last executing test programs:

1m19.41949726s ago: executing program 2 (id=224):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x4}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0xa}], 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$kcm(0x10, 0xd, 0x10)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0xffffffffffffff45, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
r6 = socket$kcm(0x10, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a0091000b00b80000fc005f02"], 0xfe33)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c000780080012400006000014000300686173683a69702c706f72742c697000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x58}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0)
close(r8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$unix(r9, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r10], 0x18}, 0x0)
close(r10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff})
close(r11)
epoll_create(0x10001)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

1m13.29328868s ago: executing program 2 (id=224):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x4}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0xa}], 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$kcm(0x10, 0xd, 0x10)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0xffffffffffffff45, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
r6 = socket$kcm(0x10, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a0091000b00b80000fc005f02"], 0xfe33)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c000780080012400006000014000300686173683a69702c706f72742c697000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x58}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0)
close(r8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$unix(r9, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r10], 0x18}, 0x0)
close(r10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff})
close(r11)
epoll_create(0x10001)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

1m8.862723466s ago: executing program 0 (id=982):
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, 0x0, 0x0)
getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="b4000000000090006910a30000000000040000000000000095000200000000002f994f61ef34eeba1fc4a883ce77b9a9bb6cc1c98d9186"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000140)={'syztnl2\x00', <r1=>0x0, 0x1, 0x0, 0x8, 0x3b4, {{0x17, 0x4, 0x2, 0x37, 0x5c, 0x66, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @private=0xa010102, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x44, 0xd3, 0x1, 0x7, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@empty, 0x80000001}, {@multicast2, 0x86400000}, {@rand_addr=0x64010101, 0x101}, {@remote, 0x1}, {@rand_addr=0x64010100, 0xb11d}, {@local, 0x4}]}]}}}}})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2, 0x5}, 0x1c)
getsockopt$sock_buf(r3, 0x1, 0x19, 0x0, &(0x7f0000003080))
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x200000c0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x20, 0x1, 0x81, 0x5, 0x20804, 0xffffffffffffffff, 0x0, '\x00', r1, r2, 0x2, 0x1, 0x3}, 0x50)

1m8.861944308s ago: executing program 0 (id=983):
socket$packet(0x11, 0x2, 0x300) (async)
socket$packet(0x11, 0x3, 0x300) (async)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async)
syz_80211_join_ibss(&(0x7f0000000a80)='wlan0\x00', &(0x7f0000000ac0)=@random="4f125c110cfd65a168", 0x9, 0x1)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r1, 0x0, 0x9}, 0x18)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r3) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x12, &(0x7f0000000340)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x3, 0xcb, &(0x7f00000006c0)=""/203, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x3, 0x7, 0x40}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[r0, r0, r0, r3], &(0x7f0000000800)=[{0x1, 0x2, 0xa, 0x1}], 0x10, 0x8}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x3, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffff801}, 0x50) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x35}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000500)=""/64}, 0x20)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f00000000c0)=0x3a7b, 0x4)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xc}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x108, 0x18, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xec, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x17c}}, 0x0)

1m8.79245235s ago: executing program 0 (id=984):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000784726e9d9797750c3fad49197b59256d7425230d595229cce927b79e9712892e8089a9861daf4e47380f68081bcca588a1ac25d6d636a54f9d2a4e4d41610"], &(0x7f0000000200)='GPL\x00', 0xffffff85, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m8.789768401s ago: executing program 0 (id=986):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000010400"/20, @ANYRESHEX=r2, @ANYRES16=r0], 0x68}, 0x1, 0xd}, 0x800)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
pipe(&(0x7f00000045c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f0000000080)=[{&(0x7f00000015c0)='5', 0x1}, {&(0x7f00000000c0)="57a015", 0x3}], 0x2, 0x7)
splice(r5, 0x0, r4, 0x0, 0x8000, 0x9)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800a001a"], 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

1m8.713275829s ago: executing program 0 (id=988):
unshare(0x28000600) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000300)='p', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @dev={0xfe, 0x80, '\x00', 0xb}, 0x1}, 0x300) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r2 = socket(0x840000000002, 0x3, 0xff) (async, rerun: 64)
r3 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080))
setsockopt$inet_int(r3, 0x0, 0x32, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async, rerun: 32)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x3, 0x2}, 0x6) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110ab000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)={0x1c, 0x2d, 0x1, 0x70bd29, 0x0, "", [@generic='\x00\b', @typed={0x8, 0xd8, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}], 0x1, 0x0, 0x0, 0x2000000}, 0x8000)

1m8.613596284s ago: executing program 0 (id=990):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x6}, 0xfe}, 0x18)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x0, 0x6}, 0x0, 0x128, 0x190, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@time={{0xfffffffffffffda0}, {0x0, 0x0, 0x0, 0x2000000}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'dvmrp0\x00', 'batadv_slave_1\x00', 0x12, 0x3}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xfffffffffffffe05, 0xd0}, {0x28}}}}, 0x1de564272091681e)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000000)=[{0x3, 0x3, {0x0, 0x0, 0x4}, {0x1}, 0xfe, 0x1}, {0x0, 0x1, {0x2, 0x1}, {0x1, 0x0, 0x7}, 0xfd, 0x1}], 0x40)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async)
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x6}, 0xfe}, 0x18) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x0, 0x6}, 0x0, 0x128, 0x190, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@time={{0xfffffffffffffda0}, {0x0, 0x0, 0x0, 0x2000000}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'dvmrp0\x00', 'batadv_slave_1\x00', 0x12, 0x3}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xfffffffffffffe05, 0xd0}, {0x28}}}}, 0x1de564272091681e) (async)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000000)=[{0x3, 0x3, {0x0, 0x0, 0x4}, {0x1}, 0xfe, 0x1}, {0x0, 0x1, {0x2, 0x1}, {0x1, 0x0, 0x7}, 0xfd, 0x1}], 0x40) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async)

1m6.329905179s ago: executing program 2 (id=224):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x4}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0xa}], 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$kcm(0x10, 0xd, 0x10)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0xffffffffffffff45, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
r6 = socket$kcm(0x10, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a0091000b00b80000fc005f02"], 0xfe33)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c000780080012400006000014000300686173683a69702c706f72742c697000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x58}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0)
close(r8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$unix(r9, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r10], 0x18}, 0x0)
close(r10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff})
close(r11)
epoll_create(0x10001)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

59.439807808s ago: executing program 2 (id=224):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x4}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0xa}], 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$kcm(0x10, 0xd, 0x10)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0xffffffffffffff45, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
r6 = socket$kcm(0x10, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a0091000b00b80000fc005f02"], 0xfe33)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c000780080012400006000014000300686173683a69702c706f72742c697000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x58}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0)
close(r8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$unix(r9, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r10], 0x18}, 0x0)
close(r10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff})
close(r11)
epoll_create(0x10001)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

53.070796508s ago: executing program 32 (id=990):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x6}, 0xfe}, 0x18)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x0, 0x6}, 0x0, 0x128, 0x190, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@time={{0xfffffffffffffda0}, {0x0, 0x0, 0x0, 0x2000000}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'dvmrp0\x00', 'batadv_slave_1\x00', 0x12, 0x3}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xfffffffffffffe05, 0xd0}, {0x28}}}}, 0x1de564272091681e)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000000)=[{0x3, 0x3, {0x0, 0x0, 0x4}, {0x1}, 0xfe, 0x1}, {0x0, 0x1, {0x2, 0x1}, {0x1, 0x0, 0x7}, 0xfd, 0x1}], 0x40)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async)
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x6}, 0xfe}, 0x18) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x0, 0x6}, 0x0, 0x128, 0x190, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@time={{0xfffffffffffffda0}, {0x0, 0x0, 0x0, 0x2000000}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'dvmrp0\x00', 'batadv_slave_1\x00', 0x12, 0x3}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xfffffffffffffe05, 0xd0}, {0x28}}}}, 0x1de564272091681e) (async)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000000)=[{0x3, 0x3, {0x0, 0x0, 0x4}, {0x1}, 0xfe, 0x1}, {0x0, 0x1, {0x2, 0x1}, {0x1, 0x0, 0x7}, 0xfd, 0x1}], 0x40) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async)

52.66368563s ago: executing program 2 (id=224):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x4}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0xa}], 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$kcm(0x10, 0xd, 0x10)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0xffffffffffffff45, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
r6 = socket$kcm(0x10, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a0091000b00b80000fc005f02"], 0xfe33)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c000780080012400006000014000300686173683a69702c706f72742c697000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x58}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0)
close(r8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$unix(r9, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r10], 0x18}, 0x0)
close(r10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff})
close(r11)
epoll_create(0x10001)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

45.606959545s ago: executing program 2 (id=224):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x4}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0xa}], 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$kcm(0x10, 0xd, 0x10)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0xffffffffffffff45, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
r6 = socket$kcm(0x10, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a0091000b00b80000fc005f02"], 0xfe33)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c000780080012400006000014000300686173683a69702c706f72742c697000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x58}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0)
close(r8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$unix(r9, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r10], 0x18}, 0x0)
close(r10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff})
close(r11)
epoll_create(0x10001)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

1.209777042s ago: executing program 1 (id=1746):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000380)={{r0}, "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"})
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1e, 0x6, 0xc, 0xfc0, 0x1844, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001380)={'batadv_slave_0\x00', <r3=>0x0})
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000001600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x7cfbdeaa}}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x36, 0x0, 0x7e, 0x4}, @var={0x4, 0x0, 0x0, 0xe, 0x4}, @ptr={0xe, 0x0, 0x0, 0x2, 0x2}, @const={0x7, 0x0, 0x0, 0xa, 0xa}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @fwd={0x6}]}, {0x0, [0x2e, 0x61, 0x2e, 0x30, 0x30, 0x5f]}}, &(0x7f0000001440)=""/113, 0x88, 0x71, 0x0, 0xd8}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="1b00fdffffffffffffff", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\t\x00'/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="09000000000000000200"/28], 0x50)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x4c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xffff}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x18}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40e8800)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0xb83, 0x3}, 0x1c)
setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000000000)=0x7ec0, 0x4)
syz_emit_ethernet(0x19, &(0x7f000001f700)={@broadcast, @remote, @val={@val, {0x88a8}}, {@mpls_uc={0x88a8, {[], @llc={@llc={0x0, 0x0, "0e"}}}}}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x1, @private2, @local, {[@routing={0x89, 0x0, 0x2, 0x4, 0x11}]}}}}}, 0x0)

1.152931683s ago: executing program 1 (id=1747):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0xd9ffffffffffffff, 0x20000000}, 0x0)

1.152786316s ago: executing program 1 (id=1748):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x1448f10f1ad261b2}, 0x480d0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x3c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113c000000000020000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
socket$l2tp6(0xa, 0x2, 0x73)

1.099355931s ago: executing program 1 (id=1750):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x6)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000017c0)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newtfilter={0x30, 0x28, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0xe}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x0)
sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0))
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETTXFILTER(r10, 0x400454d1, &(0x7f0000000080)={0x0, 0x9, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @random="9d9b25a7bf1e", @random="412d007f2c16", @multicast, @empty, @empty, @broadcast, @link_local]})
ioctl$PPPIOCGFLAGS1(r9, 0x8004745a, &(0x7f0000000300))

423.646997ms ago: executing program 3 (id=1762):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x44}}, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) (async)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r5, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c00038008000100020000003400038008000100000000002800038006000100020000000800020002"], 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x80) (async)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000005140)={0x60, r9, 0x1, 0x80000000, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x5, 0x1, r7}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r9, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x20}}, 0x62654accb376b644) (async)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x44, r9, 0x230, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4081}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="110000001d00070f000000000000000007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async)
sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x1b4, 0x17, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0x1a0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'pimreg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRES8=0x0, @ANYRES16=r0, @ANYRES16=r1, @ANYRESOCT=r0, @ANYRES8=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="b6b806f59b6220d3a3a2a355f4c8dfcc5a5b53b3a64b3b87979b68629eb752fc9c0510a20486e5a805597b8baaa42a2c95cbf3add907c3d0b97af1798e9a86811d09ce9b2ca85d23d7bd2a7210bb573f7c47360b5d997b93def24ff43ef4c8282f80d1fcf219213b5a39d6770800e28a0d58c283ba992936"], 0x50}, 0x1, 0x0, 0x0, 0x40804}, 0x4008840)
r10 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x1402, 0x800, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r10}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)

183.813424ms ago: executing program 3 (id=1763):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd2b, 0x4000, {}, [{{@nsim={{0xe}, {0xfffffffffffffdce, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfffffffa}, {0x6}}]}, 0x4c}}, 0x4040000)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r2, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_FWMARK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x200000e0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040), 0x6)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r5, &(0x7f0000000a80), 0x0}, 0x20)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6)

183.661162ms ago: executing program 3 (id=1764):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006500)={0x18, 0x140e, 0x12f, 0x70bd28, 0x25dffbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4118}, 0x4040004)

67.743315ms ago: executing program 3 (id=1765):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r4, 0x0, 0x0, 0x10)
unshare(0x2c000a00)
recvmmsg(r4, &(0x7f0000001ec0), 0x0, 0x40000100, 0x0)
shutdown(r4, 0x2)
write$cgroup_type(r3, &(0x7f0000000040), 0x9)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0)
getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000380)={'raw\x00'}, &(0x7f0000003240)=0x54)
r6 = socket$inet6(0xa, 0x802, 0x88)
setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f00000003c0)=0xa, 0x4)
sendto$inet6(r6, 0x0, 0x0, 0x41, &(0x7f0000000180)={0xa, 0x4e23, 0x77f, @mcast1}, 0x1c)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24048851}, 0x4001)
sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x2004c044)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40060000}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000b40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b00)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000814)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={<r8=>0x0, 0x5, 0x44}, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r8}, &(0x7f0000000340)=0x8)

67.439471ms ago: executing program 1 (id=1766):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201})
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000ff000000000000000000188"], 0xffe)

2.676501ms ago: executing program 3 (id=1767):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000631108000000000005200000000000009500740000000080"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x21)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf}]}}}]}, 0x3c}}, 0x0)

804.893µs ago: executing program 3 (id=1768):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x80002, 0x2)
bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendto(r3, &(0x7f00000000c0)='\x00', 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@newtaction={0x4f, 0x31, 0x3d, 0x70bd2c, 0xfffffffc}, 0x14}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, r5, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @empty=0x2e00}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x18, &(0x7f0000000040), 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r7)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r9=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9148", @ANYRES16=r8, @ANYBLOB="010025bdf000fcdbdf251000000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804)
socket$inet6_sctp(0xa, 0x1, 0x84)

0s ago: executing program 1 (id=1769):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20041, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x306)

kernel console output (not intermixed with test programs):

 T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.554'.
[   87.583558][ T7893] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.554'.
[   87.726858][ T7897] netlink: 44 bytes leftover after parsing attributes in process `syz.0.555'.
[   87.933036][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.814862][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   88.818186][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   88.820956][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   88.824117][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   88.828174][ T5817] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.846988][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'.
[   88.957232][ T7922] chnl_net:caif_netlink_parms(): no params data found
[   88.993480][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.048051][ T7922] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.050836][ T7922] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.053259][ T7922] bridge_slave_0: entered allmulticast mode
[   89.056282][ T7922] bridge_slave_0: entered promiscuous mode
[   89.064994][ T7922] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.067868][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.073534][ T7922] bridge_slave_1: entered allmulticast mode
[   89.077260][ T7922] bridge_slave_1: entered promiscuous mode
[   89.105712][ T7922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.110816][ T7922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.139240][ T7922] team0: Port device team_slave_0 added
[   89.146145][ T7922] team0: Port device team_slave_1 added
[   89.167416][ T7922] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.169656][ T7922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.178570][ T7922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.189143][ T7922] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.192107][ T7922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.204520][ T7922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.238344][ T7922] hsr_slave_0: entered promiscuous mode
[   89.241102][ T7922] hsr_slave_1: entered promiscuous mode
[   89.243641][ T7922] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.247174][ T7922] Cannot create hsr debugfs directory
[   89.438389][ T7962] netlink: 'syz.1.575': attribute type 1 has an invalid length.
[   89.476339][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.503201][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.634787][   T12] bridge_slave_1: left allmulticast mode
[   89.636646][   T12] bridge_slave_1: left promiscuous mode
[   89.639062][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.656736][   T12] bridge_slave_0: left allmulticast mode
[   89.658308][ T7927] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   89.658862][   T12] bridge_slave_0: left promiscuous mode
[   89.662694][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.888424][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   89.892503][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   89.896068][   T12] bond0 (unregistering): Released all slaves
[   89.930684][ T7977] team0: Port device bridge0 removed
[   89.933857][ T7977] bond1: (slave bridge1): Releasing backup interface
[   89.940460][ T7977] bridge1: left promiscuous mode
[   90.174893][   T12] hsr_slave_0: left promiscuous mode
[   90.180443][   T12] hsr_slave_1: left promiscuous mode
[   90.189668][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.196315][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.200442][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.204030][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.219496][   T12] veth1_macvtap: left promiscuous mode
[   90.222516][   T12] veth0_macvtap: left promiscuous mode
[   90.226876][   T12] veth1_vlan: left promiscuous mode
[   90.228647][   T12] veth0_vlan: left promiscuous mode
[   90.481024][   T12] team0 (unregistering): Port device team_slave_1 removed
[   90.503013][   T12] team0 (unregistering): Port device team_slave_0 removed
[   90.694387][ T7996] vlan3: entered promiscuous mode
[   90.696217][ T7996] syz_tun: entered promiscuous mode
[   90.743135][ T7922] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   90.752068][ T7922] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   90.768792][ T7922] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   90.776766][ T7922] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   90.839698][ T7922] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.861090][ T7922] 8021q: adding VLAN 0 to HW filter on device team0
[   90.879783][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.881990][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.890662][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.892928][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.924998][ T5817] Bluetooth: hci2: command tx timeout
[   91.101737][ T8034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   91.119280][ T7922] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.151120][ T7922] veth0_vlan: entered promiscuous mode
[   91.156449][ T7922] veth1_vlan: entered promiscuous mode
[   91.159213][ T8036] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   91.163169][ T8036] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   91.188035][ T7922] veth0_macvtap: entered promiscuous mode
[   91.191998][ T7922] veth1_macvtap: entered promiscuous mode
[   91.210535][ T7922] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.221439][ T7922] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.232709][ T7922] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.238016][ T7922] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.240862][ T7922] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.244039][ T7922] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.275127][ T8047] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   91.297182][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.303251][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.326651][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.329846][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.413464][ T8057] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.470687][ T8061] netlink: 'syz.1.603': attribute type 16 has an invalid length.
[   91.473149][ T8061] __nla_validate_parse: 3 callbacks suppressed
[   91.473156][ T8061] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.603'.
[   91.816745][ T8082] netlink: 14 bytes leftover after parsing attributes in process `syz.0.610'.
[   91.839061][ T8084] netlink: 'syz.1.611': attribute type 2 has an invalid length.
[   91.943473][ T8091] netlink: 32 bytes leftover after parsing attributes in process `syz.0.614'.
[   92.153789][ T8116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.625'.
[   92.208177][ T8126] netlink: 'syz.1.629': attribute type 1 has an invalid length.
[   92.223978][ T8126] 8021q: adding VLAN 0 to HW filter on device bond2
[   92.232912][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'.
[   92.238126][ T8126] 8021q: adding VLAN 0 to HW filter on device bond2
[   92.240520][ T8126] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   92.244910][ T8126] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   92.290889][ T8129] veth3: entered promiscuous mode
[   92.294342][ T8129] bond2: (slave veth3): Enslaving as an active interface with a down link
[   92.300058][ T8126] netlink: 20 bytes leftover after parsing attributes in process `syz.1.629'.
[   92.303654][ T8126] netlink: 28 bytes leftover after parsing attributes in process `syz.1.629'.
[   92.457057][ T8140] dvmrp8: entered allmulticast mode
[   92.530367][ T8145] netlink: 'syz.1.634': attribute type 41 has an invalid length.
[   92.777456][ T8166] netlink: 60 bytes leftover after parsing attributes in process `syz.1.640'.
[   92.780689][ T8161] netlink: 60 bytes leftover after parsing attributes in process `syz.1.640'.
[   92.832447][ T8172] lo: entered promiscuous mode
[   92.836641][ T8172] tunl0: entered promiscuous mode
[   92.838974][ T8172] gre0: entered promiscuous mode
[   92.853862][ T8172] gretap0: entered promiscuous mode
[   92.859120][ T8172] erspan0: entered promiscuous mode
[   92.861724][ T8172] ip_vti0: entered promiscuous mode
[   92.863943][ T8172] ip6_vti0: entered promiscuous mode
[   92.866904][ T8172] sit0: entered promiscuous mode
[   92.882957][ T8172] ip6tnl0: entered promiscuous mode
[   92.886877][ T8172] ip6gre0: entered promiscuous mode
[   92.889419][ T8172] syz_tun: entered promiscuous mode
[   92.892000][ T8172] ip6gretap0: entered promiscuous mode
[   92.895314][ T8172] vcan0: entered promiscuous mode
[   92.897526][ T8172] dummy0: entered promiscuous mode
[   92.899655][ T8172] nlmon0: entered promiscuous mode
[   92.902057][ T8172] caif0: entered promiscuous mode
[   92.903667][ T8172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.982788][ T8177] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   92.997201][ T8177] bond3: entered promiscuous mode
[   92.999036][ T8177] bond3: entered allmulticast mode
[   93.000961][ T8177] 8021q: adding VLAN 0 to HW filter on device bond3
[   93.115995][ T5863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.948810][ T8196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.647'.
[   93.967420][ T8198] openvswitch: netlink: Message has 1 unknown bytes.
[   93.975132][ T8198] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.068266][ T8210] netlink: 'syz.1.650': attribute type 1 has an invalid length.
[   94.099843][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   94.103076][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   94.106537][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   94.109422][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   94.112052][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   94.250038][ T8230] syzkaller1: entered promiscuous mode
[   94.254563][ T8230] syzkaller1: entered allmulticast mode
[   94.261334][ T8211] chnl_net:caif_netlink_parms(): no params data found
[   94.294422][ T8236] netlink: 'syz.1.659': attribute type 3 has an invalid length.
[   94.375719][ T8211] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.378068][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.382233][ T8211] bridge_slave_0: entered allmulticast mode
[   94.389810][ T8211] bridge_slave_0: entered promiscuous mode
[   94.392831][ T8211] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.395306][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.397555][ T8211] bridge_slave_1: entered allmulticast mode
[   94.400572][ T8211] bridge_slave_1: entered promiscuous mode
[   94.431283][ T8211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.440502][ T8211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.474728][ T8211] team0: Port device team_slave_0 added
[   94.477910][ T8211] team0: Port device team_slave_1 added
[   94.494425][ T8211] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.496778][ T8211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.505202][ T8211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.509346][ T8211] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.511504][ T8211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.519958][ T8211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.542968][ T8211] hsr_slave_0: entered promiscuous mode
[   94.545448][ T8211] hsr_slave_1: entered promiscuous mode
[   94.547542][ T8211] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   94.550129][ T8211] Cannot create hsr debugfs directory
[   94.736171][ T5863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.784438][ T5863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.853097][ T5863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.930234][ T5863] bridge_slave_1: left allmulticast mode
[   94.935282][ T5863] bridge_slave_1: left promiscuous mode
[   94.937511][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.941261][ T5863] bridge_slave_0: left allmulticast mode
[   94.943204][ T5863] bridge_slave_0: left promiscuous mode
[   94.945493][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.119419][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   95.123387][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   95.127087][ T5863] bond0 (unregistering): Released all slaves
[   95.336589][ T5863] hsr_slave_0: left promiscuous mode
[   95.339258][ T5863] hsr_slave_1: left promiscuous mode
[   95.343799][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.349678][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.352464][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.359009][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.367961][ T5863] veth1_macvtap: left promiscuous mode
[   95.370061][ T5863] veth0_macvtap: left promiscuous mode
[   95.372124][ T5863] veth1_vlan: left promiscuous mode
[   95.374182][ T5863] veth0_vlan: left promiscuous mode
[   95.401117][ T8268] netlink: 'syz.0.667': attribute type 4 has an invalid length.
[   95.501163][ T8271] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   95.629493][ T5863] team0 (unregistering): Port device team_slave_1 removed
[   95.649691][ T5863] team0 (unregistering): Port device team_slave_0 removed
[   95.961872][ T8211] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   95.977752][ T8211] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   95.983086][ T8211] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   96.004548][ T8211] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   96.053483][ T8292] bridge2: entered promiscuous mode
[   96.058103][ T8292] bridge2: entered allmulticast mode
[   96.065441][ T8292] team0: Port device bridge2 added
[   96.121500][ T8211] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.136654][ T8211] 8021q: adding VLAN 0 to HW filter on device team0
[   96.158637][  T904] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.160922][  T904] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.173579][  T904] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.175901][  T904] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.197155][   T54] Bluetooth: hci2: command tx timeout
[   96.217578][ T8211] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   96.220848][ T8211] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   96.398631][ T8211] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.418519][ T8320] netem: unknown loss type 13
[   96.420336][ T8320] netem: change failed
[   96.458579][ T8211] veth0_vlan: entered promiscuous mode
[   96.490561][ T8211] veth1_vlan: entered promiscuous mode
[   96.512183][ T8211] veth0_macvtap: entered promiscuous mode
[   96.519001][ T8211] veth1_macvtap: entered promiscuous mode
[   96.543523][ T8211] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.551763][ T8211] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.561206][ T8329] __nla_validate_parse: 8 callbacks suppressed
[   96.561215][ T8329] netlink: 40 bytes leftover after parsing attributes in process `syz.0.681'.
[   96.572864][ T8211] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.577841][ T8211] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.580683][ T8211] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.583500][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'.
[   96.586580][ T8211] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.676444][  T904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.684104][  T904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.715527][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.717984][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.854153][ T8353] tc_dump_action: action bad kind
[   96.963687][ T8360] pim6reg: left allmulticast mode
[   97.012871][ T8366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.694'.
[   97.100269][ T8374] netlink: 16 bytes leftover after parsing attributes in process `syz.1.700'.
[   97.134912][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.700'.
[   97.211419][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.702'.
[   97.253922][ T8382] Dead loop on virtual device ip6_vti0, fix it urgently!
[   97.395541][ T8381] nbd: socks must be embedded in a SOCK_ITEM attr
[   97.404767][ T8381] block nbd0: shutting down sockets
[   97.564036][ T8392] syzkaller0: create flow: hash 94480933 index 1
[   97.585239][ T8392] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.589326][ T8392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.707'.
[   97.595084][ T8394] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[   97.616580][ T8391] syzkaller0: delete flow: hash 94480933 index 1
[   98.505374][ T8414] xt_ecn: cannot match TCP bits for non-tcp packets
[   98.530364][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.714'.
[   98.533203][ T8417] netlink: 16 bytes leftover after parsing attributes in process `syz.1.714'.
[   98.690226][ T8433] netlink: 'syz.1.720': attribute type 11 has an invalid length.
[   98.699673][ T8432] netlink: 'syz.0.719': attribute type 9 has an invalid length.
[   98.702110][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'.
[   98.737331][ T8437] netlink: 'syz.0.722': attribute type 1 has an invalid length.
[   98.775913][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.912174][ T8436] bond2: (slave veth3): Releasing active interface
[   98.919883][ T8436] team0: Port device bridge2 removed
[   99.687770][ T8445] netlink: 'syz.1.724': attribute type 22 has an invalid length.
[   99.853741][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   99.856918][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   99.859654][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   99.862828][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   99.866567][ T5817] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   99.940299][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.011874][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.031203][ T8451] syzkaller0: entered promiscuous mode
[  100.033492][ T8451] syzkaller0: entered allmulticast mode
[  100.069037][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.239174][   T12] bridge_slave_1: left allmulticast mode
[  100.241188][   T12] bridge_slave_1: left promiscuous mode
[  100.243068][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.250818][   T12] bridge_slave_0: left allmulticast mode
[  100.252701][   T12] bridge_slave_0: left promiscuous mode
[  100.255567][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.439025][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.443328][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.447240][   T12] bond0 (unregistering): Released all slaves
[  100.459688][ T8455] chnl_net:caif_netlink_parms(): no params data found
[  100.592061][ T8455] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.595161][ T8455] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.597424][ T8455] bridge_slave_0: entered allmulticast mode
[  100.600019][ T8455] bridge_slave_0: entered promiscuous mode
[  100.610168][ T8455] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.613471][ T8455] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.618000][ T8455] bridge_slave_1: entered allmulticast mode
[  100.620766][ T8455] bridge_slave_1: entered promiscuous mode
[  100.675288][ T8455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.683664][ T8455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.755592][ T8455] team0: Port device team_slave_0 added
[  100.779819][   T12] hsr_slave_0: left promiscuous mode
[  100.782967][   T12] hsr_slave_1: left promiscuous mode
[  100.788009][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.790757][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.794071][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.797923][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.812799][   T12] veth1_macvtap: left promiscuous mode
[  100.818175][   T12] veth0_macvtap: left promiscuous mode
[  100.820026][   T12] veth1_vlan: left promiscuous mode
[  100.821753][   T12] veth0_vlan: left promiscuous mode
[  101.147078][   T12] team0 (unregistering): Port device team_slave_1 removed
[  101.168900][   T12] team0 (unregistering): Port device team_slave_0 removed
[  101.395958][ T8455] team0: Port device team_slave_1 added
[  101.473958][ T8455] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.479166][ T8455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.505955][ T8455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.525448][ T8455] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.527676][ T8455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.543785][ T8455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.576775][ T8508] __nla_validate_parse: 3 callbacks suppressed
[  101.576785][ T8508] netlink: 256 bytes leftover after parsing attributes in process `syz.1.740'.
[  101.620158][ T8455] hsr_slave_0: entered promiscuous mode
[  101.622647][ T8455] hsr_slave_1: entered promiscuous mode
[  101.629483][ T8455] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  101.631996][ T8455] Cannot create hsr debugfs directory
[  101.890034][ T8540] SET target dimension over the limit!
[  101.956688][   T54] Bluetooth: hci2: command tx timeout
[  101.993374][ T8543] netlink: 44 bytes leftover after parsing attributes in process `syz.0.749'.
[  102.078366][ T8551] vlan3: entered promiscuous mode
[  102.080100][ T8551] vlan3: entered allmulticast mode
[  102.081759][ T8551] hsr_slave_1: entered allmulticast mode
[  102.140282][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.750'.
[  102.243995][ T8455] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  102.257335][ T8455] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  102.283788][ T8455] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  102.290890][ T8455] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  102.345862][ T8574] netlink: 40 bytes leftover after parsing attributes in process `syz.0.756'.
[  102.378734][ T8455] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.419248][ T8455] 8021q: adding VLAN 0 to HW filter on device team0
[  102.426694][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.428913][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.438639][ T8587] netlink: 'syz.1.757': attribute type 7 has an invalid length.
[  102.469446][ T8587] : entered promiscuous mode
[  102.477928][  T904] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.480171][  T904] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.495997][ T8589] netlink: 'syz.0.759': attribute type 39 has an invalid length.
[  102.706855][ T8455] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.748969][ T8455] veth0_vlan: entered promiscuous mode
[  102.761757][ T8455] veth1_vlan: entered promiscuous mode
[  102.791557][ T8455] veth0_macvtap: entered promiscuous mode
[  102.801248][ T8455] veth1_macvtap: entered promiscuous mode
[  102.815509][ T8455] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.827294][ T8455] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.835631][ T8455] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.838621][ T8455] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.841878][ T8455] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.847689][ T8455] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.905183][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.907877][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.926416][  T904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.929318][  T904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.326288][ T8606] netlink: 3 bytes leftover after parsing attributes in process `syz.1.762'.
[  103.329094][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.762'.
[  103.332429][ T8606] netlink: 3 bytes leftover after parsing attributes in process `syz.1.762'.
[  103.338816][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.762'.
[  103.341843][ T8606] netlink: 3 bytes leftover after parsing attributes in process `syz.1.762'.
[  103.403703][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.763'.
[  103.629351][ T8632] sctp: [Deprecated]: syz.1.770 (pid 8632) Use of int in max_burst socket option.
[  103.629351][ T8632] Use struct sctp_assoc_value instead
[  103.669475][ T8641] Cannot find add_set index 0 as target
[  103.701805][ T8645] vlan3: entered allmulticast mode
[  103.703514][ T8645] bridge_slave_0: entered allmulticast mode
[  104.640955][ T8652] netlink: 'syz.1.777': attribute type 29 has an invalid length.
[  104.649440][ T8652] netlink: 'syz.1.777': attribute type 29 has an invalid length.
[  104.662967][ T8652] netlink: 'syz.1.777': attribute type 30 has an invalid length.
[  104.758734][ T8664] vxcan1 speed is unknown, defaulting to 1000
[  104.763526][ T8664] vxcan1 speed is unknown, defaulting to 1000
[  104.783172][ T8664] vxcan1 speed is unknown, defaulting to 1000
[  104.789230][ T8666] lo: left promiscuous mode
[  104.798195][ T8666] tunl0: left promiscuous mode
[  104.800907][ T8666] gre0: left promiscuous mode
[  104.854987][ T8666] gretap0: left promiscuous mode
[  104.886785][ T8666] erspan0: left promiscuous mode
[  104.889579][ T8666] ip_vti0: left promiscuous mode
[  104.891690][ T8666] ip6_vti0: left promiscuous mode
[  104.906021][ T8666] sit0: left promiscuous mode
[  104.930719][ T8666] ip6tnl0: left promiscuous mode
[  104.935587][ T8666] ip6gre0: left promiscuous mode
[  104.954583][ T8666] syz_tun: left promiscuous mode
[  104.967125][ T8666] ip6gretap0: left promiscuous mode
[  105.026569][ T5673] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.046061][ T8664] infiniband syz2: set active
[  105.048628][ T8664] infiniband syz2: added vxcan1
[  105.059812][  T971] vxcan1 speed is unknown, defaulting to 1000
[  105.092017][ T8664] RDS/IB: syz2: added
[  105.093874][ T8664] smc: adding ib device syz2 with port count 1
[  105.096713][ T8664] smc:    ib device syz2 port 1 has pnetid 
[  105.100803][  T971] vxcan1 speed is unknown, defaulting to 1000
[  105.103770][ T8664] vxcan1 speed is unknown, defaulting to 1000
[  105.208444][ T8664] vxcan1 speed is unknown, defaulting to 1000
[  105.307464][ T8664] vxcan1 speed is unknown, defaulting to 1000
[  106.148513][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  106.155648][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  106.158432][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  106.161440][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  106.164176][ T5817] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  106.211242][ T8690] vxcan1 speed is unknown, defaulting to 1000
[  106.419810][ T8706] 8021q: adding VLAN 0 to HW filter on device batadv2
[  106.422714][ T8706] batadv2: entered promiscuous mode
[  106.427754][ T8706] team0: Port device batadv2 added
[  106.542355][ T8690] chnl_net:caif_netlink_parms(): no params data found
[  106.578179][ T5856] vxcan1 speed is unknown, defaulting to 1000
[  106.612865][ T5673] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.657549][ T5673] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.663621][ T8690] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.668502][ T8690] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.670851][ T8690] bridge_slave_0: entered allmulticast mode
[  106.673671][ T8690] bridge_slave_0: entered promiscuous mode
[  106.678913][ T8690] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.681557][ T8690] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.685101][ T8690] bridge_slave_1: entered allmulticast mode
[  106.687815][ T8690] bridge_slave_1: entered promiscuous mode
[  106.709978][ T5673] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.728444][ T8690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.733468][ T8690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.760782][ T8710] batadv2: left promiscuous mode
[  106.768457][ T8710] team0: Port device batadv2 removed
[  106.791429][ T8690] team0: Port device team_slave_0 added
[  106.801085][ T8690] team0: Port device team_slave_1 added
[  106.825519][ T8690] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.827873][ T8690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.839579][ T8690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  106.863748][ T8690] batman_adv: batadv0: Adding interface: batadv_slave_1
[  106.866609][ T8690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.875188][ T8690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  106.915761][ T5673] bridge_slave_1: left allmulticast mode
[  106.917653][ T5673] bridge_slave_1: left promiscuous mode
[  106.920003][ T5673] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.924229][ T5673] bridge_slave_0: left allmulticast mode
[  106.926688][ T5673] bridge_slave_0: left promiscuous mode
[  106.928595][ T5673] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.115493][ T5673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  107.119837][ T5673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  107.123349][ T5673] bond0 (unregistering): Released all slaves
[  107.135765][ T8690] hsr_slave_0: entered promiscuous mode
[  107.138041][ T8690] hsr_slave_1: entered promiscuous mode
[  107.140258][ T8690] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  107.142740][ T8690] Cannot create hsr debugfs directory
[  107.275786][ T8718] syzkaller1: entered promiscuous mode
[  107.280684][ T8718] syzkaller1: entered allmulticast mode
[  107.489923][ T8728] syzkaller1: entered promiscuous mode
[  107.491853][ T8728] syzkaller1: entered allmulticast mode
[  107.567808][ T5673] hsr_slave_0: left promiscuous mode
[  107.569893][ T5673] hsr_slave_1: left promiscuous mode
[  107.573861][ T5673] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.578660][ T5673] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.581461][ T5673] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.583961][ T5673] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.585846][ T8731] __nla_validate_parse: 4 callbacks suppressed
[  107.585855][ T8731] netlink: 20 bytes leftover after parsing attributes in process `syz.0.794'.
[  107.602466][ T5673] veth1_macvtap: left promiscuous mode
[  107.604541][ T5673] veth0_macvtap: left promiscuous mode
[  107.606468][ T5673] veth1_vlan: left promiscuous mode
[  107.608213][ T5673] veth0_vlan: left promiscuous mode
[  107.854101][ T5673] team0 (unregistering): Port device team_slave_1 removed
[  107.879930][ T5673] team0 (unregistering): Port device team_slave_0 removed
[  108.160454][ T8738] netlink: 56 bytes leftover after parsing attributes in process `syz.0.797'.
[  108.195010][   T54] Bluetooth: hci2: command tx timeout
[  108.215295][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.798'.
[  108.228817][ T8741] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  108.234411][ T8741] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.251557][ T8741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.798'.
[  108.266093][ T8741] sctp: [Deprecated]: syz.1.798 (pid 8741) Use of int in max_burst socket option.
[  108.266093][ T8741] Use struct sctp_assoc_value instead
[  108.333614][ T8748] netlink: 76 bytes leftover after parsing attributes in process `syz.0.799'.
[  108.398052][ T8755] netlink: 148 bytes leftover after parsing attributes in process `syz.0.802'.
[  108.431970][ T8690] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  108.443922][ T8690] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  108.450596][ T8690] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  108.460562][ T8690] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  108.568434][ T8690] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.588621][ T8690] 8021q: adding VLAN 0 to HW filter on device team0
[  108.596104][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.598468][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.602561][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.604853][ T8774] netlink: 40 bytes leftover after parsing attributes in process `syz.0.805'.
[  108.607745][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.610419][ T8774] netlink: 64 bytes leftover after parsing attributes in process `syz.0.805'.
[  108.618936][ T8774] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  108.640887][ T8776] macvlan0: entered allmulticast mode
[  108.657512][ T8776] netlink: 'syz.1.806': attribute type 1 has an invalid length.
[  108.659936][ T8776] netlink: 'syz.1.806': attribute type 2 has an invalid length.
[  108.752206][ T8789] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.764018][ T8794] ip6t_srh: unknown srh invflags 4000
[  108.775100][ T8789] netlink: 188 bytes leftover after parsing attributes in process `syz.0.810'.
[  108.787586][ T8794] netlink: 188 bytes leftover after parsing attributes in process `syz.0.810'.
[  108.795831][ T8789] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  108.799090][ T8789] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  108.810020][ T8690] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.812810][ T8794] netlink: 'syz.0.810': attribute type 21 has an invalid length.
[  108.819026][ T8789] netlink: 'syz.0.810': attribute type 21 has an invalid length.
[  108.821591][ T8789] IPv6: NLM_F_CREATE should be specified when creating new route
[  108.825055][ T8797] IPv6: Can't replace route, no match found
[  108.830919][ T8794] IPv6: NLM_F_CREATE should be specified when creating new route
[  108.848485][ T8690] veth0_vlan: entered promiscuous mode
[  108.866473][ T8690] veth1_vlan: entered promiscuous mode
[  108.882754][ T8799] vcan0: left promiscuous mode
[  108.892964][ T8799] dummy0: left promiscuous mode
[  108.899955][ T8799] nlmon0: left promiscuous mode
[  108.903771][ T8799] caif0: left promiscuous mode
[  109.025939][ T8799] macvlan0: left allmulticast mode
[  109.074361][ T8799] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.077305][ T8799] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.080232][ T8799] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.083129][ T8799] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.099799][ T8799] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  109.126618][ T8799] vlan4: left promiscuous mode
[  109.128316][ T8799] team0: left promiscuous mode
[  109.131267][ T8799] bridge0: left promiscuous mode
[  109.133752][ T8799] bridge0: left allmulticast mode
[  109.138803][ T8799] netdevsim netdevsim1 netdevsim0: unset [1, 2] type 2 family 0 port 33758 - 0
[  109.141778][ T8799] netdevsim netdevsim1 netdevsim1: unset [1, 2] type 2 family 0 port 33758 - 0
[  109.144970][ T8799] netdevsim netdevsim1 netdevsim2: unset [1, 2] type 2 family 0 port 33758 - 0
[  109.147946][ T8799] netdevsim netdevsim1 netdevsim3: unset [1, 2] type 2 family 0 port 33758 - 0
[  109.151035][ T8799] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 42356 - 0
[  109.153951][ T8799] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 42356 - 0
[  109.160906][ T8799] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 42356 - 0
[  109.165350][ T8799] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 42356 - 0
[  109.168597][ T8799] geneve2: left promiscuous mode
[  109.170332][ T8799] geneve2: left allmulticast mode
[  109.177078][ T8799] bond1: left promiscuous mode
[  109.183829][ T8799] veth3: left promiscuous mode
[  109.188195][ T8799] bond3: left promiscuous mode
[  109.190670][ T8799] bond3: left allmulticast mode
[  109.193288][ T8799] bridge2: left promiscuous mode
[  109.197598][ T8799] bridge2: left allmulticast mode
[  109.201333][ T8799] vlan3: left allmulticast mode
[  109.203786][ T8799] bridge_slave_0: left allmulticast mode
[  109.218289][ T8690] veth0_macvtap: entered promiscuous mode
[  109.229187][ T8690] veth1_macvtap: entered promiscuous mode
[  109.253510][ T8690] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.278090][  T971] hid-generic 0005:04F3:8002.0002: collection stack underflow
[  109.280945][ T8690] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.290358][  T971] hid-generic 0005:04F3:8002.0002: item 0 0 0 12 parsing failed
[  109.294651][ T8690] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.299125][  T971] hid-generic 0005:04F3:8002.0002: probe with driver hid-generic failed with error -22
[  109.304837][ T8690] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.316234][ T8690] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.319037][ T8690] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.393632][  T904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.408049][  T904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.438577][  T904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.445182][  T904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.763787][ T8836] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.892318][ T8844] xt_bpf: check failed: parse error
[  109.898071][ T8844] sctp: [Deprecated]: syz.0.827 (pid 8844) Use of int in max_burst socket option deprecated.
[  109.898071][ T8844] Use struct sctp_assoc_value instead
[  110.402784][ T8863] bond0: invalid ARP target 0.0.0.0 specified for addition
[  110.406544][ T8863] bond0: option arp_ip_target: invalid value (0)
[  110.524328][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.530656][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.769344][ T8899] netlink: 'syz.0.845': attribute type 10 has an invalid length.
[  110.772492][ T8899] team0: left promiscuous mode
[  110.778781][ T8899] team0: Cannot enslave team device to itself
[  110.920108][ T8908] netlink: 'syz.0.848': attribute type 4 has an invalid length.
[  111.055830][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.251596][ T8923] netlink: 'syz.1.854': attribute type 9 has an invalid length.
[  112.328245][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  112.332001][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  112.335125][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  112.338376][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  112.343869][ T5817] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  112.382245][ T8928] vxcan1 speed is unknown, defaulting to 1000
[  112.661079][ T8928] chnl_net:caif_netlink_parms(): no params data found
[  112.748130][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.753833][ T8928] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.758981][ T8928] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.761386][ T8928] bridge_slave_0: entered allmulticast mode
[  112.765045][ T8928] bridge_slave_0: entered promiscuous mode
[  112.770556][ T8928] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.772913][ T8928] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.779855][ T8928] bridge_slave_1: entered allmulticast mode
[  112.782636][ T8928] bridge_slave_1: entered promiscuous mode
[  112.796917][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.823299][ T8928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.838037][ T8928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.853851][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.883070][ T8928] team0: Port device team_slave_0 added
[  112.890054][ T8928] team0: Port device team_slave_1 added
[  112.913519][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.915947][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.923919][ T8928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.932650][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.937068][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.946333][ T8928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.027834][ T8928] hsr_slave_0: entered promiscuous mode
[  113.030106][ T8928] hsr_slave_1: entered promiscuous mode
[  113.032772][ T8928] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  113.036387][ T8928] Cannot create hsr debugfs directory
[  113.061549][   T12] bridge_slave_1: left allmulticast mode
[  113.063370][   T12] bridge_slave_1: left promiscuous mode
[  113.068491][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.072383][   T12] bridge_slave_0: left allmulticast mode
[  113.075832][   T12] bridge_slave_0: left promiscuous mode
[  113.077880][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.162518][ T8961] __nla_validate_parse: 7 callbacks suppressed
[  113.162532][ T8961] netlink: 16 bytes leftover after parsing attributes in process `syz.1.865'.
[  113.330840][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  113.335423][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  113.338959][   T12] bond0 (unregistering): Released all slaves
[  113.422452][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.868'.
[  113.727692][   T12] hsr_slave_0: left promiscuous mode
[  113.730087][   T12] hsr_slave_1: left promiscuous mode
[  113.732244][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.747601][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.756081][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.758677][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.772088][   T12] veth1_macvtap: left promiscuous mode
[  113.773883][   T12] veth0_macvtap: left promiscuous mode
[  113.776497][   T12] veth1_vlan: left promiscuous mode
[  113.778450][   T12] veth0_vlan: left promiscuous mode
[  114.029168][   T12] team0 (unregistering): Port device team_slave_1 removed
[  114.051790][   T12] team0 (unregistering): Port device team_slave_0 removed
[  114.297836][ T8985] netlink: 44 bytes leftover after parsing attributes in process `syz.1.871'.
[  114.308431][ T8985] netlink: 'syz.1.871': attribute type 29 has an invalid length.
[  114.345047][ T8985] netlink: 'syz.1.871': attribute type 29 has an invalid length.
[  114.347915][ T8985] netlink: 500 bytes leftover after parsing attributes in process `syz.1.871'.
[  114.359360][ T5817] Bluetooth: hci2: command tx timeout
[  114.433114][ T8928] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  114.471832][ T8928] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  114.496969][ T8928] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  114.517523][ T8928] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  114.574751][ T9001] netlink: 20 bytes leftover after parsing attributes in process `syz.0.875'.
[  114.588857][ T9001] trusted_key: syz.0.875 sent an empty control message without MSG_MORE.
[  114.601930][ T9001] pim6reg0: tun_chr_ioctl cmd 1074025694
[  114.698490][ T8928] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.723059][ T8928] 8021q: adding VLAN 0 to HW filter on device team0
[  114.732562][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.734850][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.756799][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.759195][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.915156][ T9030] syzkaller1: entered promiscuous mode
[  114.916961][ T9030] syzkaller1: entered allmulticast mode
[  114.951044][ T8928] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.018062][ T8928] veth0_vlan: entered promiscuous mode
[  115.036182][ T8928] veth1_vlan: entered promiscuous mode
[  115.038798][ T9035] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  115.078946][ T8928] veth0_macvtap: entered promiscuous mode
[  115.085489][ T8928] veth1_macvtap: entered promiscuous mode
[  115.107471][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.116479][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.145922][ T8928] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.148757][ T8928] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.161749][ T8928] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.168666][ T8928] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.241523][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.244020][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.270178][ T9055] netlink: 'syz.1.889': attribute type 1 has an invalid length.
[  115.281526][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.284057][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.337948][ T9057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.891'.
[  115.463087][ T9066] netlink: 'syz.0.894': attribute type 2 has an invalid length.
[  115.472325][ T9066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.894'.
[  115.508607][ T9069] netlink: 60 bytes leftover after parsing attributes in process `syz.0.895'.
[  115.659484][ T9084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.901'.
[  115.862618][ T9102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.909'.
[  116.095183][ T9123] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  116.228064][ T9137] tipc: Can't bind to reserved service type 2
[  116.857676][ T9184] openvswitch: netlink: IP tunnel TTL not specified.
[  117.152947][ T9199] netlink: 'syz.0.945': attribute type 1 has an invalid length.
[  117.219915][ T5863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.401750][ T9204] __nla_validate_parse: 9 callbacks suppressed
[  118.401761][ T9204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.948'.
[  118.416010][ T9204] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.423149][ T9204] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.433278][ T9204] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.436131][ T9204] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.439018][ T9204] geneve3: entered promiscuous mode
[  118.441743][ T9204] geneve3: entered allmulticast mode
[  118.564218][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  118.568771][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  118.571501][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  118.572684][ T9213] rdma_rxe: rxe_newlink: failed to add vxcan1
[  118.577919][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  118.581220][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  118.627299][ T9212] vxcan1 speed is unknown, defaulting to 1000
[  118.698979][ T9220] netlink: 52 bytes leftover after parsing attributes in process `syz.1.953'.
[  118.830516][ T5863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.905264][ T9227] netlink: 44 bytes leftover after parsing attributes in process `syz.1.956'.
[  118.909279][ T5863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.958444][ T9229] netlink: 40 bytes leftover after parsing attributes in process `syz.0.955'.
[  118.986517][ T5863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.017645][ T9212] chnl_net:caif_netlink_parms(): no params data found
[  119.141897][ T9212] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.144785][ T9212] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.147430][ T9212] bridge_slave_0: entered allmulticast mode
[  119.152334][ T9212] bridge_slave_0: entered promiscuous mode
[  119.171500][ T9212] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.173762][ T9212] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.194780][ T9212] bridge_slave_1: entered allmulticast mode
[  119.197432][ T9212] bridge_slave_1: entered promiscuous mode
[  119.277332][ T5863] bridge_slave_1: left allmulticast mode
[  119.279437][ T5863] bridge_slave_1: left promiscuous mode
[  119.281369][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.294932][ T5863] bridge_slave_0: left allmulticast mode
[  119.299731][ T5863] bridge_slave_0: left promiscuous mode
[  119.301670][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.510785][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  119.515290][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  119.519071][ T5863] bond0 (unregistering): Released all slaves
[  119.527571][ T9212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  119.533339][ T9212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  119.605853][ T9212] team0: Port device team_slave_0 added
[  119.610305][ T9212] team0: Port device team_slave_1 added
[  119.678660][ T9212] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.684798][ T9212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.704058][ T9212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.710180][ T9212] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.712412][ T9212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.734227][ T9212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.748928][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.963'.
[  119.762792][  T904] smc: removing ib device syz2
[  119.822237][ T5819] vxcan1 speed is unknown, defaulting to 1000
[  119.824461][ T5819] syz2: Port: 1 Link DOWN
[  120.019690][ T9212] hsr_slave_0: entered promiscuous mode
[  120.025301][ T9212] hsr_slave_1: entered promiscuous mode
[  120.030607][ T9212] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  120.039537][ T9212] Cannot create hsr debugfs directory
[  120.044879][ T9262] netlink: 64 bytes leftover after parsing attributes in process `syz.1.966'.
[  120.062005][ T9262] netlink: 64 bytes leftover after parsing attributes in process `syz.1.966'.
[  120.182925][ T9269] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.370416][ T9273] netlink: 'syz.1.969': attribute type 2 has an invalid length.
[  120.372974][ T9273] netlink: 119 bytes leftover after parsing attributes in process `syz.1.969'.
[  120.399125][ T9273] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.969'.
[  120.465823][ T5863] hsr_slave_0: left promiscuous mode
[  120.469281][ T5863] hsr_slave_1: left promiscuous mode
[  120.473461][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.479495][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.492496][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.495442][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.515485][ T5863] veth1_macvtap: left promiscuous mode
[  120.517356][ T5863] veth0_macvtap: left promiscuous mode
[  120.519214][ T5863] veth1_vlan: left promiscuous mode
[  120.521014][ T5863] veth0_vlan: left promiscuous mode
[  120.594373][ T5817] Bluetooth: hci2: command tx timeout
[  120.631869][ T9277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.970'.
[  120.850369][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  120.875701][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  121.127709][ T9279] bridge0: entered promiscuous mode
[  121.129522][ T9279] bridge0: entered allmulticast mode
[  121.457577][ T9306] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  121.678541][ T9212] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  121.682871][ T9331] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  121.720544][ T9212] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  121.731755][ T9212] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  121.739302][ T9212] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  121.888613][ T9355] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.895618][ T9355] D: renamed from syzkaller0
[  121.898148][ T9355] tipc: Disabling bearer <eth:syzkaller0>
[  121.940040][ T9212] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.954665][ T9212] 8021q: adding VLAN 0 to HW filter on device team0
[  121.960138][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.962487][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.976633][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.978919][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.066979][ T9365] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  122.073202][   T33] audit: type=1800 audit(1751911413.346:2): pid=9365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.992" name="bpf-map" dev="anon_inodefs" ino=1082 res=0 errno=0
[  122.165376][ T9212] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.207212][ T9212] veth0_vlan: entered promiscuous mode
[  122.219288][ T9212] veth1_vlan: entered promiscuous mode
[  122.239296][ T9212] veth0_macvtap: entered promiscuous mode
[  122.243801][ T9212] veth1_macvtap: entered promiscuous mode
[  122.257837][ T9212] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.271252][ T9212] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.279156][ T9212] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.281980][ T9212] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.287189][ T9212] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.289954][ T9212] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.347155][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.353428][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.374221][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.377097][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.546020][ T9409] __nla_validate_parse: 13 callbacks suppressed
[  123.546292][ T9409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1004'.
[  124.158678][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.355735][   T26] wlan0: Trigger new scan to find an IBSS to join
[  125.582907][ T9421] xt_policy: too many policy elements
[  125.593473][ T9421] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1008'.
[  125.622280][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  125.625716][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  125.629491][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  125.633518][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  125.637105][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  126.426474][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.483323][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.493753][ T9428] vlan0: entered allmulticast mode
[  126.495984][ T9428] veth0_vlan: entered allmulticast mode
[  126.507706][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1009'.
[  126.561359][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.580982][ T9427] vlan0: left allmulticast mode
[  126.582782][ T9427] veth0_vlan: left allmulticast mode
[  126.696563][ T9422] chnl_net:caif_netlink_parms(): no params data found
[  126.731985][ T9438] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1011'.
[  126.810229][ T9422] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.812633][ T9422] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.817051][ T9422] bridge_slave_0: entered allmulticast mode
[  126.820424][ T9422] bridge_slave_0: entered promiscuous mode
[  126.823629][   T12] bridge_slave_1: left allmulticast mode
[  126.828132][   T12] bridge_slave_1: left promiscuous mode
[  126.830048][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.842790][   T12] bridge_slave_0: left allmulticast mode
[  126.846988][   T12] bridge_slave_0: left promiscuous mode
[  126.848916][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.115290][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  127.119757][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  127.123444][   T12] bond0 (unregistering): Released all slaves
[  127.133386][ T9422] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.135994][ T9422] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.138383][ T9422] bridge_slave_1: entered allmulticast mode
[  127.142558][ T9422] bridge_slave_1: entered promiscuous mode
[  127.183285][ T9422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  127.195203][ T9422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  127.242518][ T9422] team0: Port device team_slave_0 added
[  127.249137][ T9422] team0: Port device team_slave_1 added
[  127.269641][ T9422] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.274032][ T9422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.282932][ T9422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.298164][ T9422] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.300415][ T9422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.313720][ T9422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.318103][  T904] wlan0: Trigger new scan to find an IBSS to join
[  127.374052][ T9422] hsr_slave_0: entered promiscuous mode
[  127.378190][ T9422] hsr_slave_1: entered promiscuous mode
[  127.380421][ T9422] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  127.382935][ T9422] Cannot create hsr debugfs directory
[  127.408431][   T12] hsr_slave_0: left promiscuous mode
[  127.410717][   T12] hsr_slave_1: left promiscuous mode
[  127.414945][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.420767][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.434968][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.437328][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.455522][   T12] veth1_macvtap: left promiscuous mode
[  127.457334][   T12] veth0_macvtap: left promiscuous mode
[  127.459089][   T12] veth1_vlan: left promiscuous mode
[  127.460780][   T12] veth0_vlan: left promiscuous mode
[  127.717017][ T5817] Bluetooth: hci2: command tx timeout
[  127.790361][   T12] team0 (unregistering): Port device team_slave_1 removed
[  127.818571][   T12] team0 (unregistering): Port device team_slave_0 removed
[  128.523446][ T9422] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  128.529237][ T9422] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  128.534213][ T9422] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  128.540950][ T9422] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  128.637937][ T9422] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.670631][ T9422] 8021q: adding VLAN 0 to HW filter on device team0
[  128.680322][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.682639][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.693020][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.695424][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.844067][ T9422] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.891225][ T9422] veth0_vlan: entered promiscuous mode
[  128.898621][ T9422] veth1_vlan: entered promiscuous mode
[  128.923471][ T9422] veth0_macvtap: entered promiscuous mode
[  128.932207][ T9422] veth1_macvtap: entered promiscuous mode
[  128.948727][ T9422] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.957259][ T9422] batman_adv: batadv0: Interface activated: batadv_slave_1
[  128.962556][ T9422] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.965495][ T9422] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.968376][ T9422] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.971216][ T9422] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.035724][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.041111][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.062247][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.067490][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.742380][ T9553] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1028'.
[  130.354900][  T904] wlan0: Trigger new scan to find an IBSS to join
[  131.036247][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.354799][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.278172][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.280707][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.546830][ T9598] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1038'.
[  132.563171][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  132.567139][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  132.570029][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  132.573174][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  132.579244][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  132.605286][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'.
[  132.712731][ T9597] chnl_net:caif_netlink_parms(): no params data found
[  132.760898][ T9597] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.763350][ T9597] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.765923][ T9597] bridge_slave_0: entered allmulticast mode
[  132.768759][ T9597] bridge_slave_0: entered promiscuous mode
[  132.772699][ T9597] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.778340][ T9597] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.780980][ T9597] bridge_slave_1: entered allmulticast mode
[  132.783842][ T9597] bridge_slave_1: entered promiscuous mode
[  132.806552][ T9597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  132.812124][ T9597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  132.833314][ T9597] team0: Port device team_slave_0 added
[  132.837518][ T9597] team0: Port device team_slave_1 added
[  132.854864][ T9597] batman_adv: batadv0: Adding interface: batadv_slave_0
[  132.857244][ T9597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  132.865862][ T9597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  132.870317][ T9597] batman_adv: batadv0: Adding interface: batadv_slave_1
[  132.872694][ T9597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  132.881322][ T9597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  132.908328][ T9597] hsr_slave_0: entered promiscuous mode
[  132.910767][ T9597] hsr_slave_1: entered promiscuous mode
[  132.913127][ T9597] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  132.917092][ T9597] Cannot create hsr debugfs directory
[  133.484982][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.553443][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.616878][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1041'.
[  133.642915][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.662215][ T9615] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  133.666721][ T9615] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  133.845214][   T13] bridge_slave_1: left allmulticast mode
[  133.847054][   T13] bridge_slave_1: left promiscuous mode
[  133.848923][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.868778][   T13] bridge_slave_0: left allmulticast mode
[  133.870575][   T13] bridge_slave_0: left promiscuous mode
[  133.872377][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.117232][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  134.121585][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  134.126175][   T13] bond0 (unregistering): Released all slaves
[  134.347971][ T9643] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1044'.
[  134.427238][   T13] hsr_slave_0: left promiscuous mode
[  134.429508][   T13] hsr_slave_1: left promiscuous mode
[  134.431602][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.433926][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.449018][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.451586][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.478460][   T13] veth1_macvtap: left promiscuous mode
[  134.480331][   T13] veth0_macvtap: left promiscuous mode
[  134.482222][   T13] veth1_vlan: left promiscuous mode
[  134.484032][   T13] veth0_vlan: left promiscuous mode
[  134.598601][ T5817] Bluetooth: hci2: command tx timeout
[  134.790362][   T13] team0 (unregistering): Port device team_slave_1 removed
[  134.816730][   T13] team0 (unregistering): Port device team_slave_0 removed
[  135.093463][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.096309][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.167052][ T9597] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  135.184851][ T9597] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  135.208122][ T9597] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  135.227157][ T9597] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  135.284086][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1049'.
[  135.385187][ T9597] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.410754][ T9597] 8021q: adding VLAN 0 to HW filter on device team0
[  135.427882][  T904] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.430158][  T904] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.449228][  T904] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.451537][  T904] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.593500][ T9597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  135.669733][ T9685] netlink: 'syz.1.1054': attribute type 1 has an invalid length.
[  135.689682][ T9685] 8021q: adding VLAN 0 to HW filter on device bond5
[  135.736169][ T9597] 8021q: adding VLAN 0 to HW filter on device batadv0
[  135.757153][ T9685] bond5: (slave gretap1): making interface the new active one
[  135.760587][ T9685] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  135.787262][ T9597] veth0_vlan: entered promiscuous mode
[  135.793387][ T9597] veth1_vlan: entered promiscuous mode
[  135.817691][ T9597] veth0_macvtap: entered promiscuous mode
[  135.822301][ T9597] veth1_macvtap: entered promiscuous mode
[  135.834515][ T9597] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.841747][ T9597] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.850120][ T9597] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.853171][ T9597] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.856536][ T9597] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.859812][ T9597] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.919441][  T904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.922166][  T904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.943766][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.949987][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.299970][ T9685] syz.1.1054 (9685) used greatest stack depth: 19624 bytes left
[  136.425255][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1057'.
[  136.569194][ T9710] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.598496][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  137.602112][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  137.605112][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  137.607795][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  137.610255][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  137.627749][ T9722] netlink: 'syz.1.1063': attribute type 1 has an invalid length.
[  137.630272][ T9722] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1063'.
[  137.701454][ T9727] netlink: 'syz.1.1065': attribute type 10 has an invalid length.
[  137.703982][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1065'.
[  137.846590][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.867620][ T9719] chnl_net:caif_netlink_parms(): no params data found
[  137.948003][ T9719] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.950433][ T9719] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.952818][ T9719] bridge_slave_0: entered allmulticast mode
[  137.958819][ T9719] bridge_slave_0: entered promiscuous mode
[  137.962515][ T9719] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.965535][ T9719] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.967870][ T9719] bridge_slave_1: entered allmulticast mode
[  137.970533][ T9719] bridge_slave_1: entered promiscuous mode
[  137.991976][ T9719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  137.999120][ T9719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.021233][ T9719] team0: Port device team_slave_0 added
[  138.025482][ T9719] team0: Port device team_slave_1 added
[  138.044962][ T9719] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.047275][ T9719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.058344][ T9719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.062846][ T9719] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.065455][ T9719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.073514][ T9719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.101470][ T9719] hsr_slave_0: entered promiscuous mode
[  138.103828][ T9719] hsr_slave_1: entered promiscuous mode
[  138.108569][ T9719] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  138.110975][ T9719] Cannot create hsr debugfs directory
[  138.209911][ T9719] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  138.217098][ T9719] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  138.221559][ T9719] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  138.226060][ T9719] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  138.247601][ T9719] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.249984][ T9719] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.252476][ T9719] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.255814][ T9719] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.301338][ T9719] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.313585][  T904] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.317598][  T904] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.327578][ T9719] 8021q: adding VLAN 0 to HW filter on device team0
[  138.337780][  T904] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.340055][  T904] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.347948][  T904] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.350275][  T904] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.496264][ T9719] 8021q: adding VLAN 0 to HW filter on device batadv0
[  138.531666][ T9719] veth0_vlan: entered promiscuous mode
[  138.539036][ T9719] veth1_vlan: entered promiscuous mode
[  138.562681][ T9719] veth0_macvtap: entered promiscuous mode
[  138.569715][ T9719] veth1_macvtap: entered promiscuous mode
[  138.580998][ T9719] batman_adv: batadv0: Interface activated: batadv_slave_0
[  138.591937][ T9719] batman_adv: batadv0: Interface activated: batadv_slave_1
[  138.599286][ T9719] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.602067][ T9719] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.607455][ T9719] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.610297][ T9719] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.666681][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.669255][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.689763][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.692372][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.447165][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1069'.
[  139.482150][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1070'.
[  139.570273][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  139.576322][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  139.577495][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.582227][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  139.588463][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  139.590709][ T9762] tipc: Started in network mode
[  139.591011][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  139.592481][ T9762] tipc: Node identity 2ef1a5b27892, cluster identity 4711
[  139.616677][ T9762] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.627421][ T9762] syzkaller0: entered promiscuous mode
[  139.629262][ T9762] syzkaller0: entered allmulticast mode
[  139.643556][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.647578][   T54] Bluetooth: hci2: command tx timeout
[  139.724038][ T9767] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20001
[  139.736823][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.772368][ T9761] tipc: Resetting bearer <eth:syzkaller0>
[  139.783049][ T9761] tipc: Disabling bearer <eth:syzkaller0>
[  139.931777][ T9760] chnl_net:caif_netlink_parms(): no params data found
[  139.967117][   T12] bridge_slave_1: left allmulticast mode
[  139.969200][   T12] bridge_slave_1: left promiscuous mode
[  139.971136][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.977584][   T12] bridge_slave_0: left allmulticast mode
[  139.980475][   T12] bridge_slave_0: left promiscuous mode
[  139.983028][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.052428][ T9773] netlink: 'syz.3.1074': attribute type 21 has an invalid length.
[  140.237942][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  140.242376][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  140.249166][   T12] bond0 (unregistering): Released all slaves
[  140.266302][ T9773] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1074'.
[  140.376951][ T9781] netlink: 'syz.3.1076': attribute type 1 has an invalid length.
[  140.377199][ T9760] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.381907][ T9760] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.394951][ T9760] bridge_slave_0: entered allmulticast mode
[  140.405423][ T9760] bridge_slave_0: entered promiscuous mode
[  140.453988][ T9760] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.458287][ T9760] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.460679][ T9760] bridge_slave_1: entered allmulticast mode
[  140.473562][ T9760] bridge_slave_1: entered promiscuous mode
[  140.597693][ T9760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.609106][ T9793] pim6reg: entered allmulticast mode
[  140.630957][ T9793] macvlan0: entered allmulticast mode
[  140.637636][ T9760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  140.713724][ T9798] netlink: 'syz.1.1080': attribute type 1 has an invalid length.
[  140.717821][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1080'.
[  140.736008][   T12] hsr_slave_0: left promiscuous mode
[  140.740587][   T12] hsr_slave_1: left promiscuous mode
[  140.742679][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.745760][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.759106][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.761528][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.773094][   T12] veth1_macvtap: left promiscuous mode
[  140.776000][   T12] veth0_macvtap: left promiscuous mode
[  140.777874][   T12] veth1_vlan: left promiscuous mode
[  140.779559][   T12] veth0_vlan: left promiscuous mode
[  141.104120][   T12] team0 (unregistering): Port device team_slave_1 removed
[  141.127426][   T12] team0 (unregistering): Port device team_slave_0 removed
[  141.374489][ T9760] team0: Port device team_slave_0 added
[  141.383598][ T9793] macvlan0 (unregistering): left allmulticast mode
[  141.411191][ T9760] team0: Port device team_slave_1 added
[  141.454078][ T9760] batman_adv: batadv0: Adding interface: batadv_slave_0
[  141.463488][ T9760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.483085][ T9760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  141.490607][ T9760] batman_adv: batadv0: Adding interface: batadv_slave_1
[  141.492752][ T9760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.501980][ T9760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  141.520879][ T9818] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1085'.
[  141.622466][ T9760] hsr_slave_0: entered promiscuous mode
[  141.636242][   T54] Bluetooth: hci3: command tx timeout
[  141.649222][ T9760] hsr_slave_1: entered promiscuous mode
[  141.651327][ T9760] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  141.657622][ T9760] Cannot create hsr debugfs directory
[  141.718151][   T54] Bluetooth: hci2: command tx timeout
[  141.802704][ T9836] netlink: 'syz.3.1089': attribute type 1 has an invalid length.
[  141.842433][ T9839] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1088'.
[  141.856679][ T9838] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1088'.
[  141.928792][ T9851] Cannot find del_set index 0 as target
[  142.049346][ T9861] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0
[  142.049906][ T9857] IPVS: stopping backup sync thread 9861 ...
[  142.172869][ T9864] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  142.199443][ T9864] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1095'.
[  142.236639][ T9760] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  142.243510][ T9760] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  142.250351][ T9760] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  142.255063][ T9760] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  142.327930][ T9873] x_tables: duplicate underflow at hook 1
[  142.348670][ T9760] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.372131][ T9760] 8021q: adding VLAN 0 to HW filter on device team0
[  142.381294][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.383649][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.400260][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.402524][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.552487][ T9760] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.637030][ T9760] veth0_vlan: entered promiscuous mode
[  142.642462][ T9760] veth1_vlan: entered promiscuous mode
[  142.669806][ T9760] veth0_macvtap: entered promiscuous mode
[  142.673850][ T9760] veth1_macvtap: entered promiscuous mode
[  142.697245][ T9760] batman_adv: batadv0: Interface activated: batadv_slave_0
[  142.710257][ T9760] batman_adv: batadv0: Interface activated: batadv_slave_1
[  142.720173][ T9760] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.722975][ T9760] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.730044][ T9760] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.736446][ T9760] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.827180][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.832986][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.869847][  T904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.872655][  T904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.897824][ T9895] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1096'.
[  142.923796][ T9895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1096'.
[  142.926998][ T9895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1096'.
[  142.929808][ T9895] netlink: 'syz.1.1096': attribute type 18 has an invalid length.
[  143.328007][ T9923] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1104'.
[  143.353488][ T9924] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1103'.
[  143.427051][ T9928] @: renamed from bond_slave_0 (while UP)
[  143.794816][ T5817] Bluetooth: hci2: command tx timeout
[  143.946262][ T9963] SET target dimension over the limit!
[  143.989285][ T9968] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  144.048793][ T9970] netlink: 'syz.3.1120': attribute type 1 has an invalid length.
[  144.070696][ T9970] 8021q: adding VLAN 0 to HW filter on device bond1
[  144.125482][ T9977] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  144.300505][ T9985] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.425337][ T9988] netlink: 'syz.1.1125': attribute type 4 has an invalid length.
[  144.876984][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.875801][ T5817] Bluetooth: hci2: command 0x0419 tx timeout
[  146.585334][ T9998] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  146.728647][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.747585][T10000] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  146.753806][T10008] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  146.767813][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  146.772624][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  146.777106][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  146.781025][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  146.784208][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  146.837513][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.915372][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.930914][T10017] netlink: 'syz.1.1135': attribute type 1 has an invalid length.
[  147.020778][T10022] tipc: Cannot configure node identity twice
[  147.112436][T10009] chnl_net:caif_netlink_parms(): no params data found
[  147.211770][T10031] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[  147.223987][   T12] bridge_slave_1: left allmulticast mode
[  147.230840][   T12] bridge_slave_1: left promiscuous mode
[  147.233835][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.247488][   T12] bridge_slave_0: left allmulticast mode
[  147.249362][   T12] bridge_slave_0: left promiscuous mode
[  147.258950][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.635945][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  147.640334][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  147.644159][   T12] bond0 (unregistering): Released all slaves
[  147.724662][T10009] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.727190][T10009] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.729820][T10009] bridge_slave_0: entered allmulticast mode
[  147.733348][T10009] bridge_slave_0: entered promiscuous mode
[  147.772268][T10009] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.776938][T10009] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.779535][T10009] bridge_slave_1: entered allmulticast mode
[  147.782215][T10009] bridge_slave_1: entered promiscuous mode
[  147.852245][T10009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.873116][T10009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  147.959441][   T54] Bluetooth: hci2: command 0x0419 tx timeout
[  147.964475][T10070] __nla_validate_parse: 2 callbacks suppressed
[  147.964485][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1150'.
[  147.969595][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1150'.
[  148.019547][T10009] team0: Port device team_slave_0 added
[  148.030073][T10009] team0: Port device team_slave_1 added
[  148.053492][   T12] hsr_slave_0: left promiscuous mode
[  148.060110][   T12] hsr_slave_1: left promiscuous mode
[  148.063261][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.069536][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.072751][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  148.075822][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  148.123165][   T12] veth1_macvtap: left promiscuous mode
[  148.125298][   T12] veth0_macvtap: left promiscuous mode
[  148.127275][   T12] veth1_vlan: left promiscuous mode
[  148.129210][   T12] veth0_vlan: left promiscuous mode
[  148.397112][   T12] team0 (unregistering): Port device team_slave_1 removed
[  148.419698][   T12] team0 (unregistering): Port device team_slave_0 removed
[  148.651902][T10009] batman_adv: batadv0: Adding interface: batadv_slave_0
[  148.654155][T10009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.662547][T10009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.691371][T10009] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.703384][T10009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.717594][T10009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.777246][T10009] hsr_slave_0: entered promiscuous mode
[  148.781262][T10009] hsr_slave_1: entered promiscuous mode
[  148.783459][T10009] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  148.786486][T10009] Cannot create hsr debugfs directory
[  148.834416][   T54] Bluetooth: hci3: command tx timeout
[  148.862062][T10091] ip6tnl2: entered promiscuous mode
[  148.863789][T10091] ip6tnl2: entered allmulticast mode
[  148.887359][T10091] team0: Refused to change device type
[  149.124079][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1157'.
[  149.128935][T10106] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1157'.
[  149.428685][T10129] netlink: 'syz.1.1164': attribute type 5 has an invalid length.
[  149.457728][T10131] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1165'.
[  149.489235][T10009] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  149.497222][T10009] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  149.508090][T10009] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  149.523221][T10009] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  149.638093][T10009] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.652739][T10009] 8021q: adding VLAN 0 to HW filter on device team0
[  149.667995][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.670381][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.686197][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.688608][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.757123][T10009] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  149.765884][T10009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  149.990145][T10009] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.038926][T10009] veth0_vlan: entered promiscuous mode
[  150.066762][T10009] veth1_vlan: entered promiscuous mode
[  150.138077][T10009] veth0_macvtap: entered promiscuous mode
[  150.149441][T10009] veth1_macvtap: entered promiscuous mode
[  150.176702][T10189] bridge_slave_0: left allmulticast mode
[  150.178553][T10189] bridge_slave_0: left promiscuous mode
[  150.182431][T10189] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.196453][T10189] bridge_slave_1: left allmulticast mode
[  150.198259][T10189] bridge_slave_1: left promiscuous mode
[  150.204805][T10189] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.211564][T10189] bond0: (slave 0@): Releasing backup interface
[  150.220022][T10189] bond0: (slave bond_slave_1): Releasing backup interface
[  150.247025][T10189] team0: Port device team_slave_0 removed
[  150.257704][T10189] team0: Port device team_slave_1 removed
[  150.264923][T10189] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.267487][T10189] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.276091][T10189] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.278979][T10189] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.309211][T10009] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.327954][T10009] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.344955][T10212] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1177'.
[  150.352514][T10009] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.358793][T10009] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.361839][T10009] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.374503][T10009] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.454174][  T904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.463181][  T904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.491543][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.495995][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.871160][T10216] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1178'.
[  150.914475][ T5817] Bluetooth: hci3: command tx timeout
[  151.028514][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1181'.
[  151.405810][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1192'.
[  151.409452][T10260] Cannot find set identified by id 2 to match
[  151.648134][T10267] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1194'.
[  154.112823][T10338] __nla_validate_parse: 2 callbacks suppressed
[  154.112833][T10338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1218'.
[  154.438830][T10346] vlan0: entered promiscuous mode
[  154.552907][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1226'.
[  154.594474][T10365] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1227'.
[  154.597254][T10365] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.613264][T10365] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1227'.
[  154.621616][T10365] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.755649][T10371] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.907923][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1232'.
[  154.913896][T10384] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  154.916870][T10384] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  154.919649][T10384] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  154.922431][T10384] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  154.958080][T10384] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  154.960976][T10384] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  154.963753][T10384] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  154.966618][T10384] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.097556][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1235'.
[  155.109743][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1235'.
[  155.203533][T10398] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1237'.
[  155.225018][T10398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1237'.
[  155.566149][T10432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1246'.
[  155.688706][T10449] netlink: 'syz.3.1251': attribute type 1 has an invalid length.
[  155.700433][T10449] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  155.809604][T10462] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  155.816980][T10464] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  156.083209][T10491] can: request_module (can-proto-0) failed.
[  156.885759][T10538] sctp: [Deprecated]: syz.3.1282 (pid 10538) Use of struct sctp_assoc_value in delayed_ack socket option.
[  156.885759][T10538] Use struct sctp_sack_info instead
[  156.941755][T10540] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.944710][T10540] syzkaller0: entered promiscuous mode
[  156.949055][T10540] syzkaller0: entered allmulticast mode
[  157.038030][T10540] tipc: Resetting bearer <eth:syzkaller0>
[  157.045574][T10539] tipc: Resetting bearer <eth:syzkaller0>
[  157.057571][T10539] tipc: Disabling bearer <eth:syzkaller0>
[  157.469939][T10558] netlink: 'syz.3.1288': attribute type 1 has an invalid length.
[  157.693170][T10567] netlink: 'syz.3.1292': attribute type 1 has an invalid length.
[  157.942955][T10576] netlink: 'syz.3.1294': attribute type 9 has an invalid length.
[  157.949914][T10576] netlink: 'syz.3.1294': attribute type 58 has an invalid length.
[  158.172517][T10586] netlink: 'syz.3.1296': attribute type 1 has an invalid length.
[  158.369158][T10593] netlink: 'syz.1.1298': attribute type 2 has an invalid length.
[  158.554448][T10603] netlink: 'syz.1.1301': attribute type 1 has an invalid length.
[  158.616728][T10606] netlink: 'syz.1.1302': attribute type 3 has an invalid length.
[  158.797245][T10620] netlink: 'syz.1.1305': attribute type 21 has an invalid length.
[  159.004773][T10624] : entered promiscuous mode
[  159.117759][T10628] __nla_validate_parse: 14 callbacks suppressed
[  159.117769][T10628] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1307'.
[  159.410082][T10637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1310'.
[  159.587549][T10639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1311'.
[  159.590425][T10639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1311'.
[  159.604551][T10640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1311'.
[  159.607483][T10640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1311'.
[  159.966526][T10650] batman_adv: batadv0: Adding interface: netdevsim0
[  159.968722][T10650] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  159.996083][T10650] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  160.117808][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1318'.
[  160.126549][T10660] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.128153][T10659] syzkaller1: entered promiscuous mode
[  160.134142][T10659] syzkaller1: entered allmulticast mode
[  160.527372][T10682] tipc: New replicast peer: 255.255.255.255
[  160.534883][T10682] tipc: Enabled bearer <udp:syz2>, priority 10
[  160.546770][T10682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1323'.
[  160.549687][T10682] tipc: Disabling bearer <udp:syz2>
[  161.359846][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'.
[  161.605179][T10696] batman_adv: batadv0: Removing interface: netdevsim0
[  161.616020][T10696] bond5: (slave gretap1): Releasing active interface
[  161.709473][T10702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1329'.
[  162.718648][T10721] validate_nla: 4 callbacks suppressed
[  162.718659][T10721] netlink: 'syz.3.1338': attribute type 15 has an invalid length.
[  163.221256][T10764] vlan2: entered promiscuous mode
[  163.222869][T10764] bond0: entered promiscuous mode
[  163.234587][T10764] vlan2: entered allmulticast mode
[  163.237041][T10764] bond0: entered allmulticast mode
[  163.492005][T10780] Bluetooth: MGMT ver 1.23
[  163.635755][  T753] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  164.204811][T10835] __nla_validate_parse: 11 callbacks suppressed
[  164.204823][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1371'.
[  164.211291][T10835] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1371'.
[  164.288661][T10835] bond0 (unregistering): Released all slaves
[  164.490411][T10840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1372'.
[  164.542589][T10841] x9: renamed from bridge_slave_0 (while UP)
[  164.909665][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1374'.
[  165.383730][T10859] x_tables: ip6_tables: ipcomp match: only valid for protocol 108
[  165.430258][T10861] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1381'.
[  165.446269][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1381'.
[  165.449681][T10861] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1381'.
[  165.483319][T10863] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1382'.
[  165.500702][T10863] syzkaller0: entered promiscuous mode
[  165.502567][T10863] syzkaller0: entered allmulticast mode
[  165.825166][T10874] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1385'.
[  165.828127][T10874] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1385'.
[  166.100586][T10892] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  166.730263][T10911] batman_adv: batadv0: Adding interface: gretap1
[  166.739245][T10911] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.778631][T10911] batman_adv: batadv0: Interface activated: gretap1
[  166.948204][T10918] xt_hashlimit: max too large, truncated to 1048576
[  166.954152][T10918] Cannot find add_set index 3 as target
[  167.648438][T10934] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  168.249623][T10947] batman_adv: batadv0: Interface deactivated: gretap1
[  168.256766][T10947] batman_adv: batadv0: Removing interface: gretap1
[  169.395424][T10979] __nla_validate_parse: 8 callbacks suppressed
[  169.395434][T10979] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1417'.
[  169.429194][T10979] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2
[  169.431987][T10979] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0
[  170.365778][T10997] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1423'.
[  170.368579][T10997] nbd: must specify at least one socket
[  170.370362][T10997] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1423'.
[  170.373287][T10997] nbd: must specify at least one socket
[  170.450872][T11009] ip6tnl1: entered promiscuous mode
[  170.452591][T11009] ip6tnl1: entered allmulticast mode
[  170.475751][T11009] team0: Device ip6tnl1 is up. Set it down before adding it as a team port
[  171.041281][T11050] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.788108][T11064] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  171.917973][T11074] batman_adv: batadv0: Adding interface: dummy0
[  171.920004][T11074] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  171.930635][T11074] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  172.068788][T11086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1447'.
[  172.301687][T11112] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1456'.
[  172.320633][ T5841] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  172.323270][ T5841] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  172.345052][ T5842] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  172.411708][T11122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1459'.
[  172.430487][T11122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1459'.
[  173.154736][ T5856] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  173.235003][ T5856] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  173.517410][T11151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1467'.
[  173.690699][T11163] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1471'.
[  174.109338][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1479'.
[  174.434097][T11206] pim6reg: entered allmulticast mode
[  174.857868][T11221] netlink: 'syz.1.1486': attribute type 4 has an invalid length.
[  175.012088][T11228] __nla_validate_parse: 1 callbacks suppressed
[  175.012100][T11228] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1488'.
[  175.207366][T11240] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1494'.
[  175.478653][T11253] netlink: 'syz.1.1499': attribute type 9 has an invalid length.
[  175.481269][T11253] netlink: 'syz.1.1499': attribute type 6 has an invalid length.
[  175.772746][T11260] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  175.779323][T11260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  175.782678][T11260] hsr0: entered allmulticast mode
[  175.785675][T11260] hsr_slave_0: entered allmulticast mode
[  175.788190][T11260] hsr_slave_1: entered allmulticast mode
[  176.211337][ T5876] IPVS: starting estimator thread 0...
[  176.233326][T11298] tipc: Enabling of bearer <et:g> rejected, media not registered
[  176.315999][T11296] IPVS: using max 80 ests per chain, 192000 per kthread
[  176.434488][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  176.477643][T11308] xt_CT: You must specify a L4 protocol and not use inversions on it
[  176.523656][T11310] Bluetooth: MGMT ver 1.23
[  176.769962][T11323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1524'.
[  176.772968][T11323] veth1_to_team: entered promiscuous mode
[  176.776889][T11323] veth1_to_team: entered allmulticast mode
[  176.809185][T11325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1525'.
[  177.047114][T11336] syzkaller1: entered promiscuous mode
[  177.048885][T11336] syzkaller1: entered allmulticast mode
[  177.149844][T11338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1530'.
[  177.168281][T11338] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.171831][T11338] syzkaller0: entered promiscuous mode
[  177.173695][T11338] syzkaller0: entered allmulticast mode
[  177.179156][T11338] tipc: Resetting bearer <eth:syzkaller0>
[  177.183221][T11337] tipc: Resetting bearer <eth:syzkaller0>
[  177.195123][T11337] tipc: Disabling bearer <eth:syzkaller0>
[  177.277745][T11340] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  177.425344][T11344] netlink: 'syz.1.1533': attribute type 2 has an invalid length.
[  177.463675][T11344] netlink: 'syz.1.1533': attribute type 37 has an invalid length.
[  177.474692][T11344] netlink: 864 bytes leftover after parsing attributes in process `syz.1.1533'.
[  177.624642][T11351] syzkaller1: entered promiscuous mode
[  177.626405][T11351] syzkaller1: entered allmulticast mode
[  177.727656][T11355] netlink: 'syz.1.1538': attribute type 3 has an invalid length.
[  177.730077][T11355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  177.835439][T11362] netlink: 'syz.1.1541': attribute type 11 has an invalid length.
[  177.977931][T11375] syzkaller1: entered promiscuous mode
[  177.979756][T11375] syzkaller1: entered allmulticast mode
[  178.004523][T11377] netlink: 'syz.1.1547': attribute type 12 has an invalid length.
[  178.967703][T11386] x_tables: duplicate underflow at hook 3
[  179.076832][T11397] ieee802154 phy0 wpan0: encryption failed: -22
[  179.153649][T11405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1558'.
[  179.212646][T11412] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  179.220338][T11412] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  179.545607][T11426] netlink: 'syz.1.1564': attribute type 5 has an invalid length.
[  179.686470][T11436] syzkaller1: entered promiscuous mode
[  179.688193][T11436] syzkaller1: entered allmulticast mode
[  180.051884][T11445] batman_adv: batadv0: Removing interface: dummy0
[  180.084933][ T5819] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  180.394589][ T5819] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  180.887633][T11457] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1574'.
[  180.968136][T11462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1576'.
[  181.054006][T11464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1577'.
[  181.149305][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1579'.
[  181.152239][T11470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1579'.
[  181.209502][T11472] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1580'.
[  181.417007][T11483] Cannot find add_set index 2 as target
[  181.419117][T11483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1585'.
[  181.661366][T11498] netlink: 34 bytes leftover after parsing attributes in process `syz.3.1591'.
[  181.672081][T11498] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  181.679548][T11498] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  181.690588][T11498] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1591'.
[  181.693640][T11498] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1591'.
[  182.309278][T11537] netlink: 'syz.1.1607': attribute type 1 has an invalid length.
[  182.345766][T11537] bond6: (slave gretap3): making interface the new active one
[  182.348710][T11537] bond6: (slave gretap3): Enslaving as an active interface with an up link
[  182.356843][T11537] vlan5: entered allmulticast mode
[  182.358605][T11537] bond6: entered allmulticast mode
[  182.360338][T11537] gretap3: entered allmulticast mode
[  182.363770][T11537] bond6: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  183.063379][T11576] netlink: 'syz.1.1621': attribute type 1 has an invalid length.
[  183.067263][T11576] netlink: 'syz.1.1621': attribute type 1 has an invalid length.
[  183.360828][T11600] netlink: 'syz.3.1630': attribute type 1 has an invalid length.
[  183.939116][T11650] netlink: 'syz.3.1643': attribute type 3 has an invalid length.
[  184.224371][T11652] nbd0: detected capacity change from 0 to 63
[  184.258546][T11658] bond6: (slave gretap3): Releasing active interface
[  184.260872][T11658] gretap3: left allmulticast mode
[  184.284590][ T5819] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  184.754377][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  184.813437][   T55] block nbd0: Receive control failed (result -104)
[  185.047067][T11679] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5)
[  185.138595][T11683] netlink: 'syz.1.1655': attribute type 12 has an invalid length.
[  185.246626][ T5876] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  185.613036][T11717] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  185.782083][T11732] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  185.785991][T11732] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  185.788803][T11732] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  185.791502][T11732] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  185.801519][T11732] netlink: 'syz.1.1674': attribute type 83 has an invalid length.
[  185.898181][T11742] veth0_macvtap: left promiscuous mode
[  186.108913][T11753] netlink: 'syz.3.1681': attribute type 2 has an invalid length.
[  186.117861][T11753] netlink: 'syz.3.1681': attribute type 1 has an invalid length.
[  186.120352][T11753] __nla_validate_parse: 12 callbacks suppressed
[  186.120359][T11753] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1681'.
[  186.596321][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.601670][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.606973][  T127] block nbd0: Connection timed out, retrying (0/1 alive)
[  186.609780][  T127] block nbd0: Connection timed out, retrying (0/1 alive)
[  186.612073][  T127] block nbd0: Connection timed out, retrying (0/1 alive)
[  186.614661][  T127] block nbd0: Connection timed out, retrying (0/1 alive)
[  186.617253][  T127] block nbd0: Dead connection, failed to find a fallback
[  186.619652][  T127] block nbd0: shutting down sockets
[  186.621493][  T127] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.624771][  T127] Buffer I/O error on dev nbd0, logical block 0, async page read
[  186.627460][  T127] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.630298][  T127] Buffer I/O error on dev nbd0, logical block 3, async page read
[  186.632775][  T127] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.636105][  T127] Buffer I/O error on dev nbd0, logical block 2, async page read
[  186.638601][  T127] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.641510][  T127] Buffer I/O error on dev nbd0, logical block 1, async page read
[  186.646048][T11659] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.649045][T11659] Buffer I/O error on dev nbd0, logical block 0, async page read
[  186.651783][T11659] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.656746][T11659] Buffer I/O error on dev nbd0, logical block 1, async page read
[  186.659321][T11659] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.662316][T11659] Buffer I/O error on dev nbd0, logical block 2, async page read
[  186.665169][T11659] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.668082][T11659] Buffer I/O error on dev nbd0, logical block 3, async page read
[  186.670658][T11659] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.673617][T11659] Buffer I/O error on dev nbd0, logical block 0, async page read
[  186.677549][T11659] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  186.680422][T11659] Buffer I/O error on dev nbd0, logical block 1, async page read
[  186.687462][T11659] ldm_validate_partition_table(): Disk read failed.
[  186.691207][T11659] Dev nbd0: unable to read RDB block 0
[  186.695672][T11659]  nbd0: unable to read partition table
[  186.705383][T11659] ldm_validate_partition_table(): Disk read failed.
[  186.708798][T11659] Dev nbd0: unable to read RDB block 0
[  186.711446][T11659]  nbd0: unable to read partition table
[  187.011166][T11830] xt_hashlimit: overflow, try lower: 72057594037927936/255
[  187.082596][T11834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1709'.
[  187.270082][T11842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1711'.
[  188.277919][T11857] openvswitch: netlink: IPv4 tun info is not correct
[  188.293093][T11857] openvswitch: netlink: IPv4 tun info is not correct
[  188.298559][T11857] openvswitch: netlink: IPv4 tun info is not correct
[  188.300930][T11857] openvswitch: netlink: IPv4 tun info is not correct
[  188.303219][T11857] openvswitch: netlink: IPv4 tun info is not correct
[  188.309072][T11857] openvswitch: netlink: IPv4 tun info is not correct
[  188.311517][T11857] openvswitch: netlink: IPv4 tun info is not correct
[  188.315133][T11857] openvswitch: netlink: IPv4 tun info is not correct
[  188.317834][T11857] openvswitch: netlink: IPv4 tun info is not correct
[  188.320704][T11857] openvswitch: netlink: IPv4 tun info is not correct
[  188.503341][T11870] xt_cgroup: xt_cgroup: no path or classid specified
[  188.507236][T11870] xt_cgroup: xt_cgroup: no path or classid specified
[  188.549772][T11873] syz.3.1722 (11873) used obsolete PPPIOCDETACH ioctl
[  188.707346][T11888] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1727'.
[  188.832020][T11900] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1732'.
[  188.837424][T11900] netlink: 'syz.1.1732': attribute type 1 has an invalid length.
[  188.887072][T11902] syz_tun: entered promiscuous mode
[  188.889041][T11902] macsec1: entered promiscuous mode
[  188.890867][T11902] macsec1: entered allmulticast mode
[  188.892642][T11902] syz_tun: entered allmulticast mode
[  188.898076][T11902] syz_tun: left allmulticast mode
[  188.899831][T11902] syz_tun: left promiscuous mode
[  189.015516][T11919] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1737'.
[  189.018528][T11919] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1737'.
[  189.021423][T11919] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1737'.
[  189.061567][T11919] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1737'.
[  189.064813][T11919] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1737'.
[  189.508120][T11956] syzkaller1: entered promiscuous mode
[  189.509936][T11956] syzkaller1: entered allmulticast mode
[  190.184676][T11983] netlink: 'syz.3.1762': attribute type 1 has an invalid length.
[  190.187099][T11983] nbd: error processing sock list
[  190.188820][T11983] block nbd1: shutting down sockets
[  190.456654][T11999] netlink: 'syz.3.1768': attribute type 3 has an invalid length.
[  190.460092][T11999] netlink: 'syz.3.1768': attribute type 3 has an invalid length.
[  190.469696][T11999] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  190.473468][T12001] syzkaller1: entered promiscuous mode
[  190.476486][T12001] syzkaller1: entered allmulticast mode
[  190.516925][   T47] ------------[ cut here ]------------
[  190.518839][   T47] workqueue: cannot queue hci_conn_timeout on wq hci3
[  190.521027][   T47] WARNING: CPU: 1 PID: 47 at kernel/workqueue.c:2258 __queue_work+0xd62/0xfe0
[  190.523791][   T47] Modules linked in:
[  190.525176][   T47] CPU: 1 UID: 0 PID: 47 Comm: kworker/1:1 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  190.529632][   T47] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  190.532836][   T47] Workqueue: events l2cap_chan_timeout
[  190.534565][   T47] RIP: 0010:__queue_work+0xd62/0xfe0
[  190.536214][   T47] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 69 0f 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff
[  190.542308][   T47] RSP: 0018:ffffc9000075f7a8 EFLAGS: 00010046
[  190.544302][   T47] RAX: b18482ab1b19c500 RBX: 0000000000000020 RCX: ffff888104a08000
[  190.546872][   T47] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  190.549357][   T47] RBP: 1ffff1100643e238 R08: ffff888136624293 R09: 1ffff11026cc4852
[  190.551815][   T47] R10: dffffc0000000000 R11: ffffed1026cc4853 R12: dffffc0000000000
[  190.554278][   T47] R13: ffff888107db4960 R14: ffff888100004008 R15: ffff8880321f1178
[  190.556798][   T47] FS:  0000000000000000(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[  190.559552][   T47] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  190.561575][   T47] CR2: 00007f8faabb7bac CR3: 000000002ae0a000 CR4: 00000000000006f0
[  190.564040][   T47] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  190.566546][   T47] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  190.569029][   T47] Call Trace:
[  190.570095][   T47]  <TASK>
[  190.571051][   T47]  ? __queue_delayed_work+0xe1/0x2d0
[  190.572761][   T47]  queue_delayed_work_on+0x18b/0x280
[  190.574438][   T47]  ? __pfx___cancel_work+0x10/0x10
[  190.576018][   T47]  ? __pfx_queue_delayed_work_on+0x10/0x10
[  190.577834][   T47]  ? hci_conn_drop+0x14d/0x280
[  190.579350][   T47]  l2cap_chan_del+0x285/0x5e0
[  190.580870][   T47]  l2cap_chan_close+0x597/0x980
[  190.582417][   T47]  ? __pfx_l2cap_chan_close+0x10/0x10
[  190.584124][   T47]  ? process_scheduled_works+0x9ef/0x17b0
[  190.585907][   T47]  l2cap_chan_timeout+0x158/0x390
[  190.587482][   T47]  ? process_scheduled_works+0x9ef/0x17b0
[  190.589299][   T47]  process_scheduled_works+0xae1/0x17b0
[  190.591084][   T47]  ? __pfx_process_scheduled_works+0x10/0x10
[  190.593004][   T47]  worker_thread+0x8a0/0xda0
[  190.594458][   T47]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  190.596420][   T47]  ? __kthread_parkme+0x7b/0x200
[  190.598001][   T47]  kthread+0x711/0x8a0
[  190.599306][   T47]  ? __pfx_worker_thread+0x10/0x10
[  190.600925][   T47]  ? __pfx_kthread+0x10/0x10
[  190.602440][   T47]  ? _raw_spin_unlock_irq+0x23/0x50
[  190.604056][   T47]  ? lockdep_hardirqs_on+0x9c/0x150
[  190.605698][   T47]  ? __pfx_kthread+0x10/0x10
[  190.607184][   T47]  ret_from_fork+0x3fc/0x770
[  190.608676][   T47]  ? __pfx_ret_from_fork+0x10/0x10
[  190.610307][   T47]  ? __switch_to_asm+0x39/0x70
[  190.611875][   T47]  ? __switch_to_asm+0x33/0x70
[  190.613439][   T47]  ? __pfx_kthread+0x10/0x10
[  190.614891][   T47]  ret_from_fork_asm+0x1a/0x30
[  190.616427][   T47]  </TASK>
[  190.617455][   T47] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  190.619722][   T47] CPU: 1 UID: 0 PID: 47 Comm: kworker/1:1 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  190.623582][   T47] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  190.626741][   T47] Workqueue: events l2cap_chan_timeout
[  190.628524][   T47] Call Trace:
[  190.629641][   T47]  <TASK>
[  190.630637][   T47]  dump_stack_lvl+0x99/0x250
[  190.632172][   T47]  ? __asan_memcpy+0x40/0x70
[  190.633728][   T47]  ? __pfx_dump_stack_lvl+0x10/0x10
[  190.635448][   T47]  ? __pfx__printk+0x10/0x10
[  190.636987][   T47]  panic+0x2db/0x790
[  190.638285][   T47]  ? __pfx_panic+0x10/0x10
[  190.639723][   T47]  ? show_trace_log_lvl+0x4fb/0x550
[  190.641358][   T47]  ? ret_from_fork_asm+0x1a/0x30
[  190.643008][   T47]  __warn+0x31b/0x4b0
[  190.644279][   T47]  ? __queue_work+0xd62/0xfe0
[  190.645821][   T47]  ? __queue_work+0xd62/0xfe0
[  190.647363][   T47]  report_bug+0x2be/0x4f0
[  190.648768][   T47]  ? __queue_work+0xd62/0xfe0
[  190.650243][   T47]  ? __queue_work+0xd62/0xfe0
[  190.651765][   T47]  ? __queue_work+0xd64/0xfe0
[  190.653243][   T47]  handle_bug+0x84/0x160
[  190.654576][   T47]  exc_invalid_op+0x1a/0x50
[  190.656055][   T47]  asm_exc_invalid_op+0x1a/0x20
[  190.657647][   T47] RIP: 0010:__queue_work+0xd62/0xfe0
[  190.659291][   T47] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 69 0f 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff
[  190.665264][   T47] RSP: 0018:ffffc9000075f7a8 EFLAGS: 00010046
[  190.667180][   T47] RAX: b18482ab1b19c500 RBX: 0000000000000020 RCX: ffff888104a08000
[  190.669713][   T47] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  190.672209][   T47] RBP: 1ffff1100643e238 R08: ffff888136624293 R09: 1ffff11026cc4852
[  190.674742][   T47] R10: dffffc0000000000 R11: ffffed1026cc4853 R12: dffffc0000000000
[  190.677186][   T47] R13: ffff888107db4960 R14: ffff888100004008 R15: ffff8880321f1178
[  190.679629][   T47]  ? __queue_work+0xd61/0xfe0
[  190.681148][   T47]  ? __queue_delayed_work+0xe1/0x2d0
[  190.682874][   T47]  queue_delayed_work_on+0x18b/0x280
[  190.684564][   T47]  ? __pfx___cancel_work+0x10/0x10
[  190.686174][   T47]  ? __pfx_queue_delayed_work_on+0x10/0x10
[  190.688017][   T47]  ? hci_conn_drop+0x14d/0x280
[  190.689504][   T47]  l2cap_chan_del+0x285/0x5e0
[  190.690970][   T47]  l2cap_chan_close+0x597/0x980
[  190.692511][   T47]  ? __pfx_l2cap_chan_close+0x10/0x10
[  190.694153][   T47]  ? process_scheduled_works+0x9ef/0x17b0
[  190.695964][   T47]  l2cap_chan_timeout+0x158/0x390
[  190.697597][   T47]  ? process_scheduled_works+0x9ef/0x17b0
[  190.699356][   T47]  process_scheduled_works+0xae1/0x17b0
[  190.701149][   T47]  ? __pfx_process_scheduled_works+0x10/0x10
[  190.703087][   T47]  worker_thread+0x8a0/0xda0
[  190.704625][   T47]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  190.706705][   T47]  ? __kthread_parkme+0x7b/0x200
[  190.708284][   T47]  kthread+0x711/0x8a0
[  190.709577][   T47]  ? __pfx_worker_thread+0x10/0x10
[  190.711197][   T47]  ? __pfx_kthread+0x10/0x10
[  190.712706][   T47]  ? _raw_spin_unlock_irq+0x23/0x50
[  190.714423][   T47]  ? lockdep_hardirqs_on+0x9c/0x150
[  190.716134][   T47]  ? __pfx_kthread+0x10/0x10
[  190.717680][   T47]  ret_from_fork+0x3fc/0x770
[  190.719141][   T47]  ? __pfx_ret_from_fork+0x10/0x10
[  190.720843][   T47]  ? __switch_to_asm+0x39/0x70
[  190.722652][   T47]  ? __switch_to_asm+0x33/0x70
[  190.724567][   T47]  ? __pfx_kthread+0x10/0x10
[  190.726093][   T47]  ret_from_fork_asm+0x1a/0x30
[  190.727735][   T47]  </TASK>
[  190.729545][   T47] Kernel Offset: disabled
[  190.731002][   T47] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:04:41  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4d920 RBX=ffff88804b03b1c0 RCX=ffff88810a140000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000437f4c0 RSP=ffffc9000437f360
R8 =ffffffff8fa10cf7 R9 =1ffffffff1f4219e R10=dffffc0000000000 R11=fffffbfff1f4219f
R12=1ffff11026cc7f5d R13=dffffc0000000000 R14=0000000000000001 R15=ffff88813663fae8
RIP=ffffffff81b4d909 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000180 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 00000030646e6f62
XMM02=00007f8faab84478 00007f8faab84450 XMM03=00007f8faab84488 00007f8faab84480
XMM04=00007f8fab6ed100 00007f8faab84440 XMM05=00007f8faab84458 00007f8faab844a0
XMM06=00007f8faab84498 00007f8faab84490 XMM07=00007f8faab84488 00007f8faab84480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f8faaa11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000075ef50
R8 =ffff888108a58237 R9 =1ffff1102114b046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48fe R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8faabb7bac CR3=000000002ae0a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=ffffffffffffff00 ffffffffffffff00
XMM04=0000000000000000 00000000000000ff XMM05=a2dc1b0576a1fe22 efebf58ff368f23d
XMM06=caa1065981fcccf6 95a56026214bfe92 XMM07=979486a0b4115aca 8a25d1c5a20dba29
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f2fbd211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
