last executing test programs:

2m50.578197331s ago: executing program 3 (id=1905):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x1d78, 0x4, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x50}}, 0x8c000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)

2m49.567387764s ago: executing program 3 (id=1913):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001400bd7f4366c07a2cbfb7eb01"], 0x14}}, 0x0) (async)
sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="3553f8d65c6183c7aba9df3d3eef508f17b532737997aeed5d0e3f4b38f09bbd8ead3a752a89", 0x26}, {&(0x7f0000000100)="f9dcebde4ef0ab3000a2bc37ae83324e0af38faf75116f5525c6b002e5ecf137b131785b825ab4cf80d41dd7d67b2d3b93f91bcef21872beb8829327240dbbbc7dd8790dd9245f3ef8073aac12a5b99b1c90100ba5fe1caa21c07e9722ad30e12f7af7cb2615b8c07b174474df96a2d2eb1c43579751cd2521d17cd72f249afc8c42e8dace1b0992d667bedf59908193dcd7cfbfebc8965bc026a8b4b3b7e7d161d00705163aecf1001817cd5a02d1aa6c3e9b9a05efd6e48d705b0942752da4f563e9aad668dcd0516bcaf134dcc1b8bf00dd97dd475271b97521622098ddbbba", 0xe1}, {&(0x7f0000000040)="194d8b6f602c30430ca05f8b726adf904272a7708b5bd58f4a325a009cfb1ed45a727019a26db1379c6695d4c7007676d128443ba8d11d12fd8c33316927c6810aecf73fe85a96c08d0945d4e151", 0x4e}], 0x3}, 0x24008051) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2m49.429504073s ago: executing program 3 (id=1916):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000001640)=[{{&(0x7f0000000640)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000001140)="c59a9693bd", 0x5}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000800)="931748ff", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x48000) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r2=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x2}, 0x8)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @default]}, 0x48) (async)
listen(r0, 0x1ad72f7) (async)
accept4(r0, 0x0, 0x0, 0x80000) (async)
accept4$netrom(r0, 0x0, 0x0, 0x80000) (async, rerun: 32)
r4 = socket$netlink(0x10, 0x3, 0x4) (rerun: 32)
writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRESHEX=r6, @ANYRES32=r5, @ANYRES32, @ANYRES8=r6], 0x4c}}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f00000458c0)={0x1f, 0x2}, 0x6) (async)
write$bt_hci(r7, &(0x7f0000000000)=ANY=[], 0x13) (async)
ioctl$NILFS_IOCTL_SET_SUINFO(r5, 0x40186e8d, &(0x7f0000000080)={&(0x7f0000000140), 0x0, 0x20, 0x8, 0x6}) (async, rerun: 32)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x0, 0x260, 0xfeffffff, 0x260, 0xa8, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x4, @multicast2, @multicast2, @port, @icmp_id=0xa5}}}}, {{@ip={@local, @private=0xa010102, 0xffffff00, 0xff, 'pimreg\x00', 'bond0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x10}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x260}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x3, 0x3, 0x1}, {0x20, 0x5}, {0xc, 0x7fffffffffffffff}, 0x73}}, @common=@ttl={{0x28}, {0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x1, 0x3, 0x1, 0x6, 0x7], 0x6, 0x1}, {0xffffffffffffffff, [0x2, 0x2, 0x1, 0x1, 0x0, 0x6], 0x5, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (rerun: 32)

2m49.300198895s ago: executing program 3 (id=1918):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1300000056000100000000000000000007"], 0x18}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x8, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x20000005, 0x8, 0x2, 0xd99d}}]}]}}}]}, 0x70}}, 0x0)
sendto$packet(r0, &(0x7f00000002c0)="40c33b69ebc9e05e9bde800088a8", 0xe, 0x171346df250871c7, &(0x7f0000000440)={0x11, 0x3, r3, 0x1, 0x2, 0x6, @broadcast}, 0x14)
socket$packet(0x11, 0x3, 0x300) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1300000056000100000000000000000007"], 0x18}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x8, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x20000005, 0x8, 0x2, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) (async)
sendto$packet(r0, &(0x7f00000002c0)="40c33b69ebc9e05e9bde800088a8", 0xe, 0x171346df250871c7, &(0x7f0000000440)={0x11, 0x3, r3, 0x1, 0x2, 0x6, @broadcast}, 0x14) (async)

2m48.98723896s ago: executing program 3 (id=1921):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r1}, 0x38)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b8000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x7cf, 0x1}, 0x38)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r5, 0x891f, &(0x7f0000000000)={'dummy0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf254f00000008000300", @ANYRES32=r6], 0xe4}, 0x1, 0x0, 0x0, 0x20000040}, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r1}, 0x38) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b8000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) (async)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x7cf, 0x1}, 0x38) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
ioctl$SIOCSIFMTU(r5, 0x891f, &(0x7f0000000000)={'dummy0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf254f00000008000300", @ANYRES32=r6], 0xe4}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) (async)

2m48.853640119s ago: executing program 3 (id=1924):
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="8669ca962a88079d2a7a7bb515632115c3b9fc2fdfbaab93763674ef7d574f83db9febf5f974665ffc285ec3e44b1f1c25f6bfc7e4cc670e708695282ac880174067eb643075e9db49b8afef67447935a7734cb5679490437a394518adacd5b861841f05df3c568fd0046a82b15120b537479edf85d44f5142d1384151a3aea6abc517df88d5ab7ae41c06885025e70a736520624f4f4554a3c8e55d248ca15fe069ed2d7dd3c1f621ee3b26ab59b53f8007c94d45c16ed6433648b4f65170caa50b4abfc538d171cb0e8e20d85f7158fe3e9d7e6d9357a1c0311e2d72d433df1d591998daaa9e04263661f0484217", 0xef)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000026000100fdff07000010000006"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x8040)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@empty, @local, <r1=>0x0}, &(0x7f0000000180)=0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9)
socket$inet_tcp(0x2, 0x1, 0x0)
r10 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="cc9f370a9bad84d5dbd4d4eeeadc21008be516bdcdd2524e957d4e439d7eca5fc11a2ecebeca8911f5bdc8564f79dd20d06d95592155fe006aa4aa734b39bff1b498779559d9ba2b683c948a2d9b11e22ee2", 0x52}, {&(0x7f0000000780)="61b3e91fa941693859c926f95ace025b10269acd6f676fb20b51774ab297ffc8a3b29e58827da16580c7e6d180c719ef17ffb5dcc72546696bc72536f70c1eae6b37d28dc0e0b1aedeeeac772f4355efa1dc4bb8dde3603bb1c7ce8dbfd97fca26d16f4f313a76aec5ee22cd1dcdd79eb60aa6a1f03c697a439a1e3e4dc978464c5c5aad73991df6933500a27e2b9b2d6ae46ead1db866392c2177937efff5a95c8d9b25b5b77de00960c9337625", 0xae}], 0x2, &(0x7f0000000500)}, 0x4048810)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x10000000, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
r12 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), r0)
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000880)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="100026bd020000003ccf7e2392e6a0747a1817080a9e0289f7677daf38766a445cb589e3a40d3de3a3e1d710f057d86dfc36407ee2592e2980640b26e97b2a3db232b17d83000fdf63882676ece84fd807e6f093e1f4871d43b5e1111c2b09f03f81bd1e0c7f7b62d96ad827b64a882b475b14188270264dd7e0daad71adbbf2df273d7c62692b8ad06fc04e67d85aeaee89eeac18eeea0cd696777f72ce"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24000005)
sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="050000000000000071119e2da2a35de53700000000009500a51cc4523fc5"], &(0x7f0000000080)='GPL\x00', 0xc, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r1, @sk_skb=0x26, 0xffffffffffffffff, 0x6}, 0x94)
socket$igmp6(0xa, 0x3, 0x2)

2m33.765970679s ago: executing program 32 (id=1924):
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="8669ca962a88079d2a7a7bb515632115c3b9fc2fdfbaab93763674ef7d574f83db9febf5f974665ffc285ec3e44b1f1c25f6bfc7e4cc670e708695282ac880174067eb643075e9db49b8afef67447935a7734cb5679490437a394518adacd5b861841f05df3c568fd0046a82b15120b537479edf85d44f5142d1384151a3aea6abc517df88d5ab7ae41c06885025e70a736520624f4f4554a3c8e55d248ca15fe069ed2d7dd3c1f621ee3b26ab59b53f8007c94d45c16ed6433648b4f65170caa50b4abfc538d171cb0e8e20d85f7158fe3e9d7e6d9357a1c0311e2d72d433df1d591998daaa9e04263661f0484217", 0xef)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000026000100fdff07000010000006"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x8040)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@empty, @local, <r1=>0x0}, &(0x7f0000000180)=0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9)
socket$inet_tcp(0x2, 0x1, 0x0)
r10 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="cc9f370a9bad84d5dbd4d4eeeadc21008be516bdcdd2524e957d4e439d7eca5fc11a2ecebeca8911f5bdc8564f79dd20d06d95592155fe006aa4aa734b39bff1b498779559d9ba2b683c948a2d9b11e22ee2", 0x52}, {&(0x7f0000000780)="61b3e91fa941693859c926f95ace025b10269acd6f676fb20b51774ab297ffc8a3b29e58827da16580c7e6d180c719ef17ffb5dcc72546696bc72536f70c1eae6b37d28dc0e0b1aedeeeac772f4355efa1dc4bb8dde3603bb1c7ce8dbfd97fca26d16f4f313a76aec5ee22cd1dcdd79eb60aa6a1f03c697a439a1e3e4dc978464c5c5aad73991df6933500a27e2b9b2d6ae46ead1db866392c2177937efff5a95c8d9b25b5b77de00960c9337625", 0xae}], 0x2, &(0x7f0000000500)}, 0x4048810)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x10000000, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
r12 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), r0)
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000880)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="100026bd020000003ccf7e2392e6a0747a1817080a9e0289f7677daf38766a445cb589e3a40d3de3a3e1d710f057d86dfc36407ee2592e2980640b26e97b2a3db232b17d83000fdf63882676ece84fd807e6f093e1f4871d43b5e1111c2b09f03f81bd1e0c7f7b62d96ad827b64a882b475b14188270264dd7e0daad71adbbf2df273d7c62692b8ad06fc04e67d85aeaee89eeac18eeea0cd696777f72ce"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24000005)
sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="050000000000000071119e2da2a35de53700000000009500a51cc4523fc5"], &(0x7f0000000080)='GPL\x00', 0xc, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r1, @sk_skb=0x26, 0xffffffffffffffff, 0x6}, 0x94)
socket$igmp6(0xa, 0x3, 0x2)

2m31.146961737s ago: executing program 1 (id=2158):
r0 = socket(0x5, 0x3, 0x711)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'vcan0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x7}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x8, 0x40}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'batadv0\x00', 'gre0\x00', {}, {}, 0x0, 0x6}, 0x0, 0x228, 0x290, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x1, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x2de, 0x5, 0x1, 'snmp\x00', 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510)
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x70bd2a, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_BLACKHOLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0)

2m31.059019606s ago: executing program 1 (id=2159):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xfe, 0x0, &(0x7f0000000380)="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", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="bc1400002e00090027bd70000000000004000000a51411804b8a9f750c996372b5b14b3a91a3ff88cca5dd0d428ddfdd02a37c0b93bcdade6c5307b79c2d122f"], 0x14bc}, 0x1, 0x0, 0x0, 0x42804}, 0x10)

2m30.902804556s ago: executing program 1 (id=2161):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r1)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x1edfaa1963650027, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x28000000}, 0x40004) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x18, 0x890}, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x7, 0x9}, {0x1, 0xffe0}}}, 0x24}}, 0x0) (async)
recvmmsg(r5, &(0x7f0000002740)=[{{0x0, 0xffffffffffffffbc, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/214, 0xd6}], 0x1}, 0x8001}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/232}, {&(0x7f0000001680)=""/4096}, {&(0x7f00000014c0)=""/192}, {&(0x7f00000027c0)=""/120}], 0x0, &(0x7f0000002680)=""/159}, 0x9}], 0x1, 0x60, 0x0)
recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0) (async)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810)
sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001580)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x68}}, 0x0)

2m30.863956961s ago: executing program 1 (id=2162):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b040000000000000000020000001c0004801800018007000100683388bacad5989626637400000c00028008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a35ca2a46c6382290c69abb7320651922196f62e78d8a5dbf471d68ec8c171e9e062c4da2226f93e00d98b0d64eceff4dcb51420f72756d1d1fbcb61a2d7857ea878b58bc00b039b8f98ae84776d1061d6307914b889dbce505"], 0x70}}, 0x0)

2m30.714850342s ago: executing program 1 (id=2164):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$qrtr(0x2a, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x7c}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
r6 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
sendto$inet6(r6, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000200)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x1, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}, "7fe59ce22cbe5943"}}}}}, 0x36)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0xc}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0)

2m30.496394778s ago: executing program 1 (id=2166):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000008001000040000000700000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x8, r0}, 0x38)
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000000))
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
getpeername$netlink(r1, &(0x7f0000000040), &(0x7f0000000180)=0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000)
ioctl$XFS_IOC_SET_RESBLKS(r2, 0xc0105872, &(0x7f00000001c0)={0xd52f, 0x8})
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d70000daacb39b7f68e300", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf2542000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000000000"], 0x80}}, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38)

2m15.408680345s ago: executing program 33 (id=2166):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000008001000040000000700000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x8, r0}, 0x38)
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000000))
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
getpeername$netlink(r1, &(0x7f0000000040), &(0x7f0000000180)=0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000)
ioctl$XFS_IOC_SET_RESBLKS(r2, 0xc0105872, &(0x7f00000001c0)={0xd52f, 0x8})
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d70000daacb39b7f68e300", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf2542000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000000000"], 0x80}}, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38)

1.589152455s ago: executing program 4 (id=4183):
socket$packet(0x11, 0xa, 0x300)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
syz_emit_ethernet(0x2a, &(0x7f0000000340)={@empty, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x1c, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0)

1.57908059s ago: executing program 5 (id=4184):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)
recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)}, 0x1}], 0x1, 0x20, 0x0)

1.479135275s ago: executing program 2 (id=4187):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETSTEERINGEBPF(r1, 0x400454da, &(0x7f0000000000))
r2 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000140)=0x2, 0x4)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x96, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

1.468455718s ago: executing program 5 (id=4188):
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="38010000031401002bbd8500fedbdf250900020073797a3100000000080041007278650014003355946f6e645f736c6176655f3000000000"], 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x18, 0x18, 0x200, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44010}, 0x20040844)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b8b020000000000200012800b00010067556e657665000010000280060005004e1f000004000600"], 0x40}}, 0x0)

1.387288136s ago: executing program 4 (id=4189):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000004c0)=0xa, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600894f0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000001b000000bf0900000000000056090100000000002700000000000002180100002020782500000000002020207b1af8ff00000000bda100000000000037010000f8ffffffb702000008000000b70300000000000025000000060000009c2300a400000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.386650102s ago: executing program 0 (id=4190):
socket$l2tp6(0xa, 0x2, 0x73)
socket$inet6(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000980)=r3, 0x4)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18}, 0x800)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x2}]}, 0x10)
recvmmsg(r5, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}, 0xfffffffe}], 0x1, 0x0, 0x0)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
close(r6)

1.303823216s ago: executing program 2 (id=4192):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000200)=@add_del={0x2, &(0x7f00000001c0)='pim6reg\x00'}) (async)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000019340)={0x54, r1, 0x100, 0x70bf2a, 0xfffffffe, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1000}, {0x6, 0x16, 0x794}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x448d5}, 0x24008004)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r1, 0x100, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1bc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="64a465e8c8b19b44ba4dea57970686c91b493ce03f82124b84ddbf2653a98ea3217f2b957cf30e84d68a03b3c29dc13fba42c25d98a3974d4bd7d1302be820437b", 0x41) (async)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000950e000000000000c1560000850000001900000095"], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f00000040c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40088d5}], 0x1, 0x40)
recvmmsg(r6, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x1, 0x10000, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) (async)
connect$packet(r6, &(0x7f0000000240)={0x11, 0x1b, r8, 0x1, 0x2, 0x6, @random="a735d2941de1"}, 0x14)
recvmmsg(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000380)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000009c0)=""/196, 0xc4}, {&(0x7f00000002c0)=""/1, 0x1}, {&(0x7f0000000400)=""/64, 0x40}, {&(0x7f00000008c0)=""/71, 0x47}, {&(0x7f0000000ac0)=""/225, 0xe1}], 0x5, &(0x7f0000000940)=""/15, 0xf}, 0x1}, {{&(0x7f0000000c80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000d00)=""/206, 0xce}, {&(0x7f0000000e00)=""/151, 0x97}, {&(0x7f0000000ec0)=""/215, 0xd7}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/4096, 0x1000}], 0x5, &(0x7f0000002040)=""/52, 0x34}, 0xbc}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000002080)=""/14, 0xe}], 0x1, &(0x7f0000002100)=""/210, 0xd2}, 0x6b6a}, {{&(0x7f0000002200)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002300)=[{&(0x7f0000002280)=""/17, 0x11}, {&(0x7f00000022c0)=""/50, 0x32}], 0x2, &(0x7f0000002340)=""/110, 0x6e}, 0x6}], 0x4, 0x2, &(0x7f00000024c0)) (async)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4)
sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@dellinkprop={0x4c, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'geneve0\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvlan0\x00'}]}]}, 0x4c}}, 0x0)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r10, &(0x7f00000007c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10)

1.280297404s ago: executing program 5 (id=4193):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff81ff0d0001000000070000002500000004003d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1)
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth1_to_batadv\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4008018)

1.22220385s ago: executing program 4 (id=4194):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x800448d4, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x88}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x48, 0x0, &(0x7f00000002c0)="b90103606989068c3c270040f0832f39210a5f8cef3095e1ffff86ddfcb3706e41b1a705cd75c47e34febdb770464c4d979b2b69776755b6af41e48996f1b561e9acf7b103902671", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000045}, 0x44004)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)
syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e000b7300fc040000000000000000000000000000ff020000000000000000000000000001"], 0x0)

1.167911371s ago: executing program 2 (id=4196):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000001050400000000000000000200000004001880240001801400018008000194e576e2338a5cb0f134673659ffcb6100e000000108000200e00000010c00028005000100000000001c000f800800025500000000"], 0x58}}, 0x0)

1.098965597s ago: executing program 5 (id=4197):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_TABLE(r1, 0x0, 0x31, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x54}}, 0x0)

1.079578451s ago: executing program 0 (id=4199):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14}}, 0xa4}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f00000005c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x25, 0xf, @val=@kprobe_multi=@addrs={0x0, 0x8, 0x0, &(0x7f0000000000)=[0xc, 0x40, 0x1ff, 0xffff, 0x8, 0x10, 0x356cbcdc, 0x3], 0x3}}, 0x30)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0xf)
bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r2, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x0)

882.589706ms ago: executing program 5 (id=4200):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x20, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099, 0x400}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}, @IFLA_TXQLEN={0x8, 0xd, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x48c1}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

881.872621ms ago: executing program 2 (id=4201):
r0 = socket(0x0, 0x3, 0x2)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0x4, 0x2, 0x1}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x58}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)

854.326483ms ago: executing program 0 (id=4202):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r2, 0x0, 0x8000)
socket(0x200000000000011, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd61fbddf000083aff0000ffffac1e0001ff0200000000000000000000000000018100907800020004"], 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0)
sendmmsg(r3, 0x0, 0x0, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x45833af92e4b39ff, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x140, &(0x7f0000002e80))
r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x18)
write(r0, &(0x7f0000000080)="05000000010001", 0x7)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000240))
r8 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0xffffffffffffff98)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001d00)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}}, 0x0)

854.05606ms ago: executing program 5 (id=4203):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
splice(r0, &(0x7f0000000040)=0x2, r0, &(0x7f0000000280)=0x7, 0x40, 0xa)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}}, 0x20}}, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x0, 0x31, 0x0, "dc6efbc3b54972ba0604b8e20a587d8607043cff9ba01fb10d4df7171eb926b1343726c9a11ca54306250d2d2002d17c1fb42d00e3cefe6630aa40e9a73a7095657daea8791536fe9c5268be2bdd7a74"}, 0xd8)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)

783.254843ms ago: executing program 2 (id=4205):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000340)={0x42, 0x2}, 0x10)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$sock_int(r1, 0x1, 0x26, 0x0, &(0x7f0000000080))
ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f00000000c0)={&(0x7f0000000000)=0x401, 0x8, &(0x7f0000000380)=[{}, {}, {}], &(0x7f0000000040)})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)

746.943946ms ago: executing program 0 (id=4206):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x44, r2, 0x1, 0x70bd29, 0xfffffffd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1000056}}}}, [@NL80211_ATTR_TX_RATES={0x19, 0x10d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xfde1, 0x0, 0x3, 0x3, 0xf33e, 0x9]}}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x2, 0x9, 0xe2e, 0x4, 0x0, 0x7, 0x1, 0x3b]}}, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x64]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x4000000)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa010}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x15}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}}, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={<r3=>r0, 0x7, 0x1, 0x1})
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x20, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0xad, 0x7f}}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x404c900}, 0x20000000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x44, r2, 0x1, 0x70bd29, 0xfffffffd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1000056}}}}, [@NL80211_ATTR_TX_RATES={0x19, 0x10d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xfde1, 0x0, 0x3, 0x3, 0xf33e, 0x9]}}, @NL80211_TXRATE_HE={0x0, 0x5, {[0x2, 0x9, 0xe2e, 0x4, 0x0, 0x7, 0x1, 0x3b]}}, @NL80211_TXRATE_LEGACY={0x0, 0x1, [0x64]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x4000000) (async)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa010}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x15}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}}, 0x1) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={r0, 0x7, 0x1, 0x1}) (async)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x20, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0xad, 0x7f}}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x404c900}, 0x20000000) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async)

675.042904ms ago: executing program 2 (id=4208):
r0 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000400)=0x1, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
accept$nfc_llcp(r2, &(0x7f0000000280), &(0x7f0000000300)=0x60)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc8006459}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x42}}}}, ["", "", "", "", "", "", ""]}, 0x20}}, 0x20000004)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x274, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_EXPRESSIONS={0x100, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x1800}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x60, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPRESSIONS={0x3c, 0xa, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x4}]}}}, {0x58, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0xe8, 0x7, 0x1, 0x0, "12df3ba6a1fed5d35ccd84b363c5072b5131e9ae5fcce5adbc9dcb0d117ea1ce3d087e5c887f41ba21908a37d55763b7ef29e83e73734bf99bf76a68e1d3bbefa44324e948656a40936a27a8f28d2af56feb29a59a42a4e3ef461e2dbb46713daa0aa10ce0c25bba4bdc3f6f44618bbab2dece3a7f8e33a532fdb041a42f56490cee44b657121e4fea35c7b14590d58ee0cde46aa148cebfd333ed310d0310b6d8246b3a5b9ac1b38eb1a3ecdd423dc0cf1c31656e47e533de30391aba558131b8f8bc0ad6c5c522c4f21fd48957e7c57acff0a6785c3645af403f610cd88d181c0a59a3"}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x18, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "8c7457ff8f99b8233ba7d81496e1da69"}]}]}]}]}], {0x14, 0x10}}, 0x308}}, 0x0)
bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0)
ppoll(&(0x7f0000000140)=[{r2, 0x200}, {r1, 0x421}], 0x2, 0x0, 0x0, 0x0)

569.589616ms ago: executing program 0 (id=4210):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
connect$llc(r0, &(0x7f0000000300)={0x1a, 0x326, 0x2, 0x40, 0x3, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=@ipv6_getrule={0x1c, 0x22, 0x100, 0x70bd2d, 0x25dfdbfb, {0xa, 0x20, 0x80, 0xfc, 0x5, 0x0, 0x0, 0xf, 0x12}, ["", ""]}, 0x1c}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x40814)
socket$inet6_sctp(0xa, 0x1, 0x84)

495.138822ms ago: executing program 6 (id=4211):
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, <r3=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r3, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000080)=0xcd, 0x4)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4)
recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
close(r0)
socket$l2tp6(0xa, 0x2, 0x73) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r3, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000080)=0xcd, 0x4) (async)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) (async)
setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4) (async)
recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) (async)
close(r0) (async)

467.688018ms ago: executing program 6 (id=4212):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x20, r1, 0x1, 0x70bd2d, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x1, 0x1}}}}}, 0x20}}, 0x8000040)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

359.880654ms ago: executing program 6 (id=4213):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
syz_emit_ethernet(0x6a, &(0x7f0000000280)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x1000, 0x0]}, {}, {0x8, 0x88be, 0x2}}}}}}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000050000000090a0104000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021140011800a0001006d6174636800000004000280140000001000010000000000000000000000000a00"], 0x98}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async)
syz_emit_ethernet(0x6a, &(0x7f0000000280)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x1000, 0x0]}, {}, {0x8, 0x88be, 0x2}}}}}}, 0x0) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000050000000090a0104000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021140011800a0001006d6174636800000004000280140000001000010000000000000000000000000a00"], 0x98}}, 0x0) (async)

254.455847ms ago: executing program 4 (id=4214):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000a40)=""/4072, 0xfe8}], 0x1}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
accept4$unix(r1, 0x0, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r2, 0x84, 0x72, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744)

237.562115ms ago: executing program 6 (id=4215):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "3d8b00", "eb8e7ba12faf3700", "8000", "c16cb41f00bd22fc"}, 0x38)
sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
writev(r1, &(0x7f0000000740)=[{&(0x7f00000002c0)="589224d2c334c1f63d8a621843f389412830dbab71374ae05f97e6e70c4963661dfdab277efd0f190d8751d9d425965e353e53940b202700ca7397ce47d12c2f1442b0af79f7afbc60261390920f78d8f8798aa12e3305b6400000020000000077148704b6cbfbb42d3228e32f061093a3e22906aed35e4407f6f2384f03957aa93423e7c21735d372423f3f1cc868b904373f127f13c5d68b907c74fdcc8d105e2e2538000000", 0xfeb7}], 0x1)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840)
shutdown(r0, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f00000005c0), r1)

173.749453ms ago: executing program 6 (id=4216):
socket$kcm(0xa, 0x0, 0x0) (async)
r0 = socket$kcm(0xa, 0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000040)=0x8001, 0x0) (async)
sendfile(r0, r0, &(0x7f0000000040)=0x8001, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe90f105d508f6d5, 0x0)
socket(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x3, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xfff3}, {0x0, 0x1}}}, 0x24}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'ip6tnl0\x00', @broadcast})
r6 = socket(0x10, 0x803, 0x0)
accept4$netrom(r6, 0x0, 0x0, 0x800)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000102010100000000000000000a0000004400018006000340000000002c00018014000300ff02000000000000000000000000000114000400000000000000000000000000000200010c000280050001"], 0x58}}, 0x0)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/134, 0x86}, {&(0x7f00000001c0)=""/17, 0x31}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x2}], 0x24, 0x2000, &(0x7f0000000300)={0x77359400})
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0x42, 0x4, 0x450, 0xffffffff, 0x3b8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3b8, 0x3b8, 0x3b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1f0, 0x218, 0x0, {0x100000000000000}, [@common=@inet=@hashlimit2={{0x150}, {'\x00', {0x7ff, 0x298e, 0x1, 0x9, 0x3, 0x81, 0x0, 0x80, 0x20}, {0x6}}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x4, 0x3, 0x1, 0x4], 0x0, 0x2}, {0x2, [0x6, 0x4, 0x5, 0x2, 0x4, 0x4], 0x3, 0x3}}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0x8, 0x27, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) (async)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0x42, 0x4, 0x450, 0xffffffff, 0x3b8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3b8, 0x3b8, 0x3b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1f0, 0x218, 0x0, {0x100000000000000}, [@common=@inet=@hashlimit2={{0x150}, {'\x00', {0x7ff, 0x298e, 0x1, 0x9, 0x3, 0x81, 0x0, 0x80, 0x20}, {0x6}}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x4, 0x3, 0x1, 0x4], 0x0, 0x2}, {0x2, [0x6, 0x4, 0x5, 0x2, 0x4, 0x4], 0x3, 0x3}}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0x8, 0x27, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0)

98.873486ms ago: executing program 4 (id=4217):
r0 = socket$inet6(0xa, 0x2, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608", 0xc1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
sendto$inet6(r1, &(0x7f0000000000)="7f45f0fc3fa7bfe3d767bfd159754d0398be9e3a907f8c9e6b59ff5235b0fde4415cce110ea50e54284f70b757499d", 0x2f, 0x4, 0x0, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, 0x0)

97.602548ms ago: executing program 0 (id=4218):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x82, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1}, {}, {0x7, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0xe}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0xe2, 0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCBRDELBR(r10, 0x89a1, &(0x7f0000000200)='netdevsim0\x00')
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x44010)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

39.611823ms ago: executing program 6 (id=4219):
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000b40)={'dummy0\x00'})
r0 = socket(0x5, 0x801, 0x6)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000280)={<r1=>0x0, 0x10001, 0x3e7, 0x1}, &(0x7f00000002c0)=0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd75b665f834c135f}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={r1, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f00000003c0)=0x84)
connect$rose(r0, &(0x7f0000000400)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f00000000c0)={0x3, {{0xa, 0x4e22, 0x7, @empty, 0x7}}, {{0xa, 0x4e24, 0xcf9c, @remote}}}, 0x108)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000600), 0x3)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "850100", "daf9af4a", "747aaaaf941f267e"}, 0x28)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r8, &(0x7f00000001c0)="a6", 0x1, 0x40, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x41, 0x0, 0x0}, &(0x7f0000000000)=0x40)
bind$vsock_stream(r7, &(0x7f0000000680)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
write$cgroup_subtree(r7, &(0x7f0000000900)=ANY=[], 0x3261e)

0s ago: executing program 4 (id=4220):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x54, &(0x7f0000000100), 0x4) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0x0, &(0x7f0000000380)="e46033449fdd0200000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0) (async)
mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x5, 0x3ff, 0x8, 0x5, 0xf6, 0x2, 0xfffffff7, {<r4=>0x0, @in={{0x2, 0x4e23, @loopback}}, 0xfffffffc, 0x4, 0x10001, 0x81, 0x4}}, &(0x7f00000000c0)=0xb0) (async)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r5, &(0x7f0000000000)={0x24, @long}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000140)={r4, 0x5, 0x30, 0x9, 0x100}, &(0x7f0000000180)=0x18)
setsockopt$sock_timeval(r2, 0x1, 0x2f, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r9=>0x0}) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0600000004000000ff0f00000900000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r6, @ANYRES8=r4, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x40, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r11, 0x0, 0x0}, 0x10) (async)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x80)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002d80)={r12, r9, 0x25, 0x8, @void}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r13=>0x0}) (async)
r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r14, r13, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xff}}, 0x40) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYRES16=r2, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=@gettfilter={0x2c, 0x2e, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff2, 0x9}, {0xffff, 0xe7dcfe041f73fabb}, {0x1, 0x3}}, [{0x8, 0xb, 0x400}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000)

kernel console output (not intermixed with test programs):

been left with an inconsistent configuration, please check.
[  268.343707][T14070] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma?
[  268.466935][T14068] bond7 (unregistering): Released all slaves
[  268.920845][T14099] netlink: 'syz.2.2218': attribute type 4 has an invalid length.
[  268.934372][T14099] __nla_validate_parse: 4 callbacks suppressed
[  268.934389][T14099] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2218'.
[  268.958420][T14098] syzkaller1: entered promiscuous mode
[  268.964055][T14098] syzkaller1: entered allmulticast mode
[  268.977845][T14098] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2217'.
[  268.990024][T14098] netlink: 'syz.5.2217': attribute type 1 has an invalid length.
[  268.998317][T14098] netlink: 'syz.5.2217': attribute type 1 has an invalid length.
[  269.008816][T14098] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2217'.
[  269.036868][T14098] netlink: 'syz.5.2217': attribute type 16 has an invalid length.
[  269.055391][T14098] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2217'.
[  269.460395][T10283] IPVS: starting estimator thread 0...
[  269.494120][T14127] netlink: 'syz.0.2225': attribute type 1 has an invalid length.
[  269.567998][T14132] IPVS: using max 28 ests per chain, 67200 per kthread
[  269.633112][T14142] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2228'.
[  269.656318][T14142] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2228'.
[  270.058204][T14160] syzkaller0: entered promiscuous mode
[  270.077625][T14160] syzkaller0: entered allmulticast mode
[  270.100739][T14160] openvswitch: netlink: IP tunnel dst address not specified
[  270.224988][T14174] netlink: 'syz.4.2236': attribute type 2 has an invalid length.
[  270.276856][T14174] netlink: 'syz.4.2236': attribute type 11 has an invalid length.
[  270.363360][T14174] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2236'.
[  270.686305][T14202] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2243'.
[  271.933083][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  271.941119][    C1] lec:lec_tx_timeout: lec0
[  271.945789][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  271.960830][   T29] audit: type=1800 audit(1774327025.590:3): pid=14265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2259" name="memory.events" dev="tmpfs" ino=2545 res=0 errno=0
[  272.036492][   T29] audit: type=1800 audit(1774327025.590:4): pid=14266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2259" name="memory.events" dev="tmpfs" ino=2545 res=0 errno=0
[  272.057983][T14270] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2260'.
[  272.099836][T14270] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2260'.
[  272.254916][T14281] netlink: zone id is out of range
[  272.260071][T14281] netlink: zone id is out of range
[  272.266600][T14281] netlink: zone id is out of range
[  272.271729][T14281] netlink: zone id is out of range
[  272.277269][T14281] netlink: zone id is out of range
[  272.282388][T14281] netlink: zone id is out of range
[  272.289447][T14281] netlink: zone id is out of range
[  272.312073][T14281] netlink: zone id is out of range
[  272.343601][T14281] netlink: zone id is out of range
[  272.353335][T14281] netlink: zone id is out of range
[  272.564082][T14301] xt_CT: You must specify a L4 protocol and not use inversions on it
[  272.869536][T14317] netlink: 'syz.5.2274': attribute type 1 has an invalid length.
[  272.982715][T14323] bridge_slave_0: invalid flags given to default FDB implementation
[  273.033869][ T5840] Bluetooth: hci5: command 0x0405 tx timeout
[  273.138262][T14329] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  273.225104][T14329] batman_adv: batadv0: Removing interface: batadv_slave_1
[  274.743253][T14371] __nla_validate_parse: 5 callbacks suppressed
[  274.743270][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2289'.
[  274.807949][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2290'.
[  274.852291][   T29] audit: type=1804 audit(1774327028.500:5): pid=14379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2291" name="/newroot/32/cgroup.controllers" dev="tmpfs" ino=183 res=1 errno=0
[  274.899919][   T29] audit: type=1800 audit(1774327028.500:6): pid=14379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2291" name="cgroup.controllers" dev="tmpfs" ino=183 res=0 errno=0
[  274.996741][T14389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2294'.
[  275.013677][T14389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2294'.
[  275.066015][T14391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2295'.
[  275.198471][T14398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2299'.
[  275.396907][T14412] delete_channel: no stack
[  275.402574][T14412] netlink: 'syz.4.2302': attribute type 1 has an invalid length.
[  275.577759][T14423] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2303'.
[  275.655263][T14428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2306'.
[  275.872096][T14443] netlink: 'syz.4.2308': attribute type 1 has an invalid length.
[  275.965459][T14446] veth5: entered promiscuous mode
[  275.975353][T14446] veth5: entered allmulticast mode
[  275.989802][T14452] bridge: RTM_NEWNEIGH with invalid state 0x8
[  276.275299][T14469] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2315'.
[  276.459533][T14479] netlink: 'syz.2.2320': attribute type 2 has an invalid length.
[  276.494663][T14479] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2320'.
[  276.516263][T14482] netlink: 'syz.5.2321': attribute type 4 has an invalid length.
[  276.713913][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  276.723865][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  276.734187][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  276.753925][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  276.761552][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  276.953110][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  276.961147][    C1] lec:lec_tx_timeout: lec0
[  276.966504][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  277.403351][T14494] lo speed is unknown, defaulting to 1000
[  277.942971][T14494] chnl_net:caif_netlink_parms(): no params data found
[  278.095125][T14560] netlink: 'syz.4.2340': attribute type 3 has an invalid length.
[  278.128613][T14561] netlink: 'syz.4.2340': attribute type 3 has an invalid length.
[  278.196254][T14494] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.207932][T14494] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.215570][T14494] bridge_slave_0: entered allmulticast mode
[  278.224008][T14494] bridge_slave_0: entered promiscuous mode
[  278.251217][T14494] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.256596][T14571] netlink: 'syz.4.2343': attribute type 1 has an invalid length.
[  278.258796][T14494] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.273854][T14494] bridge_slave_1: entered allmulticast mode
[  278.281540][T14494] bridge_slave_1: entered promiscuous mode
[  278.285787][T14571] netlink: 'syz.4.2343': attribute type 1 has an invalid length.
[  278.297092][T14571] netlink: 'syz.4.2343': attribute type 1 has an invalid length.
[  278.305351][T14571] netlink: 'syz.4.2343': attribute type 2 has an invalid length.
[  278.317352][T14494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  278.319646][T14571] net_ratelimit: 3 callbacks suppressed
[  278.319660][T14571] openvswitch: netlink: Message has 20 unknown bytes.
[  278.329878][T14494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  278.381269][T14494] team0: Port device team_slave_0 added
[  278.396809][T14494] team0: Port device team_slave_1 added
[  278.436006][T14494] batman_adv: batadv0: Adding interface: batadv_slave_0
[  278.442986][T14494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  278.470410][T14494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  278.484448][T14494] batman_adv: batadv0: Adding interface: batadv_slave_1
[  278.491505][T14494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  278.519734][T14494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  278.563889][T14581] sctp: [Deprecated]: syz.2.2346 (pid 14581) Use of struct sctp_assoc_value in delayed_ack socket option.
[  278.563889][T14581] Use struct sctp_sack_info instead
[  278.606795][T14494] hsr_slave_0: entered promiscuous mode
[  278.613825][T14494] hsr_slave_1: entered promiscuous mode
[  278.620282][T14494] debugfs: 'hsr0' already exists in 'hsr'
[  278.648378][T14494] Cannot create hsr debugfs directory
[  278.795764][ T5837] Bluetooth: hci6: command tx timeout
[  278.930526][T14494] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  278.949165][T14494] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  278.960237][T14494] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  278.972492][T14494] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  278.990611][T14602] tipc: Invalid UDP bearer configuration
[  278.990657][T14602] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  279.076740][T14610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  279.081884][T14494] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.094872][T14610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  279.106486][T14494] 8021q: adding VLAN 0 to HW filter on device team0
[  279.119970][T14611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  279.122110][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.133533][T14610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  279.136888][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.163611][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.170711][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.324912][T14494] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.590721][T14494] veth0_vlan: entered promiscuous mode
[  279.605010][T14494] veth1_vlan: entered promiscuous mode
[  279.641708][T14494] veth0_macvtap: entered promiscuous mode
[  279.652249][T14494] veth1_macvtap: entered promiscuous mode
[  279.678798][T14494] batman_adv: batadv0: Interface activated: batadv_slave_0
[  279.708841][T14494] batman_adv: batadv0: Interface activated: batadv_slave_1
[  279.737386][ T7168] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  279.769337][ T7168] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  279.807046][ T7168] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  279.825476][ T7168] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.948672][T14644] syzkaller0: entered promiscuous mode
[  279.959632][T14644] syzkaller0: entered allmulticast mode
[  280.189867][ T7168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  280.216363][ T7168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  280.293229][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  280.305584][T14658] syzkaller0: entered promiscuous mode
[  280.311088][T14658] syzkaller0: entered allmulticast mode
[  280.317950][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  280.415075][T14664] __nla_validate_parse: 3 callbacks suppressed
[  280.415093][T14664] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2367'.
[  280.505233][T14670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2367'.
[  280.601034][T14670] hsr_slave_1 (unregistering): left promiscuous mode
[  280.676967][T14680] xt_addrtype: ipv6 does not support BROADCAST matching
[  280.727757][T14682] xt_hashlimit: size too large, truncated to 1048576
[  280.873771][ T5837] Bluetooth: hci6: command tx timeout
[  281.119648][T14702] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2376'.
[  281.182009][T14703] xt_hashlimit: size too large, truncated to 1048576
[  281.245773][T14702] syz.5.2376 (14702) used obsolete PPPIOCDETACH ioctl
[  281.428591][T14706] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.2377'.
[  281.973163][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  281.981228][    C1] lec:lec_tx_timeout: lec0
[  281.986089][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  282.963507][ T5837] Bluetooth: hci6: command tx timeout
[  283.485000][T14668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  283.862877][T14732] bond7 (unregistering): Released all slaves
[  284.138866][T14745] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.146570][T14745] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.307821][T14745] bridge_slave_0: left allmulticast mode
[  284.329454][T14745] bridge_slave_0: left promiscuous mode
[  284.368175][T14745] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.416339][T14745] bridge_slave_1: left allmulticast mode
[  284.422167][T14745] bridge_slave_1: left promiscuous mode
[  284.433055][T14745] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.451440][T14745] bond0: (slave bond_slave_0): Releasing backup interface
[  284.465886][T14745] bond0: (slave bond_slave_1): Releasing backup interface
[  284.480389][T14745] team0: Port device team_slave_0 removed
[  284.491103][T14745] team0: Port device team_slave_1 removed
[  284.501815][T14745] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  284.511754][T14745] batman_adv: batadv0: Removing interface: batadv_slave_0
[  284.522515][T14745] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  284.532827][T14745] batman_adv: batadv0: Removing interface: batadv_slave_1
[  284.546358][T14745] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  284.690093][T14787] netlink: 'syz.6.2393': attribute type 10 has an invalid length.
[  284.771467][T14787] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  284.851815][T14801] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2396'.
[  284.888301][T14801] sctp_getsockopt_delayed_ack: 55 callbacks suppressed
[  284.888319][T14801] sctp: [Deprecated]: syz.4.2396 (pid 14801) Use of struct sctp_assoc_value in delayed_ack socket option.
[  284.888319][T14801] Use struct sctp_sack_info instead
[  284.918459][T14800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2397'.
[  285.006435][T14801] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2396'.
[  285.048231][ T5837] Bluetooth: hci6: command tx timeout
[  285.054827][T14816] xt_cluster: node mask cannot exceed total number of nodes
[  285.064113][T14816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2401'.
[  285.183629][T14821] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2404'.
[  285.194605][T14822] xt_l2tp: missing protocol rule (udp|l2tpip)
[  285.299133][T14828] geneve3: entered promiscuous mode
[  285.305266][T14828] geneve3: entered allmulticast mode
[  285.313130][ T7168] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  285.326421][ T7168] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  285.336211][ T7168] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  285.346423][ T7168] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  285.801267][T14805] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  286.221485][T14875] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2419'.
[  286.251844][T14873] netlink: 'syz.0.2420': attribute type 1 has an invalid length.
[  286.259815][T14873] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2420'.
[  286.271141][T14874] netlink: 'syz.0.2420': attribute type 1 has an invalid length.
[  286.279215][T14874] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2420'.
[  286.338582][T14877] netlink: 'syz.4.2421': attribute type 11 has an invalid length.
[  286.350690][T14877] netlink: 173856 bytes leftover after parsing attributes in process `syz.4.2421'.
[  286.414657][T14873] netlink: 'syz.0.2420': attribute type 4 has an invalid length.
[  286.422779][T14874] netlink: 'syz.0.2420': attribute type 4 has an invalid length.
[  286.929224][T14910] netlink: 'syz.0.2434': attribute type 16 has an invalid length.
[  286.958884][T14910] netlink: 'syz.0.2434': attribute type 3 has an invalid length.
[  286.981491][T14910] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2434'.
[  286.993056][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  287.001124][    C1] lec:lec_tx_timeout: lec0
[  287.006425][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  287.054009][T14916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2436'.
[  287.350549][T14942] netlink: 'syz.2.2442': attribute type 10 has an invalid length.
[  287.379128][T14944] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2443'.
[  287.392648][T14945] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2443'.
[  287.452553][T14948] netlink: 'syz.2.2442': attribute type 4 has an invalid length.
[  287.825854][T14963] xt_TCPMSS: Only works on TCP SYN packets
[  287.834234][T14965] netlink: 'syz.6.2449': attribute type 1 has an invalid length.
[  287.882615][T14963] syzkaller0: entered promiscuous mode
[  287.899765][T14963] syzkaller0: entered allmulticast mode
[  288.088866][T14978] ¾x9ÿ (unregistering): left allmulticast mode
[  288.095522][T14978] ¾x9ÿ (unregistering): left promiscuous mode
[  288.102692][T14978] bridge0: port 1(
1¾x9ÿ) entered disabled state
[  288.112295][T14979] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2453'.
[  288.159279][T14979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2453'.
[  288.166302][T14976] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.216227][T14976] bridge_slave_0 (unregistering): left allmulticast mode
[  288.244722][T14976] bridge_slave_0 (unregistering): left promiscuous mode
[  288.261594][T14976] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.342510][T14986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  288.477544][T14994] syzkaller0: entered promiscuous mode
[  288.486498][T14994] syzkaller0: entered allmulticast mode
[  289.721197][T15002] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  289.746809][T15019] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  290.007169][T15037] syzkaller1: entered allmulticast mode
[  290.026911][T15042] tipc: Started in network mode
[  290.031794][T15042] tipc: Node identity , cluster identity 4711
[  290.604820][T15076] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.725308][T15076] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.727751][T15090] sctp: [Deprecated]: syz.4.2485 (pid 15090) Use of struct sctp_assoc_value in delayed_ack socket option.
[  290.727751][T15090] Use struct sctp_sack_info instead
[  290.905936][T15076] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.051705][T15096] 8021q: adding VLAN 0 to HW filter on device bond7
[  291.112577][T15076] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.238059][   T13] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.251871][T15107] __nla_validate_parse: 14 callbacks suppressed
[  291.251890][T15107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2491'.
[  291.288180][   T13] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.302383][T15107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2491'.
[  291.330236][   T13] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.339001][   T13] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.358416][T15077] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.410760][T15077] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.478807][T15077] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.542148][T15077] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.948841][T15155] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  292.013074][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  292.021131][    C1] lec:lec_tx_timeout: lec0
[  292.026059][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  292.029136][T15159] validate_nla: 3 callbacks suppressed
[  292.029151][T15159] netlink: 'syz.0.2506': attribute type 1 has an invalid length.
[  292.038878][T15158] smc: net device team0 applied user defined pnetid SYZ2
[  292.459406][T15183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2516'.
[  292.476119][T15183] netlink: 'syz.2.2516': attribute type 1 has an invalid length.
[  292.720177][T15191] raw_sendmsg: syz.2.2518 forgot to set AF_INET. Fix it!
[  292.867549][T15201] netlink: 'syz.5.2521': attribute type 10 has an invalid length.
[  292.875764][T15201] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.883386][T15201] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.896443][T15201] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.903565][T15201] bridge0: port 2(bridge_slave_1) entered forwarding state
[  292.910993][T15201] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.918192][T15201] bridge0: port 1(bridge_slave_0) entered forwarding state
[  292.921492][T15203] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2521'.
[  292.929379][T15201] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  293.501583][ T7168] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  293.525159][ T7168] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  293.555746][ T3485] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  293.587468][ T3485] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  293.735855][T15236] sctp: [Deprecated]: syz.2.2532 (pid 15236) Use of int in max_burst socket option.
[  293.735855][T15236] Use struct sctp_assoc_value instead
[  293.754815][T15236] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.2532'.
[  293.764863][T15236] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  293.864678][T15240] netlink: 'syz.6.2533': attribute type 21 has an invalid length.
[  293.881652][T15240] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2533'.
[  294.013573][T15247] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2536'.
[  294.051173][T15247] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2536'.
[  294.162693][T15253] netlink: zone id is out of range
[  294.177273][T15253] netlink: zone id is out of range
[  294.183640][T15253] netlink: zone id is out of range
[  294.184756][T15256] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2540'.
[  294.190319][T15253] netlink: zone id is out of range
[  294.209891][T15253] netlink: zone id is out of range
[  294.215778][T15253] netlink: zone id is out of range
[  294.221171][T15253] netlink: zone id is out of range
[  294.226637][T15253] netlink: zone id is out of range
[  294.231889][T15253] netlink: zone id is out of range
[  294.242886][T15263] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  294.419122][T15272] gre0: entered allmulticast mode
[  294.429145][T15270] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2545'.
[  294.664461][T15293] netlink: 'syz.5.2553': attribute type 16 has an invalid length.
[  294.685887][T15293] netlink: 'syz.5.2553': attribute type 17 has an invalid length.
[  295.085710][T15321] netlink: 'syz.5.2562': attribute type 21 has an invalid length.
[  297.777153][T15306] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  297.787853][T15311] netlink: 'syz.6.2559': attribute type 1 has an invalid length.
[  297.796728][T15311] __nla_validate_parse: 1 callbacks suppressed
[  297.796746][T15311] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2559'.
[  297.888247][T15333] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2565'.
[  297.899376][T15333] netlink: 'syz.0.2565': attribute type 1 has an invalid length.
[  297.913028][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5890 ms
[  297.921076][    C1] lec:lec_tx_timeout: lec0
[  297.922376][T15333] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2565'.
[  297.926247][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  298.341339][T15361] netlink: 'syz.5.2569': attribute type 4 has an invalid length.
[  298.360011][T15361] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2569'.
[  298.697179][T15381] netlink: 'syz.0.2576': attribute type 1 has an invalid length.
[  298.987641][T15396] ip6gre1: entered promiscuous mode
[  298.996756][T15396] ip6gre1: entered allmulticast mode
[  299.080473][T15403] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2582'.
[  299.104800][T15402] bond1: (slave gre0): Device is not bonding slave
[  299.111417][T15402] bond1: option active_slave: invalid value (gre0)
[  299.111460][T15403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2582'.
[  299.131201][T15402] bond1 (unregistering): Released all slaves
[  299.241303][T15408] macvlan0: entered promiscuous mode
[  299.298836][T15412] siw: device registration error -23
[  299.396256][T15415] bond2: (slave bond_slave_1): Device is not bonding slave
[  299.405223][T15415] bond2: option active_slave: invalid value (bond_slave_1)
[  299.406206][T15421] netlink: 236 bytes leftover after parsing attributes in process `syz.5.2590'.
[  299.428402][T15415] bond2 (unregistering): Released all slaves
[  299.462620][T15426] netlink: 'syz.4.2592': attribute type 12 has an invalid length.
[  299.471620][T15426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2592'.
[  299.513630][T15426] netlink: 'syz.4.2592': attribute type 12 has an invalid length.
[  299.539087][T15426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2592'.
[  299.575942][T15435] net_ratelimit: 5 callbacks suppressed
[  299.575960][T15435] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  299.742877][T15447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2597'.
[  299.745180][T15431] netlink: 'syz.2.2591': attribute type 3 has an invalid length.
[  299.890685][T15464] macvlan0: entered promiscuous mode
[  300.210706][T15474] netlink: 'syz.5.2606': attribute type 3 has an invalid length.
[  300.288526][T15477] sctp: [Deprecated]: syz.4.2607 (pid 15477) Use of int in max_burst socket option.
[  300.288526][T15477] Use struct sctp_assoc_value instead
[  300.359823][T15484] sit0: Caught tx_queue_len zero misconfig
[  300.547751][T15497] macvlan0: entered promiscuous mode
[  300.651120][T15499] pim6reg1: entered promiscuous mode
[  300.666031][T15499] pim6reg1: entered allmulticast mode
[  300.896816][T15516] netlink: 'syz.5.2621': attribute type 1 has an invalid length.
[  300.934155][T15523] netlink: 'syz.0.2622': attribute type 1 has an invalid length.
[  301.004723][T15517] bond1 (unregistering): Released all slaves
[  301.070501][T15516] 8021q: adding VLAN 0 to HW filter on device bond1
[  301.078525][T15527] "syz.6.2624" (15527) uses obsolete ecb(arc4) skcipher
[  301.155781][T15523] bond7: entered promiscuous mode
[  301.161352][T15523] 8021q: adding VLAN 0 to HW filter on device bond7
[  301.176328][T15525] ipvlan2: entered allmulticast mode
[  301.184256][T15525] bond7: entered allmulticast mode
[  301.215183][T15529] bond7: (slave bridge4): making interface the new active one
[  301.222704][T15529] bridge4: entered promiscuous mode
[  301.228732][T15529] bridge4: entered allmulticast mode
[  301.235452][T15529] bond7: (slave bridge4): Enslaving as an active interface with an up link
[  301.259754][T15545] macvlan0: entered promiscuous mode
[  301.414243][T15559] vcan0: entered allmulticast mode
[  301.596080][T15573] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  301.695804][T15580] gtp0: entered promiscuous mode
[  301.706561][T15580] gtp0: entered allmulticast mode
[  301.761491][T15582] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  301.918921][T15588] syzkaller0: entered promiscuous mode
[  301.927045][T15588] syzkaller0: entered allmulticast mode
[  301.949841][T15590] bond8: entered promiscuous mode
[  301.955498][T15590] 8021q: adding VLAN 0 to HW filter on device bond8
[  301.989538][T15588] 8021q: adding VLAN 0 to HW filter on device bond2
[  302.016227][T15590] bond8: (slave bridge2): making interface the new active one
[  302.024562][T15590] bridge2: entered promiscuous mode
[  302.030810][T15590] bond8: (slave bridge2): Enslaving as an active interface with an up link
[  302.175904][T15609] gre3: entered promiscuous mode
[  302.181136][T15609] gre3: entered allmulticast mode
[  302.431481][T15630] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  302.454824][T15632] syzkaller1: entered promiscuous mode
[  302.460319][T15632] syzkaller1: entered allmulticast mode
[  302.509784][T15630] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  302.943472][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  302.951500][    C1] lec:lec_tx_timeout: lec0
[  302.956349][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  303.147513][T15656] x_tables: ip6_tables: mh match: only valid for protocol 135
[  303.355741][T15669] validate_nla: 1 callbacks suppressed
[  303.355757][T15669] netlink: 'syz.4.2662': attribute type 1 has an invalid length.
[  303.369347][T15669] netlink: 'syz.4.2662': attribute type 2 has an invalid length.
[  303.379209][T15669] __nla_validate_parse: 13 callbacks suppressed
[  303.379229][T15669] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2662'.
[  303.409200][T15670] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2663'.
[  304.148387][T15672] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  304.383404][T15662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2662'.
[  304.392672][T15662] tc_dump_action: action bad kind
[  304.399086][T15674] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2663'.
[  304.436314][T15679] openvswitch: netlink: IPv4 tun info is not correct
[  304.572788][T15682] ksmbd: Unknown IPC event: 6, ignore.
[  304.608217][T15684] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2665'.
[  304.669542][T15690] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2669'.
[  304.743323][T15690] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2669'.
[  304.784442][T15690] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2669'.
[  304.804152][T15690] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2669'.
[  304.937663][T15694] can: request_module (can-proto-0) failed.
[  304.980358][ T5840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  304.990477][ T5840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  304.999646][ T5840] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  305.017323][ T5840] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  305.025208][ T5840] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  305.227309][T15716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2676'.
[  305.251341][T15720] syzkaller0: entered promiscuous mode
[  305.257584][T15720] syzkaller0: entered allmulticast mode
[  305.543766][T15734] ip6t_srh: unknown srh match flags  4000
[  305.636313][T15734] pim6reg1: entered promiscuous mode
[  305.641659][T15734] pim6reg1: entered allmulticast mode
[  305.660153][T15739] netlink: 'syz.4.2684': attribute type 1 has an invalid length.
[  305.713273][T15704] lo speed is unknown, defaulting to 1000
[  305.741487][T15745] x_tables: duplicate underflow at hook 1
[  305.865827][T15750] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20001
[  306.314906][T15704] chnl_net:caif_netlink_parms(): no params data found
[  306.572426][   T13] ¾x9ÿ: left allmulticast mode
[  306.578098][   T13] ¾x9ÿ: left promiscuous mode
[  306.584742][   T13] bridge0: port 1(
1¾x9ÿ) entered disabled state
[  306.679069][   T13] bond4 (unregistering): (slave ip6gre1): Releasing backup interface
[  306.806170][   T13] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  306.825522][   T13] bridge0 (unregistering): left promiscuous mode
[  307.017244][   T13] bond7 (unregistering): (slave bridge4): Releasing backup interface
[  307.025604][   T13] bridge4 (unregistering): left promiscuous mode
[  307.031936][   T13] bridge4 (unregistering): left allmulticast mode
[  307.060999][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  307.070638][   T13] bond_slave_0: left promiscuous mode
[  307.078367][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  307.087799][   T13] bond_slave_1: left promiscuous mode
[  307.096516][   T13] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  307.106472][   T13] bridge_slave_1: left promiscuous mode
[  307.112932][   T13] bond0 (unregistering): Released all slaves
[  307.123323][ T5837] Bluetooth: hci7: command tx timeout
[  307.123710][   T13] bond1 (unregistering): Released all slaves
[  307.141499][   T13] bond2 (unregistering): Released all slaves
[  307.160131][   T13] bond3 (unregistering): Released all slaves
[  307.172392][   T13] bond4 (unregistering): Released all slaves
[  307.186562][   T13] bond5 (unregistering): (slave vcan1): Releasing backup interface
[  307.194910][   T13] vcan1: left promiscuous mode
[  307.201010][   T13] bond5 (unregistering): Released all slaves
[  307.214715][   T13] bond6 (unregistering): Released all slaves
[  307.240286][   T13] bond7 (unregistering): Released all slaves
[  307.288325][T15704] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.305785][T15704] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.314956][T15704] bridge_slave_0: entered allmulticast mode
[  307.342856][T15704] bridge_slave_0: entered promiscuous mode
[  307.495396][T15704] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.525224][T15704] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.537114][T15704] bridge_slave_1: entered allmulticast mode
[  307.565899][T15704] bridge_slave_1: entered promiscuous mode
[  307.618576][   T13] tipc: Left network mode
[  307.668092][   T13] IPVS: stopping backup sync thread 6211 ...
[  307.842287][T15704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  307.882572][T15826] netlink: 'syz.5.2706': attribute type 4 has an invalid length.
[  307.930055][T15704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  307.962770][T15826] netlink: 'syz.5.2706': attribute type 10 has an invalid length.
[  307.970883][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  307.970924][    C1] lec:lec_tx_timeout: lec0
[  307.979365][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  308.049028][T15704] team0: Port device team_slave_0 added
[  308.076572][T15826] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.084648][T15826] bridge_slave_1: left allmulticast mode
[  308.090313][T15826] bridge_slave_1: left promiscuous mode
[  308.103362][T15826] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.128409][T15826] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  308.225197][T15704] team0: Port device team_slave_1 added
[  308.512808][T15704] batman_adv: batadv0: Adding interface: batadv_slave_0
[  308.532213][T15704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  308.563437][T15704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  308.602616][T15704] batman_adv: batadv0: Adding interface: batadv_slave_1
[  308.623867][T15704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  308.678724][T15874] __nla_validate_parse: 5 callbacks suppressed
[  308.678741][T15874] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2717'.
[  308.700906][T15704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  308.754975][T15876] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2717'.
[  309.053475][T15894] 8021q: adding VLAN 0 to HW filter on device bond3
[  309.079654][T15899] xt_cgroup: invalid path, errno=-2
[  309.193451][ T5837] Bluetooth: hci7: command tx timeout
[  309.235642][T15907] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2721'.
[  309.314641][T15704] hsr_slave_0: entered promiscuous mode
[  309.321198][T15704] hsr_slave_1: entered promiscuous mode
[  309.328668][T15704] debugfs: 'hsr0' already exists in 'hsr'
[  309.343325][T15704] Cannot create hsr debugfs directory
[  309.487376][T15918] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2723'.
[  309.783853][T15930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2728'.
[  309.861875][T15937] netlink: 216 bytes leftover after parsing attributes in process `syz.6.2729'.
[  309.893721][   T13] hsr_slave_0: left promiscuous mode
[  309.899935][   T13] hsr_slave_1: left promiscuous mode
[  309.907621][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  309.921961][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  309.963730][   T13] pim6reg (unregistering): left allmulticast mode
[  310.042874][   T13] team0 (unregistering): Port device batadv1 removed
[  310.244398][   T13] team0 (unregistering): Port device 
2
6±ÿ removed
[  310.270118][   T13] team0 (unregistering): Port device team_slave_0 removed
[  310.348820][   T13] smc: removing net device team0 with user defined pnetid SYZ2
[  310.407248][T15937] netlink: 'syz.6.2729': attribute type 4 has an invalid length.
[  310.784231][T15964] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:32789
[  310.929856][T15968] bond9: Unable to set peer notification delay as MII monitoring is disabled
[  310.942233][T15968] bond9 (unregistering): Released all slaves
[  311.274222][ T5837] Bluetooth: hci7: command tx timeout
[  311.346180][   T13] IPVS: stop unused estimator thread 0...
[  311.404840][T15994] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2740'.
[  311.888926][T16022] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  311.933810][T16027] pimreg3: entered allmulticast mode
[  311.949022][T15704] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  312.015187][T15704] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  312.040728][T15704] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  312.070622][T15704] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  312.350982][T16054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  312.400826][T16058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  312.432254][T16059] tipc: Started in network mode
[  312.437449][T16059] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  312.455758][T16059] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  312.540087][T15704] 8021q: adding VLAN 0 to HW filter on device bond0
[  312.628137][T16074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2759'.
[  312.656119][T16073] netlink: 'syz.5.2760': attribute type 21 has an invalid length.
[  312.656429][T15704] 8021q: adding VLAN 0 to HW filter on device team0
[  312.683192][T16073] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2760'.
[  312.716215][ T7169] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.723429][ T7169] bridge0: port 1(bridge_slave_0) entered forwarding state
[  312.851943][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.859174][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  312.979031][T16093] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2765'.
[  312.983068][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  312.996095][    C1] lec:lec_tx_timeout: lec0
[  313.001473][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  313.353231][ T5837] Bluetooth: hci7: command tx timeout
[  313.413979][T16118] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  313.504695][T15704] 8021q: adding VLAN 0 to HW filter on device batadv0
[  313.604985][T15704] veth0_vlan: entered promiscuous mode
[  313.675753][T15704] veth1_vlan: entered promiscuous mode
[  313.792723][T15704] veth0_macvtap: entered promiscuous mode
[  313.822100][T15704] veth1_macvtap: entered promiscuous mode
[  313.908808][T15704] batman_adv: batadv0: Interface activated: batadv_slave_0
[  313.943467][T15704] batman_adv: batadv0: Interface activated: batadv_slave_1
[  314.080396][T10951] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  314.107419][T10951] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  314.138735][T10951] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  314.168707][T10951] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  314.910977][T16200] __nla_validate_parse: 6 callbacks suppressed
[  314.911004][T16200] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2790'.
[  314.958415][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.990728][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.073176][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.113950][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.227673][T16214] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  315.256938][T16214] netlink: 'syz.2.2793': attribute type 7 has an invalid length.
[  315.265487][T16214] 8021q: VLANs not supported on lo
[  315.561833][T16232] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2797'.
[  315.999634][T16250] netlink: 'syz.2.2801': attribute type 10 has an invalid length.
[  316.025742][T16250] veth0_macvtap: left promiscuous mode
[  316.332575][T16262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2805'.
[  316.496569][T16272] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2806'.
[  316.775028][T16282] netlink: 'syz.2.2809': attribute type 1 has an invalid length.
[  316.938837][T16287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2809'.
[  316.983432][T16287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2809'.
[  317.123738][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  317.269006][T16272] vcan0 (unregistering): left allmulticast mode
[  317.352073][T16282] bond9: entered promiscuous mode
[  317.357831][T16282] 8021q: adding VLAN 0 to HW filter on device bond9
[  317.641648][T16308] netlink: 'syz.6.2814': attribute type 1 has an invalid length.
[  317.742142][T16308] 8021q: adding VLAN 0 to HW filter on device bond2
[  317.827065][T16321] netlink: 'syz.4.2816': attribute type 1 has an invalid length.
[  317.861677][T16307] vlan2: entered allmulticast mode
[  317.867355][T16307] veth0_to_bond: entered allmulticast mode
[  317.878150][T16327] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  317.894588][T16327] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.2819'.
[  317.906901][T16322] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  317.924627][T16321] 8021q: adding VLAN 0 to HW filter on device bond9
[  317.957979][T16329] vlan2: entered allmulticast mode
[  317.973603][T16329] veth0_to_bond: entered allmulticast mode
[  318.013038][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  318.014744][T16329] bond9: (slave vlan2): Opening slave failed
[  318.021128][    C1] lec:lec_tx_timeout: lec0
[  318.032050][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  318.058721][T16331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2815'.
[  318.069351][T16335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2821'.
[  318.171747][T16338] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2824'.
[  321.551472][T16397] netlink: 'syz.6.2837': attribute type 2 has an invalid length.
[  321.657565][T16399] __nla_validate_parse: 2 callbacks suppressed
[  321.657584][T16399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2838'.
[  321.778649][T16416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2844'.
[  321.820006][T16416] hsr_slave_0: left promiscuous mode
[  321.840565][T16418] FAULT_INJECTION: forcing a failure.
[  321.840565][T16418] name failslab, interval 1, probability 0, space 0, times 0
[  321.856036][T16420] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2846'.
[  321.856633][T16421] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2846'.
[  321.867063][T16418] CPU: 0 UID: 0 PID: 16418 Comm: syz.0.2845 Not tainted syzkaller #0 PREEMPT(full) 
[  321.867086][T16418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  321.867110][T16418] Call Trace:
[  321.867117][T16418]  <TASK>
[  321.867126][T16418]  dump_stack_lvl+0xe8/0x150
[  321.867155][T16418]  should_fail_ex+0x412/0x560
[  321.867186][T16418]  should_failslab+0xa8/0x100
[  321.867211][T16418]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  321.867232][T16418]  ? __alloc_skb+0x186/0x7d0
[  321.867249][T16418]  ? __alloc_skb+0x1d0/0x7d0
[  321.867264][T16418]  ? __local_bh_enable_ip+0xd0/0x130
[  321.867292][T16418]  __alloc_skb+0x1d0/0x7d0
[  321.867309][T16418]  ? netlink_ack_tlv_len+0x6c/0x210
[  321.867338][T16418]  netlink_ack+0x146/0xa50
[  321.867361][T16418]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  321.867387][T16418]  ? ref_tracker_free+0x693/0x840
[  321.867411][T16418]  ? __copy_skb_header+0xa3/0x4a0
[  321.867433][T16418]  ? __pfx_ref_tracker_free+0x10/0x10
[  321.867469][T16418]  netlink_rcv_skb+0x2b6/0x4b0
[  321.867496][T16418]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  321.867524][T16418]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  321.867560][T16418]  ? netlink_deliver_tap+0x2e/0x1b0
[  321.867593][T16418]  netlink_unicast+0x80f/0x9b0
[  321.867625][T16418]  ? __pfx_netlink_unicast+0x10/0x10
[  321.867650][T16418]  ? netlink_sendmsg+0x650/0xb40
[  321.867674][T16418]  ? skb_put+0x11b/0x210
[  321.867696][T16418]  netlink_sendmsg+0x813/0xb40
[  321.867731][T16418]  ? __pfx_netlink_sendmsg+0x10/0x10
[  321.867761][T16418]  ? aa_sock_msg_perm+0xf1/0x1b0
[  321.867787][T16418]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  321.867811][T16418]  ____sys_sendmsg+0x972/0x9f0
[  321.867830][T16418]  ? __lock_acquire+0x6b5/0x2cf0
[  321.867860][T16418]  ? __pfx_____sys_sendmsg+0x10/0x10
[  321.867889][T16418]  ? import_iovec+0x73/0xa0
[  321.867918][T16418]  ___sys_sendmsg+0x2a5/0x360
[  321.867944][T16418]  ? __pfx____sys_sendmsg+0x10/0x10
[  321.867968][T16418]  ? kstrtouint+0x6e/0xe0
[  321.868021][T16418]  ? __fget_files+0x2a/0x420
[  321.868045][T16418]  ? __fget_files+0x3a0/0x420
[  321.868080][T16418]  __sys_sendmmsg+0x27c/0x4e0
[  321.868106][T16418]  ? __pfx___sys_sendmmsg+0x10/0x10
[  321.868124][T16418]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  321.868169][T16418]  ? ksys_write+0x242/0x270
[  321.868192][T16418]  ? __pfx_ksys_write+0x10/0x10
[  321.868217][T16418]  __x64_sys_sendmmsg+0xa0/0xc0
[  321.868240][T16418]  do_syscall_64+0x14d/0xf80
[  321.868259][T16418]  ? trace_irq_disable+0x3b/0x150
[  321.868283][T16418]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.868301][T16418]  ? clear_bhb_loop+0x40/0x90
[  321.868323][T16418]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.868341][T16418] RIP: 0033:0x7fd959f9c799
[  321.868358][T16418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  321.868374][T16418] RSP: 002b:00007fd95ae7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  321.868394][T16418] RAX: ffffffffffffffda RBX: 00007fd95a215fa0 RCX: 00007fd959f9c799
[  321.868407][T16418] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[  321.868419][T16418] RBP: 00007fd95ae7e090 R08: 0000000000000000 R09: 0000000000000000
[  321.868430][T16418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  321.868441][T16418] R13: 00007fd95a216038 R14: 00007fd95a215fa0 R15: 00007ffe83466868
[  321.868470][T16418]  </TASK>
[  322.310008][T16437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2851'.
[  322.351036][T16439] netlink: 160 bytes leftover after parsing attributes in process `syz.5.2852'.
[  322.456797][T16444] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2853'.
[  322.467132][T16444] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2853'.
[  322.476330][T16444] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2853'.
[  322.521156][T16447] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2852'.
[  322.760013][T16468] bond4: entered promiscuous mode
[  323.095086][T16497] netlink: 'syz.5.2866': attribute type 2 has an invalid length.
[  323.128162][T16497] netlink: 'syz.5.2866': attribute type 11 has an invalid length.
[  323.175344][T16500] tipc: Started in network mode
[  323.191962][T16500] tipc: Node identity 3ea3bf4004df, cluster identity 4711
[  323.221263][T16500] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  323.276141][T16505] syzkaller0: entered promiscuous mode
[  323.285867][T16505] syzkaller0: entered allmulticast mode
[  323.292519][T16505] tipc: Resetting bearer <eth:syzkaller0>
[  323.317007][T16506] macvlan2: entered promiscuous mode
[  323.322515][T16506] macvlan2: entered allmulticast mode
[  323.357705][T16516] tipc: Can't bind to reserved service type 1
[  323.693308][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  323.702599][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  323.710761][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  323.719092][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  323.727874][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  324.052057][ T7168] tipc: Resetting bearer <eth:syzkaller0>
[  324.065531][T16535] delete_channel: no stack
[  324.070199][T16489] tipc: Resetting bearer <eth:syzkaller0>
[  324.153013][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6120 ms
[  324.161066][    C1] lec:lec_tx_timeout: lec0
[  324.166137][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  325.726201][T16489] tipc: Disabling bearer <eth:syzkaller0>
[  325.751234][ T5828] bond0: (slave syz_tun): Releasing backup interface
[  325.759399][ T5828] syz_tun (unregistering): left allmulticast mode
[  325.775211][ T5900] tipc: Node number set to 981253952
[  325.834273][ T5837] Bluetooth: hci1: command tx timeout
[  326.041620][T16565] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  326.375036][T16581] netlink: 'syz.5.2887': attribute type 10 has an invalid length.
[  326.649381][T16524] lo speed is unknown, defaulting to 1000
[  326.653506][   T12] bridge_slave_1: left allmulticast mode
[  326.684179][   T12] bridge_slave_1: left promiscuous mode
[  326.706565][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.435694][   T12] bond8 (unregistering): (slave bridge2): Releasing backup interface
[  327.452822][   T12] bridge2 (unregistering): left promiscuous mode
[  327.516265][T16648] openvswitch: netlink: Unknown key attributes 2
[  327.625385][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  327.634640][   T12] bond_slave_0: left allmulticast mode
[  327.645982][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  327.655593][   T12] bond_slave_1: left allmulticast mode
[  327.661495][   T12] bond0 (unregistering): Released all slaves
[  327.674770][   T12] bond1 (unregistering): Released all slaves
[  327.694293][   T12] bond2 (unregistering): Released all slaves
[  327.709969][   T12] bond3 (unregistering): Released all slaves
[  327.725309][   T12] bond4 (unregistering): Released all slaves
[  327.737597][   T12] bond5 (unregistering): Released all slaves
[  327.749802][   T12] bond6 (unregistering): Released all slaves
[  327.765637][   T12] bond7 (unregistering): Released all slaves
[  327.784572][   T12] bond8 (unregistering): Released all slaves
[  327.800054][   T12] bond9 (unregistering): Released all slaves
[  327.917114][ T5837] Bluetooth: hci1: command tx timeout
[  327.992755][   T12] tipc: Left network mode
[  328.318413][T16672] netlink: 'syz.0.2907': attribute type 1 has an invalid length.
[  328.372622][T16524] chnl_net:caif_netlink_parms(): no params data found
[  328.477124][T16672] bond1: entered promiscuous mode
[  328.482854][T16672] 8021q: adding VLAN 0 to HW filter on device bond1
[  328.705030][T16702] __nla_validate_parse: 5 callbacks suppressed
[  328.705050][T16702] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2913'.
[  328.743139][T16702] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2913'.
[  328.757077][T16699] x_tables: unsorted underflow at hook 1
[  328.994075][T16524] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.001169][T16524] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.035996][T16723] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  329.051843][T16524] bridge_slave_0: entered allmulticast mode
[  329.069986][T16524] bridge_slave_0: entered promiscuous mode
[  329.121774][T16524] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.139805][T16524] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.149123][T16524] bridge_slave_1: entered allmulticast mode
[  329.161569][T16524] bridge_slave_1: entered promiscuous mode
[  329.240389][T16746] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2921'.
[  329.270699][T16747] xt_nfacct: accounting object `syz1' does not exist
[  329.436180][T16524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  329.472892][T16746] vlan2: entered allmulticast mode
[  329.479342][T16746] gretap0: entered allmulticast mode
[  329.546805][T16524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  329.567512][T16755] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  329.668023][T16768] netlink: 'syz.2.2924': attribute type 10 has an invalid length.
[  329.854144][T16777] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2928'.
[  329.873719][T16777] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2928'.
[  329.913009][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms
[  329.921091][    C1] lec:lec_tx_timeout: lec0
[  329.926286][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  329.941047][T16786] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2931'.
[  329.965896][T16787] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2928'.
[  329.993803][ T5837] Bluetooth: hci1: command tx timeout
[  330.000964][T16787] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20003
[  330.071446][T16790] netlink: 'syz.0.2932': attribute type 10 has an invalid length.
[  330.093563][T16755] 
: (slave bridge0): Releasing backup interface
[  330.124422][T16755] bridge_slave_1: left allmulticast mode
[  330.130114][T16755] bridge_slave_1: left promiscuous mode
[  330.146163][T16755] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.183590][T16755] 
: (slave bond_slave_0): Releasing backup interface
[  330.216447][T16755] 
: (slave bond_slave_1): Releasing backup interface
[  330.261825][T16755] team0: Port device team_slave_0 removed
[  330.287102][T16755] team0: Port device team_slave_1 removed
[  330.302760][T16755] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  330.323342][T16755] batman_adv: batadv0: Removing interface: batadv_slave_0
[  330.344832][T16755] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  330.374944][T16768] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  330.390400][T16768] 8021q: adding VLAN 0 to HW filter on device 

[  330.402458][T16768] 
: (slave wlan1): Enslaving as an active interface with an up link
[  330.440550][T16790] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.465504][T16790] bridge_slave_1: left allmulticast mode
[  330.482128][T16790] bridge_slave_1: left promiscuous mode
[  330.492485][T16790] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.514160][T16790] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  330.587131][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  330.605604][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  330.966081][   T12] team0 (unregistering): Port device team_slave_1 removed
[  331.002712][T12567] smc: removing ib device syz1
[  331.172109][T16524] team0: Port device team_slave_0 added
[  331.209632][T16524] team0: Port device team_slave_1 added
[  331.376785][T16524] batman_adv: batadv0: Adding interface: batadv_slave_0
[  331.398452][T16524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  331.473158][T16524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  331.511471][T16524] batman_adv: batadv0: Adding interface: batadv_slave_1
[  331.528432][T16524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  331.600510][T16524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  331.884956][T16524] hsr_slave_0: entered promiscuous mode
[  331.919431][T16524] hsr_slave_1: entered promiscuous mode
[  332.073615][ T5837] Bluetooth: hci1: command tx timeout
[  332.829116][   T12] IPVS: stop unused estimator thread 0...
[  333.584063][T16800] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  333.634093][T16524] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  333.678853][T16524] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  333.750159][T16828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2940'.
[  333.762347][T16524] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  333.790789][T16524] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  333.818211][T16828] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  333.868900][T16828] batman_adv: batadv0: Removing interface: batadv_slave_1
[  333.950230][T16835] veth5: entered promiscuous mode
[  333.955851][T16835] veth5: entered allmulticast mode
[  334.017352][T16842] bond5: option min_links: invalid value (18446744073709551614)
[  334.029552][T16842] bond5: option min_links: allowed values 0 - 2147483647
[  334.044222][T16842] bond5 (unregistering): Released all slaves
[  334.092067][T16859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2945'.
[  334.261261][T16524] 8021q: adding VLAN 0 to HW filter on device bond0
[  334.302068][T16524] 8021q: adding VLAN 0 to HW filter on device team0
[  334.328831][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.336007][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state
[  334.369967][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.377172][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  334.390268][T16874] nbd: socks must be embedded in a SOCK_ITEM attr
[  334.603846][T16879] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2950'.
[  334.636293][T16879] ip6gre1: entered allmulticast mode
[  334.809748][T16887] xt_limit: Overflow, try lower: 271964/0
[  334.896262][T16890] bond10: Unable to set peer notification delay as MII monitoring is disabled
[  334.919219][T16890] bond10 (unregistering): Released all slaves
[  334.933356][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  334.941380][    C1] lec:lec_tx_timeout: lec0
[  334.946036][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  335.013295][T16524] 8021q: adding VLAN 0 to HW filter on device batadv0
[  335.075281][T16898] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  335.093469][T16898] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  335.163729][T16892] macvlan0: entered promiscuous mode
[  335.173904][T16904] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2953'.
[  335.201210][T16914] netlink: 'syz.6.2954': attribute type 4 has an invalid length.
[  335.427775][T16923] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2958'.
[  335.442053][T16926] syzkaller1: entered promiscuous mode
[  335.456028][T16927] netlink: 'syz.2.2956': attribute type 1 has an invalid length.
[  335.462834][T16923] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2958'.
[  335.472917][T16926] syzkaller1: entered allmulticast mode
[  335.489569][T16927] netlink: 'syz.2.2956': attribute type 2 has an invalid length.
[  335.710083][T16524] veth0_vlan: entered promiscuous mode
[  335.726054][T16524] veth1_vlan: entered promiscuous mode
[  335.831490][T16524] veth0_macvtap: entered promiscuous mode
[  335.866394][T16524] veth1_macvtap: entered promiscuous mode
[  335.917629][T16524] batman_adv: batadv0: Interface activated: batadv_slave_0
[  335.974162][T16951] netlink: 'syz.5.2963': attribute type 1 has an invalid length.
[  336.010427][T16949] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.137169][T16951] 8021q: adding VLAN 0 to HW filter on device bond5
[  336.194998][T16951] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2963'.
[  336.228636][T16968] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma?
[  336.248546][T16957] bond5: (slave veth3): Enslaving as an active interface with a down link
[  336.261875][T16524] batman_adv: batadv0: Interface activated: batadv_slave_1
[  336.327238][T16962] bond5: (slave gretap1): making interface the new active one
[  336.354592][T16962] gretap1: entered promiscuous mode
[  336.363526][T16962] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  336.403919][T16949] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.423983][T16978] netlink: 'syz.2.2968': attribute type 21 has an invalid length.
[  336.484097][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  336.502669][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  336.598931][T16949] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.663867][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  336.676634][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  336.781544][T16949] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.872763][T16988] smc: removing net device team0 with user defined pnetid SYZ2
[  336.892728][T16988] team0 (unregistering): Port device team_slave_0 removed
[  336.908708][T16988] team0 (unregistering): Port device team_slave_1 removed
[  337.121965][T12567] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  337.141592][T12567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.170580][T12567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.242424][ T3485] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  337.300213][ T7169] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  337.342780][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  337.356318][ T7169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.375745][ T7169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.559711][T17031] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2979'.
[  337.619096][T17036] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2872'.
[  337.784115][T17050] xt_l2tp: v2 sid > 0xffff: 1114112
[  337.856914][T17056] netlink: 'syz.6.2985': attribute type 2 has an invalid length.
[  337.929173][T17057] netlink: 'syz.5.2984': attribute type 22 has an invalid length.
[  337.961427][T17057] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2984'.
[  337.978697][T10283] IPVS: starting estimator thread 0...
[  338.027690][ T7169] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  338.027877][T17057] netlink: 'syz.5.2984': attribute type 22 has an invalid length.
[  338.048428][ T7169] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  338.070798][ T7169] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  338.093883][T17065] IPVS: using max 30 ests per chain, 72000 per kthread
[  338.133074][ T7169] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  338.179877][T17079] syzkaller0: entered promiscuous mode
[  338.213530][T17079] syzkaller0: entered allmulticast mode
[  338.249055][T17081] netlink: 'syz.6.2990': attribute type 4 has an invalid length.
[  338.325160][T17077] netlink: 'syz.2.2991': attribute type 21 has an invalid length.
[  338.710168][T17121] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  338.711202][T17109] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  339.177881][T17149] __nla_validate_parse: 4 callbacks suppressed
[  339.177899][T17149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3005'.
[  339.194274][T17149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3005'.
[  339.461370][T17161] can: request_module (can-proto-5) failed.
[  339.462711][T17162] netem: change failed
[  339.882589][T17189] syzkaller0: entered promiscuous mode
[  339.899056][T17189] syzkaller0: entered allmulticast mode
[  339.953338][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  339.961385][    C1] lec:lec_tx_timeout: lec0
[  339.967083][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  339.983657][T10284] IPVS: starting estimator thread 0...
[  340.036091][T17201] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3017'.
[  340.083581][T17199] IPVS: using max 41 ests per chain, 98400 per kthread
[  340.161769][T17201] veth5: entered allmulticast mode
[  340.444223][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  340.455118][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  340.464427][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  340.487032][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  340.494741][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  340.589982][T17214] lo speed is unknown, defaulting to 1000
[  340.870428][T12567] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.898708][T12567] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  340.969598][T12567] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.980351][T12567] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  340.996708][T17214] chnl_net:caif_netlink_parms(): no params data found
[  341.114811][T12567] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.143094][T12567] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  341.200268][T17255] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  341.216558][T17253] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3030'.
[  341.397532][T17273] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  341.404830][T17273] IPv6: NLM_F_CREATE should be set when creating new route
[  341.412048][T17273] IPv6: NLM_F_CREATE should be set when creating new route
[  341.442720][T12567] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.453521][T12567] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  341.638047][T17214] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.645363][T17214] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.652599][T17214] bridge_slave_0: entered allmulticast mode
[  341.664104][T17214] bridge_slave_0: entered promiscuous mode
[  341.671812][T17283] syzkaller1: entered promiscuous mode
[  341.681812][T17283] syzkaller1: entered allmulticast mode
[  341.692904][T17214] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.700994][T17214] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.710538][T17214] bridge_slave_1: entered allmulticast mode
[  341.719961][T17214] bridge_slave_1: entered promiscuous mode
[  341.756333][T17283] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3036'.
[  341.836839][T17214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  341.851157][T17214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  341.984997][T17214] team0: Port device team_slave_0 added
[  342.050229][T17214] team0: Port device team_slave_1 added
[  342.130473][T17311] validate_nla: 2 callbacks suppressed
[  342.130489][T17311] netlink: 'syz.4.3044': attribute type 1 has an invalid length.
[  342.554683][ T5840] Bluetooth: hci3: command tx timeout
[  342.767885][T12567] 
 (unregistering): (slave wlan1): Releasing backup interface
[  342.779739][T12567] 
 (unregistering): Released all slaves
[  342.789829][T12567] bond1 (unregistering): Released all slaves
[  342.802761][T12567] bond2 (unregistering): Released all slaves
[  342.821454][T12567] bond3 (unregistering): Released all slaves
[  342.835256][T12567] bond4 (unregistering): Released all slaves
[  342.848637][T12567] bond5 (unregistering): (slave vlan0): Releasing backup interface
[  342.858910][T12567] bond5 (unregistering): Released all slaves
[  342.879718][T12567] bond0 (unregistering): Released all slaves
[  342.892411][T12567] bond6 (unregistering): Released all slaves
[  342.906151][T12567] bond7 (unregistering): Released all slaves
[  342.918840][T12567] bond8 (unregistering): Released all slaves
[  342.945730][T12567] bond9 (unregistering): Released all slaves
[  342.958521][T17214] batman_adv: batadv0: Adding interface: batadv_slave_0
[  342.967020][T17214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  342.993852][T17214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  343.021758][T17214] batman_adv: batadv0: Adding interface: batadv_slave_1
[  343.041395][T17214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  343.107138][T17214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  343.158973][T17345] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3051'.
[  343.170327][T17344] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3051'.
[  343.235498][T17345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3051'.
[  343.263452][T17346] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3051'.
[  343.342467][T17355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3053'.
[  343.406303][T17214] hsr_slave_0: entered promiscuous mode
[  343.421311][T17214] hsr_slave_1: entered promiscuous mode
[  343.442293][T17214] debugfs: 'hsr0' already exists in 'hsr'
[  343.457456][T17214] Cannot create hsr debugfs directory
[  344.066528][T12567] hsr_slave_0: left promiscuous mode
[  344.107243][T12567] hsr_slave_1: left promiscuous mode
[  344.134952][T12567] veth1_macvtap: left promiscuous mode
[  344.141023][T12567] veth1_vlan: left promiscuous mode
[  344.148291][T12567] veth0_vlan: left promiscuous mode
[  344.283686][T12567] pimreg3 (unregistering): left allmulticast mode
[  344.612059][T17407] __nla_validate_parse: 1 callbacks suppressed
[  344.612077][T17407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3063'.
[  344.645507][T17410] syzkaller0: entered promiscuous mode
[  344.647157][ T5840] Bluetooth: hci3: command tx timeout
[  344.655312][T17420] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3065'.
[  344.666956][T17410] syzkaller0: entered allmulticast mode
[  344.697884][T17413] : entered promiscuous mode
[  344.732002][T17420] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3065'.
[  344.812496][T17420] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3065'.
[  344.887504][T17420] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3065'.
[  344.933217][T17420] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3065'.
[  344.942771][T17420] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3065'.
[  344.983049][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  344.991082][    C1] lec:lec_tx_timeout: lec0
[  344.996880][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  345.036512][T17420] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3065'.
[  345.047415][T17420] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3065'.
[  345.141778][T17420] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3065'.
[  345.414843][T12567] IPVS: stop unused estimator thread 0...
[  345.798924][T17470] 8021q: adding VLAN 0 to HW filter on device batadv1
[  345.824344][T17470] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  345.872340][T17470] team0: Failed to send options change via netlink (err -105)
[  345.909401][T17470] team0: Port device batadv1 added
[  345.975576][T17214] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  346.044719][T17214] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  346.152676][T17214] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  346.223708][T17214] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  346.713328][ T5840] Bluetooth: hci3: command tx timeout
[  346.720307][T17522] netlink: 'syz.5.3091': attribute type 2 has an invalid length.
[  346.837417][T17214] 8021q: adding VLAN 0 to HW filter on device bond0
[  346.897056][T17214] 8021q: adding VLAN 0 to HW filter on device team0
[  346.927498][T12567] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.934686][T12567] bridge0: port 1(bridge_slave_0) entered forwarding state
[  347.057292][T17551] siw: device registration error -23
[  347.081525][T17551] veth1_to_batadv: entered allmulticast mode
[  347.091186][T17545] veth1_to_batadv: left allmulticast mode
[  347.107138][T10951] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.114313][T10951] bridge0: port 2(bridge_slave_1) entered forwarding state
[  347.463487][   T12] gretap1: left promiscuous mode
[  347.657515][T17583] netlink: 'syz.0.3102': attribute type 29 has an invalid length.
[  347.817920][T17214] 8021q: adding VLAN 0 to HW filter on device batadv0
[  347.988139][T17598] netlink: 'syz.5.3110': attribute type 1 has an invalid length.
[  347.995933][T17214] veth0_vlan: entered promiscuous mode
[  348.001874][T17214] veth1_vlan: entered promiscuous mode
[  348.119408][T17214] veth0_macvtap: entered promiscuous mode
[  348.158619][T17214] veth1_macvtap: entered promiscuous mode
[  348.253990][T17214] batman_adv: batadv0: Interface activated: batadv_slave_0
[  348.296000][T17214] batman_adv: batadv0: Interface activated: batadv_slave_1
[  348.371679][T10951] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.403624][T10951] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.441234][T10951] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.482345][T10951] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.558756][T17627] xt_TCPMSS: Only works on TCP SYN packets
[  348.572139][T17627] netlink: 'syz.4.3118': attribute type 1 has an invalid length.
[  348.732100][T12567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.782649][T12567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  348.805421][ T5840] Bluetooth: hci3: command tx timeout
[  348.910023][T10951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.939759][T10951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.557532][T17678] xt_l2tp: unknown flags: 10
[  349.722900][T17687] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  349.857993][T17689] macvlan0: left promiscuous mode
[  349.947178][T17689] veth5: left promiscuous mode
[  349.952168][T17689] veth5: left allmulticast mode
[  349.962549][T17698] syzkaller0: entered promiscuous mode
[  349.968122][T17698] syzkaller0: entered allmulticast mode
[  350.003007][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  350.011064][    C1] lec:lec_tx_timeout: lec0
[  350.017545][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  350.024440][T12566] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.044216][T12566] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.052600][T12566] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.082854][T12566] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  350.098568][T17705] netlink: zone id is out of range
[  350.113877][T17705] netlink: zone id is out of range
[  350.119017][T17705] netlink: zone id is out of range
[  350.143070][T17705] netlink: zone id is out of range
[  350.148775][T17705] netlink: zone id is out of range
[  350.163088][T17705] netlink: zone id is out of range
[  350.188839][T17705] netlink: zone id is out of range
[  350.203775][T17705] netlink: zone id is out of range
[  350.216064][T17719] openvswitch: netlink: Flow key attr not present in new flow.
[  350.227807][T17721] syzkaller0: entered promiscuous mode
[  350.236191][T17721] syzkaller0: entered allmulticast mode
[  350.243757][T17705] netlink: get zone limit has 8 unknown bytes
[  350.303993][T17723] xt_l2tp: v2 doesn't support IP mode
[  350.478280][T17737] Unsupported ieee802154 address type: 0
[  350.488523][T17724] __nla_validate_parse: 34 callbacks suppressed
[  350.488538][T17724] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3140'.
[  350.506242][T17724] tipc: Invalid UDP bearer configuration
[  350.506291][T17724] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  350.701507][T17746] netlink: 'syz.0.3145': attribute type 15 has an invalid length.
[  350.720409][T17746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3145'.
[  350.724997][T17747] Cannot find del_set index 4 as target
[  350.765353][T17750] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3146'.
[  350.801222][T17746] netlink: 'syz.0.3145': attribute type 15 has an invalid length.
[  350.843589][T17746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3145'.
[  350.858191][T17748] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3146'.
[  350.877110][T17758] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3149'.
[  350.918270][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 2816 - 0
[  350.930008][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 2816 - 0
[  350.950724][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 2816 - 0
[  350.977435][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 2816 - 0
[  351.070867][T17762] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3152'.
[  351.186771][T17768] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3154'.
[  351.347371][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3154'.
[  351.660851][T17791] syzkaller1: entered promiscuous mode
[  351.672147][T17791] syzkaller1: entered allmulticast mode
[  351.682907][T17805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3162'.
[  352.248288][T17842] netlink: 'syz.0.3171': attribute type 1 has an invalid length.
[  352.292880][T17846] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  352.956664][T17889] netdevsim netdevsim2: Direct firmware load for . failed with error -2
[  352.977240][T17889] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  353.156105][T17906] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  353.263845][T17914] netlink: 'syz.5.3191': attribute type 1 has an invalid length.
[  353.356636][T17918] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  353.845970][T17951] netlink: 'syz.4.3201': attribute type 11 has an invalid length.
[  354.030229][T17959] netlink: 'syz.0.3204': attribute type 1 has an invalid length.
[  354.086808][T17963] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  354.197124][T17959] 8021q: adding VLAN 0 to HW filter on device bond3
[  354.278791][T17974] netlink: 'syz.4.3208': attribute type 3 has an invalid length.
[  354.307618][T17972] syzkaller0: entered promiscuous mode
[  354.315567][T17972] syzkaller0: entered allmulticast mode
[  354.361370][T17972] tc action pedit offset must be on 32 bit boundaries
[  354.484958][T17976] syzkaller0: entered promiscuous mode
[  354.502113][T17976] syzkaller0: entered allmulticast mode
[  354.908598][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  354.933119][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  354.944927][ T7169] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  354.979139][ T7169] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  355.142224][T18027] bond3: (slave bond_slave_1): Device is not bonding slave
[  355.196582][T18027] bond3: option active_slave: invalid value (bond_slave_1)
[  355.199451][T18039] netlink: 'syz.0.3224': attribute type 1 has an invalid length.
[  355.211836][T18039] netlink: 'syz.0.3224': attribute type 2 has an invalid length.
[  355.251031][T18027] bond3 (unregistering): Released all slaves
[  355.423389][T18039] syzkaller1: entered promiscuous mode
[  355.428900][T18039] syzkaller1: entered allmulticast mode
[  355.800143][T18076] 8021q: VLANs not supported on vxcan1
[  355.826607][T18085] netlink: 'syz.2.3233': attribute type 4 has an invalid length.
[  355.834549][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms
[  355.834576][    C1] lec:lec_tx_timeout: lec0
[  355.847131][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  355.868576][T18076] __nla_validate_parse: 10 callbacks suppressed
[  355.868594][T18076] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3231'.
[  355.889537][T18087] netlink: 'syz.2.3233': attribute type 4 has an invalid length.
[  356.625895][T18132] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3246'.
[  356.636697][T18132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3246'.
[  356.654417][T18132] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3246'.
[  356.721854][T18125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3245'.
[  356.867015][T18146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3251'.
[  356.915840][T18144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  356.919249][T18146] bond4: option xmit_hash_policy: invalid value (64)
[  356.937381][T18146] bond4 (unregistering): Released all slaves
[  357.163305][T18165] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3253'.
[  357.175838][T18165] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3253'.
[  357.209848][T18172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3254'.
[  357.257623][T18172] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3254'.
[  357.271855][T18167] bridge3: entered promiscuous mode
[  357.278194][T18167] bridge3: entered allmulticast mode
[  357.490066][T18190] netlink: 'syz.0.3261': attribute type 1 has an invalid length.
[  357.959587][T18217] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  358.247402][T18232] xt_limit: Overflow, try lower: 604147548/4200216962
[  358.448870][T18243] netlink: 'syz.5.3279': attribute type 1 has an invalid length.
[  358.680224][T18261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  358.722378][T18264] netlink: 'syz.4.3283': attribute type 1 has an invalid length.
[  359.512176][T18266] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  359.801580][T18325] lo speed is unknown, defaulting to 1000
[  360.011864][T18338] ip6gretap0: entered allmulticast mode
[  360.033109][T18340] ipt_REJECT: TCP_RESET invalid for non-tcp
[  360.042074][T18342] netlink: 'syz.0.3302': attribute type 1 has an invalid length.
[  360.271876][T18353] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  360.745699][T18384] syzkaller0: entered promiscuous mode
[  360.751206][T18384] syzkaller0: entered allmulticast mode
[  360.803767][T18389] netlink: 'syz.0.3314': attribute type 3 has an invalid length.
[  360.841360][T18394] x_tables: unsorted underflow at hook 3
[  360.853001][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  360.861019][    C1] lec:lec_tx_timeout: lec0
[  360.865609][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  361.038622][T18406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  361.085890][T18411] __nla_validate_parse: 11 callbacks suppressed
[  361.085909][T18411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3320'.
[  361.625383][T18433] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  361.811119][T18458] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3327'.
[  362.063667][T18470] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3331'.
[  362.117578][T18477] xt_hashlimit: size too large, truncated to 1048576
[  362.358926][T18493] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3336'.
[  362.519461][T18501] netlink: 'syz.5.3340': attribute type 11 has an invalid length.
[  362.532841][T18501] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.3340'.
[  362.575378][T18504] netlink: 'syz.6.3339': attribute type 10 has an invalid length.
[  362.590836][T18506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3341'.
[  362.869434][T18535] openvswitch: netlink: IP tunnel dst address not specified
[  363.329235][T18563] netlink: 'syz.0.3356': attribute type 4 has an invalid length.
[  363.408086][T18563] tap0: tun_chr_ioctl cmd 1074025678
[  363.421385][T18563] tap0: group set to 0
[  363.449068][T18562] tap0: tun_chr_ioctl cmd 37729
[  363.466814][T18577] sctp: [Deprecated]: syz.4.3360 (pid 18577) Use of int in maxseg socket option.
[  363.466814][T18577] Use struct sctp_assoc_value instead
[  363.482171][T18570] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3359'.
[  363.543965][T18562] tap0: tun_chr_ioctl cmd 0
[  363.603943][T18563] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  363.776308][T18592] netlink: 1280 bytes leftover after parsing attributes in process `syz.6.3365'.
[  363.837238][T18594] bond1: (slave bond_slave_1): Device is not our slave
[  363.857386][T18594] bond1: option active_slave: invalid value (bond_slave_1)
[  363.900027][T18594] bond1 (unregistering): Released all slaves
[  364.103796][T18609] netlink: 'syz.6.3371': attribute type 1 has an invalid length.
[  364.188384][T18609] 8021q: adding VLAN 0 to HW filter on device bond3
[  364.238965][T18626] netlink: 'syz.5.3374': attribute type 1 has an invalid length.
[  364.291692][T18617] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  364.375922][T18626] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  364.614371][T18637] netlink: 'syz.2.3376': attribute type 1 has an invalid length.
[  364.787361][T18659] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20002
[  365.163209][T18674] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3387'.
[  365.233421][T18680] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  365.321015][T18683] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3388'.
[  365.393445][T18688] netlink: 'syz.0.3390': attribute type 39 has an invalid length.
[  365.462352][T18692] netlink: 'syz.5.3391': attribute type 12 has an invalid length.
[  365.827119][T18702] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  365.856766][T18701] vlan1: entered promiscuous mode
[  365.873028][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  365.881104][    C1] lec:lec_tx_timeout: lec0
[  365.885827][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  365.901554][T18705] syzkaller0: entered promiscuous mode
[  365.921707][T18705] syzkaller0: entered allmulticast mode
[  365.961739][T18705] tipc: Started in network mode
[  365.988538][T18705] tipc: Node identity 9e2c0656298d, cluster identity 4711
[  366.012205][T18705] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  366.095982][T18700] tipc: Resetting bearer <eth:syzkaller0>
[  366.169023][T18719] __nla_validate_parse: 2 callbacks suppressed
[  366.169041][T18719] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3398'.
[  366.204164][T18700] tipc: Disabling bearer <eth:syzkaller0>
[  366.209453][T18721] netlink: 'syz.4.3399': attribute type 1 has an invalid length.
[  366.224725][T18719] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3398'.
[  366.253054][T18719] netlink: 'syz.6.3398': attribute type 12 has an invalid length.
[  366.273116][T18719] netlink: 'syz.6.3398': attribute type 11 has an invalid length.
[  366.315270][T18724] bond0: Error: Cannot enslave bond to itself.
[  366.370000][T18726] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3401'.
[  366.407148][T18726] netlink: 'syz.4.3401': attribute type 1 has an invalid length.
[  366.436821][T18726] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3401'.
[  366.677853][T18737] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3405'.
[  366.716071][T18740] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  366.923934][T18744] bond1: option packets_per_slave: invalid value (18446744073709551615)
[  367.002922][T18744] bond1: option packets_per_slave: allowed values 0 - 65535
[  367.051952][T18744] bond1 (unregistering): Released all slaves
[  367.501837][T18763] netlink: 'syz.2.3414': attribute type 2 has an invalid length.
[  368.046291][T18796] syzkaller0: entered promiscuous mode
[  368.066319][T18796] syzkaller0: entered allmulticast mode
[  368.094817][T18796] xt_hashlimit: size too large, truncated to 1048576
[  368.101832][T18796] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3423'.
[  368.112290][T18796] netem: invalid attributes len -6
[  368.123275][T18796] netem: change failed
[  368.153310][ T5840] Bluetooth: hci3: command tx timeout
[  368.461825][T18825] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3431'.
[  368.483969][T18825] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3431'.
[  368.497406][T18825] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3431'.
[  369.064197][T18864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3444'.
[  369.082616][T18864] openvswitch: netlink: Flow key attr not present in new flow.
[  369.329320][T18879] xt_hashlimit: size too large, truncated to 1048576
[  369.814628][T18902] validate_nla: 2 callbacks suppressed
[  369.814647][T18902] netlink: 'syz.0.3456': attribute type 1 has an invalid length.
[  369.935463][T18902] bond4: (slave bridge2): making interface the new active one
[  369.949726][T18902] bond4: (slave bridge2): Enslaving as an active interface with an up link
[  370.139767][T18919] x_tables: duplicate underflow at hook 1
[  370.290773][T18931] netlink: 'syz.4.3464': attribute type 1 has an invalid length.
[  370.353882][T18931] bond1: entered promiscuous mode
[  370.372580][T18931] 8021q: adding VLAN 0 to HW filter on device bond1
[  370.487623][T18952] ip6t_rpfilter: unknown options
[  370.696823][T18963] openvswitch: netlink: Actions may not be safe on all matching packets
[  370.891298][T18979] netdevsim netdevsim5: Direct firmware load for .. @ failed with error -2
[  370.900124][T18974] netlink: 'syz.2.3475': attribute type 3 has an invalid length.
[  370.908077][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  370.908105][    C1] lec:lec_tx_timeout: lec0
[  370.911933][T18979] netdevsim netdevsim5: Falling back to sysfs fallback for: .. @
[  370.916914][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  370.940653][T18978] "syz.4.3477" (18978) uses obsolete ecb(arc4) skcipher
[  370.955830][T18967] lo speed is unknown, defaulting to 1000
[  371.048340][T18987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  371.204779][T18996] __nla_validate_parse: 9 callbacks suppressed
[  371.204797][T18996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3483'.
[  371.226640][T18998] veth0: entered promiscuous mode
[  371.245788][T18995] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3482'.
[  371.290498][T18995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3482'.
[  371.516122][T19008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3486'.
[  371.763524][T18997] veth0: left promiscuous mode
[  371.818813][T19027] syzkaller0: entered promiscuous mode
[  371.824515][T19027] syzkaller0: entered allmulticast mode
[  371.910357][T19036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3494'.
[  371.998899][T19043] netlink: 'syz.5.3496': attribute type 33 has an invalid length.
[  371.999618][T19036] 8021q: adding VLAN 0 to HW filter on device bond5
[  372.007617][T19043] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3496'.
[  372.051671][T19049] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3496'.
[  372.111156][T19049] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3496'.
[  372.194079][T19052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3498'.
[  372.213207][T19052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3498'.
[  372.317632][T19059] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  372.472523][T19067] syzkaller0: entered promiscuous mode
[  372.508724][T19067] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  372.696784][T19077] bridge1: port 1(erspan0) entered blocking state
[  372.719169][T19077] bridge1: port 1(erspan0) entered disabled state
[  372.734883][T19077] erspan0: entered allmulticast mode
[  372.743602][T19077] erspan0: entered promiscuous mode
[  372.753603][T19077] bridge1: port 1(erspan0) entered blocking state
[  372.760162][T19077] bridge1: port 1(erspan0) entered forwarding state
[  372.786356][T19088] netlink: 'syz.0.3512': attribute type 1 has an invalid length.
[  372.922139][T19093] tipc: New replicast peer: 255.255.255.255
[  372.937744][T19093] tipc: Enabled bearer <udp:syz2>, priority 10
[  373.195796][T19104] bridge_slave_1: left allmulticast mode
[  373.212020][T19104] bridge_slave_1: left promiscuous mode
[  373.228933][T19104] bridge0: port 2(bridge_slave_1) entered disabled state
[  373.264580][T19104] bridge_slave_0: left allmulticast mode
[  373.284189][T19104] bridge_slave_0: left promiscuous mode
[  373.289975][T19104] bridge0: port 1(bridge_slave_0) entered disabled state
[  373.519763][T19122] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  373.578776][T19122] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  373.670098][T19122] batman_adv: batadv0: Removing interface: batadv_slave_0
[  373.757922][T19123] sit0: entered promiscuous mode
[  374.036436][T19145] veth0_virt_wifi: entered promiscuous mode
[  374.064824][  T981] tipc: Node number set to 3080783446
[  374.130246][T19150] bond1: option fail_over_mac: invalid value (129)
[  374.206318][T19150] bond1 (unregistering): Released all slaves
[  374.258957][T19160] Bluetooth: MGMT ver 1.23
[  374.870340][T19203] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  375.122194][T19216] netlink: 'syz.6.3545': attribute type 4 has an invalid length.
[  375.414789][T19243] netlink: 'syz.4.3551': attribute type 83 has an invalid length.
[  375.607003][T19257] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0
[  375.679686][T19264] syzkaller0: entered promiscuous mode
[  375.723032][T19264] syzkaller0: entered allmulticast mode
[  375.738966][T19264] netlink: 'syz.6.3557': attribute type 1 has an invalid length.
[  375.742484][T19271] netlink: 'syz.0.3559': attribute type 11 has an invalid length.
[  375.764231][T19268] netlink: 'syz.2.3558': attribute type 9 has an invalid length.
[  375.777414][T19268] netlink: 'syz.2.3558': attribute type 6 has an invalid length.
[  375.872016][T19274] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  375.881143][T19271] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  375.923056][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  375.931114][    C1] lec:lec_tx_timeout: lec0
[  375.936913][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  376.038819][T19293] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  376.293817][T19306] veth0: entered promiscuous mode
[  376.300443][T19306] __nla_validate_parse: 17 callbacks suppressed
[  376.300459][T19306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3566'.
[  376.402412][T19311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3569'.
[  376.449431][T19309] IPv6: NLM_F_CREATE should be specified when creating new route
[  376.597527][T19324] netlink: 'syz.2.3573': attribute type 2 has an invalid length.
[  376.607917][T19328] openvswitch: netlink: Message has -2 unknown bytes.
[  376.610927][T19329] siw: device registration error -23
[  376.643552][T19322] syzkaller1: entered promiscuous mode
[  376.649058][T19322] syzkaller1: entered allmulticast mode
[  376.679668][T19329] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  376.688645][T19329] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  376.704193][T19331] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3576'.
[  376.721550][T19322] netlink: 'syz.4.3571': attribute type 2 has an invalid length.
[  376.832161][T19337] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3578'.
[  376.936483][T19344] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3578'.
[  377.002704][T19346] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3581'.
[  377.086954][T19353] netlink: 'syz.6.3583': attribute type 10 has an invalid length.
[  377.102839][T19351] netlink: 'syz.6.3583': attribute type 10 has an invalid length.
[  377.116625][T19351] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  377.130906][T19353] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  377.251557][T19367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  377.515868][T19386] syzkaller0: entered promiscuous mode
[  377.731018][T19393] syzkaller0: entered promiscuous mode
[  377.750326][T19393] syzkaller0: entered allmulticast mode
[  377.785644][T19402] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3599'.
[  377.899423][T19411] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.3601'.
[  378.055822][T19421] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3603'.
[  378.161846][T19429] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3604'.
[  378.278088][T19438] netlink: 'syz.2.3607': attribute type 11 has an invalid length.
[  378.549479][T19459] x_tables: duplicate underflow at hook 1
[  378.568664][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  378.853738][T19469] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  379.365794][T19507] wireguard0: entered promiscuous mode
[  379.374656][T19507] wireguard0: entered allmulticast mode
[  379.416874][T19507] team0: Port device wireguard0 added
[  379.462765][T19510] team0: Device vxcan1 is of different type
[  379.796654][T19537] openvswitch: netlink: Multiple metadata blocks provided
[  380.042701][T19544] syzkaller0: entered promiscuous mode
[  380.050987][T19544] syzkaller0: entered allmulticast mode
[  380.635350][ T5840] Bluetooth: hci5: command 0x0405 tx timeout
[  380.953269][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  380.961373][    C1] lec:lec_tx_timeout: lec0
[  380.966703][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  381.531909][T19562] syzkaller1: entered promiscuous mode
[  381.537513][T19562] syzkaller1: entered allmulticast mode
[  381.691731][T19595] __nla_validate_parse: 11 callbacks suppressed
[  381.691750][T19595] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3652'.
[  381.705032][T19600] syzkaller0: entered promiscuous mode
[  381.714488][T19600] syzkaller0: entered allmulticast mode
[  381.875840][T19611] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3655'.
[  381.877691][T19610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3654'.
[  381.898071][T19610] openvswitch: netlink: Missing key (keys=40, expected=80)
[  381.905283][T19611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3655'.
[  382.111310][T19619] syzkaller1: entered promiscuous mode
[  382.124224][T19619] syzkaller1: entered allmulticast mode
[  382.130569][T19627] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3661'.
[  382.146020][T19627] validate_nla: 2 callbacks suppressed
[  382.146036][T19627] netlink: 'syz.6.3661': attribute type 1 has an invalid length.
[  382.173722][T19624] openvswitch: netlink: EtherType 50a is less than min 600
[  382.243249][T19631] bond5: (slave bridge4): making interface the new active one
[  382.259841][T19631] bond5: (slave bridge4): Enslaving as an active interface with an up link
[  382.306771][T19639] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3664'.
[  382.480022][T19648] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3666'.
[  382.496612][T19650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3668'.
[  382.509209][T19648] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3666'.
[  382.536231][T19650] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input14
[  382.555638][T19650] netlink: 'syz.2.3668': attribute type 8 has an invalid length.
[  382.580682][T19650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3668'.
[  382.630504][T19650] bond0: entered promiscuous mode
[  382.647532][T19650] bond_slave_0: entered promiscuous mode
[  382.653643][T19650] bond_slave_1: entered promiscuous mode
[  382.661950][T19650] gretap0: entered promiscuous mode
[  382.671310][T19650] hsr1: entered promiscuous mode
[  382.955686][T19675] netlink: 'syz.5.3676': attribute type 2 has an invalid length.
[  382.975213][T19677] netlink: 'syz.0.3678': attribute type 2 has an invalid length.
[  382.984920][T19675] macvlan0: left promiscuous mode
[  383.015933][T19680] netlink: 'syz.5.3676': attribute type 2 has an invalid length.
[  383.032677][T19682] xt_CT: You must specify a L4 protocol and not use inversions on it
[  383.157092][T19694] tipc: Started in network mode
[  383.170419][T19694] tipc: Node identity 5e6e89b3478a, cluster identity 5
[  383.179352][T19694] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  383.197976][T19694] ªªªªªª: renamed from syzkaller0
[  383.215239][T19694] tipc: Disabling bearer <eth:syzkaller0>
[  383.381158][T19703] bond6: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  383.394409][T19703] bond6 (unregistering): Released all slaves
[  383.430675][T19707] netlink: 'syz.4.3688': attribute type 1 has an invalid length.
[  383.433169][T19712] netlink: 'syz.4.3688': attribute type 1 has an invalid length.
[  383.488962][T19707] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  383.491137][T19712] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  383.585510][T19718] syzkaller1: entered promiscuous mode
[  383.602206][T19718] syzkaller1: entered allmulticast mode
[  383.624397][T19722] team_slave_0: entered allmulticast mode
[  383.639899][T19722] team_slave_0: entered promiscuous mode
[  383.944654][T19743] netlink: 'syz.6.3695': attribute type 16 has an invalid length.
[  383.958765][T19743] netlink: 'syz.6.3695': attribute type 17 has an invalid length.
[  384.107212][T19743] 8021q: adding VLAN 0 to HW filter on device bond0
[  384.135792][T19743] 8021q: adding VLAN 0 to HW filter on device team0
[  384.156460][T19743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  384.190009][T19765] ip6tnl2: entered allmulticast mode
[  384.504948][T19796] netlink: 'syz.6.3710': attribute type 1 has an invalid length.
[  384.790543][T19819] syzkaller0: entered promiscuous mode
[  384.797723][T19819] syzkaller0: entered allmulticast mode
[  385.452630][T19874] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  385.593739][T19883] team0: Device gtp0 is up. Set it down before adding it as a team port
[  385.983176][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  385.991216][    C1] lec:lec_tx_timeout: lec0
[  385.996142][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  388.341542][T19864] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  388.351420][T19878] netlink: 'syz.0.3729': attribute type 11 has an invalid length.
[  388.369881][T19878] __nla_validate_parse: 18 callbacks suppressed
[  388.369899][T19878] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.3729'.
[  388.581596][T19903] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3736'.
[  388.771949][T19917] validate_nla: 1 callbacks suppressed
[  388.771967][T19917] netlink: 'syz.2.3739': attribute type 4 has an invalid length.
[  388.825735][T19919] netlink: 212324 bytes leftover after parsing attributes in process `syz.6.3742'.
[  388.912209][T19927] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3744'.
[  388.949446][T19926] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3745'.
[  389.033389][T19926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3745'.
[  389.152325][T19936] ip6tnl2: entered allmulticast mode
[  389.407355][T19951] netlink: 'syz.4.3753': attribute type 9 has an invalid length.
[  389.437714][T19951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3753'.
[  389.550978][T19951] netlink: 'syz.4.3753': attribute type 9 has an invalid length.
[  389.566271][T19951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3753'.
[  389.569849][T19960] netlink: 6024 bytes leftover after parsing attributes in process `syz.6.3755'.
[  389.801042][T19974] netlink: 'syz.4.3760': attribute type 11 has an invalid length.
[  389.836378][T19974] netlink: 'syz.4.3760': attribute type 11 has an invalid length.
[  389.868494][T19974] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3760'.
[  390.091371][T19995] netlink: 'syz.0.3770': attribute type 11 has an invalid length.
[  390.679449][T20029] openvswitch: netlink: nsh attr 255 is out of range max 3
[  391.003245][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  391.011290][    C1] lec:lec_tx_timeout: lec0
[  391.015906][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  391.033583][T20061] tipc: New replicast peer: 255.255.255.255
[  391.040315][T20061] tipc: Enabled bearer <udp:syz2>, priority 10
[  391.244392][T20070] bridge0: Device is already in use.
[  391.324940][T20083] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  391.363419][T20081] ¾x9ÿ: renamed from bridge_slave_0
[  392.075340][T20121] netlink: 'syz.6.3805': attribute type 18 has an invalid length.
[  392.163204][ T5971] tipc: Node number set to 434407859
[  392.352614][T20140] syzkaller1: entered promiscuous mode
[  392.358921][T20140] syzkaller1: entered allmulticast mode
[  392.412362][T20140] syzkaller1: left promiscuous mode
[  392.419710][T20140] syzkaller1: left allmulticast mode
[  393.161830][T20166] xt_connbytes: Forcing CT accounting to be enabled
[  394.015623][T20171] __nla_validate_parse: 8 callbacks suppressed
[  394.015643][T20171] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3821'.
[  394.065539][T20173] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3823'.
[  394.077044][T20177] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3824'.
[  394.114420][T20173] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.3823'.
[  394.200843][T20190] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3828'.
[  394.366634][T20200] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3831'.
[  394.405352][T20199] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  394.446415][T20207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3834'.
[  394.461690][T20205] netlink: 'syz.0.3832': attribute type 13 has an invalid length.
[  394.496942][T20205] syzkaller0: entered promiscuous mode
[  394.502451][T20205] syzkaller0: entered allmulticast mode
[  394.670967][T20212] netlink: 'syz.5.3837': attribute type 1 has an invalid length.
[  394.684788][T20212] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3837'.
[  394.761599][T20220] xt_hashlimit: size too large, truncated to 1048576
[  394.910634][T20227] xt_CT: You must specify a L4 protocol and not use inversions on it
[  395.073919][T20237] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  395.304313][T20244] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3844'.
[  395.333169][T20249] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  395.367535][T20247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3845'.
[  395.370077][T20250] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  395.376641][T20249] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  395.397683][T20250] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  395.409408][T20247] nbd: must specify at least one socket
[  395.415625][T20250] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  395.451769][T20249] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  395.456194][T20250] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  395.668403][T20269] xt_nfacct: accounting object `syz1' does not exist
[  395.682962][T20250] net_ratelimit: 2015 callbacks suppressed
[  395.682980][T20250] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  395.683588][T20249] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  395.689512][T20250] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  395.699909][T20249] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  395.709519][T20250] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  395.720113][T20249] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  395.744304][T20250] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  395.748508][T20249] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  395.757747][T20250] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  395.767481][T20249] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  396.003889][ T5840] Bluetooth: hci4: command 0x0406 tx timeout
[  396.634807][T20297] netlink: 'syz.2.3858': attribute type 4 has an invalid length.
[  396.787100][T20310] netlink: 'syz.5.3861': attribute type 2 has an invalid length.
[  396.794933][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms
[  396.794966][    C1] lec:lec_tx_timeout: lec0
[  396.804489][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  396.908270][T20317] ±ÿ†m!]¨¨†D: renamed from team_slave_1
[  396.931399][T20318] xt_TPROXY: Can be used only with -p tcp or -p udp
[  397.078118][T20333] netlink: 'syz.6.3871': attribute type 5 has an invalid length.
[  397.151398][T20329] Bluetooth: MGMT ver 1.23
[  397.607805][T20376] netlink: 'syz.2.3882': attribute type 1 has an invalid length.
[  397.617319][T20378] netlink: 'syz.2.3882': attribute type 1 has an invalid length.
[  397.940395][T20398] SET target dimension over the limit!
[  399.029430][T20460] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  399.040921][T20460] syzkaller0: MTU too low for tipc bearer
[  399.047268][T20460] tipc: Disabling bearer <eth:syzkaller0>
[  399.283271][T20475] __nla_validate_parse: 49 callbacks suppressed
[  399.283289][T20475] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3906'.
[  399.393017][T20482] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  399.400264][T20482] IPv6: NLM_F_CREATE should be set when creating new route
[  399.407528][T20482] IPv6: NLM_F_CREATE should be set when creating new route
[  399.496145][T20483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  399.535226][T20491] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3912'.
[  399.599958][T20495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3914'.
[  399.717572][T20503] blkio.reset_stats is deprecated
[  399.796642][T20512] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3919'.
[  399.870691][T20517] ieee802154 phy1 wpan1: encryption failed: -22
[  399.996123][T20527] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20003
[  400.005943][T20524] IPVS: length: 8 != 1152
[  400.011227][T20526] tipc: Failed to remove unknown binding: 66,1,1/3080783446:4221743912/4221743914
[  400.011773][T20524] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3922'.
[  400.022031][T20526] tipc: Failed to remove unknown binding: 66,1,1/3080783446:4221743912/4221743914
[  400.114956][T20532] netlink: 'syz.6.3926': attribute type 39 has an invalid length.
[  400.244634][T20538] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3929'.
[  400.258434][T20540] –: renamed from vxcan1 (while UP)
[  400.267865][T20540] netlink: 'syz.2.3930': attribute type 1 has an invalid length.
[  400.277608][T20540] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3930'.
[  400.291027][T20540] netlink: 658 bytes leftover after parsing attributes in process `syz.2.3930'.
[  400.306454][T20542] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3931'.
[  400.306742][T20540] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3930'.
[  400.349502][T20542] netlink: 'syz.0.3931': attribute type 1 has an invalid length.
[  400.646131][T20560] netlink: 'syz.0.3937': attribute type 1 has an invalid length.
[  400.809115][T20563] netlink: 'syz.0.3938': attribute type 10 has an invalid length.
[  401.395871][T20600] net_ratelimit: 6561 callbacks suppressed
[  401.395889][T20600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  401.442901][T20602] netlink: 'syz.2.3956': attribute type 4 has an invalid length.
[  401.475033][T20602] .`: renamed from bond0 (while UP)
[  401.833116][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[  401.841202][    C1] lec:lec_tx_timeout: lec0
[  401.846388][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  401.867633][T20624] xt_hashlimit: size too large, truncated to 1048576
[  403.201481][T20701] sit2: entered allmulticast mode
[  403.422675][T20713] syzkaller0: entered promiscuous mode
[  403.429346][T20713] syzkaller0: entered allmulticast mode
[  403.918147][T20747] netlink: 'syz.6.4019': attribute type 2 has an invalid length.
[  403.950609][T20747] netlink: 'syz.6.4019': attribute type 2 has an invalid length.
[  403.987956][T20753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  404.025277][T20753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  404.051435][T20753] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  404.072899][T20753] bond0 (unregistering): Released all slaves
[  404.210838][T20764] netlink: 'syz.2.4025': attribute type 5 has an invalid length.
[  405.152430][T20828] x_tables: ip_tables: tcp.0 match: invalid size 16 (kernel) != (user) 24
[  405.299399][T20837] __nla_validate_parse: 11 callbacks suppressed
[  405.299421][T20837] netlink: 200 bytes leftover after parsing attributes in process `syz.4.4054'.
[  405.512583][ T5837] Bluetooth: hci3: link tx timeout
[  405.520074][ T5837] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  405.537642][ T5837] Bluetooth: hci3: link tx timeout
[  405.542877][ T5837] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  405.779767][ T5837] Bluetooth: hci3: link tx timeout
[  405.785309][ T5837] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  405.807440][ T5837] Bluetooth: hci3: link tx timeout
[  405.812649][ T5837] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  405.844208][T18859] wlan1: Trigger new scan to find an IBSS to join
[  405.943324][ T5837] Bluetooth: hci3: link tx timeout
[  405.948494][ T5837] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  406.426514][ T5837] Bluetooth: hci3: link tx timeout
[  406.431676][ T5837] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  406.496172][T20912] netlink: 'syz.6.4081': attribute type 10 has an invalid length.
[  406.539257][T20912] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4081'.
[  406.576898][T20912] bond0: entered promiscuous mode
[  406.593334][T20912] bridge0: port 1(bond0) entered blocking state
[  406.611373][T20912] bridge0: port 1(bond0) entered disabled state
[  406.629507][T20912] bond0: entered allmulticast mode
[  406.644136][T20916] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check.
[  406.853539][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  406.861598][    C1] lec:lec_tx_timeout: lec0
[  406.871540][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  407.117219][ T5837] Bluetooth: hci3: link tx timeout
[  407.122451][ T5837] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  407.186622][T20955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4097'.
[  407.437269][ T5837] Bluetooth: hci3: link tx timeout
[  407.442486][ T5837] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  407.579848][T20976] syzkaller0: entered promiscuous mode
[  407.587653][T20976] syzkaller0: entered allmulticast mode
[  407.607015][ T5837] Bluetooth: hci3: command 0x0406 tx timeout
[  407.750627][T20984] 8021q: adding VLAN 0 to HW filter on device bond2
[  407.974300][T21000] syzkaller0: entered promiscuous mode
[  407.981012][T21000] syzkaller0: entered allmulticast mode
[  408.126964][T21009] netlink: 'syz.4.4123': attribute type 1 has an invalid length.
[  408.196688][T21009] 8021q: adding VLAN 0 to HW filter on device bond4
[  408.209219][T21009] bond3: (slave bond4): making interface the new active one
[  408.227387][T21009] bond3: (slave bond4): Enslaving as an active interface with an up link
[  408.275306][T21018] bond3: (slave gretap1): Enslaving as a backup interface with an up link
[  408.368806][T21024] IPv6: NLM_F_CREATE should be specified when creating new route
[  408.438390][T21028] netlink: 316 bytes leftover after parsing attributes in process `syz.2.4130'.
[  408.462210][T21030] netlink: 'syz.0.4131': attribute type 13 has an invalid length.
[  408.729717][T21047] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4139'.
[  408.968440][T21064] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4146'.
[  409.022648][T21065] syzkaller0: entered promiscuous mode
[  409.028690][T21065] syzkaller0: entered allmulticast mode
[  409.117426][T21075] netlink: 260 bytes leftover after parsing attributes in process `syz.6.4153'.
[  409.338064][T21087] syzkaller1: entered promiscuous mode
[  409.354027][T21087] syzkaller1: entered allmulticast mode
[  409.394883][T21091] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  409.455681][T21093] netlink: 'syz.6.4161': attribute type 49 has an invalid length.
[  409.457398][T21097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4163'.
[  409.503966][T21095] syzkaller0: entered promiscuous mode
[  409.609216][T21099] syzkaller1: entered promiscuous mode
[  409.618650][T21099] syzkaller1: entered allmulticast mode
[  409.674399][T21101] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  409.681963][T21101] syzkaller0: entered promiscuous mode
[  409.704867][T21101] syzkaller0: entered allmulticast mode
[  409.774188][T21101] tipc: Resetting bearer <eth:syzkaller0>
[  409.813642][T21100] tipc: Resetting bearer <eth:syzkaller0>
[  409.855617][T21100] tipc: Disabling bearer <eth:syzkaller0>
[  409.903801][T21123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4173'.
[  410.122092][T21136] netlink: 'syz.5.4180': attribute type 3 has an invalid length.
[  410.417735][T21156] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  410.616992][T21171] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4195'.
[  410.635093][T21171] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  410.693737][T21174] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4196'.
[  410.713506][T21174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4196'.
[  410.738001][T21174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4196'.
[  410.764101][T21180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4199'.
[  410.782329][T21181] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4198'.
[  410.885799][T10951] wlan1: Trigger new scan to find an IBSS to join
[  410.950533][T21188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4202'.
[  410.995475][T21193] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4204'.
[  411.437628][T21223] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4213'.
[  411.460684][T21223] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4213'.
[  411.806340][T12567] wlan1: Creating new IBSS network, BSSID 82:68:b8:2c:57:13
[  411.834341][   T30] INFO: task syz.1.2166:13904 blocked for more than 143 seconds.
[  411.857234][   T30]       Not tainted syzkaller #0
[  411.862332][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  411.871576][   T30] task:syz.1.2166      state:D stack:26936 pid:13904 tgid:13897 ppid:5829   task_flags:0x400040 flags:0x00080002
[  411.882998][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  411.891509][    C1] lec:lec_tx_timeout: lec0
[  411.893140][   T30] Call Trace:
[  411.896566][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  411.902818][   T30]  <TASK>
[  411.911617][T21206] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  411.931755][   T30]  __schedule+0x15dd/0x52d0
[  411.937549][   T30]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  411.945772][T21206] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  411.951397][T21254] netlink: 'syz.5.4221': attribute type 12 has an invalid length.
[  411.955785][   T30]  ? __pfx___schedule+0x10/0x10
[  411.968010][T21254] netlink: 'syz.5.4221': attribute type 29 has an invalid length.
[  411.976198][T21254] netlink: 'syz.5.4221': attribute type 2 has an invalid length.
[  411.979441][   T30]  ? schedule+0x90/0x360
[  411.985410][T21254] netlink: 'syz.5.4221': attribute type 3 has an invalid length.
[  411.997446][   T30]  schedule+0x164/0x360
[  412.007259][   T30]  schedule_preempt_disabled+0x13/0x30
[  412.019631][   T30]  __mutex_lock+0x7fe/0x1300
[  412.028870][   T30]  ? __mutex_lock+0x5ac/0x1300
[  412.034422][   T30]  ? nfsd_nl_threads_get_doit+0x1c0/0x790
[  412.040300][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  412.046045][   T30]  ? __nlmsg_put+0xef/0x1b0
[  412.050643][   T30]  ? genlmsg_put+0x137/0x2e0
[  412.055455][   T30]  nfsd_nl_threads_get_doit+0x1c0/0x790
[  412.061300][   T30]  ? kmem_cache_free+0x187/0x630
[  412.066612][   T30]  ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10
[  412.072726][   T30]  ? dev_hard_start_xmit+0x802/0x870
[  412.092027][   T30]  genl_family_rcv_msg_doit+0x22a/0x330
[  412.097663][   T30]  ? __asan_memcpy+0x40/0x70
[  412.102268][   T30]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  412.108801][   T30]  genl_rcv_msg+0x61c/0x7a0
[  412.113829][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  412.118864][   T30]  ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10
[  412.125269][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  412.130237][   T30]  netlink_rcv_skb+0x232/0x4b0
[  412.135133][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  412.140192][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  412.145913][   T30]  ? down_read+0x272/0x2e0
[  412.150340][   T30]  ? genl_rcv+0xd/0x40
[  412.154515][   T30]  genl_rcv+0x28/0x40
[  412.158508][   T30]  netlink_unicast+0x80f/0x9b0
[  412.163322][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  412.168649][   T30]  ? netlink_sendmsg+0x650/0xb40
[  412.174103][   T30]  ? skb_put+0x11b/0x210
[  412.178361][   T30]  netlink_sendmsg+0x813/0xb40
[  412.184305][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  412.189628][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  412.194614][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  412.199911][   T30]  ____sys_sendmsg+0x972/0x9f0
[  412.205112][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  412.210403][   T30]  ? import_iovec+0x73/0xa0
[  412.214967][   T30]  ___sys_sendmsg+0x2a5/0x360
[  412.219653][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[  412.224901][   T30]  ? futex_wake+0x4ac/0x580
[  412.229426][   T30]  ? __fget_files+0x2a/0x420
[  412.234816][   T30]  ? __fget_files+0x3a0/0x420
[  412.239529][   T30]  __x64_sys_sendmsg+0x1bd/0x2a0
[  412.244595][   T30]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  412.250077][   T30]  ? rcu_is_watching+0x15/0xb0
[  412.254976][   T30]  do_syscall_64+0x14d/0xf80
[  412.259577][   T30]  ? trace_irq_disable+0x3b/0x150
[  412.265146][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.271228][   T30]  ? clear_bhb_loop+0x40/0x90
[  412.276031][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.281939][   T30] RIP: 0033:0x7f839b39c799
[  412.287687][   T30] RSP: 002b:00007f839c180028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  412.296552][   T30] RAX: ffffffffffffffda RBX: 00007f839b616090 RCX: 00007f839b39c799
[  412.304573][   T30] RDX: 0000000024048000 RSI: 0000200000000000 RDI: 0000000000000006
[  412.312545][   T30] RBP: 00007f839b432c99 R08: 0000000000000000 R09: 0000000000000000
[  412.320649][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  412.328907][   T30] R13: 00007f839b616128 R14: 00007f839b616090 R15: 00007ffe1cf73768
[  412.336972][   T30]  </TASK>
[  412.343174][   T30] 
[  412.343174][   T30] Showing all locks held in the system:
[  412.350925][   T30] 1 lock held by khungtaskd/30:
[  412.356570][   T30]  #0: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  412.366527][   T30] 2 locks held by getty/5583:
[  412.371202][   T30]  #0: ffff888031f400a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  412.381135][   T30]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  412.392735][   T30] 5 locks held by kworker/u8:15/10951:
[  412.399712][   T30]  #0: ffff8880b873ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150
[  412.411012][   T30]  #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  412.420414][   T30]  #2: ffff8880b8626118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30
[  412.429426][   T30]  #3: ffffffff9a543708 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580
[  412.439770][   T30]  #4: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x23c0
[  412.449815][   T30] 2 locks held by syz.3.1924/12931:
[  412.455084][   T30]  #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  412.463316][   T30]  #1: ffffffff8ea85f88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670
[  412.474511][   T30] 2 locks held by syz.1.2166/13904:
[  412.479722][   T30]  #0: ffffffff8fc3b930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  412.487935][   T30]  #1: ffffffff8ea85f88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790
[  412.498747][   T30] 2 locks held by dhcpcd/21257:
[  412.504484][   T30]  #0: ffff88805a006f48 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  412.514900][   T30]  #1: ffffffff8e7647b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  412.525866][   T30] 
[  412.528467][   T30] =============================================
[  412.528467][   T30] 
[  412.542765][   T30] NMI backtrace for cpu 1
[  412.542788][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  412.542807][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  412.542818][   T30] Call Trace:
[  412.542826][   T30]  <TASK>
[  412.542834][   T30]  dump_stack_lvl+0xe8/0x150
[  412.542863][   T30]  nmi_cpu_backtrace+0x274/0x2d0
[  412.542890][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  412.542915][   T30]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  412.542945][   T30]  sys_info+0x135/0x170
[  412.542967][   T30]  watchdog+0xfd9/0x1030
[  412.542999][   T30]  ? watchdog+0x21a/0x1030
[  412.543033][   T30]  kthread+0x388/0x470
[  412.543051][   T30]  ? __pfx_watchdog+0x10/0x10
[  412.543075][   T30]  ? __pfx_kthread+0x10/0x10
[  412.543095][   T30]  ret_from_fork+0x51e/0xb90
[  412.543121][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  412.543143][   T30]  ? __switch_to+0xc7d/0x1450
[  412.543168][   T30]  ? __pfx_kthread+0x10/0x10
[  412.543186][   T30]  ret_from_fork_asm+0x1a/0x30
[  412.543227][   T30]  </TASK>
[  412.648479][   T30] Sending NMI from CPU 1 to CPUs 0:
[  412.654222][    C0] NMI backtrace for cpu 0
[  412.654238][    C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  412.654256][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  412.654268][    C0] Workqueue: bat_events batadv_tt_purge
[  412.654297][    C0] RIP: 0010:__local_bh_enable_ip+0x7b/0x130
[  412.654322][    C0] Code: 8b 05 51 7b 94 11 85 c0 0f 84 9b 00 00 00 9c 58 fa a9 00 02 00 00 74 0b 49 89 fe e8 df 92 45 00 4c 89 f7 65 8b 05 25 39 94 11 <25> 00 ff 00 00 3d 00 02 00 00 75 05 e8 84 80 19 00 b8 01 00 00 00
[  412.654336][    C0] RSP: 0018:ffffc900001279b0 EFLAGS: 00000002
[  412.654350][    C0] RAX: 0000000080000201 RBX: 0000000000000201 RCX: 0000000080000202
[  412.654362][    C0] RDX: 0000000000000000 RSI: ffffffff8c27c1e0 RDI: ffffffff8b7d0aa7
[  412.654373][    C0] RBP: ffff88805b07ef98 R08: ffffffff9011a3b7 R09: 1ffffffff2023476
[  412.654385][    C0] R10: dffffc0000000000 R11: fffffbfff2023477 R12: ffff888059232688
[  412.654398][    C0] R13: dffffc0000000000 R14: ffffffff8b7d0aa7 R15: ffff8880583595b0
[  412.654411][    C0] FS:  0000000000000000(0000) GS:ffff88812545d000(0000) knlGS:0000000000000000
[  412.654424][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  412.654436][    C0] CR2: 00005555bdd4d168 CR3: 000000000e54c000 CR4: 00000000003526f0
[  412.654451][    C0] Call Trace:
[  412.654457][    C0]  <TASK>
[  412.654465][    C0]  batadv_tt_local_purge+0x2a7/0x340
[  412.654496][    C0]  batadv_tt_purge+0x35/0x9e0
[  412.654522][    C0]  ? process_scheduled_works+0xa8d/0x18c0
[  412.654543][    C0]  ? process_scheduled_works+0xa8d/0x18c0
[  412.654565][    C0]  process_scheduled_works+0xb6e/0x18c0
[  412.654602][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  412.654626][    C0]  ? assign_work+0x3d5/0x5e0
[  412.654649][    C0]  worker_thread+0xa53/0xfc0
[  412.654685][    C0]  kthread+0x388/0x470
[  412.654700][    C0]  ? __pfx_worker_thread+0x10/0x10
[  412.654721][    C0]  ? __pfx_kthread+0x10/0x10
[  412.654737][    C0]  ret_from_fork+0x51e/0xb90
[  412.654760][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  412.654786][    C0]  ? __switch_to+0xc7d/0x1450
[  412.654806][    C0]  ? __pfx_kthread+0x10/0x10
[  412.654822][    C0]  ret_from_fork_asm+0x1a/0x30
[  412.654854][    C0]  </TASK>
[  412.873337][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  412.880211][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  412.889317][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  412.899382][   T30] Call Trace:
[  412.902665][   T30]  <TASK>
[  412.905585][   T30]  vpanic+0x56c/0xa60
[  412.909557][   T30]  ? __pfx___schedule+0x10/0x10
[  412.914391][   T30]  ? __pfx_vpanic+0x10/0x10
[  412.918880][   T30]  ? __pfx_console_unlock+0x10/0x10
[  412.924074][   T30]  panic+0xc5/0xd0
[  412.927795][   T30]  ? __pfx_panic+0x10/0x10
[  412.932207][   T30]  ? preempt_schedule_thunk+0x16/0x30
[  412.937576][   T30]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  412.943741][   T30]  watchdog+0x1023/0x1030
[  412.948092][   T30]  ? watchdog+0x21a/0x1030
[  412.952521][   T30]  kthread+0x388/0x470
[  412.956587][   T30]  ? __pfx_watchdog+0x10/0x10
[  412.961262][   T30]  ? __pfx_kthread+0x10/0x10
[  412.965845][   T30]  ret_from_fork+0x51e/0xb90
[  412.970429][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  412.975535][   T30]  ? __switch_to+0xc7d/0x1450
[  412.980216][   T30]  ? __pfx_kthread+0x10/0x10
[  412.984800][   T30]  ret_from_fork_asm+0x1a/0x30
[  412.989571][   T30]  </TASK>
[  412.992852][   T30] Kernel Offset: disabled
[  412.997171][   T30] Rebooting in 86400 seconds..