last executing test programs:

38.834703332s ago: executing program 1:
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000000000000d00000000000000000000000204000000000000000000000a04003c9e1873a9ec0840"], 0x0, 0x52}, 0x20)
unshare(0x22020400)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000380)=0x400, 0x7)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000900)={0x8000, 0x1000, 0xef1d}, 0x8)
socket$inet6(0xa, 0x3, 0x8000000003c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="8c0000000202050000000000000000000e000009080008400000000258000a800800014000000001280002800c00028005000100880000000600031d00020000cafe0340000400000600034000000000240002800600034000010000060003400003000006000340000100000600034000030000080009400000001f08000b00736970000600074000000000ed1d91d13f804356d67f17e151c47469daa97ffa0ad497fda363a3cced73ae3a816551f45eccc77a281f36c2100ed4e16709596fedba5374813e99e2755c08c7d74f15e870356d912609a006b8539bb085dc968a5e7a433341d0acaef1342e87f2c03c477bd1fafc1e780e2db47b273e101b8d958dd549bd0cfa6c337a8996fde73410cb5c9ba4bd47fd0a9e646f1c436b49ff4c003abf21ad5661705d642b8bd9d42ffdee2482bc9ea592971a5943972d15bc4dbaeb2d93b6d5d6a3442d623fc541f020baf041e51cdf4eeb76516fe2d41989668044c19e8a89f79906"], 0x8c}, 0x1, 0x0, 0x0, 0x24008841}, 0x4000080)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f00000008c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008800}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x0, 0x3, 0x7fffffff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd594}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="799adbe5ff27151b01541f82221fbd39d65c208aea5e5833d3191c64018e6f91fb9445d8b39d6c1591a91d1311843db5f2938f46cfb00f7135aa5f526105000000e185a5c02d31fdbe942b426354dfc496e15ba6f535f65ee5f6e398bfa2b75df3afa1766de5e8a89bdc6def96fafaf339b28f5737d55df2bbbd6ff095933314ac010254b13b32382e279c825b8e0d7c8c69dedf7bc7397bb38444a07cbd", @ANYBLOB, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x177c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$inet6_udplite(0xa, 0x2, 0x88)
accept4$tipc(0xffffffffffffffff, &(0x7f0000000240)=@id, &(0x7f00000002c0)=0x10, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0)

38.632913323s ago: executing program 1:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xf8, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0xd4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfa, 0xff, 0x5, 0x124, 0x0, 0x1, 0x2e1, 0x4}}, {0xc, 0x2, [0x7, 0x6, 0x9, 0xff]}}, {{0x1c, 0x1, {0xff, 0x1, 0x8001, 0x8000, 0x1, 0x7fff, 0x8, 0x2}}, {0x8, 0x2, [0x4, 0x3db0]}}, {{0x1c, 0x1, {0x0, 0xe3, 0x0, 0x5, 0x2, 0x1, 0x6c6, 0x6}}, {0x10, 0x2, [0x7c65, 0x81, 0x81, 0xfffb, 0x8, 0xff]}}, {{0x1c, 0x1, {0x5, 0x0, 0x347, 0x6, 0x2, 0xffff, 0x7, 0x8}}, {0x14, 0x2, [0x7, 0x1, 0xfff, 0x100, 0x1, 0x8, 0xfff8, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x9, 0x0]}}]}]}, 0xf8}}, 0x0)

38.532847838s ago: executing program 1:
unshare(0xa000100)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90)
bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b63d25a80648c2594f90124fc60350c030b022e0009083582c137153e370248078000f01708", 0x2c}], 0x1, 0x0, 0x0, 0x3000}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000000c0)={0x0, 0xd00, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58000000190a01020000000000000000000000000900010073797a3000000000000006008af74402e7bebf2554e6e91481fd5f1ffe1f3c7645183b4d44a4c836c964e41bfe887f1633eb945f4e7c43da6f1acc7d540600000000000000c649bc41b2072c874a71b8b9335974"], 0x58}}, 0x0)

38.473542172s ago: executing program 1:
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x20, 0x28, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x20}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x2c}}, 0x0)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xf, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x90)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r6, 0x29, 0x50, 0x0, &(0x7f0000000080))
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'ip6gre0\x00', 0x0})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r8=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089}, 0x90)
sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000680)=[{&(0x7f00000002c0)="27dc7fd9657120efc71aee335484e1726c6661c54536bf17090c886d271c0f353ffb2a5490f397d082c23cc61dc8067237ffe44e504477bb4539d85bb92cdf46aaca66aaa5751e596c4c0cfb1155360f152b3cda6ab2c8e1a8a1c106ee92947d3c579a90d397005408562e60c183ae708f08f2b821ac5945cbcb5fde92873fe7ec1bb1af32df19ea86c2d9b5ecb79b5a2e70096a97fcea3d23381b80b30428b1a40c6401df855e2ab0ef08785479966b410136a36625dd6f36f5ae152d43ecb1f97d9919d9fb6e6e3d614184bb932921cb005399030a0447385bd7cb51cc80", 0xdf}, {0x0}, {&(0x7f0000000440)="b0dde14d3f8a8a5b677195b69f7508dfa90e30db96d4722ec8073351a4999324f5770c626f39ac68039c1868c766466db602b8009994014fed55ed831bf6b8009c37eb3f", 0x44}, {0x0}, {&(0x7f0000000500)="57e22a5156caca0e773c0efd2857388e9a01406e8e28a582a21d6152f82d1cafea624eae1e3045c7fc3161", 0x2b}, {0x0}, {&(0x7f0000000600)="5563ca862c4c9ab8e1cd970906734029746936ecdf74d5963fc41f8419b147de5919acf3d5be077d7ae825dd303094511d66e29b082c26bb0dd2cfb0f7224209e3dd0ab2fb92eebe30087122155cdaf55b45c4ffb01227cbe9f418", 0x5b}], 0x7, &(0x7f0000000bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4000000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101}}}, @ip_retopts={{0x94, 0x0, 0x7, {[@cipso={0x86, 0x57, 0x1, [{0x6, 0x5, "ceabd1"}, {0x0, 0x2}, {0x0, 0xf, "78484ef7591f8dfbdfcc36b0f5"}, {0x5, 0xd, "46c76eaa69a52e83afaac1"}, {0x6, 0x2}, {0x1, 0x10, "c8b7e9a6678023b5331ccebd719b"}, {0x1, 0x12, "324b5c0aaf8905d166a85c86b58a650a"}, {0x5, 0xa, "4cfa68fc5bc635e5"}]}, @lsrr={0x83, 0x1b, 0x9d, [@dev={0xac, 0x14, 0x14, 0xe}, @private=0xa010101, @empty, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0xe}]}, @end, @noop, @rr={0x7, 0xf, 0x89, [@local, @loopback, @private=0xa010100]}]}}}], 0x120}, 0x80)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x2e}, 0x20)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0)

38.001131008s ago: executing program 1:
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000000000000d00000000000000000000000204000000000000000000000a04003c9e1873a9ec0840"], 0x0, 0x52}, 0x20)
unshare(0x22020400)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000380)=0x400, 0x7)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000900)={0x8000, 0x1000, 0xef1d}, 0x8)
socket$inet6(0xa, 0x3, 0x8000000003c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x24008841}, 0x4000080)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f00000008c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008800}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x0, 0x3, 0x7fffffff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd594}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="799adbe5ff27151b01541f82221fbd39d65c208aea5e5833d3191c64018e6f91fb9445d8b39d6c1591a91d1311843db5f2938f46cfb00f7135aa5f526105000000e185a5c02d31fdbe942b426354dfc496e15ba6f535f65ee5f6e398bfa2b75df3afa1766de5e8a89bdc6def96fafaf339b28f5737d55df2bbbd6ff095933314ac010254b13b32382e279c825b8e0d7c8c69dedf7bc7397bb38444a07cbd", @ANYBLOB, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x177c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$inet6_udplite(0xa, 0x2, 0x88)
accept4$tipc(0xffffffffffffffff, &(0x7f0000000240)=@id, &(0x7f00000002c0)=0x10, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0)

37.831965411s ago: executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000080)={'icmp\x00'}, &(0x7f0000000040)=0x1e)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000008000000008000385c56fd02262bd8be9c5edadb598640f4c9746167930288de3cd5b10be510f29a971f5b568ae4a4c57a21ed5a81e4796115447186baa44920ffaeec", @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r5)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x301, 0x70bd26, 0x800, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x94)
sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x6c, r6, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000040)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r3}, 0x9)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56d41, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x48, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PBURST={0x8}, @TCA_TBF_PARMS={0x28}, @TCA_TBF_PRATE64={0xc}]}}]}, 0x74}}, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r13=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002d40)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x3c}, 0x1, 0xba01}, 0x0)
r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r5)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r14, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x0)
ioctl$SIOCSIFHWADDR(r10, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}})

35.926469964s ago: executing program 0:
bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b63d25a80648c2594f90124fc60350c030b022e0009083582c137153e370248078000f01708", 0x2c}], 0x1, 0x0, 0x0, 0x3000}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000000c0)={0x0, 0xd00, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58000000190a01020000000000000000000000000900010073797a3000000000000006008af74402e7bebf2554e6e91481fd5f1ffe1f3c7645183b4d44a4c836c964e41bfe887f1633eb945f4e7c43da6f1acc7d540600000000000000c649bc41b2072c874a71b8b9335974"], 0x58}}, 0x0)

35.756507861s ago: executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket(0x2, 0x3, 0x8)
sendmsg$unix(r0, &(0x7f0000001500)={&(0x7f0000000000)=@abs={0x0, 0x0, 0xffffff7f}, 0x6e, 0x0}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f00000007c0)})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x7, 0x10, 0x1ff, 0xa0000000, {{0x6, 0x4, 0x1, 0x28, 0x18, 0x68, 0x0, 0x1f, 0x29, 0x0, @private=0xa010101, @rand_addr=0x64010101, {[@generic={0x88, 0x3, "b2"}]}}}}})
r1 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000100)=0x40, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
sendmsg$inet6(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xf}, 0x6b87bd76ddbcbbe)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', <r7=>r6, 0x2f, 0x3, 0x10, 0x3, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, 0x80, 0x8000, 0x7, 0x2}})
sendmsg$nl_route_sched(r5, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@gettclass={0x24, 0x2a, 0x100, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xa, 0xfff2}, {0xfff1, 0x4}, {0xfff1}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x801)
getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r6, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036887fbd52a5e1fcea0727799ee9e5e9baae5f8277a40aff68ba9e83af16f27eb4bf9c5082104f742d5b1b64aaae3685243d377c8eac4bd12912ae07000000739e86a9c93e873fce4a279cfe772d8cd772f5b9b46344ddfe6524b151263239f46057b7bef5dcd488b1251ccfc9f859f1fedbc4de4f0d9f89b5c8a9341af2ef7b77660001000000000000426d4210461f3346f738c73fdfefa14cedcc9f5caa9c587555248b8a4b2f1672", @ANYRES32], 0x38}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="80000000100039042abd7000ffdbdf25000003e4", @ANYRES32=r8, @ANYBLOB="03000000d71007006000128008000100736974005400068008000100055d8f61d736ee22918c4ee85c4d871ba7b90af5a14bc40145e8392118ce3d8cb2e8f642d37eb98fbfa574dffad7514d32e1d18f50fcbbc253ecd5933c08dd71a2f69c4d7cc34cecbce9c094ff823ba97b6c3a3c91f4d45e71ced328071ce1d6648d9648f11354495dc91b96d666d4047e5d125adfb9734efa192b2be0f3f59410750cd4fb3be78927", @ANYRES32, @ANYBLOB="08000300ac1414bb050004008000000006000e00ff0f000008000200ac14142d060010000070000008000c0003000000050005001600000008000c00ee000020060011004e210000"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x5, 0xff}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='ext4_mb_release_inode_pa\x00', r10}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)

35.287874542s ago: executing program 0:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xf8, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0xd4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfa, 0xff, 0x5, 0x124, 0x0, 0x1, 0x2e1, 0x4}}, {0xc, 0x2, [0x7, 0x6, 0x9, 0xff]}}, {{0x1c, 0x1, {0xff, 0x1, 0x8001, 0x8000, 0x1, 0x7fff, 0x8, 0x2}}, {0x8, 0x2, [0x4, 0x3db0]}}, {{0x1c, 0x1, {0xfa, 0x0, 0x0, 0x5, 0x2, 0x1, 0x6c6, 0x6}}, {0x10, 0x2, [0x7c65, 0x81, 0x81, 0xfffb, 0x8, 0xff]}}, {{0x1c, 0x1, {0x5, 0x0, 0x347, 0x6, 0x2, 0xffff, 0x7, 0x8}}, {0x14, 0x2, [0x7, 0x1, 0xfff, 0x100, 0x1, 0x8, 0xfff8, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x9, 0x0]}}]}]}, 0xf8}}, 0x0)

35.247514368s ago: executing program 2:
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
r0 = socket(0x10, 0x803, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000100)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x8, 0x0, &(0x7f00000002c0))
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e9ffffff", @ANYRES16=r2, @ANYBLOB="08002abd7000fddbdf251a000000080001003a00000008009a00020000000400cc000700210062620000"], 0x30}, 0x1, 0x0, 0x0, 0x2000}, 0x24008000)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYRES64=0x0, @ANYRES16=r2, @ANYRES32, @ANYRES16, @ANYBLOB="1400040076657468315f746f5f62726964676500080005000c000000"], 0x38}}, 0x0)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x0, 0x3, 0x9, 0x24}, 0x48)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
unshare(0x46020680)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x4, "d1a2d6e7"}, &(0x7f0000000180)=0x2c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f00000004c0)={{0x2, 0x0, @empty}, {0x0, @multicast}, 0x3e, {0x2, 0x0, @broadcast}, 'veth1_to_bond\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4)

35.075938048s ago: executing program 0:
bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b63d25a80648c2594f90124fc60350c030b022e0009083582c137153e370248078000f01708", 0x2c}], 0x1, 0x0, 0x0, 0x3000}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000000c0)={0x0, 0xd00, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58000000190a01020000000000000000000000000900010073797a3000000000000006008af74402e7bebf2554e6e91481fd5f1ffe1f3c7645183b4d44a4c836c964e41bfe887f1633eb945f4e7c43da6f1acc7d540600000000000000c649bc41b2072c874a71b8b9335974"], 0x58}}, 0x0)

34.946194382s ago: executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x2}, [], {0xffffffffffffffc7}}, 0x28}}, 0x0)

34.850259442s ago: executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x1)
write$bt_hci(r0, &(0x7f00000000c0)={0x1, @read_local_ext_features={{0x1004, 0x1}}}, 0x5)

31.797114229s ago: executing program 3:
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
syz_emit_ethernet(0xe8, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @val={@val={0x88a8, 0x1, 0x0, 0x4}, {0x8100, 0x5, 0x0, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x23, "47e492cc85b19f3f78e8066d4c96fd71e416bb98196006e7927e566ce1aa26519c2aa31f55ff29c28f7fdaeae35b89e2a4d9de4eab50422a8063119229e640deca429b4f587c6bdba3c0d292c383003d1d7314caf06dc915fb439f2fc3ec2f5b447cd84f50428568d83627d4d3e223af9c509dcd100efd1ca2e5ce1a120ea68e0cce81b650303af1e442f227dc1e2a433001393408f52a4e12ecb928c47f9d38af0533ce0a07fc1142648f60af6e347cad43d6075027e71dd6eb43defc58203495ee1efd62c6862c554811d48103ea"}}}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x29, 0x2, 0x80, &(0x7f00000001c0))
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SRC={0x8, 0x2, @remote}]}, 0x24}}, 0x0)

31.647578389s ago: executing program 3:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xf8, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0xd4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfa, 0xff, 0x5, 0x124, 0x0, 0x1, 0x2e1, 0x4}}, {0xc, 0x2, [0x7, 0x6, 0x9, 0xff]}}, {{0x1c, 0x1, {0xff, 0x1, 0x8001, 0x8000, 0x1, 0x7fff, 0x8, 0x2}}, {0x8, 0x2, [0x4, 0x3db0]}}, {{0x1c, 0x1, {0xfa, 0xe3, 0x0, 0x0, 0x2, 0x1, 0x6c6, 0x6}}, {0x10, 0x2, [0x7c65, 0x81, 0x81, 0xfffb, 0x8, 0xff]}}, {{0x1c, 0x1, {0x5, 0x0, 0x347, 0x6, 0x2, 0xffff, 0x7, 0x8}}, {0x14, 0x2, [0x7, 0x1, 0xfff, 0x100, 0x1, 0x8, 0xfff8, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x9, 0x0]}}]}]}, 0xf8}}, 0x0)

31.452154995s ago: executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x66}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="350400003f000511d25a80648c63940d0324fc60040035400c0002000200002037153e370c040180061010004500", 0x2e}, {&(0x7f0000000a40)="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", 0x407}], 0x3f}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48)
r5 = socket$inet6(0xa, 0x3, 0x8000000003c)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0)
preadv(r7, &(0x7f00000013c0)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'})
unshare(0x20000400)
unshare(0x100)
connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)

31.400977863s ago: executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="16ff", @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e00000000000000000008000900050000000500070002000000"], 0x3c}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x6013, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0)
r4 = socket$kcm(0x29, 0x2, 0x0)
r5 = socket$kcm(0x2, 0x7, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000180)={<r6=>0xffffffffffffffff})
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x32}, 0x20)
sendmsg$inet(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r5})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000d80), r7)
sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x44, r8, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x80)
r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_REMOVE(r7, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\b\x00\x00', @ANYRES16=r9, @ANYBLOB="00012bbd7000fedbdf250200000008000100000000000800020002000000080001000100000008000200020000000800010003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40d0}, 0x40081)
r10 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r10, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10)
getsockname$l2tp(r10, &(0x7f00000003c0)={0x2, 0x0, @dev}, &(0x7f00000004c0)=0x10)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r10, 0x6, 0x21, &(0x7f0000000000)="8df09789c2d57ed4ce2cff791595441f", 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r7)
syz_init_net_socket$ax25(0x3, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_mreqn(r10, 0x0, 0x24, &(0x7f0000000080)={@broadcast, @initdev}, &(0x7f00000000c0)=0xc)

31.283700726s ago: executing program 4:
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000000000000d00000000000000000000000204000000000000000000000a04003c9e1873a9ec0840"], 0x0, 0x52}, 0x20)
unshare(0x22020400)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000380)=0x400, 0x7)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000900)={0x8000, 0x1000, 0xef1d}, 0x8)
socket$inet6(0xa, 0x3, 0x8000000003c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x24008841}, 0x4000080)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f00000008c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008800}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x0, 0x3, 0x7fffffff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd594}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="799adbe5ff27151b01541f82221fbd39d65c208aea5e5833d3191c64018e6f91fb9445d8b39d6c1591a91d1311843db5f2938f46cfb00f7135aa5f526105000000e185a5c02d31fdbe942b426354dfc496e15ba6f535f65ee5f6e398bfa2b75df3afa1766de5e8a89bdc6def96fafaf339b28f5737d55df2bbbd6ff095933314ac010254b13b32382e279c825b8e0d7c8c69dedf7bc7397bb38444a07cbd", @ANYBLOB, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x177c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$inet6_udplite(0xa, 0x2, 0x88)
accept4$tipc(0xffffffffffffffff, &(0x7f0000000240)=@id, &(0x7f00000002c0)=0x10, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0)

31.172897435s ago: executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x66}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="350400003f000511d25a80648c63940d0324fc60040035400c0002000200002037153e370c040180061010004500", 0x2e}, {&(0x7f0000000a40)="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", 0x407}], 0x3f}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48)
r5 = socket$inet6(0xa, 0x3, 0x8000000003c)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0)
preadv(r7, &(0x7f00000013c0)=[{0x0}], 0x1, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00'})
unshare(0x20000400)
unshare(0x100)
connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)

31.162818966s ago: executing program 4:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x1)
write$bt_hci(r0, &(0x7f00000000c0)={0x1, @read_local_ext_features={{0x1004, 0x1}}}, 0x5)

31.124200291s ago: executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = socket(0x2, 0x3, 0x8)
sendmsg$unix(r0, &(0x7f0000001500)={&(0x7f0000000000)=@abs={0x0, 0x0, 0xffffff7f}, 0x6e, 0x0}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f00000007c0)})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x7, 0x10, 0x1ff, 0xa0000000, {{0x6, 0x4, 0x1, 0x28, 0x18, 0x68, 0x0, 0x1f, 0x29, 0x0, @private=0xa010101, @rand_addr=0x64010101, {[@generic={0x88, 0x3, "b2"}]}}}}})
r1 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000100)=0x40, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
sendmsg$inet6(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xf}, 0x6b87bd76ddbcbbe)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', <r7=>r6, 0x2f, 0x3, 0x10, 0x3, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, 0x80, 0x8000, 0x7, 0x2}})
sendmsg$nl_route_sched(r5, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@gettclass={0x24, 0x2a, 0x100, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xa, 0xfff2}, {0xfff1, 0x4}, {0xfff1}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x801)
getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r6, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036887fbd52a5e1fcea0727799ee9e5e9baae5f8277a40aff68ba9e83af16f27eb4bf9c5082104f742d5b1b64aaae3685243d377c8eac4bd12912ae07000000739e86a9c93e873fce4a279cfe772d8cd772f5b9b46344ddfe6524b151263239f46057b7bef5dcd488b1251ccfc9f859f1fedbc4de4f0d9f89b5c8a9341af2ef7b77660001000000000000426d4210461f3346f738c73fdfefa14cedcc9f5caa9c587555248b8a4b2f1672", @ANYRES32], 0x38}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="80000000100039042abd7000ffdbdf25000003e4", @ANYRES32=r8, @ANYRES32=r6, @ANYBLOB="08000300ac1414bb050004008000000006000e00ff0f000008000200ac14142d060010000070000008000c0003000000050005001600000008000c00ee000020060011004e210000"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x5, 0xff}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='ext4_mb_release_inode_pa\x00', r10}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)

31.046953585s ago: executing program 4:
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
syz_emit_ethernet(0xe8, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @val={@val={0x88a8, 0x1, 0x0, 0x4}, {0x8100, 0x5, 0x0, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x23, "47e492cc85b19f3f78e8066d4c96fd71e416bb98196006e7927e566ce1aa26519c2aa31f55ff29c28f7fdaeae35b89e2a4d9de4eab50422a8063119229e640deca429b4f587c6bdba3c0d292c383003d1d7314caf06dc915fb439f2fc3ec2f5b447cd84f50428568d83627d4d3e223af9c509dcd100efd1ca2e5ce1a120ea68e0cce81b650303af1e442f227dc1e2a433001393408f52a4e12ecb928c47f9d38af0533ce0a07fc1142648f60af6e347cad43d6075027e71dd6eb43defc58203495ee1efd62c6862c554811d48103ea"}}}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x29, 0x2, 0x80, &(0x7f00000001c0))
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SRC={0x8, 0x2, @remote}]}, 0x24}}, 0x0)

31.011732814s ago: executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="250800000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f0164000000050053"], 0x54}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x8011)

30.967255463s ago: executing program 4:
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001300192340834b80040d8c560a067fbc45ff810500000200000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

30.867340428s ago: executing program 3:
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0)

30.700585517s ago: executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xf8, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0xd4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfa, 0xff, 0x5, 0x124, 0x0, 0x1, 0x2e1, 0x4}}, {0xc, 0x2, [0x7, 0x6, 0x9, 0xff]}}, {{0x1c, 0x1, {0xff, 0x1, 0x8001, 0x8000, 0x1, 0x7fff, 0x8, 0x2}}, {0x8, 0x2, [0x4, 0x3db0]}}, {{0x1c, 0x1, {0xfa, 0xe3, 0x0, 0x0, 0x2, 0x1, 0x6c6, 0x6}}, {0x10, 0x2, [0x7c65, 0x81, 0x81, 0xfffb, 0x8, 0xff]}}, {{0x1c, 0x1, {0x5, 0x0, 0x347, 0x6, 0x2, 0xffff, 0x7, 0x8}}, {0x14, 0x2, [0x7, 0x1, 0xfff, 0x100, 0x1, 0x8, 0xfff8, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x9, 0x0]}}]}]}, 0xf8}}, 0x0)

30.020118171s ago: executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x66}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, &(0x7f0000000300))
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="350400003f000511d25a80648c63940d0324fc60040035400c0002000200002037153e370c040180061010004500", 0x2e}, {&(0x7f0000000a40)="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", 0x407}], 0x3f}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48)
r5 = socket$inet6(0xa, 0x3, 0x8000000003c)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0)
preadv(r7, &(0x7f00000013c0)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'})
unshare(0x20000400)
unshare(0x100)
connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)

823.711908ms ago: executing program 3:
unshare(0x0)
bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b63d25a80648c2594f90124fc60350c030b022e0009083582c137153e370248078000f01708", 0x2c}], 0x1, 0x0, 0x0, 0x3000}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000000c0)={0x0, 0xd00, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58000000190a01020000000000000000000000000900010073797a3000000000000006008af74402e7bebf2554e6e91481fd5f1ffe1f3c7645183b4d44a4c836c964e41bfe887f1633eb945f4e7c43da6f1acc7d540600000000000000c649bc41b2072c874a71b8b9335974"], 0x58}}, 0x0)

675.154899ms ago: executing program 2:
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000000000000d00000000000000000000000204000000000000000000000a04003c9e1873a9ec0840"], 0x0, 0x52}, 0x20)
unshare(0x22020400)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000000380)=0x400, 0x7)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000900)={0x8000, 0x1000, 0xef1d}, 0x8)
socket$inet6(0xa, 0x3, 0x8000000003c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x24008841}, 0x4000080)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f00000008c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008800}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x0, 0x3, 0x7fffffff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd594}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="799adbe5ff27151b01541f82221fbd39d65c208aea5e5833d3191c64018e6f91fb9445d8b39d6c1591a91d1311843db5f2938f46cfb00f7135aa5f526105000000e185a5c02d31fdbe942b426354dfc496e15ba6f535f65ee5f6e398bfa2b75df3afa1766de5e8a89bdc6def96fafaf339b28f5737d55df2bbbd6ff095933314ac010254b13b32382e279c825b8e0d7c8c69dedf7bc7397bb38444a07cbd", @ANYBLOB, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x177c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10)
clock_gettime(0x0, &(0x7f00000001c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$inet6_udplite(0xa, 0x2, 0x88)
accept4$tipc(0xffffffffffffffff, &(0x7f0000000240)=@id, &(0x7f00000002c0)=0x10, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0)

0s ago: executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="16ff", @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e00000000000000000008000900050000000500070002000000"], 0x3c}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x6013, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0)
r4 = socket$kcm(0x29, 0x2, 0x0)
r5 = socket$kcm(0x2, 0x7, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000180)={<r6=>0xffffffffffffffff})
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x32}, 0x20)
sendmsg$inet(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r5})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000d80), r7)
sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x44, r8, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x80)
r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_REMOVE(r7, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\b\x00\x00', @ANYRES16=r9, @ANYBLOB="00012bbd7000fedbdf250200000008000100000000000800020002000000080001000100000008000200020000000800010003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40d0}, 0x40081)
r10 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r10, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10)
getsockname$l2tp(r10, &(0x7f00000003c0)={0x2, 0x0, @dev}, &(0x7f00000004c0)=0x10)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r10, 0x6, 0x21, &(0x7f0000000000)="8df09789c2d57ed4ce2cff791595441f", 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r7)
syz_init_net_socket$ax25(0x3, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_mreqn(r10, 0x0, 0x24, &(0x7f0000000080)={@broadcast, @initdev}, &(0x7f00000000c0)=0xc)

kernel console output (not intermixed with test programs):

 bond0
[   94.032547][ T6008] 8021q: adding VLAN 0 to HW filter on device team0
[   94.094373][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.101601][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.156651][  T928] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.163873][  T928] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.358046][ T5129] Bluetooth: hci0: command tx timeout
[   94.671093][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[   94.866670][ T6008] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.555216][ T6008] veth0_vlan: entered promiscuous mode
[   95.632649][ T6008] veth1_vlan: entered promiscuous mode
[   95.775708][ T6008] veth0_macvtap: entered promiscuous mode
[   95.801839][ T6008] veth1_macvtap: entered promiscuous mode
[   95.879978][ T6008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.914378][ T6008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.944918][ T6008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.957845][ T6008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.974976][ T6008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.996791][ T6008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.016785][ T6008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.035701][ T6008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.052010][ T6008] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.110355][ T6008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.160331][ T6008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.196012][ T6008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.228169][ T6008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.258996][ T6008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.290059][ T6008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.315823][ T6008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.332552][ T6008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.344996][ T6008] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.390483][ T6008] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.450122][ T6008] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.483495][ T6008] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.510438][ T6008] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.790480][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.824991][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.904155][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.939611][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.548902][ T6475] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[   97.595317][ T6479] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0
[   97.620752][ T6480] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[   98.317734][ T6517] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[   98.342235][ T6517] wireguard0: entered promiscuous mode
[   98.356541][ T6517] wireguard0: entered allmulticast mode
[   98.391975][ T6520] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[   98.954373][ T6553] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[   99.001689][ T6553] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'.
[   99.056332][ T6553] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  100.124869][ T6620] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  100.196458][ T6620] team0: Port device netdevsim0 added
[  104.244506][ T6781] syz-executor.0[6781] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  104.245430][ T6781] syz-executor.0[6781] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  105.124033][ T6836] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.195529][ T6896] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  106.352473][ T6905] bond0: (slave syz_tun): Releasing backup interface
[  106.381813][ T6905] syz_tun (unregistering): left promiscuous mode
[  106.397538][ T6905] syz_tun (unregistering): left allmulticast mode
[  106.716220][ T6920] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  107.000936][ T6930] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  107.473579][ T6954] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  107.590295][ T6960] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  108.133336][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  108.291897][ T6992] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  108.823796][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  108.968024][ T7025] sch_tbf: burst 3 is lower than device lo mtu (18) !
[  109.332337][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  109.506198][ T7055] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  110.052756][ T7091] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  110.101850][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  110.572351][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  111.017498][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  111.362293][ T7176] bridge: RTM_NEWNEIGH with invalid ether address
[  111.613160][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  111.892792][ T7210] bridge: RTM_NEWNEIGH with invalid ether address
[  112.189841][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  112.268996][ T7235] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  112.300995][ T7235] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'.
[  112.345623][ T7242] bridge: RTM_NEWNEIGH with invalid ether address
[  112.751432][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  112.850841][ T7273] bridge: RTM_NEWNEIGH with invalid ether address
[  112.953490][ T7280] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  112.961785][ T7280] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[  113.452001][ T7302] bridge: RTM_NEWNEIGH with invalid ether address
[  113.649363][ T7316] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  113.670432][ T7316] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[  114.082835][ T7343] bridge: RTM_NEWNEIGH with invalid ether address
[  114.372133][ T7362] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  114.381584][ T7362] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'.
[  114.561599][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  114.915091][ T7395] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  114.957010][ T7395] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'.
[  115.104965][ T7405] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  115.653878][ T7436] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  116.290103][ T7473] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  116.930658][ T7523] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  116.939973][ T7523] __nla_validate_parse: 3 callbacks suppressed
[  116.939990][ T7523] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[  117.520647][ T7557] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  117.532709][ T7557] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'.
[  118.061999][ T7591] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  118.074195][ T7591] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'.
[  118.654117][ T7629] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  118.671523][ T7629] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[  119.374562][ T7680] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  119.383277][ T7680] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[  119.996800][ T7718] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  120.061117][ T7718] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'.
[  120.693537][ T7768] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  120.704662][ T7768] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'.
[  120.914498][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  121.445976][ T7812] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  121.469593][ T7812] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[  121.605527][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  122.112029][ T7857] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  122.130064][ T7857] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[  122.202480][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  122.786150][ T7897] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  122.798017][ T7897] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
[  122.824188][ T7902] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  123.270921][ T7931] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  123.318789][ T7934] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  123.347692][ T7934] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[  123.914542][ T7966] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  123.950671][ T7969] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  123.960007][ T7969] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
[  124.577331][ T8011] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  124.639218][ T8012] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  124.650950][ T8012] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
[  125.292720][ T8059] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  125.973062][ T8103] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  126.586300][ T8147] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  127.186600][ T8189] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  127.202766][ T8189] __nla_validate_parse: 7 callbacks suppressed
[  127.202784][ T8189] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[  127.247519][ T8191] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  127.720792][ T8225] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  127.741120][ T8225] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[  128.538549][ T8268] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  128.552049][ T8268] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'.
[  129.373791][ T8311] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  129.383893][ T8311] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'.
[  129.821862][ T8333] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  129.928715][ T8337] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  129.943421][ T8337] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[  130.141685][ T8351] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  130.165743][ T8351] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
[  130.464067][ T8374] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  130.691833][ T8390] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  130.709266][ T8390] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[  130.791316][ T8394] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  130.800723][ T8394] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'.
[  131.203434][ T8414] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  131.373839][ T8426] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  131.405702][ T8426] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[  131.984489][ T8465] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  132.463645][ T8487] __nla_validate_parse: 2 callbacks suppressed
[  132.463666][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  132.755486][ T8499] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  132.780162][ T8499] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[  133.035750][ T8519] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  133.160169][ T1246] ieee802154 phy0 wpan0: encryption failed: -22
[  133.330906][ T8538] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  133.346070][ T8538] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[  133.718128][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  133.901848][ T8567] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  134.085204][ T8579] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  134.093698][ T8579] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[  134.259444][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  134.443238][ T8602] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  134.674622][ T8619] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  134.694099][ T8619] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'.
[  134.792890][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  135.046985][ T8638] sch_tbf: burst 3 is lower than device lo mtu (18) !
[  135.373084][ T8658] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  135.389092][ T8658] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'.
[  135.507309][ T8665] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  135.975359][ T8694] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  136.123590][ T8704] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  136.685593][ T8737] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  136.786665][ T8745] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  137.285343][ T8780] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  137.414872][ T8787] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  137.887157][ T8814] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  137.895669][ T8814] __nla_validate_parse: 4 callbacks suppressed
[  137.895685][ T8814] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'.
[  138.064381][ T8823] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  138.609222][ T8857] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  138.631177][ T8857] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'.
[  138.684192][ T8861] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  139.414474][ T8890] sch_tbf: burst 3 is lower than device lo mtu (18) !
[  139.460635][ T8894] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  139.479900][ T8894] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[  139.674360][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  140.025666][ T8927] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  140.097014][ T8930] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  140.117988][ T8930] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
[  140.619383][ T8964] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  140.776613][ T8971] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  140.793220][ T8971] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'.
[  141.324009][ T9007] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  141.457191][ T9015] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  141.466640][ T9015] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[  142.010358][ T9047] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  142.035849][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  142.218634][ T9061] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  142.239948][ T9061] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'.
[  142.761177][ T9095] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  143.092134][ T9107] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  143.121226][ T9107] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'.
[  143.286347][ T1098] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.391622][ T5126] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  143.402458][ T5126] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  143.418778][ T5126] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  143.430351][ T5126] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  143.440297][ T5126] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  143.448392][ T5126] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  143.449364][ T1098] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.651398][ T1098] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.771924][ T1098] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.829974][ T9134] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  144.086119][ T9155] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  144.103413][ T9155] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[  144.107257][ T1098] bridge_slave_1: left allmulticast mode
[  144.119495][ T1098] bridge_slave_1: left promiscuous mode
[  144.125261][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.170965][ T1098] bridge_slave_0: left allmulticast mode
[  144.193032][ T1098] bridge_slave_0: left promiscuous mode
[  144.212862][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.702499][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.725576][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.744255][ T1098] bond0 (unregistering): Released all slaves
[  144.775688][ T9119] chnl_net:caif_netlink_parms(): no params data found
[  145.068398][ T9190] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  145.078374][ T9196] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  145.088157][ T9196] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'.
[  145.248489][ T9204] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  145.248541][ T9119] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.277191][ T9204] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[  145.307164][ T9119] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.315033][ T9119] bridge_slave_0: entered allmulticast mode
[  145.348350][ T9119] bridge_slave_0: entered promiscuous mode
[  145.480499][ T9119] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.502068][ T9119] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.518461][ T9119] bridge_slave_1: entered allmulticast mode
[  145.526433][ T9119] bridge_slave_1: entered promiscuous mode
[  145.557887][ T5126] Bluetooth: hci2: command tx timeout
[  145.571061][ T1098] hsr_slave_0: left promiscuous mode
[  145.578197][ T1098] hsr_slave_1: left promiscuous mode
[  145.585288][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.593075][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.610169][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.617856][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.636766][ T1098] veth1_macvtap: left promiscuous mode
[  145.643853][ T1098] veth1_vlan: left promiscuous mode
[  145.650761][ T1098] veth0_vlan: left promiscuous mode
[  146.091934][ T1098] team0 (unregistering): Port device team_slave_1 removed
[  146.130013][ T1098] team0 (unregistering): Port device team_slave_0 removed
[  146.693579][ T9222] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  146.796709][ T9119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  146.821569][ T9239] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  146.853387][ T9119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  146.877488][ T9249] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  146.894046][ T9249] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[  146.922972][ T9250] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  146.952364][ T9250] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[  146.975439][ T9119] team0: Port device team_slave_0 added
[  147.002384][ T9119] team0: Port device team_slave_1 added
[  147.172403][ T9119] batman_adv: batadv0: Adding interface: batadv_slave_0
[  147.193925][ T9119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.254326][ T9119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  147.311148][ T9119] batman_adv: batadv0: Adding interface: batadv_slave_1
[  147.320946][ T9119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.381694][ T9119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  147.496539][ T9119] hsr_slave_0: entered promiscuous mode
[  147.523554][ T9119] hsr_slave_1: entered promiscuous mode
[  147.534442][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  147.638272][ T5126] Bluetooth: hci2: command tx timeout
[  147.811452][ T9289] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  147.823143][ T9289] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[  147.840785][ T9291] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  147.861241][ T9291] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
[  148.252486][ T9119] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  148.293007][ T9119] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  148.342187][ T9119] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  148.371535][ T9119] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  148.448359][ T9323] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  148.457902][ T9323] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[  148.467909][ T9319] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  148.482299][ T9319] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[  148.638163][ T9119] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.694275][ T9119] 8021q: adding VLAN 0 to HW filter on device team0
[  148.721244][  T928] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.728467][  T928] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.743789][  T928] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.750998][  T928] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.137742][ T9119] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.232889][ T9119] veth0_vlan: entered promiscuous mode
[  149.270722][ T9119] veth1_vlan: entered promiscuous mode
[  149.322799][ T9119] veth0_macvtap: entered promiscuous mode
[  149.334358][ T9119] veth1_macvtap: entered promiscuous mode
[  149.366073][ T9362] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  149.376046][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.390266][ T9362] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
[  149.401264][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.411783][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.430445][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.448482][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.460988][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.470876][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.489688][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.497058][ T9367] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  149.503419][ T9119] batman_adv: batadv0: Interface activated: batadv_slave_0
[  149.528812][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.540345][ T9367] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'.
[  149.562055][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.591660][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.615497][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.634548][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.646460][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.668047][ T9119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.684532][ T9119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.704964][ T9119] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.718836][ T5126] Bluetooth: hci2: command tx timeout
[  149.804537][ T9119] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.814005][ T9119] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.834685][ T9119] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.853899][ T9119] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.072151][ T9389] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  150.098448][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.122098][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.242824][ T9399] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  150.243507][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.251683][ T9399] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
[  150.271389][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.604609][ T9420] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  150.620191][ T9420] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
[  150.624980][ T9423] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  150.735263][ T9426] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  150.854657][ T9433] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  150.866089][ T9433] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'.
[  151.295736][ T9458] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  151.301534][ T9453] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  151.343078][ T9458] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[  151.382692][ T9461] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  151.797161][ T5126] Bluetooth: hci2: command tx timeout
[  151.844544][ T9491] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  151.929570][ T9498] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  151.939678][ T9498] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'.
[  152.188179][ T9510] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  152.442137][ T9525] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  152.519018][ T9527] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  152.911692][ T9556] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  153.023636][ T9563] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  153.682500][ T9606] __nla_validate_parse: 5 callbacks suppressed
[  153.682518][ T9606] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  153.683882][ T9604] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  153.715445][ T9604] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'.
[  153.734404][ T9608] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  154.061738][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  154.211591][ T9638] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  154.306663][ T9642] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  154.318532][ T9642] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
[  154.344999][ T9645] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  154.854457][ T9680] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[  154.919128][ T9682] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  154.940438][ T9682] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[  154.958378][ T9684] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  154.970219][ T9679] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'.
[  155.065267][ T9689] Bluetooth: MGMT ver 1.22
[  155.072416][ T9689] sctp: [Deprecated]: syz-executor.1 (pid 9689) Use of int in maxseg socket option.
[  155.072416][ T9689] Use struct sctp_assoc_value instead
[  155.170769][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  155.370855][ T9710] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  155.452717][ T9712] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  155.617273][ T9727] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  156.129125][ T9759] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  156.437690][ T9775] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  156.643064][ T9783] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  156.713617][ T9793] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  156.940415][ T9807] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  157.222953][ T9826] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  157.539277][ T9841] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  157.653443][ T9850] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  158.199276][ T9883] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  158.296509][ T9890] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  158.464107][ T9901] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  158.802946][ T9921] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  158.959439][ T9930] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  159.155070][ T9945] __nla_validate_parse: 15 callbacks suppressed
[  159.155090][ T9945] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  159.499482][ T9959] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  159.714075][   T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.767206][ T9968] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  159.923601][ T5129] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  159.935198][ T5129] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  159.944444][ T5129] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  159.951838][   T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.968498][ T5129] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  159.986300][ T5129] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  159.993960][ T5129] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  160.089422][   T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.218074][   T51] team0: Port device netdevsim0 removed
[  160.241652][   T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.304387][ T9997] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  160.336990][ T9997] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[  160.569002][   T51] bridge_slave_1: left allmulticast mode
[  160.575095][   T51] bridge_slave_1: left promiscuous mode
[  160.581796][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.595428][   T51] bridge_slave_0: left allmulticast mode
[  160.605545][   T51] bridge_slave_0: left promiscuous mode
[  160.612115][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.987275][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  161.000332][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  161.016502][   T51] bond0 (unregistering): Released all slaves
[  161.188134][   T51] IPVS: stopping master sync thread 6479 ...
[  161.368734][ T9976] chnl_net:caif_netlink_parms(): no params data found
[  161.387672][T10035] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  161.403339][T10035] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'.
[  161.647152][ T9976] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.687465][ T9976] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.706089][ T9976] bridge_slave_0: entered allmulticast mode
[  161.750648][ T9976] bridge_slave_0: entered promiscuous mode
[  161.769206][   T51] hsr_slave_0: left promiscuous mode
[  161.778647][   T51] hsr_slave_1: left promiscuous mode
[  161.785485][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.793752][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.803059][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.813774][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.856058][   T51] veth1_macvtap: left promiscuous mode
[  161.862928][   T51] veth0_macvtap: left promiscuous mode
[  161.875685][   T51] veth1_vlan: left promiscuous mode
[  161.882719][   T51] veth0_vlan: left promiscuous mode
[  162.037127][ T5126] Bluetooth: hci3: command tx timeout
[  162.193706][T10073] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  162.204748][T10073] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'.
[  162.562064][   T51] team0 (unregistering): Port device team_slave_1 removed
[  162.602541][   T51] team0 (unregistering): Port device team_slave_0 removed
[  162.930527][ T9976] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.938417][ T9976] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.945763][ T9976] bridge_slave_1: entered allmulticast mode
[  162.968833][ T9976] bridge_slave_1: entered promiscuous mode
[  163.029846][T10078] tbf_change: 2 callbacks suppressed
[  163.029866][T10078] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  163.103322][ T9976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.133667][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  163.162292][ T9976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.305510][ T9976] team0: Port device team_slave_0 added
[  163.331225][ T9976] team0: Port device team_slave_1 added
[  163.386069][T10104] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  163.408484][T10104] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[  163.435250][ T9976] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.447386][ T9976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.482899][ T9976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.520325][ T9976] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.539235][ T9976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.617198][ T9976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.762573][ T9976] hsr_slave_0: entered promiscuous mode
[  163.795383][ T9976] hsr_slave_1: entered promiscuous mode
[  163.804178][ T9976] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  163.820751][ T9976] Cannot create hsr debugfs directory
[  163.909381][T10127] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  164.097076][T10141] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  164.106500][T10141] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[  164.117058][ T5126] Bluetooth: hci3: command tx timeout
[  164.552108][T10168] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  164.751017][T10180] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  164.763557][T10180] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
[  164.972518][ T9976] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  165.001662][ T9976] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  165.023810][ T9976] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  165.052901][ T9976] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  165.225672][T10203] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  165.338377][ T9976] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.350038][T10211] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  165.359759][T10211] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
[  165.413879][ T9976] 8021q: adding VLAN 0 to HW filter on device team0
[  165.469288][  T931] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.476477][  T931] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.492325][  T931] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.499621][  T931] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.525554][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  165.631047][ T9976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  165.908130][T10241] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  165.926749][T10241] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
[  165.926824][T10242] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  166.085599][ T9976] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.109201][T10248] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  166.197545][ T5126] Bluetooth: hci3: command tx timeout
[  166.251124][ T9976] veth0_vlan: entered promiscuous mode
[  166.270283][ T9976] veth1_vlan: entered promiscuous mode
[  166.343946][ T9976] veth0_macvtap: entered promiscuous mode
[  166.392437][ T9976] veth1_macvtap: entered promiscuous mode
[  166.459514][ T9976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.476097][ T9976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.486414][ T9976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.497474][ T9976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.514065][ T9976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.526613][ T9976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.538269][ T9976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.549303][ T9976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.561126][ T9976] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.577917][T10271] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[  166.609139][ T9976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.625096][ T9976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.635910][ T9976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.648816][ T9976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.660102][ T9976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.671318][ T9976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.682589][ T9976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.694524][ T9976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.706695][ T9976] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.718521][T10280] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  166.751540][ T9976] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.761964][ T9976] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.771747][ T9976] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.793172][ T9976] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.826144][T10282] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  166.843192][T10282] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'.
[  166.976318][  T931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.994204][  T931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.053259][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.069683][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.242628][T10301] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  167.363853][T10306] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  167.490227][T10315] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  167.504075][T10315] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[  167.749475][T10331] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[  167.915307][T10342] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  168.039208][T10344] dummy0: entered promiscuous mode
[  168.054881][T10344] dummy0: left promiscuous mode
[  168.102533][T10354] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  168.278170][ T5126] Bluetooth: hci3: command tx timeout
[  168.704534][T10381] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  168.743118][T10385] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  168.753401][T10383] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  169.427872][T10419] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  169.483264][T10425] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  169.588561][T10428] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  169.956618][T10452] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  169.979645][T10452] __nla_validate_parse: 11 callbacks suppressed
[  169.979673][T10452] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[  170.151658][T10464] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  170.172624][T10464] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  170.202577][T10464] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  170.221174][T10467] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  170.248584][T10471] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'.
[  170.578457][T10487] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  170.598052][T10487] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[  170.643895][T10492] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  170.805314][T10497] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  171.007779][T10507] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'.
[  171.026092][T10503] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  171.062426][T10503] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  171.132757][T10509] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  171.801948][T10544] team_slave_0: entered promiscuous mode
[  171.807732][T10544] team_slave_1: entered promiscuous mode
[  171.832193][T10544] team_slave_0: left promiscuous mode
[  171.837732][T10544] team_slave_1: left promiscuous mode
[  171.905684][T10545] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  172.175617][T10561] validate_nla: 3 callbacks suppressed
[  172.175629][T10561] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  172.402089][T10566] tun0: tun_chr_ioctl cmd 2147767517
[  172.575472][T10574] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  172.821078][T10582] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  172.978654][T10594] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  173.101528][T10598] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  173.302706][T10613] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  173.446319][T10621] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  174.247634][T10652] syzkaller0: entered promiscuous mode
[  174.277571][T10652] syzkaller0: entered allmulticast mode
[  174.319556][T10666] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  174.643286][T10684] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  174.650363][T10684] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  175.792355][T10678] __nla_validate_parse: 10 callbacks suppressed
[  175.792374][T10678] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'.
[  175.937896][T10698] tipc: Started in network mode
[  175.943007][T10698] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  175.973026][T10698] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  175.993464][T10698] tipc: Enabled bearer <udp:syz2>, priority 10
[  176.197083][ T5129] Bluetooth: hci1: command 0x0406 tx timeout
[  176.279542][T10715] bridge0: entered promiscuous mode
[  176.286202][T10715] bridge0: left promiscuous mode
[  176.390741][T10725] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'.
[  176.646362][T10734] tipc: Started in network mode
[  176.664109][T10734] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  176.716105][T10734] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  176.741186][T10734] tipc: Enabled bearer <udp:syz2>, priority 10
[  176.980759][    T8] tipc: Node number set to 1
[  177.112347][T10756] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  177.234295][T10754] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'.
[  177.484361][T10770] tipc: Started in network mode
[  177.497109][T10770] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  177.511784][T10770] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  177.535181][T10770] tipc: Enabled bearer <udp:syz2>, priority 10
[  177.637512][T10782] xt_bpf: check failed: parse error
[  177.646443][T10782] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  177.864768][    T8] tipc: Node number set to 1
[  178.158397][T10799] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'.
[  178.447282][T10810] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  178.647142][   T45] tipc: Node number set to 1
[  178.757531][T10825] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  178.784954][T10828] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'.
[  179.162062][T10845] tipc: Started in network mode
[  179.183816][T10845] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  179.201682][T10845] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  179.233369][T10845] tipc: Enabled bearer <udp:syz2>, priority 10
[  179.376534][T10861] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
[  179.986210][T10889] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  180.134790][T10897] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'.
[  180.357191][   T45] tipc: Node number set to 1
[  180.469314][T10913] netlink: 'syz-executor.0': attribute type 9 has an invalid length.
[  180.842305][T10928] __nla_validate_parse: 1 callbacks suppressed
[  180.842322][T10928] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'.
[  181.582578][T10969] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
[  182.179410][T10990] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'.
[  182.388230][T10999] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  182.502230][T11009] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'.
[  182.594067][T11013] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.4'.
[  182.604911][T11013] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  182.771150][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  182.840607][T11029] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
[  183.011989][T11037] IPv6: Can't replace route, no match found
[  183.345000][T11062] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  183.790313][T11085] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  184.428703][T11123] Bluetooth: MGMT ver 1.22
[  184.444935][T11123] Bluetooth: hci3: invalid length 0, exp 2 for type 12
[  184.518275][T11123] macvlan2: entered allmulticast mode
[  184.538744][T11123] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  184.548651][T11123] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  184.568897][T11123] team0: Port device macvlan2 added
[  184.846407][T11145] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  185.108877][T11160] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  185.129262][T11160] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  185.370881][T11175] batman_adv: batadv1: Adding interface: netdevsim0
[  185.384573][T11175] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.457979][T11175] batman_adv: batadv1: Interface activated: netdevsim0
[  185.635020][T11190] lo: entered allmulticast mode
[  185.668849][T11194] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  185.727765][T11190] pimreg: entered allmulticast mode
[  185.948566][T11210] __nla_validate_parse: 5 callbacks suppressed
[  185.948584][T11210] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  186.375374][T11232] netlink: 'syz-executor.4': attribute type 21 has an invalid length.
[  186.394070][T11232] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'.
[  186.413636][T11233] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  186.567991][T11245] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  186.583033][T11248] netlink: 'syz-executor.3': attribute type 32 has an invalid length.
[  186.607241][T11248] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  186.630716][T11248] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  187.131113][T11271] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  187.503967][T11291] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  187.595416][T11293] syz-executor.0[11293] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  187.595718][T11293] syz-executor.0[11293] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  187.936109][T11307] sctp: [Deprecated]: syz-executor.4 (pid 11307) Use of int in maxseg socket option.
[  187.936109][T11307] Use struct sctp_assoc_value instead
[  188.131543][T11312] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  188.594839][T11333] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  188.633095][T11336] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  188.997046][T11356] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  189.035728][T11363] Bluetooth: MGMT ver 1.22
[  189.133280][T11367] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  189.376480][T11379] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  189.500990][T11382] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  189.510917][T11382] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  189.625577][T11391] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  189.649177][T11389] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  190.094768][T11418] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  190.194670][T11420] tipc: Started in network mode
[  190.219878][T11420] tipc: Node identity 6, cluster identity 4711
[  190.226598][T11420] tipc: Node number set to 6
[  190.482439][T11439] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  190.974654][T11463] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  191.132017][T11471] sctp: [Deprecated]: syz-executor.3 (pid 11471) Use of struct sctp_assoc_value in delayed_ack socket option.
[  191.132017][T11471] Use struct sctp_sack_info instead
[  191.272119][T11477] sctp: [Deprecated]: syz-executor.3 (pid 11477) Use of int in maxseg socket option.
[  191.272119][T11477] Use struct sctp_assoc_value instead
[  191.408459][T11477] __nla_validate_parse: 4 callbacks suppressed
[  191.408477][T11477] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  191.557213][ T5129] Bluetooth: hci5: command 0x0406 tx timeout
[  191.594332][T11497] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  191.606494][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  191.693089][T11504] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  191.805901][T11511] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[  192.007772][T11520] xt_bpf: check failed: parse error
[  192.346394][T11542] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  192.473578][T11546] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'.
[  192.480928][T11553] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  192.669009][T11558] sctp: [Deprecated]: syz-executor.4 (pid 11558) Use of int in maxseg socket option.
[  192.669009][T11558] Use struct sctp_assoc_value instead
[  192.831411][T11558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  192.887528][T11571] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  193.018517][T11581] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'.
[  193.119081][T11586] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  193.160488][T11592] netlink: 268 bytes leftover after parsing attributes in process `syz-executor.1'.
[  193.270819][T11592] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[  193.535061][T11609] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  193.707743][T11623] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'.
[  193.754991][T11625] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  193.832441][T11629] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  194.133899][T11641] bridge0: port 3(macvlan3) entered blocking state
[  194.173487][T11641] bridge0: port 3(macvlan3) entered disabled state
[  194.193857][T11641] macvlan3: entered allmulticast mode
[  194.219774][T11641] macvlan3: entered promiscuous mode
[  194.601603][ T1246] ieee802154 phy0 wpan0: encryption failed: -22
[  194.705404][T11671] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  195.258881][T11705] bridge0: port 3(macvlan2) entered blocking state
[  195.275297][T11707] xt_TCPMSS: Only works on TCP SYN packets
[  195.297588][T11705] bridge0: port 3(macvlan2) entered disabled state
[  195.347203][T11705] macvlan2: entered allmulticast mode
[  195.378532][T11705] macvlan2: entered promiscuous mode
[  195.404085][T11707] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  195.875069][T11720] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  196.806344][T11763] bridge0: port 3(macvlan3) entered blocking state
[  196.844282][T11763] bridge0: port 3(macvlan3) entered disabled state
[  196.858527][T11763] macvlan3: entered allmulticast mode
[  196.907934][T11763] macvlan3: entered promiscuous mode
[  196.948512][T11777] ipvlan0: entered promiscuous mode
[  197.008284][T11777] ipvlan0: left promiscuous mode
[  197.051000][T11781] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  197.185007][T11787] __nla_validate_parse: 9 callbacks suppressed
[  197.185025][T11787] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'.
[  197.477127][ T5126] Bluetooth: hci3: command tx timeout
[  197.764736][T11818] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  197.805654][T11823] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[  197.858862][T11818] bond1 (unregistering): Released all slaves
[  198.002877][T11832] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  198.047545][T11834] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  198.194086][T11836] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  198.294009][T11841] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  198.614448][T11865] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'.
[  198.913030][T11879] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  199.184131][T11895] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'.
[  199.496380][T11915] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[  199.731145][T11924] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  199.748060][T11926] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'.
[  200.302772][T11946] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  200.345991][T11946] team0: Device veth1_macvtap failed to register rx_handler
[  200.556150][   T29] kauditd_printk_skb: 20 callbacks suppressed
[  200.556169][   T29] audit: type=1804 audit(1717527900.894:32): pid=11958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1159434427/syzkaller.Vf0JQq/422/cgroup.controllers" dev="sda1" ino=1931 res=1 errno=0
[  200.579831][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  200.744594][T11965] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  201.685765][T12023] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  202.548234][T12071] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  203.212566][T12115] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  203.733711][T12143] __nla_validate_parse: 4 callbacks suppressed
[  203.733730][T12143] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  203.903566][T12151] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  205.026373][   T51] tipc: Subscription rejected, illegal request
[  205.130003][T12202] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  205.247139][T12206] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  205.893996][T12243] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  205.982124][T12246] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  206.426402][T12273] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'.
[  206.750022][T12286] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  206.843418][T12289] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  206.868120][T12290] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  207.313518][T12313] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  207.679273][T12328] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  207.783087][T12334] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  208.125477][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  208.432371][T12367] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  208.711799][T12380] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  208.749111][T12385] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  209.282181][T12415] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  209.308309][T12414] netlink: 440 bytes leftover after parsing attributes in process `syz-executor.3'.
[  209.375769][T12414] openvswitch: netlink: EtherType 0 is less than min 600
[  209.634652][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  209.809583][T12442] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  209.873571][T12450] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'.
[  209.914706][T12450] sctp: [Deprecated]: syz-executor.3 (pid 12450) Use of int in maxseg socket option.
[  209.914706][T12450] Use struct sctp_assoc_value instead
[  210.287658][T12469] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  210.454830][T12479] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  210.762493][T12494] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  210.843481][T12501] netlink: 'syz-executor.3': attribute type 21 has an invalid length.
[  210.868991][T12501] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  210.896709][T12500] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  210.924955][T12500] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  211.059530][T12511] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  211.066667][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  211.092773][T12515] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  212.037472][ T5129] Bluetooth: hci0: command 0x0406 tx timeout
[  212.131217][T12568] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  212.152434][T12571] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  212.849635][T12605] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  212.933070][T12603] bond0: entered promiscuous mode
[  213.142027][T12619] pim6reg: entered allmulticast mode
[  213.279742][T12628] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  213.729321][T12654] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  214.092250][T12678] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  214.284836][T12693] netem: unknown loss type 0
[  214.298859][T12693] netem: change failed
[  214.685070][T12716] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  214.825877][T12719] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  215.542735][T12765] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  215.580856][T12768] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  215.935841][T12790] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  215.950379][T12792] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  215.962222][T12790] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  216.048988][T12795] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'.
[  216.211316][T12805] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  216.243507][T12807] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  216.602621][T12828] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  216.634134][T12828] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  216.645554][T12832] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'.
[  216.842714][T12840] pim6reg: entered allmulticast mode
[  216.850690][T12839] pim6reg: left allmulticast mode
[  216.965616][T12848] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  217.741524][T12890] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  218.165659][T12920] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  218.195459][T12917] 0ªX¹¦D: renamed from gretap0 (while UP)
[  218.214820][T12917] 0ªX¹¦D: entered allmulticast mode
[  218.225936][T12917] A link change request failed with some changes committed already. Interface 
50ªX¹¦D may have been left with an inconsistent configuration, please check.
[  218.265778][T12921] syzkaller0: entered allmulticast mode
[  218.476047][T12935] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  218.593169][T12942] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  219.205205][T12970] __nla_validate_parse: 20 callbacks suppressed
[  219.205224][T12970] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  219.269580][T12974] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  219.335133][T12981] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  219.341678][T12981] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  219.386248][T12980] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  219.395607][T12981] hsr_slave_0: left promiscuous mode
[  219.407987][T12981] hsr_slave_1: left promiscuous mode
[  219.594974][T12986] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  219.622953][T12992] 8021q: adding VLAN 0 to HW filter on device batadv0
[  219.639076][T12992] team0: Port device batadv0 added
[  219.769006][T13001] No such timeout policy "syz0"
[  219.835195][   T45] IPVS: starting estimator thread 0...
[  219.868173][T13011] IPVS: set_ctl: invalid protocol: 31091 97.108.108.101:29233
[  219.975903][T13017] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  219.997172][T13013] IPVS: using max 21 ests per chain, 50400 per kthread
[  220.110917][T13026] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  220.129554][   T29] audit: type=1804 audit(1717527920.464:33): pid=13025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir459008035/syzkaller.IoQVL6/299/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0
[  220.244830][T13030] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  220.302972][T13039] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  220.726186][T13061] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  220.839777][T13069] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  221.061006][T13077] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  221.148786][T13084] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4095 (only 8 groups)
[  221.163968][T13086] Illegal XDP return value 4294967294 on prog  (id 556) dev N/A, expect packet loss!
[  221.417487][T13095] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  221.521313][T13098] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  221.650952][T13105] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'.
[  221.805475][T13114] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  221.990211][T13125] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  222.037052][T13122] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4095 (only 8 groups)
[  222.507710][T13153] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  222.766073][T13167] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4095 (only 8 groups)
[  223.283145][T13202] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  223.444883][T13203] bond2: (slave vcan1): The slave device specified does not support setting the MAC address
[  223.470632][T13203] bond2: (slave vcan1): Error -95 calling set_mac_address
[  223.584992][T13211] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4095 (only 8 groups)
[  224.034649][T13235] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  224.310201][T13250] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  224.555397][T13267] __nla_validate_parse: 7 callbacks suppressed
[  224.555416][T13267] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'.
[  224.721697][T13276] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  224.818343][T13281] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  225.166550][T13297] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  225.294716][T13305] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  225.341581][T13311] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  225.355296][T13309] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'.
[  225.480532][T13315] 8021q: adding VLAN 0 to HW filter on device team2
[  225.510596][T13315] bond0: (slave team2): Enslaving as an active interface with a down link
[  225.529328][T13318] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  226.165907][T13350] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'.
[  226.282316][T13356] tbf_change: 1 callbacks suppressed
[  226.282336][T13356] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  226.413554][T13365] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  226.689080][T13378] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  226.866197][T13389] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  226.922402][T13390] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'.
[  226.927607][T13389] 8021q: adding VLAN 0 to HW filter on device team3
[  226.985636][T13389] bond0: (slave team3): Enslaving as an active interface with a down link
[  227.312703][T13412] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  227.532005][T13428] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'.
[  227.659362][T13434] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  227.728947][T13439] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  227.954610][T13450] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  227.974856][T13450] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[  228.079799][T13453] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  228.124031][T13457] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  228.153713][T13457] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'.
[  228.232985][T13457] syzkaller0: entered allmulticast mode
[  228.718354][T13489] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  228.910043][T13498] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  229.101421][T13509] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  229.233142][T13513] vlan2: entered allmulticast mode
[  229.252418][T13513] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode
[  229.282550][T13513] mac80211_hwsim hwsim17 wlan1: left allmulticast mode
[  229.458588][T13524] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  229.657439][T13535] __nla_validate_parse: 6 callbacks suppressed
[  229.657457][T13535] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'.
[  229.758462][T13540] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  229.778834][T13541] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  229.801523][T13541] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[  229.812241][T13538] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'.
[  230.039122][   T29] audit: type=1800 audit(1717527930.374:34): pid=13556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1948 res=0 errno=0
[  230.109673][   T29] audit: type=1804 audit(1717527930.384:35): pid=13558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1159434427/syzkaller.Vf0JQq/546/memory.events" dev="sda1" ino=1948 res=1 errno=0
[  230.113907][T13564] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  230.190509][   T29] audit: type=1804 audit(1717527930.384:36): pid=13557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1159434427/syzkaller.Vf0JQq/546/memory.events" dev="sda1" ino=1948 res=1 errno=0
[  230.217932][T13564] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
[  230.232175][T13573] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'.
[  230.271983][T13572] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  230.281825][   T29] audit: type=1804 audit(1717527930.384:37): pid=13556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1159434427/syzkaller.Vf0JQq/546/memory.events" dev="sda1" ino=1948 res=1 errno=0
[  230.319188][T13572] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'.
[  230.350809][   T29] audit: type=1804 audit(1717527930.424:38): pid=13558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1159434427/syzkaller.Vf0JQq/546/memory.events" dev="sda1" ino=1948 res=1 errno=0
[  230.480105][   T29] audit: type=1804 audit(1717527930.424:39): pid=13558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1159434427/syzkaller.Vf0JQq/546/memory.events" dev="sda1" ino=1948 res=1 errno=0
[  230.728880][T13596] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  230.781078][T13597] sch_tbf: burst 3 is lower than device lo mtu (11337746) !
[  230.845779][T13599] xt_CT: You must specify a L4 protocol and not use inversions on it
[  230.928928][T13606] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'.
[  230.997682][T13609] vlan0: entered promiscuous mode
[  231.109333][T13609] vlan0 (unregistering): left promiscuous mode
[  231.143271][T13616] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'.
[  231.158125][T13619] tipc: Failed to remove unknown binding: 66,1,1/1:2526875518/2526875520
[  231.179379][T13619] tipc: Failed to remove unknown binding: 66,1,1/1:2526875518/2526875520
[  231.222292][T13619] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  231.253034][T13618] tipc: Failed to remove unknown binding: 66,1,1/1:2526875518/2526875520
[  231.275012][T13618] tipc: Failed to remove unknown binding: 66,1,1/1:2526875518/2526875520
[  231.618032][T13648] tc_dump_action: action bad kind
[  231.652761][T13651] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  231.835092][T13664] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  232.471095][T13695] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  232.922071][T13711] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  233.311849][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.381652][ T5129] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  233.391858][ T5129] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  233.404873][ T5129] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  233.424347][ T5129] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  233.445200][ T5129] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  233.454943][T13730] validate_nla: 3 callbacks suppressed
[  233.454961][T13730] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  233.475067][ T5129] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  233.578954][T13730] bond3: entered promiscuous mode
[  233.611412][T13730] bond3 (unregistering): Released all slaves
[  233.715060][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.743554][T13751] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  233.803150][T13735] bond0: (slave bond_slave_0): Releasing backup interface
[  233.888693][T13744] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  234.066484][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.199617][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.262426][T13770] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  234.606177][T13788] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  234.695280][T13796] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  234.733097][T13796] bond1: entered promiscuous mode
[  234.756290][   T12] bond0: left allmulticast mode
[  234.761594][   T12] bond_slave_0: left allmulticast mode
[  234.775924][   T12] bond_slave_1: left allmulticast mode
[  234.786219][   T12] bridge0: port 3(bond0) entered disabled state
[  234.823844][   T12] bridge_slave_1: left allmulticast mode
[  234.830984][   T12] bridge_slave_1: left promiscuous mode
[  234.837675][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.852081][   T12] bridge_slave_0: left allmulticast mode
[  234.859157][   T12] bridge_slave_0: left promiscuous mode
[  234.864892][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.407440][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  235.424942][   T12] bond_slave_0: left promiscuous mode
[  235.437933][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  235.447905][   T12] bond_slave_1: left promiscuous mode
[  235.456565][   T12] bond0 (unregistering): Released all slaves
[  235.470343][   T12] bond1 (unregistering): Released all slaves
[  235.485629][T13801] bond0: (slave bond_slave_0): Releasing backup interface
[  235.512789][T13801] bond1: (slave bond_slave_0): making interface the new active one
[  235.537524][T13801] bond_slave_0: entered promiscuous mode
[  235.544456][T13801] bond1: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.562874][ T5126] Bluetooth: hci4: command tx timeout
[  235.592369][T13804] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  235.599732][T13796] __nla_validate_parse: 8 callbacks suppressed
[  235.599747][T13796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  235.623575][T13796] bond1 (unregistering): (slave bond_slave_0): Releasing active interface
[  235.633540][T13796] bond_slave_0: left promiscuous mode
[  235.650952][T13796] bond1 (unregistering): Released all slaves
[  235.797303][   T12] tipc: Disabling bearer <udp:syz2>
[  235.807483][   T12] tipc: Left network mode
[  235.838434][T13813] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  235.973775][T13728] chnl_net:caif_netlink_parms(): no params data found
[  236.224380][T13838] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  236.247742][T13840] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  236.264265][T13840] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[  236.476313][   T12] hsr_slave_0: left promiscuous mode
[  236.494853][   T12] hsr_slave_1: left promiscuous mode
[  236.529326][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  236.552160][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  236.572460][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  236.589273][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  236.617131][   T12] veth1_macvtap: left promiscuous mode
[  236.622845][   T12] veth0_macvtap: left promiscuous mode
[  236.632083][   T12] veth1_vlan: left promiscuous mode
[  236.641005][   T12] veth0_vlan: left promiscuous mode
[  237.139232][   T12] team0 (unregistering): Port device team_slave_1 removed
[  237.188711][   T12] team0 (unregistering): Port device team_slave_0 removed
[  237.584797][T13844] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  237.594210][T13844] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  237.603294][T13857] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  237.625543][T13862] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  237.637128][ T5126] Bluetooth: hci4: command tx timeout
[  237.721842][T13728] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.735303][T13728] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.746396][T13728] bridge_slave_0: entered allmulticast mode
[  237.759718][T13728] bridge_slave_0: entered promiscuous mode
[  237.768826][T13728] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.786301][T13728] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.807048][T13728] bridge_slave_1: entered allmulticast mode
[  237.814401][T13728] bridge_slave_1: entered promiscuous mode
[  237.933474][T13883] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  237.952920][T13880] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  237.960993][T13883] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[  237.988376][T13728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  238.025253][T13728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  238.195303][T13728] team0: Port device team_slave_0 added
[  238.228240][T13728] team0: Port device team_slave_1 added
[  238.310819][T13728] batman_adv: batadv0: Adding interface: batadv_slave_0
[  238.340622][T13728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.379532][T13728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  238.417560][T13728] batman_adv: batadv0: Adding interface: batadv_slave_1
[  238.424694][T13728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.461418][T13728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  238.483644][T13903] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  238.525744][T13903] bond1: entered promiscuous mode
[  238.589899][T13908] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  238.609626][T13903] bond1: (slave bond_slave_0): making interface the new active one
[  238.642654][T13903] bond_slave_0: entered promiscuous mode
[  238.656083][T13903] bond1: (slave bond_slave_0): Enslaving as an active interface with an up link
[  238.696070][T13728] hsr_slave_0: entered promiscuous mode
[  238.712533][T13728] hsr_slave_1: entered promiscuous mode
[  238.722933][T13728] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  238.732155][T13728] Cannot create hsr debugfs directory
[  238.832077][T13906] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  238.844736][T13906] bond1 (unregistering): (slave bond_slave_0): Releasing active interface
[  238.853501][T13906] bond_slave_0: left promiscuous mode
[  238.874471][T13906] bond1 (unregistering): Released all slaves
[  239.052832][T13918] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  239.067363][T13918] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'.
[  239.447084][T13929] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  239.566749][T13944] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  239.717473][ T5126] Bluetooth: hci4: command tx timeout
[  239.834329][T13956] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  239.849394][T13956] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'.
[  240.093666][T13728] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  240.156139][T13728] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  240.199946][T13728] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  240.230672][T13977] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  240.240258][T13728] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  240.358074][T13987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  240.499964][T13989] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  240.613382][T13996] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  240.632422][T13996] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[  240.640028][T13728] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.730099][T13728] 8021q: adding VLAN 0 to HW filter on device team0
[  240.754085][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.761313][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.800099][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.807314][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.930916][T14007] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  240.986726][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  241.213742][T14021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  241.243850][T14020] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  241.407262][T14029] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  241.415458][T14031] sch_tbf: burst 3 is lower than device lo mtu (14) !
[  241.430477][T13728] 8021q: adding VLAN 0 to HW filter on device batadv0
[  241.439412][T14029] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'.
[  241.618881][T14039] 8021q: adding VLAN 0 to HW filter on device batadv0
[  241.649505][T14039] team0: Port device batadv0 added
[  241.735909][T13728] veth0_vlan: entered promiscuous mode
[  241.786009][T13728] veth1_vlan: entered promiscuous mode
[  241.797458][ T5126] Bluetooth: hci4: command tx timeout
[  241.893240][T13728] veth0_macvtap: entered promiscuous mode
[  241.924984][T14052] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'.
[  241.936992][T13728] veth1_macvtap: entered promiscuous mode
[  242.014940][T13728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.057758][T13728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.105598][T13728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.125318][T13728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.148174][T13728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.166920][T13728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.177786][T13728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.189769][T13728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.205102][T13728] batman_adv: batadv0: Interface activated: batadv_slave_0
[  242.233151][T14060] sch_tbf: burst 3 is lower than device lo mtu (14) !
[  242.303462][T14064] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  242.330392][T14064] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[  242.354044][T13728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.377746][T13728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.390173][T13728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.400969][T13728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.411151][T13728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.426210][T13728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.440293][T13728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.461880][T13728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.474197][T13728] batman_adv: batadv0: Interface activated: batadv_slave_1
[  242.491017][T14067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  242.574917][T13728] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.606578][T13728] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.624662][T13728] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.639651][T13728] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.690121][T14070] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  242.918781][ T5165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.926798][ T5165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.069320][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.102686][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.231613][T14098] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'.
[  243.300191][T14100] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  243.312145][T14100] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[  243.412740][T14106] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  243.448966][T14109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  243.936087][T14139] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'.
[  244.077621][T14148] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  244.110622][T14148] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
[  244.125463][T14149] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  244.164996][T14156] sch_tbf: burst 3 is lower than device lo mtu (14) !
[  244.702408][T14187] sctp: [Deprecated]: syz-executor.3 (pid 14187) Use of struct sctp_assoc_value in delayed_ack socket option.
[  244.702408][T14187] Use struct sctp_sack_info instead
[  244.945339][T14199] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  244.974677][T14198] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  245.017505][T14203] sch_tbf: burst 3 is lower than device lo mtu (14) !
[  245.577590][T14231] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  245.617803][T14232] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  245.655588][T14234] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  245.680023][T14236] __nla_validate_parse: 9 callbacks suppressed
[  245.680041][T14236] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  245.698382][T14234] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[  245.774477][T14242] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'.
[  245.884205][T14249] x_tables: duplicate underflow at hook 3
[  245.943275][T14251] sch_tbf: burst 3 is lower than device lo mtu (14) !
[  246.170911][T14261] sch_tbf: burst 3 is lower than device lo mtu (14) !
[  246.318825][T14268] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  246.344586][T14268] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
[  246.359644][ T5126] Bluetooth: hci0: command 0x0406 tx timeout
[  246.398127][T14273] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  246.406628][T14273] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[  246.511487][T14275] veth0_vlan: entered allmulticast mode
[  246.727572][T14284] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  246.743433][T14286] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'.
[  246.761530][T14279] veth0_vlan: left promiscuous mode
[  246.776550][T14279] veth0_vlan: entered promiscuous mode
[  246.798821][ T5129] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  246.808546][ T5129] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  246.818010][ T5129] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  246.828826][ T5129] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  246.847737][ T5129] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  246.857878][ T5129] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  247.089867][T14298] sch_tbf: burst 3 is lower than device lo mtu (14) !
[  247.306247][T14306] sch_tbf: burst 3 is lower than device lo mtu (14) !
[  247.325069][T14308] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  247.334915][T14308] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'.
[  247.357056][T14314] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[  247.482997][T14323] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'.
[  247.602685][T14287] chnl_net:caif_netlink_parms(): no params data found
[  247.914377][T14345] sch_tbf: burst 3 is lower than device lo mtu (14) !
[  247.926421][T14287] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.945662][T14287] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.956023][T14287] bridge_slave_0: entered allmulticast mode
[  247.981254][T14287] bridge_slave_0: entered promiscuous mode
[  248.052105][T14287] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.066374][T14287] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.075399][T14287] bridge_slave_1: entered allmulticast mode
[  248.092378][T14287] bridge_slave_1: entered promiscuous mode
[  248.201662][T14287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  248.234908][T14287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  248.272931][T14366] sch_tbf: burst 3 is lower than device lo mtu (14) !
[  248.381086][T14287] team0: Port device team_slave_0 added
[  248.397367][T14287] team0: Port device team_slave_1 added
[  248.511903][T14287] batman_adv: batadv0: Adding interface: batadv_slave_0
[  248.526552][T14287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.566451][T14287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  248.621539][T14287] batman_adv: batadv0: Adding interface: batadv_slave_1
[  248.638959][T14287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.676630][T14287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  248.903750][T14287] hsr_slave_0: entered promiscuous mode
[  248.918324][ T5126] Bluetooth: hci0: command tx timeout
[  248.943580][T14287] hsr_slave_1: entered promiscuous mode
[  248.961480][T14287] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  248.981479][T14287] Cannot create hsr debugfs directory
[  249.003542][T14389] sch_tbf: burst 3 is lower than device lo mtu (14) !
[  249.187228][T14400] vlan0: entered promiscuous mode
[  249.209757][T14400] team0: entered promiscuous mode
[  249.226975][T14400] team_slave_0: entered promiscuous mode
[  249.238316][T14400] team_slave_1: entered promiscuous mode
[  249.247369][T14400] macvlan2: entered promiscuous mode
[  249.253632][T14400] batadv0: entered promiscuous mode
[  249.260491][T14400] vlan0: entered allmulticast mode
[  249.265834][T14400] team0: entered allmulticast mode
[  249.272299][T14400] team_slave_0: entered allmulticast mode
[  249.279302][T14407] validate_nla: 3 callbacks suppressed
[  249.279319][T14407] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  249.294169][T14400] team_slave_1: entered allmulticast mode
[  249.307289][T14400] batadv0: entered allmulticast mode
[  249.517785][T14418] vxcan0: Master is either lo or non-ether device
[  249.757133][T14287] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.787792][T14429] sch_tbf: burst 3 is lower than device lo mtu (14) !
[  249.986570][T14447] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  250.014435][T14287] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.185700][T14287] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.374973][T14287] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.556254][T14473] sch_tbf: burst 3 is lower than device lo mtu (14) !
[  250.626581][T14481] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  250.772159][T14287] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  250.852382][T14287] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  250.959298][T14287] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  250.997287][ T5126] Bluetooth: hci0: command tx timeout
[  251.031832][T14287] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  251.075093][T14496] __nla_validate_parse: 15 callbacks suppressed
[  251.075115][T14496] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'.
[  251.338823][T14512] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  251.366186][T14512] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode
[  251.412423][T14512] macvlan2: entered promiscuous mode
[  251.453714][T14517] sch_tbf: burst 3 is lower than device lo mtu (14) !
[  251.461633][T14518] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  251.487924][T14518] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
[  251.582687][T14287] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.658609][T14287] 8021q: adding VLAN 0 to HW filter on device team0
[  251.659882][T14526] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'.
[  251.673848][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.681778][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state
[  251.718881][T14527] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  251.725604][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.734215][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state
[  252.150569][T14550] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  252.177992][T14550] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[  252.271274][T14558] sch_tbf: burst 3 is lower than device lo mtu (14) !
[  252.428238][T14287] 8021q: adding VLAN 0 to HW filter on device batadv0
[  252.503294][T14569] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'.
[  252.679984][T14578] vxcan0: tx drop: invalid da for name 0x0000000000000002
[  252.716260][T14579] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  253.065990][T14287] veth0_vlan: entered promiscuous mode
[  253.078205][ T5126] Bluetooth: hci0: command tx timeout
[  253.129506][T14287] veth1_vlan: entered promiscuous mode
[  253.210604][T14600] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  253.229471][T14600] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
[  253.261679][T14287] veth0_macvtap: entered promiscuous mode
[  253.296719][T14287] veth1_macvtap: entered promiscuous mode
[  253.330188][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.341994][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.353493][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.364875][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.376246][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.391153][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.395907][T14608] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'.
[  253.401546][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.422794][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.442606][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.458087][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.483495][T14287] batman_adv: batadv0: Interface activated: batadv_slave_0
[  253.492964][T14606] sch_tbf: burst 3 is lower than device lo mtu (14) !
[  253.540745][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.565312][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.579550][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.597742][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.616148][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.636225][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.657150][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.675393][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.692071][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.704069][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.716042][T14287] batman_adv: batadv0: Interface activated: batadv_slave_1
[  253.737495][T14621] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  253.872343][T14287] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  253.898538][T14287] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  253.936177][T14287] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  253.971631][T14287] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  254.073233][T14635] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  254.123185][T14635] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'.
[  254.129958][T14638] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'.
[  254.237465][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.245340][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.374861][ T5233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.397428][ T5233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.630030][T14664] sch_tbf: burst 3 is lower than device lo mtu (14) !
[  254.642041][T14663] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  254.884715][T14675] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  254.968260][T14678] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  255.157891][ T5126] Bluetooth: hci0: command tx timeout
[  255.502071][T14714] sch_tbf: burst 3 is lower than device lo mtu (14) !
[  255.629340][T14719] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  256.040439][ T1246] ieee802154 phy0 wpan0: encryption failed: -22
[  256.142813][T14733] sch_tbf: burst 3 is lower than device lo mtu (14) !
[  256.190999][T14741] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  256.428530][ T5129] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  256.440697][ T5129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  256.458387][ T5129] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  256.471869][ T5129] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  256.481886][ T5129] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  256.490759][ T5129] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  256.568598][T14761] __nla_validate_parse: 6 callbacks suppressed
[  256.568618][T14761] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'.
[  256.675669][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.727609][T14762] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  256.820828][T14774] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  256.832308][T14774] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'.
[  256.925127][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.134684][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.238144][ T5129] Bluetooth: hci0: command tx timeout
[  257.254780][   T12] batman_adv: batadv1: Interface deactivated: netdevsim0
[  257.353232][T14798] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'.
[  257.354041][   T12] batman_adv: batadv1: Removing interface: netdevsim0
[  257.393690][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.526512][T14801] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  257.644094][T14809] sch_tbf: burst 3 is lower than device lo mtu (14) !
[  257.804979][T14818] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  257.837191][T14818] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'.
[  258.083981][   T12] macvlan2: left allmulticast mode
[  258.108076][   T12] macvlan2: left promiscuous mode
[  258.139491][   T12] bridge0: port 3(macvlan2) entered disabled state
[  258.174818][   T12] bridge_slave_1: left allmulticast mode
[  258.187938][   T12] bridge_slave_1: left promiscuous mode
[  258.195553][T14837] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'.
[  258.206144][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.223490][   T12] bridge_slave_0: left allmulticast mode
[  258.237121][   T12] bridge_slave_0: left promiscuous mode
[  258.278911][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.601396][ T5129] Bluetooth: hci2: command tx timeout
[  259.031754][ T5126] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  259.041634][ T5126] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  259.049749][ T5126] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  259.060202][ T5126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  259.086182][ T5126] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  259.094023][ T5126] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  259.216508][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  259.232671][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  259.246331][   T12] bond0 (unregistering): Released all slaves
[  259.274023][T14751] chnl_net:caif_netlink_parms(): no params data found
[  259.284701][T14854] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  259.327991][ T5129] Bluetooth: hci0: command tx timeout
[  259.474684][   T12] tipc: Disabling bearer <udp:syz2>
[  259.482001][   T12] tipc: Left network mode
[  259.718392][T14868] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  259.727138][T14868] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'.
[  259.783899][T14872] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'.
[  259.995002][T14751] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.008855][T14751] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.016255][T14751] bridge_slave_0: entered allmulticast mode
[  260.024186][T14751] bridge_slave_0: entered promiscuous mode
[  260.057765][   T12] hsr_slave_0: left promiscuous mode
[  260.076241][   T12] hsr_slave_1: left promiscuous mode
[  260.103600][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  260.116597][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  260.134330][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  260.150133][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  260.189755][   T12] veth1_macvtap: left promiscuous mode
[  260.195532][   T12] veth0_macvtap: left promiscuous mode
[  260.203539][   T12] veth1_vlan: left promiscuous mode
[  260.210304][   T12] veth0_vlan: left promiscuous mode
[  260.679281][ T5129] Bluetooth: hci2: command tx timeout
[  260.755707][   T12] team0 (unregistering): Port device team_slave_1 removed
[  260.800155][   T12] team0 (unregistering): Port device team_slave_0 removed
[  261.166987][ T5129] Bluetooth: hci3: command tx timeout
[  261.278796][T14751] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.285975][T14751] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.296382][T14751] bridge_slave_1: entered allmulticast mode
[  261.318684][T14751] bridge_slave_1: entered promiscuous mode
[  261.358363][T14896] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'.
[  261.396977][ T5129] Bluetooth: hci0: command tx timeout
[  261.580858][T14751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  261.625028][T14903] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  261.686568][T14903] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  261.733837][T14751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  261.848889][T14909] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'.
[  261.886117][T14910] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  261.890282][T14751] team0: Port device team_slave_0 added
[  261.895248][T14910] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
[  261.986467][T14751] team0: Port device team_slave_1 added
[  262.123986][T14919] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  262.132540][T14919] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'.
[  262.167979][T14751] batman_adv: batadv0: Adding interface: batadv_slave_0
[  262.202677][T14751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  262.237658][T14751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  262.261890][T14930] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  262.282380][T14924] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'.
[  262.297407][T14930] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  262.326298][T14751] batman_adv: batadv0: Adding interface: batadv_slave_1
[  262.355528][T14751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  262.406879][T14751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  262.448550][   T12] IPVS: stop unused estimator thread 0...
[  262.757004][ T5129] Bluetooth: hci2: command tx timeout
[  263.246847][ T5129] Bluetooth: hci3: command tx timeout
[  263.273181][T14945] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  263.286881][T14945] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'.
[  263.482922][ T5129] Bluetooth: hci0: command tx timeout
[  264.837221][ T5129] Bluetooth: hci2: command tx timeout
[  265.317635][ T5129] Bluetooth: hci3: command tx timeout
[  265.557231][ T5129] Bluetooth: hci0: command tx timeout
[  267.397066][ T5129] Bluetooth: hci3: command tx timeout
[  267.637363][ T5129] Bluetooth: hci0: command tx timeout
[  269.717243][ T5129] Bluetooth: hci0: command tx timeout
[  271.807306][ T5129] Bluetooth: hci0: command tx timeout
[  273.877491][ T5129] Bluetooth: hci0: command tx timeout
[  275.957557][ T5129] Bluetooth: hci0: command tx timeout
[  292.688069][ T5126] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  292.698247][ T5126] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  292.706030][ T5126] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  292.718391][ T5126] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  292.726202][ T5126] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  292.734843][ T5126] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  292.921987][ T5129] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  292.931110][ T5129] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  292.939067][ T5129] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  292.947195][ T5129] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  292.954916][ T5129] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  292.962526][ T5129] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  293.560583][ T5126] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  293.569725][ T5126] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  293.589903][ T5126] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  293.598355][ T5126] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  293.607931][ T5126] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  293.615596][ T5126] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  294.837196][ T5129] Bluetooth: hci5: command tx timeout
[  295.007314][ T5129] Bluetooth: hci6: command tx timeout
[  295.637168][ T5129] Bluetooth: hci7: command tx timeout
[  296.917124][ T5129] Bluetooth: hci5: command tx timeout
[  297.079242][ T5129] Bluetooth: hci6: command tx timeout
[  297.717074][ T5129] Bluetooth: hci7: command tx timeout
[  299.002689][ T5129] Bluetooth: hci5: command tx timeout
[  299.157249][ T5129] Bluetooth: hci6: command tx timeout
[  299.797435][ T5129] Bluetooth: hci7: command tx timeout
[  301.077110][ T5129] Bluetooth: hci5: command tx timeout
[  301.243266][ T5129] Bluetooth: hci6: command tx timeout
[  301.877212][ T5129] Bluetooth: hci7: command tx timeout
[  317.479835][ T1246] ieee802154 phy0 wpan0: encryption failed: -22
[  321.294642][ T5126] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  321.303745][ T5126] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  321.312409][ T5126] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  321.321366][ T5126] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  321.338016][ T5126] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  321.345572][ T5126] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  323.397205][ T5129] Bluetooth: hci8: command tx timeout
[  323.941696][ T5126] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  323.957400][ T5126] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  323.965388][ T5126] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  323.973660][ T5126] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  323.982010][ T5126] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  323.989463][ T5126] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  325.477041][ T5129] Bluetooth: hci8: command tx timeout
[  326.047080][ T5129] Bluetooth: hci9: command tx timeout
[  327.567412][ T5129] Bluetooth: hci8: command tx timeout
[  328.117008][ T5129] Bluetooth: hci9: command tx timeout
[  329.645380][ T5129] Bluetooth: hci8: command tx timeout
[  330.197084][ T5129] Bluetooth: hci9: command tx timeout
[  332.276972][ T5129] Bluetooth: hci9: command tx timeout
[  357.770642][ T5126] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  357.780690][ T5126] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  357.789012][ T5126] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  357.817212][ T5126] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  357.825078][ T5126] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  357.832664][ T5126] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  358.088065][ T5126] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  358.098681][ T5126] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  358.109694][ T5126] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  358.118711][ T5126] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  358.126736][ T5126] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  358.134201][ T5126] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  358.490699][T14974] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  358.508310][T14974] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  358.516611][T14974] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  358.526171][T14974] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  358.535747][T14974] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  358.543253][T14974] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  359.887035][T14974] Bluetooth: hci10: command tx timeout
[  360.207231][T14974] Bluetooth: hci11: command tx timeout
[  360.517076][T14974] Bluetooth: hci4: command 0x0406 tx timeout
[  360.607942][ T5126] Bluetooth: hci12: command tx timeout
[  361.956920][ T5126] Bluetooth: hci10: command tx timeout
[  362.277325][ T5126] Bluetooth: hci11: command tx timeout
[  362.676893][ T5126] Bluetooth: hci12: command tx timeout
[  364.037272][ T5126] Bluetooth: hci10: command tx timeout
[  364.357727][ T5126] Bluetooth: hci11: command tx timeout
[  364.756911][ T5126] Bluetooth: hci12: command tx timeout
[  366.117366][ T5126] Bluetooth: hci10: command tx timeout
[  366.436866][ T5126] Bluetooth: hci11: command tx timeout
[  366.838126][ T5126] Bluetooth: hci12: command tx timeout
[  370.757084][T14974] Bluetooth: hci0: command 0x0406 tx timeout
[  378.931864][ T1246] ieee802154 phy0 wpan0: encryption failed: -22
[  381.002303][ T5126] Bluetooth: hci2: command 0x0406 tx timeout
[  386.120405][T14974] Bluetooth: hci3: command 0x0406 tx timeout
[  386.424782][T14974] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  386.434466][T14974] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  386.444084][T14974] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  386.452489][T14974] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  386.460544][T14974] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  386.471233][T14974] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  388.517273][ T5126] Bluetooth: hci13: command tx timeout
[  389.005409][T14974] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  389.015344][T14974] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  389.024871][T14974] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  389.033958][T14974] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  389.043288][T14974] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  389.051175][T14974] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  390.607035][T14974] Bluetooth: hci13: command tx timeout
[  391.078528][T14974] Bluetooth: hci14: command tx timeout
[  392.677228][T14974] Bluetooth: hci13: command tx timeout
[  393.158490][T14974] Bluetooth: hci14: command tx timeout
[  394.757054][T14974] Bluetooth: hci13: command tx timeout
[  395.237250][T14974] Bluetooth: hci14: command tx timeout
[  397.317719][T14974] Bluetooth: hci14: command tx timeout
[  416.856880][ T5125] Bluetooth: hci6: command 0x0406 tx timeout
[  416.862956][ T5125] Bluetooth: hci7: command 0x0406 tx timeout
[  416.879368][ T5129] Bluetooth: hci5: command 0x0406 tx timeout
[  419.878513][   T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds.
[  419.886311][   T30]       Not tainted 6.10.0-rc1-syzkaller-00248-g83042ce9b7c3 #0
[  419.894002][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  419.902765][   T30] task:kworker/u8:1    state:D stack:21328 pid:12    tgid:12    ppid:2      flags:0x00004000
[  419.913011][   T30] Workqueue: netns cleanup_net
[  419.917892][   T30] Call Trace:
[  419.921190][   T30]  <TASK>
[  419.924133][   T30]  __schedule+0x17e8/0x4a20
2024/06/04 19:08:40 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  419.928763][   T30]  ? __pfx___schedule+0x10/0x10
[  419.936806][   T30]  ? __pfx_lock_release+0x10/0x10
[  419.941902][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  419.953982][   T30]  ? kthread_data+0x52/0xd0
[  419.958596][   T30]  ? schedule+0x90/0x320
[  419.962856][   T30]  ? wq_worker_sleeping+0x66/0x240
[  419.968025][   T30]  ? schedule+0x90/0x320
[  419.972486][   T30]  schedule+0x14b/0x320
[  419.976658][   T30]  schedule_preempt_disabled+0x13/0x30
[  419.982217][   T30]  __mutex_lock+0x6a4/0xd70
[  419.986951][   T30]  ? __mutex_lock+0x527/0xd70
[  419.994050][   T30]  ? gate_exit_net+0x30/0x100
[  419.998905][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  420.003952][   T30]  ? __pfx_call_rcu+0x10/0x10
[  420.008727][   T30]  ? __pfx_gate_exit_net+0x10/0x10
[  420.013852][   T30]  gate_exit_net+0x30/0x100
[  420.018471][   T30]  ? __pfx_gate_exit_net+0x10/0x10
[  420.023600][   T30]  cleanup_net+0x89d/0xcc0
[  420.028079][   T30]  ? __pfx_cleanup_net+0x10/0x10
[  420.033051][   T30]  ? process_scheduled_works+0x945/0x1830
[  420.039295][   T30]  process_scheduled_works+0xa2c/0x1830
[  420.044895][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  420.050968][   T30]  ? assign_work+0x364/0x3d0
[  420.055582][   T30]  worker_thread+0x86d/0xd70
[  420.061279][   T30]  ? __kthread_parkme+0x169/0x1d0
[  420.066332][   T30]  ? __pfx_worker_thread+0x10/0x10
[  420.071503][   T30]  kthread+0x2f0/0x390
[  420.075797][   T30]  ? __pfx_worker_thread+0x10/0x10
[  420.081035][   T30]  ? __pfx_kthread+0x10/0x10
[  420.085642][   T30]  ret_from_fork+0x4b/0x80
[  420.096756][   T30]  ? __pfx_kthread+0x10/0x10
[  420.101376][   T30]  ret_from_fork_asm+0x1a/0x30
[  420.106181][   T30]  </TASK>
[  420.126830][   T30] INFO: task kworker/u8:4:64 blocked for more than 143 seconds.
[  420.134497][   T30]       Not tainted 6.10.0-rc1-syzkaller-00248-g83042ce9b7c3 #0
[  420.156858][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  420.165571][   T30] task:kworker/u8:4    state:D stack:22928 pid:64    tgid:64    ppid:2      flags:0x00004000
[  420.196867][   T30] Workqueue: ipv6_addrconf addrconf_dad_work
[  420.202924][   T30] Call Trace:
[  420.206224][   T30]  <TASK>
[  420.216788][   T30]  __schedule+0x17e8/0x4a20
[  420.221359][   T30]  ? __pfx___schedule+0x10/0x10
[  420.226234][   T30]  ? __pfx_lock_release+0x10/0x10
[  420.246820][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  420.252345][   T30]  ? kthread_data+0x52/0xd0
[  420.266814][   T30]  ? schedule+0x90/0x320
[  420.271118][   T30]  ? wq_worker_sleeping+0x66/0x240
[  420.276261][   T30]  ? schedule+0x90/0x320
[  420.297863][   T30]  schedule+0x14b/0x320
[  420.302072][   T30]  schedule_preempt_disabled+0x13/0x30
[  420.316810][   T30]  __mutex_lock+0x6a4/0xd70
[  420.321535][   T30]  ? mark_lock+0x9a/0x350
[  420.325887][   T30]  ? __mutex_lock+0x527/0xd70
[  420.346878][   T30]  ? addrconf_dad_work+0xd0/0x16f0
[  420.352048][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  420.366846][   T30]  addrconf_dad_work+0xd0/0x16f0
[  420.371849][   T30]  ? __pfx_addrconf_dad_work+0x10/0x10
[  420.386853][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  420.393255][   T30]  ? process_scheduled_works+0x945/0x1830
[  420.407876][   T30]  process_scheduled_works+0xa2c/0x1830
[  420.413502][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  420.437025][   T30]  ? assign_work+0x364/0x3d0
[  420.441674][   T30]  worker_thread+0x86d/0xd70
[  420.446316][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  420.466880][   T30]  ? __kthread_parkme+0x169/0x1d0
[  420.471963][   T30]  ? __pfx_worker_thread+0x10/0x10
[  420.486830][   T30]  kthread+0x2f0/0x390
[  420.490951][   T30]  ? __pfx_worker_thread+0x10/0x10
[  420.496078][   T30]  ? __pfx_kthread+0x10/0x10
[  420.517930][   T30]  ret_from_fork+0x4b/0x80
[  420.522438][   T30]  ? __pfx_kthread+0x10/0x10
[  420.536799][   T30]  ret_from_fork_asm+0x1a/0x30
[  420.541643][   T30]  </TASK>
[  420.547590][   T30] INFO: task kworker/1:5:5165 blocked for more than 144 seconds.
[  420.555622][   T30]       Not tainted 6.10.0-rc1-syzkaller-00248-g83042ce9b7c3 #0
[  420.586934][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  420.595659][   T30] task:kworker/1:5