last executing test programs:

1m6.850242526s ago: executing program 3 (id=2637):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r1, 0x800442d3, 0x200000f3)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000048", @ANYRES32=0x0, @ANYRES32=r0], 0x3c}, 0x1, 0xff7f}, 0x4000000)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'tunl0\x00'})

53.745819206s ago: executing program 3 (id=2637):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r1, 0x800442d3, 0x200000f3)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000048", @ANYRES32=0x0, @ANYRES32=r0], 0x3c}, 0x1, 0xff7f}, 0x4000000)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'tunl0\x00'})

38.960894429s ago: executing program 3 (id=2637):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r1, 0x800442d3, 0x200000f3)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000048", @ANYRES32=0x0, @ANYRES32=r0], 0x3c}, 0x1, 0xff7f}, 0x4000000)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'tunl0\x00'})

29.545741652s ago: executing program 3 (id=2637):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r1, 0x800442d3, 0x200000f3)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000048", @ANYRES32=0x0, @ANYRES32=r0], 0x3c}, 0x1, 0xff7f}, 0x4000000)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'tunl0\x00'})

18.644222068s ago: executing program 3 (id=2637):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r1, 0x800442d3, 0x200000f3)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000048", @ANYRES32=0x0, @ANYRES32=r0], 0x3c}, 0x1, 0xff7f}, 0x4000000)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'tunl0\x00'})

10.269726562s ago: executing program 1 (id=3804):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r2, 0x2, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0xfffffffffffffd97, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r2, 0x2, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0xfffffffffffffd97, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x0) (async)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x0)

9.976559309s ago: executing program 3 (id=2637):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r1, 0x800442d3, 0x200000f3)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000048", @ANYRES32=0x0, @ANYRES32=r0], 0x3c}, 0x1, 0xff7f}, 0x4000000)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'tunl0\x00'})

2.213032878s ago: executing program 1 (id=3809):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000affff0000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a32000000002800048008000240e70000000800014000000005140043006970766c616e300000000000000000000900010073797a310000000024000000050a01010000000000000000010020000c000240000000000000000104000880140000001100010000000000000000000000000aaa9860706a6d06f96604c5c0f206e836c9cd46311720381600"], 0xc0}}, 0x0)
r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)=0x14)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000200)=@req={0x7fffffff, 0x6, 0x4, 0x10000}, 0x10)

1.974005669s ago: executing program 1 (id=3885):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x2}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000d80)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="0dadce2ea3e26f4c2f1b8b2ee8d761439c713556a3bba45e42b4fa14de6d49d411d8bf17419402665dbe854674fafca13c86ae7726f993ba44d2852e19977fdd8da60018b61ff75263f85a609a7a2aa46a1cb21fa9aec7610657604681f370019d799c6df85813bef949679e6baadcb34fca3d2493c2ece926258400e1affc689931f93e0062b8f835effff1f2a9ed854867b9d09760e498e162ceaee0ecdf86af44c94b2420fc8cbf0d1619d7c92dc477dc97f719a9a1f035e33e79db8bfc15e34af45b9a424bb35b8999bb1a5ec307f80d286a79a2fc95db33f1f21420591e575fc226fee58489518323eccb", 0xed}, {&(0x7f0000000300)="9713382fe126989d18cc0ab098fbbf8482b9463c6767004ac889329cb7baacd56d877da67c626c5773bd98c6c79a0dd7ae9d85d35c22f1279efc1c7c1f5ca054d3144bd38593a436ea44ceb2941aba667d9ecabbdd03aa9e32ed3c9d1954129448a732a7e1d0fca1e7777607689e62088144c5461f8445f8851e2d1b10b594c8265d51377c6bc48b04d9b96999890774bab028ad5eb8089fd9a1ff547a18b7b336ef90c4ec0330dcb351aea6a53ba551708396c884c9ff13b50c27feb68b971c84cc6c3a02d0e50b81ea5d02a2bf4f8049a7997a535229473fdcebcc8cb34d89d0827d0caecd5b789a4c4e796fba999d69870e", 0xf3}, {&(0x7f0000000000)="16e27ed7454632c672c6af45bf23a874aa6ea19e4a190ca22f365c980552b9d945bca3932b89f2d77e15848416a8ce01aef375c081be11d0b594a4ba640ceb3a58b3d17e9b3cc1f20f4fcd33954fb406b3a3eb2e3a626f6b56041ad00acef1b44190467e6786c0afcd1479acedd5f76071a894fac962f6fd411f4117d6d689501c2cbd73a65edf", 0x87}, {&(0x7f0000000480)="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", 0xff}, {&(0x7f00000005c0)="bd5238f5a88fe956396df8eca0909d008af78bf3eb8184c8fb526829ae5cbaedbafa2670b5bc66193cb3481efca9e2c52405525091a439aefcea6cfe8e3eec8cdee917e1853d0a4b151ae784d861543369c2c4bc44b0249832625f85f0b392e658b5d058a193b80e512253b4f32d4f74342be544de15f16c1857e5333c52d64a8dad829f4479e21540e37cc7afb0659becdc6f5c3dd5046c4a3cb1ca2dd1ee78b493b429b08154d8b959e132bbb04eac6ee27125a309578bad98ba6278bde5", 0xbf}, {&(0x7f0000000680)="7e45924f56cb87ec56b5724136b0c96a64c5ca4e0b2c0aa477cfe1c0ac6fb20208dfa830a3712927a8c60ebb861da5b9c53a46f6ed88da21d70095b7d5e468b656ebeb1ffbb384a851d23877690bcca88d91a9790e8592fb60083c6ec4334f3ffe3e97d7afbe2a6bbebf2dc82dc4bbabaf6800fb3acd9ffc6316327655cf9a1b65c4f8259f0310f3e7ad1ed056c3", 0x8e}], 0x6}}, {{&(0x7f0000000400)={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x310}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000740)="7aeb1dd73cb5b87ef8ee9677c3db1e58915075c2840451db789689de917291d8331a87955e62b35cd71dd307db63289a61a8ec57163c633fffc2f227dd47a84308056adca267d854d106371ad9aa22ae7510cd33582921d6483386a65cf5f644d6fae9930baa4a979677658e56269584bd0f9a91523db6c3f2ec393d53f6a7094923e85a930b610e6d21af163da1148fb5e6d7f98eef11c462f530b49553d00bf568", 0xa2}, {&(0x7f0000000800)="a07d2980da458ee97b905dc6913c8035ef16716febfd1ec784788e43bee7cac4c1431cad451b2cb0af3502c25d4c69cd217b966600363e24d6130ffe2aec36832c96bb5cc58f13159b5de1c3f699ea", 0x4f}, {&(0x7f0000000880)="84592153a2e8265e7129c8b92ba90be46b45e67f5401a194e85fe004598b84d3b527dbb3ba7c152baffdcbfe71acf103e01a652367c8a85317163e659caf45e68cbd2c503cc9a0206c4b85401eba75c153f292a94adcad9f4ad6c013bbfff51bcb81217b6c46beef01c4667ce58b3e5c5e281e7d1453de943abdb91029768872f948fb13516bc682d35ac27be5ce0408e395e064edd1071f578b9dfca1b4743e1cbebcce1df8aec7b8990c71859248528a8248d3b6431499635a4b33b564a655ef6ab78b0ef84e415bacd1bd4624acbef7321b5aaf20d06420bfe63010f26c8852", 0xe1}, {&(0x7f0000000980)="c0e676e97bf8afe5278ba422114e3be59ff47ac1fe2ff9dd70ded5fece33c5d15cbca32c075bd17c2be57faa1df21e54a2e2e665f549d986e49767ca123472aa3a00b00994e49aaea356ee9a062c7dab4dd5e1d924d59cce0e65949f22b1702885cf01", 0x63}, {&(0x7f0000000a00)="c6ef0f90930f6adfd51ceba75049645d7bdde4d9775dede58d98246e10501a35f4984f71b87314b917983e4764168151392800eadc19d5f5b2fd0f86e4b6c854444e6e8b29e449161b03efb49361e37b46199121314308a68707", 0x5a}], 0x5, &(0x7f0000000b00)=[@tclass={{0x14, 0x29, 0x43, 0x9}}, @hopopts={{0x158, 0x29, 0x36, {0x2b, 0x28, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @generic={0x2, 0xec, "67cf45e1348ed2ff6a46631084db70b0e46b59ada6c8d9ae44a741c31c537bf674864aa062fb069e61d0a974179c6985067ff07af3c586b7675d722c115bfe7fa97853bad74c01f2989752b21afcf11909f03c1c275b75a8b430a34ba6da8477574f9f5bea35b2cbf231037bc5d285000663bbd024e8f1d84ec1d2523bfb4ffbe740833e202de39f57f3b10eb17118688c3278041206c2722d17a786efbee2a3d364e29ac502f9b0fb3a4d23d4446e9bf06dd115547213134c50abd5f1edbd333a181ac5b7d9fbcd06bae1feb472b6a2766658cd90d500ac69bc64d306e385369a50d1e4f0d5c421e870b17a"}, @ra, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @private1}]}}}, @rthdr={{0xb8, 0x29, 0x39, {0x32, 0x14, 0x1, 0xd, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @mcast2, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @mcast1]}}}, @rthdr={{0x28, 0x29, 0x39, {0x32, 0x2, 0x2, 0x5, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}}}], 0x250}}], 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8)

1.968157572s ago: executing program 0 (id=3886):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4018, 0x3, 0x218, 0xd0, 0x720d, 0x148, 0xd0, 0x148, 0x180, 0x240, 0x240, 0x180, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @local, 0xffffffff, 0xff000000, 'wlan0\x00', 'veth1_macvtap\x00', {}, {}, 0x88, 0x3, 0x8}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xfffb, [0x6, 0xb2cc575b459b5b33, 0x4, 0x2]}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0xb507, 0x0, 0x0, 0x4]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002200)={'wlan0\x00', <r3=>0x0})
unshare(0x20000400)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d)
shutdown(r0, 0x1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000800)={0x0, 0x30, &(0x7f0000000500)={&(0x7f0000000cc0)={0x2c, r1, 0x1, 0x0, 0x2, {{0xa}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4, 0xa}, @NL80211_KEY_IDX={0x5, 0x2, 0x6}]}]}, 0x2c}}, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000100), 0x6)
getsockname(r6, 0x0, &(0x7f0000002100))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4440b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0)

1.778091665s ago: executing program 1 (id=3889):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000140)={'filter\x00', 0x0, 0x4, 0x0, [0xf, 0x6, 0x1, 0x6, 0x9, 0xb7], 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x78)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000100)={0x0, 0xa11c}, 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r1)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r3, @ANYBLOB="0000000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000002000000000000000002000004680800000000000001000000000000000000000001"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24)
socket$inet_mptcp(0x2, 0x1, 0x106)

1.685119337s ago: executing program 0 (id=3891):
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x7d, &(0x7f0000000080), 0x8)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000002900030400"/20, @ANYRES32=0x0, @ANYBLOB="f7ea010000000000140012800b0001006d6163735c6300000100000000000000", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) (async, rerun: 32)
socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32)

1.282033044s ago: executing program 2 (id=3895):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x7ff, 0x7, 0xd, 0x3}]}, 0x10)
setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x57)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000240)={0x4, {0x9, 0xfffffffffffff500, 0xc, 0x7, 0xfd98}})
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$MRT_DEL_VIF(r1, 0x0, 0x1a, 0x0, 0x0)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00')
ioctl$NS_GET_NSTYPE(r2, 0xb701, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061100000000000009500070000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x70}}, 0x0)
socket$inet(0x2, 0x2, 0x0) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x7ff, 0x7, 0xd, 0x3}]}, 0x10) (async)
setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x57) (async)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000240)={0x4, {0x9, 0xfffffffffffff500, 0xc, 0x7, 0xfd98}}) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
setsockopt$MRT_DEL_VIF(r1, 0x0, 0x1a, 0x0, 0x0) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') (async)
ioctl$NS_GET_NSTYPE(r2, 0xb701, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061100000000000009500070000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x70}}, 0x0) (async)

1.221861325s ago: executing program 4 (id=3896):
r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f00000004c0)=[{0x80000006, 0x0, 0x12, 0xf9}]}, 0x10)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r4, r3, 0x26, 0x0, 0x0, @void, @value}, 0x10)
sendmmsg$inet6(r2, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000019880)=[{&(0x7f0000000080)="79ef34395d4c410d32132319c6a502980bd70906e911e78ea6dce2f7034f7998430f21880804822ef849375a594e0acc408221d74ee07c139bd280b66b5396cfe597d56ffeda39436d6fb5e0e6153cfe9af489e2", 0x54}], 0x1, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801)
sendmmsg$inet6(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="fa", 0x1}], 0x1}}], 0x1, 0x404000c)

1.099979514s ago: executing program 2 (id=3897):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="cc0000001b0089fd0000000000000000fc0000000000000000000000000000ff00000000000000000000000000000006000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000c0015005c07350007000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000040)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, &(0x7f00000007c0), 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x2, 0x8, 0x3c, 0x13f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[0xffffffffffffffff], &(0x7f00000008c0), 0x10, 0xbfb, @void, @value}, 0x94) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x6, 0x6, 0x2, <r3=>0x0}, &(0x7f0000000040)=0x10)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r3, 0x5, 0x4, 0x8, 0x3ff, 0xfffffffe}, &(0x7f0000000100)=0x14) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x8, 0x14, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94)

1.021816766s ago: executing program 0 (id=3898):
r0 = socket(0x1d, 0x6, 0x2)
getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4040811)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) (async)
connect$netrom(r0, &(0x7f0000000200)={{0x3, @bcast, 0x5}, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x48) (async)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000300)={r1, r1, 0x0, 0x42, &(0x7f0000000280)="8ec7e6071da2e05eec122adb79cf64af7531e87735cdaa159b721f00587426831b4b807c680697f2111f820a508d55c15b35217a731958075fa44005dbd207c7126c", 0xfe, 0x3, 0x3, 0xe, 0x9, 0x1, 0x0, 'syz1\x00'}) (async)
nanosleep(&(0x7f00000003c0)={0x77359400}, &(0x7f0000000400))
clock_gettime(0x0, &(0x7f0000000440)={<r3=>0x0, <r4=>0x0})
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000480)={r3, r4/1000+60000}, 0x10) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@getnexthop={0x38, 0x6a, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_MASTER={0x8}, @NHA_FDB={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x8)
shutdown(r1, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000005c0)={0x2, 0x2, 0x14})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)={0x224, r6, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x260}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x180}], @NL80211_ATTR_CSA_IES={0x1e4, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x5, 0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x9, 0x3, 0x7, 0xb, 0x1, 0x1, 0x0, 0x200]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xdf, 0x80, [@supported_rates={0x1, 0x6, [{0x36}, {0x36}, {0x24, 0x1}, {0x4, 0x1}, {0x48}, {0x60}]}, @ht={0x2d, 0x1a, {0x40, 0x1, 0x1, 0x0, {0x5, 0x8, 0x0, 0x8, 0x0, 0x0, 0x1}, 0x8, 0x0, 0x3}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_a, @device_b}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @gcr_ga={0xbd, 0x6, @broadcast}, @measure_req={0x26, 0x3a, {0x2, 0x1, 0x0, "cc9d341e192448d81db490d8f484ffaff5db01ac7452f2ae3e815be18cd873a0b86f9113d0df9df8eebb9597944f7e5f420e95d56cb3b3"}}, @measure_req={0x26, 0xb, {0x3, 0x6, 0x5, "beae3ce2e5701137"}}, @measure_req={0x26, 0x31, {0xf8, 0x6, 0x7, "eec61a967e388a52560a22440ce5f7d4c4ae4d09454e6544b8ea971dabbb151d172819ddbdc47e6d0a04dd3f1636"}}, @ht={0x2d, 0x1a, {0x1000, 0x0, 0x3, 0x0, {0x5, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x1, 0x10}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xd5, 0x7f, [@random={0x8, 0xad, "43317dc69c6f989f121f9013c238501c9cd90421f270a29ea7658899fd33510c38b38d262b1b3ef2f4842bcfd6be24e72ca5780ac7f11f71bcacf13e69c973a60c2212d2c05a08755e50c6bff6c511457f36bd55565ccff6691e830f644e8bd334c04fb620ce5a95295c148f29c1ee2874a827bf9defbcd4137f8cbf5fcdd5e5e9537b344e46baab8e3fc61490c63edfa7b362cda883e365ce72b1269aaf1a0b747fe74cb06137bf2538c6ae5f"}, @mesh_chsw={0x76, 0x6, {0x8, 0x63, 0x3e, 0x1f}}, @peer_mgmt={0x75, 0x18, {0x0, 0x0, @val=0x1, @val=0x32, @val="ee11df10d1579579d83e930de7701e62"}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0xffff, 0x409b, 0xaed, 0x7749]}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000940), &(0x7f0000000980)=0x8) (async)
ioctl$BTRFS_IOC_FS_INFO(r7, 0x8400941f, &(0x7f00000009c0)) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000dc0)={<r8=>0xffffffffffffffff}) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000e00)={'wlan1\x00'}) (async)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001fc0)=[{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000e40)="b84ef6b0868feb3b6782747c610295eea61c249cd55f85820637a809c609167c9c2fc07acebb0e3261125607d6bfdc1637a524857373c9a4d64ec99fb5d3c879474592ecda57030e3e86c01fced839bda9b7afed148b7097cf88f681e4110d12383dc82d5bd6f7572d75160f8010f6ea", 0x70}, {&(0x7f0000000ec0)="87477b460b08b62fd466ffd7cf16c17bb713595f3b9b07479e3099ffd4b9ab55f6e88f2a13fd91ebefbd301d36cf44ae98fa628ba0086098dec2e00f2e3f7075cdb98781954dcccc4b6cd1650afd15b43569b09d2e3f817a8eb1177e9a97e3929fbfe9e0d7362fcca416fcf963f8b950dc48a4ace0b7f2ece06366fb6d754783761fa46c61751f8343278be07d6bc960e4356386076f584eb315ad4deccac1c355004d4ee20078c8f4b21e58eb4b75128dba596ee9d0910bdcca16bf364bf7c4ead6e24a37f3503bcbaffd7f7906f47a3805ff332872ac34b3f3310717c001f1202ba16c94d47d6568d330a6e1418d1d7d5fc6b20a46ea946b00cc5ebd7370fcee6621845773185cb51f63ef5e998011beb7ec49d6266b8a1d2cce0e337c68ea6cdc03bbb5a921ecbe492cd1b254b7fac6cf012528b7276cdab7c383632a38f137860b419b725ff611b701731d15af8fd73508cab958172fede425b1ee3151ae92aae8787d28791228df1f1dfaa6c725462a6e8d6b84bfccc80f0d69d72096b3206b66ca8bab3d2c7e7b0cfefd75bf52579f6079b6981ed73c15b94af01042d91e4776d8d18bbad7e86b13d498df58611b21154c2d9108b5c0cc24a7709d80592ea09ddd0fc97841e4b10b6fc8c8cc923d87629945d30ad14ea0667729692d7cec80a3a517d0189fcf2d1fa2c065b7b278b017dcd41649f9c66b681f4dfd6529f2dde548b841eef35a741648fbed34eacaa97454e66aca1f3274fb7a2703be05843280902025f00b3ff0f44755780f54c5c4e011f93c6941ba9683e97b6a04a40f513f98f5b1aea851ebc4d6bca0f3664d0d7e626f10896f7721adecc2401a37d6537b13d37087eb95edbcf4c7afad09c1eb092413846f1743c2def3d7a5fbbd0dd554818bfd6fae89f92d44381bce2fae82f607d3ec441bee5f8b3a3d6dea8d0cde20f6c682646a430e7bc44805c57743cfe4a41853054988ffeaad6b7b71f7210501ed835d5dadcbbcc687a02aee5ca2d34c7d9402b558a54aad79e4104c42b1e1f3c30f65574df9da81e4e3f3c911b15006ab14701fcbb47d7a0c6d82280cb2c5fef9dd4cdf3dace5c3546bc210f3e44b4ccf194a4ccbbe71344d93f2b11ec1adf4ab4836a595cf2ff375801b7df60b8465a902cc5aa3fe71f80b0857692f80663174e676a1d115eb3c642a09878204d50349dedf4519a91d49824a2c9de1cc6f92d6d6876d3e8eda110c864351d9eec39c513a3ffaa51763fbef712f9a1ae5c5a7bfcd35712d61709491488fa0c28c0efb7d38b2694a664d7d916e700d05b6b9c4917932e355d3f0d3a850edfdc2c214a9da4edeb1524e68bf69f69ab457222b4862cc92662d29a81ce45333a0b7218f926d72422926bcd9259da736de0ec7089dd829d12e34d4b248aaeea462a3e1125aaa5b2e3c9462b32571f425cce8582828d836cf470737c75113ebc5e3442ec8112c8be6029f0ad08d34f2eb1c3f9381295b98918b307dc9e1fc156085eea62347397e5208f43636a61ddead986a76ae2a7d7a1b6b29d01e13b971bf09e2e09843058b2f70683c7d0b8a6290337a5fe91ebb8acdd3a08dc066446f7e16688b40c37940a0a79fb38a54380f4449d60c6f54bd772a4a3a960cab5167808460dec6d7a0fb37762bc4e45910fb4c33af13cca7f02ee75bba352a23393162d75a13351c33a203a25a7781dc96e86b25d3153e287d4bd5ca473f0a5d8619a3a376432c4f5be63caaaaef079bf4894ff0ad8c76101d6ae2f1b320ea1d5eb975658c91bd0f71c46ded1d945fed8618d8316f820208212dc09880a2de786d77b99d0fb83dcc402b3b19d0062175bd8e5cbc05492fb69489e994ce5cd0582d5ee047be12e0febd5e4ee9317b2a42c60d62a236d09ae6579ed69f02ceb71b8911a8bf4aba7d5a3eed99e720a64b2a803b99cbbca7de9221526a6c1d4e00d2764c738317c6abb93705d7999111c10df937209dd7167feb0bb0e63676cea700d4538d3a545b7218578ad1cd48ab8e18b3a8d1b005c7103abd179d098b170149841983cf3885161585cf740005d77fad6d66cf44a3caa50bf3bb0f423134888d62d93a441496b29062bc457be2ab3bf9cfb6b4bd893ceaeb1d9057690b1a8398e3832a117dbc88f349d0d32c58009d7b8ccfc77a1b46564e89a4a7c3c00d67083d74159bf4832cdd5600df13e7e962486e072c11bf3b00a099d3916942782305c8f02e14de94dc9c28d7b31051a7826eff633cef0fc6b0b8288f8c82bde3c4d5316b700584482b444285db6a02b5f3290fafdd911872e355900e35a11ee7f85e15451fdef985b90b1e08540a77eddb35c46269b21799ef0751c99108175bf3be235abc0f44fb5db96a5db9da6cad75c5df82ebf8b10285ef9272f6fa9e66bf488973b2b3909d0a15c6ed87054609228bac154dfd2e22a3d2a053a3148ec53dc41cec7d38cfe38d1f4b9462aef5bc89c09da722115183eb6f078d068011ee578c614f3b149c4f138be65407832ef074939430b7da254a637821302c8d628323d7adeea6218e516389f08c46023a42eafef1a999e9b032aba9282cca2652f247e96112aba354eb8b5b86d57d3b584914178f17e1dca155a5f9070ac966303bc4e02875c9c980ccd5217d957ca9171dd14aee099ddf8886504d71031e5b0de12d61a1c94ced49563f2480cc2706a73f5db6ed72022527293c4e94079c226647460993a5a927c5f898ad659fb2c383429db9cc86fcf3dfdee1b55740fdbba924c8ffd6874135b22f5dc4dd2c5a16a1ea913f84233e6e5b6f302c67305aa55446dc99d81f9964c3dadbdbd878ed342650d337fc3d8a554e4fcf99cf31cad97d9dbc5e142ae2766cc39c42fad85b4f2ba0060a35330040dbac8ad1a2835e929b2f39f9ad1700ef5f3b5fe94895313165e130913d7c3349ec335c564500ce7737c2cf4dd72beead8062c20d656ea7acd18eeb169f16d034df3fd6a9ecde3f8856dce2f89ab9295f992948efcada372166ceb651b0eff0e50fd61b5fc625583db67f250fbe03a49162b463a74d501605456f299c69cedb0b2949f6d8f71235697fca4525a71b86e0b903c664254718edc9e9b6466cd094b9ed75b1c03cf12270a74717ce253c8b803c0b23243a33ab00709c4ed8aeb41859a89684edd212cd78fe9a49a685a30138f4147a4e34bc3bd192307ba1fb41d1b1feb3e12ca46a80048f190ef791b84cce50ab0839f7880c3686f3629be0ff239379f1b32fb4f0d3fab6ebe8907de7e690dee6c250be2a89a49cbebae50efa142e12030e003debaabff6a3a64d7dbab4022d7953a7eaa7aec434c0836cf4fa3d3f316bd2ca9b6beeb89a291b4d66da2a6d84f3cabdfdf3626d78ca70762951934ea9fda26a20f66899a489a5633f56117e3672600cec0c28927fa17d16b858ed55c40d5d8cd3177769f78c598bae14712ff6b4a57cad744e8eb393e2d43d88f827355ffdcd6fefad48298ec9debb36991485c3972f56b99b398d789206d8c21b14078c589428598fb9e19efeefa2faa262afe7ba05b9fa1975b85b50361887c9296230620f56d1dea119d9390f46a56896a9966047cc572d04462dd3db7d8eab2cad3260607af543b55b4ff238222235d5c2d6b6905b0e0675e4472a6db3bc5642ff0e132a8119cfddea78589304a85fd808eddee7782a1fd00fcadba28a07100352fd1322d9b5812c62f01e9797d771a902cdadcda2f6bb1a59a1335080661b051a0ec46d405b86fd9db2c31d8d2941f38a09e6ea005128ce7bd51ae2e073a0fdb292c9a50cbb845f554fee5542a6066db8871bc3fa7ac349f7e3a2f8a17f49516ecd5d925becfda46b958b7c8d67e892517e4fc8a8a6111416dfdf79cdac1ba8eba0235d54aff651b9b387510a7d547ec86a33a5e53f5ed4290a3a68be7d06cbaca6bfb118ef64983ffd81f7529f68822c289488566ebfa88acf1fa6dfda5e560c5a569c38efc8d44c5efcf817090fe738d0579b9426f5b452a928a1ec3b7cdd6c47c489a32987050f2deeaf11b4f54a567a5c47e6bcea620e661953d4d6595d8cea1a8351f92fafea1ec16d5ad7d660ae5b370aabe5ec081fc48bff97ba6aea9bb6fd62bd76f071054231b13867f6f9ecdc5f8397caff22bc5798d218a25753f6990924d5aa101f712122989d9575ce77053ab44dbb80b820d8bbe34f7fe637d88b51b62fe8335e72133108d3cbecce44398a5b86be5a766edb0cb4ce21b5918ff3e86fbe103fb59dbc431fd0de2b511b4cad0f6a7c4176f336c940a9f7d3188b26f707bd5ca856608295e97d2facfd8051226c26667d172b22d1be804bc79de22af6047704b7e83754addbdc78efe419a489ad56d429564cde65d5bb331d167490647ff423dfd6525099ca9c8e9e2cc4264d7e83bc9e406060640736dade587ab989b319c55d033b477660f93c6d02f4ec31e7db7efe76dcbef93ffb060383920fbbb1ffee9a475712fdae21cc902dc151465971c4ebd5b82fafe56e8fa9f607ff07e09c67a8ea9b14eb9d7a777b6041d580824ff57b20e94dc3aca0ad98c8cb8a281369cee7e2a83f6f53bac029e9058558f4adea028d00a663b16eeed107dc09a6cbb70cbbf72832f99add1014409a76dde8c0e6dfba8bb89f239270dbdde4e5f1b9caeedc97c5e18b0be7af648b9fa6eaf18181a5a03a037b3668c6811bcadee47e59230ae8adb79e5f2568dd181c31f29eaa8818cec817ce7b87f721db853d01de5c4c25e209d4306f520fb1e681a8364abe53f709e08cb85747a25a4ad284d8656de854de3de158b6a69e5c0a800f41e021d86ee8d35bee553a5893795d4b896ad6a3534ad5d9b710480bee3c53e9ab4fd8f5a3ecf17fb3e9ea9eaafc7585dbea82f8c9fb03a6dfc09a64da00706447ed9c87cab651b468bf73d3d5074b5c59d17c7ea5653eabba1e83760d47230295d3f855d607a6343e060d25abc49f02e7166a9d5b07cf32579c1865e7bee33c8d3e95b72f784fc104123d35640bd9a49ab393d10551dcad513cb8083e52e31e993e754aa7fc6f81c5db8bcde73d16f15d19d9b5df17b36b0c4e025594c554553a6a3cb49978c4ba6b6d80dbfa6c0b04a0b1afea3eb68a0b369e59b3493d27324c6c5b9ec31818d314d96626273d0d78aff4a667aa588b76753587f4a0da9cf5f1fecbeaff7f000fa0d8016d3c3f357714b9e4d9c1a53c8136cace2a3cad1de7f8df3efff99f293aae7244652163ccb8699f73b8cbf53d8a4a507888ca6f22c2045ea621392a5b67ad169a78bc55b9fa1760b3fa8b06fec71561fce1d6c9f47c4334507af5822438eab62587f9a057dfb495c2929d2e19a3e260d39e536d16e55c58da567313377e17c62bc25cefbdeb1c2aa63ea2ca8c3a5e7e89b896a5e05a27e9a90ef1ef9e9f5af1ea51d10add0b31030d5d2d503bdfd47f9cb4b6edc26fe50a03db42e0bd171d7b3dd45c71cffb20f276f8abc2abbd54497d951b95e2e9ed61988ea5c96f292ec90f35902e2219ec175a383588faa4defb89cbb1c7e3f76931754c07e55b06addefc080f6bb980734b21d6d3ad379f6ec540de8658702716be42fda789bd0bfcbec2f005c2ea1fc6542c64e1037459aa0181f54ca20c030227f36ac1ac82f5e291f3d3d39cf3fb277146fa00760cb31d54b5f7833d64fbda393921e25e61ec1d4fba8f5a33147ee719d7a3c5cb5bdb4932c113c34d8a022e8c8a657f8eadcd8dcdfe7e9ac8f3f2cfde51a45176ba163eb22a05c2cc5404d8b8b170f4f47ff4fad2515fc0e101", 0x1000}], 0x2, &(0x7f0000001f00)=[@iv={0x88, 0x117, 0x2, 0x74, "309a59bdde67f898f40c72de2a59e364d3847ae6e2a5477955f0aa8550a85ee3121215b336e0259240ad5c39b6a9a570fb83afcf917fe1a0f5397c9d80329ee08177c066e7d24e88744cbc5861620234a50abf7f69c97108c8b8411043e75564bb516755b03391ce64c0f3ebb0ffbb4f9768a20d"}], 0x88, 0x20008800}], 0x1, 0x0)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async)
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002080), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000020c0)=@base={0x18, 0x0, 0x6620, 0x5, 0x609, r9, 0x1, '\x00', 0x0, r10, 0x2, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async)
r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002140), 0x4) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002280)={@cgroup, 0x30, 0x0, 0x3, &(0x7f0000002180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000021c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002240)=[0x0, 0x0], <r12=>0x0}, 0x40) (async)
r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002300)={0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000022c0)={@map=r9, r11, 0x26, 0x10, 0x0, @void, @value=r13, @void, @void, r12}, 0x20)

1.008569682s ago: executing program 4 (id=3899):
r0 = socket$xdp(0x2c, 0x3, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_unlink_enter\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/cgroup\x00') (async)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bd4e54d45303aaaaaaaaaa000806000100000604"], 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (async)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x1d, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fedbdf25050000000800090002000000060001000500000008000c00aa0a000008000b00040000000cef1000050000000000000079b2d3a743440f26e908cfcc87c344ec71ec33f6809c8a0627be840c6d5bd7c3ef005ab0ab22f1b3faa10e4fe15f47"], 0x40}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (async)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x6, 0x0, 0xfffffffb}, 0x10)

889.604263ms ago: executing program 2 (id=3900):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000001028000028001280090001007665746800000000180002801400010000000000", @ANYRES32], 0x48}}, 0x0)
syz_emit_ethernet(0xb6, &(0x7f0000000100)={@random="e2195bfb9dba", @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@llc={0x4, {@llc={0x6, 0xf8, 'S', "ff1bb574767b204c16a99dda8d1134fd77146604630cf811a7f16aece0809cf5c8345b78f80cbf3f6abaf3b6f0f0545b602a9145bac9f5e94e7ed04ba38c42d390a4a6cc24893f3a418e7edd7fde2f344e544cdba6509d188771be2e90aa701a941ac0947d187a42aebba8225d03c2252c5210dc9e51b5f2b64eb3fa07b56e95e0d7b8fc1c5fa1fb6c79798e752da0b9b72ac9687775d9bc55d1e41e254136562d25ccd52e"}}}}}, 0x0)

745.888522ms ago: executing program 0 (id=3901):
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000200)={<r1=>0x0, @in6={{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x5}}, 0x5, 0x5, 0x81, 0x0, 0x101}, &(0x7f0000000000)=0x98)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={r1, 0x16b8df8a}, 0x8)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4)
r4 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@union={0x3, 0x1, 0x0, 0x5, 0x1, 0x98, [{0x5, 0x3}]}]}, {0x0, [0x30, 0x30, 0x61, 0x30, 0x2e]}}, 0x0, 0x37, 0x0, 0x8, 0xbf81, 0x0, @void, @value}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x80000}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x800)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000012002102000000000000000007"], 0x28}}, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)='\\\x00', 0x2}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

716.977066ms ago: executing program 2 (id=3902):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @remote}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a0108fdffffff0000000000000000630003"], 0x2cc}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc240}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x4}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4800)
socket$nl_route(0x10, 0x3, 0x0)

684.692362ms ago: executing program 4 (id=3903):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000200)={0x1, 0x0, 0x1000, 0xe0, &(0x7f0000000000)="77e4c8eba0ab8631d62f6acaf41153baa5424f07964ddc601e60558bdbf92fda61cb6d558262e1292da2cc7d5d4f6d162cce7d50e0f067e3a77156ccde0bd971545148a5b467102db0cdc148458a9fa16dcee6eca152ddff7e0a5d0599ffee7ca94ee818993e792de0ffe8ff7254f61f2f93456e45d7ce47b9fd537e9e3a3e6630b036c7bc6b457d2e83b6a836feebbf73ec290a7266239080c1414c1407457b98ad9367a24bc7b72f726735d3d75988cd976cf1cdde84551956c4655818e79b99c4d4ba75b721e585d85b68e5d60cdca3397d03224ca80dac11cef11d3a298b", 0xe4, 0x0, &(0x7f0000000100)="2a6923c89aa37728ee14ca487faa566772c151004335b42869eedc97a0efc1c7a49312c4195bff1f514a71001e5720dda7e782fa5c65912ef1c82ae37460b6d2cf36f00fbd5d9a8a050fb760ca31463483cd939d5c6d3524c53c11ef520ca5ee51ca80801b0268a4a64dbccf1d3bc95882895c44e39c8f631c44ba29431d20ab3f31fc1d83751515bb0574b393269bb08a09f1655bb88d8f6a45b730212b29de97c931e343b98602b5317479b4e38dd2e401fdefd398d881c3cc43b422878dca9204e2760174b86bf5ab2d7986778dd8955d3ef000c7f73b86f55c275a3b12b013256912"})
setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000280)={0x76b4, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e20, @empty}}}, 0x108)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000003c0)=0x200, 0x4)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000b00)={'ip_vti0\x00', &(0x7f00000009c0)={'gre0\x00', <r8=>0x0, 0x80, 0x7800, 0xffff0000, 0xb8dd, {{0x40, 0x4, 0x0, 0x32, 0x100, 0x64, 0x0, 0x9, 0x2, 0x0, @rand_addr=0x64010100, @multicast2, {[@rr={0x7, 0xb, 0xc, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @noop, @timestamp={0x44, 0x10, 0x66, 0x0, 0x9, [0xf7, 0x3, 0x131]}, @rr={0x7, 0x23, 0xa8, [@private=0xffff, @loopback, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @cipso={0x86, 0x24, 0x1, [{0x0, 0xb, "de4a039defe83331a6"}, {0x6, 0x3, "bd"}, {0x2, 0x9, "3ae0b14a6a1a86"}, {0x5, 0x7, "4f14452efc"}]}, @timestamp_prespec={0x44, 0x2c, 0xe7, 0x3, 0x6, [{@rand_addr=0x64010100, 0x4}, {@empty, 0x7ff}, {@multicast1, 0xffffffff}, {@private=0xa010100, 0x5dfc}, {@local, 0x4ad}]}, @cipso={0x86, 0x5a, 0x1, [{0x0, 0xe, "b3e44e9f7db33306667e9727"}, {0x1, 0x10, "cd70ac08cd885da4fef745336f69"}, {0x2, 0x8, "aa1141f7c8bc"}, {0x5, 0x8, "cd30aa697cd5"}, {0x6, 0xd, "9f793b5aed7ba560816a38"}, {0x1, 0xb, "48437fe4af4cd00071"}, {0x0, 0xb, "9bf786e17530cb932e"}, {0x7, 0x3, "f0"}]}]}}}}})
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@const={0xe}]}, {0x0, [0x61, 0x0, 0x61]}}, &(0x7f0000000b80)=""/17, 0x29, 0x11, 0x0, 0x979591da, 0x0, @void, @value}, 0x28)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)={0x1b, 0x0, 0x0, 0x85, 0x0, 0xffffffffffffffff, 0x1c, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d40)=@generic={&(0x7f0000000d00)='./file0\x00', 0x0, 0x10}, 0x18)
r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000dc0)=@o_path={&(0x7f0000000d80)='./file0\x00', 0x0, 0x4000, r2}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e80)={{0xffffffffffffffff, <r13=>0xffffffffffffffff}, &(0x7f0000000e00), &(0x7f0000000e40)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f40)={{0xffffffffffffffff, <r14=>0xffffffffffffffff}, &(0x7f0000000ec0), &(0x7f0000000f00)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001000)={{0xffffffffffffffff, <r15=>0xffffffffffffffff}, &(0x7f0000000f80), &(0x7f0000000fc0)}, 0x20)
r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001080)=@generic={&(0x7f0000001040)='./file0\x00', 0x0, 0x18}, 0x18)
r17 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0x6, 0x21, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xca18, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @jmp={0x5, 0x0, 0x5, 0x7, 0x0, 0x8, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @ldst={0x0, 0x3, 0x0, 0xb, 0x4, 0xffffffffffffffc0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000880)='syzkaller\x00', 0x8, 0xe6, &(0x7f00000008c0)=""/230, 0x41100, 0x10, '\x00', r8, 0x25, r9, 0x8, &(0x7f0000000c00)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x3, 0x10, 0xb, 0x428f}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[r10, r11, r12, r13, r14, r15, r16], 0x0, 0x10, 0xa61, @void, @value}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001280)={'ip6gre0\x00', &(0x7f0000001200)={'syztnl2\x00', <r18=>r8, 0x2f, 0xf0, 0x2, 0x9, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x7800, 0x701, 0x4, 0x7}})
sendmsg$nl_route_sched(r17, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)=@deltfilter={0x3c, 0x2d, 0x200, 0x800, 0x25dfdbfd, {0x0, 0x0, 0x0, r18, {0x8}, {0xffff, 0x9}, {0x10, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xf}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0xd4)
sendto$inet6(r2, &(0x7f0000001380)="f5bb5a774f4e49507983646c0d352ad9696220afd0dd5705b42eb95eba0ed06e74a2d110338035e1164b1655050618e4d7b11a422d05ebd7134e563e7e97d8d3f12e5c0065b84bca7bd07acd88cc21ea03e03e5bd9e5631e4a114df29089b00c6379f68d1e82be14b04e09cfd96dbd40b9bd54c4263e193308ea49df0a4e1107764b8f9f5cf28918befff25dba34a1d7da413a672bc94fcc90ee38ebeb28a3a6c2b41f92586e8fb6e4a820bf87db0a05710628ba486bdd49af048617c8c9b38ede741e2dbf9b5ce26f126afb3570a0cf67b3730a46b9b620f1450bdd35b06fc680", 0xe1, 0x1, &(0x7f0000001480)={0xa, 0x4e21, 0x1, @mcast1, 0x7}, 0x1c)
sendmsg(r2, &(0x7f0000001a80)={&(0x7f00000014c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfd}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001540)="6d74c18d4be8f8c2caf53b6ba7573ee148637d45abb7c56f32077603f41a1a7ee08a7f2d1a68a7900761c0dfd669dd379d3c115b132d87acc24e55008974fba62a7cd955e353310a2ff5fafcc1764ec24746054ebe0891d73270da961882a6989a2689da1698066ec9d5c2e6fecff228176b8d03ed6f0dd4fa1b330cb13131a232de18d8a457111d4d231ae05b5b2a6c685a283f9b", 0x95}, {&(0x7f0000001600)="94f0c2972b658b7eee40cbc36d2e38bff89cee2f28283a40837894006c15e0d021df5cf5bfb66e6355ea35693ba09e32892a79a01e79d8eaba31936eda4630f53a33b9f5caeb34844747f525caf5dd14cbb9c2ef329db59bd76b7482ef169546210e055e768de95ce9568c03c90a534a51e2cdb4d5a3ba5da91e261ef02fa9e84e1929caf2e4f1d4e9a83db84d1769ddf0b30695e4f63342eb6996d6f46925ecb8aed938d75e50f778121e07166ea4d7fb0c9fce84", 0xb5}], 0x2, &(0x7f0000001700)=[{0x98, 0x10f, 0x0, "fbaf2b7bd509d118b579f19018c4586752f1e22ed7ab9fb20b608c30db3374b4acd535540e71bfef3f7e324970728c46e5afdd2cfeba6f53c91bb9e3b2ea03b04265f1a84dbaf518668bb891eae838530573e6343465ecab808580c2f25ffe11d0f61a7207448f95800b4bfcb43dc2abf71af5b2132897f6c210aa7607c9fcd8f70a8e5764c413"}, {0xb0, 0x103, 0xffffffff, "9deaabbc60524c672cf2b02580a90371f3b9b57d658bf953f70d4454e17df17571e0891fcc8a25f3b73d149a030703befae081f00e19e5a7c20286efcd7249d58d53158d105f41c1661580476e3c3f95180a0fc052792f8d177c798e4cac7fbe3b0ad91d1adafb77ab121598cb51ac74c6b5844e7c9de2a22ab0c6cef722f2a306695c1d6d4f5e6031b7ff4bcbce6b460bfcadb7361ee025c833c1e29434"}, {0x68, 0x10e, 0x8, "abbaf632c1e1476f23d8d2293648a9ac6feaede2e0fdac03dc406a9500fb6725934a681c5913e91df68ccdcf8b7586961d8731bc34c0f7cec60c9a1eb01c986d7a58d0af58f6b7a94c27554507b0cf6668bc93"}, {0xc8, 0x88, 0xd24, "eeaf6e7927611503296899fc2b16ba9564b2a8c26ed92c9a2ef938f5fa8b6668d7de65343e72b12bdf43de0902f36194556f9ec47da82238d2cb3c21a188c0eef3f8c022866713c1c2d75dd406840bb7442a4c00302b7232cea6e62cc7fc1ea3adc39a9d510bf64c2567c373a6dec581fe5c667a9906811881122d6ca3bcd2d1d49915e720ede488f83e46c5aa07ab779a94effed2634f3d3f3f9821ccf5d48eed1f7a906e6d6be18f0a04becbd961c15091"}, {0x10, 0x3a, 0x4}, {0xc0, 0x109, 0x5, "d87fb14a3cadb57559b5ac0fc084ac04cb4ccd386c8196d612c7f8bba571e1962c23d57d5a0ef09bcbb7ebcb5df63da594d64ae1c599d0cb88491ba79705307cabfab373b9e684c756049dd6e8c17f9a474a378e55457cb0977d88c4b0b99265f39ea17388cd7505d7621d14a0102c5968633e07dbd5cb139ed79b1f6c76bb8837799c96de9af8f7acbac77c5c890c2504fd6c7e38b0216db1fe676aaaf603a21f2be84b0b72251af32ce801a4"}, {0x10, 0x84, 0x4}], 0x358}, 0x4000000)
r19 = accept4$unix(0xffffffffffffffff, &(0x7f0000001ac0)=@abs, &(0x7f0000001b40)=0x6e, 0x800)
connect$unix(r19, &(0x7f0000001b80)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
r20 = openat$tun(0xffffffffffffff9c, &(0x7f0000001c00), 0x40140, 0x0)
ioctl$TUNSETIFF(r20, 0x400454ca, &(0x7f0000001c40)={'bridge0\x00', 0x100})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001e00)={@cgroup, 0xffffffffffffffff, 0x26, 0x2028, 0x0, @void, @void, @value}, 0x20)

510.134444ms ago: executing program 0 (id=3904):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x54, r1, 0x11, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x9b}, {0xc}}]}, 0x54}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32, @ANYBLOB="050001"], 0x38}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18, 0x3, 0x5, 0x2, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r3, 0x58, &(0x7f0000000080)}, 0x10)

469.302475ms ago: executing program 4 (id=3905):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a0b0400000000000000000200000038000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c59208000240000000020900010073797a30000000000900020073797a320000"], 0x8c}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)={0x14, r4, 0x1, 0x70bd28}, 0x14}}, 0x4000080)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0x19c, r4, 0xf12, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffe}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0xa8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff296f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf8000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa55}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4000006}, 0x20000884)
r5 = openat$cgroup_ro(r1, &(0x7f0000000300)='pids.events\x00', 0x275a, 0x0)
preadv(r5, &(0x7f00000013c0)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1, 0x0, 0x0)

326.575283ms ago: executing program 0 (id=3906):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x1}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004dc0), 0x0, &(0x7f00000053c0)=""/196, 0xc4}, 0x4}, {{0x0, 0x0, 0x0}, 0x802}], 0x4, 0x40022000, 0x0)
sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_init_net_socket$llc(0x1a, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x844)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000008000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000020000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000000000000000000000f9ffffffffffffff0000000000000000ffffffff00000000"]}, 0x138)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r8 = accept4$unix(r5, 0x0, 0x0, 0x0)
recvfrom$unix(r8, &(0x7f0000000200)=""/191, 0xbf, 0x0, 0x0, 0x0)
close(r5)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000150001002abd7000ffdbdf2502180100", @ANYRES32=r4, @ANYRES32=r7], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x804)
r9 = socket(0x10, 0x3, 0x0)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'tunl0\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r11, @ANYBLOB="00000000f43642601300874cf3000000240012800900010069706970000000001400028001000900000000000800140000000000ad7b0d039d0d1b065d97a2713f4cb4764dc5f49ce59e5280a2944a76ad83479dde6884a346fc876b519802a68cc0b1ae0bd51070661f8a1bb0a3767bdf3ea60cb4d4d4dff2fc928168af6ed4697b9c4d2d6471a21f02"], 0x44}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r13 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
sendmsg$nl_route_sched(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8013}, 0x840)

214.256969ms ago: executing program 2 (id=3907):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$sock(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="06", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)="18", 0x1}], 0x1}}], 0x2, 0x4040805)
shutdown(r0, 0x1)
r1 = socket(0x1e, 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/175, 0xaf}], 0x1}}], 0x1, 0x40000161, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)

212.826323ms ago: executing program 1 (id=3908):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x1, 0xfff, 0x5, @dev={0xfe, 0x80, '\x00', 0xf}, @empty, 0x40, 0x0, 0x19, 0x801}})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000000000000000000e7804fd330ea156172304d99322acb816db13a46addfc4f9186433f3f00"/51, @ANYRES16=r2, @ANYBLOB="05002dbd7000000000002e00000008000300", @ANYRES32=r3, @ANYBLOB="0a003400020202020202000008004a000cac0f00"], 0x30}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000)
socket$can_raw(0x1d, 0x3, 0x1)

211.444504ms ago: executing program 4 (id=3909):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1490e90b11a28b238100"/20], 0x14}}, 0x20040815)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071140a000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x59}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x8}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6b}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x10}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x3}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff68}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7fffffff, 0xf}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x88000)

70.976823ms ago: executing program 1 (id=3910):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_delroute={0x34, 0x19, 0x20, 0x70bd28, 0x25dfdbff, {0x2, 0x10, 0x0, 0x2, 0x0, 0x2, 0xff, 0x2, 0x200}, [@RTA_PREFSRC={0x8, 0x7, @private=0xa010102}, @RTA_UID={0x8, 0x19, 0xee01}, @RTA_GATEWAY={0x8, 0x5, @local}]}, 0x34}}, 0xc0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x5, 0x3, 0x2, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x34, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xfb, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000800)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x28c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3e6e}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdb7e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x915}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6655}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x36860000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @loopback, 0x4ab}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa1ef}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x40}, 0x8001)
socket$kcm(0x29, 0x2, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000840)=r1, 0x4)
r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000880))
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r5, &(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
unshare(0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x64, 0x6, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000)
socket$netlink(0x10, 0x3, 0x5)
unshare(0x20020000)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000a80)={'b', ' *:* ', 'w\x00'}, 0x8)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000ac0))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r1, 0x0, 0x20, 0x86, &(0x7f0000000b00)="5876c713d117872be9f556aa7c63c97574290dc5d227a88754dab218ac0d2569", &(0x7f0000000b40)=""/134, 0x7ef, 0x0, 0x1f, 0xc3, &(0x7f0000000c00)="d1cec9064e340b8b3a128be08744b58fa7583c2a9e99bfdf87f8382c1e0317", &(0x7f0000000c40)="0318d4a813382c8fed7a5a30133d2fe542848c3ca461e697282e371f111dc55f7e316aea523d8d18630ce8ebfbf2b1e6951c628b9deec909f8e4d3c09ee598a57594ba65e8bf1cf6f29d15cdade40af58d02d61d0b8dfb7f1d5dce9532d13d7c01588bc924fab0baf7afe2b5091986e0fb7887e1f8e202e34def9ccf8e3a9d49963be044c6dc3277766cd34ab1be431f3d8188cf6498742bbd6eadd2b6598a398be5aedf8598e249b3143cd3dec62d0294f00332ab6cf80efdb80ca0d0a1690df8555a", 0x0, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e40)={{r0}, &(0x7f0000000dc0), &(0x7f0000000e00)='%ps    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000e80)='fsi_master_acf_cmd_rel_addr\x00', r1, 0x0, 0x3}, 0x18)
setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000f00), 0x4)
sendto$inet6(r7, &(0x7f0000000f40)="cc0186997cee32d92ce58d463a8229db071622c5e953975aacfded2867af0baec913a7c840e4640f2ea995fff04672cd2d48f971238889b07fe804d7ecf3ce1e636e327797f092d5b81efd0a706b9a4eaf760b36120d85fe21d24b6689815c83799b0eb83898f09e99dca5296c3bcc5801e8014f97cc50f1cbc67ec97b9732a6c8", 0x81, 0x40001, &(0x7f0000001000)={0xa, 0x4e20, 0x0, @remote, 0xfffffff8}, 0x1c)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
r9 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001040)='cgroup.procs\x00', 0x2, 0x0)
ppoll(&(0x7f0000001080)=[{r8, 0x8420}, {r9}], 0x2, &(0x7f00000010c0)={0x0, 0x3938700}, &(0x7f0000001100)={[0x6]}, 0x8)

7.009746ms ago: executing program 4 (id=3911):
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x1, 0x700, 0x410001, 0xd6c, {{0x10, 0x4, 0x3, 0x4, 0x40, 0x67, 0x0, 0x3, 0x4, 0x0, @empty, @private=0xa010101, {[@timestamp_prespec={0x44, 0x2c, 0xd5, 0x3, 0x0, [{@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}, {@remote, 0x8}, {@private=0xa010102, 0xfffffffd}, {@multicast1, 0x1}]}]}}}}})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}]}, 0x44}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"})
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @mcast1, 0xdf40}, 0x1c)

0s ago: executing program 2 (id=3912):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) (async)
socket$inet6(0xa, 0x1, 0x100) (async, rerun: 32)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) (async, rerun: 32)
r2 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800)
r3 = accept(r2, &(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000280)=0x80)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000002c0)={0xd4}, 0x1)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)="cc56a3d11ba3b56186397227d3b67479be0f2ec525cb912bc77bfdc9db3223435b3d1b066436f184f37098761375f02b9ce430b60e8cc8a07f807be5f50e64331da847f19d29e64aaed3b2e708243bb11a6ebe8d396e0f69b1c46be9e3ce9d8cc071bd9e90806bf35b13e98a2d2f8380d357fcdd5283ce1c96a88a84d46bc75b", 0x80}, 0x1, 0x0, 0x0, 0x40018}, 0x0) (async, rerun: 32)
accept4$bt_l2cap(r2, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0x0) (async, rerun: 32)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbf009a8010000000000001f88", @ANYRES32=r6, @ANYBLOB="38002f800c0002000203aaaaaaaaaaaa2800038008000100000000001c0003800600010002000000080002000200000006000300feff0000"], 0x54}, 0x1, 0x0, 0x0, 0x20000041}, 0x4880)

kernel console output (not intermixed with test programs):

e team_slave_1 added
[  388.811701][T16199] netlink: 'syz.1.2833': attribute type 1 has an invalid length.
[  388.854180][T16202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2833'.
[  388.874346][T16066] batman_adv: batadv0: Adding interface: batadv_slave_0
[  388.881338][T16066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  388.908394][T16066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  388.940897][T16066] batman_adv: batadv0: Adding interface: batadv_slave_1
[  388.955724][T16066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  388.968728][T16206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2835'.
[  388.984039][T16066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  389.038417][T16202] bond9: entered allmulticast mode
[  389.044172][T16202] 8021q: adding VLAN 0 to HW filter on device bond9
[  389.183840][ T5849] Bluetooth: hci1: command tx timeout
[  389.202644][T16206] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  389.330368][T16066] hsr_slave_0: entered promiscuous mode
[  389.371135][T16066] hsr_slave_1: entered promiscuous mode
[  389.530314][T16234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2840'.
[  389.548032][T16219] pim6reg1: entered promiscuous mode
[  389.554129][T16219] pim6reg1: entered allmulticast mode
[  389.583556][T16234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2840'.
[  389.694467][T16233] sch_tbf: burst 0 is lower than device team_slave_0 mtu (1514) !
[  390.210376][T16258] sctp: [Deprecated]: syz.1.2850 (pid 16258) Use of int in maxseg socket option.
[  390.210376][T16258] Use struct sctp_assoc_value instead
[  390.542669][T16272] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2853'.
[  390.783885][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 80 seconds
[  390.919275][T16272] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  390.927860][T16272] mac80211_hwsim hwsim11 wlan1: left promiscuous mode
[  390.942811][T16272] bond0 (unregistering): (slave bond1): Releasing backup interface
[  390.952120][T16272] bond1: left promiscuous mode
[  390.959383][T16272] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  390.968624][T16272] macvlan0: left promiscuous mode
[  390.974582][T16272] bond0 (unregistering): Released all slaves
[  391.264115][ T5849] Bluetooth: hci1: command tx timeout
[  391.276002][T16311] netlink: 'syz.0.2862': attribute type 1 has an invalid length.
[  391.382724][T16314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2860'.
[  391.400250][T16066] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  391.434582][T16066] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  391.469597][T16066] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  391.510226][T16066] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  391.672372][T16330] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2868'.
[  391.697766][T16066] 8021q: adding VLAN 0 to HW filter on device bond0
[  391.750474][T16066] 8021q: adding VLAN 0 to HW filter on device team0
[  391.777103][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.785317][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  391.807992][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.815275][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  391.990975][T16338] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2871'.
[  392.219290][T16066] 8021q: adding VLAN 0 to HW filter on device batadv0
[  392.246517][T16355] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2875'.
[  392.246910][T16354] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  392.306571][T16066] veth0_vlan: entered promiscuous mode
[  392.347183][T16066] veth1_vlan: entered promiscuous mode
[  392.412293][T16361] veth32: entered allmulticast mode
[  392.475912][T16066] veth0_macvtap: entered promiscuous mode
[  392.496460][T16066] veth1_macvtap: entered promiscuous mode
[  392.577859][T16066] batman_adv: batadv0: Interface activated: batadv_slave_0
[  392.620908][T16066] batman_adv: batadv0: Interface activated: batadv_slave_1
[  392.671162][T16066] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  392.684037][T16066] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  392.696948][T16066] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  392.723582][T16066] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  392.775182][T16381] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2881'.
[  392.990882][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.019514][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.104173][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 81 seconds
[  393.137290][T16393] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2885'.
[  393.161949][ T5998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.206664][ T5998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.343317][ T5849] Bluetooth: hci1: command tx timeout
[  393.578861][T16418] netlink: 'syz.1.2890': attribute type 12 has an invalid length.
[  393.590684][T16418] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2890'.
[  393.978511][T16440] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2896'.
[  394.014148][T16442] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2894'.
[  394.555492][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.419755][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.423307][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 82 seconds
[  395.521816][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  395.533720][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  395.569148][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  395.587580][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  395.599120][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  395.762726][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.865591][T16531] __nla_validate_parse: 71 callbacks suppressed
[  395.865610][T16531] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2920'.
[  395.965078][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.025940][T16535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2921'.
[  396.329047][T16558] netlink: 'syz.4.2930': attribute type 2 has an invalid length.
[  396.337063][T16558] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2930'.
[  396.433572][T16567] netlink: 'syz.4.2930': attribute type 2 has an invalid length.
[  396.488286][T16567] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2930'.
[  396.578027][T16574] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2934'.
[  396.649780][T16573] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2933'.
[  396.776689][   T12] bridge_slave_1: left allmulticast mode
[  396.784744][   T12] bridge_slave_1: left promiscuous mode
[  396.797763][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.825229][   T12] bridge_slave_0: left allmulticast mode
[  396.833279][   T12] bridge_slave_0: left promiscuous mode
[  396.845515][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.931697][T16597] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2939'.
[  396.958968][T16596] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2939'.
[  397.147533][T16602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2941'.
[  397.430564][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  397.441390][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  397.452059][   T12] bond0 (unregistering): Released all slaves
[  397.670736][ T5849] Bluetooth: hci1: command tx timeout
[  397.747551][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 83 seconds
[  397.912102][T16518] chnl_net:caif_netlink_parms(): no params data found
[  397.998977][T16633] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2946'.
[  398.350811][   T12] hsr_slave_0: left promiscuous mode
[  398.370978][   T12] hsr_slave_1: left promiscuous mode
[  398.389259][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  398.399802][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  398.409063][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  398.416886][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  398.449309][   T12] veth1_macvtap: left promiscuous mode
[  398.456062][   T12] veth0_macvtap: left promiscuous mode
[  398.461973][   T12] veth1_vlan: left promiscuous mode
[  398.467753][   T12] veth0_vlan: left promiscuous mode
[  399.086204][   T12] team0 (unregistering): Port device team_slave_1 removed
[  399.156945][   T12] team0 (unregistering): Port device team_slave_0 removed
[  399.751961][ T5849] Bluetooth: hci1: command tx timeout
[  399.859903][T16518] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.875651][T16518] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.883669][T16518] bridge_slave_0: entered allmulticast mode
[  399.891519][T16518] bridge_slave_0: entered promiscuous mode
[  399.900551][T16518] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.910175][T16518] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.917973][T16518] bridge_slave_1: entered allmulticast mode
[  399.939792][T16518] bridge_slave_1: entered promiscuous mode
[  400.063602][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 84 seconds
[  400.170160][T16690] IPVS: set_ctl: invalid protocol: 129 10.1.1.1:20001
[  400.176344][T16518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  400.209015][T16518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  400.428370][T16518] team0: Port device team_slave_0 added
[  400.487619][T16518] team0: Port device team_slave_1 added
[  400.516960][T16702] sctp: [Deprecated]: syz.1.2964 (pid 16702) Use of int in max_burst socket option.
[  400.516960][T16702] Use struct sctp_assoc_value instead
[  400.625754][T16518] batman_adv: batadv0: Adding interface: batadv_slave_0
[  400.645547][T16518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  400.693434][T16712] netlink: 'syz.2.2967': attribute type 1 has an invalid length.
[  400.724289][T16518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  400.740621][T16518] batman_adv: batadv0: Adding interface: batadv_slave_1
[  400.747729][T16518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  400.801114][T16518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  401.027834][T16518] hsr_slave_0: entered promiscuous mode
[  401.045673][T16518] hsr_slave_1: entered promiscuous mode
[  401.047449][T16723] __nla_validate_parse: 7 callbacks suppressed
[  401.047465][T16723] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2973'.
[  401.074403][T16724] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2973'.
[  401.833277][ T5849] Bluetooth: hci1: command tx timeout
[  402.019265][T16786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2990'.
[  402.032116][T16786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2990'.
[  402.107900][T16786] netlink: 'syz.1.2990': attribute type 1 has an invalid length.
[  402.156634][T16791] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2989'.
[  402.216648][T16518] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  402.337182][T16518] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  402.381764][T16518] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  402.383239][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 85 seconds
[  402.410446][T16518] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  402.462136][T16804] bond0: entered allmulticast mode
[  402.472296][T16802] netlink: 'syz.4.2993': attribute type 62 has an invalid length.
[  402.475187][T16809] netlink: 'syz.2.2995': attribute type 29 has an invalid length.
[  402.552409][T16810] netlink: 'syz.2.2995': attribute type 29 has an invalid length.
[  402.574668][T16811] netlink: 'syz.2.2995': attribute type 29 has an invalid length.
[  402.817811][T16518] 8021q: adding VLAN 0 to HW filter on device bond0
[  402.921283][T16518] 8021q: adding VLAN 0 to HW filter on device team0
[  402.957577][T16827] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2999'.
[  402.998562][ T6002] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.005812][ T6002] bridge0: port 1(bridge_slave_0) entered forwarding state
[  403.031874][T16836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3003'.
[  403.056777][ T6015] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.064000][ T6015] bridge0: port 2(bridge_slave_1) entered forwarding state
[  403.207391][T16843] bridge0: port 1(vlan3) entered blocking state
[  403.216061][T16843] bridge0: port 1(vlan3) entered disabled state
[  403.222668][T16843] vlan3: entered allmulticast mode
[  403.229658][T16843] bridge0: entered allmulticast mode
[  403.239455][T16843] vlan3: left allmulticast mode
[  403.244755][T16843] bridge0: left allmulticast mode
[  403.516642][T16859] netlink: 'syz.4.3011': attribute type 58 has an invalid length.
[  403.536212][T16859] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3011'.
[  403.615970][T16518] 8021q: adding VLAN 0 to HW filter on device batadv0
[  403.712154][T16867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3012'.
[  403.770569][T16518] veth0_vlan: entered promiscuous mode
[  403.828283][T16518] veth1_vlan: entered promiscuous mode
[  403.903058][ T5849] Bluetooth: hci1: command tx timeout
[  403.963799][T16518] veth0_macvtap: entered promiscuous mode
[  403.981719][T16518] veth1_macvtap: entered promiscuous mode
[  404.030673][T16518] batman_adv: batadv0: Interface activated: batadv_slave_0
[  404.072341][T16518] batman_adv: batadv0: Interface activated: batadv_slave_1
[  404.076582][T16884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  404.102404][T16518] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  404.152000][T16518] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  404.155300][T16884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  404.171710][T16518] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  404.201402][T16518] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  404.551606][T16906] netlink: 'syz.0.3019': attribute type 33 has an invalid length.
[  404.573801][ T5990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.596564][ T5990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.686844][T16914] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3020'.
[  404.705636][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 86 seconds
[  404.718151][ T6015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.726133][T16906] xt_bpf: check failed: parse error
[  404.743866][ T6015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.802651][T16906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  405.340031][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.586229][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.910472][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.097197][T16936] netlink: 'syz.0.3025': attribute type 23 has an invalid length.
[  406.219641][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.635084][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  406.649052][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  406.657820][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  406.666802][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  406.676053][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  406.715023][T16969] __nla_validate_parse: 3 callbacks suppressed
[  406.715040][T16969] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3036'.
[  406.780723][   T12] bridge_slave_1: left allmulticast mode
[  406.789553][   T12] bridge_slave_1: left promiscuous mode
[  406.797208][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.825039][   T12] bridge_slave_0: left allmulticast mode
[  406.833123][   T12] bridge_slave_0: left promiscuous mode
[  406.838927][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.896488][T16976] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3037'.
[  406.905893][T16976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3037'.
[  407.023442][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 87 seconds
[  407.153770][T16990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3041'.
[  407.164971][T16991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3040'.
[  407.616425][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  407.630201][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  407.641279][   T12] bond0 (unregistering): Released all slaves
[  407.814262][T17009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3047'.
[  407.824665][T17009] netlink: 'syz.1.3047': attribute type 1 has an invalid length.
[  407.832465][T17009] netlink: 'syz.1.3047': attribute type 4 has an invalid length.
[  407.850163][T17009] netlink: 9491 bytes leftover after parsing attributes in process `syz.1.3047'.
[  408.024726][T17018] batadv0: left allmulticast mode
[  408.048654][T17018] vlan0: left allmulticast mode
[  408.064074][T17018] veth0_vlan: left allmulticast mode
[  408.066561][T17027] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  408.089467][T17018] vlan2: left allmulticast mode
[  408.104773][T17018] mac80211_hwsim hwsim10 wlan0: left allmulticast mode
[  408.118108][T17018] geneve2: left allmulticast mode
[  408.125606][T17018] bond3: left allmulticast mode
[  408.131454][T17018] macvlan3: left allmulticast mode
[  408.146180][T17018] gretap2: left allmulticast mode
[  408.154977][T17018] bond0: left allmulticast mode
[  408.205230][T17029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3053'.
[  408.420738][T17049] netlink: 'syz.2.3058': attribute type 1 has an invalid length.
[  408.567313][T17056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3061'.
[  408.581642][   T12] hsr_slave_0: left promiscuous mode
[  408.589102][   T12] hsr_slave_1: left promiscuous mode
[  408.597343][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  408.615668][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  408.625757][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  408.644092][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  408.678561][   T12] veth1_macvtap: left promiscuous mode
[  408.685103][   T12] veth0_macvtap: left promiscuous mode
[  408.693214][   T12] veth1_vlan: left promiscuous mode
[  408.698727][   T12] veth0_vlan: left promiscuous mode
[  408.783589][ T5842] Bluetooth: hci1: command tx timeout
[  409.400285][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 88 seconds
[  409.664642][   T12] team0 (unregistering): Port device team_slave_1 removed
[  409.713537][   T12] team0 (unregistering): Port device team_slave_0 removed
[  410.292290][T16963] chnl_net:caif_netlink_parms(): no params data found
[  410.308488][T17102] netlink: 'syz.0.3072': attribute type 10 has an invalid length.
[  410.353977][T17102] xt_recent: Unsupported userspace flags (00000061)
[  410.539245][T17112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3073'.
[  410.785140][T16963] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.794410][T16963] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.801677][T16963] bridge_slave_0: entered allmulticast mode
[  410.810282][T16963] bridge_slave_0: entered promiscuous mode
[  410.819128][T16963] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.827261][T16963] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.836046][T16963] bridge_slave_1: entered allmulticast mode
[  410.845405][T16963] bridge_slave_1: entered promiscuous mode
[  410.863492][ T5842] Bluetooth: hci1: command tx timeout
[  410.985189][T16963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  411.018200][T16963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  411.083705][T17141] "syz.1.3082" (17141) uses obsolete ecb(arc4) skcipher
[  411.158156][T17141] netlink: 'syz.1.3082': attribute type 12 has an invalid length.
[  411.187526][T16963] team0: Port device team_slave_0 added
[  411.204276][T16963] team0: Port device team_slave_1 added
[  411.428359][T16963] batman_adv: batadv0: Adding interface: batadv_slave_0
[  411.453135][T16963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  411.503604][T16963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  411.526427][T16963] batman_adv: batadv0: Adding interface: batadv_slave_1
[  411.540882][T16963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  411.592021][T16963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  411.613202][T17174] netlink: 'syz.4.3093': attribute type 2 has an invalid length.
[  411.698100][T16963] hsr_slave_0: entered promiscuous mode
[  411.708397][T16963] hsr_slave_1: entered promiscuous mode
[  411.743251][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 89 seconds
[  411.846714][T17188] __nla_validate_parse: 1 callbacks suppressed
[  411.846732][T17188] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3096'.
[  411.965843][T17194] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3099'.
[  412.156284][T17199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3101'.
[  412.422565][T17211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3105'.
[  412.641827][T17218] 8021q: adding VLAN 0 to HW filter on device bond5
[  412.652824][T16963] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  412.657367][T17221] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3110'.
[  412.677695][T16963] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  412.698750][T17226] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3110'.
[  412.699795][T16963] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  412.755776][T16963] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  412.770693][T17231] No such timeout policy "syz0"
[  412.906203][T16963] 8021q: adding VLAN 0 to HW filter on device bond0
[  412.943384][ T5842] Bluetooth: hci1: command tx timeout
[  412.969792][T17237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3115'.
[  412.984542][T16963] 8021q: adding VLAN 0 to HW filter on device team0
[  413.024938][T17240] RDS: rds_bind could not find a transport for ::ffff:172.20.20.23, load rds_tcp or rds_rdma?
[  413.032692][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[  413.042657][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[  413.060308][T17235] netlink: 'syz.0.3114': attribute type 10 has an invalid length.
[  413.069584][T17235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3114'.
[  413.082116][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state
[  413.089327][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state
[  413.124896][T17245] netlink: 'syz.0.3114': attribute type 10 has an invalid length.
[  413.421755][T17257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3120'.
[  413.637183][T17271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3126'.
[  413.750909][T16963] 8021q: adding VLAN 0 to HW filter on device batadv0
[  413.890437][T16963] veth0_vlan: entered promiscuous mode
[  413.936799][T16963] veth1_vlan: entered promiscuous mode
[  414.063432][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 90 seconds
[  414.074655][T16963] veth0_macvtap: entered promiscuous mode
[  414.091846][T16963] veth1_macvtap: entered promiscuous mode
[  414.169965][T16963] batman_adv: batadv0: Interface activated: batadv_slave_0
[  414.246801][T17308] openvswitch: netlink: Actions may not be safe on all matching packets
[  414.271716][T16963] batman_adv: batadv0: Interface activated: batadv_slave_1
[  414.312216][T16963] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  414.324838][T16963] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  414.338516][T16963] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  414.355553][T16963] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  414.570017][ T6002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  414.610059][ T6002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  414.697121][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  414.732094][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.200045][T17356] netlink: 'syz.0.3154': attribute type 21 has an invalid length.
[  415.285522][T17366] netlink: 'syz.0.3155': attribute type 10 has an invalid length.
[  415.479890][T17366] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  415.835588][T17395] netlink: 'syz.1.3162': attribute type 10 has an invalid length.
[  416.039138][ T6015] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.393347][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 91 seconds
[  416.490576][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  416.500753][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  416.510350][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  416.521673][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  416.530757][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  416.698550][ T6015] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.721534][T17400] chnl_net:caif_netlink_parms(): no params data found
[  416.800314][T17400] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.808379][T17400] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.815838][T17400] bridge_slave_0: entered allmulticast mode
[  416.826864][T17400] bridge_slave_0: entered promiscuous mode
[  416.835767][T17400] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.843865][T17400] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.851133][T17400] bridge_slave_1: entered allmulticast mode
[  416.861268][T17400] bridge_slave_1: entered promiscuous mode
[  416.925441][ T6015] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.010016][T17415] __nla_validate_parse: 5 callbacks suppressed
[  417.010034][T17415] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3166'.
[  417.094270][ T6015] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.149577][T17400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  417.170595][T17400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  417.356221][T17400] team0: Port device team_slave_0 added
[  417.375648][T17400] team0: Port device team_slave_1 added
[  417.426566][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  417.441785][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  417.450355][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  417.462050][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  417.473906][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  417.519108][T17440] netlink: 'syz.2.3173': attribute type 29 has an invalid length.
[  417.601014][T17400] batman_adv: batadv0: Adding interface: batadv_slave_0
[  417.615364][T17400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  417.648081][T17400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  417.722236][T17400] batman_adv: batadv0: Adding interface: batadv_slave_1
[  417.741969][T17400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  417.813098][T17400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  417.918939][T17458] netlink: 'syz.1.3179': attribute type 1 has an invalid length.
[  417.929547][T17458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3179'.
[  418.168246][T17400] hsr_slave_0: entered promiscuous mode
[  418.178405][T17400] hsr_slave_1: entered promiscuous mode
[  418.185322][T17400] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  418.193412][T17400] Cannot create hsr debugfs directory
[  418.274947][ T6015] bridge_slave_1: left allmulticast mode
[  418.281429][ T6015] bridge_slave_1: left promiscuous mode
[  418.290429][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state
[  418.326428][ T6015] bridge_slave_0: left allmulticast mode
[  418.341537][ T6015] bridge_slave_0: left promiscuous mode
[  418.365966][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state
[  418.470103][T17489] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3184'.
[  418.623628][ T5849] Bluetooth: hci1: command tx timeout
[  418.703376][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 92 seconds
[  418.781247][ T6015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  418.792683][ T6015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  418.805044][ T6015] bond0 (unregistering): Released all slaves
[  418.829729][T17488] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present
[  418.839276][T17488] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1)
[  419.095770][T17500] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3187'.
[  419.137700][T17494] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3185'.
[  419.583496][ T5849] Bluetooth: hci0: command tx timeout
[  419.607433][T17520] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3191'.
[  419.629192][T17510] vlan2: entered allmulticast mode
[  419.637868][T17510] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  419.659749][T17518] netlink: 'syz.2.3191': attribute type 29 has an invalid length.
[  419.725193][T17519] netlink: 'syz.2.3191': attribute type 29 has an invalid length.
[  419.808166][ T6015] hsr_slave_0: left promiscuous mode
[  419.830078][ T6015] hsr_slave_1: left promiscuous mode
[  419.847271][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  419.862234][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_0
[  419.889752][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  419.912492][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_1
[  419.936946][ T6015] veth1_macvtap: left promiscuous mode
[  419.942531][ T6015] veth0_macvtap: left promiscuous mode
[  419.948610][ T6015] veth1_vlan: left promiscuous mode
[  419.956146][ T6015] veth0_vlan: left promiscuous mode
[  420.391539][ T6015] team0 (unregistering): Port device team_slave_1 removed
[  420.441360][ T6015] team0 (unregistering): Port device team_slave_0 removed
[  420.703048][ T5849] Bluetooth: hci1: command tx timeout
[  420.909290][T17400] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.955621][T17436] chnl_net:caif_netlink_parms(): no params data found
[  420.985416][T17537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3196'.
[  421.043085][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 93 seconds
[  421.128265][T17400] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.229334][T17542] lo: entered promiscuous mode
[  421.254385][T17542] tunl0: entered promiscuous mode
[  421.300087][T17550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3200'.
[  421.317879][T17542] gre0: entered promiscuous mode
[  421.365772][T17542] gretap0: entered promiscuous mode
[  421.402766][T17542] erspan0: entered promiscuous mode
[  421.417232][T17542] ip_vti0: entered promiscuous mode
[  421.551119][T17400] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.591173][T17436] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.599258][T17436] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.612088][T17436] bridge_slave_0: entered allmulticast mode
[  421.620347][T17436] bridge_slave_0: entered promiscuous mode
[  421.663038][ T5849] Bluetooth: hci0: command 0x041b tx timeout
[  421.717982][T17400] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.757705][T17436] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.768862][T17436] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.777173][T17436] bridge_slave_1: entered allmulticast mode
[  421.786178][T17436] bridge_slave_1: entered promiscuous mode
[  421.795883][T17571] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.3205'.
[  421.936530][T17436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  421.968344][T17436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  422.100119][T17581] netlink: 'syz.1.3208': attribute type 1 has an invalid length.
[  422.120873][T17581] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3208'.
[  422.132832][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3208'.
[  422.137531][T17436] team0: Port device team_slave_0 added
[  422.222555][T17436] team0: Port device team_slave_1 added
[  422.427704][ T6015] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  422.438564][ T6015] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface
[  422.448070][ T6015] bond2 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 82:67:e5:c8:60:38 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  422.581069][ T6015] bond4 (unregistering): (slave erspan0): Releasing active interface
[  422.618506][ T6015] bond1 (unregistering): (slave gretap1): Releasing active interface
[  422.641129][ T6015] bond6 (unregistering): (slave gretap0): Releasing active interface
[  422.783005][ T5842] Bluetooth: hci1: command tx timeout
[  422.889549][ T6015] bond0 (unregistering): (slave 
00ªÃøÂFNð¡): Releasing backup interface
[  422.900947][ T6015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  422.912718][ T6015] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  422.925492][ T6015] bond0 (unregistering): Released all slaves
[  422.938093][ T6015] bond1 (unregistering): Released all slaves
[  423.063502][ T6015] bond2 (unregistering): (slave veth7): Releasing backup interface
[  423.072823][ T6015] bond2 (unregistering): Released all slaves
[  423.187960][ T6015] bond3 (unregistering): (slave veth9): Releasing active interface
[  423.198011][ T6015] bond3 (unregistering): Released all slaves
[  423.304101][ T6015] bond4 (unregistering): (slave veth11): Releasing active interface
[  423.313952][ T6015] bond4 (unregistering): Released all slaves
[  423.327836][ T6015] bond5 (unregistering): Released all slaves
[  423.353420][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 94 seconds
[  423.446668][ T6015] bond6 (unregistering): Released all slaves
[  423.551882][ T6015] bond7 (unregistering): (slave vcan1): Releasing backup interface
[  423.561848][ T6015] bond7 (unregistering): Released all slaves
[  423.687985][T17436] batman_adv: batadv0: Adding interface: batadv_slave_0
[  423.695442][T17436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  423.722301][T17436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  423.760097][ T5842] Bluetooth: hci0: command 0x041b tx timeout
[  423.787412][ T6015] : left promiscuous mode
[  423.817672][T17436] batman_adv: batadv0: Adding interface: batadv_slave_1
[  423.825571][T17436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  423.863979][T17436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  423.921140][ T6015] tipc: Disabling bearer <udp:syz2>
[  423.927398][ T6015] tipc: Disabling bearer <eth:syzkaller0>
[  423.937616][ T6015] tipc: Left network mode
[  423.937662][T17400] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  423.970445][T17400] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  423.990622][T17598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3214'.
[  424.021325][T17400] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  424.099938][T17400] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  424.122309][T17436] hsr_slave_0: entered promiscuous mode
[  424.132831][T17436] hsr_slave_1: entered promiscuous mode
[  424.460082][T17604] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3215'.
[  424.470850][T17604] openvswitch: netlink: Flow key attr not present in new flow.
[  424.500246][ T6015] veth1_macvtap: left promiscuous mode
[  424.507550][ T6015] veth1_vlan: left promiscuous mode
[  424.523143][ T6015] veth0_vlan: left promiscuous mode
[  424.863229][ T5842] Bluetooth: hci1: command tx timeout
[  424.939864][ T6015] vlan1 (unregistering): left allmulticast mode
[  425.683431][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 95 seconds
[  425.780795][T17400] 8021q: adding VLAN 0 to HW filter on device bond0
[  425.830142][ T5842] Bluetooth: hci0: command 0x041b tx timeout
[  425.908136][T17400] 8021q: adding VLAN 0 to HW filter on device team0
[  425.965063][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.972221][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[  426.053500][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.060687][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[  426.118683][T17634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3223'.
[  426.130736][T17634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  426.207304][ T6015] IPVS: stop unused estimator thread 0...
[  426.390728][T17436] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  426.431465][T17655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3228'.
[  426.436691][T17436] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  426.500782][T17436] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  426.534473][T17436] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  426.754669][T17670] veth1_to_team: entered promiscuous mode
[  426.799670][T17436] 8021q: adding VLAN 0 to HW filter on device bond0
[  426.891386][T17670] veth1_to_team: left promiscuous mode
[  426.950053][T17436] 8021q: adding VLAN 0 to HW filter on device team0
[  426.987927][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.995183][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  427.024763][T17400] 8021q: adding VLAN 0 to HW filter on device batadv0
[  427.051005][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.058236][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  427.239182][T17692] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  427.378439][T17400] veth0_vlan: entered promiscuous mode
[  427.434420][T17400] veth1_vlan: entered promiscuous mode
[  427.555131][T17400] veth0_macvtap: entered promiscuous mode
[  427.582461][T17400] veth1_macvtap: entered promiscuous mode
[  427.642269][T17400] batman_adv: batadv0: Interface activated: batadv_slave_0
[  427.685164][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3243'.
[  427.686803][T17400] batman_adv: batadv0: Interface activated: batadv_slave_1
[  427.731062][T17400] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  427.757946][T17400] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  427.791709][T17400] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  427.801950][T17400] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  427.886335][T17723] netlink: 'syz.4.3245': attribute type 16 has an invalid length.
[  427.903599][ T5842] Bluetooth: hci0: command 0x041b tx timeout
[  427.960726][T17723] netlink: 'syz.4.3245': attribute type 17 has an invalid length.
[  427.983322][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 96 seconds
[  428.082345][T17436] 8021q: adding VLAN 0 to HW filter on device batadv0
[  428.126654][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.147332][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.257969][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.277343][T17735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  428.279689][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.302198][T17436] veth0_vlan: entered promiscuous mode
[  428.360997][T17436] veth1_vlan: entered promiscuous mode
[  428.446886][T17740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3250'.
[  428.462146][T17436] veth0_macvtap: entered promiscuous mode
[  428.492324][T17436] veth1_macvtap: entered promiscuous mode
[  428.541672][T17436] batman_adv: batadv0: Interface activated: batadv_slave_0
[  428.582217][T17436] batman_adv: batadv0: Interface activated: batadv_slave_1
[  428.621874][T17436] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  428.645777][T17436] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  428.663334][T17436] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  428.672474][T17436] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  428.903695][T17755] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 3, id = 0
[  428.916345][T17754] IPVS: stopping backup sync thread 17755 ...
[  428.924996][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.943820][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  429.004069][T17757] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3255'.
[  429.004576][T17760] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3255'.
[  429.027633][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  429.047820][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  429.525195][T17782] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3260'.
[  429.535411][T17750] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  429.640487][T17785] openvswitch: netlink: IP tunnel dst address not specified
[  429.662575][T17784] macvlan1: entered promiscuous mode
[  429.669118][T17784] macvlan1: entered allmulticast mode
[  429.680779][T17789] smc: net device bond0 applied user defined pnetid SYZ2
[  429.692353][T17789] smc: net device bond0 erased user defined pnetid SYZ2
[  429.701817][T17789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3262'.
[  429.867395][T17797] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  429.868545][T17798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3265'.
[  430.028470][ T6002] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.056187][T17802] x_tables: duplicate underflow at hook 1
[  430.308479][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 97 seconds
[  430.481301][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  430.501973][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  430.512422][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  430.524376][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  430.546392][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  431.435427][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  431.458337][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  431.475642][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  431.502140][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  431.516684][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  432.339689][ T6002] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.478533][ T6002] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.625613][ T5849] Bluetooth: hci0: command tx timeout
[  432.631945][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 98 seconds
[  432.663915][ T6002] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.666219][T17824] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3275'.
[  432.689107][T17824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3275'.
[  432.745722][T17822] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3274'.
[  432.886203][T17824] bond3: (slave ip6gretap1): Releasing backup interface
[  432.898221][T17824] bond0: (slave bond8): Releasing active interface
[  432.908459][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.922201][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.944993][T17822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3274'.
[  433.457524][T17857] vxcan1: tx address claim with dest, not broadcast
[  433.543813][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.557636][ T6002] bridge_slave_1: left allmulticast mode
[  433.587843][ T6002] bridge_slave_1: left promiscuous mode
[  433.592795][ T5849] Bluetooth: hci3: command tx timeout
[  433.604094][ T6002] bridge0: port 2(bridge_slave_1) entered disabled state
[  433.637743][ T6002] bridge_slave_0: left allmulticast mode
[  433.663270][ T6002] bridge_slave_0: left promiscuous mode
[  433.669077][ T6002] bridge0: port 1(bridge_slave_0) entered disabled state
[  433.833539][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.131461][ T6002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  434.142684][ T6002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  434.154867][ T6002] bond0 (unregistering): Released all slaves
[  434.170796][T17811] chnl_net:caif_netlink_parms(): no params data found
[  434.227874][T17803] chnl_net:caif_netlink_parms(): no params data found
[  434.455114][T17890] vxcan1: tx drop: invalid sa for name 0x0000000000000001
[  434.464686][T17890] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3291'.
[  434.608070][T17900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3292'.
[  434.703507][ T5849] Bluetooth: hci0: command tx timeout
[  434.918643][T17811] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.926817][T17811] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.938286][T17811] bridge_slave_0: entered allmulticast mode
[  434.955278][T17811] bridge_slave_0: entered promiscuous mode
[  434.961284][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 99 seconds
[  434.975418][T17811] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.982592][T17811] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.990674][T17811] bridge_slave_1: entered allmulticast mode
[  434.998698][T17811] bridge_slave_1: entered promiscuous mode
[  435.039238][T17916] netlink: 'syz.4.3296': attribute type 1 has an invalid length.
[  435.048598][ T6002] hsr_slave_0: left promiscuous mode
[  435.050495][T17916] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3296'.
[  435.069888][ T6002] hsr_slave_1: left promiscuous mode
[  435.090258][ T6002] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  435.097842][ T6002] batman_adv: batadv0: Removing interface: batadv_slave_0
[  435.120914][ T6002] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  435.132459][ T6002] batman_adv: batadv0: Removing interface: batadv_slave_1
[  435.160821][ T6002] veth1_macvtap: left promiscuous mode
[  435.166485][ T6002] veth0_macvtap: left promiscuous mode
[  435.172236][ T6002] veth1_vlan: left promiscuous mode
[  435.179888][ T6002] veth0_vlan: left promiscuous mode
[  435.664638][ T5849] Bluetooth: hci3: command tx timeout
[  435.853540][ T6002] team0 (unregistering): Port device team_slave_1 removed
[  435.895569][ T6002] team0 (unregistering): Port device team_slave_0 removed
[  436.432112][T17803] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.442031][T17803] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.449591][T17803] bridge_slave_0: entered allmulticast mode
[  436.457757][T17803] bridge_slave_0: entered promiscuous mode
[  436.485525][T17811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  436.495344][T17803] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.502776][T17803] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.511766][T17803] bridge_slave_1: entered allmulticast mode
[  436.535340][T17803] bridge_slave_1: entered promiscuous mode
[  436.650118][T17811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  436.692372][T17966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3308'.
[  436.738089][T17803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  436.783417][ T5849] Bluetooth: hci0: command tx timeout
[  436.818633][T17803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  436.882688][T17975] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3308'.
[  437.035102][T17811] team0: Port device team_slave_0 added
[  437.050105][T17811] team0: Port device team_slave_1 added
[  437.070799][T17803] team0: Port device team_slave_0 added
[  437.089419][T17803] team0: Port device team_slave_1 added
[  437.207103][T17811] batman_adv: batadv0: Adding interface: batadv_slave_0
[  437.219641][T17811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  437.251345][T17811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  437.278175][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 100 seconds
[  437.308646][T17811] batman_adv: batadv0: Adding interface: batadv_slave_1
[  437.316297][T17811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  437.343666][T17811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  437.358953][T17803] batman_adv: batadv0: Adding interface: batadv_slave_0
[  437.378706][T17803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  437.405511][T17803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  437.429973][T17990] openvswitch: netlink: Key type 272 is out of range max 32
[  437.431991][T17803] batman_adv: batadv0: Adding interface: batadv_slave_1
[  437.445549][T17803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  437.508875][T17803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  437.662137][T17996] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  437.686167][T17811] hsr_slave_0: entered promiscuous mode
[  437.695987][T17811] hsr_slave_1: entered promiscuous mode
[  437.710053][T17998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3319'.
[  437.748196][ T5849] Bluetooth: hci3: command tx timeout
[  437.772213][T18005] ip6t_srh: unknown srh match flags  536B
[  437.791655][T17803] hsr_slave_0: entered promiscuous mode
[  437.798439][T17803] hsr_slave_1: entered promiscuous mode
[  437.806340][T17803] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  437.814326][T17803] Cannot create hsr debugfs directory
[  438.132727][T18016] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3325'.
[  438.338635][T18024] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3327'.
[  438.351497][T18024] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3327'.
[  438.517254][T18032] xt_hashlimit: Unknown mode mask 115, kernel too old?
[  438.533897][T18032] sctp: [Deprecated]: syz.4.3329 (pid 18032) Use of int in maxseg socket option.
[  438.533897][T18032] Use struct sctp_assoc_value instead
[  438.751000][T17803] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  438.778768][T17803] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.822003][T18040] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3331'.
[  438.866310][ T5849] Bluetooth: hci0: command tx timeout
[  438.908695][T18047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3336'.
[  438.931040][T17803] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  438.952020][T18047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3336'.
[  438.954052][T17803] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.988110][T18048] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  439.081265][T17803] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  439.109758][T17803] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.131543][T18062] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3339'.
[  439.209601][T17803] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  439.230964][T17803] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.244041][T18066] Bluetooth: MGMT ver 1.23
[  439.273683][ T6002] bond0: (slave bond_slave_0): interface is now down
[  439.280720][ T6002] bond0: (slave bond_slave_1): interface is now down
[  439.291288][T18068] openvswitch: netlink: Unknown key attributes 2
[  439.297137][ T6002] bond0: now running without any active interface!
[  439.434913][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  439.452563][T18072] netlink: 'syz.1.3344': attribute type 4 has an invalid length.
[  439.462514][T18072] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3344'.
[  439.573489][T17811] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  439.588056][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 101 seconds
[  439.641611][T18083] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  439.727270][T17811] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  439.754994][T17811] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  439.776482][T17811] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  439.823172][ T5849] Bluetooth: hci3: command tx timeout
[  439.845298][T17803] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  439.865414][T17803] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  439.889848][T17803] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  439.901465][T17803] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  439.918651][T18092] netlink: 'syz.0.3349': attribute type 21 has an invalid length.
[  439.930343][T18092] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3349'.
[  439.952193][T18089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3349'.
[  439.990482][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  440.087095][T17811] 8021q: adding VLAN 0 to HW filter on device bond0
[  440.126321][T17811] 8021q: adding VLAN 0 to HW filter on device team0
[  440.139305][T17803] 8021q: adding VLAN 0 to HW filter on device bond0
[  440.158247][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.165503][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  440.186578][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.193782][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  440.210341][T17803] 8021q: adding VLAN 0 to HW filter on device team0
[  440.246391][ T6002] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.253596][ T6002] bridge0: port 1(bridge_slave_0) entered forwarding state
[  440.277661][ T6002] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.284838][ T6002] bridge0: port 2(bridge_slave_1) entered forwarding state
[  440.682096][T17803] 8021q: adding VLAN 0 to HW filter on device batadv0
[  440.732000][T18110] openvswitch: netlink: Tunnel attr 303 out of range max 16
[  440.795265][T17811] 8021q: adding VLAN 0 to HW filter on device batadv0
[  440.872404][T17803] veth0_vlan: entered promiscuous mode
[  440.919391][T17803] veth1_vlan: entered promiscuous mode
[  440.950155][T17811] veth0_vlan: entered promiscuous mode
[  440.989470][T17811] veth1_vlan: entered promiscuous mode
[  441.038759][T17803] veth0_macvtap: entered promiscuous mode
[  441.078575][T17803] veth1_macvtap: entered promiscuous mode
[  441.154342][T17811] veth0_macvtap: entered promiscuous mode
[  441.179834][T17811] veth1_macvtap: entered promiscuous mode
[  441.200128][T17803] batman_adv: batadv0: Interface activated: batadv_slave_0
[  441.226736][T17803] batman_adv: batadv0: Interface activated: batadv_slave_1
[  441.239806][T17803] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  441.249149][T17803] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  441.260745][T17803] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  441.271307][T17803] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  441.302790][T17811] batman_adv: batadv0: Interface activated: batadv_slave_0
[  441.327059][T17811] batman_adv: batadv0: Interface activated: batadv_slave_1
[  441.383769][T17811] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  441.392533][T17811] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  441.410994][T17811] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  441.420313][T17811] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  441.509588][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  441.522212][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  441.610745][ T6002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  441.629305][ T6002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  441.689874][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  441.719343][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  441.816518][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  441.846885][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  441.905767][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 102 seconds
[  442.342220][T18159] x_tables: duplicate underflow at hook 3
[  442.431347][T18170] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  442.432137][T18169] x_tables: ip_tables: osf match: only valid for protocol 6
[  442.576614][T18177] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  442.754178][T18182] netlink: 'syz.2.3372': attribute type 4 has an invalid length.
[  442.827137][T18182] netlink: 'syz.2.3372': attribute type 4 has an invalid length.
[  443.162362][ T6000] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.547639][ T6000] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.596323][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  443.609200][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  443.619611][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  443.645538][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  443.656491][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  443.819866][ T6000] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.871670][T18203] chnl_net:caif_netlink_parms(): no params data found
[  443.909156][ T6000] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.996720][T18203] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.004265][T18203] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.011785][T18203] bridge_slave_0: entered allmulticast mode
[  444.019664][T18203] bridge_slave_0: entered promiscuous mode
[  444.029290][T18203] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.036834][T18203] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.045050][T18203] bridge_slave_1: entered allmulticast mode
[  444.052095][T18203] bridge_slave_1: entered promiscuous mode
[  444.108655][T18203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  444.137106][T18203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  444.224951][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 103 seconds
[  444.298418][T18203] team0: Port device team_slave_0 added
[  444.438981][T18203] team0: Port device team_slave_1 added
[  444.455838][ T6000] bridge_slave_1: left allmulticast mode
[  444.475043][ T6000] bridge_slave_1: left promiscuous mode
[  444.480869][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.530275][ T6000] bridge_slave_0: left allmulticast mode
[  444.539981][ T6000] bridge_slave_0: left promiscuous mode
[  444.557976][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.590103][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  444.600192][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  444.610637][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  444.630050][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  444.638745][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  444.734353][T18224] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:8
[  445.170214][ T6000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  445.181461][ T6000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  445.198126][ T6000] bond0 (unregistering): Released all slaves
[  445.309869][T18203] batman_adv: batadv0: Adding interface: batadv_slave_0
[  445.333379][T18203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  445.394821][T18203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  445.534033][T18203] batman_adv: batadv0: Adding interface: batadv_slave_1
[  445.541036][T18203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  445.573640][T18203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  445.743904][ T5849] Bluetooth: hci3: command tx timeout
[  445.899850][T18249] __nla_validate_parse: 8 callbacks suppressed
[  445.899868][T18249] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3388'.
[  446.006044][ T6000] hsr_slave_0: left promiscuous mode
[  446.030824][ T6000] hsr_slave_1: left promiscuous mode
[  446.043885][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  446.051737][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_0
[  446.062375][T18260] Bluetooth: MGMT ver 1.23
[  446.084457][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  446.092488][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_1
[  446.142129][ T6000] veth1_macvtap: left promiscuous mode
[  446.163103][ T6000] veth0_macvtap: left promiscuous mode
[  446.181034][ T6000] veth1_vlan: left promiscuous mode
[  446.188663][ T6000] veth0_vlan: left promiscuous mode
[  446.552457][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 104 seconds
[  446.718128][ T5849] Bluetooth: hci4: command tx timeout
[  446.807539][ T6000] team0 (unregistering): Port device team_slave_1 removed
[  446.857444][ T6000] team0 (unregistering): Port device team_slave_0 removed
[  447.329859][T18203] hsr_slave_0: entered promiscuous mode
[  447.338675][T18203] hsr_slave_1: entered promiscuous mode
[  447.565860][T18282] netlink: 'syz.1.3396': attribute type 7 has an invalid length.
[  447.823073][ T5849] Bluetooth: hci3: command tx timeout
[  447.951634][T18219] chnl_net:caif_netlink_parms(): no params data found
[  448.127156][T18307] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3404'.
[  448.225688][T18203] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.374652][T18316] 8021q: adding VLAN 0 to HW filter on device bond10
[  448.391766][T18316] bond0: (slave bond10): Enslaving as an active interface with a down link
[  448.420765][T18315] 8021q: adding VLAN 0 to HW filter on device bond11
[  448.429743][T18315] bond0: (slave bond11): Enslaving as an active interface with a down link
[  448.453577][T18322] netlink: 'syz.0.3407': attribute type 21 has an invalid length.
[  448.503730][T18203] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.546403][T18322] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3407'.
[  448.625633][T18203] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.657637][T18219] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.682613][T18219] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.702564][T18219] bridge_slave_0: entered allmulticast mode
[  448.728804][T18219] bridge_slave_0: entered promiscuous mode
[  448.751843][T18219] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.770173][T18219] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.779870][T18219] bridge_slave_1: entered allmulticast mode
[  448.785992][ T5849] Bluetooth: hci4: command tx timeout
[  448.799188][T18219] bridge_slave_1: entered promiscuous mode
[  448.880139][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 105 seconds
[  448.937249][T18203] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.040483][T18341] tipc: Started in network mode
[  449.046297][T18341] tipc: Node identity d682f727b0dd, cluster identity 4711
[  449.055139][T18341] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  449.077664][T18219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  449.162979][T18343] syzkaller0: entered promiscuous mode
[  449.168497][T18343] syzkaller0: entered allmulticast mode
[  449.189050][T18343] tipc: Resetting bearer <eth:syzkaller0>
[  449.197744][T18359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3415'.
[  449.216917][T18219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  449.261808][T18339] tipc: Resetting bearer <eth:syzkaller0>
[  449.903136][ T5849] Bluetooth: hci3: command tx timeout
[  450.113097][ T5892] tipc: Node number set to 1717565223
[  450.866094][ T5849] Bluetooth: hci4: command tx timeout
[  451.026351][T18339] tipc: Disabling bearer <eth:syzkaller0>
[  451.054808][ T6000] tipc: Resetting bearer <eth:xfrm0>
[  451.200756][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 106 seconds
[  451.232004][ T6000] tipc: Disabling bearer <eth:xfrm0>
[  451.277892][ T6000] batman_adv: batadv0: Removing interface: gretap1
[  451.310462][ T6000] bond4 (unregistering): (slave gretap3): Releasing active interface
[  451.365741][ T6000] dvmrp0 (unregistering): left allmulticast mode
[  451.824133][ T6000] bond1 (unregistering): Released all slaves
[  451.837480][ T6000] bond2 (unregistering): Released all slaves
[  451.954129][ T6000] bond3 (unregistering): Released all slaves
[  451.968599][ T6000] bond4 (unregistering): Released all slaves
[  451.981432][ T6000] bond0 (unregistering): Released all slaves
[  451.988181][ T5849] Bluetooth: hci3: command tx timeout
[  452.113337][ T6000] bond5 (unregistering): Released all slaves
[  452.248062][T18219] team0: Port device team_slave_0 added
[  452.301527][T18219] team0: Port device team_slave_1 added
[  452.436672][T18383] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  452.448821][T18385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3420'.
[  452.461879][T18383] batman_adv: batadv0: Removing interface: batadv_slave_0
[  452.491338][T18383] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  452.501322][T18383] batman_adv: batadv0: Removing interface: batadv_slave_1
[  452.618883][T18392] netlink: 'syz.1.3423': attribute type 1 has an invalid length.
[  452.731943][T18392] bond12: entered promiscuous mode
[  452.737655][T18392] 8021q: adding VLAN 0 to HW filter on device bond12
[  452.746153][T18219] batman_adv: batadv0: Adding interface: batadv_slave_0
[  452.755135][T18219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  452.782298][T18219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  452.819866][T18394] 8021q: adding VLAN 0 to HW filter on device bond12
[  452.835188][T18394] bond12: (slave wireguard0): The slave device specified does not support setting the MAC address
[  452.846843][T18394] bond12: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  452.862673][T18394] bond12: (slave wireguard0): making interface the new active one
[  452.874140][T18394] wireguard0: entered promiscuous mode
[  452.880684][T18394] bond12: (slave wireguard0): Enslaving as an active interface with an up link
[  452.931843][T18219] batman_adv: batadv0: Adding interface: batadv_slave_1
[  452.940682][T18219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  452.944351][ T5849] Bluetooth: hci4: command tx timeout
[  452.994086][T18219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  453.072545][T18203] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  453.276733][T18203] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  453.312484][T18219] hsr_slave_0: entered promiscuous mode
[  453.321996][T18219] hsr_slave_1: entered promiscuous mode
[  453.331764][T18219] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  453.345907][T18219] Cannot create hsr debugfs directory
[  453.351881][T18203] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  453.450479][T18203] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  453.482099][T18436] netlink: 'syz.1.3436': attribute type 1 has an invalid length.
[  453.500472][T18436] netlink: 'syz.1.3436': attribute type 2 has an invalid length.
[  453.517715][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 107 seconds
[  453.527924][T18436] netlink: 'syz.1.3436': attribute type 1 has an invalid length.
[  453.536738][T18436] netlink: 1156 bytes leftover after parsing attributes in process `syz.1.3436'.
[  453.668566][T18445] netlink: 'syz.1.3440': attribute type 4 has an invalid length.
[  453.682515][T18445] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3440'.
[  453.975052][T18203] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.035568][T18203] 8021q: adding VLAN 0 to HW filter on device team0
[  454.072533][ T5990] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.079781][ T5990] bridge0: port 1(bridge_slave_0) entered forwarding state
[  454.105665][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.112930][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  454.249809][T18469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3448'.
[  454.329681][T18219] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  454.359372][T18219] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  454.382432][T18219] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  454.405252][T18219] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  454.417714][T18473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3449'.
[  454.450753][T18473] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3449'.
[  454.667105][T18203] 8021q: adding VLAN 0 to HW filter on device batadv0
[  454.688412][T18219] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.737210][T18219] 8021q: adding VLAN 0 to HW filter on device team0
[  454.772324][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.779565][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  454.857644][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.864870][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  454.927524][T18494] sit0: entered promiscuous mode
[  454.940375][T18494] netlink: 'syz.1.3453': attribute type 1 has an invalid length.
[  454.949130][T18494] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3453'.
[  454.970437][T18486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3451'.
[  455.078587][T18499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3453'.
[  455.515691][T18203] veth0_vlan: entered promiscuous mode
[  455.561633][T18203] veth1_vlan: entered promiscuous mode
[  455.624829][T18219] 8021q: adding VLAN 0 to HW filter on device batadv0
[  455.720172][T18203] veth0_macvtap: entered promiscuous mode
[  455.727651][T18523] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3460'.
[  455.758978][T18203] veth1_macvtap: entered promiscuous mode
[  455.770209][T18523] wireguard: wg1: Could not create IPv4 socket
[  455.832480][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 108 seconds
[  455.847108][T18219] veth0_vlan: entered promiscuous mode
[  455.863452][T18219] veth1_vlan: entered promiscuous mode
[  455.965389][T18203] batman_adv: batadv0: Interface activated: batadv_slave_0
[  455.975968][T18219] veth0_macvtap: entered promiscuous mode
[  456.022460][T18219] veth1_macvtap: entered promiscuous mode
[  456.059435][T18203] batman_adv: batadv0: Interface activated: batadv_slave_1
[  456.118837][T18203] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.150451][T18203] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.173756][T18203] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.182514][T18203] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  456.246349][T18219] batman_adv: batadv0: Interface activated: batadv_slave_0
[  456.458181][T18219] batman_adv: batadv0: Interface activated: batadv_slave_1
[  456.526324][T18219] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.537241][T18219] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.547437][T18219] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.599366][T18219] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  456.827440][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  456.861707][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  456.938602][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  456.967601][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.001655][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.020088][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.112196][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.126659][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.221034][T18579] tipc: Started in network mode
[  457.235673][T18579] tipc: Node identity 7ade47e333c9, cluster identity 4711
[  457.262635][T18579] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  457.294422][T18579] syzkaller0: entered promiscuous mode
[  457.300747][T18579] syzkaller0: entered allmulticast mode
[  457.360019][T18575] tipc: Resetting bearer <eth:syzkaller0>
[  457.379162][T18575] tipc: Disabling bearer <eth:syzkaller0>
[  457.558437][T18588] openvswitch: netlink: Unknown key attributes 2
[  457.747218][T18596] xt_HMARK: proto mask must be zero with L3 mode
[  458.145631][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 109 seconds
[  459.052564][T18609] openvswitch: netlink: VXLAN extension 173 out of range max 1
[  459.616469][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  459.626743][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  459.636569][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  459.649302][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  459.659870][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  460.134270][T18667] syzkaller1: entered promiscuous mode
[  460.139812][T18667] syzkaller1: entered allmulticast mode
[  460.148365][T18639] chnl_net:caif_netlink_parms(): no params data found
[  460.452667][T18679] __nla_validate_parse: 5 callbacks suppressed
[  460.452685][T18679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3502'.
[  460.481316][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 110 seconds
[  460.497406][T18683] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3504'.
[  460.510427][T18683] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  460.676012][T18639] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.689916][T18639] bridge0: port 1(bridge_slave_0) entered disabled state
[  460.701156][T18639] bridge_slave_0: entered allmulticast mode
[  460.731187][T18639] bridge_slave_0: entered promiscuous mode
[  460.770905][T18639] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.822489][T18639] bridge0: port 2(bridge_slave_1) entered disabled state
[  460.848841][T18639] bridge_slave_1: entered allmulticast mode
[  460.860864][T18639] bridge_slave_1: entered promiscuous mode
[  460.886542][T18695] veth0: entered promiscuous mode
[  460.918951][T18701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3509'.
[  460.950448][T18701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3509'.
[  460.961291][T18695] veth0: left promiscuous mode
[  460.995870][T18639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  461.029820][T18639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  461.212574][T18716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3515'.
[  461.405057][T18639] team0: Port device team_slave_0 added
[  461.427435][T18639] team0: Port device team_slave_1 added
[  461.589126][T18639] batman_adv: batadv0: Adding interface: batadv_slave_0
[  461.597520][T18639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  461.598587][T18733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3520'.
[  461.629541][T18639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  461.657215][T18639] batman_adv: batadv0: Adding interface: batadv_slave_1
[  461.673028][T18737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3520'.
[  461.676890][T18639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  461.714134][T18739] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  461.744343][ T5849] Bluetooth: hci4: command tx timeout
[  461.806833][T18639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  462.072434][T18639] hsr_slave_0: entered promiscuous mode
[  462.101774][T18639] hsr_slave_1: entered promiscuous mode
[  462.116542][T18639] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  462.149681][T18639] Cannot create hsr debugfs directory
[  462.590287][T18780] No such timeout policy "syz0"
[  462.657690][T18785] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20001
[  462.668410][T18785] x_tables: duplicate underflow at hook 1
[  462.726084][T18788] xt_CT: You must specify a L4 protocol and not use inversions on it
[  462.788348][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 111 seconds
[  462.818313][T18639] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.997072][T18639] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.018146][T18795] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3537'.
[  463.146280][T18639] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.425841][T18806] unknown channel width for channel at 909000KHz?
[  463.442494][T18812] vti0: entered promiscuous mode
[  463.558719][T18639] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.559083][T18817] netlink: 'syz.0.3544': attribute type 1 has an invalid length.
[  463.679156][T18823] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  463.824564][ T5849] Bluetooth: hci4: command tx timeout
[  463.862990][T18639] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  463.879393][T18639] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  463.915587][T18639] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  463.938256][T18639] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  463.960581][T18839] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3550'.
[  464.110675][T18639] 8021q: adding VLAN 0 to HW filter on device bond0
[  464.148548][T18639] 8021q: adding VLAN 0 to HW filter on device team0
[  464.171674][ T5990] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.179003][ T5990] bridge0: port 1(bridge_slave_0) entered forwarding state
[  464.256185][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.263483][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  464.629231][T18639] 8021q: adding VLAN 0 to HW filter on device batadv0
[  464.727774][T18639] veth0_vlan: entered promiscuous mode
[  464.747505][T18639] veth1_vlan: entered promiscuous mode
[  464.900267][T18639] veth0_macvtap: entered promiscuous mode
[  464.929582][T18639] veth1_macvtap: entered promiscuous mode
[  465.031252][T18867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3559'.
[  465.103655][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 112 seconds
[  465.221153][T18639] batman_adv: batadv0: Interface activated: batadv_slave_0
[  465.309965][T18639] batman_adv: batadv0: Interface activated: batadv_slave_1
[  465.357982][T18639] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  465.378692][T18639] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  465.404691][T18639] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  465.437325][T18639] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  465.481964][T18889] bond0: entered allmulticast mode
[  465.498255][T18889] bond_slave_0: entered allmulticast mode
[  465.506657][T18889] bond_slave_1: entered allmulticast mode
[  465.670761][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.723132][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.869542][T18904] netlink: 'syz.4.3571': attribute type 1 has an invalid length.
[  465.877887][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.888788][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.899153][T18904] __nla_validate_parse: 2 callbacks suppressed
[  465.899168][T18904] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3571'.
[  465.918121][ T5849] Bluetooth: hci4: command tx timeout
[  465.961672][T18904] netlink: 'syz.4.3571': attribute type 1 has an invalid length.
[  466.137755][T18916] sctp: [Deprecated]: syz.0.3575 (pid 18916) Use of struct sctp_assoc_value in delayed_ack socket option.
[  466.137755][T18916] Use struct sctp_sack_info instead
[  466.202143][T18915] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3574'.
[  466.221870][T18915] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3574'.
[  466.247210][T18915] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3574'.
[  466.262333][T18915] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3574'.
[  466.272278][T18915] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3574'.
[  466.282168][T18915] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3574'.
[  466.291845][T18915] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3574'.
[  466.301826][T18915] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3574'.
[  466.313106][T18915] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3574'.
[  467.112230][T18966] netlink: 'syz.2.3591': attribute type 1 has an invalid length.
[  467.248273][T18976] netlink: 'syz.4.3589': attribute type 1 has an invalid length.
[  467.424806][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 113 seconds
[  468.081878][T18966] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  468.091713][T18972] gretap1: entered allmulticast mode
[  468.140381][T18974] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64)
[  468.577963][T18983] netlink: 'syz.0.3593': attribute type 13 has an invalid length.
[  468.596310][T18983] netlink: 'syz.0.3593': attribute type 58 has an invalid length.
[  468.733009][T18989] can: request_module (can-proto-0) failed.
[  469.326139][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  469.340540][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  469.362578][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  469.376605][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  469.399088][T19032] netlink: 'syz.2.3605': attribute type 30 has an invalid length.
[  469.408412][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  469.430273][T19032] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  469.439189][T19032] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  469.448351][T19032] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  469.457264][T19032] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  469.501789][T19032] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  469.512116][T19032] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  469.523669][T19032] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  469.532572][T19032] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  469.744037][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 114 seconds
[  470.375447][T19084] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001
[  470.386693][T19029] chnl_net:caif_netlink_parms(): no params data found
[  471.275154][T19106] unsupported nla_type 52263
[  471.467150][T19029] bridge0: port 1(bridge_slave_0) entered blocking state
[  471.478549][T19029] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.487671][T19029] bridge_slave_0: entered allmulticast mode
[  471.496759][T19029] bridge_slave_0: entered promiscuous mode
[  471.503630][ T5842] Bluetooth: hci4: command tx timeout
[  471.505516][T19029] bridge0: port 2(bridge_slave_1) entered blocking state
[  471.516800][T19029] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.524619][T19029] bridge_slave_1: entered allmulticast mode
[  471.530842][T19125] IPVS: ip_vs_add_dest(): server weight less than zero
[  471.532651][T19029] bridge_slave_1: entered promiscuous mode
[  471.552582][  T979] IPVS: starting estimator thread 0...
[  471.629025][T19136] netlink: 'syz.1.3632': attribute type 2 has an invalid length.
[  471.664053][T19132] IPVS: using max 41 ests per chain, 98400 per kthread
[  471.705042][T19029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  471.747826][T19029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  471.871207][T19146] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  471.932007][T19029] team0: Port device team_slave_0 added
[  471.992129][T19029] team0: Port device team_slave_1 added
[  472.067051][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 115 seconds
[  472.090815][T19029] batman_adv: batadv0: Adding interface: batadv_slave_0
[  472.110234][T19029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  472.138220][T19029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  472.168491][T19029] batman_adv: batadv0: Adding interface: batadv_slave_1
[  472.202258][T19029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  472.256886][T19029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  472.555548][T19029] hsr_slave_0: entered promiscuous mode
[  472.607495][T19029] hsr_slave_1: entered promiscuous mode
[  472.609794][T19184] __nla_validate_parse: 66 callbacks suppressed
[  472.609839][T19184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3644'.
[  472.649847][T19029] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  472.682007][T19029] Cannot create hsr debugfs directory
[  472.808654][T19191] netlink: 'syz.2.3646': attribute type 3 has an invalid length.
[  472.816978][T19191] netlink: 766 bytes leftover after parsing attributes in process `syz.2.3646'.
[  472.930790][T19197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3647'.
[  473.061477][T19210] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  473.334890][T19218] netlink: 'syz.1.3653': attribute type 8 has an invalid length.
[  473.377883][T19224] 8021q: adding VLAN 0 to HW filter on device bond1
[  473.395247][T19230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3654'.
[  473.422208][T19224] bond0: (slave bond1): Enslaving as an active interface with a down link
[  473.446216][T19220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3654'.
[  473.478288][T19029] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.583570][ T5842] Bluetooth: hci4: command tx timeout
[  473.593263][T19238] netlink: 'syz.0.3659': attribute type 1 has an invalid length.
[  473.664391][T19234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3654'.
[  473.665668][T19029] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.775542][T19029] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.018998][T19029] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.051464][T19266] sctp: [Deprecated]: syz.2.3666 (pid 19266) Use of int in max_burst socket option deprecated.
[  474.051464][T19266] Use struct sctp_assoc_value instead
[  474.120496][T19269] xt_bpf: check failed: parse error
[  474.360450][T19029] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  474.391414][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 116 seconds
[  474.439616][T19029] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  474.538857][T19286] openvswitch: netlink: Flow key attribute not present in set flow.
[  474.558583][T19029] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  474.610718][T19029] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  474.655176][T19290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3672'.
[  474.666941][T19290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3672'.
[  474.678566][T19293] veth0: entered promiscuous mode
[  474.690603][T19291] veth0: left promiscuous mode
[  474.812247][T19297] netlink: 'syz.2.3673': attribute type 8 has an invalid length.
[  474.840969][T19298] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3673'.
[  474.866363][T19298] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3673'.
[  474.925973][T19301] xt_CT: You must specify a L4 protocol and not use inversions on it
[  474.990398][T19029] 8021q: adding VLAN 0 to HW filter on device bond0
[  475.071745][T19029] 8021q: adding VLAN 0 to HW filter on device team0
[  475.101037][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.108270][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  475.182229][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.189466][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  475.229834][T19029] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  475.250999][T19029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  475.295906][T19314] x_tables: ip6_tables: mh match: only valid for protocol 135
[  475.412063][T19312] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  475.435121][T19318] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20004
[  475.664724][ T5842] Bluetooth: hci4: command tx timeout
[  475.719465][T19328] bond1: entered promiscuous mode
[  475.732610][T19328] bond1: entered allmulticast mode
[  475.746588][T19328] 8021q: adding VLAN 0 to HW filter on device bond1
[  475.774293][T19334] pim6reg: entered allmulticast mode
[  475.785380][T19337] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  475.941849][T19029] 8021q: adding VLAN 0 to HW filter on device batadv0
[  476.048848][T19029] veth0_vlan: entered promiscuous mode
[  476.109426][T19029] veth1_vlan: entered promiscuous mode
[  476.183459][T19356] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  476.324566][T19029] veth0_macvtap: entered promiscuous mode
[  476.365570][T19029] veth1_macvtap: entered promiscuous mode
[  476.397764][T19029] batman_adv: batadv0: Interface activated: batadv_slave_0
[  476.431209][T19029] batman_adv: batadv0: Interface activated: batadv_slave_1
[  476.506529][T19366] veth3: entered allmulticast mode
[  476.508110][T19369] xt_l2tp: invalid flags combination: 4
[  476.521571][T19029] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  476.531673][T19029] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  476.550378][T19029] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  476.561651][T19029] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  476.704012][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 117 seconds
[  476.899090][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  476.929683][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  477.070844][ T5990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  477.099740][ T5990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  477.677321][T19400] netlink: 'syz.4.3707': attribute type 1 has an invalid length.
[  477.688895][T19400] __nla_validate_parse: 5 callbacks suppressed
[  477.688917][T19400] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3707'.
[  477.740505][T19403] RDS: rds_bind could not find a transport for ::ffff:172.20.20.53, load rds_tcp or rds_rdma?
[  478.041836][T19418] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  478.058596][T19420] netlink: 'syz.4.3713': attribute type 4 has an invalid length.
[  478.114777][T19420] netlink: 'syz.4.3713': attribute type 4 has an invalid length.
[  479.025688][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 118 seconds
[  479.534909][T19441] netem: incorrect ge model size
[  479.540186][T19441] netem: change failed
[  479.545320][T19442] xt_socket: unknown flags 0x2
[  479.605494][T19440] netem: incorrect ge model size
[  479.610860][T19440] netem: change failed
[  479.716186][T19447] netlink: 'syz.1.3722': attribute type 10 has an invalid length.
[  479.734483][T19452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3723'.
[  479.773963][T19453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3723'.
[  480.010350][T19467] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.015328][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  480.018070][T19467] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.027897][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  480.041533][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  480.049518][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  480.057315][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  480.285971][T19477] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  480.334039][T19484] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  480.610027][T19469] chnl_net:caif_netlink_parms(): no params data found
[  480.711329][T19507] team0: entered promiscuous mode
[  480.730525][T19507] team_slave_0: entered promiscuous mode
[  480.749162][T19507] team_slave_1: entered promiscuous mode
[  480.760161][T19507] batadv_slave_1: entered promiscuous mode
[  480.809463][T19514] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  480.892025][T19514] tipc: Cannot configure node identity twice
[  480.941150][T19521] x_tables: duplicate underflow at hook 1
[  480.973087][T19469] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.980310][T19469] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.998831][T19469] bridge_slave_0: entered allmulticast mode
[  481.002106][T19524] xt_ecn: cannot match TCP bits for non-tcp packets
[  481.007198][T19469] bridge_slave_0: entered promiscuous mode
[  481.020921][T19469] bridge0: port 2(bridge_slave_1) entered blocking state
[  481.029759][T19469] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.037709][T19469] bridge_slave_1: entered allmulticast mode
[  481.054457][T19469] bridge_slave_1: entered promiscuous mode
[  481.152671][T19469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  481.169140][T19469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  481.240978][T19469] team0: Port device team_slave_0 added
[  481.261853][T19469] team0: Port device team_slave_1 added
[  481.343928][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 119 seconds
[  481.411155][T19534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3743'.
[  481.445822][T19469] batman_adv: batadv0: Adding interface: batadv_slave_0
[  481.461809][T19469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  481.521267][T19469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  481.565219][T19469] batman_adv: batadv0: Adding interface: batadv_slave_1
[  481.582589][T19469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  481.619412][T19539] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  481.638187][T19469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  481.791958][T19469] hsr_slave_0: entered promiscuous mode
[  481.811426][T19469] hsr_slave_1: entered promiscuous mode
[  481.850159][T19469] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  481.870872][T19469] Cannot create hsr debugfs directory
[  481.943290][T19552] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3747'.
[  482.002558][T19549] IPVS: persistence engine module ip_vs_pe_À
 not found
[  482.148241][ T5842] Bluetooth: hci4: command tx timeout
[  482.621620][T19469] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.736813][T19592] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3757'.
[  482.785917][T19469] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.881969][T19469] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.975101][T19469] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.273518][T19611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3764'.
[  483.295796][T19469] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  483.306042][T19611] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  483.327305][T19469] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  483.372808][T19469] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  483.420455][T19469] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  483.628664][T19469] 8021q: adding VLAN 0 to HW filter on device bond0
[  483.663303][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 120 seconds
[  483.690923][T19469] 8021q: adding VLAN 0 to HW filter on device team0
[  483.708316][ T6015] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.715522][ T6015] bridge0: port 1(bridge_slave_0) entered forwarding state
[  483.822848][ T6015] bridge0: port 2(bridge_slave_1) entered blocking state
[  483.830128][ T6015] bridge0: port 2(bridge_slave_1) entered forwarding state
[  484.045952][T19469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  484.073546][T19643] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3774'.
[  484.224245][ T5842] Bluetooth: hci4: command tx timeout
[  484.282738][T19658] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3776'.
[  484.358848][T19658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3776'.
[  484.762190][T19469] 8021q: adding VLAN 0 to HW filter on device batadv0
[  484.828387][T19684] vxcan1: entered allmulticast mode
[  484.896887][T19684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3781'.
[  484.964978][T19469] veth0_vlan: entered promiscuous mode
[  484.971120][T19692] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3784'.
[  484.978777][T19469] veth1_vlan: entered promiscuous mode
[  485.004488][T19693] netlink: 'syz.1.3785': attribute type 11 has an invalid length.
[  485.012354][T19693] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3785'.
[  485.026284][T19694] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3784'.
[  485.069807][T19469] veth0_macvtap: entered promiscuous mode
[  485.102331][T19469] veth1_macvtap: entered promiscuous mode
[  485.198450][T19469] batman_adv: batadv0: Interface activated: batadv_slave_0
[  485.285134][T19469] batman_adv: batadv0: Interface activated: batadv_slave_1
[  485.325510][T19469] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  485.356329][T19469] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  485.374237][T19469] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  485.390418][T19469] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  485.420275][T19708] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3789'.
[  485.600657][T19712] netlink: 'syz.4.3790': attribute type 7 has an invalid length.
[  485.643821][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  485.667925][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  485.775629][ T6015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  485.824897][ T6015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  485.863454][T19718] sctp: [Deprecated]: syz.0.3793 (pid 19718) Use of int in max_burst socket option.
[  485.863454][T19718] Use struct sctp_assoc_value instead
[  485.986635][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 121 seconds
[  486.230635][T19738] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  486.727671][T19758] sctp: [Deprecated]: syz.2.3805 (pid 19758) Use of struct sctp_assoc_value in delayed_ack socket option.
[  486.727671][T19758] Use struct sctp_sack_info instead
[  487.384101][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  487.394933][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  487.406382][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  487.416735][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  487.425782][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  487.602769][T19772] chnl_net:caif_netlink_parms(): no params data found
[  487.681684][T19772] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.689070][T19772] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.697425][T19772] bridge_slave_0: entered allmulticast mode
[  487.705959][T19772] bridge_slave_0: entered promiscuous mode
[  487.714338][T19772] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.721564][T19772] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.728926][T19772] bridge_slave_1: entered allmulticast mode
[  487.737306][T19772] bridge_slave_1: entered promiscuous mode
[  487.780772][T19772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  487.793006][T19772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  487.834183][T19772] team0: Port device team_slave_0 added
[  487.842064][T19772] team0: Port device team_slave_1 added
[  487.878883][T19772] batman_adv: batadv0: Adding interface: batadv_slave_0
[  487.886673][T19772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  487.914715][T19772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  487.927342][T19772] batman_adv: batadv0: Adding interface: batadv_slave_1
[  487.934823][T19772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  487.962704][T19772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  488.019462][T19772] hsr_slave_0: entered promiscuous mode
[  488.027098][T19772] hsr_slave_1: entered promiscuous mode
[  488.034265][T19772] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  488.041844][T19772] Cannot create hsr debugfs directory
[  488.185312][T19772] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  488.196614][T19772] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.285963][T19772] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  488.296386][T19772] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.303221][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 122 seconds
[  488.379667][T19782] __nla_validate_parse: 2 callbacks suppressed
[  488.379688][T19782] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3811'.
[  488.413251][T19785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3812'.
[  488.422166][T19785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3812'.
[  488.435365][T19786] netlink: 'syz.0.3810': attribute type 1 has an invalid length.
[  488.519264][T19772] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  488.531407][T19772] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.708459][T19789] bond2: (slave gretap1): making interface the new active one
[  488.717077][T19789] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  488.731746][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  488.742265][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  488.756103][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  488.766576][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  488.776125][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  488.867002][T19800] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  488.948510][T19772] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  488.969385][T19772] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.249591][T19816] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  489.456874][T19823] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  489.472698][T19827] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  489.491758][T19829] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  489.503773][ T5849] Bluetooth: hci2: command tx timeout
[  489.521981][T19772] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  489.554195][T19772] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  489.652103][T19832] ieee802154 phy1 wpan1: encryption failed: -90
[  489.662593][T19772] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  489.765939][T19772] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  489.899279][T19796] chnl_net:caif_netlink_parms(): no params data found
[  490.165545][T19855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  490.417530][T19796] bridge0: port 1(bridge_slave_0) entered blocking state
[  490.420771][T19871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3834'.
[  490.428041][T19796] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.442036][T19796] bridge_slave_0: entered allmulticast mode
[  490.450761][T19796] bridge_slave_0: entered promiscuous mode
[  490.480229][T19772] 8021q: adding VLAN 0 to HW filter on device bond0
[  490.488066][T19871] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3834'.
[  490.500661][T19796] bridge0: port 2(bridge_slave_1) entered blocking state
[  490.530704][T19796] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.560051][T19796] bridge_slave_1: entered allmulticast mode
[  490.575486][T19796] bridge_slave_1: entered promiscuous mode
[  490.628928][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 123 seconds
[  490.734962][T19796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  490.772753][T19796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  490.864483][ T5849] Bluetooth: hci4: command tx timeout
[  490.878751][T19772] 8021q: adding VLAN 0 to HW filter on device team0
[  490.898880][ T6015] bridge0: port 1(bridge_slave_0) entered blocking state
[  490.906069][ T6015] bridge0: port 1(bridge_slave_0) entered forwarding state
[  490.961723][T19796] team0: Port device team_slave_0 added
[  490.969729][T19884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3839'.
[  491.018281][ T6015] bridge0: port 2(bridge_slave_1) entered blocking state
[  491.025508][ T6015] bridge0: port 2(bridge_slave_1) entered forwarding state
[  491.049981][T19796] team0: Port device team_slave_1 added
[  491.090173][T19887] tunl0: entered promiscuous mode
[  491.222472][T19897] netlink: 'syz.0.3842': attribute type 2 has an invalid length.
[  491.294415][T19796] batman_adv: batadv0: Adding interface: batadv_slave_0
[  491.301407][T19796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  491.356479][T19796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  491.369682][T19796] batman_adv: batadv0: Adding interface: batadv_slave_1
[  491.383715][T19796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  491.420781][T19796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  491.473842][T19902] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20002
[  491.474458][T19908] gretap0: entered promiscuous mode
[  491.508254][T19908] macsec0: entered promiscuous mode
[  491.522798][T19908] gretap0: left promiscuous mode
[  491.572207][T19906] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3845'.
[  491.573723][T19914] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3847'.
[  491.591048][ T5842] Bluetooth: hci2: command tx timeout
[  491.601574][T19913] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3847'.
[  491.701488][T19796] hsr_slave_0: entered promiscuous mode
[  491.710373][T19796] hsr_slave_1: entered promiscuous mode
[  491.718151][T19796] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  491.727132][T19796] Cannot create hsr debugfs directory
[  491.828987][T19921] unknown channel width for channel at 909000KHz?
[  492.420825][T19950] netlink: 'syz.0.3856': attribute type 2 has an invalid length.
[  492.586896][T19796] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.617679][T19950] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3856'.
[  492.697542][T19772] 8021q: adding VLAN 0 to HW filter on device batadv0
[  492.771294][T19964] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  492.791470][T19796] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.939444][T19796] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  492.950863][ T5842] Bluetooth: hci4: command tx timeout
[  492.971955][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 124 seconds
[  493.030762][T19772] veth0_vlan: entered promiscuous mode
[  493.056975][T19772] veth1_vlan: entered promiscuous mode
[  493.132040][T19796] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.312467][T19772] veth0_macvtap: entered promiscuous mode
[  493.352522][T19772] veth1_macvtap: entered promiscuous mode
[  493.497208][T19772] batman_adv: batadv0: Interface activated: batadv_slave_0
[  493.528042][T19772] batman_adv: batadv0: Interface activated: batadv_slave_1
[  493.663399][ T5842] Bluetooth: hci2: command tx timeout
[  493.696334][T19796] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  493.742047][T19796] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  493.774158][T19796] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  493.795018][T19772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  493.821871][T19772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  493.842933][T19772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  493.853802][T20006] netlink: 'syz.0.3873': attribute type 15 has an invalid length.
[  493.864973][T19772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  493.878386][T19796] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  494.101418][T20015] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  494.141156][ T5990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  494.169557][ T5990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  494.320571][T19796] 8021q: adding VLAN 0 to HW filter on device bond0
[  494.328410][ T5990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  494.346069][ T5990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  494.401072][T19796] 8021q: adding VLAN 0 to HW filter on device team0
[  494.428998][ T5990] bridge0: port 1(bridge_slave_0) entered blocking state
[  494.436248][ T5990] bridge0: port 1(bridge_slave_0) entered forwarding state
[  494.473561][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  494.480733][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  495.009879][T20056] __nla_validate_parse: 2 callbacks suppressed
[  495.009898][T20056] netlink: 808 bytes leftover after parsing attributes in process `syz.4.3888'.
[  495.037153][ T5842] Bluetooth: hci4: command 0x040f tx timeout
[  495.148397][T20061] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3890'.
[  495.182060][T20060] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3890'.
[  495.237805][T19796] 8021q: adding VLAN 0 to HW filter on device batadv0
[  495.267200][T20066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3891'.
[  495.300946][T20066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3891'.
[  495.318704][T20061] bridge0: port 2(bridge_slave_1) entered disabled state
[  495.349103][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 125 seconds
[  495.349817][T20066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3891'.
[  495.441462][T20066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3891'.
[  495.463769][T20066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3891'.
[  495.514141][T20066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3891'.
[  495.542288][T20066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3891'.
[  495.640595][T19796] veth0_vlan: entered promiscuous mode
[  495.676285][T19796] veth1_vlan: entered promiscuous mode
[  495.744882][ T5849] Bluetooth: hci2: command tx timeout
[  495.793103][T19796] veth0_macvtap: entered promiscuous mode
[  495.808089][T19796] veth1_macvtap: entered promiscuous mode
[  495.849830][T19796] batman_adv: batadv0: Interface activated: batadv_slave_0
[  495.943174][T19796] batman_adv: batadv0: Interface activated: batadv_slave_1
[  496.049861][T19796] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  496.082000][T19796] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  496.103565][T19796] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  496.116373][T19796] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  496.155074][ T5849] Bluetooth: hci0: command tx timeout
[  496.380057][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  496.389870][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  496.441591][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  496.456579][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  496.955314][   T31] INFO: task udevd:5845 blocked for more than 143 seconds.
[  496.976870][   T31]       Not tainted 6.15.0-rc5-syzkaller-00163-g09db7a4d287d #0
[  497.004587][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  497.023654][   T31] task:udevd           state:D stack:22888 pid:5845  tgid:5845  ppid:5200   task_flags:0x400140 flags:0x00004006
[  497.036914][   T31] Call Trace:
[  497.040396][   T31]  <TASK>
[  497.043882][   T31]  __schedule+0x16e2/0x4cd0
[  497.048708][   T31]  ? schedule+0x165/0x360
[  497.054080][   T31]  ? __lock_acquire+0xaac/0xd20
[  497.062594][   T31]  ? __pfx___schedule+0x10/0x10
[  497.075846][   T31]  ? schedule+0x91/0x360
[  497.084066][   T31]  schedule+0x165/0x360
[  497.088418][   T31]  io_schedule+0x81/0xe0
[  497.092803][   T31]  folio_wait_bit_common+0x6b0/0xb90
[  497.106090][   T31]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  497.118930][   T31]  ? __pfx_wake_page_function+0x10/0x10
[  497.127493][   T31]  ? __filemap_get_folio+0x790/0xaf0
[  497.141014][   T31]  ? do_read_cache_folio+0x4ed/0x590
[  497.148395][   T31]  do_read_cache_folio+0x1ae/0x590
[  497.154155][   T31]  ? __pfx_blkdev_read_folio+0x10/0x10
[  497.159731][   T31]  read_part_sector+0xb6/0x270
[  497.164968][   T31]  adfspart_check_POWERTEC+0x8c/0xf30
[  497.172098][   T31]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  497.178091][   T31]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  497.185832][   T31]  ? set_page_refcounted+0xa0/0x1e0
[  497.191080][   T31]  bdev_disk_changed+0x75c/0x14b0
[  497.196717][   T31]  ? __pfx_bdev_disk_changed+0x10/0x10
[  497.202200][   T31]  ? wait_on_inode+0xc0/0x230
[  497.207083][   T31]  blkdev_get_whole+0x380/0x510
[  497.211963][   T31]  bdev_open+0x31e/0xd30
[  497.216533][   T31]  blkdev_open+0x3a8/0x510
[  497.221089][   T31]  ? __pfx_blkdev_open+0x10/0x10
[  497.226327][   T31]  do_dentry_open+0xdf0/0x1970
[  497.231146][   T31]  vfs_open+0x3b/0x340
[  497.235475][   T31]  ? path_openat+0x2ecd/0x3830
[  497.240266][   T31]  path_openat+0x2ee5/0x3830
[  497.245202][   T31]  ? arch_stack_walk+0xfc/0x150
[  497.250122][   T31]  ? __pfx_path_openat+0x10/0x10
[  497.255520][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.261615][   T31]  do_filp_open+0x1fa/0x410
[  497.266925][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  497.273740][   T31]  ? _raw_spin_unlock+0x28/0x50
[  497.278892][   T31]  ? alloc_fd+0x64c/0x6c0
[  497.283750][   T31]  do_sys_openat2+0x121/0x1c0
[  497.288550][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  497.294077][   T31]  __x64_sys_openat+0x138/0x170
[  497.298998][   T31]  do_syscall_64+0xf6/0x210
[  497.303683][   T31]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  497.309878][   T31]  ? clear_bhb_loop+0x45/0xa0
[  497.314959][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.320869][   T31] RIP: 0033:0x7f78d1ca7407
[  497.325376][   T31] RSP: 002b:00007ffcb981e680 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  497.336089][   T31] RAX: ffffffffffffffda RBX: 00007f78d2433880 RCX: 00007f78d1ca7407
[  497.346728][   T31] RDX: 00000000000a0800 RSI: 0000555dcb32a450 RDI: ffffffffffffff9c
[  497.354882][   T31] RBP: 0000555dcb31e910 R08: 0000000000000000 R09: 0000000000000000
[  497.363082][   T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000555dcb33f750
[  497.371090][   T31] R13: 0000555dcb3363e0 R14: 0000000000000000 R15: 0000555dcb33f750
[  497.380749][   T31]  </TASK>
[  497.383974][   T31] 
[  497.383974][   T31] Showing all locks held in the system:
[  497.391726][   T31] 7 locks held by kworker/u8:0/12:
[  497.398123][   T31] 3 locks held by kworker/1:0/24:
[  497.403537][   T31]  #0: ffff8880b8939b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  497.413675][   T31]  #1: ffff8880b8923b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0
[  497.434544][   T31]  #2: ffff8880b8925558 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30
[  497.443713][   T31] 1 lock held by khungtaskd/31:
[  497.448592][   T31]  #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  497.458632][   T31] 3 locks held by kworker/1:2/979:
[  497.464042][   T31]  #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0
[  497.476348][   T31]  #1: ffffc9000362fc60 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[  497.489172][   T31]  #2: ffff888058c39240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x26b/0x3180
[  497.499690][   T31] 2 locks held by getty/5596:
[  497.504553][   T31]  #0: ffff8880343ca0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  497.514526][   T31]  #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  497.524955][   T31] 1 lock held by udevd/5845:
[  497.529557][   T31]  #0: ffff88802495b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  497.538960][   T31] 4 locks held by kworker/u8:21/6000:
[  497.544609][   T31]  #0: ffff88801aef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0
[  497.556117][   T31]  #1: ffffc90004f9fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[  497.566918][   T31]  #2: ffffffff8f2e7d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0
[  497.577669][   T31]  #3: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  497.591319][   T31] 1 lock held by syz-executor/19796:
[  497.606733][   T31]  #0: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  497.617255][   T31] 1 lock held by syz.0.3906/20112:
[  497.622384][   T31]  #0: ffff88805b365008 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  497.633137][   T31] 3 locks held by syz.4.3913/20136:
[  497.638356][   T31]  #0: ffff888059b76e08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  497.648874][   T31]  #1: ffff88807df22958 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_unhash+0x2a/0x2f0
[  497.658825][   T31]  #2: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730
[  497.670280][   T45] block nbd1: Possible stuck request ffff8880249ce000: control (read@0,4096B). Runtime 126 seconds
[  497.683127][   T31] 
[  497.685488][   T31] =============================================
[  497.685488][   T31] 
[  497.697822][   T31] NMI backtrace for cpu 0
[  497.697853][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00163-g09db7a4d287d #0 PREEMPT(full) 
[  497.697896][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  497.697917][   T31] Call Trace:
[  497.697935][   T31]  <TASK>
[  497.697942][   T31]  dump_stack_lvl+0x189/0x250
[  497.697966][   T31]  ? __wake_up_klogd+0xd9/0x110
[  497.697988][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  497.698008][   T31]  ? __pfx__printk+0x10/0x10
[  497.698037][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  497.698056][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  497.698070][   T31]  ? _printk+0xcf/0x120
[  497.698090][   T31]  ? __pfx__printk+0x10/0x10
[  497.698108][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  497.698126][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  497.698144][   T31]  watchdog+0xfee/0x1030
[  497.698163][   T31]  ? watchdog+0x1de/0x1030
[  497.698186][   T31]  kthread+0x70e/0x8a0
[  497.698207][   T31]  ? __pfx_watchdog+0x10/0x10
[  497.698225][   T31]  ? __pfx_kthread+0x10/0x10
[  497.698243][   T31]  ? __pfx_kthread+0x10/0x10
[  497.698258][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  497.698276][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  497.698294][   T31]  ? __pfx_kthread+0x10/0x10
[  497.698310][   T31]  ret_from_fork+0x4b/0x80
[  497.698324][   T31]  ? __pfx_kthread+0x10/0x10
[  497.698342][   T31]  ret_from_fork_asm+0x1a/0x30
[  497.698376][   T31]  </TASK>
[  497.698382][   T31] Sending NMI from CPU 0 to CPUs 1:
[  497.853791][    C1] NMI backtrace for cpu 1
[  497.853811][    C1] CPU: 1 UID: 0 PID: 5200 Comm: udevd Not tainted 6.15.0-rc5-syzkaller-00163-g09db7a4d287d #0 PREEMPT(full) 
[  497.853829][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  497.853838][    C1] RIP: 0010:rcu_is_watching+0x5e/0xb0
[  497.853863][    C1] Code: 03 42 80 3c 38 00 74 08 4c 89 f7 e8 1c cd 7a 00 48 c7 c3 58 6b 76 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 <8b> 03 65 ff 0d 49 48 ce 10 74 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f
[  497.853876][    C1] RSP: 0018:ffffc900035777e0 EFLAGS: 00000046
[  497.853889][    C1] RAX: 0000000000000000 RBX: ffff8880b8932b58 RCX: 9ddd80f75ad18f00
[  497.853900][    C1] RDX: 0000000000000000 RSI: ffffffff8bc1d240 RDI: ffffffff8bc1d200
[  497.853911][    C1] RBP: ffffffff8241e107 R08: 0000000000000001 R09: 0000000000000000
[  497.853920][    C1] R10: dffffc0000000000 R11: fffffbfff1efda4f R12: 0000000000000002
[  497.853930][    C1] R13: ffffffff8dc16808 R14: ffffffff8d96ec18 R15: dffffc0000000000
[  497.853942][    C1] FS:  00007f78d2433880(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000
[  497.853954][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  497.853964][    C1] CR2: 00007fda02b80178 CR3: 000000007ccfc000 CR4: 00000000003526f0
[  497.853978][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  497.853987][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  497.853997][    C1] Call Trace:
[  497.854003][    C1]  <TASK>
[  497.854010][    C1]  lock_acquire+0x5f/0x360
[  497.854033][    C1]  ? prepend_path+0x107/0x970
[  497.854052][    C1]  seqcount_lockdep_reader_access+0x10e/0x1c0
[  497.854066][    C1]  ? prepend_path+0x107/0x970
[  497.854083][    C1]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  497.854105][    C1]  prepend_path+0x107/0x970
[  497.854123][    C1]  ? prepend_path+0x4b/0x970
[  497.854147][    C1]  d_absolute_path+0xa1/0x140
[  497.854173][    C1]  tomoyo_realpath_from_path+0x2c8/0x5d0
[  497.854198][    C1]  tomoyo_path_perm+0x213/0x4b0
[  497.854211][    C1]  ? tomoyo_path_perm+0x1e3/0x4b0
[  497.854224][    C1]  ? __pfx_tomoyo_path_perm+0x10/0x10
[  497.854236][    C1]  ? __x64_sys_openat+0x138/0x170
[  497.854269][    C1]  ? __lock_acquire+0xaac/0xd20
[  497.854290][    C1]  ? __might_fault+0xb0/0x130
[  497.854309][    C1]  security_inode_getattr+0x12f/0x330
[  497.854327][    C1]  __x64_sys_newfstat+0xfe/0x200
[  497.854347][    C1]  ? __pfx___x64_sys_newfstat+0x10/0x10
[  497.854364][    C1]  ? rcu_is_watching+0x15/0xb0
[  497.854395][    C1]  ? do_syscall_64+0xba/0x210
[  497.854413][    C1]  do_syscall_64+0xf6/0x210
[  497.854428][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  497.854443][    C1]  ? clear_bhb_loop+0x45/0xa0
[  497.854459][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.854472][    C1] RIP: 0033:0x7f78d1d11ad7
[  497.854485][    C1] Code: 73 01 c3 48 8b 0d 21 f3 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8
[  497.854496][    C1] RSP: 002b:00007ffcb9819e78 EFLAGS: 00000297 ORIG_RAX: 0000000000000005
[  497.854510][    C1] RAX: ffffffffffffffda RBX: 0000555dcb37d730 RCX: 00007f78d1d11ad7
[  497.854521][    C1] RDX: 00007f78d1defea0 RSI: 00007ffcb9819e80 RDI: 000000000000000c
[  497.854531][    C1] RBP: 00007f78d1defff0 R08: 0000000000000001 R09: 0000000000000000
[  497.854543][    C1] R10: 0000000000000000 R11: 0000000000000297 R12: 000000000000000a
[  497.854552][    C1] R13: 0000000000003fff R14: 0000000000000000 R15: 0000555dcb37d730
[  497.854570][    C1]  </TASK>
[  497.862494][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  498.207989][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00163-g09db7a4d287d #0 PREEMPT(full) 
[  498.219793][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  498.229841][   T31] Call Trace:
[  498.233114][   T31]  <TASK>
[  498.236038][   T31]  dump_stack_lvl+0x99/0x250
[  498.240630][   T31]  ? __asan_memcpy+0x40/0x70
[  498.245207][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  498.250396][   T31]  ? __pfx__printk+0x10/0x10
[  498.254984][   T31]  panic+0x2db/0x790
[  498.258878][   T31]  ? __pfx_panic+0x10/0x10
[  498.263295][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[  498.269120][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  498.274502][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  498.280653][   T31]  watchdog+0x102d/0x1030
[  498.284978][   T31]  ? watchdog+0x1de/0x1030
[  498.289397][   T31]  kthread+0x70e/0x8a0
[  498.293465][   T31]  ? __pfx_watchdog+0x10/0x10
[  498.298141][   T31]  ? __pfx_kthread+0x10/0x10
[  498.302732][   T31]  ? __pfx_kthread+0x10/0x10
[  498.307315][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  498.312511][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  498.317709][   T31]  ? __pfx_kthread+0x10/0x10
[  498.322433][   T31]  ret_from_fork+0x4b/0x80
[  498.326870][   T31]  ? __pfx_kthread+0x10/0x10
[  498.331466][   T31]  ret_from_fork_asm+0x1a/0x30
[  498.336230][   T31]  </TASK>
[  498.339481][   T31] Kernel Offset: disabled
[  498.343805][   T31] Rebooting in 86400 seconds..