[  238.974774][ T3589] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.012863][T10135] team0: Port device team_slave_0 added
[  239.029684][T10135] team0: Port device team_slave_1 added
[  239.158879][T10135] batman_adv: batadv0: Adding interface: batadv_slave_0
[  239.173486][T10135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.200375][T10135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  239.234248][T10135] batman_adv: batadv0: Adding interface: batadv_slave_1
[  239.245913][T10135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.263605][T10262] SET target dimension over the limit!
[  239.273271][T10135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  239.450989][T10135] hsr_slave_0: entered promiscuous mode
[  239.458041][T10135] hsr_slave_1: entered promiscuous mode
[  239.464490][T10135] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  239.473437][T10135] Cannot create hsr debugfs directory
[  239.490341][T10266] __nla_validate_parse: 3 callbacks suppressed
[  239.490359][T10266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1027'.
[  239.515883][T10266] netlink: 'syz.2.1027': attribute type 7 has an invalid length.
[  239.524233][T10266] netlink: 'syz.2.1027': attribute type 8 has an invalid length.
[  239.541187][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1027'.
[  239.689998][ T9937] veth0_vlan: entered promiscuous mode
[  239.850907][ T3589] bridge_slave_1: left allmulticast mode
[  239.857632][ T3589] bridge_slave_1: left promiscuous mode
[  239.862819][T10274] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1029'.
[  239.863581][ T3589] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.888886][ T3589] bridge_slave_0: left allmulticast mode
[  239.894862][ T3589] bridge_slave_0: left promiscuous mode
[  239.901170][ T3589] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.976751][ T5852] Bluetooth: hci0: command tx timeout
[  240.322752][ T3589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  240.333936][ T3589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  240.344612][ T3589] bond0 (unregistering): Released all slaves
[  240.369792][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'.
[  240.372130][ T9937] veth1_vlan: entered promiscuous mode
[  240.627526][T10290] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  240.653061][T10190] chnl_net:caif_netlink_parms(): no params data found
[  240.868315][T10293] netlink: 'syz.2.1035': attribute type 10 has an invalid length.
[  240.912865][ T9937] veth0_macvtap: entered promiscuous mode
[  240.930051][ T5852] Bluetooth: hci3: command tx timeout
[  240.994942][ T9937] veth1_macvtap: entered promiscuous mode
[  241.035572][T10301] x_tables: duplicate underflow at hook 3
[  241.109989][ T9937] batman_adv: batadv0: Interface activated: batadv_slave_0
[  241.123021][ T9937] batman_adv: batadv0: Interface activated: batadv_slave_1
[  241.342309][T10308] netlink: 'syz.2.1039': attribute type 10 has an invalid length.
[  241.399737][ T9937] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.409973][ T9937] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  241.419372][ T9937] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  241.429239][ T9937] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  241.447558][T10310] ieee802154 phy0 wpan0: encryption failed: -22
[  241.496246][T10308] batman_adv: batadv0: Adding interface: team0
[  241.502490][T10308] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.556622][T10308] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  241.586331][T10190] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.595623][T10190] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.597115][T10313] netlink: 'syz.1.1040': attribute type 11 has an invalid length.
[  241.607149][T10190] bridge_slave_0: entered allmulticast mode
[  241.617256][T10313] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1040'.
[  241.619085][T10190] bridge_slave_0: entered promiscuous mode
[  241.638936][T10190] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.646743][T10190] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.654052][T10190] bridge_slave_1: entered allmulticast mode
[  241.663892][T10190] bridge_slave_1: entered promiscuous mode
[  241.791724][T10190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  241.828168][ T3589] hsr_slave_0: left promiscuous mode
[  241.834428][ T3589] hsr_slave_1: left promiscuous mode
[  241.842918][ T3589] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  241.850903][ T3589] batman_adv: batadv0: Removing interface: batadv_slave_0
[  241.860743][ T3589] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  241.869578][ T3589] batman_adv: batadv0: Removing interface: batadv_slave_1
[  241.893755][ T3589] veth1_macvtap: left promiscuous mode
[  241.899623][ T3589] veth0_macvtap: left promiscuous mode
[  241.905289][ T3589] veth1_vlan: left promiscuous mode
[  241.911075][ T3589] veth0_vlan: left promiscuous mode
[  242.056585][ T5852] Bluetooth: hci0: command tx timeout
[  242.369993][ T3589] team0 (unregistering): Port device team_slave_1 removed
[  242.414827][ T3589] team0 (unregistering): Port device team_slave_0 removed
[  242.852681][T10190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  242.965192][T10190] team0: Port device team_slave_0 added
[  243.007127][ T5852] Bluetooth: hci3: command tx timeout
[  243.031836][T10190] team0: Port device team_slave_1 added
[  243.038219][T10330] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1045'.
[  243.071607][T10331] netlink: 'syz.1.1044': attribute type 17 has an invalid length.
[  243.224088][T10190] batman_adv: batadv0: Adding interface: batadv_slave_0
[  243.240252][T10190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.269172][T10190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  243.282763][T10190] batman_adv: batadv0: Adding interface: batadv_slave_1
[  243.292211][T10190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.320851][T10190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  243.495829][T10190] hsr_slave_0: entered promiscuous mode
[  243.503341][T10190] hsr_slave_1: entered promiscuous mode
[  243.510867][T10190] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  243.528923][T10190] Cannot create hsr debugfs directory
[  243.588274][T10135] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  243.647831][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.652740][T10135] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  243.664796][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.715529][T10135] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  243.764553][T10135] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  243.897343][ T3589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.905253][ T3589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.462589][T10361] syzkaller0: entered promiscuous mode
[  244.470687][T10361] syzkaller0: entered allmulticast mode
[  245.096223][ T5852] Bluetooth: hci3: command tx timeout
[  245.617492][ T5169] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  245.642287][ T5169] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  245.652391][ T5169] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  245.671681][ T5169] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  245.682452][ T5169] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  246.206422][   T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.228801][T10381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1057'.
[  246.341403][   T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.521395][   T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.743693][T10135] 8021q: adding VLAN 0 to HW filter on device bond0
[  246.820550][   T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.837861][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1063'.
[  246.965227][T10135] 8021q: adding VLAN 0 to HW filter on device team0
[  247.084927][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.092217][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  247.121097][T10190] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  247.212271][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.219774][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state
[  247.229586][T10190] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  247.245919][T10190] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  247.281194][T10190] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  247.510334][   T36] bridge_slave_1: left allmulticast mode
[  247.526551][   T36] bridge_slave_1: left promiscuous mode
[  247.535482][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.564501][   T36] bridge_slave_0: left allmulticast mode
[  247.584119][   T36] bridge_slave_0: left promiscuous mode
[  247.594480][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.727289][ T5852] Bluetooth: hci4: command tx timeout
[  248.285294][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  248.309660][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  248.327967][   T36] bond0 (unregistering): Released all slaves
[  249.191605][T10377] chnl_net:caif_netlink_parms(): no params data found
[  249.569651][T10377] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.590353][T10377] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.601188][T10377] bridge_slave_0: entered allmulticast mode
[  249.612100][T10377] bridge_slave_0: entered promiscuous mode
[  249.631572][T10377] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.650194][T10377] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.661138][T10377] bridge_slave_1: entered allmulticast mode
[  249.671148][T10377] bridge_slave_1: entered promiscuous mode
[  249.682059][   T36] hsr_slave_0: left promiscuous mode
[  249.695412][   T36] hsr_slave_1: left promiscuous mode
[  249.702538][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  249.710169][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  249.718229][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  249.725649][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  249.745864][   T36] veth1_macvtap: left promiscuous mode
[  249.751576][   T36] veth0_macvtap: left promiscuous mode
[  249.757355][   T36] veth1_vlan: left promiscuous mode
[  249.762650][   T36] veth0_vlan: left promiscuous mode
[  249.811726][ T5852] Bluetooth: hci4: command tx timeout
[  250.313589][   T36] team0 (unregistering): Port device team_slave_1 removed
[  250.353350][   T36] team0 (unregistering): Port device team_slave_0 removed
[  250.837312][T10509] C: renamed from team_slave_0
[  250.853928][T10509] netlink: 'syz.2.1077': attribute type 1 has an invalid length.
[  250.862688][T10509] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  250.889396][T10377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  250.934449][T10377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  250.985392][T10514] syz.1.1078 (10514) used greatest stack depth: 17992 bytes left
[  251.013329][T10190] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.134597][T10377] team0: Port device team_slave_0 added
[  251.153309][T10377] team0: Port device team_slave_1 added
[  251.182229][T10135] 8021q: adding VLAN 0 to HW filter on device batadv0
[  251.286986][T10377] batman_adv: batadv0: Adding interface: batadv_slave_0
[  251.302988][T10377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.336381][T10377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  251.378645][T10190] 8021q: adding VLAN 0 to HW filter on device team0
[  251.402813][T10377] batman_adv: batadv0: Adding interface: batadv_slave_1
[  251.418678][T10377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.451393][T10377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  251.488689][T10474] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.495873][T10474] bridge0: port 1(bridge_slave_0) entered forwarding state
[  251.561971][T10474] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.569250][T10474] bridge0: port 2(bridge_slave_1) entered forwarding state
[  251.604603][T10377] hsr_slave_0: entered promiscuous mode
[  251.611188][T10377] hsr_slave_1: entered promiscuous mode
[  251.742224][T10135] veth0_vlan: entered promiscuous mode
[  251.842044][T10135] veth1_vlan: entered promiscuous mode
[  251.886622][ T5852] Bluetooth: hci4: command tx timeout
[  252.005694][T10135] veth0_macvtap: entered promiscuous mode
[  252.063451][T10135] veth1_macvtap: entered promiscuous mode
[  252.110842][T10135] batman_adv: batadv0: Interface activated: batadv_slave_0
[  252.163290][T10135] batman_adv: batadv0: Interface activated: batadv_slave_1
[  252.202350][T10135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.214580][T10135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.224509][T10135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.233323][T10135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.323252][T10190] 8021q: adding VLAN 0 to HW filter on device batadv0
[  252.511791][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.534563][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.645696][T10552] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1087'.
[  252.669105][T10377] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  252.706951][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.715003][T10552] syzkaller0: Caught tx_queue_len zero misconfig
[  252.722999][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.745016][T10377] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  252.786892][T10377] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  252.817420][T10377] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  253.123868][T10575] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1091'.
[  253.313182][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.409718][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.463233][T10377] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.490752][T10190] veth0_vlan: entered promiscuous mode
[  253.508209][T10377] 8021q: adding VLAN 0 to HW filter on device team0
[  253.536687][T10190] veth1_vlan: entered promiscuous mode
[  253.548995][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.556237][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state
[  253.594540][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.601785][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  253.624909][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.709907][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.754036][T10190] veth0_macvtap: entered promiscuous mode
[  253.789743][T10190] veth1_macvtap: entered promiscuous mode
[  253.903346][T10190] batman_adv: batadv0: Interface activated: batadv_slave_0
[  253.961332][T10190] batman_adv: batadv0: Interface activated: batadv_slave_1
[  253.971653][ T5852] Bluetooth: hci4: command tx timeout
[  253.995116][T10190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.004678][T10190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.013590][T10190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.023086][T10190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  254.041569][   T13] bridge_slave_1: left allmulticast mode
[  254.049449][   T13] bridge_slave_1: left promiscuous mode
[  254.055286][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.068883][   T13] bridge_slave_0: left allmulticast mode
[  254.074905][   T13] bridge_slave_0: left promiscuous mode
[  254.081438][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.340355][T10584] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  254.407825][T10589] netlink: 'syz.1.1092': attribute type 1 has an invalid length.
[  254.415618][T10589] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1092'.
[  254.473653][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1094'.
[  254.499173][T10591] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  254.525870][T10591] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  254.545509][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1094'.
[  254.561693][T10593] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  254.569556][T10593] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  254.724385][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  254.744821][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  254.766631][   T13] bond0 (unregistering): Released all slaves
[  254.789698][ T5169] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  254.802417][ T5169] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  254.817342][ T5169] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  254.840312][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1097'.
[  254.854740][ T5169] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  254.865823][ T5169] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  255.020985][T10377] 8021q: adding VLAN 0 to HW filter on device batadv0
[  255.182538][T10474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.204087][T10474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.334802][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.344822][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.368531][T10377] veth0_vlan: entered promiscuous mode
[  255.398715][T10377] veth1_vlan: entered promiscuous mode
[  255.481740][T10377] veth0_macvtap: entered promiscuous mode
[  255.500102][T10377] veth1_macvtap: entered promiscuous mode
[  255.588937][T10377] batman_adv: batadv0: Interface activated: batadv_slave_0
[  255.670608][T10377] batman_adv: batadv0: Interface activated: batadv_slave_1
[  255.707410][T10377] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  255.741217][T10377] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  255.765941][T10377] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  255.778883][T10377] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.824216][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  255.834188][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  255.923239][   T13] hsr_slave_0: left promiscuous mode
[  255.931275][   T13] hsr_slave_1: left promiscuous mode
[  255.937658][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  255.945094][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  255.953784][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  255.962084][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  255.997842][   T13] veth1_macvtap: left promiscuous mode
[  256.003460][   T13] veth0_macvtap: left promiscuous mode
[  256.013139][   T13] veth1_vlan: left promiscuous mode
[  256.020636][   T13] veth0_vlan: left promiscuous mode
[  256.487031][   T13] team0 (unregistering): Port device team_slave_1 removed
[  256.528864][   T13] team0 (unregistering): Port device team_slave_0 removed
[  256.929101][ T5852] Bluetooth: hci0: command tx timeout
[  257.030949][ T5169] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  257.040868][ T5169] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  257.055990][ T5169] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  257.080092][ T5169] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  257.107518][ T5169] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  257.760809][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.790988][T10599] chnl_net:caif_netlink_parms(): no params data found
[  257.799008][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.077000][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.084890][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.360858][T10599] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.376633][T10599] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.396778][T10599] bridge_slave_0: entered allmulticast mode
[  258.406542][T10599] bridge_slave_0: entered promiscuous mode
[  258.425667][T10599] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.436243][T10599] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.453714][T10599] bridge_slave_1: entered allmulticast mode
[  258.462907][T10599] bridge_slave_1: entered promiscuous mode
[  258.659609][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.750968][T10599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  258.788212][T10599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  258.923057][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.007398][ T5852] Bluetooth: hci0: command tx timeout
[  259.025622][T10599] team0: Port device team_slave_0 added
[  259.035743][T10599] team0: Port device team_slave_1 added
[  259.066188][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.164075][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.174981][ T5169] Bluetooth: hci3: command tx timeout
[  259.187369][T10599] batman_adv: batadv0: Adding interface: batadv_slave_0
[  259.194491][T10599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.220848][T10599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  259.279884][T10599] batman_adv: batadv0: Adding interface: batadv_slave_1
[  259.293412][T10599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.319788][T10599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  259.538893][T10599] hsr_slave_0: entered promiscuous mode
[  259.550378][T10599] hsr_slave_1: entered promiscuous mode
[  259.557459][T10599] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  259.565055][T10599] Cannot create hsr debugfs directory
[  259.914488][T10616] chnl_net:caif_netlink_parms(): no params data found
[  259.984849][   T13] bridge_slave_1: left allmulticast mode
[  259.990939][   T13] bridge_slave_1: left promiscuous mode
[  259.997806][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.037553][   T13] bridge_slave_0: left allmulticast mode
[  260.043272][   T13] bridge_slave_0: left promiscuous mode
[  260.057826][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.187962][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  260.197747][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  260.217335][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  260.230597][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  260.241501][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  260.505741][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  260.519571][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  260.530155][   T13] bond0 (unregistering): Released all slaves
[  260.884456][T10616] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.905322][T10616] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.924079][T10684] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1117'.
[  260.935077][T10616] bridge_slave_0: entered allmulticast mode
[  260.946765][T10616] bridge_slave_0: entered promiscuous mode
[  261.067786][T10616] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.086806][ T5852] Bluetooth: hci0: command tx timeout
[  261.092493][T10616] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.114049][T10616] bridge_slave_1: entered allmulticast mode
[  261.131439][T10616] bridge_slave_1: entered promiscuous mode
[  261.247733][ T5852] Bluetooth: hci3: command tx timeout
[  261.464247][T10616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  261.465534][T10701] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  261.520184][T10616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  261.601544][T10703] batman_adv: batadv0: Removing interface: team0
[  261.722133][T10616] team0: Port device team_slave_0 added
[  261.767937][T10616] team0: Port device team_slave_1 added
[  262.038449][T10711] tipc: Started in network mode
[  262.043390][T10711] tipc: Node identity ac14140f, cluster identity 4711
[  262.085713][T10711] tipc: New replicast peer: 255.255.255.255
[  262.092352][T10711] tipc: Enabled bearer <udp:syz2>, priority 10
[  262.172520][   T13] hsr_slave_0: left promiscuous mode
[  262.180516][   T13] hsr_slave_1: left promiscuous mode
[  262.187225][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  262.194791][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  262.203538][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  262.211200][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  262.231621][   T13] veth1_macvtap: left promiscuous mode
[  262.237672][   T13] veth0_macvtap: left promiscuous mode
[  262.243420][   T13] veth1_vlan: left promiscuous mode
[  262.248893][   T13] veth0_vlan: left promiscuous mode
[  262.286279][ T5852] Bluetooth: hci4: command tx timeout
[  262.701920][   T13] team0 (unregistering): Port device team_slave_1 removed
[  262.745854][   T13] team0 (unregistering): Port device team_slave_0 removed
[  263.087415][ T5918] tipc: Node number set to 2886997007
[  263.159912][T10616] batman_adv: batadv0: Adding interface: batadv_slave_0
[  263.173549][T10616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.176361][ T5852] Bluetooth: hci0: command tx timeout
[  263.239051][T10616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  263.262001][T10616] batman_adv: batadv0: Adding interface: batadv_slave_1
[  263.269870][T10616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.301610][T10616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  263.326200][ T5852] Bluetooth: hci3: command tx timeout
[  263.351196][T10723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1127'.
[  263.360526][T10723] ksmbd: Unknown IPC event: 1, ignore.
[  263.514402][T10728] netlink: 'syz.1.1128': attribute type 29 has an invalid length.
[  263.546178][T10616] hsr_slave_0: entered promiscuous mode
[  263.560539][T10616] hsr_slave_1: entered promiscuous mode
[  263.568673][T10616] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  263.576940][T10616] Cannot create hsr debugfs directory
[  263.592915][T10729] netlink: 'syz.1.1128': attribute type 29 has an invalid length.
[  263.604972][T10730] netlink: 'syz.1.1128': attribute type 29 has an invalid length.
[  263.629227][T10730] netlink: 'syz.1.1128': attribute type 29 has an invalid length.
[  263.639381][T10599] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  263.763084][T10599] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  263.838912][T10599] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  263.871907][T10599] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  264.281984][T10671] chnl_net:caif_netlink_parms(): no params data found
[  264.366323][ T5852] Bluetooth: hci4: command tx timeout
[  264.662476][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.763966][T10671] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.772714][T10671] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.780255][T10671] bridge_slave_0: entered allmulticast mode
[  264.787619][T10671] bridge_slave_0: entered promiscuous mode
[  264.795250][T10671] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.802505][T10671] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.809980][T10671] bridge_slave_1: entered allmulticast mode
[  264.818042][T10671] bridge_slave_1: entered promiscuous mode
[  264.837929][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.983480][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.128159][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.181002][T10671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  265.248926][T10671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  265.406592][ T5852] Bluetooth: hci3: command tx timeout
[  265.434122][T10779] team0: Device vti0 is up. Set it down before adding it as a team port
[  265.461582][T10671] team0: Port device team_slave_0 added
[  265.473620][T10671] team0: Port device team_slave_1 added
[  265.593708][T10671] batman_adv: batadv0: Adding interface: batadv_slave_0
[  265.601628][T10671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.633023][T10671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  265.743804][T10671] batman_adv: batadv0: Adding interface: batadv_slave_1
[  265.751996][T10671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.779055][T10671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  265.844206][T10616] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  265.868126][T10599] 8021q: adding VLAN 0 to HW filter on device bond0
[  265.899512][T10671] hsr_slave_0: entered promiscuous mode
[  265.905978][T10671] hsr_slave_1: entered promiscuous mode
[  265.912153][T10671] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  265.919987][T10671] Cannot create hsr debugfs directory
[  265.925810][T10616] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  265.940514][T10789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1142'.
[  266.033238][T10616] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  266.082897][T10616] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  266.105376][   T13] bridge_slave_1: left allmulticast mode
[  266.113543][   T13] bridge_slave_1: left promiscuous mode
[  266.190572][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.232708][   T13] bridge_slave_0: left allmulticast mode
[  266.246245][   T13] bridge_slave_0: left promiscuous mode
[  266.252101][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.466490][ T5852] Bluetooth: hci4: command tx timeout
[  266.631482][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  266.649677][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  266.668630][   T13] bond0 (unregistering): Released all slaves
[  266.832350][T10599] 8021q: adding VLAN 0 to HW filter on device team0
[  267.090535][T10474] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.097843][T10474] bridge0: port 1(bridge_slave_0) entered forwarding state
[  267.185409][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.192664][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  267.687472][   T13] hsr_slave_0: left promiscuous mode
[  267.697243][   T13] hsr_slave_1: left promiscuous mode
[  267.703382][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  267.711122][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  267.719519][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  267.729099][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  267.754471][   T13] veth1_macvtap: left promiscuous mode
[  267.760466][   T13] veth0_macvtap: left promiscuous mode
[  267.770654][   T13] veth1_vlan: left promiscuous mode
[  267.776348][   T13] veth0_vlan: left promiscuous mode
[  268.338081][   T13] team0 (unregistering): Port device team_slave_1 removed
[  268.379583][   T13] team0 (unregistering): Port device team_slave_0 removed
[  268.526977][ T5852] Bluetooth: hci4: command tx timeout
[  269.010718][T10616] 8021q: adding VLAN 0 to HW filter on device bond0
[  269.164722][T10616] 8021q: adding VLAN 0 to HW filter on device team0
[  269.214798][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.222198][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  269.278624][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.285851][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  269.325053][T10599] 8021q: adding VLAN 0 to HW filter on device batadv0
[  269.480298][T10616] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  269.506479][T10616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  269.637864][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1155'.
[  269.723856][T10599] veth0_vlan: entered promiscuous mode
[  269.765390][T10671] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  269.795737][T10599] veth1_vlan: entered promiscuous mode
[  269.834730][T10671] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  269.879595][T10671] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  269.908311][T10671] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  270.027643][T10616] 8021q: adding VLAN 0 to HW filter on device batadv0
[  270.043615][T10599] veth0_macvtap: entered promiscuous mode
[  270.072356][T10599] veth1_macvtap: entered promiscuous mode
[  270.163276][T10599] batman_adv: batadv0: Interface activated: batadv_slave_0
[  270.195303][T10599] batman_adv: batadv0: Interface activated: batadv_slave_1
[  270.240672][T10599] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  270.258554][T10599] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  270.269000][T10599] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  270.277962][T10599] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  270.391288][T10671] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.488502][T10671] 8021q: adding VLAN 0 to HW filter on device team0
[  270.502975][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.524804][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.545511][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.552705][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  270.639004][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.646258][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  270.667284][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.680904][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.771290][T10671] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  271.067817][T10616] veth0_vlan: entered promiscuous mode
[  271.389386][T10478] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.444188][T10616] veth1_vlan: entered promiscuous mode
[  271.506347][T10478] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.585044][T10671] 8021q: adding VLAN 0 to HW filter on device batadv0
[  271.641317][T10616] veth0_macvtap: entered promiscuous mode
[  271.691924][T10478] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.720714][T10616] veth1_macvtap: entered promiscuous mode
[  271.771566][T10671] veth0_vlan: entered promiscuous mode
[  271.795337][T10616] batman_adv: batadv0: Interface activated: batadv_slave_0
[  271.840961][T10478] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.877706][T10616] batman_adv: batadv0: Interface activated: batadv_slave_1
[  271.905739][T10616] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  271.920288][T10616] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  271.930077][T10616] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  271.939393][T10616] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  271.951816][T10671] veth1_vlan: entered promiscuous mode
[  272.085151][T10671] veth0_macvtap: entered promiscuous mode
[  272.165289][T10671] veth1_macvtap: entered promiscuous mode
[  272.205937][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.215278][T10671] batman_adv: batadv0: Interface activated: batadv_slave_0
[  272.229178][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.245816][T10671] batman_adv: batadv0: Interface activated: batadv_slave_1
[  272.270044][T10478] bridge_slave_1: left allmulticast mode
[  272.275839][T10478] bridge_slave_1: left promiscuous mode
[  272.282467][T10478] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.291609][T10478] bridge_slave_0: left allmulticast mode
[  272.298139][T10478] bridge_slave_0: left promiscuous mode
[  272.304234][T10478] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.763328][T10478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  272.781451][T10478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  272.794034][T10478] bond0 (unregistering): Released all slaves
[  272.840141][T10671] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  272.855770][T10671] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  272.875125][T10671] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  272.900323][T10671] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  272.948511][ T5169] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  272.960990][ T5169] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  272.969853][ T5169] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  272.991891][ T5169] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  273.000015][ T5169] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  273.018825][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.035209][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.080009][T10930] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1169'.
[  273.433630][T10937] FAULT_INJECTION: forcing a failure.
[  273.433630][T10937] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  273.451243][T10937] CPU: 0 UID: 0 PID: 10937 Comm: syz.2.1172 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) 
[  273.451272][T10937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  273.451283][T10937] Call Trace:
[  273.451291][T10937]  <TASK>
[  273.451300][T10937]  dump_stack_lvl+0x189/0x250
[  273.451329][T10937]  ? __pfx____ratelimit+0x10/0x10
[  273.451359][T10937]  ? __pfx_dump_stack_lvl+0x10/0x10
[  273.451382][T10937]  ? __pfx__printk+0x10/0x10
[  273.451409][T10937]  ? __might_fault+0xb0/0x130
[  273.451447][T10937]  should_fail_ex+0x414/0x560
[  273.451481][T10937]  _copy_from_user+0x2d/0xb0
[  273.451505][T10937]  ___sys_sendmsg+0x158/0x2a0
[  273.451535][T10937]  ? __pfx____sys_sendmsg+0x10/0x10
[  273.451604][T10937]  ? __fget_files+0x2a/0x420
[  273.451629][T10937]  ? __fget_files+0x3a0/0x420
[  273.451667][T10937]  __x64_sys_sendmsg+0x19b/0x260
[  273.451695][T10937]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  273.451733][T10937]  ? __pfx_ksys_write+0x10/0x10
[  273.451753][T10937]  ? rcu_is_watching+0x15/0xb0
[  273.451782][T10937]  ? do_syscall_64+0xbe/0x3b0
[  273.451806][T10937]  do_syscall_64+0xfa/0x3b0
[  273.451823][T10937]  ? lockdep_hardirqs_on+0x9c/0x150
[  273.451851][T10937]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.451870][T10937]  ? clear_bhb_loop+0x60/0xb0
[  273.451893][T10937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.451911][T10937] RIP: 0033:0x7f618218e929
[  273.451929][T10937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  273.451945][T10937] RSP: 002b:00007f6182f47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  273.451967][T10937] RAX: ffffffffffffffda RBX: 00007f61823b5fa0 RCX: 00007f618218e929
[  273.451981][T10937] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005
[  273.451993][T10937] RBP: 00007f6182f47090 R08: 0000000000000000 R09: 0000000000000000
[  273.452005][T10937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  273.452017][T10937] R13: 0000000000000000 R14: 00007f61823b5fa0 R15: 00007ffe79a82ef8
[  273.452049][T10937]  </TASK>
[  274.146280][T10474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.154162][T10474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.275569][T10474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.293236][T10474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.357664][T10478] hsr_slave_0: left promiscuous mode
[  274.364677][T10478] hsr_slave_1: left promiscuous mode
[  274.390128][T10478] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  274.397734][T10478] batman_adv: batadv0: Removing interface: batadv_slave_0
[  274.405774][T10478] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  274.413335][T10478] batman_adv: batadv0: Removing interface: batadv_slave_1
[  274.455766][T10478] veth1_macvtap: left promiscuous mode
[  274.464833][T10478] veth0_macvtap: left promiscuous mode
[  274.470824][T10478] veth1_vlan: left promiscuous mode
[  274.476257][T10478] veth0_vlan: left promiscuous mode
[  274.774244][T10948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1176'.
[  274.798588][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1175'.
[  274.942260][T10956] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1177'.
[  274.959979][T10956] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1177'.
[  275.088524][ T5169] Bluetooth: hci0: command tx timeout
[  275.234413][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  275.252291][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  275.268232][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  275.299987][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  275.321326][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  275.363550][T10967] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1178'.
[  275.399433][T10478] team0 (unregistering): Port device team_slave_1 removed
[  275.442455][T10478] team0 (unregistering): Port device team_slave_0 removed
[  276.172351][T10970] geneve2: entered promiscuous mode
[  276.179401][T10970] geneve2: entered allmulticast mode
[  276.195933][T10925] chnl_net:caif_netlink_parms(): no params data found
[  276.544233][T10925] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.552654][T10925] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.562847][T10925] bridge_slave_0: entered allmulticast mode
[  276.570261][T10925] bridge_slave_0: entered promiscuous mode
[  276.583074][T10925] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.590605][T10925] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.597848][T10925] bridge_slave_1: entered allmulticast mode
[  276.605532][T10925] bridge_slave_1: entered promiscuous mode
[  276.668880][T10925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  276.681809][T10925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  276.742877][T10925] team0: Port device team_slave_0 added
[  276.752387][T10925] team0: Port device team_slave_1 added
[  276.822160][T10478] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.840000][T10925] batman_adv: batadv0: Adding interface: batadv_slave_0
[  276.848208][T10925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.875980][T10925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  276.904887][T10478] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.931327][T10925] batman_adv: batadv0: Adding interface: batadv_slave_1
[  276.939623][T10925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.965658][T10925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  277.021140][T10478] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.110895][T10478] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.167987][T10925] hsr_slave_0: entered promiscuous mode
[  277.174845][T10925] hsr_slave_1: entered promiscuous mode
[  277.180634][ T5169] Bluetooth: hci0: command tx timeout
[  277.266749][T10984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1182'.
[  277.372359][T10963] chnl_net:caif_netlink_parms(): no params data found
[  277.406297][ T5169] Bluetooth: hci3: command tx timeout
[  277.814950][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  277.824601][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  277.833899][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  277.848792][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  277.862300][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  277.934937][T10478] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.970976][T10963] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.979037][T10963] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.992486][T10963] bridge_slave_0: entered allmulticast mode
[  278.005612][T10963] bridge_slave_0: entered promiscuous mode
[  278.044094][T10478] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.122086][T10963] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.132005][T10963] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.141089][T10963] bridge_slave_1: entered allmulticast mode
[  278.152052][T10963] bridge_slave_1: entered promiscuous mode
[  278.178122][T10478] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.339655][T10478] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.439408][T10963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  278.489110][T10963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  278.709021][T10963] team0: Port device team_slave_0 added
[  278.782203][T10963] team0: Port device team_slave_1 added
[  278.894246][T10963] batman_adv: batadv0: Adding interface: batadv_slave_0
[  278.901792][T10963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.929383][T10963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  278.967773][T10925] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  278.979708][T10925] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  278.990611][T10963] batman_adv: batadv0: Adding interface: batadv_slave_1
[  278.998136][T10963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  279.032256][T10963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  279.076327][T10925] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  279.127253][T10925] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  279.246165][ T5169] Bluetooth: hci0: command tx timeout
[  279.254379][T10963] hsr_slave_0: entered promiscuous mode
[  279.265440][T10963] hsr_slave_1: entered promiscuous mode
[  279.272244][T10963] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  279.282974][T10963] Cannot create hsr debugfs directory
[  279.312296][T10478] bridge_slave_1: left allmulticast mode
[  279.325244][T10478] bridge_slave_1: left promiscuous mode
[  279.343029][T10478] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.354019][T10478] bridge_slave_0: left allmulticast mode
[  279.363333][T10478] bridge_slave_0: left promiscuous mode
[  279.370840][T10478] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.385925][T10478] bridge_slave_1: left allmulticast mode
[  279.392188][T10478] bridge_slave_1: left promiscuous mode
[  279.401160][T10478] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.411635][T10478] bridge_slave_0: left allmulticast mode
[  279.420276][T10478] bridge_slave_0: left promiscuous mode
[  279.425974][T10478] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.493338][ T5169] Bluetooth: hci3: command tx timeout
[  279.886951][ T5169] Bluetooth: hci4: command tx timeout
[  279.953669][T10478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  279.964734][T10478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  279.978663][T10478] bond0 (unregistering): Released all slaves
[  280.267075][T10478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  280.281180][T10478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  280.292012][T10478] bond0 (unregistering): Released all slaves
[  280.474344][T11051] netlink: 174880 bytes leftover after parsing attributes in process `syz.1.1196'.
[  280.522417][T11054] netlink: 'syz.2.1197': attribute type 39 has an invalid length.
[  280.606280][T11051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1196'.
[  280.709326][T11060] netlink: 'syz.1.1198': attribute type 10 has an invalid length.
[  281.083646][T10997] chnl_net:caif_netlink_parms(): no params data found
[  281.228121][T11081] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1203'.
[  281.242424][T11081] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1203'.
[  281.255455][T10925] 8021q: adding VLAN 0 to HW filter on device bond0
[  281.264819][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1203'.
[  281.286167][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1203'.
[  281.303769][T11081] netlink: 'syz.2.1203': attribute type 10 has an invalid length.
[  281.327082][ T5169] Bluetooth: hci0: command tx timeout
[  281.566444][ T5169] Bluetooth: hci3: command tx timeout
[  281.701803][T10997] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.723614][T10997] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.742580][T10997] bridge_slave_0: entered allmulticast mode
[  281.768331][T10997] bridge_slave_0: entered promiscuous mode
[  281.794551][T10925] 8021q: adding VLAN 0 to HW filter on device team0
[  281.821991][T10997] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.855132][T10997] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.866753][T10997] bridge_slave_1: entered allmulticast mode
[  281.893899][T10997] bridge_slave_1: entered promiscuous mode
[  281.909792][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.917032][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  281.966895][ T5169] Bluetooth: hci4: command tx timeout
[  282.062562][T11097] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  282.099033][T10997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  282.111340][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.118576][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  282.168371][T10478] hsr_slave_0: left promiscuous mode
[  282.174689][T10478] hsr_slave_1: left promiscuous mode
[  282.181663][T10478] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  282.190019][T10478] batman_adv: batadv0: Removing interface: batadv_slave_0
[  282.198231][T10478] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  282.205661][T10478] batman_adv: batadv0: Removing interface: batadv_slave_1
[  282.222455][T10478] hsr_slave_0: left promiscuous mode
[  282.229846][T10478] hsr_slave_1: left promiscuous mode
[  282.235615][T10478] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  282.244961][T10478] batman_adv: batadv0: Removing interface: batadv_slave_0
[  282.253557][T10478] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  282.261087][T10478] batman_adv: batadv0: Removing interface: batadv_slave_1
[  282.291544][T10478] veth1_macvtap: left promiscuous mode
[  282.297901][T10478] veth0_macvtap: left promiscuous mode
[  282.303555][T10478] veth1_vlan: left promiscuous mode
[  282.308892][T10478] veth0_vlan: left promiscuous mode
[  282.314938][T10478] veth1_macvtap: left promiscuous mode
[  282.320619][T10478] veth0_macvtap: left promiscuous mode
[  282.326409][T10478] veth1_vlan: left promiscuous mode
[  282.331748][T10478] veth0_vlan: left promiscuous mode
[  282.874312][T10478] team0 (unregistering): Port device team_slave_1 removed
[  282.914866][T10478] team0 (unregistering): Port device team_slave_0 removed
[  283.622079][T10478] team0 (unregistering): Port device team_slave_1 removed
[  283.646273][ T5169] Bluetooth: hci3: command tx timeout
[  283.670939][T10478] team0 (unregistering): Port device team_slave_0 removed
[  284.048771][ T5169] Bluetooth: hci4: command tx timeout
[  284.072793][T10997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  284.202850][T10997] team0: Port device team_slave_0 added
[  284.227874][T10997] team0: Port device team_slave_1 added
[  284.254568][T10963] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  284.274417][T10963] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  284.309934][T11105] syzkaller0: entered promiscuous mode
[  284.316892][T11105] syzkaller0: entered allmulticast mode
[  284.349961][T10963] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  284.413483][T10997] batman_adv: batadv0: Adding interface: batadv_slave_0
[  284.420816][T10997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  284.449391][T10997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  284.463440][T10963] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  284.502011][T10997] batman_adv: batadv0: Adding interface: batadv_slave_1
[  284.514281][T10997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  284.541455][T10997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  284.639725][T11117] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1210'.
[  284.672496][T10997] hsr_slave_0: entered promiscuous mode
[  284.679794][T10997] hsr_slave_1: entered promiscuous mode
[  284.696452][T10997] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  284.704622][T10997] Cannot create hsr debugfs directory
[  285.352643][T10963] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.505078][T11144] bond2: (slave veth7): Releasing active interface
[  285.576346][T11151] sock: sock_timestamping_bind_phc: sock not bind to device
[  285.611367][T10963] 8021q: adding VLAN 0 to HW filter on device team0
[  285.621719][T10925] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.659149][T11147] team0: Mode changed to "activebackup"
[  285.713475][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.720714][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.744426][T11155] pimreg: entered allmulticast mode
[  285.763938][T10478] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.771143][T10478] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.811993][T11155] pimreg: left allmulticast mode
[  286.033162][T11163] sctp: [Deprecated]: syz.1.1222 (pid 11163) Use of int in max_burst socket option.
[  286.033162][T11163] Use struct sctp_assoc_value instead
[  286.043464][T11166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1223'.
[  286.085218][T10925] veth0_vlan: entered promiscuous mode
[  286.126316][ T5169] Bluetooth: hci4: command tx timeout
[  286.149992][T10997] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  286.188037][T10997] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  286.210834][T10997] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  286.231029][T10997] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  286.302546][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1225'.
[  286.302595][T10925] veth1_vlan: entered promiscuous mode
[  286.454196][T10925] veth0_macvtap: entered promiscuous mode
[  286.513048][T10925] veth1_macvtap: entered promiscuous mode
[  286.569398][T11188] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1227'.
[  286.612860][T10997] 8021q: adding VLAN 0 to HW filter on device bond0
[  286.690504][T10925] batman_adv: batadv0: Interface activated: batadv_slave_0
[  286.745937][T11193] netlink: 'syz.2.1229': attribute type 33 has an invalid length.
[  286.748943][T10925] batman_adv: batadv0: Interface activated: batadv_slave_1
[  286.774099][T10925] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  286.783184][T10925] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  286.804771][T10925] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  286.826390][T10925] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  286.864464][T10997] 8021q: adding VLAN 0 to HW filter on device team0
[  286.943512][T10478] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.950782][T10478] bridge0: port 1(bridge_slave_0) entered forwarding state
[  286.982394][T10963] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.014776][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1232'.
[  287.046104][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.053345][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  287.075692][T11199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1232'.
[  287.278588][T11210] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1234'.
[  287.299300][ T3589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.339479][ T3589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.417273][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.445435][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.661187][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1236'.
[  287.713788][T11221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1237'.
[  288.033103][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.065138][T10963] veth0_vlan: entered promiscuous mode
[  288.113020][T10997] 8021q: adding VLAN 0 to HW filter on device batadv0
[  288.202498][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.243489][T10963] veth1_vlan: entered promiscuous mode
[  288.283770][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.364697][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.400414][T10963] veth0_macvtap: entered promiscuous mode
[  288.415495][T10997] veth0_vlan: entered promiscuous mode
[  288.424949][T10963] veth1_macvtap: entered promiscuous mode
[  288.443266][T10997] veth1_vlan: entered promiscuous mode
[  288.499395][T10963] batman_adv: batadv0: Interface activated: batadv_slave_0
[  288.567213][T10963] batman_adv: batadv0: Interface activated: batadv_slave_1
[  288.583826][T10997] veth0_macvtap: entered promiscuous mode
[  288.605786][T10997] veth1_macvtap: entered promiscuous mode
[  288.621430][   T12] bridge_slave_1: left allmulticast mode
[  288.627607][   T12] bridge_slave_1: left promiscuous mode
[  288.633461][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.644522][   T12] bridge_slave_0: left allmulticast mode
[  288.650422][   T12] bridge_slave_0: left promiscuous mode
[  288.659728][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.035196][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  289.046648][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  289.057684][   T12] bond0 (unregistering): Released all slaves
[  289.075443][T10963] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.084658][T10963] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.095569][T10963] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.104476][T10963] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  289.265380][T10997] batman_adv: batadv0: Interface activated: batadv_slave_0
[  289.305848][T10997] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.360283][T10997] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.380858][T10997] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.396248][T10997] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.406981][T10997] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  289.740086][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.775561][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.802410][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  289.815420][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  289.824300][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  289.834213][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  289.834891][T11245] bond2: entered promiscuous mode
[  289.853432][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  289.854607][T11245] bond2: entered allmulticast mode
[  289.883781][T11245] 8021q: adding VLAN 0 to HW filter on device bond2
[  289.981552][T11245] bond2 (unregistering): Released all slaves
[  290.075306][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.108370][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.265692][ T3589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.303392][ T3589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.415311][T10474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.427337][T10474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.770833][   T12] hsr_slave_0: left promiscuous mode
[  290.809833][   T12] hsr_slave_1: left promiscuous mode
[  290.826354][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  290.839050][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  290.869152][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  290.886297][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  290.938656][   T12] veth1_macvtap: left promiscuous mode
[  290.944258][   T12] veth0_macvtap: left promiscuous mode
[  290.955549][   T12] veth1_vlan: left promiscuous mode
[  290.963274][   T12] veth0_vlan: left promiscuous mode
[  291.502124][   T12] team0 (unregistering): Port device team_slave_1 removed
[  291.541734][   T12] team0 (unregistering): Port device team_slave_0 removed
[  291.900253][ T5852] Bluetooth: hci0: command tx timeout
[  291.956721][T11274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1251'.
[  292.222187][ T5169] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  292.235719][ T5169] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  292.244325][ T5169] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  292.252872][ T5169] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  292.261071][ T5169] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  292.591700][T11283] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  292.784125][T11248] chnl_net:caif_netlink_parms(): no params data found
[  292.926758][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.005237][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.067722][T11248] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.075085][T11248] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.083029][T11248] bridge_slave_0: entered allmulticast mode
[  293.092044][T11248] bridge_slave_0: entered promiscuous mode
[  293.105571][T11248] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.112925][T11248] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.120407][T11248] bridge_slave_1: entered allmulticast mode
[  293.128218][T11248] bridge_slave_1: entered promiscuous mode
[  293.148259][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.203783][T11248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  293.215460][T11248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  293.263658][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.317273][T11248] team0: Port device team_slave_0 added
[  293.329197][T11248] team0: Port device team_slave_1 added
[  293.412872][T11248] batman_adv: batadv0: Adding interface: batadv_slave_0
[  293.420113][T11248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.451836][T11248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  293.464828][T11248] batman_adv: batadv0: Adding interface: batadv_slave_1
[  293.472105][T11248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.499369][T11248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  293.553095][T11276] chnl_net:caif_netlink_parms(): no params data found
[  293.784853][T11299] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1254'.
[  293.794894][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1256'.
[  293.823614][T11298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1256'.
[  293.880441][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.954453][T11248] hsr_slave_0: entered promiscuous mode
[  293.969369][ T5852] Bluetooth: hci0: command tx timeout
[  293.981570][T11248] hsr_slave_1: entered promiscuous mode
[  294.084315][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.160389][T11302] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1256'.
[  294.194652][ T5169] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  294.205530][ T5169] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  294.219515][ T5169] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  294.236223][ T5169] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  294.237330][T11276] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.251506][ T5169] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  294.264770][T11276] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.273278][T11276] bridge_slave_0: entered allmulticast mode
[  294.295786][T11276] bridge_slave_0: entered promiscuous mode
[  294.341086][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.366636][ T5852] Bluetooth: hci3: command tx timeout
[  294.378018][T11276] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.385240][T11276] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.413049][T11276] bridge_slave_1: entered allmulticast mode
[  294.438870][T11276] bridge_slave_1: entered promiscuous mode
[  294.689471][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.719524][T11276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  294.773430][T11276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  294.815221][T11329] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1262'.
[  294.961262][T11333] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1263'.
[  294.978653][T11276] team0: Port device team_slave_0 added
[  295.001155][T11276] team0: Port device team_slave_1 added
[  295.221294][T11276] batman_adv: batadv0: Adding interface: batadv_slave_0
[  295.238156][T11276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.281266][T11276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  295.311237][T11276] batman_adv: batadv0: Adding interface: batadv_slave_1
[  295.328781][T11276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.357146][T11276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.622079][T11346] can: request_module (can-proto-3) failed.
[  295.699310][T11276] hsr_slave_0: entered promiscuous mode
[  295.713615][T11276] hsr_slave_1: entered promiscuous mode
[  295.720363][T11276] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  295.728632][T11276] Cannot create hsr debugfs directory
[  295.924767][   T12] bridge_slave_1: left allmulticast mode
[  295.936156][   T12] bridge_slave_1: left promiscuous mode
[  295.952195][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.970221][   T12] bridge_slave_0: left allmulticast mode
[  295.993743][   T12] bridge_slave_0: left promiscuous mode
[  296.006372][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.029790][   T12] bridge_slave_1: left allmulticast mode
[  296.035593][   T12] bridge_slave_1: left promiscuous mode
[  296.046661][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.049920][ T5852] Bluetooth: hci0: command tx timeout
[  296.084800][   T12] bridge_slave_0: left allmulticast mode
[  296.093404][   T12] bridge_slave_0: left promiscuous mode
[  296.100575][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.141649][T11359] netlink: 'syz.2.1269': attribute type 10 has an invalid length.
[  296.366694][ T5852] Bluetooth: hci4: command tx timeout
[  296.446238][ T5852] Bluetooth: hci3: command tx timeout
[  296.518710][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  296.530853][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  296.541962][   T12] bond0 (unregistering): Released all slaves
[  296.842039][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  296.853974][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  296.864193][   T12] bond0 (unregistering): Released all slaves
[  297.333831][T11307] chnl_net:caif_netlink_parms(): no params data found
[  297.709192][T11383] netlink: 'syz.2.1276': attribute type 1 has an invalid length.
[  297.735916][T11383] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1276'.
[  297.795506][T11400] pim6reg1: entered promiscuous mode
[  297.812073][T11400] pim6reg1: entered allmulticast mode
[  297.919424][T11307] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.927224][T11307] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.934783][T11307] bridge_slave_0: entered allmulticast mode
[  297.958308][T11307] bridge_slave_0: entered promiscuous mode
[  298.049437][T11307] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.064759][T11307] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.075658][T11307] bridge_slave_1: entered allmulticast mode
[  298.098253][T11307] bridge_slave_1: entered promiscuous mode
[  298.127212][ T5852] Bluetooth: hci0: command tx timeout
[  298.164641][T11412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1281'.
[  298.204254][T11248] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  298.328697][T11248] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  298.390007][T11307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  298.406700][T11248] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  298.436978][T11248] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  298.446842][ T5852] Bluetooth: hci4: command tx timeout
[  298.526151][ T5852] Bluetooth: hci3: command tx timeout
[  298.598990][T11307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  299.020935][   T12] hsr_slave_0: left promiscuous mode
[  299.036262][   T12] hsr_slave_1: left promiscuous mode
[  299.042540][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  299.050730][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  299.061691][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  299.069378][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  299.088646][   T12] hsr_slave_0: left promiscuous mode
[  299.096309][   T12] hsr_slave_1: left promiscuous mode
[  299.103165][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  299.111506][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  299.120587][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  299.132473][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  299.145894][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1288'.
[  299.164108][T11442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1288'.
[  299.194165][   T12] veth1_macvtap: left promiscuous mode
[  299.209932][   T12] veth0_macvtap: left promiscuous mode
[  299.215658][   T12] veth1_vlan: left promiscuous mode
[  299.222240][   T12] veth0_vlan: left promiscuous mode
[  299.235455][   T12] veth1_macvtap: left promiscuous mode
[  299.241815][   T12] veth0_macvtap: left promiscuous mode
[  299.248806][   T12] veth1_vlan: left promiscuous mode
[  299.254211][   T12] veth0_vlan: left promiscuous mode
[  299.502250][T11451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1291'.
[  299.904892][   T12] team0 (unregistering): Port device team_slave_1 removed
[  299.958872][   T12] team0 (unregistering): Port device team_slave_0 removed
[  300.536505][ T5852] Bluetooth: hci4: command tx timeout
[  300.606446][ T5852] Bluetooth: hci3: command tx timeout
[  300.704396][   T12] team0 (unregistering): Port device team_slave_1 removed
[  300.744973][   T12] team0 (unregistering): Port device team_slave_0 removed
[  301.155331][T11307] team0: Port device team_slave_0 added
[  301.170359][T11307] team0: Port device team_slave_1 added
[  301.207324][T11441] 8021q: adding VLAN 0 to HW filter on device bond0
[  301.267121][T11451] veth9: entered promiscuous mode
[  301.272225][T11451] veth9: entered allmulticast mode
[  301.419134][T11307] batman_adv: batadv0: Adding interface: batadv_slave_0
[  301.425136][T11457] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  301.427420][T11307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  301.464401][T11307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  301.531819][T11307] batman_adv: batadv0: Adding interface: batadv_slave_1
[  301.554141][T11307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  301.593020][T11307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  301.669249][T11461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1296'.
[  301.812785][T11307] hsr_slave_0: entered promiscuous mode
[  301.822557][T11307] hsr_slave_1: entered promiscuous mode
[  301.834853][T11307] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  301.843295][T11307] Cannot create hsr debugfs directory
[  301.872284][T11468] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1297'.
[  301.971234][T11466] syzkaller1: entered promiscuous mode
[  301.977084][T11466] syzkaller1: entered allmulticast mode
[  302.059354][T11248] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.109413][T11276] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  302.211768][T11276] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  302.238358][T11479] vlan4: entered promiscuous mode
[  302.243562][T11479] bridge0: entered promiscuous mode
[  302.283169][T11276] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  302.322032][T11276] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  302.444640][T11248] 8021q: adding VLAN 0 to HW filter on device team0
[  302.510463][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.517676][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  302.553864][T10478] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.561099][T10478] bridge0: port 2(bridge_slave_1) entered forwarding state
[  302.606534][ T5852] Bluetooth: hci4: command tx timeout
[  302.685969][T11248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  302.864710][T11276] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.895543][T11307] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  302.911101][T11500] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1303'.
[  302.916779][T11307] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  302.955580][T11307] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  302.979800][T11276] 8021q: adding VLAN 0 to HW filter on device team0
[  302.988493][T11307] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  303.023010][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.030231][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  303.086698][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.093960][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  303.180844][T11248] 8021q: adding VLAN 0 to HW filter on device batadv0
[  303.253959][T11276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  303.369540][T11248] veth0_vlan: entered promiscuous mode
[  303.421719][T11248] veth1_vlan: entered promiscuous mode
[  303.572391][T11307] 8021q: adding VLAN 0 to HW filter on device bond0
[  303.634414][T11276] 8021q: adding VLAN 0 to HW filter on device batadv0
[  303.644347][T11248] veth0_macvtap: entered promiscuous mode
[  303.665750][T11248] veth1_macvtap: entered promiscuous mode
[  303.677906][T11307] 8021q: adding VLAN 0 to HW filter on device team0
[  303.734952][ T3589] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.742231][ T3589] bridge0: port 1(bridge_slave_0) entered forwarding state
[  303.794025][T11248] batman_adv: batadv0: Interface activated: batadv_slave_0
[  303.813635][ T3589] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.820908][ T3589] bridge0: port 2(bridge_slave_1) entered forwarding state
[  303.862421][T11248] batman_adv: batadv0: Interface activated: batadv_slave_1
[  303.907028][T11248] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  303.915894][T11248] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  303.955406][T11248] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  303.964390][T11248] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  304.013941][T11307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  304.291886][ T3589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.336215][ T3589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.400608][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1312'.
[  304.422366][T11543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1312'.
[  304.439581][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.459506][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.584962][T11548] netlink: 'syz.1.1313': attribute type 2 has an invalid length.
[  304.688017][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1314'.
[  304.701040][T11551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1314'.
[  304.938413][T11307] 8021q: adding VLAN 0 to HW filter on device batadv0
[  305.019043][T11276] veth0_vlan: entered promiscuous mode
[  305.093241][T11276] veth1_vlan: entered promiscuous mode
[  305.231594][T11276] veth0_macvtap: entered promiscuous mode
[  305.255912][T11565] IPVS: length: 246 != 24
[  305.310898][T11276] veth1_macvtap: entered promiscuous mode
[  305.428182][T10478] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.462614][T11307] veth0_vlan: entered promiscuous mode
[  305.502175][T11307] veth1_vlan: entered promiscuous mode
[  305.537334][T10478] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.557598][T11276] batman_adv: batadv0: Interface activated: batadv_slave_0
[  305.582555][T11276] batman_adv: batadv0: Interface activated: batadv_slave_1
[  305.611484][T11276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  305.623379][T11276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  305.632888][T11276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  305.641764][T11276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  305.678068][T10478] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.709935][T11307] veth0_macvtap: entered promiscuous mode
[  305.775111][T10478] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.802921][T11307] veth1_macvtap: entered promiscuous mode
[  305.834950][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.857929][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.872817][T11307] batman_adv: batadv0: Interface activated: batadv_slave_0
[  305.909246][ T3589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.911150][T11307] batman_adv: batadv0: Interface activated: batadv_slave_1
[  305.925186][ T3589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.973153][T11307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  305.983493][T11307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  305.994619][T11307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.003949][T11307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.225008][T10478] bridge_slave_1: left allmulticast mode
[  306.231661][T10478] bridge_slave_1: left promiscuous mode
[  306.239911][T10478] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.249826][T10478] bridge_slave_0: left allmulticast mode
[  306.255479][T10478] bridge_slave_0: left promiscuous mode
[  306.261588][T10478] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.877748][T10478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  306.890040][T10478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  306.901154][T10478] bond0 (unregistering): Released all slaves
[  306.930422][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.951238][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.085542][ T5169] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  307.103908][ T5169] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  307.113387][ T5169] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  307.115595][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.129158][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.133183][ T5169] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  307.152035][ T5169] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  307.544037][T10478] hsr_slave_0: left promiscuous mode
[  307.566356][T10478] hsr_slave_1: left promiscuous mode
[  307.574437][T10478] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  307.620187][T10478] batman_adv: batadv0: Removing interface: batadv_slave_0
[  307.659996][T10478] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  307.676293][T10478] batman_adv: batadv0: Removing interface: batadv_slave_1
[  307.748217][T10478] veth1_macvtap: left promiscuous mode
[  307.753846][T10478] veth0_macvtap: left promiscuous mode
[  307.774262][T10478] veth1_vlan: left promiscuous mode
[  307.794369][T10478] veth0_vlan: left promiscuous mode
[  308.256719][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  308.270447][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  308.292087][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  308.307247][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  308.320116][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  308.599218][T10478] team0 (unregistering): Port device team_slave_1 removed
[  308.639653][T10478] team0 (unregistering): Port device team_slave_0 removed
[  309.253026][ T5852] Bluetooth: hci0: command tx timeout
[  309.368808][ T5169] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  309.388280][ T5169] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  309.398737][ T5169] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  309.414609][ T5169] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  309.424114][ T5169] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  309.447758][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1324'.
[  309.688136][T11610] nbd: couldn't find a device at index -373156329
[  310.140302][T10478] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.239673][T11575] chnl_net:caif_netlink_parms(): no params data found
[  310.335247][T10478] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.347148][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1330'.
[  310.374954][ T5852] Bluetooth: hci3: command tx timeout
[  310.528507][T10478] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.645232][T10478] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.690178][T11575] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.697972][T11575] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.705733][T11575] bridge_slave_0: entered allmulticast mode
[  310.719609][T11575] bridge_slave_0: entered promiscuous mode
[  310.801919][T11575] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.829219][T11575] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.847032][T11575] bridge_slave_1: entered allmulticast mode
[  310.855121][T11575] bridge_slave_1: entered promiscuous mode
[  311.028209][T11575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  311.080848][T11575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  311.119875][T11589] chnl_net:caif_netlink_parms(): no params data found
[  311.326321][ T5852] Bluetooth: hci0: command tx timeout
[  311.331977][T11575] team0: Port device team_slave_0 added
[  311.449998][T11575] team0: Port device team_slave_1 added
[  311.487312][ T5852] Bluetooth: hci4: command tx timeout
[  311.547044][T11575] batman_adv: batadv0: Adding interface: batadv_slave_0
[  311.554096][T11575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.583027][T11575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  311.695854][T11575] batman_adv: batadv0: Adding interface: batadv_slave_1
[  311.705601][T11674] netlink: 'syz.1.1342': attribute type 1 has an invalid length.
[  311.713873][T11575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.744598][T11575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  311.814382][T10478] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.906801][T11674] 8021q: adding VLAN 0 to HW filter on device bond6
[  311.950957][T11675] macvtap1: entered promiscuous mode
[  311.956564][T11675] bond6: entered promiscuous mode
[  311.961789][T11675] macvtap1: entered allmulticast mode
[  311.967487][T11675] bond6: entered allmulticast mode
[  311.973494][T11675] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  311.992750][T11678] bond6: (slave gretap1): making interface the new active one
[  312.002424][T11678] gretap1: entered promiscuous mode
[  312.011194][T11684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1344'.
[  312.012406][T11678] gretap1: entered allmulticast mode
[  312.032671][T11678] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  312.078438][T11589] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.085754][T11589] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.097715][T11589] bridge_slave_0: entered allmulticast mode
[  312.107254][T11589] bridge_slave_0: entered promiscuous mode
[  312.139500][T10478] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.252981][T11683] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1344'.
[  312.281316][T11589] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.305102][T11589] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.329704][T11589] bridge_slave_1: entered allmulticast mode
[  312.355168][T11589] bridge_slave_1: entered promiscuous mode
[  312.428681][T10478] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.447119][ T5852] Bluetooth: hci3: command tx timeout
[  312.532911][T11702] openvswitch: netlink: Multiple metadata blocks provided
[  312.540174][T11589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  312.559314][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1348'.
[  312.584915][T10478] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.622860][T11575] hsr_slave_0: entered promiscuous mode
[  312.630285][T11575] hsr_slave_1: entered promiscuous mode
[  312.639734][T11596] chnl_net:caif_netlink_parms(): no params data found
[  312.657511][T11589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  312.851268][T11589] team0: Port device team_slave_0 added
[  312.999783][T11589] team0: Port device team_slave_1 added
[  313.110854][T11719] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1353'.
[  313.208249][T11596] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.215464][T11596] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.224140][T11596] bridge_slave_0: entered allmulticast mode
[  313.243909][T11596] bridge_slave_0: entered promiscuous mode
[  313.303574][T11589] batman_adv: batadv0: Adding interface: batadv_slave_0
[  313.311472][T11589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.353034][T11589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  313.389090][T11589] batman_adv: batadv0: Adding interface: batadv_slave_1
[  313.407421][T11589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.407432][ T5852] Bluetooth: hci0: command tx timeout
[  313.407492][T11589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  313.550132][T11596] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.567536][ T5852] Bluetooth: hci4: command tx timeout
[  313.567994][T11596] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.586928][T11596] bridge_slave_1: entered allmulticast mode
[  313.594446][T11596] bridge_slave_1: entered promiscuous mode
[  313.689797][T11589] hsr_slave_0: entered promiscuous mode
[  313.697519][T11589] hsr_slave_1: entered promiscuous mode
[  313.703992][T11589] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  313.711917][T11589] Cannot create hsr debugfs directory
[  313.851773][T11596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  313.868969][T11596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  313.989582][T10478] bridge_slave_1: left allmulticast mode
[  313.995319][T10478] bridge_slave_1: left promiscuous mode
[  314.001523][T10478] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.011316][T10478] bridge_slave_0: left allmulticast mode
[  314.017375][T10478] bridge_slave_0: left promiscuous mode
[  314.023193][T10478] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.044858][T10478] bridge_slave_1: left allmulticast mode
[  314.057038][T10478] bridge_slave_1: left promiscuous mode
[  314.062879][T10478] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.088219][T10478] bridge_slave_0: left allmulticast mode
[  314.093891][T10478] bridge_slave_0: left promiscuous mode
[  314.105785][T10478] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.524516][T10478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  314.536539][T10478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  314.536573][ T5852] Bluetooth: hci3: command tx timeout
[  314.553207][T10478] bond0 (unregistering): Released all slaves
[  314.929960][T10478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  314.948004][T10478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  314.959778][T10478] bond0 (unregistering): Released all slaves
[  315.060796][T11596] team0: Port device team_slave_0 added
[  315.184716][T11596] team0: Port device team_slave_1 added
[  315.200663][T11750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1363'.
[  315.361335][T11596] batman_adv: batadv0: Adding interface: batadv_slave_0
[  315.370108][T11596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  315.425420][T11596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  315.486971][ T5852] Bluetooth: hci0: command tx timeout
[  315.526385][T11596] batman_adv: batadv0: Adding interface: batadv_slave_1
[  315.533400][T11596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  315.561103][T11596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  315.656541][ T5852] Bluetooth: hci4: command tx timeout
[  315.889764][T11770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  315.924581][T11596] hsr_slave_0: entered promiscuous mode
[  315.932940][T11596] hsr_slave_1: entered promiscuous mode
[  315.939223][T11596] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  315.947002][T11596] Cannot create hsr debugfs directory
[  316.023817][T11768] syzkaller1: entered promiscuous mode
[  316.029548][T11768] syzkaller1: entered allmulticast mode
[  316.185181][T11775] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1370'.
[  316.395156][T11782] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1372'.
[  316.442877][T11782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1372'.
[  316.471049][T11782] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1372'.
[  316.500329][T11782] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1372'.
[  316.608124][ T5852] Bluetooth: hci3: command tx timeout
[  316.685503][T11575] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  316.861870][T11575] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  316.893737][T11575] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  316.981307][T10478] hsr_slave_0: left promiscuous mode
[  316.989230][T10478] hsr_slave_1: left promiscuous mode
[  316.995092][T10478] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  317.004165][T10478] batman_adv: batadv0: Removing interface: batadv_slave_0
[  317.014019][T10478] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  317.029459][T10478] batman_adv: batadv0: Removing interface: batadv_slave_1
[  317.059761][T10478] hsr_slave_0: left promiscuous mode
[  317.070297][T10478] hsr_slave_1: left promiscuous mode
[  317.079248][T10478] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  317.094321][T10478] batman_adv: batadv0: Removing interface: batadv_slave_0
[  317.107382][T10478] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  317.114838][T10478] batman_adv: batadv0: Removing interface: batadv_slave_1
[  317.159958][T10478] veth1_macvtap: left promiscuous mode
[  317.165510][T10478] veth0_macvtap: left promiscuous mode
[  317.171690][T10478] veth1_vlan: left promiscuous mode
[  317.178601][T10478] veth0_vlan: left promiscuous mode
[  317.184944][T10478] veth1_macvtap: left promiscuous mode
[  317.190633][T10478] veth0_macvtap: left promiscuous mode
[  317.196434][T10478] veth1_vlan: left promiscuous mode
[  317.201830][T10478] veth0_vlan: left promiscuous mode
[  317.262740][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  317.269689][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  317.281166][T11804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1378'.
[  317.726527][ T5852] Bluetooth: hci4: command tx timeout
[  317.798387][T10478] team0 (unregistering): Port device team_slave_1 removed
[  317.843657][T10478] team0 (unregistering): Port device team_slave_0 removed
[  318.647777][T10478] team0 (unregistering): Port device team_slave_1 removed
[  318.699584][T10478] team0 (unregistering): Port device team_slave_0 removed
[  319.144006][T11795] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1376'.
[  319.153808][T11575] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  319.198015][T11796] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1376'.
[  319.719787][T11589] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  319.767842][T11589] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  319.793644][T11589] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  319.824960][T11589] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  319.900563][T11575] 8021q: adding VLAN 0 to HW filter on device bond0
[  319.959577][T11575] 8021q: adding VLAN 0 to HW filter on device team0
[  320.018318][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.025485][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state
[  320.054305][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.061485][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  320.157195][T11589] 8021q: adding VLAN 0 to HW filter on device bond0
[  320.201124][T11589] 8021q: adding VLAN 0 to HW filter on device team0
[  320.261678][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.268846][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  320.348622][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.355765][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  320.377008][T11596] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  320.403309][T11596] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  320.420874][T11596] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  320.434218][T11596] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  320.674551][T11846] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  320.754462][T11575] 8021q: adding VLAN 0 to HW filter on device batadv0
[  320.843948][T11596] 8021q: adding VLAN 0 to HW filter on device bond0
[  320.919942][T11855] netlink: 'syz.1.1387': attribute type 10 has an invalid length.
[  320.925257][T11596] 8021q: adding VLAN 0 to HW filter on device team0
[  321.030831][T11575] veth0_vlan: entered promiscuous mode
[  321.049785][T10478] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.057016][T10478] bridge0: port 1(bridge_slave_0) entered forwarding state
[  321.148461][T10478] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.155605][T10478] bridge0: port 2(bridge_slave_1) entered forwarding state
[  321.194569][T11575] veth1_vlan: entered promiscuous mode
[  321.300591][T11589] 8021q: adding VLAN 0 to HW filter on device batadv0
[  321.335514][T11575] veth0_macvtap: entered promiscuous mode
[  321.393805][T11596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  321.437902][T11575] veth1_macvtap: entered promiscuous mode
[  321.520284][T11575] batman_adv: batadv0: Interface activated: batadv_slave_0
[  321.570470][T11575] batman_adv: batadv0: Interface activated: batadv_slave_1
[  321.605206][T11575] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  321.624883][T11575] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  321.645174][T11575] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  321.676276][T11575] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.983438][ T3589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.011602][ T3589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.094940][ T3589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.104171][ T3589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.121780][T11596] 8021q: adding VLAN 0 to HW filter on device batadv0
[  322.219508][T11869] lo speed is unknown, defaulting to 1000
[  322.229070][T11870] rdma_rxe: rxe_newlink: failed to add lo
[  322.249277][T11589] veth0_vlan: entered promiscuous mode
[  322.268886][T11869] lo speed is unknown, defaulting to 1000
[  322.321884][T11869] lo speed is unknown, defaulting to 1000
[  322.372461][T11589] veth1_vlan: entered promiscuous mode
[  322.385830][T11596] veth0_vlan: entered promiscuous mode
[  322.418074][T11596] veth1_vlan: entered promiscuous mode
[  322.581730][T11596] veth0_macvtap: entered promiscuous mode
[  322.601045][T11589] veth0_macvtap: entered promiscuous mode
[  322.722047][ T3562] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.907932][T11596] veth1_macvtap: entered promiscuous mode
[  322.919712][T11589] veth1_macvtap: entered promiscuous mode
[  323.008814][ T3562] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.033991][T11869] infiniband syz0: set active
[  323.039252][T11869] infiniband syz0: added lo
[  323.044947][T11869] syz0: rxe_create_cq: returned err = -12
[  323.051657][T11869] infiniband syz0: Couldn't create ib_mad CQ
[  323.058577][T11869] infiniband syz0: Couldn't open port 1
[  323.066564][ T5961] lo speed is unknown, defaulting to 1000
[  323.092621][T11589] batman_adv: batadv0: Interface activated: batadv_slave_0
[  323.121769][T11869] RDS/IB: syz0: added
[  323.125870][T11869] smc: adding ib device syz0 with port count 1
[  323.136252][T11869] smc:    ib device syz0 port 1 has pnetid 
[  323.144272][ T5961] lo speed is unknown, defaulting to 1000
[  323.148079][T11596] batman_adv: batadv0: Interface activated: batadv_slave_0
[  323.183456][ T3562] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.201059][T11869] lo speed is unknown, defaulting to 1000
[  323.214594][T11589] batman_adv: batadv0: Interface activated: batadv_slave_1
[  323.245452][T11589] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.261329][T11589] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.270617][T11589] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  323.279463][T11589] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  323.299651][T11596] batman_adv: batadv0: Interface activated: batadv_slave_1
[  323.339516][ T3562] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.382085][T11596] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.392568][T11596] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.414565][T11596] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  323.425270][T11596] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  323.713278][T11869] lo speed is unknown, defaulting to 1000
[  323.832864][ T3562] bridge_slave_1: left allmulticast mode
[  323.840287][T10478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.854160][ T3562] bridge_slave_1: left promiscuous mode
[  323.862347][T10478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.874498][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.890510][ T3562] bridge_slave_0: left allmulticast mode
[  323.897526][ T3562] bridge_slave_0: left promiscuous mode
[  323.903349][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.424785][ T5169] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  324.441368][ T5169] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  324.450813][ T5169] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  324.460515][ T5169] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  324.468538][ T5169] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  324.469116][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  324.501561][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  324.512016][ T3562] bond0 (unregistering): Released all slaves
[  324.540663][T11869] lo speed is unknown, defaulting to 1000
[  324.635693][T10474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.644603][T10474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.655739][T10474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.664710][T10474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.926524][T10474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.935509][T10474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.297527][T11869] lo speed is unknown, defaulting to 1000
[  325.560290][T11895] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1394'.
[  325.845372][T11869] lo speed is unknown, defaulting to 1000
[  326.225409][T11886] lo speed is unknown, defaulting to 1000
[  326.509797][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  326.523195][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  326.531284][ T5850] Bluetooth: hci0: command tx timeout
[  326.546167][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  326.555260][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  326.564688][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  327.412885][ T3562] hsr_slave_0: left promiscuous mode
[  327.427149][ T3562] hsr_slave_1: left promiscuous mode
[  327.433516][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  327.445149][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0
[  327.453560][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  327.470142][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1
[  327.493854][ T5169] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  327.508849][ T5169] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  327.516024][ T3562] veth1_macvtap: left promiscuous mode
[  327.522139][ T5169] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  327.524130][ T3562] veth0_macvtap: left promiscuous mode
[  327.538372][ T3562] veth1_vlan: left promiscuous mode
[  327.543788][ T5169] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  327.543845][ T3562] veth0_vlan: left promiscuous mode
[  327.559129][ T5169] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  328.042866][ T3562] team0 (unregistering): Port device team_slave_1 removed
[  328.091683][ T3562] team0 (unregistering): Port device team_slave_0 removed
[  328.493133][T11901] lo speed is unknown, defaulting to 1000
[  328.614218][ T5169] Bluetooth: hci3: command tx timeout
[  328.620614][ T5169] Bluetooth: hci0: command tx timeout
[  328.806454][T11886] chnl_net:caif_netlink_parms(): no params data found
[  328.861402][T11926] pimreg: entered allmulticast mode
[  328.874691][T11930] pimreg: left allmulticast mode
[  328.877944][T11933] netlink: 'syz.2.1403': attribute type 2 has an invalid length.
[  329.015078][T11935] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1404'.
[  329.281091][T11920] lo speed is unknown, defaulting to 1000
[  329.282163][T11886] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.294243][T11886] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.301782][T11886] bridge_slave_0: entered allmulticast mode
[  329.310855][T11886] bridge_slave_0: entered promiscuous mode
[  329.378749][T11886] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.394319][T11886] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.407764][T11886] bridge_slave_1: entered allmulticast mode
[  329.425665][T11886] bridge_slave_1: entered promiscuous mode
[  329.647158][ T5169] Bluetooth: hci4: command tx timeout
[  329.664800][T11886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  329.671063][T11954] openvswitch: netlink: Actions may not be safe on all matching packets
[  329.700316][T11886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  329.791185][T11957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1409'.
[  329.893645][T11886] team0: Port device team_slave_0 added
[  329.895262][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1410'.
[  329.909945][T11959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1410'.
[  329.920886][T11886] team0: Port device team_slave_1 added
[  329.922990][T11959] netlink: 'syz.2.1410': attribute type 1 has an invalid length.
[  329.954681][T11959] nbd: error processing sock list
[  330.127195][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1411'.
[  330.144948][ T3562] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.160751][T11962] netlink: 'syz.2.1410': attribute type 11 has an invalid length.
[  330.202443][T11966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1411'.
[  330.233397][T11901] chnl_net:caif_netlink_parms(): no params data found
[  330.272956][T11886] batman_adv: batadv0: Adding interface: batadv_slave_0
[  330.295278][T11886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  330.332260][T11886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  330.345828][T11886] batman_adv: batadv0: Adding interface: batadv_slave_1
[  330.353575][T11886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  330.434115][T11886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  330.489126][ T3562] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.629055][T11978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1414'.
[  330.687794][ T5169] Bluetooth: hci0: command tx timeout
[  330.688528][ T5852] Bluetooth: hci3: command tx timeout
[  330.720242][ T3562] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.762843][T11886] hsr_slave_0: entered promiscuous mode
[  330.772033][T11886] hsr_slave_1: entered promiscuous mode
[  330.843444][ T3562] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.883650][T11988] nbd: must specify a size in bytes for the device
[  331.057171][T11993] netlink: 'syz.1.1417': attribute type 21 has an invalid length.
[  331.124092][T11993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1417'.
[  331.195113][T11993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  331.246290][T11920] chnl_net:caif_netlink_parms(): no params data found
[  331.275896][T11993] ------------[ cut here ]------------
[  331.283217][T11993] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 10 MHz (7)
[  331.303023][T11993] WARNING: CPU: 0 PID: 11993 at drivers/net/wireless/virtual/mac80211_hwsim.c:2653 mac80211_hwsim_sta_rc_update+0x6f5/0x860
[  331.316499][T11993] Modules linked in:
[  331.320589][T11993] CPU: 0 UID: 0 PID: 11993 Comm: syz.1.1417 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) 
[  331.332950][T11993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  331.343058][T11993] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860
[  331.349813][T11993] Code: 71 17 00 00 48 c7 c7 c0 ae 2d 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 00 ff 8f fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 5d 56 cc fa 90 0f 0b 90 e9 fe fe ff
[  331.369574][T11993] RSP: 0018:ffffc90003dfefd0 EFLAGS: 00010282
[  331.375889][T11993] RAX: 27b0c1ab04006900 RBX: 0000000000000014 RCX: 0000000000080000
[  331.385220][T11993] RDX: ffffc90004732000 RSI: 0000000000004e1d RDI: 0000000000004e1e
[  331.394122][T11993] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  331.402182][T11993] R10: dffffc0000000000 R11: fffffbfff1bfa9fc R12: 0000000000000000
[  331.410516][T11993] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000
[  331.418767][T11993] FS:  00007f8c943f66c0(0000) GS:ffff888125c1d000(0000) knlGS:0000000000000000
[  331.429044][T11993] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  331.435672][T11993] CR2: 000000110c320a79 CR3: 0000000054112000 CR4: 00000000003526f0
[  331.445375][T11993] Call Trace:
[  331.448818][T11993]  <TASK>
[  331.451801][T11993]  ? mac80211_hwsim_sta_rc_update+0x73/0x860
[  331.457970][T11993]  mac80211_hwsim_sta_add+0xa3/0x310
[  331.463315][T11993]  drv_sta_state+0x8be/0x1840
[  331.468086][T11993]  sta_info_insert_rcu+0xd32/0x1940
[  331.473335][T11993]  ? sta_info_insert_rcu+0x2ce/0x1940
[  331.478855][T11993]  sta_info_insert+0x16/0xc0
[  331.483487][T11993]  rdev_add_station+0x108/0x290
[  331.489764][T11993]  nl80211_new_station+0x1723/0x1b40
[  331.495119][T11993]  ? __pfx_nl80211_new_station+0x10/0x10
[  331.502004][T11993]  ? netdev_run_todo+0xe1d/0xea0
[  331.507599][T11993]  ? nl80211_pre_doit+0x4f1/0x930
[  331.512689][T11993]  genl_family_rcv_msg_doit+0x215/0x300
[  331.518376][T11993]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  331.524511][T11993]  ? bpf_lsm_capable+0x9/0x20
[  331.529331][T11993]  ? security_capable+0x7e/0x2e0
[  331.534335][T11993]  genl_rcv_msg+0x60e/0x790
[  331.538951][T11993]  ? __pfx_genl_rcv_msg+0x10/0x10
[  331.544029][T11993]  ? ref_tracker_free+0x63a/0x7d0
[  331.549186][T11993]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  331.554778][T11993]  ? __pfx_nl80211_new_station+0x10/0x10
[  331.560648][T11993]  ? __pfx_nl80211_post_doit+0x10/0x10
[  331.566243][T11993]  ? __pfx_ref_tracker_free+0x10/0x10
[  331.571665][T11993]  netlink_rcv_skb+0x205/0x470
[  331.576516][T11993]  ? __pfx_genl_rcv_msg+0x10/0x10
[  331.581594][T11993]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  331.587016][T11993]  ? down_read+0x1ad/0x2e0
[  331.594956][T11993]  genl_rcv+0x28/0x40
[  331.599875][T11993]  netlink_unicast+0x758/0x8d0
[  331.604711][T11993]  netlink_sendmsg+0x805/0xb30
[  331.609638][T11993]  ? __pfx_netlink_sendmsg+0x10/0x10
[  331.614992][T11993]  ? aa_sock_msg_perm+0x94/0x160
[  331.620025][T11993]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  331.625348][T11993]  ? __pfx_netlink_sendmsg+0x10/0x10
[  331.630747][T11993]  __sock_sendmsg+0x219/0x270
[  331.635471][T11993]  ____sys_sendmsg+0x505/0x830
[  331.640330][T11993]  ? __pfx_____sys_sendmsg+0x10/0x10
[  331.645671][T11993]  ? import_iovec+0x74/0xa0
[  331.650814][T11993]  ___sys_sendmsg+0x21f/0x2a0
[  331.655554][T11993]  ? __pfx____sys_sendmsg+0x10/0x10
[  331.661141][T11993]  ? __fget_files+0x2a/0x420
[  331.666637][T11993]  ? __fget_files+0x3a0/0x420
[  331.671371][T11993]  __x64_sys_sendmsg+0x19b/0x260
[  331.676411][T11993]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  331.681910][T11993]  ? rcu_is_watching+0x15/0xb0
[  331.686758][T11993]  ? do_syscall_64+0xbe/0x3b0
[  331.692156][T11993]  do_syscall_64+0xfa/0x3b0
[  331.697554][T11993]  ? lockdep_hardirqs_on+0x9c/0x150
[  331.702792][T11993]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.708926][T11993]  ? clear_bhb_loop+0x60/0xb0
[  331.713629][T11993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.719575][T11993] RIP: 0033:0x7f8c9658e929
[  331.724010][T11993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  331.730690][ T5852] Bluetooth: hci4: command tx timeout
[  331.743863][T11993] RSP: 002b:00007f8c943f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  331.743923][T11993] RAX: ffffffffffffffda RBX: 00007f8c967b5fa0 RCX: 00007f8c9658e929
[  331.743941][T11993] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000008
[  331.743955][T11993] RBP: 00007f8c96610b39 R08: 0000000000000000 R09: 0000000000000000
[  331.743970][T11993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  331.743983][T11993] R13: 0000000000000000 R14: 00007f8c967b5fa0 R15: 00007ffdffda6818
[  331.744022][T11993]  </TASK>
[  331.744034][T11993] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  331.744050][T11993] CPU: 0 UID: 0 PID: 11993 Comm: syz.1.1417 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) 
[  331.744074][T11993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  331.744084][T11993] Call Trace:
[  331.744093][T11993]  <TASK>
[  331.744101][T11993]  dump_stack_lvl+0x99/0x250
[  331.744127][T11993]  ? __asan_memcpy+0x40/0x70
[  331.744147][T11993]  ? __pfx_dump_stack_lvl+0x10/0x10
[  331.744168][T11993]  ? __pfx__printk+0x10/0x10
[  331.744206][T11993]  panic+0x2db/0x790
[  331.744233][T11993]  ? __pfx_panic+0x10/0x10
[  331.744282][T11993]  __warn+0x31b/0x4b0
[  331.744300][T11993]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[  331.744329][T11993]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[  331.744353][T11993]  report_bug+0x2be/0x4f0
[  331.744379][T11993]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[  331.744404][T11993]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[  331.744429][T11993]  ? mac80211_hwsim_sta_rc_update+0x6f7/0x860
[  331.744453][T11993]  handle_bug+0x84/0x160
[  331.744474][T11993]  exc_invalid_op+0x1a/0x50
[  331.744494][T11993]  asm_exc_invalid_op+0x1a/0x20
[  331.744511][T11993] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860
[  331.744537][T11993] Code: 71 17 00 00 48 c7 c7 c0 ae 2d 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 00 ff 8f fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 5d 56 cc fa 90 0f 0b 90 e9 fe fe ff
[  331.744552][T11993] RSP: 0018:ffffc90003dfefd0 EFLAGS: 00010282
[  331.744569][T11993] RAX: 27b0c1ab04006900 RBX: 0000000000000014 RCX: 0000000000080000
[  331.744581][T11993] RDX: ffffc90004732000 RSI: 0000000000004e1d RDI: 0000000000004e1e
[  331.744593][T11993] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  331.744603][T11993] R10: dffffc0000000000 R11: fffffbfff1bfa9fc R12: 0000000000000000
[  331.744615][T11993] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000
[  331.744651][T11993]  ? mac80211_hwsim_sta_rc_update+0x73/0x860
[  331.744681][T11993]  mac80211_hwsim_sta_add+0xa3/0x310
[  331.744709][T11993]  drv_sta_state+0x8be/0x1840
[  331.744743][T11993]  sta_info_insert_rcu+0xd32/0x1940
[  331.744764][T11993]  ? sta_info_insert_rcu+0x2ce/0x1940
[  331.744795][T11993]  sta_info_insert+0x16/0xc0
[  331.744814][T11993]  rdev_add_station+0x108/0x290
[  331.744837][T11993]  nl80211_new_station+0x1723/0x1b40
[  331.744873][T11993]  ? __pfx_nl80211_new_station+0x10/0x10
[  331.744889][T11993]  ? netdev_run_todo+0xe1d/0xea0
[  331.744942][T11993]  ? nl80211_pre_doit+0x4f1/0x930
[  331.744973][T11993]  genl_family_rcv_msg_doit+0x215/0x300
[  331.745007][T11993]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  331.745046][T11993]  ? bpf_lsm_capable+0x9/0x20
[  331.745066][T11993]  ? security_capable+0x7e/0x2e0
[  331.745100][T11993]  genl_rcv_msg+0x60e/0x790
[  331.745132][T11993]  ? __pfx_genl_rcv_msg+0x10/0x10
[  331.745154][T11993]  ? ref_tracker_free+0x63a/0x7d0
[  331.745169][T11993]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  331.745191][T11993]  ? __pfx_nl80211_new_station+0x10/0x10
[  331.745206][T11993]  ? __pfx_nl80211_post_doit+0x10/0x10
[  331.745231][T11993]  ? __pfx_ref_tracker_free+0x10/0x10
[  331.745266][T11993]  netlink_rcv_skb+0x205/0x470
[  331.745288][T11993]  ? __pfx_genl_rcv_msg+0x10/0x10
[  331.745315][T11993]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  331.745355][T11993]  ? down_read+0x1ad/0x2e0
[  331.745378][T11993]  genl_rcv+0x28/0x40
[  331.745401][T11993]  netlink_unicast+0x758/0x8d0
[  331.745433][T11993]  netlink_sendmsg+0x805/0xb30
[  331.745465][T11993]  ? __pfx_netlink_sendmsg+0x10/0x10
[  331.745489][T11993]  ? aa_sock_msg_perm+0x94/0x160
[  331.745516][T11993]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  331.745532][T11993]  ? __pfx_netlink_sendmsg+0x10/0x10
[  331.745554][T11993]  __sock_sendmsg+0x219/0x270
[  331.745576][T11993]  ____sys_sendmsg+0x505/0x830
[  331.745604][T11993]  ? __pfx_____sys_sendmsg+0x10/0x10
[  331.745637][T11993]  ? import_iovec+0x74/0xa0
[  331.745663][T11993]  ___sys_sendmsg+0x21f/0x2a0
[  331.745688][T11993]  ? __pfx____sys_sendmsg+0x10/0x10
[  331.745750][T11993]  ? __fget_files+0x2a/0x420
[  331.745772][T11993]  ? __fget_files+0x3a0/0x420
[  331.745806][T11993]  __x64_sys_sendmsg+0x19b/0x260
[  331.745832][T11993]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  331.745866][T11993]  ? rcu_is_watching+0x15/0xb0
[  331.745892][T11993]  ? do_syscall_64+0xbe/0x3b0
[  331.745914][T11993]  do_syscall_64+0xfa/0x3b0
[  331.745930][T11993]  ? lockdep_hardirqs_on+0x9c/0x150
[  331.745955][T11993]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.745973][T11993]  ? clear_bhb_loop+0x60/0xb0
[  331.746000][T11993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.746017][T11993] RIP: 0033:0x7f8c9658e929
[  331.746034][T11993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  331.746048][T11993] RSP: 002b:00007f8c943f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  331.746066][T11993] RAX: ffffffffffffffda RBX: 00007f8c967b5fa0 RCX: 00007f8c9658e929
[  331.746099][T11993] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000008
[  331.746110][T11993] RBP: 00007f8c96610b39 R08: 0000000000000000 R09: 0000000000000000
[  331.746121][T11993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  331.746132][T11993] R13: 0000000000000000 R14: 00007f8c967b5fa0 R15: 00007ffdffda6818
[  331.746162][T11993]  </TASK>
[  331.749571][T11993] Kernel Offset: disabled